IDM 3.5.1 Fan-Out Driver Platform Receiver Patch 1 20071218

This document (5007560) is provided subject to the disclaimer at the end of this document.

patches this patch supersedes

This patch does not supersede any other patches.

patches that supersede this patch

This patch is not superseded by any other patches.

patch attributes

Security patch: No

Priority: Recommended

Distribution Type: Public

http://download.novell.com/Download?buildid=noYM9ax3lx8~

document

Revision: 6

Document ID: 5007560

Creation Date: 2007-12-21 08:54:56

Modified Date: 2008-05-14 21:13:11

abstract

Novell Identity Manager 3.5.1 Patch for the Fan-Out Driver Platform Services dated December 14, 2007. This patch is a cumulative patch with the following fixes and improvements since the 3.5.1 support release:

details

Overview: Novell Identity Manager 3.5.1 Patch for the Fan-Out Driver Platform Services

System Requirements: Novell Identity Manager 3.5.1 with the Fan-out driver from that version.

Installation:

1. Replace your /usr/local/ASAM install directory:

cp _platformservices.tar /usr/local/
cp /usr/local
tar xvf _platformservices.tar

2. To install the PAM module,

Solaris:
cp pam_ascauth.so /usr/lib/security/pam_ascauth.so.1

Linux:
cp pam_ascauth.so /lib/security/pam_ascauth.so

Linux64:
cp pam_ascauth.so /lib64/security/pam_ascauth.so

HP-UX:
cp pam_ascauth.so /usr/lib/security/libpam_ascauth.1

AIX:
cp pam_ascauth.so /usr/lib/security/pam_ascauth

3. To install the libascauth library:

Solaris:
cp libascauth.so /usr/lib/libascauth.so

Linux:
cp libascauth.so /usr/lib/libascauth.so

Linux64:
cp libascauth.so /usr/lib64/libascauth.so

HP-UX:
cp libascauth.so /lib/libascauth.sl

AIX:
cp libascauth.so /usr/lib/libascauth.a

Technical Support Information:

Current Issues:
- Fixed bug in HPUX trusted mode where passwords longer than 8 characters may not be changed on the local HPUX system when processed by the asamrcvr.

- Prevent more than one copy of asamrcvr from running against the same asamplat.conf at the same time.

- Can now change debug levels for asamrcvr without restarting receiver.

- Added NO_PWHIST protection to PAM authenticate for AIX.

- Added POLLING mode enhancements to allow for two new directives in asamplat.conf:
POLLINT 300
RANDPOLL 600 1200

These two keywords are mutually exclusive. The POLLINT keyword specifies the number of seconds between polling intervals. The RANDPOLL keyword specifies the min and max polling intervals (in seconds) from which to choose a random selection to poll. In the example above, RANDPOLL 600 1200 will tell the asamrcvr to select a random integer between 600 and 1200 seconds (10 and 20 minutes) for which it will delay until the next time to poll for events.

Both keywords can be used to spread out the amount of traffic and load placed on the core driver during event processing. The default for the POLLING mode is a constant of 5 minutes, which is sometimes too frequent. These enhancements are particularly useful for large deployments of platforms.

- Fixed crash in the asampsp caused by Nessus scans. The vulnerability was an erroneous syslog message containing unescaped format characters.

file contents

Compressed File Name: idm351fanplatir1.tar.gz

Files Included	Size	Date
readme_5007560.html	N/A	2008-05-14 21:13:12

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.

Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.