FanOut Readme

Overview

This update is applicable for Linux and UNIX Fan-out drivers running Identity Manager 4.8.x or later. The driver version will be changed to 4.8.5.0 after the patch is applied.

System Requirements

• Identity Manager 4.8.x, or later

Upgrading the Driver

The driver upgrade process involves updating the driver files.

1. Stop the driver and the Driver Shim instance:

systemctl stop asamcdrv


2. Download and unzip the contents of the IDM_FanOut_4850.zip file to a temporary location on your computer.


3. Navigate to the extracted folder and run:

sh linux_x86_64_coredriver.bin


4. Follow the prompts to update the package files.


5. Start the Driver Shim instance and the Driver instance:

systemctl start asamcdrv

1. Stop the Fan-Out Driver Shim Windows Service


2. Download and unzip the contents of the IDM_FanOut_4850.zip file to a temporary location on your computer.


3. Navigate to the extracted folder and run:

windows_coredriver.exe


4. Follow the prompts to update the package files.


5. Start the Fan-Out Driver Shim Windows Service

1. Stop the Platform Services:


• Linux:
systemctl stop asamrcvr


• Solaris:
/etc/init.d/asamrcvr stop


• AIX:
/etc/rc.d/init.d/asamrcvr stop


• HP-UX:
/sbin/init.d/asamrcvr stop




2. Download and unzip the contents of the IDM_FanOut_4850.zip file to a temporary location on your computer.


3. Navigate to the extracted folder and run:


• Linux:
sh linux_x86_64_platformservices.bin


• Linux Debian:
sh debian_x86_64_platformservices.bin


• Solaris:
sh solaris_x86_64_platformservices.bin


• Solaris Sparc:
sh solaris_sparc64_platformservices.bin


• AIX:
sh aix_platformservices.bin


• HP-UX:
hpux_ia64_platformservices.bin




4. Follow the prompts to update the package files.


5. Start the Platform Services:


• Linux:
systemctl start asamrcvr


• Solaris:
/etc/init.d/asamrcvrd start


• AIX:
/etc/rc.d/init.d/asamrcvrd start


• HP-UX:
/sbin/init.d/asamrcvrd start

Technical Support Information

What's New

• Added -tracefilemax feature to configuration file to enable tracefile rotation.
• AIX, HP-UX and Solaris now support SHA256/SHA512 passwords
• Added ejsGroupSOResolveCache feature that can be disabled to avoid using platform cache for resolving groups within Census Search Objects
• Added default logFilter option ghs for common HTTP messages to be filtered out
• Added option to disable updating ASAM-lastContactTime

Issue Fixed in this Release

• Fixed segmentation fault on Solaris when trying to use SHA512 or SHA256 passwords
• Fixed Event Journal Services search filter to match platform sets that were deleted.
• Fixed Event Journal Services to remove platform associations when "ignored" events were returned by platforms on delete events.

Issue Fixed in previous Release

• Fixes in Fan-out Driver 4.8.3.0
• Network timeouts are better handled to allow drivers to disconnect and reconnect after idle
• Fixed SSL connectivity issue for clients and cert error message format
• Systemd scripts are copied instead of linked
• Fixed crash when checking passwords that contained certain binary characters
• Fixed mutex unlock bug that could result in memory corruption.


• Fixes in Fan-out Driver 4.8.1.0
• Fixed bug in group processing during provisioning events that could lead to a memory segfault.
• Network timeouts are used to disconnect clients in the case of network disruptions.
• Fixed bug in alternate naming that resulted in the original name being used.
• Fixed possible segmentation fault after too many thread id's were recycled.
• Fixed crash in web authentication when password used was too long.
• Fixed issues with thread synchronization in Windows.
• Added support for RedHat 8, SLES 15, Ubuntu 18, and Debian 9.
• Added new systemd startup scripts.