NetIQ Privileged User Manager 2.5 Release Notes

February 2015

NetIQ Privileged User Manager 2.5 includes a new feature and resolves several previous issues.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable inputs. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the Privileged User Manager Community Support Forum, our community Web site that also includes product notifications, blogs, and product user groups.

To download this product, see the NetIQ Downloads Web site. For more information about this release and for the latest release notes, see the Privileged User Manager Documentation Web site.

1.0 What’s New?

The following sections outline the enhancements and issues resolved in this release:

1.1 Improved Web Interface for the Hosts and the Command Control Console

This release includes the interface for Hosts and the Command Control consoles in HTML5 format. The Hosts and Command Control consoles include a three pane layout to improve user experience. The performance of the new interface is also improved.

NOTE: To use the Hosts and the Command Control consoles, set the resolution to 1280*800 or above.

1.2 Software Fixes

Privileged User Manager 2.5 provides software fixes for the following issues:

The SSH Private Key of a Machine is Displayed in the Syslog Audits

Issue: When you create an account domain for an SSH session and select SSH Private Key in the Credential Type field, syslog audit displays the private key in cleartext format.

Fix: This release resolves this issue. The syslog audit does not display the private key in cleartext format. (Bug 907087)

Password Hash is Displayed in the JSON Call Responses

Issue: Some of the JSON call responses include the password hash that can be used as an attack vector. (Bug 908297)

Fix: This release resolves this issue. The password issue is resolved and PUM is no longer vulnerable to attack vector. The nodes that provide the password hash are now removed from the JSON responses.

The SSH Relay Session Prompts to Enter the Passphrase to Start the Session

Issue: When a user attempts to establish an SSH relay session, the session displays a prompt to enter the PUM credentials. After entering the PUM credentials, the session displays a prompt to enter the passphrase of the private key. (Bug 906251)

Fix: In this release, this issue is fixed. The SSH relay session with private keys work without a need to modify the credentials and users are not prompted to enter the passphrase to start the session.

2.0 System Requirements

For information about hardware requirements, supported operating systems and browsers, and software requirements, see Installation Requirements in the NetIQ Privileged User Manager 2.5 Installation Guide.

3.0 Installing Privileged User Manager 2.5

To install Privileged User Manager 2.5, see the NetIQ Privileged User Manager 2.5 Installation Guide.

To obtain the purchased license, log in to the NetIQ Customer Center and download the software and the license key. The ISO image contains the following directories and files for Framework Managers, Agents, and the Package Manager:

3.1 AIX

Package

Description

netiq-npum-agent-2.5-aix-5.1-powerpc.bff.gz

Agent package for AIX 5.1

netiq-npum-manager-2.5-aix-5.1-powerpc.bff.gz

Framework Manager package for AIX 5.1

3.2 HP-UX

Package

Description

netiq-npum-agent-2.5-hpux-11.00-hppa.depot.gz

Agent package for HP-UX 11 and 11i HPPA

netiq-npum-agent-2.5-hpux-11.23-ia64.depot.gz

Agent package for HP-UX 11i v2 and v3 Itanium

netiq-npum-manager-2.5-hpux-11.00-hppa.depot.gz

Framework Manager package for HP-UX 11 & 11i HPPA

netiq-npum-manager-2.5-hpux-11.23-ia64.depot.gz

Framework Manager package for HP-UX 11i v2 and v3 Itanium

3.3 Linux

Package

Description

netiq-npum-agent-2.5-linux-2.6-x86_64.rpm

Agent package for Linux on Intel 64-bit machines with a 2.6 kernel

netiq-npum-agent-2.5-linux-2.6-intel.rpm

Agent package for Linux on Intel 32-bit machines with a 2.6 kernel

netiq-npum-manager-2.5-linux-2.6-x86_64.rpm

Framework Manager package for Linux on Intel 64-bit machines with a 2.6 kernel

netiq-npum-manager-2.5-linux-2.6-intel.rpm

Framework Manager package for Linux on Intel 32-bit machines with a 2.6 kernel

3.4 Solaris

Package

Description

netiq-npum-agent-2.5-solaris-2.8-intel.pkg.gz

Agent package for Solaris 2.8 Intel

netiq-npum-agent-2.5-solaris-2.8-sparc.pkg.gz

Agent package for Solaris 2.8 SPARC

netiq-npum-manager-2.5-solaris-2.8-intel.pkg.gz

Framework Manager package for Solaris 2.8 Intel

netiq-npum-manager-2.5-solaris-2.8-sparc.pkg.gz

Framework Manager package for Solaris 2.8 SPARC

3.5 Windows

Package

Description

netiq_pum_agent_2.5_x86.msi

Agent package for Windows 32-bit computer

netiq_pum_agent_2.5_x64.msi

Agent package for Windows 64-bit computer

netiq_pum_manager_2.5_x86.msi

Framework Manager package for Windows 32-bit computer

netiq_pum_manager_2.5_x64.msi

Framework Manager package for Windows 64-bit computer

3.6 Package Manager

Package

Description

netiq-npum-packages-2.5.tar.gz

The zip file for setting up a local package manager.

4.0 Upgrading to Privileged User Manager 2.5

You can upgrade to Privileged User Manager 2.5 from the previous versions of Privileged User Manager. For more information on upgrading, see Upgrading NetIQ Privileged User Manager in the NetIQ Privileged User Manager 2.5 Installation Guide.

5.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

For the list of known issues in previous versions of Privileged User Manager, see the Privileged User Manager Documentation Web site.

5.1 Moving Multiple Objects Does Not Work

Issue: In this release selecting and moving multiple objects by using the Shift/ Ctrl key does not work.

Workaround: To move multiple objects, select the objects individually.

5.2 The Status of the Packages for Hosts are Not Displayed

Issue: When you select a host that is offline, then click on Packages on the details pane, the Failed to receive response error is displayed and the status of the Host packages are not displayed. But in the flash console, the status of the packages are displayed. This issue occurs when the Host is offline. (Bug 915961)

Workaround: Launch the Packages page on the Hosts console in flash by using https://<ip address of the framework manager>/index-flash.html.

5.3 The Packages for Framework manager and Agents are Not Updated When the Response from the Server is Slow

Issue: When you update the framework manager and the agent packages from PUM 2.5, the packages are not listed in the Update Package page under the Hosts console. This issue does not occur every time, it occurs only when the response from the server is slow. (Bug 915962)

Workaround: To avoid this issue perform the steps mentioned in Upgrading NetIQ Privileged User Manager from NetIQ Privileged User Manager 2.5 Installation Guide. However, if this issue occurs, update the framework and the agent packages from the Hosts console in the flash interface. To launch the console in flash use https://<ip address of the framework manager>/index-flash.html.

5.4 The Test Suite Feature is Unavailable in This Release

Issue: With this release of PUM the test suite feature is unavailable. Hence, Test Suite is not displayed in the details pane of the Command Control console.

Workaround: To use the test suite feature launch the Command Control console through the flash interface by using https://<ip address of the framework manager>/index-flash.html.