Patch-ID# 122985-01

NOTE:
***********************************************************************
READ THE TERMS OF THE AGREEMENT ("AGREEMENT") IN THE LEGAL_LICENSE.TXT
FILE CAREFULLY BEFORE USING THIS SOFTWARE. BY USING THE SOFTWARE, YOU
AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE
TERMS, PROMPTLY DESTROY THE UNUSED SOFTWARE.
***********************************************************************

Keywords: saml v2 plugin
Synopsis: RHEL2.1 RHEL3.0: Sun Java System SAML v2 plugin for Federation Services
Date: Jul/25/2006


Install Requirements: Additional instructions may be listed below                      
                      
Solaris Release: 
Note: Redhat


SunOS Release: 
Note: RHEL2.1, RHEL3.0


Unbundled Product: Sun Java System Federation Manager

Unbundled Release: 7.0

Xref: This patch available for SPARC as patch 122983 
      This patch available for x86 as patch 122984

Topic: Sun Java System Access Manager, Sun Java System Federation Manager

Relevant Architectures: linux

BugId's fixed with this patch: 6375170 6385653 6396555 6400530 6401820 6408636 6425327

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 


Note:
sun-saml2-1.0-2.i686.rpm

Problem Description:

6408636 Threading problems and performance issues during load testing.
6375170 Incorrect HTML tags on many of the JavaServer Pages (JSP) under the saml2/jsp directory. 
6385653 The Destination attribute was missing from signed top-level protocol messages.  
 
        NOTE: According to the SAML v2.0 specifications, in cases of HTTP redirect
              and POST binding, the Destination XML attribute in the root SAML
              element of the protocol message MUST contain a URL to which the sender
              has instructed the user agent to deliver the message, if the message is
              signed.
 
6396555 Federation attributes could not be written to a datastore in an Access Manager subrealm. 
6400530 Single sign-on tokens were not upgraded if the user was already authenticated by 
        the identity provider.
6401820 No support for passing down multi-valued attributes from the identity provider to 
        the service provider. 
6425327 Single Logout failed using HTTP redirect binding in a Circle-of-Trust with multiple 
        Service Providers.

Patch Installation Instructions:
--------------------------------
The following command installs a patch to a standalone machine:
 
       example# cd 122985-01
       example# ./installpatch
 
Patch Backing out Instructions:
--------------------------------
There is no generic script for backing out a Linux patch. If a lower
version of this patch installed before, you can simply re-install that 
version and then follow the postpatch instructions to redeploy AM 
applications with amconfig tool. 
 
In case, this patch is installed on top of RTM release. To remove this
patch and back to the RTM state, you will have to force reinstall RPMs 
of AM RTM bits and then again redeploy AM applications. 
 
       example# cd 122985-01/scripts
       example# ./reinstallRTM
 
This script takes the path where the AM RTM RPMs are stored as the
parameter. It installs the RTM RPMs over the patched ones. Again, you
need follow the instructions to redeploy AM applications at the end.

Special Install Instructions:
-----------------------------
For SAML v2 plugin specific patch information and patch installation
instructions, refer to the included patch release notes file, rel_notes.html,
located inside the patchID directory once the file has been unzipped.
 
The patch release notes include must read information including installation
information, redeployment instructions, instructions on how to deal with
customized auth jsp files and workarounds for known issues and limitations.

README -- Last modified date:  Tuesday, July 25, 2006

