The web service variable resolution HTTP thread is not closing sockets on the Policy Server in a timely manner. The sockets remain in a CLOSE_WAIT state. Under heavy loads, this situation exhausted the supply of file descriptors.

Solution:

This issue is fixed.

ServerHeartbeat Thread Crash (CQ156277)

Valid on RedHat

Symptom:

The ServerHeartbeat thread crashed.

Solution:

This issue is fixed.

STAR Issue # 20872776:01

Policy Server Hung When Connection Limits Exceeded (CQ157598)

Symptom:

The Policy Server hung when its connection limits were exceeded.

Solution:

The issue is fixed.

STAR Issue # 20904378:01

FSS Administrative UI not Authenticating External Administrators Whose Passwords Contain Ampersands (CQ157596)

Symptom:

The FSS Administrative UI was not authenticating external administrators whose passwords contain ampersands (&).

Solution:

The issue is fixed.

STAR Issue # 20933409:01

MaxThreadCount Does not Accept Values Above 10 (CQ153043)

Valid on RedHat

Symptom:

The MaxThreadCount setting did not accept values greater than 10.

Solution:

The issue is fixed.

STAR Issue # 20818420:01

UseSecureCookies Parameter and Advanced Password Services (CQ153055)

Symptom:

Setting the UseSecureCookies parameter‑value to yes did not always set secure flags in the following cookies:

NPSFPSDN
NPSFPSMacros
NPSFPSSpecial
NPSFPSData

Solution:

The issue is fixed.

STAR Issue # 20716855:01

Administrative UI and FSS Administrative UI inconsistencies in 12.0.3.9 Regarding Host Configuration Object - Clusters (CQ160633)

Symptom:

The following conditions were observed:

Administrative UI does not display the "Failover Threshold Percentage" or "Failover Threshold" for a Host Configuration Object created in the FSS Administrative UI on the Clusters Tab.
Modification of the "Failover Threshold Percentage" in the Administrative UI for the host configuration object incorrectly creates a parameter on the General Tab in the FSS Administrative UI with an incorrect name of "FailOverThreshold".
Modifying the "Failover Threshold Percentage" value on the Cluster Tab of the FSS Administrative UI does not appear in the "FailOverThreshold" parameter on the General Tab. The FailOver Threshold value does not appear in the Administrative UI.
Modification of the "FailOverThreshold" parameter on the General Tab of the FSS Administrative UI does not modify the "Failover Threshold Percentage" on the Clusters Tab.
"FailOverThreshold" parameter from General Tab of the host configuration object in the FSS Administrative UI is not appearing in the "General" section.

Solution:

These issues are fixed.

STAR Issue # 20736264:01

Running Policy Server 12SP3CR09 on Policy Store 6.0SP5CR09, Policy Server crash randomly (CQ158841)

Valid on Solaris

Symptom:

Policy Server version 12.0.3.9 crashed randomly when using a 6.0.5.9 policy store.

Solution:

This issue is fixed.

STAR Issue # 21052167:02

OneView is showing inconsistent values for HItRate (CQ155300)

Symptom:

The OneView monitor showed inconsistent values for HItRate.

Solution:

This issue is fixed.

STAR Issue # 20863232:01

Incorrect ServletExec Reference (161421)

The Policy Server Installation Guide has been updated with the correct reference to ServletExec.

STAR Issue: 21123153;2

SQL Server Authentication Information for Report Servers (161427)

The Policy Server Installation Guide has been updated to include SQL Server authentication mode considerations for the Report Servers.

STAR Issue: 21123153;2

Extending Policy Store Schema Documentation (161413)

Symptom:

The CA SiteMinder® Upgrade Guide incorrectly stated that the policy store schema must be upgraded.

Solution:

The documentation has been revised to state that policy store schema must be extended for policy store objects that 12.5 requires. A schema upgrade is not required.

STAR Issue: 21101867

More information:

Extend the Policy Store Schema

Policy Store Upgrade Documentation (160518)

Symptom:

The CA SiteMinder® Upgrade Guide was missing policy store upgrade steps.

Solution:

The documentation has been revised to state that:

You are required to stop all Policy Servers before beginning a policy store upgrade.
You are required to start all Policy Servers after completing a policy store upgrade.

STAR Issue: 21132271

More information:

How to Upgrade an r6.x Policy Store

How to Upgrade an r12.x Policy Store

RadiantOne Incorrectly Listed as Supported

Symptom:

The Implementation Guide incorrectly listed the Radiant Logic, Inc. RadiantOne™ Virtual Directory Server

Solution:

The incorrect reference no longer appears in the guide.

STAR issue: 21123716–1

MySQL File Location Incorrect (159256)

The Policy Server Installation Guide has been updated with the correct location for the MySQL.sql file.

Administrative UI Deletes Users from Policy Objects When Modifying Realms or Policies After Importing r6.x Policy Store (157701)

Symptom:

Administrative UI deletes users from policy objects when modifying realms or policies after Importing an r6.x policy store.

Solution:

This is no longer a problem.

STAR issue: 20993077-1

Boolean User Directory Attribute Mappings in Application Object Roles Fail (154130)

Symptom:

User directory attribute mappings defined in Application object roles that include boolean expressions fail to resolve.

Solution:

This is no longer a problem.

STAR issue: 20881853-1

CA SSO (smauthetsso) Custom Authentication Scheme Fails in FIPS Mode on Windows (150671/164657)

Symptom:

Authentication using the CA SSO (smauthetsso) custom authentication scheme fails in FIPS mode on Windows.

Solution:

This is no longer a problem.

STAR issue: 20736967

Dead Lock Condition in the LDAP Authentication Layer (162301)

Symptom:

An error in the LDAP authentication layer results in a dead lock condition.

Solution:

This is no longer a problem.

STAR issue: 21181025;1

Host Registration Fails Using smreghost Fails When Pointing to an r6.x Extended Policy Store (164607)

Symptom:

The Policy Server does not allow host registration using smreghost when pointing to an r6.x extended policy store.

Solution:

This is no longer a problem.

Kerberos Authentication Fails for Users With a Large Number of Group Memberships in Active Directory (154373/164659)

Symptom:

Kerberos authentication fails for users who have a large number of group memberships in a Microsoft Windows Active Directory.

Solution:

This is no longer a problem.

STAR issue: 20906310-1

OpenID Authentication Fails When Multiple User Directories are Configured in a Domain (162951)

Symptom:

OpenID authentication fails with the following error when multiple user directories are configured in a domain: "nonce verification failed."

Solution:

This is no longer a problem.

STAR issue: 21175148;1

Policy Server Cannot Authenticate Users from User Directories with Password Policies Using an r6.x Policy Store (160138)

Symptom:

Policy Server cannot authenticate users from a user directory with password policies using an r6.x policy store.

Solution:

This is no longer a problem.

STAR issue: 21112688;1

Policy Server Configuration Wizard Fails When Using Drives Other Than C: on Windows (153459)

Symptom:

The Policy Server configuration wizard fails when using Disk drives other than C: in the Windows platform.

Solution:

This is no longer an issue.

STAR issue: 20885033;1

Policy Server Configuration Wizard Shows the Incorrect Minimum Required JDK/JRE Version (157948)

Symptom:

The Policy Server configuration wizard incorrectly shows the minimum required JDK/JRE version as 1.6.0.30.

Solution:

This is no longer a problem.

STAR issue: 20991445

Policy Server Does Not Properly Protect Resources When Using an r6.x Extended Policy Store

Symptom:

The Policy Server incorrectly marks resources as not protected when using an r6.x extended policy store.

Solution:

This is no longer a problem.

STAR issue: 21173076-1

Policy Server Exits Abnormally on Linux When Identity Manager Integration is Enabled (151725/150968)

Symptom:

When attempting to configure an Identity Manager directory on a Linux Policy Server, the directory creation operation fails and the Policy Server exits abnormally.

Solution:

This is no longer an issue.

STAR issue: 20679358

Policy Server Installer Fails to Configure IPlanet Web Server/ASF Apache for FSS UI During Installation (155738)

Symptom:

The Policy Server installer fails to configure IPlanet web server/ASF Apache 32-bit for FSS UI when the "Web Server" option is selected during an installation.

Solution:

This is no longer a problem.

STAR issue: 20982339;1

Policy Server Installer Hangs When Encryption Key Contains Dollar Sign ($) Characters (160825)

Symptom:

The Policy Server installer hangs if the encryption key contains the dollar sign($) character.

Solution:

This is no longer a problem.

STAR issue: 21136554-1

Policy Server Race Condition Prevents Updates to Agent Configuration Objects Using the Java Policy Management API (154521/164660)

Symptom:

A Policy Server race condition can prevent updates to Agent Configuration Objects using the Java Policy Management API.

Solution:

This is no longer a problem.

STAR issue: 20932855

XPSDDInstall Abnormally Terminates When Upgrading from r12 SP3 to r12.5x Policy Server (158655)

Symptom:

The XPSDDInstall utility abnormally terminates when upgrading from the Policy Server from r12 SP3 to r12.5x.

Solution:

This is no longer a problem.

STAR issue: 21077994-01

FSS Applet UI Did Not Launch in RH5 [157387]

Symptom:

The FSS Applet UI did not launch in RH5. The FSS UI was not launched if it did not have the Policy Server environment variables.

Solution:

This problem has been fixed.

Star issue 20982339;1

FSS UI Does Not Allow More Than 10 IP Addresses in a Policy Definition (158631/163943)

Symptom:

The FSS UI does not allow more than 10 IP addresses in a policy definition.

Solution:

This is no longer a problem.

STAR issue: 20318453

Authorization Fails for Users in ODBC Directories Configured With UNION-based Query Schemes (159354)

Symptom:

Authorization fails for users in ODBC directories configured with UNION-based query schemes.

Solution:

The Policy Server logic has been optimized to execute as follows when authenticating users in an ODBC database:

Validate the distinguished name (DN) with the SQL query configured in "InitUser". This steps checks whether the DN is a user or not.
If the above does not produce result, execute the SQL query configured in "GetGroupProp". This steps checks whether the DN is a user or not.

This optimization prevents the Policy Server from executing a UNION-based SQL query that is configured in "Get User/Group" for every "user" authentication.

STAR issue: 21097422-1

Policy Server Cannot communicate over SSL with LDAP Directory Servers That Specify an AKI (Authority Key Identifier) Attribute in the Certificate (160293/164029)

Symptom:

The Policy Server cannot communicate over SSL with LDAP directory servers that specify an AKI (Authority Key Identifier) attribute in the certificate.

Solution:

This is no longer a problem.

STAR issue: 21125449-1

Administrative UI and smkeytool Fail to Properly Import and Store Certificates Over 1024 Characters to Active Directory Policy Store (160848)

Symptom:

Administrative UI and smkeytool fail to properly import and store certificates over 1024 characters to an Active Directory policy store.

Solution:

The Administrative UI and the SiteMinder key tool (smkeytool) are now able to import and store the certificates whose key length is greater than 1024 characters in the policy store.

STAR issue: 21131704;1

Policy Server Configuration Wizard Breaks the FSS UI on Windows on Windows 2008/Windows 2008 R2 (157938)

Symptom:

The Policy Server configuration wizard does not check for the CGI IIS role as a prerequisite for configuring the IIS web server and breaks the FSS UI.

Solution:

This is no longer a problem. The Policy Server installer now checks for the CGI IIS role in the Windows.

STAR issue: 20991445

Policy Server Abnormally Terminates Processing OnAuthAttempt Rules Bound to an Application Object (161793)

Symptom:

If a user provides invalid credentials, the Policy Server abnormally terminates when processing an OnAuthAttempt rule that is bound to an Application object.

Solution:

This is no longer a problem,

STAR issue: 21161067-1

Policy Server Fails to Authorize Users in Active Directory if Load Balancing is Configured in the Administrative UI (160607)

Symptom:

If load balancing is configured in the Administrative UI, the Policy Server does not authorize users in Active Directory.

Solution:

This is no longer a problem.

STAR issue: 21135327-2