IDM 3.5.1 Fan-out Driver Core and Platform Patch 2 20080829
This document (5036461) is provided subject to the disclaimer at the end of this document.
patches this patch supersedes
| File | Product | Status | Patch |
|---|---|---|---|
| idm351fancoreir1.tar.gz | Identity Manager 3.5.1 | Obsolete | IDM 3.5.1 Fan-out Core Driver Patch 1 080110 |
patches that supersede this patch
Warning: The patch associated with this readme is obsolete; it is no longer available for download.
patch attributes
document
abstract
Patch for Fan-Out Core Driver and Platform Services (Linux and Solaris) Novell Identity Manager Integration Modules for Linux and Unix 3.5.1 August 29, 2008 Users with the Fan-out Driver on Midrange or Mainframe computers only need to put on the core driver part of the patch. If you have the Core Driver installed on a Netware box, you still need to install the IDM 3.5.1 Fan-out Core Driver Patch 1a 20080620 first.
details
Overview: IDM 3.5.1 Fan-out driver patch for the Core Driver (engine side of the Driver) and also for Platform services on Linux/Unix.
System Requirements: IDM 3.5.1 and the Fan-out driver from that version of IDM.
Installation:
Platform Services Installation
------------------------------
1. Replace your /usr/local/ASAM install directory:
cp
cp /usr/local
tar xvf
2. To install the PAM module,
Solaris:
cp pam_ascauth.so /usr/lib/security/pam_ascauth.so.1
Linux:
cp pam_ascauth.so /lib/security/pam_ascauth.so
Linux64:
cp pam_ascauth.so /lib64/security/pam_ascauth.so
HP-UX:
cp pam_ascauth.so /usr/lib/security/libpam_ascauth.1
AIX:
cp pam_ascauth.so /usr/lib/security/pam_ascauth
3. To install the libascauth library:
Solaris:
cp libascauth.so /usr/lib/libascauth.so
Linux:
cp libascauth.so /usr/lib/libascauth.so
Linux64:
cp libascauth.so /usr/lib64/libascauth.so
HP-UX:
cp libascauth.so /lib/libascauth.sl
AIX:
cp libascauth.so /usr/lib/libascauth.a
Core Driver Installation
-------------------------
1. Stop the Fan-Out driver in iManager.
2. Copy and replace libasamcdrv.so with the one provided in
this patch.
For eDirectory 8.7:
/usr/lib/nds-modules/libasamcdrv.so
For eDirectory 8.8:
/opt/novell/eDirectory/lib/nds-modules/libasamcdrv.so
3. Restart the Fan-Out driver.
Technical Support Information:
Current Fixes:
- Under some connect failures, connect timeouts were not honored by platform services.
- Added "no_first_prompt" PAM argument to avoid problem during administrative password resets by root, where an extra prompt is displayed.
- Fixed memory leak in asamrcvr when using the USEFILEIPC method to pass information to platform receiver scripts.
- Fixed Agent compatibility mode during password changes where an Intruder Lockout code was sent back when the new password did not comply with UP policies.
Previous Fixes:
- Fixed bug in HPUX trusted mode where passwords longer than 8 characters may not be changed on the local HPUX system when processed by the asamrcvr.
- Prevent more than one copy of asamrcvr from running against the same asamplat.conf at the same time.
-Can change debug levels for asamrcvr without restarting receiver.
- Added NO_PWHIST protection to PAM authenticate for AIX.
- Added POLLING mode enhancements to allow for two new directives in asamplat.conf:
POLLINT 300
POLLRAND 600 1200
These two keywords are mutually exclusive. The POLLINT keyword specifies the number of seconds between polling intervals. The POLLRAND keyword specifies the min and max polling intervals (in seconds) from which to choose a random selection to poll. In the example above, POLLRAND 600 1200 will tell the asamrcvr to select a random integer between 600 and 1200 seconds (10 and 20 minutes) for which it will delay until the next time to poll for events.
Both keywords can be used to spread out the amount of traffic and load placed on the core driver during event processing. The default for the POLLING mode is a constant of 5 minutes, which is sometimes too frequent.
These enhancements are particularly useful for large deployments of platforms.
- Fixed crash in the asampsp caused by Nessus scans. The vulnerability was an erroneous syslog message containing unescaped format characters.
file contents
Compressed File Name: idm351fanoutir2.tar.gz
| Files Included | Size | Date |
|---|---|---|
| idm351fanoutir2/CoreDriver/Linux/edir87/libasamcdrv.so | 3.0 MB (3215232) | 2008-10-06 11:12:13 |
| idm351fanoutir2/CoreDriver/Linux/edir88/libasamcdrv.so | 2.9 MB (3110388) | 2008-10-06 11:12:13 |
| idm351fanoutir2/CoreDriver/Solaris/libasamcdrv.so | 5.8 MB (6127620) | 2008-10-06 11:12:13 |
| idm351fanoutir2/PlatformServices/AIX/aix_platformservices.tar | 11.4 MB (12042240) | 2008-10-06 11:12:14 |
| idm351fanoutir2/PlatformServices/HPUX/hpux_platformservices.tar | 12.4 MB (13066240) | 2008-10-06 11:12:14 |
| idm351fanoutir2/PlatformServices/Linux/linux64_platformservices.tar | 8.1 MB (8581120) | 2008-10-06 11:12:14 |
| idm351fanoutir2/PlatformServices/Linux/linux_platformservices.tar | 6.8 MB (7168000) | 2008-10-06 11:12:15 |
| idm351fanoutir2/PlatformServices/Solaris/solarisx86_platformservices.tar | 10.7 MB (11241472) | 2008-10-06 11:12:15 |
| idm351fanoutir2/PlatformServices/Solaris/solaris_platformservices.tar | 11.5 MB (12116480) | 2008-10-06 11:12:16 |
| readme_5036461.html | N/A | 2008-11-11 16:16:18 |
disclaimer
The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information. Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.
Novell is a registered trademark of Novell, Inc. in the United States and other countries. SUSE is a registered trademark of SUSE Linux AG, a Novell business. *All third-party trademarks are the property of their respective owners.
© 2007 Novell, Inc. All Rights Reserved.