Since CA Directory r12 SP2 was shipped in 2010, DXmanager has undergone some major internal restructuring. It now supports most of the features and commands of CA Directory.
DXmanager has been enhanced in the following areas since the last release:
The DXmanager centralized configuration has been extensively enhanced to support the following CA Directory command areas:
The full list of commands that are now supported in DXmanager is in Commands Used in DXmanager in the Reference.
When you upgrade from a previous version of DXmanager, migrate the settings from the configuration text files into DXmanager. Plan this carefully, using the instructions in Upgrading DXmanager in the Installation Guide.
DXmanager now uses Tomcat 6.0.32, which addresses a number of vulnerabilities of the web server.
DXmanager user passwords are no longer stored in clear text. These are now protected using a SHA-512 digest. Password also supports a wider range of special characters on UNIX. On Windows, some special characters remain unsupported due to Windows installer command line limitations (these include \n, \r, <, >, ^, &, ", | and %). The installing user will be prompted when entering an unsupported character.
The certificates used by DXmanager have been refreshed. In addition, the DXadmind personality certificate has its own root certificate authority to remove conflicts with DXcertgen (trusted.pem).
Applets have been correctly signed to remove "unsigned/signed Java runtime" and "expired certificate" warnings.
A number of DXmanager Applet & GUI stability issues have been addressed that could only be resolved with a browser restart.
A number of DXmanager server stability issues that could only be resolved with a DXwebserver restart have been fixed.
DXmanager no longer leaks file descriptors when deploying configuration changes.
CA Directory now tolerates commands configured by both text-based files (.dxc) and DXmanager (alarm rather than server not starting).
DXmanager has been enhanced to ensure CA Directory uptime during migration from DXmanager r12 SP2.
The default of max-op-size has been increased from 200 to 10000.
CA Directory supports the LDAP Tree Delete Control.
CA Directory now uses "event timing" when unindexing attributes.
If the time taken is more than a millisecond, the actual time taken is reported as an "event" report if event tracing has been enabled.
Also, the get cache command shows more information for indexes. In addition to the number of values indexed, it also shows the number of distinct values and the number of times the index was used to evaluate a search.
The setuid mode for the dxserver and dxadmind binaries is now optional. If you need to access ports <= 1024, you can set this during installation or upgrade.
CA Directory is now certified on Solaris SPARC 11. For a list of supported operation systems, see Directory OS Support.
|
Copyright © 2013 CA.
All rights reserved.
|
|