NetIQ Directory and Resource Administrator 10.0.1 Release Notes

August 2020

NetIQ Directory and Resource Administrator 10.0.1 improves usability and resolves several previous issues.

Frequently these improvements are made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the NetIQ Directory and Resource Administrator forum on Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources. You can also share your ideas for improving the product in the Ideas Portal.

The documentation for this product is available in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the NetIQ Directory and Resource Administrator Documentation page.

To download this product, see the NetIQ Directory and Resource Administrator Product Upgrade website.

1.0 What’s New

The following items describe the new features and enhancements in DRA 10.0.1:

  • DRA now uses modern authentication to support Exchange Online activities.

    • You can install the Exchange Online PowerShell V2 module and enable WinRM for Basic authentication on the client-side to perform Exchange Online tasks.

    • DRA has new prerequisite checks to verify if the Exchange Online PowerShell V2 module is installed and WinRM Basic authentication is enabled on the client-side.

    • The Health Check Utility is enhanced with new checks for the Exchange Online PowerShell V2 module and WinRM Basic authentication.

  • DRA now enables you to specify a location, at installation, for DRA to store the log files.

  • Web Console enhancements enable you to do the following:

    • Add a customized notification for assistant administrators at login.

    • Export Search and Advanced Search results to a CSV file.

    • Export Members and Member Of property page results to a CSV file.

    • Create custom page handlers when configuring Web Client customizations.

    • Select script elements and strings from an Intellisense feature to complete custom handler scripting when customizing forms and properties in the Web Console.

  • The Temporary Group Assignments feature is now optional upon installation. You can include or exclude the feature as a sub-component of the Administration Server. Adding the component installs the NetIQ DRA Replication Service, which is required for temporary group assignments.

  • DRA PowerShell commands now include four new cmdlets for delegation:

    • Add-DRAAssistantAdminGroupMembers: Adds members to an Assistant Admin group.

    • Remove-DRAAssistantAdminGroupMembers: Removes members from an Assistant Admin group.

    • Add-DRAAssignments: Adds delegation assignments to Assistant Administrators.

    • Remove-DRAAssignments: Removes a delegation assignment from assistant administrators.

2.0 System Requirements

For detailed information on hardware requirements and supported operating systems and browsers, see the NetIQ DRA Installation Guide or see the NetIQ DRA Systems Requirement reference.

This service pack includes a full version of DRA. For detailed information on hardware requirements and supported operating systems and browsers, see the NetIQ DRA Administrator Guide.

3.0 Installing and Upgrading this Version

This service pack includes a full version of DRA. You can install this version in a clean environment or upgrade an existing installation of DRA 9.1 or newer. For detailed DRA Server version upgrade information, see Supported Upgrade Paths.

For detailed information about installing Directory and Resource Administrator components and modules, see the NetIQ DRA Installation Guide.

3.1 Supported Upgrade Paths

Use the table below to determine your applicable upgrade path by version. Note that patch versions are not listed. However, all patches for the versions shown are supported. For example, you can upgrade to DRA 10.0 from DRA 9.2.1 or any of its patches: 9.2.1.1, 9.2.1.2, and so forth.

DRA Server Base Version

DRA Server Updated Version

9.1, 9.1.1, 9.2, 9.2.1, or 10.0

10.0.1

9.1, 9.1.1, 9.2, or 9.2.1

10.0

9.1, 9.1.1, or 9.2

9.2.1

9.0, 9.0.1, 9.0.2, 9.0.3, 9.1, or 9.1.1

9.2

9.0, 9.0.1, 9.0.2, 9.0.3, or 9.1

9.1.1

9.0, 9.0.1, 9.0.2, or 9.0.3

9.1

9.0, 9.0.1, or 9.0.2

9.0.3

9.0 or 9.0.1

9.0.2

9.0

9.0.1

8.7

9.0

4.0 Addressed Customer Issues

This release includes the following stabilizing fixes:

  • Resolved an issue that prevented the Active Directory Collector from collecting all the Recycle Bin data. (170446)

  • Resolved an issue that prevented the Active Directory Collector from collecting data on the Active Directory attribute named ExtensionsAttibute2. (173017)

  • Resolved an issue in the Web Console for the Online Mailbox Forwarding Address update. (173018)

  • Resolved an issue where the full accounts cache refresh runs in a loop during upgrade from DRA 9.2.1 to DRA 9.2.1.7. (173063)

  • Resolved an issue in the Web Console where the Form Properties handlers were not saved when the Execute custom handlers option was disabled in Form Properties. (176148)

  • Resolved an issue in the Web Console that prevented DRA from displaying current values of the Form Properties icon. (186051)

  • Resolved an issue where the seeAlso attribute was truncated when it contained a single distinguished name entry. (189328)

  • Resolved an issue that prevented the creation of a database for DRA Reporting when TLS 1.2 was the only protocol enabled in Windows. (189329)

  • Resolved an issue in the Web Console where after upgrade from DRA 9.x to DRA 10, custom field handlers were executed before the Form Load handlers. (238166)

  • Resolved an issue where the draApi.constants.ObjectDN API returned an empty string instead of the distinguished name of the current object. (238225)

  • Resolved an issue in the Web Console where the thumbnail image was not displayed for an Active Directory user with an updated thumbnailPhoto attribute. (258013)

  • Resolved an issue that caused a constraint error when user objects with Office 365 licenses were sent to the DRA Recycle Bin. (173055)

  • Resolved an issue where the Web Console login failed due to an SSPI error when the NTLM incoming and outgoing traffic was disabled. (174021)

  • Resolved an issue where the Pre-Task and Post-Task triggers failed when an assistant administrator performed an AzureUserGetInfo operation. (174049)

  • Resolved an issue that prevented the administrator from editing Mailbox Rights when the Exchange server was in the child domain. (177130)

  • Resolved an issue that caused a 404 error while refreshing a Workflow Request form. (176149)

  • Resolved an issue that produced an authentication error while trying to add an Office 365 tenant with Basic Authentication disabled. (176263)

  • Resolved an issue in the Delegation and Configuration Console that prevented the generation of change reports when NTLM is disabled. (177253)

  • Resolved an issue in the Web Console where the Not Set button is ON when the account expiration date is not set. (186766)

  • Resolved an issue in the Delegation and Configuration Console when trying to add users to Mailbox rights with only the User filter applied, the Object Selector displayed both users and groups. (228495)

  • Resolved an issue that caused the License update schedule for the managed tenant to automatically change from “Never” to “Daily”. (173056)

  • Resolved an issue where the ActiveView search results returns duplicate nested groups when both the parent and child group match the rule for the ActiveView. (174050)

  • Resolved an issue in the Web Console where an update made to the User Logon Name (pre-Windows 2000) in the Account tab automatically updated the User Logon Name with the same value, and vice versa. (204920)

5.0 Known Issues

We strive to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

5.1 Unable to manage public folders when NTLM is denied

The DRA administrator is unable to manage public folders from the Delegation and Configuration Console when NTLM authentication is denied.

No workaround.

5.2 Unable to pass the attribute values using Page or Form handlers

If a page or form handler modifies the value of a field on a page that a user has not yet selected, and the user then selects that page, the updated value will not be submitted to the server.

Workaround: The user should not select the other page or avoid having page load handlers modify field values on different pages.

5.3 Custom field handlers configured with a time delay are not executing as expected when updated by a Page or Form Load handler

Custom handlers configured for property fields can be set to execute on a time delay. However, this setting should not apply when the field's value is updated by another custom handler using the draApi.fieldValues interface.

No workaround. This issue will be addressed in a future release.

5.4 Unable to read or update an attribute value in a custom handler if the same attribute is present on multiple pages

Adding the same attribute to multiple pages in a custom form may cause issues with reading or updating the attributes value in a custom handler.

No workaround. As a best practice we advise you to not have multiple fields for the same attribute in a custom form.

5.5 Unable to access direct links to custom pages after upgrade

After upgrade from DRA 9.2.1.x to DRA 10, you get a 404 error every time you try to access direct links to custom pages.

Workaround: Run Repair to add the URL Rewrite rule in IIS. To do this:

  1. Go to ../wwwroot/DRAClient folder.

  2. Make a back up of the web.config file and delete it from the ../wwwroot/DRAClient folder.

  3. Navigate to Control Panel > Programs > Programs and Features > NetIQ Directory and Resource Administrator > Change. The NetIQ Directory and Resource Administrator Setup opens.

  4. Select Repair and proceed with the setup.

  5. When the repair completes, check if a new web.config file is created. If this file is not created, contact Technical Support.

  6. If you configured the DRAClient in IIS before upgrade, open the IIS Manger and configure DRAClient in IIS again.

5.6 NetIQ DRA Rest Service is unable to create a DRARestSever container

Post DRA installation, the NetIQ DRA Rest Service is unable to create the DRARESTServer container and its Service Connection Point (SCP) in the Active Directory.

Workaround: To fix this issue:

  1. Using ADSI Edit, create a DRARestSever container under the System container.

  2. Restart the NetIQ DRA Rest Service.

6.0 Contact Information

We want to hear your comments and suggestions about this book and the other documentation included with this product. You can use the comment on this topic link at the bottom of each page of the online documentation, or send an email to Documentation-Feedback@microfocus.com.

For specific product issues, contact Micro Focus Customer Care at https://www.microfocus.com/support-and-services/.