Documentation Home
> Sun Java System Access Manager 7.1 Release Notes
Sun Java System Access Manager 7.1 Release Notes
Book Information
Sun Java System Access Manager 7.1 Release Notes
Revision History
About Sun Java System Access Manager 7.1
Access Manager 7.1 Patch Releases
Sun Java System LDAP JDK Patches
Access Manager 7.1 Patch 5
Time to Live (TTL) is implemented for the Service Management (SMS) cache (6973683)
Retry mechanism is implemented in the PLL server (6963531)
Access Manager 7.1 patch Readme lists the required LDAP JDK patches (6959325)
HttpServletRequest and HttpServletResponse are available with Distributed Authentication User Interface (6677966)
Access Manager 7.1 Patch 4
New Features and Changes in Access Manager 7.1 Patch 4
New property prevents “Too many authentication attempts” error (6883136)
New property sets idle time out for policy agent sessions (6697260)
Access Manager session cookies can be marked as HTTPOnly (6843487)
ampassword utility has new options to hash and encrypt a password (6850818)
Windows Desktop SSO authentication is added for Distributed Authentication UI Server deployment (6888820)
CDC Servlet inserts custom HTTP response header (6800246)
Changes to the updateschema.sh script (6870576)
Known Issues in Access Manager 7.1 Patch 4
updateschema.pl script fails with older version of ldapjdk.jar (6934848)
updateschema script cannot run successfully under certain circumstances in WAR file deployment (6934844)
Access Manager 7.1 Patch 3
New Features and Changes in Access Manager 7.1 Patch 3
Sun Java System LDAP JDK Patches are Available
Running the updateschema Script is Required
Limitation is Removed for Creation of Data Store Authentication Module Instance in Legacy Mode
Backward Compatibility Issue Between Access Manager 7.1 and amclientsdk.jar is Fixed
Sun Java Web Console 3.1 Patches Are Required
New Property Prevents Sessions From Being Destroyed After Session Upgrade
New Property Allows SSO Token Restriction Other Than an IP Address
Distributed Authentication UI Server Works With Basic Authentication
SecurID Authentication Support is Added for Linux Systems
Known Issues in Access Manager 7.1 Patch 3
Single WAR Access Manager Deployment Cannot Use https Protocol Handler (6810092)
If config Directory Path on Windows Contains a Space, Patch 3 updateschema.pl Fails (6852463)
Hard-coded Path Should be Removed from Patch 3 updateschema.pl Script on Windows (6852467)
Access Manager 7.1 Patch 2
Access Manager 7.1 on WebLogic Server requires new ldapjdk.jar File (6774634)
Creation of Data Store authentication module instance fails in Legacy mode (6764919)
Sub-realm administrator can log in as amadmin in root realm (6761627)
New com.sun.identity.appendSessionCookieInURL property (6740071)
Backward compatibility issue between Access Manager 7.1 and amclientsdk.jar File (6754863)
Access Manager JAR files should include version number in MANIFEST.MF file (6693152)
Security permission is missing for CRL validation (6673538)
SecurID authentication is supported on Solaris x86 systems (6621802)
Access Manager Key Provider needs option to use types other than JKS format (6603228)
Delegation privileges cannot be defined for a filtered role (6486843)
Persistent cookie support is added (6600325)
Access Manager 7.1 Patch 1
Support for specific application idle session timeout values
Web Proxy Agent 2.2-01 in CDSSO mode does not work with Access Manager 7.1 Patch 1 (CR 6611841)
Distributed Auth UI does not work with a WebSphere Application Server 5.1.1.12 server (CR 6625928)
Password file exposed in a temporary directory after Patch 1 re-deployment (CR 6640377)
LDAP Failover not working properly (CR 6611627)
amconfig does not tag-swap and re-register the monitoring framework descriptor (CR 6636710)
amtune does not work if installed in a non-default directory (CR6640673)
amtune does not delete the world readable password file (CR 6640672)
amtune should set thread pool size at 3 times the number of CPUs or cores for CMT servers (CR 6631123)
amsfo.pl does not work for Windows (CR 6629189)
Not able to deploy WAR file generated by patch.bat if -l option is used for Windows (CR 6636474)
amserveradmin.bat throwing errors for Access Manager 7.1 Patch for Windows (CR 6631526)
amsfo.pl script does not work for Session Failover in a Single War deployment for Windows (CR 6646519)
Access Manager classpath not pointing to xml.sec.jar in Patch 1 for Windows (CR 6644461)
Post authentication plug-in supports Microsoft SharePoint (CR 6541695)
Retrieving schema from Active Directory data store fails (CR 6542686)
Access Manager supports the JDK 1.5 HttpURLConnection setReadTimeout method (CR 6536635)
saml samples will not work if the saml module instance is created with lower case name "saml" (CR 6648342)
G11n: CLI commands amhasetup and amserver are not localized (CR 6567135)
G11n: The User sub-tab incorrectly translated in French language (CR 6633529)
Web Security Service Issues Fixed
6543625 — UserName token authentication can authenticate against a configured LDAP module
6543626 — SOAPRequestHandler returns the SSOToken set in the Subject
6544177 — When using X509 token with an invalid certificate AM always accepts the cert even without root CA
6559603 — Boolean configuration flag for "request" signing
6543620 Access Manager Policy Agent profiles able to apply a digital signature to the service request for UserName token
6543623 Access Manager Policy Agent profiles able to encrypt SOAP request body and SOAP response body
6570021 Encryption supports SOAP messages with extra spaces.
Removed ACIs that cause unnecessary performance degradation (CR 6484947)
6.3–based console online help not displayed win Application Server 8.2 (CR 6587213)
Multiple passwords not required for amtune script
amtune-os will not run in local zone
Pre-Installation Considerations
Installing and Configuring Access Manager
Patch Installation Instructions
Patch Installation Instructions For Solaris Systems
Solaris 10 Zones
Patch Installation Instructions For Linux Systems
Patch Installation Instructions For Windows Systems
Installing the Windows Patch
Backing Out the Windows Patch
Access Manager 7.1 Patch 1 Single WAR Deployment
New Container Versions Supported
Considerations for Single WAR Deployment with WebSphere 6.1
Considerations for Single WAR Deployment with Weblogic 9.2
Applying Patch 1 for Single WAR Deployment
Known Issues with Patch 1 WAR Deployment
Modifying SAML source ID in WAR deployment for Access Manager 7.1 Patch 1 (CR 6582972)
amAdmin from amAdminTools.zip Single WAR does not work with IBM JDK WebSphere 6.1 (CR 6618861)
What’s New in This Release
Java ES Monitoring Framework Integration
Web Service Security
Single Access Manager WAR file deployment
Enhancements to Core Services
Deprecation Notification and Announcement
Hardware and Software Requirements
Supported Browsers
General Compatibility Information
AMSDK intersystem incompatibility with Access Manager server
Upgrade not supported for Access Manager HPUX version
Access Manager Legacy Mode
Java ES Silent Installation Using a State File
“Configure Now” Installation Option in Graphical Mode
“Configure Now” Installation Option in Text-Based Mode
“Configure Later” Installation Option
Determining the Access Manager Mode
Access Manager Policy Agents
Known Issues and Limitations
Installation Issues
Access Manager single WAR deployment on WebLogic requires JAX-RPC 1.0 JAR files to communicate with client SDK (6555040)
Additional .jar file is required for single WAR generated by the Java Enterprise System 5 installer for Websphere 5.1 (6550261)
Single WAR deployment for Webshpere requires changes to server.xml to communicate with client SDK (6554379)
Changes required for Distributed Authentication to work with Access Manager single War for Weblogic and Webshpere (6554372)
Single WAR Configurator fails against DS (6562076)
Multi-server configuration of AM Single WAR on same host throws exception (6490150)
Upgrade Issues
Required Services not supported in Access Manager 7.1 Console in Realm Mode (6615838)
Compatibility Issues
Access Manager Single Sign-On fails on Universal Web Client (6367058, 6429573)
StackOverflowError occurs on Web Server 7.0 running in 64–bit mode (6449977)
Incompatibilities exist in core authentication module for legacy mode (6305840)
Delegated Administrator commadmin utility does not create a user (6294603)
Delegated Administrator commadmin utility does not create an organization (6292104)
Configuration Issues
Incorrect console redirection behind a load balancer (6480354)
Notification URL needs to be updated for Access Manager SDK installation without web container (6491977)
Password Reset service reports notification errors when a password is changed (6455079)
Account Locking feature fails to send email notification when the user's account is locked (6760137)
Platform server list and FQDN alias attribute are not updated (6309259, 6308649)
Data validation for required attributes in the services (6308653)
Document workaround for deployment on a secure WebLogic 8.1 instance (6295863)
The amconfig script does not update the realm/DNS aliases and platform server list entries (6284161)
Default Access Manager mode is realm in the configuration state file template (6280844)
Performance Issues
In Realm mode, creation of a new group generates Group Admin with ACIs that never get used (6485695)
Access Manager Console Issues
New Access Manager Console cannot set the CoS template priorities (6309262)
Old console appears when adding Portal Server related services (6293299)
Console does not return the results set from Directory Server after reaching the resource limit (6239724)
Add ContainerDefaultTemplateRole attribute after data migration (4677779)
Command Line Issue
Organization Admin role is fails to create a new user with the amadmin command line utility (6480776)
SDK and Client Issues
Clients do not get notifications after the server restarts (6309161)
SDK clients need to restart after service schema change (6292616)
Authentication Issues
Distributed Authentication UI server performance drops when application user has insufficient privileges (6470055)
Incompatibility for Access Manager default configuration of Statistics Service for legacy (compatible) mode (6286628)
Attribute uniqueness broken in the top-level organization for naming attributes (6204537)
Session and SSO Issues
System creates invalid service host name when load balancer has SSL termination (6245660)
Using HttpSession with third-party web containers
Policy Issues
Deletion of dynamic attributes in Policy Configuration Service causing issues in editing of policies (6299074)
Server Startup Issues
Debug error occurs on Access Manager startup (6309274, 6308646)
AMSDK Issues
Error displayed when performing AMIdentity.modifyService (6506448)
Group members don't show up in selected list (6459598)
Access Manager Login URL Returns Message "No such Organization found" (6430874)
Sub-org creation not possible from Access Manager when using amadmin (5001850)
SSL Issue
The amconfig script fails when SSL certificate is expired. (6488777)
Samples Issue
Clientsdk samples directory contains unwanted makefile (6490071)
Linux OS Issues
JVM problems occur when running Access Manager on Application Server (6223676)
Windows and HP-UX Issues
Access Manager auto configuration failed when installing on zh_TW and es locales (6515043)
HP-UX needs gettext binary with AM while installing Java Enterprise System full stack (6497926)
Federation and SAML Issues
Logout error occurs in Federation (6291744)
Globalization (g11n) Issues
Administration console components displayed in English in the zh locale (6470543)
Current Value and New value are incorrectly displayed in the console (6476672)
Policy condition date must be specified according to English custom (6390856)
Removing UTF-8 is not working in Client Detection (5028779)
Multi-byte characters are displayed as question marks in log files (5014120)
Documentation Issues
Missing information when configuring Access Manager in SSL mode (6660610)
Access Manager supports non-ascii character passwords if Directory Server is configured to support them (6661374)
Document the roles and filtered roles support for LDAPv3 plug-in (6365196)
Document unused properties in the AMConfig.properties file (6344530)
Document how to enable XML encryption (6275563)
Documentation Updates
Access Manager 7.1 Documentation Collection
Support for the Java SecurID Authentication Module
Access Manager in an Application Server Cluster
Policy Agent 2.2 Collection
Redistributable Files
System Virtualization Support
How to Report Problems and Provide Feedback
Sun Welcomes Your Comments
Additional Sun Resources
Accessibility Features for People With Disabilities
Related Third-Party Web Sites
© 2010, Oracle Corporation and/or its affiliates