May 2019

Role and Resource Service Driver 4.7.3.0 for NetIQ Identity Manager 4.7 resolves previous issues.

This hotfix requires NetIQ Identity Manager 4.7.2

For more information, see the documentation for Identity Manager.

Install this hotfix on the Identity Vault server(s).

1. Log in to the Identity Vault server as a root user.

2. Stop the User Application and Role and Resource Service drivers.

3. Stop the eDirectory service by running the following command: ndsmanage stopall

4. Copy the IDM47_RRSD_4730.zip file to the server.

5. Unzip the .zip file by running the following command: unzip IDM47_RRSD_4730.zip

6. Install the new RPMs by running the following command: rpm -U <Driver Patch Directory>/linux/netiq-DXMLrrsd.rpm

7. Start the eDirectory service by running the following command: #ndsmanage startall

8. Start the User Application and Role and Resource Service drivers if not already started.

1. Stop the User Application and Role and Resource Service drivers.

2. Stop the eDirectory service.

3. Copy the IDM47_RRSD_4730.zip file to the server.

4. Extract the .zip file to a temporary location on the server.

5. Navigate to the extracted folder and copy the nrfdriver.jar file to <Identity Vault installation path>\eDirectory\lib

6. Start the eDirectory service.

7. Start the User Application and Role and Resource Service drivers if not already started.

Issues Fixed in This Release

• Bug 1127433: Add operations are properly handled for group memberships.

• Bug 1131524: Ability to correctly remove a role when the role association is performed through Dynamic Groups.

• Bug 1132491: Resource are no longer removed for users with overlapping child roles when the dynamic group membership of the user is changed.

• Bug 1130301: When a group assigned to a role is deleted, the corresponding assignments are correctly removed from the members of that group.

Issues Fixed in Driver Version 4.7.2.0

• Bug 1047378: RRSD Driver does not close iterator handles when querying for Roles.

• Bug 1122445: nrfAssignedResources and EntitlementRef attributes not added to existing dynamic group members during RRSD resync -
  "Before createResourceRequestObject roleRef.getRequestor()" = null causes NullPointerException.

• Bug 1105072: RRSD Driver: Removing users from group having parent role assignments removes overlapping child roles from group members.

• Bug 1115218: RRSD throws NPE during Role recalculation when second Group Parent Role for overlapping child role is being removed.

• Bug 1115371: RRSD incorrectly assigns additional nrfgrouproles in case groupnames have duplicate common names.

• Bug 1020610: ENH: RRSD needs to have a way to recalculate DirXML-EntitlementRef (function like a resync).

NetIQ strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

For the list of the known issues in Identity Manager 4.7 Advanced Edition and Standard Edition, see the Release Notes on the Identity Manager Documentation page.