1.3 Software Fixes

NetIQ Identity Manager includes software fixes for the following components:

1.3.1 Installation and Upgrade

NetIQ Identity Manager includes the following software fixes that resolve several previous issues in installation or upgrade:

java.lang.UnsatisfiedLinkError Resolved Using the Latest Version of JNA Libraries

While updating Identity Manager to 4.8.5, the msvcr100.dll file was missing in the Microsoft Visual C++ 2010 Redistributable Package. The latest version of JNA libraries is now bundled with Identity Manager 4.8.6 to remove the dependency on the msvcr100.dll file. (Bug 516149)

1.3.2 Identity Manager Engine

NetIQ Identity Manager includes software fixes that resolve several previous issues in the Identity Manager Engine:

The DirXML-PersistentData Attribute No Longer Contains Duplicate Data

The issue wherein the SOAP-drivers added duplicate data to the DirXML-PersistentData attribute has been fixed. The exception is no longer seen when iManager loads Dashboard on the Driver Set Overview page.(Bug 383061)

Identity Manager Prints User’s DN Correctly for Add, Delete, and Modify Operations in the Publisher Channel

Identity Manager correctly logs user’s DN in the DirXML Log event for add, delete, and modify operation in the Publisher Channel.(Bug 383089)

Enabling CEF Auditing Does Not Impact eDirectory Service-related Operations

Regardless of whether CEF Auditing is enabled or disabled on Identity Manager Engine, you can start and stop eDirectory services without causing the ndsd processes to crash. (Bug 490076)

1.3.3 Identity Applications

NetIQ Identity Manager includes software fixes that resolve several previous issues in the Identity Applications:

Assigning Roles to Sub-containers Functions as Expected

Administrators can select sub-containers within containers when assigning a role to containers in Dashboard. (Bug 230927)

Delete Action in the Form Builder View Works as Expected

The issue with Form Builder view that caused deleted form fields to reappear after relaunching the form is resolved. When you delete form fields in the Form Builder view, they are removed from the form permanently. (Bug 329644)

The $requestStatus$ Token in the Role Request Approval Completed Notification Template is Correctly Translated Into Norwegian

All tokens in the Role Request Approval Completed Notification template, including the $requestStatus$, are correctly translated into Norwegian. The request status no longer appears in English in the notification email. (Bug 377239)

For more information about using localized email templates, see Working with Language-Specific Email Templates.

Recipient Column on the Request History Page Displays the Recipient’s Name for All PRDs

When Dashboard makes a REST API call from the Request History page to get the request history of a logged-in user, the API returns the names of all recipients, even if the same PRD is requested for different recipients.(Bug 432030)

Dashboard Displays the Attribute Labels Correctly When Editing a User’s Profile

Identity Applications retrieves user attributes from the Directory Abstraction Layer and displays the display label rather than the key value of those attributes on the edit user’s profile page. (Bug 432118)

Request Form Correctly Displays the Initiator and Recipient CN for Both Proxy and Original Users

When switching back from proxy to original user, the initiator and recipient fields in the request form are updated with the original user’s CN. (Bug 434031)

Added Validation for Invalid Special Characters on Groups Page

When you create a new group, Identity Applications checks the user input in the name and description fields and displays a validation message if you enter invalid characters. For more information about invalid characters, click on the Dashboard.(Bug 436002)

Workflow Execution Works as Expected When Identity Applications is Installed in a Cluster Environment

Workflows are no longer stuck in the processing state when the activities in the workflow are executed on two different nodes in a clustered environment. (Bug 438003)

Ability to Change the Expiration Date and Resubmit the Request Form After Encountering an Error

Identity Applications now allows you to change the expiration date and resubmit the request form. Prior to Identity Manager 4.8.6, changing the expiration date after receiving the Request(s) failed error was not supported. (Bug 457047)

Simultaneous Requests Have No Effect on the DN Value of a PRD

The issue wherein multiple users requesting the same permission at the same time led to incorrect DN value being passed into the flowdata has now been resolved. (Bug 468018)

Badge Feature Restored on My Approvals Title on the Applications Page

The badge on the My Approvals tile that was missing in previous versions of Identity Manager is now back. It shows how many approval tasks are currently assigned to the logged-in user. (Bug 473013)

HTTP error code 401: Error While Processing the External Application Request is No Longer Seen When the Application Initiates Workflows in Bulk

Identity Applications has updated the way authentication token and refresh token expiration are used to make REST API calls when workflows are initiated in bulk. As a result, the error is no longer seen when Identity Manager initiates a large number of workflows after upgrade. (Bug 478029)

Approval Email Sent to EBA Inbox is Processed Successfully

The issue wherein the User Application stopped checking the EBA incoming mailbox after receiving an email from a user who approved or denied a request via email has been fixed. (Bug 482152)

Changing Views in Form Builder No Longer Cause the Form Fields to Disappear

The issue wherein all fields disappeared from a form after deleting a few form fields is now resolved. Navigating between Form Builder views has no effect on the saved form.(Bug 483079)

REST Activity in a Workflow Returns a Success Message in Response to HTTP 204 No Content Status

Workflows with REST activity no longer fail when a REST service returns an HTTP 204 No Content status response. Identity Applications responds to the status by sending a success message with an empty string. (Bug 492125)

Start Workflow Policy Action Correctly Passes Date to the Workflow Engine

The Start Workflow policy action now passes the date to the Workflow Engine in a proper format, and the workflow is successfully triggered. (Bug 494406)

The Usage of Extended Characters in User Entity’s DN Attribute No Longer Results in a Request Form Error

If the DN attribute of a User entity contains Cyrillic or other non-Latin characters (such as Swedish), you can use the utils.get function to populate that entity’s data in the request form fields without any error. (Bug 505019)

Using IDVault.get() Function to Make a REST Access API call to GET /entities/list Works as Expected

The issue with JSON Forms failing when using the IDVault.get function has been resolved. Instead of entity key, Identity Applications uses the LDAP class associated with the entity key as the objectClass in an LDAP filter. (Bug 505020)

Roles on the Users Page are Listed in Alphabetical Order

This release includes a fix for an issue in Identity Manager 4.8.5 and 4.8.4 where the Users page lists a user’s roles in a non-alphabetical order. (Bug 505021)

Identity Applications Successfully Retrieves the Data Item Value and Data Type From a JSON Response With Java Objects

The logic for assigning values to the objects is now based on data type. As a result, Identity Applications no longer display a null pointer exception when mapping JSON responses with Java objects. (Bug 515049)

Default Location of the User Application Log File Corrected

The property that specifies the default path for creating the idapps.out file has been corrected in the userapp-log4j2.xml file.(Bug 525093)

Localization Discrepancies in the User Application Driver Base Package Fixed

This release includes a fix for several localization related issues that were seen after upgrading the User Application Driver base package version in Designer. (Bug 543025)

Request to the /IDMProv/rest/access/tasks/workEntries REST Endpoint Returns the expirationTime in a Proper JSON Format

The /tasks/workEntries REST endpoint has been updated to return the response for expirationTime parameter as time for the date type instead of date. (Bug 547086)

Workflows with Integration Activities that Contain the createRoleRequest Operation No Longer Fail After an Upgrade

This release includes a fix for the Identity Manager 4.8.5 Patch 1 that caused workflows with Integration activity containing the createRoleRequest operation to fail after an upgrade. (Bug 553042)

User Application Driver Does Not Hang While Calling the Composer WebService: Execute Operation

This release includes a fix for the Identity Manager 4.8.5 Patch 1 that caused the User Application Driver to hang while calling the Composer WebService: Execute operation after an upgrade. (Bug 562001)

Workflow Process Cache is Cleared at the Set Capacity

The Process Cache Maximum Capacity functionality on the Workflow Engine and Cluster Settings page works as expected. If the number of processes in the cache equals or exceeds the configured value, the cache attempts to remove the oldest inactive process from the cache. (Bug 569004)

1.3.4 Identity Reporting

NetIQ Identity Manager includes the following software fixes that resolve several previous issues in Identity Reporting:

Identity Vault Reports Successfully Produce Required Data

When CEF auditing is enabled, and password changes are made by using Identity Manager and SSPR, the report query is modified to handle the user password changes such that the reports can fetch proper data. (Bug 272014)

Placeholder Attribute Populates Entries for Existing Placeholders

Identity Reporting placeholder attribute successfully populates idmrpt_container entry for existing placeholders. (Bug 305081)

Role Owner Management

When the role owner is deleted and then recreated with the same owner, the Identity Reporting successfully updates the identity records with the actual owner of the role. (Bug 368083)

DCS Driver Retry Mechanism for Transient DB Errors

Identity Reporting comes with updated algorithms to deal with transient DB errors such as connection failures, maintenance windows issues, and table space issues. (Bug 502222)

Data Collection Services Overview Page Shows Correct Label

The Identity Manager Data Collection Services Overview page is updated to show the correct label for Data Collection Period. (Bug 515023)

1.3.5 Identity Manager Designer

NetIQ Identity Manager includes software fixes that resolve several previous issues in Designer:

Ability to Handle Sub Element XML Values During Policy Simulation

In addition to the text-based values, the Designer Simulator now supports sub elements such as the XML values under path.xml in the input document. Designer retains these values when editing the output document and toggling between XDS Builder and Source tabs. (Bug 432147)

Ability to Successfully Export a Driver to a File That is Linked to an ECMAScript Object From Another Driver

You can export a driver that contains an ECMAScript object from another driver without any errors. Designer generates the configuration file successfully. (Bug 434055)

Ability to Handle Form Control Events With Expressions Longer Than 64K Characters on a Linux-based Designer

The maximum string length is changed from the default value of 64K characters to a custom value. As a result, you can now define an event with script expression longer than 64K in the Event Action Expression Builder.(Bug 502003)

Pasting Script Text from Clipboard to the Inline ECMAScript Editor Works as Expected

When editing a Provisioning Request Definition in Designer for macOS system, you can copy the script text from one inline ECMAScript Editor to the clipboard and paste it into another. The text copied to the clipboard is not erased when you open the second inline ECMAScript Editor. (Bug 504001)