Expected Behavior
Support latest improvements and better defaults for security protocols such as removing SHA1 prefering TLS1.3. Also for embedded you no longer need to enable the operational attriubutes.
https://nawilson.com/2021/05/28/unboundid-ldap-sdk-for-java-6-0-0/
Current Behavior
Works but falling a number of major versions behind which can be an audit concern.
Context
The initial request was related to bug (not unboundid but in the autoconfig) in embedded ldap springboot https://github.com/spring-projects/spring-boot/issues/23030
Comment From: jzheaux
Before marking this at 6.x, let's see there is a way to have 5.6.x support both UnboundId 4 and the latest, similar to what was done with #9095. This way, 5.6.x can have the latest UnboundId support while allowing folks to stay on UnboundId 4.x if needed.
Comment From: rwinch
For this issue we should also ensure old unboundid support is removed in 6.0.x
Comment From: marcusdacoregio
Unboundid 6.x already works with Spring Security 5.x, users can opt into it if they want. Spring Boot also uses Unboundid 6.x in 2.7.