NetIQ Sentinel

Version 7.0.2

Release Notes

Date Published: September 2012

 
 

 

Sentinel 7.0.2 improves usability and resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the Sentinel Community Support Forums, our community Web site that also includes product notifications, blogs, and product user groups.

For more information about this release and for the latest release notes, see the Sentinel 7.0 Documentation Web site. To download this product, see the Novell Downloads Web site.

What's New?

The following outlines the key features and functions provided by this version, as well as issues resolved in this release:

Operating System Support

Sentinel 7.0.2 adds support for the following operating system versions:

  • SUSE Linux Enterprise Server 11 Service Pack 2 (64-bit)
  • Red Hat Enterprise Linux 6.3 (64-bit)

Enhancements and Software Fixes

Sentinel 7.0.2 includes software fixes that resolve several previous issues.

For the list of software fixes and enhancements in previous releases, see the Sentinel 7.0 Documentation Web site.

Cross-site Scripting (XSS) Vulnerability

Issue:

When users specify a script in the Search field and run that criteria either as a search, report, or a tag, Sentinel executes the script, which could allow XSS attacks. (BUG 775980)

Fix:

Sentinel now treats scripts as a text string and retrieves the search results that match the specified criteria.

Sentinel Does Not Validate SAML Token Signature

Issue:

Users can log in to the Sentinel server by using the SAML token that was downloaded through the REST API. (BUG 776466)

Fix:

Sentinel now validates the SAML token signature and does not allow users to log in if the signature is invalid for the server.

Report Administrators Have Permission to Create Data Retention Policies

Issue:

Report Administrators have permission to create data retention policies by using the save query as > Save as retention policy option in the Search results page. (BUG 779300)

Fix:

Report Administrators no longer have the ability to create data retention policies. Only users in the administrator role have access to create data retention policies.

Return to Top

System Requirements

You can upgrade to Sentinel 7.0.2 from Sentinel 7.0 or later, or perform a new installation.

For a detailed information on hardware requirements and supported operating systems, and browsers, see "Meeting System Requirements" in the NetIQ Sentinel 7.0 Installation and Configuration Guide.

Note: The Sentinel 7.0 Installation and Configuration guide is not updated for this release. Therefore, information about support for SLES 11 SP2 and RHEL 6.3 operating systems is not available in the Sentinel 7.0 Installation and Configuration guide.

Return to Top

Installing Sentinel 7.0.2

To install Sentinel 7.0.2, see the NetIQ Sentinel 7.0 Installation and Configuration Guide.

Installing the Xen Appliance

The Xen image has changed for this release. Therefore, to install the Xen appliance, you need to modify the xenconfig file as follows. These changes are in addition to the configuration changes mentioned in "Installing the Xen Appliance" in the NetIQ Sentinel 7.0 Installation and Configuration Guide.

  1. Comment the following line:

    vfb = ["type=vnc,vncunused=1,vnclisten=0.0.0.0"]

  2. Add the following line:

    extra = "console=hvc0 xencons=tty"

The final xenconfig file must be as follows:

# -*- mode: python; -*-

name=install_file_name

memory=4096

disk=["tap:aio:/var/lib/xen/images/install_directory/install_filename]

vif=[ "bridge=br0" ]

# vfb = ["type=vnc,vncunused=1,vnclisten=0.0.0.0"]

extra = "console=hvc0 xencons=tty"

Post Installation on Non-Appliance Systems

Along with the Sentinel installation, install the supportutils RPMs as a root user on SLES systems to enable configuration information and log file retrieval for future troubleshooting. These steps are performed automatically on appliance installations of Sentinel. To install the supportutils RPMs, issue the following command:

rpm -Uvh supportutils*

Return to Top

Upgrading to Sentinel 7.0.2

To upgrade to Sentinel 7.0.2, see "Upgrading Sentinel" in the NetIQ Sentinel 7.0 Installation and Configuration Guide.

Appliance Upgrade

You need to upgrade the appliance by using the zypper patch because the upgrade fails in WebYaST due to the vendor change from Novell to NetIQ in the update package.

To upgrade the appliance:

  1. Back up your configuration, then create an ESM export. For more information, see "Backing Up and Restoring Data" in the NetIQ Sentinel 7.0 Administration Guide.

  2. Log in to the appliance console as the root user.

  3. Run the following command:

    /usr/bin/zypper patch

  4. Enter 1 to accept the vendor change from Novell to NetIQ.

  5. Enter Y to proceed.

  6. Enter yes to accept the license agreement.

  7. Restart the Sentinel appliance.

Post Upgrade

If you upgrade Sentinel from version 7.0 to 7.0.2, perform the following post-upgrade procedures when applicable for your environment.

  • If you installed Sentinel in a non-default location, you must run the following commands as the novell user:

    ln -s

    "$RPM_INSTALLATION_PREFIX/opt/novell/sentinel/3rdparty/activemq/activemq-all-5.4.2.jar"

    "$RPM_INSTALLATION_PREFIX/opt/novell/sentinel/lib/activemq-all-5.4.2.jar"

    where $RPM_INSTALLATION_PREFIX is the location of the Sentinel installation.

  • Manually update the Sentinel Core Solution Pack provided with Sentinel 7.0.2. For instructions on manually upgrading the solution pack, see the Sentinel Solution Pack Documentation.

Return to Top

Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

Cannot Install the Xen Appliance

.

Issue:

The Xen appliance installation fails and displays the Unknown directive gfxmenu warning. (BUG 780000)

Fix:

The Xen image has changed for this release. Therefore, this is an expected behavior. For information on installing the Xen appliance, see "Installing the Xen Appliance".

Appliance Update Fails in WebYaST

Issue:

WebYaST is unable to update the appliance because the vendor for the update packages has changed from Novell to NetIQ. (BUG 780969)

Workaround:

Use the zypper command to upgrade the appliance. For more information, see "Appliance Upgrade".

Cannot Download Advisor Feed Files

Issue:

After you upgrade to Sentinel 7.0.2, when you download Advisor feed files by using Download Manager, the Advisor feed files do not download automatically. (BUG 781288)

Workaround:

Restart the Sentinel services: /usr/sbin/rcsentinel -restart

Return to Top

Contact Information

Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.

For detailed contact information, see the Support Contact Information Web site.

For general corporate and product information, see the NetIQ Corporate Web site.

For interactive conversations with your peers and NetIQ experts, become an active member of Qmunity, our community Web site that offers product forums, product notifications, blogs, and product user groups.

Return to Top

Legal Notice

NetIQ Corporation (“NetIQ”) makes no representations or warranties with respect to the contents or use of the online help or other documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. NetIQ reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

NetIQ makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. NetIQ reserves the right to make changes to any and all parts of NetIQ software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. NetIQ assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

All third-party trademarks are the property of their respective owners.

For more information, please contact NetIQ at:

1233 West Loop South, Houston, Texas 77027

U.S.A

www.netiq.com