OBSOLETE Patch-ID# 117586-13
Keywords: identity server
Synopsis: Obsoleted by: 117586-14 IS 6.1: Sun ONE Identity Server
Date: Jun/08/2005


Install Requirements: See Special Install Instructions                      
                      
Solaris Release: 8 9

SunOS Release: 5.8 5.9

Unbundled Product: Sun ONE Identity Server

Unbundled Release: 6.1

Xref: 

Topic: Sun ONE Identity Server

Relevant Architectures: sparc

BugId's fixed with this patch: 4957403 4958700 5021818 5035446 5037201 5093089 5105263 5107637 6175172 6201204 6201438 6202135 6202837 6202838 6202840 6221018 6226769 6229799 6231834 6236892 6244578 6246367 6251848 6255526 6260941

Changes incorporated in this version: 6175172 5035446 6260941 6251848

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

  /opt/$BASEDIR/libpasswd.so 
  /opt/$PRODUCT_DIR/console.war 
  /opt/$PRODUCT_DIR/docs/am_public_javadocs.jar 
  /opt/$PRODUCT_DIR/lib/AMConfig.properties.template 
  /opt/$PRODUCT_DIR/lib/am_logging.jar 
  /opt/$PRODUCT_DIR/lib/am_sdk.jar 
  /opt/$PRODUCT_DIR/lib/am_services.jar 
  /opt/$PRODUCT_DIR/lib/libamutils.so 
  /opt/$PRODUCT_DIR/locale/amAuthUI.properties 
  /opt/$PRODUCT_DIR/locale/amFederation.properties 
  /opt/$PRODUCT_DIR/password.war 
  /opt/$PRODUCT_DIR/samples/appserver/amsamples.war 
  /opt/$PRODUCT_DIR/services.war 
  /opt/$PRODUCT_DIR/share/bin/amsecuridd 
  /opt/$PRODUCT_DIR/share/bin/amunixd 
  /opt/$PRODUCT_DIR/share/bin/checkport 
  /opt/$PRODUCT_DIR/web-apps/cdsso.war
  /opt/$PRODUCT_DIR/web-apps/introduction.war 
/etc/opt/SUNWam/config/xml/amAuth.xml 

Problem Description:

4957403 Identity Server hangs due to a deadlock in NamingService
6201438 EventService should not run into a tight loop when it does not get Persistent Search Connection
6202837 No responding/crash Identity Server
6202838 Back button breaks Goto URL
6202840 Session history keeping Goto URL's around
5105263 Reauth with invalid credential should show error if enter the login page by back
5107637 Already logged in - an incorrect wording
4958700 Identity Server with Referrals auth fails
5037201 Recipient attribute should be able to set to null
6201204 HTTPS redirect in CDSSO - redirets to default http PORT 80
6221018 name field of new container does not show up on amconsole when running AM6.1 with JDK 1.4.2
6231834 Application of patch 117586-06 resulted in NullPointerExceptions
5093089 Identity Server doesn't close socket properly
6244578 AM should warn user that the browser cookie support is disabled/not available
6236892 Image/Text place holder while CDCServlet is processing the AuthNResponse after Login
6226769 Include ldapjdk.jar 4.16.1 into am_services.jar
6202135 Auth taglib emits quotes in the incorrect locations when generating URL
6246367 Due to a deadlock in EventService initializing, Identity Server hangs when restart
5021818 amLog file is reporting Filehandler errors
6229799 L10N part of amconsole webapp is gone after installing patch
6255526 performance issues when 'cookie.check' is 'true' in AMConfig
6175172 Access Manager does not work correctly from behind a proxy server
5035446 Policy subject search is displaying incorrect values from SDK Cache
6260941 AM6.1&6.2 postpatch script should modify iplanet-am-auth-login-success-url with relative URL
6251848 AMSDK does not work with AM behind loadbalancer

Patch Installation Instructions:
--------------------------------
 
For Solaris 2.0-2.6 releases, refer to the Install.info file and/or
the README within the patch for instructions on using the generic
'installpatch' and 'backoutpatch' scripts provided with each patch.
 
For Solaris 7-8 releases, refer to the man pages for instructions
on using 'patchadd' and 'patchrm' scripts provided with Solaris.
Any other special or non-generic installation instructions should be
described below as special instructions.  The following example
installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/117586-13
 
The following example removes a patch from a standalone system:
 
       example# patchrm 117586-13
 
For additional examples please see the appropriate man pages.

Special Install Instructions:
-----------------------------
 
For bug #5037201:
The following new properties have been added to AMConfig.properties.
1> The property 'com.sun.identity.saml.nameidentifier.format' will
be read by AssertionManager to get Format attribute value of
NameIdentifier. The value of this property can be any URI string
or empty string.
com.sun.identity.saml.nameidentifier.format=
 
2> The property 'com.sun.identity.saml.response.nullrecipient' will
be read by SAMLSOAPReceiver to determine if Recepient attribute should
be removed. The value of this property can be true or false. If true,
the 'Recipient' attribute of Response will not be set.
com.sun.identity.saml.response.nullrecipient=false
 
For bug #6201438:
The eventservice restart fix needs two new properties to be added to
AMConfig.properties.
1> The property 'com.sun.am.event.connection.idle.timeout' specifies
timeout value in minutes after which the persistent searches will be
restarted. Ideally, this value should be lower than the Load Balancer/
Firewall TCP timeout, to make sure that the persistent searches are
restarted before the connections are dropped. A value of '0' indicates
that these searches will no be restarted.
com.sun.am.event.connection.idle.timeout=0
 
2> The property 'com.sun.am.event.poll.sleep.time' specifies the sleep
time in milli-seconds after which persistent search idle timeout is
checked.
com.sun.am.event.poll.sleep.time=5000
 
For bug #4957403:
The jvm option '-Dcom.iplanet.am.serverMode=true' should be added to
the webcontainer's configuration descriptor server.xml file.
on IAS7.0
<jvm-options>-Dcom.iplanet.am.serverMode=true</jvm-options>
on IWS6.1
<JVMOPTIONS>-Dcom.iplanet.am.serverMode=true</JVMOPTIONS>
 
For bug #6244578:
New property 'com.sun.identity.am.cookie.check' needs to be set to
"true" in AMConfig.properties, in order to determine whether the cookie
support is enabled on the broswers. The default value is "false".
com.sun.identity.am.cookie.check=true.
 
For bug #6236892:
The following new properties, which will be read by the CDC servlet,
have been added to AMConfig.properties.
1> The property 'com.iplanet.services.cdc.WaitImage.display' needs
to be set to true to have an image displayed in the browser while
waiting for the protected page in a CDSSO scenario (default is false).
 
2> The property 'com.iplanet.services.cdc.WaitImage.name' defines the
name of the image file. The default value is waitImage.gif. The file
must be copied in the login_images directory.
 
3> The property 'com.iplanet.services.cdc.WaitImage.width' defines
the width of the image. The default value is 420.
 
4> The property 'com.iplanet.services.cdc.WaitImage.height' defines
the height of the image. The default value is 120.
 
Since the patch install script redeploys Access Manager application
war files, you might have to reapply your customizations on the jsp
files after the patch installation.
 
If you have multiple Identity Server installations, you need to do the
above on each Identity Server installation for each bug fix.
 
Once you make any changes to AMConfig.properties or server.xml, you
need to restart the Identity Server.

README -- Last modified date:  Thursday, July 21, 2005

