NetIQ eDirectory 9.2 Service Pack 8 Release Notes

June 2023

NetIQ eDirectory 9.2 SP8 resolves several previous issues. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure our products meet all your needs. You can post feedback in the eDirectory Community Support Forums, our community Web site that also includes product notifications, blogs, and product user groups.

For a full list of all issues resolved in NetIQ eDirectory 9.x, including all patches and service packs, refer to KM000010604.

For more information about this release and for the latest release notes, see the Documentation Web site. To download this product, see the Product Upgrade Web site.

1.0 What’s New?

eDirectory 9.2 SP8 provides the following key features, enhancements, and fixes in this release:

1.1 Support for NICI 3.2.0.0500

This release of eDirectory contains NICI 3.2.0.0500, which adds support for OpenSSL 1.0.2zg.

1.2 Updates for Dependent Components

This release adds support for the following third-party components:

  • OpenSSL 1.0.2 zg

  • zlib 1.2.13

1.3 Operating System Support

In addition to the platforms supported in previous releases of eDirectory, this release adds support for the following operating system:

  • Red Hat Enterprise Linux (RHEL) 8.7 and 9.1

  • openSUSE Leap 15.4 (in Docker container)

1.4 Fixed Issues

eDirectory 9.2 SP8 includes the following software fixes that resolve several previous issues:

NDSD Cores during External Certificate Validation

Fix: In Identity Console, validation of external certificate causes NDSD core. To fix the issue, freeing of JSON objects created as part response and Parsing of multi-chain certificate has been rectified. (Defect 547190)

Driver Hangs While Performing ldapSearchWithTLS Search Using the NOVLLIBLDAP Package

Fix: Driver hangs in ldapSearchWithTLS while performing a search due to indefinite wait. This issue occurs when the driver waits indefinitely for a response. A check has been added to retry within seconds rather than waiting indefinitely for a response. (Defect 365035)

NDSD Crashes Because an Older NMAS Server Login Module is Incompatible with the Latest NMAS Login Method

Fix: When NMAS method update triggers from client side, NMAS server takes a few minutes to update NMAS server module to latest. This results in NDSD crash. To fix the issue, force refresh trigger for NMAS method has been updated. (Defect 393013)

edirutil Reports an Error About Incorrect Java Version

Fix: When the edirutil utility is executed, it reports an error for Java versions other than Azul Zulu OpenJDK. After running java -version, the grep command is executed to check for other Java versions. (Defect 588139)

Multiple NDSD Core Dumps are Seen on Open Enterprise Server with eDirectory 9.2.8

Fix: To mitigate this issue, changes made in NDSD service and no core dump is seen. (Defect 657027)

Buffer Overflow Seen when nicimud/nicimud64 Reads the nici.cfg File

Fix: When reading the NICI configuration file (nici.cfg), buffer overflows may occur, resulting in a system crash. Necessary checks have been added to prevent the crash. (Defect 234863)

Deleted NCP Server Object Returns As Unknown Object After Obit Processes

Fix: Flags have been added to check unknown objects. Skulker now accepts deleted NCP Server object without trying to resuscitate it. (Defect 235405)

NDSD Cores After a Connection Failure

Fix: NDSD is dumping core after a connection failure. To mitigate the issue, change has been made to check for a null IP address. (Defect 579217)

The Directory Service Database is Closed Due to DSrepair Error

Fix: DSrepair options for local database are not reflected with actual repair. To fix this issue, changes have been done in the dsrepairUIHelper.exe file. (Defect 646030)

2.0 System Requirements

For information about prerequisites, hardware requirements, and supported operating systems, see the NetIQ eDirectory Installation Guide.

NOTE:

  • From this release and onwards, eDirectory support has been discontinued on Red Hat Enterprise Linux (RHEL) 7.9 and lower platforms.

  • While installing eDirectory 9.2.8, the MicroFocusGPGPackageSign.pub can be downloaded from the SLD: Patch PH_210777 (GPGPackageSign).

3.0 Installing or Upgrading

To upgrade to eDirectory 9.2 SP8, you need to be on eDirectory 8.8.8.x or 9.x. For more information on upgrading eDirectory, see the NetIQ eDirectory Installation Guide.

NOTE:

  • You must upgrade your Identity Manager before using this version of eDirectory. For more information on the version compatibility see, Identity Manager Component Versions table in the System Requirements for Identity Manager 4.8x.

  • This version of eDirectory installation will upgrade various packages required by eDirectory and iManager. The updated packages may impact iManager running on the same server. For more information, see: KM000014321.

  • iManager 3.2 Service Pack 6 Patch 3 (3.2.6.0300) can not be installed on same machine where eDirectory9.2.8 is already installed due to OpenSSL version upgraded to 1.0.2 zg.

4.0 Additions to Documentation: eDirectory Security Guide

The eDirectory 9.2 documentation library now includes a Security Guide. It contains recommendations for improving the security of an eDirectory environment. See: eDirectory Security Guide.

5.0 Known Issues

NetIQ Corporation strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

5.1 Warning Message 'No Version Information Available (Required by ndstrace)' in NDS Utilities

Issue: ncurses library in RHEL operating system does not provide version information.

Workaround: There is no workaround at this time. However, there is no functionality loss.

6.0 Additional Documentation

6.1 Identity Console

For Identity Console information, refer to identityConsole Documentation

6.2 Novell International Cryptographic Infrastructure (NICI)

The NICI Administration Guide is included in the eDirectory documentation page.

6.3 eDirectory Issues on Open Enterprise Server

For more information on eDirectory issues on Open Enterprise Server (OES), see OES Readme.