This section contains the following topics:
New and Changed Features in SP14
New and Changed Features in SP13
New and Changed Features in SP12
New and Changed Features in SP11
New and Changed Features in SP10
New and Changed Features in SP9
New and Changed Features in SP8
New and Changed Features in SP7
New and Changed Features in SP6
New and Changed Features in SP5
New and Changed Features in SP4
New and Changed Features in SP3
New and Changed Features in SP2
Deprecated and Discontinued Commands and Features
The dxgrid-queue setting in CA Directory, which changes the way operation or thread scheduling is handled, has been improved to have more threads executing under normal operating conditions. This setting is now enabled by default.
To revert to the old setting, use the following command in the DSA config file:
set dxgrid-queue = false;
CA Directory provides stricter access control settings and greater security, ensuring that specific access control settings are not bypassed. CA Directory now differentiates between distinguished names that differ only in the relative distinguished name attribute types.
For example, the following users are now treated differently when making access control decisions:
* <c AU><ou Users><cn Admin> * <c AU><ou Users><uid Admin>
Important! This change may impact existing access controls that exploit this weakness.
CA Directory Views Filter now supports search requests that contain multiple filter items for the same attribute.
Previously, due to a compiler issue on the AIX platform, the DSA intermittently displayed assertion failures and hanged. This issue has now been resolved.
A number of improvements and fixes have been made to the MW-DISP multiwrite group hub feature to improve data consistency between peer DSAs.
Previously, a filter containing the item (!(attr<=value)) caused the DSA to crash in the following cases:
This issue has now been resolved.
As per RFC 4522, binary attributes are now returned with the ;binary qualifier in the attribute description. Previously, this was not determined when a search operation returns attributes.
Glue DSE entries can now be manually corrected when these entries are created due to MW-DISP data inconsistencies.
MW-DISP recovery updates are now logged in the query log.
A multiwrite group hub DSA now correctly replicates to a peer DSA if the peer DSA is initially empty.
The following new command prevents the DSA from consuming too much system memory when normalizing very complex filters:
set max-filter-norm-size = <Num>
Specifies the maximum memory (in MB) used by CA Directory during filter processing.
Default: 100MB
When this value exceeds the specified limit, the system shows a warning and the search is not performed.
The following new command sets the maximum length of a LDAP search filter:
'set max-ldap-filter = <Num>
Specifies the maximum number of characters in an LDAP search filter.
When this value exceeds the specified limit, the system shows a warning and the search is not performed.
CA Directory is now supported on the following operating environments:
The information gathering utility dxinfo now includes the host name of the server where it picks up the configuration and log files.
The dxinfo utility generates the following files in UNIX or Linux:
The dxinfo utility generates the following files in Windows:
DXmanager now supports configuring one-way replication.
To configure one-way replication, Follow these steps::
CA Directory is now supported on the following operating environments:
|
Copyright © 2013 CA.
All rights reserved.
|
|