NetIQ eDirectory 9.0 SP4 Release Notes

September 2017

NetIQ eDirectory 9.0 SP4 resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the eDirectory Community Support Forums, our community Web site that also includes product notifications, blogs, and product user groups.

For a full list of all issues resolved in NetIQ eDirectory 9.x, including all patches and service packs, refer to TID 7016794, “History of Issues Resolved in NetIQ eDirectory 9.x”.

For more information about this release and for the latest release notes, see the Documentation Web site. To download this product, see the Product Upgrade Web site.

1.0 What’s New?

eDirectory 9.0 SP4 provides the following enhancements, and fixes in this release:

1.1 Operating System Support

In addition to the platforms introduced in previous releases of eDirectory, this release adds support for the following operating system:

  • Windows 2016

  • Red Hat Enterprise Linux (RHEL) 7.4

1.2 Enhancements

This release includes the following software enhancements:

Support for Java 1.8.0_131

This version of eDirectory extends support for Java 1.8.0_131. To install the latest version of Java, perform the following steps:

  • Windows:

    1. Download and install Java 1.8.0_131 (64-bit) from http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133151.html.

    2. Copy the jre1.8.0_131 folder from the installation location. For e.g. C:\Program Files (x86)\Java).

    3. Navigate to the eDirectory installation folder (for e.g. C:\Novell\NDS\embox\) and paste the copied jre1.8.0_131 folder.

    4. Delete the existing jre folder and rename the copied jre1.8.0_131 folder to jre.

  • Linux:

    In case of root installation of eDirectory, Java will be automatically updated as part of this patch installation.

    In case of non-root installation of eDirectory, perform the following steps to install Java:

    1. Download the tar file of 1.8.0_131 java-64 bit from http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133151.html.

    2. Untar the file using tar -zxvf <downloaded_file> command and copy the latest jre folder from the installation location.

    3. Goto to /opt/novell/eDirectory/lib64/nds-modules/embox/ location and replace the existing jre folder with the copied jre folder.

1.3 Fixed Issues

This release includes the following software fixes that resolve several previous issues:

Resolved Security Vulnerabilities

This release resolves the following security vulnerabilities:

  • CVE-2017-9285

  • CVE-2017-9277

eDirectory Does Not Filter Those Events Which Are Not Required For Your Business

Issue: eDirectory does not allow you to filter those XDAS events which are not suitable for your business requirements.

Fix: With this version of eDirectory, you will see a new filter option called Exclusion Filter in the Basic Events Configuration section, which helps you to select those object classes and attributes for which you do not want to get an event notification. For more information, see Filtering eDirectory Events With Exclusion Filter in the NetIQ eDirectory Administration Guide.

eDirectory Is Unable to Use Java From User’s Computer

Issue: eDirectory is unable to use the Java that is installed on your computer and bundles the supported version of Java with each version

Fix: This release enhances the eDirectory Management Toolbox to use Java installed by customers on their server. Java will no longer be bundled with eDirectory 9.0 SP4 and later. You can install Oracle Java 1.8 or above and export the required environment variable(s) to run the command line client. For more information, see Using the Command Line Client in the NetIQ eDirectory Administration Guide.

Synchronizing NMAS Method Across Servers Fails

Issue: NMAS fails to synchronize different methods across all the servers.

Fix: This release updates NMAS to synchronize various methods across all the servers. NMAS is also able to download methods across all the servers after refreshing the NMAS login policy. (Bug 946883)

High CPU Utilization Is Observed While Searching For Group Members

Issue: High CPU utilization is observed while searching for dynamic or nested groups members.

Fix: Two new indexes called groupmember and memberQuery have been added in this version of eDirectory. (Bug 971733)

Multiple eDirectory Operations Fail Due to Duplicate Entries in nds.conf File

Issue: Various eDirectory operations such as startup, upgrades etc. fail due to duplicate entries found in the nds.conf file.

Fix: This release updates eDirectory to avoid creating duplicate entries. If you have duplicate entries created from the previous version of eDirectory, you must manually clean them. (Bug 1033046)

eDirectory Crashes While Performing Bulk Add Operation

Issue: eDirectory crashes when a bulk add operation is performed through LDAP, where the container in which the object is being added does not exist.

Fix: This release updates eDirectory to fix this issue. (Bug 1033639)

Moving an User Object Removes All Auxiliary Attributes

Issue: All auxiliary attributes are removed after moving an user object.

Fix: This release updates eDirectory to restore all auxiliary attributes after moving user objects. (Bug 1045532)

iMonitor Displays Incorrect Information in French

Issue: The Agent Configuration screen of iMonitor displays incorrect information when the browser language is set to French.

Fix: This release updates eDirectory to resolve this issue. (Bug 1039288)

set ndstrace=!M Command Sets Cache Size to 0 bytes in _ndsdb.ini File

Issue: set ndstrace=!M command is setting the cache size to 0 bytes in the _ndsdb.ini file.

Fix: With this release, set ndstrace=!M command displays the maximum cache allocated in the _ndsdb.ini file. (Bug 1044504)

Unable to Install eDirectory on Linux

Issue: User is unable to install eDirectory on Linux when Zenworks Agent and Groupwise Clients are installed on the same machine.

Fix: This release updates eDirectory to resolve this issue. (Bug 1038018)

eDirectory Is Unable to Authorize Users to NMAS Login Sequence

Issue: When a user is authorized to use all NMAS login sequences except one, authorizing the user to that particular login sequence does not take effect.

Fix: This release updates eDirectory to resolve this issue. (Bug 1000038)

2.0 System Requirements

For information about prerequisites, hardware requirements, and supported operating systems, see the NetIQ eDirectory Installation Guide.

3.0 Installing or Upgrading

To upgrade to eDirectory 9.0 SP4, you need to be on eDirectory 8.8.8.x or 9.0. For more information on upgrading eDirectory, see the NetIQ eDirectory Installation Guide.

NOTE:

  • This version of eDirectory supports non-root installation on RHEL 7.x.

  • With this release, new server configuration is not allowed on B-tree file system (BTRFS). If you are using BTRFS currently, you can still upgrade eDirectory to 9.0 SP4, but you must move the DIB files to a non-BTRFS file system.

3.1 Supported Upgrade Paths

To upgrade to eDirectory 9.0 SP4, you need to be on eDirectory 8.8.8.x or above. For more information on upgrading eDirectory, see the NetIQ eDirectory Installation Guide.

4.0 Additional Documentation

4.1 iManager

For iManager information, refer to the iManager online documentation.

4.2 Novell International Cryptographic Infrastructure (NICI)

The NICI Administration Guide is included in the eDirectory documentation page.

4.3 eDirectory Issues on Open Enterprise Server (UNIX only)

For more information on eDirectory issues on Open Enterprise Server (OES), see OES Readme.

5.0 Legal Notices

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2017 NetIQ Corporation, a Micro Focus company. All Rights Reserved.