eDirectory 8.8.8 Patch 10 HF1

June 2017

eDirectory 8.8.8 Patch 10 HF 1 supersedes eDirectory 8.8.8 Patch 10.

For the list of all issues resolved in eDirectory 8.8, including all patches, refer to TID 3426981, “History of Issues Resolved in eDirectory 8.8.x”.

For the list of software fixes and enhancements in the previous releases, see eDirectory 8.8.8 Patch 10 Release Notes.

To download this product, see the NetIQ Downloads page. For more information about eDirectory, see the eDirectory documentation.

For information about security services that are bundled with eDirectory and other components used with eDirectory, see Section 6.0, Additional Documentation.

1.0 What’s New

eDirectory 8.8.8 Patch 10 HF1 includes the following enhancements, and fixed issues:

1.1 Enhancements

This release includes the following software enhancements:

Support for Java 1.8.0_131

This version of eDirectory extends support for Java 1.8.0_131. To install the latest version of Java, perform the following steps:

  • Windows:

    1. Download and install Java 1.8.0_131 (64-bit) from http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133151.html.

    2. Copy the jre1.8.0_131 folder from the installation location. For e.g. C:\Program Files (x86_64)\Java).

    3. Navigate to the eDirectory installation folder (for e.g. C:\Novell\NDS\embox\) and paste the copied jre1.8.0_131 folder.

    4. Delete the existing jre folder and rename the copied jre1.8.0_131 folder to jre.

    5. Restart eDirectory.

  • Linux:

    In case of root installation of eDirectory, Java will be automatically updated as part of this Hot Fix installation.

    In case of non-root installation of eDirectory, perform the following steps to install Java:

    1. Download the tar file of 1.8.0_131 java-64 bit from http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133151.html.

    2. Untar the file using tar -zxvf <downloaded_file> command and copy the latest jre folder from the installation location.

    3. Goto to /opt/novell/eDirectory/lib32/nds-modules/embox/ location and replace the existing jre folder with the copied jre folder.

Secured Auditing with XDAS

This version of eDirectory updates XDAS auditing to use TLS 1.2 for communicating with the auditing server.

1.2 Fixed Issues

This release includes the following software fixes that resolve several previous issues:

Resolved Security Vulnerability

This release resolves CVE-2017-7429.

2.0 System Requirements

For information about prerequisites for installing eDirectory, see the NetIQ eDirectory 8.8 SP8 Installation Guide.

3.0 Installing or Upgrading

You can download this hot fix from the Downloads website. To upgrade to eDirectory 8.8.8 Patch 10 HF 1, perform the following steps:

  • Windows:

    1. Stop the eDirectory service.

    2. Copy the dlms to the installed eDirectory location.

    3. Upgrade Java to the latest version. For more information, see Support for Java 1.8.0_131.

    4. Microsoft Visual C++ 2010 Redistributable is a pre-requisite for applying eDirectory 8.8.8 P 10 HF 1. Ensure to install it from the unzipped build location.

    5. Start the eDirectory service.

  • Linux:

    In case of root installation of eDirectory, perform the following steps to apply this hot fix:

    1. Stop eDirectory service by using the ndsmanage stopall command.

    2. Apply this hot fix by running the rpm –Uvh <rpm name> command for all the rpms present in the extracted directory.

    3. Start eDirectory service by using the ndsmanage startall command.

      NOTE:In case of root installation of eDirectory, Java will be automatically updated as part of this hot fix installation.

    In case of non-root installation of eDirectory, perform the following steps to apply this hot fix:

    1. Stop eDirectory service by using the ndsmanage stopall command.

    2. Extract the nonroot.tar.gz in the eDirectory folder by using the following command:

      tar -zxvf nonroot.tar.gz

    3. Go to the eDirectory folder and copy the opt folder by using the following command:

      cp -r opt/* <eDirectory build extracted folder>/eDirectory/opt/

    4. Upgrade Java to the latest version. For more information, see Support for Java 1.8.0_131.

    5. Start eDirectory service by using the ndsmanage startall command.

4.0 Supported Upgrade Paths

To upgrade to eDirectory 8.8.8 P10 HF1, you need to be on eDirectory 8.8.8 Patch 10. For more information, see Novell Download Site.

5.0 Installing iManager Plug-Ins

  1. Download the iManager plug-in (pki.npm) from the Downloads website.

  2. Login to iManager.

  3. Go to Configure > Plug-in Installation > Available NetIQ Plug-in Modules.

  4. Click on Add.

  5. Browse and select the pki.npm from the unzip location.

  6. Click OK to install the plug-in.

  7. Restart Tomcat.

6.0 Additional Documentation

6.1 iManager

For iManager information, refer to the iManager online documentation.

6.2 NMAS

For NMAS information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

6.3 Password Management

For Password Management information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

6.4 Certificate Server

For Certificate Server information, refer to the eDirectory online documentation page. This documentation is available as a zip file at the end of this page.

6.5 Novell International Cryptographic Infrastructure (NICI)

For NICI information, refer to the NICI online documentation.

6.6 eDirectory Issues on Open Enterprise Server

For more information on eDirectory issues on Open Enterprise Server (OES), refer to the OES Readme.