Release Summary › New and Changed Features › New and Changed Features in SP9

New and Changed Features in SP9

DXmanager

Since CA Directory r12 SP2 was shipped in 2010, DXmanager has undergone some major internal restructuring. It now supports most of the features and commands of CA Directory.

DXmanager has been enhanced in the following areas since the last release:

• Configuration

  The DXmanager centralized configuration has been extensively enhanced to support the following CA Directory command areas:

  • Knowledge
  • Limits
  • Logging and Tracing
  • Password Policy
  • Settings
  • SSL

  The full list of commands that are now supported in DXmanager is in Commands Used in DXmanager in the Reference.

  When you upgrade from a previous version of DXmanager, migrate the settings from the configuration text files into DXmanager. Plan this carefully, using the instructions in Upgrading DXmanager in the Installation Guide.

• Security

  DXmanager now uses Tomcat 6.0.32, which addresses a number of vulnerabilities of the web server.

  DXmanager user passwords are no longer stored in clear text. These are now protected using a SHA-512 digest. Password also supports a wider range of special characters on UNIX. On Windows, some special characters remain unsupported due to Windows installer command line limitations (these include \n, \r, <, >, ^, &, ", | and %). The installing user will be prompted when entering an unsupported character.

  The certificates used by DXmanager have been refreshed. In addition, the DXadmind personality certificate has its own root certificate authority to remove conflicts with DXcertgen (trusted.pem).

  Applets have been correctly signed to remove "unsigned/signed Java runtime" and "expired certificate" warnings.

• Stability

  A number of DXmanager Applet & GUI stability issues have been addressed that could only be resolved with a browser restart.

  A number of DXmanager server stability issues that could only be resolved with a DXwebserver restart have been fixed.

  DXmanager no longer leaks file descriptors when deploying configuration changes.

  CA Directory now tolerates commands configured by both text-based files (.dxc) and DXmanager (alarm rather than server not starting).

  DXmanager has been enhanced to ensure CA Directory uptime during migration from DXmanager r12 SP2.

More information:

Features Not Supported by DXmanager

Default of max-op-size

The default of max-op-size has been increased from 200 to 10000.

More information:

set max-op-size Command

LDAP Tree Delete Control Is Supported

CA Directory supports the LDAP Tree Delete Control.

More information:

Tree Delete Control

Event Timing when Un-Indexing Attributes

CA Directory now uses "event timing" when unindexing attributes.

If the time taken is more than a millisecond, the actual time taken is reported as an "event" report if event tracing has been enabled.

Also, the get cache command shows more information for indexes. In addition to the number of values indexed, it also shows the number of distinct values and the number of times the index was used to evaluate a search.

Limit Access to Ports 1 - 1024 (UNIX)

The setuid mode for the dxserver and dxadmind binaries is now optional. If you need to access ports <= 1024, you can set this during installation or upgrade.

More information:

Allow CA Directory To Use Ports 1-1024

Certifications

CA Directory is now certified on Solaris SPARC 11. For a list of supported operation systems, see DIR_12SP9-Directory OS Support.