Issues fixed in MarkLogic Server 10.0-1

Admin UI: External Security Config test button

External Security Config test button for Default LDAP User

preserve spaces within suggestions

The REST API uses the Search API to provide suggestions. Previously, the Search API quoted a suggested value containing a space but normalized such spaces, replacing multiple contiguous spaces with a single space and thus failing to match the exact value in a string range index. Now the Search API preserves spaces in a suggestion value without changes.

Task Server Display errors

The Task Server Display chart can be broken for some externally authenticated LDAP users

MarkLogic server can hang during ingestion of a geospatial point index

MarkLogic server hangs during ingestion of a large invalid longitude in a geospatial point index

Cluster failure after removing host from cluster

Unusable cluster after removing a "dead" host from the cluster when Security/Schemas replica forests are still connected

Configuration Manager - Showing invalid difference count between current and imported configurations

In some cases, when comparing an imported package with an existing one using configuration manager it shows the total difference as 1 but when we expand it we can't see any difference in the details view. This is attributed to a miscalculation in the diff count.

A blank certificate downloaded from UI Certificate template

A blank certificate could be downloaded from UI Certificate template page when a certificate template is generated by pki:insert-template()

OpenLDAPand SASL libraries upgraded

OpenLDAP upgraded to 2.4.46 and SASL upgraded to 2.1.27

MLCP TLS protocol (TLSv1.2)

MLCP now uses TLS as default input ssl protocol and SSLv3 as default output ssl protocol

Documentation unclear on option merge for /POST/v1/search

Options are merged only if both dynamic options and persistent named options are in used

Support multiple data disk on Azure

We only support 1 data disk on Azure now. This change allows user to specify multiple data disks to be used by MarkLogic on Azure.

The REST Management API logs endpoint ignores the host parameter

Irrespective of the host specified, the logs endpoint always returns logs from the current host.

JSON objects with colon in key name not redacted

When there are JSON object key names like "foo:bar", the child nodes below this level are not redacted

Entity services model with "iri" datatype generates invalid TDE template

If an entity services model includes a property with the datatype "iri", the TDE generated from it may be invalid.

Error in handling zip files containing certificates

If a zip file contained anything that wasn't a certificate the upload will fail.

MarkLogic support for ECDH key exchange

Add ECDCH support to MarkLogic as a supported cipher for TLS/SSL

SoftHSM Upgraded

SoftHSM library used for internal encryption at rest feature upgraded to 2.5.0

Default instance type in CloudFormation upgraded

Update the default instance type in CloudFormation template to r5.4xlarge

SSL client CA certificates removed from external security

During upgrade to 10.0, the CAs defined by External Securities will be merged into their appropriate App Server’s CA list. This consolidates the functionality of where an App Server admin defines CAs to accept as the signer of client certificates.

Temporal updates combined with node updates may create duplicate documents

Performing a temporal update and a non-temporal node update in the same statement may create duplicate documents.

EBS volume names created bu mlcmd

EBS volumes created by the mlcmd will be assigned a name. The first EBS volume in an AZ will get a name, however for any subsequent volume in an AZ are missing volume named.

Segmentation fault in entity extraction

When the matches from a call to cts:entity-extract include matches with the same starting and ending location as well as the same keyword, a segmentation fault may arise.

Errors after converting from External to Internal KMS

After changing from External KMS to internal, the external KMS is still needed to decrypt the journals.

Support dump shows 401 unauthorized for multiple hosts in a cluster

When a cluster scoped support dump is created for a multi-host cluster, the 401 Unauthorized html blocks will appear for every additional host in the cluster

Intermittent JavaScript error

Repeated calls through JavaScript JSearch library fail intermittently

xdmp:plan doesn't show query annotation for xdmp:directory query

When xdmp:plan() is called for evaluating xdmp:directory query, the query plan only shows the query key and doesn't show the qry:annotation element

The REST Management API logs endpoint ignores the host parameter

Irrespective of the host specified, the logs endpoint only lists the log files on the current host.

Upgrade Javascript v8 engine

The Javascript engine has been upgraded to v8 6-7.2.

Azure regions with 2 fault domains

Azure: Support regions with 2 fault domains

Scheduled Incremental Backups made using the Admin GUI include the timezone offset whereas the XQuery API does not

Scheduled backups - when created using the Admin GUI - are storing the timezone offset, this is creating problems when a time shift (e.g. Daylight Savings) takes place because the backups will suddenly run at a different time (based on the difference due to the timezone offset).

Query console displays incorrect line number in Javascript error stack trace

Query console displays incorrect line numbers in the error stack trace for Javascript queries in certain cases

Cannot import certs signed outside of ML through admin gui

User cannot import certificates signed outside of ML through admin gui.

Entity services generates range index specifications with collations for non-string types

When generating database settings from a model, Entity Services includes a collation property, even for non-string datatypes.

Monitoring history refresh button removes the time span/Period selection

Observed Behavior: When timespan/period is refreshed in monitoring history, selection defaults to Raw irrespective of time span selection before refresh. Expected Behavior: Time span selection should not default to Raw when monitoring history is refreshed and it should preserve time span selection.

Cluster Coupling in the Admin GUI may fail

In the Admin UI, Cluster configuration makes use of HTTP GET requests to connect the master and "foreign" clusters; this can lead to the generation of long URLs. Some browsers have restrictions on the length of a URL in a GET request, causing the process to fail.

Add g3 instance types to templates

g3 instance types added to templates

grouping or negation operator tolerated after constraint

Previously, the Search API threw a data type error (causing the REST API to throw a 500 error) if the query text for a suggestion request provided the grouping or negation operator immediately after a constraint. Now, the Search API ignores the operator during suggestion in the same way that the Search API ignores invalid query text during search.

POST to /manage/v2/databases/Triggers/triggers throws XDMP-ARGTYPE

A POST to /manage/v2/databases/[id-or-name]/triggers with property-content throws XDMP-ARGTYPE.

Kerberos GSS-API error message lacks detail

The Kerberos interface issues an error message that does not provide enough detail to provide customer guidance:

host-status doesn't report keystore status.

xdmp:host-status will report the status of the keystore.

Add support for m5ad and r5ad instances.

Add support for m5ad and r5ad instances.

XDMP-MEMORY: Memory exhausted during merge

During a merge operation, forest gets XDMP-MEMORY: Memory exhausted and goes offline

Kerberos library upgrade

Kerberos library upgraded to 1.17

Default permissions and privileges on convenient REST API roles

The implementation of the REST API amps to internal roles when necessary to gain additional privileges to execute an operation. To provide for more control over security, the default permissions have moved from the internal roles to the public convenience roles. As a result, any documents written by a user with the rest-writer convenience role continue to be writable by that user and readable by a user with the rest-reader convenience role. However, documents written by users with other roles with the rest-writer privilege will no longer be readable by users with the convenience rest-reader role. This limitation improves control over security.

Complex fields with range indexes and tokenizer overrides segmentation fault

Given a field defined with a range index and tokenizer overrides, inserting, reindexing, refragmenting, replicating, or rebalancing a document has an instance of the field that involves multiple child elements may cause a segmentation fault in the tokenizer.