Migrating to 8.3
editMigrating to 8.3
editThis section discusses the changes that you need to be aware of when migrating your application to Elasticsearch 8.3.
See also What’s new in 8.7 and Release notes.
Breaking changes
editThere are no breaking changes in Elasticsearch 8.3.
Deprecations
editThe following functionality has been deprecated in Elasticsearch 8.3 and will be removed in a future version. While this won’t have an immediate impact on your applications, we strongly encourage you take the described steps to update your code after upgrading to 8.3.
To find out if you are using any deprecated functionality, enable deprecation logging.
Cluster and node setting deprecations
editConfiguring a bind DN in an LDAP or Active Directory (AD) realm without a corresponding bind password is deprecated
Details
For LDAP or AD authentication realms, setting a bind DN (via the
xpack.security.authc.realms.ldap.*.bind_dn realm setting) without a
bind password is a misconfiguration that may prevent successful
authentication to the node. In the next major release, nodes will fail
to start if a bind DN is specified without a password.
Impact
If you have a bind DN configured for an LDAP or AD authentication
realm, set a bind password for LDAP
or Active Directory.
Configuring a bind DN without a password generates a warning in the
deprecation logs.
Note: This deprecation only applies if your current LDAP or AD configuration specifies a bind DN without a password. This scenario is unlikely, but might impact a small subset of users.