- Book Information
- Sun Java System
Access Manager 7.1 Release Notes
- Revision History
- About Sun Java System Access Manager 7.1
- Access Manager 7.1 Patch Releases
- Sun Java System LDAP JDK Patches
- Access Manager 7.1 Patch 5
- Time to Live (TTL) is implemented for the Service Management (SMS) cache (6973683)
- Retry mechanism is implemented in the PLL server (6963531)
- Access Manager 7.1 patch Readme lists the required LDAP JDK patches (6959325)
- HttpServletRequest and HttpServletResponse are available with Distributed Authentication User Interface (6677966)
- Access Manager 7.1 Patch 4
- New Features and Changes in Access Manager 7.1 Patch
4
- New property prevents “Too many authentication attempts” error (6883136)
- New property sets idle time out for policy agent sessions (6697260)
- Access Manager session cookies can be marked as HTTPOnly (6843487)
- ampassword utility has new options to hash and encrypt a password (6850818)
- Windows Desktop SSO authentication is added for Distributed Authentication UI Server deployment (6888820)
- CDC Servlet inserts custom HTTP response header (6800246)
- Changes to the updateschema.sh script (6870576)
- Known Issues in Access Manager 7.1 Patch 4
- New Features and Changes in Access Manager 7.1 Patch
4
- Access Manager 7.1 Patch 3
- New Features and Changes in Access Manager 7.1 Patch
3
- Sun Java System LDAP JDK Patches are Available
- Running the updateschema Script is Required
- Limitation is Removed for Creation of Data Store Authentication Module Instance in Legacy Mode
- Backward Compatibility Issue Between Access Manager 7.1 and amclientsdk.jar is Fixed
- Sun Java Web Console 3.1 Patches Are Required
- New Property Prevents Sessions From Being Destroyed After Session Upgrade
- New Property Allows SSO Token Restriction Other Than an IP Address
- Distributed Authentication UI Server Works With Basic Authentication
- SecurID Authentication Support is Added for Linux Systems
- Known Issues in Access Manager 7.1 Patch 3
- New Features and Changes in Access Manager 7.1 Patch
3
- Access Manager 7.1 Patch 2
- Access Manager 7.1 on WebLogic Server requires new ldapjdk.jar File (6774634)
- Creation of Data Store authentication module instance fails in Legacy mode (6764919)
- Sub-realm administrator can log in as amadmin in root realm (6761627)
- New com.sun.identity.appendSessionCookieInURL property (6740071)
- Backward compatibility issue between Access Manager 7.1 and amclientsdk.jar File (6754863)
- Access Manager JAR files should include version number in MANIFEST.MF file (6693152)
- Security permission is missing for CRL validation (6673538)
- SecurID authentication is supported on Solaris x86 systems (6621802)
- Access Manager Key Provider needs option to use types other than JKS format (6603228)
- Delegation privileges cannot be defined for a filtered role (6486843)
- Persistent cookie support is added (6600325)
- Access Manager 7.1 Patch 1
- Support for specific application idle session timeout values
- Web Proxy Agent 2.2-01 in CDSSO mode does not work with Access Manager 7.1 Patch 1 (CR 6611841)
- Distributed Auth UI does not work with a WebSphere Application Server 5.1.1.12 server (CR 6625928)
- Password file exposed in a temporary directory after Patch 1 re-deployment (CR 6640377)
- LDAP Failover not working properly (CR 6611627)
- amconfig does not tag-swap and re-register the monitoring framework descriptor (CR 6636710)
- amtune does not work if installed in a non-default directory (CR6640673)
- amtune does not delete the world readable password file (CR 6640672)
- amtune should set thread pool size at 3 times the number of CPUs or cores for CMT servers (CR 6631123)
- amsfo.pl does not work for Windows (CR 6629189)
- Not able to deploy WAR file generated by patch.bat if -l option is used for Windows (CR 6636474)
- amserveradmin.bat throwing errors for Access Manager 7.1 Patch for Windows (CR 6631526)
- amsfo.pl script does not work for Session Failover in a Single War deployment for Windows (CR 6646519)
- Access Manager classpath not pointing to xml.sec.jar in Patch 1 for Windows (CR 6644461)
- Post authentication plug-in supports Microsoft SharePoint (CR 6541695)
- Retrieving schema from Active Directory data store fails (CR 6542686)
- Access Manager supports the JDK 1.5 HttpURLConnection setReadTimeout method (CR 6536635)
- saml samples will not work if the saml module instance is created with lower case name "saml" (CR 6648342)
- G11n: CLI commands amhasetup and amserver are not localized (CR 6567135)
- G11n: The User sub-tab incorrectly translated in French language (CR 6633529)
- Web Security Service Issues Fixed
- 6543625 — UserName token authentication can authenticate against a configured LDAP module
- 6543626 — SOAPRequestHandler returns the SSOToken set in the Subject
- 6544177 — When using X509 token with an invalid certificate AM always accepts the cert even without root CA
- 6559603 — Boolean configuration flag for "request" signing
- 6543620 Access Manager Policy Agent profiles able to apply a digital signature to the service request for UserName token
- 6543623 Access Manager Policy Agent profiles able to encrypt SOAP request body and SOAP response body
- 6570021 Encryption supports SOAP messages with extra spaces.
- Removed ACIs that cause unnecessary performance degradation (CR 6484947)
- 6.3–based console online help not displayed win Application Server 8.2 (CR 6587213)
- Multiple passwords not required for amtune script
- amtune-os will not run in local zone
- Pre-Installation Considerations
- Patch Installation Instructions
- Access Manager 7.1 Patch 1 Single WAR Deployment
- What’s New in This Release
- Hardware and Software Requirements
- General Compatibility Information
- Known Issues and Limitations
- Installation Issues
- Access Manager single WAR deployment on WebLogic requires JAX-RPC 1.0 JAR files to communicate with client SDK (6555040)
- Additional .jar file is required for single WAR generated by the Java Enterprise System 5 installer for Websphere 5.1 (6550261)
- Single WAR deployment for Webshpere requires changes to server.xml to communicate with client SDK (6554379)
- Changes required for Distributed Authentication to work with Access Manager single War for Weblogic and Webshpere (6554372)
- Single WAR Configurator fails against DS (6562076)
- Multi-server configuration of AM Single WAR on same host throws exception (6490150)
- Upgrade Issues
- Compatibility Issues
- Access Manager Single Sign-On fails on Universal Web Client (6367058, 6429573)
- StackOverflowError occurs on Web Server 7.0 running in 64–bit mode (6449977)
- Incompatibilities exist in core authentication module for legacy mode (6305840)
- Delegated Administrator commadmin utility does not create a user (6294603)
- Delegated Administrator commadmin utility does not create an organization (6292104)
- Configuration Issues
- Incorrect console redirection behind a load balancer (6480354)
- Notification URL needs to be updated for Access Manager SDK installation without web container (6491977)
- Password Reset service reports notification errors when a password is changed (6455079)
- Account Locking feature fails to send email notification when the user's account is locked (6760137)
- Platform server list and FQDN alias attribute are not updated (6309259, 6308649)
- Data validation for required attributes in the services (6308653)
- Document workaround for deployment on a secure WebLogic 8.1 instance (6295863)
- The amconfig script does not update the realm/DNS aliases and platform server list entries (6284161)
- Default Access Manager mode is realm in the configuration state file template (6280844)
- Performance Issues
- Access Manager Console Issues
- New Access Manager Console cannot set the CoS template priorities (6309262)
- Old console appears when adding Portal Server related services (6293299)
- Console does not return the results set from Directory Server after reaching the resource limit (6239724)
- Add ContainerDefaultTemplateRole attribute after data migration (4677779)
- Command Line Issue
- SDK and Client Issues
- Authentication Issues
- Distributed Authentication UI server performance drops when application user has insufficient privileges (6470055)
- Incompatibility for Access Manager default configuration of Statistics Service for legacy (compatible) mode (6286628)
- Attribute uniqueness broken in the top-level organization for naming attributes (6204537)
- Session and SSO Issues
- Policy Issues
- Server Startup Issues
- AMSDK Issues
- SSL Issue
- Samples Issue
- Linux OS Issues
- Windows and HP-UX Issues
- Federation and SAML Issues
- Globalization (g11n) Issues
- Administration console components displayed in English in the zh locale (6470543)
- Current Value and New value are incorrectly displayed in the console (6476672)
- Policy condition date must be specified according to English custom (6390856)
- Removing UTF-8 is not working in Client Detection (5028779)
- Multi-byte characters are displayed as question marks in log files (5014120)
- Documentation Issues
- Missing information when configuring Access Manager in SSL mode (6660610)
- Access Manager supports non-ascii character passwords if Directory Server is configured to support them (6661374)
- Document the roles and filtered roles support for LDAPv3 plug-in (6365196)
- Document unused properties in the AMConfig.properties file (6344530)
- Document how to enable XML encryption (6275563)
- Installation Issues
- Documentation Updates
- Redistributable Files
- System Virtualization Support
- How to Report Problems and Provide Feedback
- Additional Sun Resources
- Related Third-Party Web Sites