eDirectory 8.8.8 Patch 10

March 2017

eDirectory 8.8.8 Patch 10 supersedes eDirectory 8.8.8 Patch 9.

For the list of all issues resolved in eDirectory 8.8, including all patches, refer to TID 3426981, “History of Issues Resolved in eDirectory 8.8.x”.

For the list of software fixes and enhancements in the previous releases, see eDirectory 8.8.8 Patch 9 Release Notes.

To download this product, see the NetIQ Downloads page. For more information about eDirectory, see the eDirectory documentation.

For information about security services that are bundled with eDirectory and other components used with eDirectory, see Section 7.0, Additional Documentation.

1.0 What’s New

eDirectory 8.8.8 Patch 10 includes the following platform updates, enhancements, and fixed issues:

1.1 Fixed Issues

This release includes the following software fixes that resolve several previous issues:

eDirectory Crashes When (cn=) Is Specified As a Search Filter

Issue: eDirectory crashes when (cn=) is specified as a search filter for a dynamic group member query.

Fix: eDirectory does not crash when an invalid search filter is specified. (Bug 1026201)

High Memory Buildup Is Observed After Upgrading to eDirectory 9.0 SP2

Issue: High memory buildup is observed after upgrading eDirectory to the latest version (9.0 SP2).

Fix: This release updates eDirectory to avoid memory buildup. (Bug 1025003)

nmasrefresh Tool Displays an Error Message

Issue: nmasrefresh tool fails to refresh the login policy and displays an error -1644. This happens because of the ongoing active login sessions and subsequent requests.

Fix: This release updates the nmasrefresh tool to wait for the active login sessions to complete before attempting to refresh the login policy. (Bug 1012300)

eDirectory Crashes in DSTraceString Function

Issue: eDirectory crashes in DSTraceString function due to buffer overflow.

Fix: This release updates eDirectory to avoid the buffer overflow. (Bug 994830)

Synchronization Between eDirectory Server Fails With Error Code -608

Issue: This issue occurs because the object class values get a new time stamp by the ndsbackup utility which also handles the auxiliary classes by creating an aux class compatibility values.

Fix: This release updates the ndsbackup utility to resolve this issue. (Bug 856048)

Network Address Attribute Clears User Accounts on OES

Issue: This issue is observed on Open Enterprise Server.

Fix: This release updates eDirectory to set the n4u.server.mask-port-number variable to 0 in the nds.conf file when a new tree or server is added on OES. (Bug 517585)

ldapSearch Utility Fails to Return Results

Issue: ldapSearch utility fails to return results if there is a space or underscore specified as the 33rd and 65th character of an substring index value. (Bug 997093)

2.0 System Requirements

For information about prerequisites for installing eDirectory, see the NetIQ eDirectory 8.8 SP8 Installation Guide.

NOTE:This version of eDirectory supports Identity Manager 4.5.x and 4.6. For more information, see NetIQ Identity Manager 4.6 documentation website.

3.0 Installing or Upgrading

To upgrade to eDirectory 8.8.8 Patch 10, go to the NetIQ Downloads page and follow the link to download the software.

NOTE:eDirectory 888 Patch 10 contains an older version of Platform Agent (PA) build which is vulnerable to NDSD crash. Click here to download the latest PA build that resolves this issue.

4.0 Supported Upgrade Paths

The installation program provides the ability to upgrade from eDirectory 8.8 SP8 onwards or perform a new installation.

Ensure that you have any one of the following eDirectory versions, before upgrading to eDirectory 8.8.8 Patch 10:

  • 8.8.8

  • 8.8.8 Patch 1

  • 8.8.8 Patch 2

  • 8.8.8 Patch 3

  • 8.8.8 Patch 4

  • 8.8.8 Patch 5

  • 8.8.8 Patch 6

  • 8.8.8 Patch 7

  • 8.8.8 Patch 8

  • 8.8.8 Patch 9

For more information, see Installing or Upgrading eDirectory in the NetIQ eDirectory 8.8 SP8 Installation Guide.

NOTE:If you have eDirectory 8.5.x or 8.6.x, you must first upgrade to eDirectory 8.7.x, then upgrade to eDirectory 8.8 SP8 and later.

5.0 Installing iManager Plug-Ins

  1. Download the iManager plug-in (eDir_88_iMan27_Plugins.npm) from the Downloads website.

  2. Install the NPM. For installation instructions, see the NetIQ iManager 2.7.7 Installation Guide.

6.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

For the list of the known issues in eDirectory 9.0, refer to the Known Issues section in the respective release notes.

6.1 Multiple Instances of eDirectory Cannot Be Configured on SLES12 or Later Platforms

Issue: While upgrading to SLES 12, multiple instances of eDirectory cannot be configured if you have the eDirectory configuration files in the same directory.

Workaround: You must move the configuration files to a different directory before upgrading to SLES 12.

6.2 eDirectory Fails To Enforce Case Sensitivity While Logging Into Filtered Replica

Issue: eDirectory fails to enforce case sensitivity while logging into a server that has a filtered replica of a user containing CN, Surname, Lastname and Description attributes.

Workaround: There is no workaround at this time.

7.0 Additional Documentation

7.1 iManager

For iManager information, refer to the iManager online documentation.

7.2 NMAS

For NMAS information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

7.3 Password Management

For Password Management information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

7.4 Certificate Server

For Certificate Server information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

7.5 Novell International Cryptographic Infrastructure (NICI)

For NICI information, refer to the NICI online documentation.

7.6 eDirectory Issues on Open Enterprise Server

For more information on eDirectory issues on Open Enterprise Server (OES), refer to the OES Readme.