UnboundID LDAP SDK for Java is a Java-based API for interacting with LDAP directory servers and performing other LDAP-related processing. The project has just released version 5.1.2, which includes the following changes:
- Added a new parallel-update tool
- Added automatic retry support to ldapmodify and ldapdelete
- Added programmatic and command-line access to a registry of LDAP-related object identifiers
- Added a new ldap-result-code tool
- Updated the in-memory directory server to support mutual TLS authentication
- Improved the way that self-signed certificates are generated for the in-memory-directory-server and ldap-debugger tools
- Added better support for validating arguments that represent host names
- Improved support for implementing client-side support for custom SASL mechanisms
- Added automatic trust for TLS certificates requested via a loopback IP address
- Improved the comments that the LDIF writer generates for human-readable representations of base64-encoded values
- Added a new manage-certificates retrieve-server-certificate command
- Fixed a timeout issue in the manage-certificates trust-server-certificate command
- Added a new dns-only output format for ldapsearch
- Added the ability to include arbitrary key-value pairs in OAUTHBEARER SASL bind requests
- Fixed a command-line tool framework issue that prevented it from explicitly closing output files
- Added a method for determining whether an IP address is in a private or reserved range
- Improved support for changelog entries for delete operations to provide an alternative way to get deleted entry attributes
- Updated support for passphrase encryption to make it possible to explicitly specify the type of cipher that should be used
- Added an X.509 trust manager that will never trust any certificate chain (primarliy for testing purposes)
- Updated the documentation to include the latest versions of draft-melnikov-scram-sha-512, draft-melnikov-scram-sha3-512, and draft-ietf-kitten-password-storage drafts in the set of LDAP-related specifications
- Added client-side support for the new ds-pwp-modifiable-state-json operational attribute in the Ping Identity Directory Server
- Added client-side support for the new “remove attribute type” administrative task in the Ping Identity Directory Server
- Added client-side support for the new AES256 password storage scheme in the Ping Identity Directory Server
- Added client-side filter support for the jsonObjectFilterExtensibleMatch matching rule
- Updated the uniqueness request control to make it possible to indicate that the server should generate a temporary conflict prevention details entry before pre-commit processing, and that it should generate an administrative alert when post-commit conflicts are detected
- Deprecated support for interactive transactions in the Ping Identity Directory Server