3.7 Post-Update Tasks

Perform the following actions after applying this service pack.

NOTE:Due to the Java 11 update, any previously deployed custom JARs may also need to be recompiled and redeployed after updating Identity Manager to version 4.8.7.

3.7.1 Extending the Identity Vault Schema

(Conditional) This section does not apply if you have already upgraded to 4.8.1 and above and extended the Identity Vault Schema.

This section applies if you want to extend the Identity Vault schema for the Resource Weightage feature.

To extend the Identity Vault schema, perform the following steps:

  1. Log in to the server where you want to extend the Identity Vault schema.

  2. Create a new file in your preferred directory.

    For example, create nrf-extensions.sch file in the C:\Temp directory.

  3. Open the nrf-extensions.sch file and add the following content:

    --
    -- The nrfResourceWeightage attribute contained by nrfResource object class specifies the weightage of
    -- resource object which is used for assignment/revocation based on priority
    --
    NDSSchemaExtensions DEFINITIONS ::=
    BEGIN
    "nrfResourceWeightage" ATTRIBUTE ::=
    {
                    Operation                           ADD,
                    Flags                                      {DS_SYNC_IMMEDIATE, DS_SINGLE_VALUED_ATTR},
                    SyntaxID                              SYN_INTEGER,                
                    ASN1ObjID                         {2 16 840 1 113719 1 33 4 174}
    }
    
    
    "nrfResource" OBJECT-CLASS ::=
    {
        Operation   MODIFY,
        MayContain  {"nrfResourceWeightage"}
    }
    END
  4. Navigate to the C:\NetIQ\eDirectory\ directory.

  5. Run the following command to extend the schema:

    ice -l <schema_update_log> -C -a -S SCH -f <file that you created in step 2> -D LDAP -s <eDirectory DNS name/IP> -p <LDAP port> -d <eDirectory_admin_dn> -w <eDirectory_admin_password>

    where,

    -C -a updates the destination schema.

    -f indicates the schema file (sch).

    -p indicates the port number of the LDAP server. The default port is 389. For secure communication, use port 636. Secure communication needs an SSL Certificate.

    -L indicates a file in DER format containing a server key used for SSL authentication.

    -s indicates the DNS name or IP address of the LDAP server.

    For example,

    ice -l schemaupdate.log -C -a -S SCH -f C:\Temp\nrf-extensions.sch -D LDAP -s idmorg.com -p 636 -d cn=admin,ou=idm,o=microfocus -w password -L cert.der
  6. Restart the Identity Vault.

3.7.2 Update Driver Packages

NOTE:Before updating the driver packages to 4.8.7, ensure that you have the Identity Applications latest version.

Once the Identity Applications is updated to the latest version, you can update the User Application driver package to 4.8.7.20230423114300 and Role and Resource Service Driver package to 4.8.7.20230422231143.

Perform the following steps to update the driver package:

  1. Open the project containing the required service driver.

  2. Right-click the service driver, then click Driver > Properties.

  3. Click Packages.

    A check mark indicates a newer version of a package in the Available Upgrades column.

  4. (Conditional) For UAD package, click Select operation against the NOVLUABASE_4.8.7.20230423114300.jar package.

  5. (Conditional) For RRSD package, click Select operation against the NOVLRSERVB_4.8.7.20230422231143.jar package.

  6. From the drop-down list, click Upgrade.

  7. Select the version that you want to upgrade to, then click OK.

    NOTE:Designer lists all versions available for upgrade.

  8. Click Apply.

  9. (Conditional) Fill in the fields with appropriate information to upgrade the package, then click Next.

    Depending on which package you selected for upgrade, you must fill in the required information appropriately to upgrade the package.

  10. Read the summary of the packages that will be installed, then click Finish.

  11. Review the upgraded package, then click OK to close the Package Management page.

  12. Deploy the changes and restart the driver.

  13. Restart the eDirectory service.

3.7.3 Removing Unused Log4j JAR

The log4j-1.2.13.jar is installed in the <installed_path>\NetIQ\IDM\lightWeightDesigner\plugins\com.novell.soa.eai.integrationActivity_4.0.0.201910221801\lib folder as part of Identity Manager 4.8 installation. Identity Manager no longer uses this jar. Locate and delete the log4j-1.2.13.jar from the folder.