IBM Support

7.2.0-ISS-SDI-FP0005

Download


Abstract

This Fix Pack contains fixes for SDI 7.2

Download Description

1 ABOUT THIS FIXPACK

This fix pack can be applied over SDI 7.2.0 GA or SDI 7.2.0 GA with any previous fix pack level on all supported platforms for SDI 7.2.0.

Consult the readme file 7.2.0-ISS-SDI-FP0005_README.html for complete instructions and information.

2 Fixes
==================

2.1 Fixes included in Fix Pack 1
====================================
APAR Description

IO20596 TDISRVCTL FAILS WITH CTGDJB125E
IO20602 THE HTTP SERVER CONNECTOR DOES NOT DISPLAY THE WORK OBJECT DATA IN THE HTTP.BODY AS EXPECTED.
IO20656 AXIS2WSCLIENT FUNCTION COMPONENT STACK OVERFLOW
IO20664 NOCLASSDEFFOUNDERROR WHEN USING TDISRVCTL
IO20895 NOTES CONNECTOR NOT RETURNING HANDLE TO CURRENTLY READ DOCUMENT
IO21045 TDISRVCTL IS RETURNING AN ERROR
IO21203 THE LOG4J LOGGER FAILS TO APPEND TO LOG FILE AFTER FIRST ASSEMBLYLINE EXECUTION
IO21299 PROTECTED PROPERTIES STORED IN CLEAR TEXT AFTER DOWNLOAD FROM SERVER
IO21296 DOMINOUSERCONNECTOR IS UNABLE TO CREATE USERS WHOSE FULL NAMES DIFFER ONLY FOR THE ORGANIZATION
IO21471 RXA 2.3 JARS UPDATED to 2.3.0.9

2.2 Fixes included in Fix Pack 2
====================================
IO21728 HTTPSERVER CONNECTOR CRASHING WITH INCOMPLETE TRAILING ESCAPE
IO21861 ASSEMBLYLINE POOL NULLPOINTEREXCEPTION WHEN COM.IBM.DI.SERVER.PERFSTATS IS ENABLED.
IO20951 ECLIPSE PLUG-IN FAILS INSTALLATION
IO21911 REMOTECOMMANDLINE FC USING SYSTEM USER
IO22070 TDI TPAEIFCHANGEDETECTIONCONNECTOR FAILS WITH A COM.IBM.DB2.JCC.C.SQLEXCEPTION
IO22088 DSMLV2SOAPSERVERCONNECTOR THROWS ILLEGALARGUMENTEXCEPTION AND STOPS
IO22068 THREE BACKSLASH CHARACTERS APPEAR WITHIN DN WHEN HANDLING SPECIAL CHARACTERS
IO22241 ASSEMBLY LINE CONNECTOR ONLY ALLOWING ITERATOR MODE
IO22100 TARGET USER RDN ATTRIBUTE IS NOT CUSTOMIZABLE

2.3 Fixes included in Fix Pack 3
====================================
IO22674 THE DSMLV2SOAPCONNECTOR THROWS A JAVA.LANG.CLASSCASTEXCEPTION:[B INCOMPATIBLE WITH JAVA.LANG.STRINGBUFFER ERROR
IO22711 THE TDI SERVER DOCUMENT DOES NOT MANAGE THE ACTIVEMQ MANAGEMENT AND ACTIVEMQ TRANSPORT PORTS CORRECTLY
IO22799 IBMDIRECTORYSERVERCHANGELOGCONNECTOR DOES NOT RETURN THE TARGETDN WHEN MERGE MODE = "RETURN ONLY CHANGED DATA"
IO22976 DOMINO CHANGE DETECTION CONNECTOR CRASHES SDI/TDI AND DOMINO SERVER WHEN CONNECTING TO DOMINO SERVER V9.0 OVER IIOP SESSION
IO22999 COMPLEXTYPEGENERATORFC AND JDK 7 FAILS TO BUILD JAR
IO23212 THE VIRTUAL DIRECTORY (VIRTDIR) EXAMPLE FAILS: "ERROR WHILE INITIALIZING SYSTEM STORE FOR PAGING SUPPORT"
IO23213 THE EXCEPTION JAVA/LANG/OUTOFMEMORYERROR "FAILED TO CREATE A THREAD" RECEIVED USING DOMINO CHANGE DETECTION CONNECTOR
IO23350 SDI DERBY STARTING WITH SYSTEM JVM
IO23298 THE SANDBOX RECORD/PLAYBACK FUNCTION DOES NOT WORK
IO23352 A JAVA.LANG.STRINGINDEXOUTOFBOUNDSEXCEPTION MAY OCCUR WHEN USING THE ITIMAGENTCONNECTOR
IO23353 THE ITIMAGENTCONNECTOR DOES NOT SEND A DELETE REQUEST TO THE DAML AGENT AS EXPECTED
IO23318 THE TDISRVCLT UTILITY FAILS TO READ THE 'ITERATESTATEKEY' VALUE SET BY A CHANGELOG CONNECTOR
IO23650 INCORRECT TDI_SOLDIR
IO23651 THE LDIFPARSER IS NOT PROPERLY PARSING THE CR CHARACTER
IO23639 SCHEDULER IGNORING SERVER OPTION -M (SIMULATION MODE)
IO23653 DSMLV2SOAPCONNECTOR IS NOT PASSING REQUESTID ATTRIBUTE AS PART OF THE < BATCHREQUEST > TAG
IO23654 THE TDISRVCTL -OP STATUS COMMAND DOES NOT LIST ALL CONFIGS RUNNING, ALTHOUGH THE ASSEMBLYLINES ARE LISTED
IO23724 FXTAG FILE FROM FIXPACKS HAVE INVALID XML FORMAT FOR THE FIXID TAG
IO23657 PERFORMANCE ISSUES IN SDI 7.2 FP 2 WITH PROCESSING JAVASCRIPT
IO23685 FLOW SIMPLE ATTRIBUTE MAPPING IN FDS
IO23823 TDISRVCTL UTILITY FAILS TO CONNECT TO TDI SERVER
IO23824 TDI PASSWORD PLUGIN ENCRYPTION RESULTS IN WRONG ECRYPTED DATA IN MULTIPLE LDAP SYNC SCENARIO.
IO23817 TIMERCONNECTOR DOES NOT CORRECTLY WORKS WITH MOSCOW TIME
IO23878 DELTA ENGINE FAILS AFTER FIXPACK INSTALL

2.4 Fixes included in Fix Pack 4
====================================
IO22097 STATEMENT 'CONTINUE' ISSUE WITHIN A WHILE LOOP
IO24040 SDI 7.2 RUNNING ON FDS INCORRECTLY IMPORTS THE CN OF A PERSON FROM AD
IO24366 UNKNOWN MEMBER 'GETSTRING' IN JAVA CLASS 'JAVA.LANG.STRING'
IO24497 WEAK CIPHERS CAUSE CONNECTION PROBLEMS FOR COMPONENT USING RXA RESOURCES
IO24535 STARTING THE CONFIG EDITOR MAY UPDATE THE PROPERTY FILE WITH OLD VALUES
IO24648 HTTP CLIENT CONNECTOR LACKS THE "HOST" HTTP-HEADER IN THE "CONNECT" REQUEST
IO24674 AXIS EASY WEB SERVICE SERVER CONNECTOR REMOVE THE NEED TO AUTHENTICATION WHEN REQUESTING THE WSDL
IO24672 SAP ALE IDOC CONNECTOR THROWS EXCEPTION ORG.XML.SAX.SAXPARSEREXCEPTION:INVALID BYTE 2-3 BYTE UTF8 SEQ
IO24690 THE INCREMENTAL SYNCHRONIZATION IN FDS UNEXPECTEDLY DELETES USERS FROM SDS AND ISAM
IO24776 DELTA STORE HAS NAMING ISSUES WHEN USING MIXED CASE
IO25931 PROJECT FILES ARE NOT TRANSLATED CORRECTLY
IO24999 DOMINO CHANGE DETECTOR CONNECTOR ISSUES WITH DOMINO 9
IO25914 JMSCONNECTOR DOES NOT RECOGNIZE A BYTE ARRAY IN THE "MESSAGE" ATTRIBUTE OF THE CONN ENTRY
IO25617 XML PARSER GENERATES XMLSTREAMEXCEPTION, NAMESPACE <X> HAS NOT BEEN BOUND TO A PREFIX
IO25212 SQLEXCEPTION: INVALID PARAMETER: UNKNOWN COLUMN NAME TABLE_NAME. ERRORCODE=-4460, SQLSTATE=NULL
IO25282 COMPROXY.DLL FAILS TO CAPTURE EXCEPTION MESSAGE
IO25906 UNABLE TO GET SPECIAL CHARACTERS FROM SYSTEM.SHELLCOM
IO25907 ORACLE DIRECTORY SERVER TIMEOUT IS NOT RECOGNIZED BY THE SUN DIRECTORY CHANGE DETECTION CONNECTOR
IO25908 THE 'DROP TABLE CANNOT BE PERFORMED ON IDI_DS_TABLE' ERROR OCCURS IN THE "SERVER PROPERTY STORE EDITOR"
IO25909 GETNEXTDOCUMENT(OLDDOC) METHOD IN NOTES CONNECTOR RETURNS OLDDOC INSTEAD OF THE NEXT DOCUMENT
IO25910 SAP JCO V3 CONNECTOR - CLASSNOTFOUND ERROR
IO25911 THE JCO.CLIENT.PASSWD PASSWORD VALUE IS SHOWN IN CLEAR TEXT
IO25912 DELTA VALUES PERTAINING TO DOUBLE AND INTEGER TYPE ARE NOT UPDATED IN TARGET RESOURCE
IO25863 KEEPALIVE FOR THE LDAP SERVER CONNECTOR
IO25915 ORACLE DIRECTORY SERVER TIMEOUT IS NOT RECOGNIZED BY THE SUN DIRECTORY CHANGE DETECTION CONNECTOR
IO25916 SERVER IGNORES CERTIFICATE ALIAS DEFINED FOR API.KEY.ALIAS PARAMETER
IO25885 SAP COMPONENT SUITE NO MORE WORKING WITH SAP JCO GREATER 3.0.14
IO25887 NO TYPE=B CONNECTION POSSIBLE WITH SAP COMPONENT SUITE
IO25919 IBM DIRECTORY SERVER CHANGELOG CONNECTOR FAILS TO FIND CHANGELOG NUMBER
IO25920 DASHBOARD 'LDAP SERVER AUTHENTICATION' FAILS TO ENFORCE GROUP MEMBERSHIP
IO25921 DASHBOARD AUTHENTICATION UNKNOWINGLY DISABLED
IO25922 SUN DIRECTORY CHANGE DETECTION CONNECTOR FAILS TO RETURN OPERATIONAL ATTRIBUTES
IO25923 IBM DIRECTORY SERVER CHANGELOG CONNECTOR DOES NOT RECONNECT AFTER TIMEOUT
IO25956 HOW TO USE PROXY WITH AXIS2WSCLIENT FC
IO25924 INVOKESOAPWS FUNCTION COMPONENT FAILS WITH A 'CONNECTION RESET' DUE TO AN INVALID 'SOAPACTION' HTTP HEADER
IO25925 HTTPCLIENT CONNECTOR FAILS TO CONNECT TO SERVER REQUIRING SNI EXTENSION IN TLS
IO25987 THE CONN OBJECT IS FOUND AS UNDEFINED
IO25989 PROBLEM PARSING COMPONENT DEFINATION FILE IDI.INF
IO25443 LARGE NUMBER OF 'COMMUNICATION ERROR' MESSAGES SEEN WITHIN A SECOND WHEN THE ENDPOINT IS NOT REACHABLE.

2.5 Fixes included in Fix Pack 5
====================================
IO25913 AMC AND AM SUPPORT FOR TLS COMMUNICATIONS
IO26269 XML PARSING PROBLEM OCCURS READING CONFIGURATION FILES

3 New Properties
===================
The new property com.ibm.di.suppressSchema when set to true will not save schema items in the configuration file. The schema items are mainly used for building the solution. When an attempt is made to transfer with RMI a TDI configuration file having large number of schema items, a stack overflow error may be thrown. This could happen e.g. between the Configuration Editor and the server, or between the server and AMC.

See http://www.ibm.com/support/docview.wss?uid=swg21623396 for a description.

The JDBC connector uses the schema list when one wants to automatically create a table. If one wants to use this behavior, the com.ibm.di.suppressSchema property should not be set to true.

## ----------------------------------
## Suppress schema
## ----------------------------------
com.ibm.di.suppressSchema=true

The new property com.ibm.di.SSLProtocols and com.ibm.di.SSLServerProtocols will enable only those protocols mentioned against this property. Setting these property to TLSv1,TLSv1.1,TLSv1.2 will ensure that TLS protocol cannot be negotiated down to SSL. These properties should be added to the existing solution.properties. For maximum security, only TLS1.2 should be used, if possible. Also, the latest LA fix pack containing IBM Java 8 should be used, for the newest implementation of TLS.

## ----------------------------------
## Protocols to use for SSL
## ----------------------------------
com.ibm.di.SSLProtocols=TLSv1,TLSv1.1,TLSv1.2
com.ibm.di.SSLServerProtocols=TLSv1,TLSv1.1,TLSv1.2

4 Axis2 updated to version 1.7.6
===============================
SDI 7.2.0 Fix Pack 4 ships Axis2 version 1.7.6 ( Also shipped in SDI 7.2.0 Fix Pack 5 )

5 Support for SAP JCo version 3
=================================
For detailed documentation refer SAP_JCo_V3_README.txt file.

6 IBM Security Learning Academy
===============================
Directory Integrator courses from the IBM Security Learning Academy can be found at the link below.
https://www.securitylearningacademy.com/local/navigator/index.php?level=iadi01

Prerequisites

SDI 7.2.0 GA with any previous fix pack. Each fix pack is cumulative, and includes all of the changes and improvements of all prior fix packs. It is necessary only to install the most recent fix pack to bring your SDI installation fully up to date.

Installation Instructions

Refer to 7.2.0-ISS-SDI-FP0005_README.html for details

On
[{"DNLabel":"7.2.0-ISS-SDI-FP0005","DNDate":"6 Jun 2018","DNLang":"English","DNSize":"76149745","DNPlat":{"label":"Platform Independent","code":"PF025"},"DNURL":"http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FSecurity+Directory+Integrator&fixids=7.2.0-ISS-SDI-FP0005&source=SAR","DNURL_FTP":" ","DDURL":null}]
[{"Product":{"code":"SSCQGF","label":"Tivoli Directory Integrator"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"General","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.2","Edition":"Edition Independent","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Product Synonym

SDI

Problems (APARS) fixed
IO20596;IO20602;IO20656;IO20664;IO20895;IO21045;IO21203;IO21299;IO21296;IO21471;IO21728;IO21861;IO20951;IO21911;IO22070;IO22088;IO22068;IO22241;IO22100;IO22674;IO22711;IO22799;IO22976;IO22999;IO23212;IO23213;IO23350;IO23298;IO23352;IO23353;IO23318;IO23650;IO23651;IO23639;IO23653;IO23654;IO23724;IO23657;IO23685;IO23823;IO23824;IO23817;IO23878;IO22097;IO24040;IO24366;IO24497;IO24535;IO24648;IO24674;IO24672;IO24690;IO24776;IO25931;IO24999;IO25914;IO25617;IO25212;IO25282;IO25906;IO25907;IO25908;IO25909;IO25910;IO25911;IO25912;IO25913;IO25863;IO25915;IO25916;IO25885;IO25887;IO25919;IO25920;IO25921;IO25922;IO25923;IO25956;IO25924;IO25925;IO25987;IO25989;IO25443;IO25913;IO26269

Document Information

Modified date:
15 June 2018

UID

swg24044884