NetIQ eDirectory 9.2 Release Notes

October 2019

NetIQ eDirectory 9.2 includes new features and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the eDirectory Community Support Forums, our community Web site that also includes product notifications, blogs, and product user groups.

For a full list of all issues resolved in NetIQ eDirectory 9.x, including all patches and service packs, refer to TID 7016794, “History of Issues Resolved in NetIQ eDirectory 9.x”.

For more information about this release and for the latest release notes, see the Documentation Web site. To download this product, see the Product Upgrade Web site.

1.0 What’s New?

eDirectory 9.2 provides the following key features, enhancements, and fixes in this release:

1.1 New Features

This release introduces the following new features:

Cloud Support for eDirectory

This version of eDirectory can be deployed on Amazon Web Services and Microsoft Azure. For more information on how to deploy and configure eDirectory on cloud, see the eDirectory Installation Guide.

Support for eDirectory Containerization

We are shipping a preview version of Docker Container-based deployment with eDirectory 9.2 for customers to use and provide feedback. Customers wishing to deploy in production will be supported only with a Professional Services engagement. For more information, see Deploying eDirectory Using Docker Container in the eDirectory Installation Guide.

Support for REST Services with eDirectory

With this release, eDirectory supports access to various features using RESTful interfaces. For more information, see REST Services in the eDirectory Administration Guide.

IMPORTANT:REST services delivered as containers will be available shortly.

1.2 Enhancements

This release introduces the following enhancement:

Support for Non-Reversible Password Storage

Universal Passwords are stored in eDirectory after encryption and these passwords can be retrieved by eDirectory whenever required. As an alternative to Universal Password, eDirectory 9.2 supports storage of hashed passwords using Password Based Key Derivation Function 2 (PBKDF2) hashing algorithm (RFC 2898). For more information, see Understanding Non-Reversible Password Storage in the eDirectory Administration Guide.

1.3 Operating System Support

In addition to the platforms supported in previous releases of eDirectory, this release adds support for the following operating system:

  • SUSE Linux Enterprise Server (SLES) 15 SP1

  • Red Hat Enterprise Linux (RHEL) 8

  • Windows 2019

1.4 Updates for Dependent Components

This release adds support for the following dependent components:

  • NICI 3.2

1.5 Fixed Issues

eDirectory 9.2 includes the following software fixes that resolve several previous issues:

Resolved Security Vulnerabilities

This version of eDirectory resolves security vulnerability CVE-2019-17083.

eDirectory Crashes While Performing the LDAP Search Operation

Issue: eDirectory crashes while performing LDAP search operation with the nested and dynamic groups expanded. (1111235)

LDAP Search Returns Partial Results

Issue: LDAP search returns partial results when VLV or Paged Search Control is used. (1141353)

SecretStore Is Unable to Encrypt User Secrets When 256-Bit Tree Key Is Configured

Issue: SecretStore is unable to encrypt user secrets when 256-Bit tree key is configured. (1140622)

eDirectory Memory Leak Is Observed When Driver Health Job Is Running on Windows

Issue: eDirectory memory leak is observed when Driver Health Job is running for Identity Manager Drivers. (1104248)

eDirectory Becomes Unresponsive

Issue: eDirectory becomes unresponsive when multiple clients try to connect to the LDAP server over TLS. (1140553)

Performing a Rename Object Operation Using LDAP Generates a Move Object Event in CEF

Issue: If you perform a Rename Object operation in LDAP, CEF generates a Move Object event. This occurs when you specify newsuperior in the ldif. (1114432)

1.6 Supported Upgrade Paths

To upgrade to eDirectory 9.2, you need to be on eDirectory 8.8.8.x or above. For more information on upgrading eDirectory, see the NetIQ eDirectory Installation Guide.

2.0 What’s Deprecated?

The following feature is deprecated in eDirectory 9.2 release:

  • Auditing with XDAS: We have deprecated the support for auditing with XDAS in eDirectory 9.2. You must use the supported CEF module for auditing services instead of XDAS in future. There will be no support provided for issues related to the XDAS auditing with eDirectory 9.2 and above.

3.0 What will be Deprecated?

The following feature will be deprecated in eDirectory 9.3 release:

  • Novell Audit Platform Agent: We will be deprecating support for Novell Audit Platform Agent in eDirectory 9.3.

4.0 System Requirements

For information about prerequisites, hardware requirements, and supported operating systems, see the NetIQ eDirectory Installation Guide.

NOTE:

  • This version of eDirectory is supported by Identity Manager 4.6 SP4, 4.7 SP3, 4.8 and above. For more information, see NetIQ Identity Manager 4.8 Release Notes.

  • The support for eDirectory has been stopped on the below platforms with this release:

    • SUSE Linux Enterprise Server (SLES) 11 and later service packs

    • Red Hat Enterprise Linux (RHEL) 6 and later service packs

    • Windows Server 2012

5.0 Installing or Upgrading

To upgrade to eDirectory 9.2, you need to be on eDirectory 8.8.8.x or above. For more information on upgrading eDirectory, see the NetIQ eDirectory Installation Guide.

Table 1 Files Available for eDirectory 9.2

Filename

Description

eDirectory_920_Linux_x86_64.tar.gz

Contains the eDirectory tar file for Linux platforms.

eDirectory_920_Windows_x86_64.exe

Contains the eDirectory executable file for Windows platforms.

6.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

For the list of the known issues in eDirectory 9.1, refer to the Known Issues section in the respective release notes.

6.1 Downloading EBACA Certificate Fails When Non-Reversible Password Is Enabled

Issue: ebaclientinit fails to download the EBACA certificate if user is configured with non-reversible password (PBKDF2 hash) and the NDS password is disabled.

Workaround: You must try one of the below options:

  • You must set the Universal Password and 0x40 flag in the password policy.

  • NDS password should not be disabled in the password policy applicable to the users.

7.0 Additional Documentation

7.1 iManager

For iManager information, refer to the iManager online documentation.

7.2 Novell International Cryptographic Infrastructure (NICI)

The NICI Administration Guide is included in the eDirectory documentation page.

8.0 Legal Notices

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2019 NetIQ Corporation, a Micro Focus company. All Rights Reserved.