Self Service Password Reset 4.2 Patch Update 5 Release Notes

May 2018

This patch update resolves specific previous issues. This document outlines why you should install this patch update.

Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the Self Service Password Reset forum on Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources.

1.0 What’s New?

The following sections outline the issues resolved in this release:

1.1 Security Updates

If you are running the Self Service Password Reset Appliance, this patch update contains operating system and security updates.

Updated Versions of Java and Tomcat

For the Windows versions of Self Service Password Reset, Java and Tomcat have been updated to the latest versions. The appliance is updated through the OS update channel. (Bug 1090121)

Java: JRE-8u172

Tomcat: 8.5.31

1.2 Enhancements and Software Fixes

This patch includes the following software enhancements and fixes:

Added the GMT Dates to the Self Service Password Reset Patches

With this path, the GMT date is on the Self Service Password Reset patches. This makes it easier to determine when the patches were released. (Bug 1089943)

Unique Attribute Scoping Does Not Work in Update Profile

This patch resolves the issue where the Unique Attribute does not work in the Update Profile module. (Bug 1085884)

Account Activated Email is Sent Twice if the Success Page Is Disabled

This patch resolves the issues where the account activated emails are sent twice to users, if the Settings > User Interface > UI Features > Show Success Pages is disabled in the Configuration Editor. (Bug 1087634)

Help Desk Timeout not Honoring Idle Timeout Settings

With this patch, the Help Desk timeout honors the idle timeout settings. (Bug 1085723)

Cannot Use Verification Tokens in Update Profile when Storage Type is STORE_LDAP

This patch resolves the error that users receive when using the Update Profile module when you configure Self Service Password Reset to store the tokens in the LDAP directory. The error is Configuration format error: cannot generate new user tokens when storage type is configured as STORE_LDAP. (Bug 1085192)

Self Service Password Reset Treats the Mobile Number as null

This patch resolves the issue where users try to register using a mobile number to get SMS OTP, Self Service Password Reset treats the number as 'null'. (Bug 1081796)

Captcha Skip Cookie Not Working as Expected

This patch resolves the issue where the Captcha Skip Cooking option was not working. Apply the patch and the Captcha Skip Cookie options works as expected. (Bug 1087367)

Forgotten Password Ignores Enforce Minimum Password Lifetime when Set to False and Minimum Lifetime Is Set

This patch resolves the issue where the Forgotten Password module ignores the Enforce Minimum Password Lifetime setting when it is set to False and the Minimum Lifetime setting is set. (Bug 1083988)

An Auto-Generated LDAP Search Filter Contains Optional Attributes in Forms

This patch resolves the issue where an auto-generated LDAP search filter contains optional attributes in forms. Now, this no longer happens. (Bug 1088469)

2.0 System Requirements

Self Service Password Reset includes support for the following operating system versions:

  • Cloud Platforms

    • Microsoft Azure Marketplace

    • Amazon Web Service

  • Red Hat Enterprise Linux Server 7.3 or later (64-bit)

  • SUSE Linux Enterprise Server 12 SP2 or later (64-bit)

  • SUSE Linux Enterprise Server 11 SP4 (64-bit)

  • Windows

    • Server 2016

    • Server 2012 R2 (64-bit)

Self Service Password Reset is also available as an appliance since the 4.0 release. The appliance runs on the following virtual systems:

  • Hyper-V 4.0

  • VMware 5.5 or later

For detailed information on system requirements, supported operating systems, and browsers, see Deployment Requirements of Self Service Password Reset in the Self Service Password Reset 4.2 Installation Guide.

3.0 Installing this Patch Update

Installing the patch update is different for each platform that Self Service Password Reset supports. You must follow the steps for your specific deployment to install this patch update. For more information, see Adding a Patch Update in the Self Service Password Reset 4.2 Administration Guide.

4.0 Verifying the Installation

Complete the following steps to verify that the installation was successful.

To check the installed version:

  1. Log in to the Self Service Password Reset administration console as an administrator.

  2. In the toolbar, click your name, then click Administration.

  3. Click the About tab, then verify that the SSPR Version is v4.2.0.5 b320 r39516.

5.0 Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information website.

For general corporate and product information, see the NetIQ Corporate website.

For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.

6.0 Legal Notice

For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.netiq.com/company/legal/.

Copyright © 2018 NetIQ Corporation. All Rights Reserved.