|
| 1 | +[[migrating-8.4]] |
| 2 | +== Migrating to 8.4 |
| 3 | +++++ |
| 4 | +<titleabbrev>8.4</titleabbrev> |
| 5 | +++++ |
| 6 | + |
| 7 | +This section discusses the changes that you need to be aware of when migrating |
| 8 | +your application to {es} 8.4. |
| 9 | + |
| 10 | +See also <<release-highlights>> and <<es-release-notes>>. |
| 11 | + |
| 12 | +coming::[8.4.0] |
| 13 | + |
| 14 | + |
| 15 | +[discrete] |
| 16 | +[[breaking-changes-8.4]] |
| 17 | +=== Breaking changes |
| 18 | + |
| 19 | +// tag::notable-breaking-changes[] |
| 20 | +There are no breaking changes in {es} 8.4. |
| 21 | +// end::notable-breaking-changes[] |
| 22 | + |
| 23 | + |
| 24 | +[discrete] |
| 25 | +[[deprecated-8.4]] |
| 26 | +=== Deprecations |
| 27 | + |
| 28 | +The following functionality has been deprecated in {es} 8.4 |
| 29 | +and will be removed in a future version. |
| 30 | +While this won't have an immediate impact on your applications, |
| 31 | +we strongly encourage you take the described steps to update your code |
| 32 | +after upgrading to 8.4. |
| 33 | + |
| 34 | +To find out if you are using any deprecated functionality, |
| 35 | +enable <<deprecation-logging, deprecation logging>>. |
| 36 | + |
| 37 | + |
| 38 | +[discrete] |
| 39 | +[[deprecations_84_cluster_and_node_setting]] |
| 40 | +==== Cluster and node setting deprecations |
| 41 | + |
| 42 | +[[configuring_bind_dn_in_an_ldap_or_active_directory_ad_realm_without_corresponding_bind_password_deprecated]] |
| 43 | +.Configuring a bind DN in an LDAP or Active Directory (AD) realm without a corresponding bind password is deprecated |
| 44 | +[%collapsible] |
| 45 | +==== |
| 46 | +*Details* + |
| 47 | +For LDAP or AD authentication realms, setting a bind DN (via the |
| 48 | +`xpack.security.authc.realms.ldap.*.bind_dn` realm setting) without a |
| 49 | +bind password is a misconfiguration that may prevent successful |
| 50 | +authentication to the node. In the next major release, nodes will fail |
| 51 | +to start if a bind DN is specified without a password. |
| 52 | +
|
| 53 | +*Impact* + |
| 54 | +If you have a bind DN configured for an LDAP or AD authentication |
| 55 | +realm, set a bind password for {ref}/ldap-realm.html#ldap-realm-configuration[LDAP] |
| 56 | +or {ref}/active-directory-realm.html#ad-realm-configuration[Active Directory]. |
| 57 | +Configuring a bind DN without a password generates a warning in the |
| 58 | +deprecation logs. |
| 59 | +
|
| 60 | +*Note:* This deprecation only applies if your current LDAP or AD |
| 61 | +configuration specifies a bind DN without a password. This scenario is |
| 62 | +unlikely, but might impact a small subset of users. |
| 63 | +==== |
| 64 | + |
0 commit comments