Previous Topic: New and Changed Features in SP12Next Topic: New and Changed Features in SP10

Release Summary › New and Changed Features › New and Changed Features in SP11

New and Changed Features in SP11

Microsoft Security Features

On Windows, CA Directory now conforms to Microsoft security features as outlined in http://msdn.microsoft.com/en-us/library/bb430720.aspx.

DXcertgen Certificate Key Length

DXcertgen can now generate certificates with keys of length greater than 2048 using the following command line option:

DXcertgen -k 2048 certs

More information:

dxcertgen certs Command—Create DSA and User Certificates

Password Storage

The default password storage method has been changed from SHA-1 to salted SHA-512. If an alternate storage method has not been configured then salted SHA-512 will be used to store new passwords.

Note: Passwords already in the datastore will not be converted.

Directory Management C++ Library Dependency

The Directory Management package is no longer dependent on the compatibility standard C++ libraries.

DXdumpdb Line Wrapping

DXdumpdb now supports a new option -w.

This option prevents the LDIF output to be wrapped at 72 characters.

Datastore Tuning

A datastore tuning parameter has been added:

set dxgrid-db-tuning = 0 | 1 | 2;
0

(Default) Only basic tuning is performed

1

More extensive tuning

2

Same as 1 but allocates more time to the process

Large Schema OID Numbers

CA Directory now supports large numbers as part of schema OIDs. The valid range of an arc is now between 0 and 264.

Dynamic Groups and Dynamic Roles

Dynamic groups and dynamic roles are now decoupled.

This means that dynamic groups now support compare and membership searches without requiring dynamic roles to be configured.

Dynamic groups definitions can now be scoped with a configured subtree, for example:

set dynamic-group all = {

subtree = <c au><o groups>
object-class = dxDynamicGroupofNames
url-attr = dxMemberURL
member-attr = member
};

Certifications

CA Directory is now certified on the following platforms:

For a list of all supported operation systems, see Operating System Support.