8.5.6

PowerBroker Identity Services Open 8.5.6.375

Released: October 2017

Bug Fixes

• 120257 - domainjoin-gui is not being built
• 117866 - [EDR-44928-44848] Unable to connect to samba share with hostname
• 117374 - Solaris: pbis fails when the FIFOFS inode exceeds UINT_MAX. Switch to use Fstat64 if available

8.5.5

PowerBroker Identity Services Open 8.5.5.372

Released: October 2017

Features

• 110163 - Enable ldap debugging messages for LSASS
  • Set level to TRACE
• 107332 - Consolidate all 3rd Party License files into a data folder
• 101019 - ADTool: new-computer - new --spn option
• 100070 - Config tool: New ServicePrincipalName (SPN) option
• 92911 - [EDR-42774] Allow syslog facility to be configured
• 91702 - Domainjoin-cli prompts for missing parameters
• 91701 - Simplified pbis install

Bug Fixes

• 106865 - [EDR-43991] enum-members along with --user option is returning the user objects multiple times
• 104880 - [EDR-43991] Expired cache causes duplicate members to be listed
• 95452 - [EDR-43370-43645] connection resets when adding users via adtool en masse
• 85698 - OpenSSL library update - 1.0.2l
• 77390 - Connection refused during startup causes PBIS join status Unknown
• 53278 - [EDR-40667] Adjust lwsmd shutdown sequence to occur after sshd

8.5.5-beta.1

PowerBroker Identity Services Open 8.5.5.360 - Beta

Released: Sept 2017

Features

• 110163 - Enable ldap debugging messages for LSASS
  • Set level to TRACE
• 101019 - ADTool: new-computer - new --spn option
• 100070 - Config tool: New ServicePrincipalName (SPN) option

Bug Fixes

• 106865 - [EDR-43991] enum-members along with --user option is returning the user objects multiple times
• 104880 - [EDR-43991] Expired cache causes duplicate members to be listed
• 95452 - [EDR-43370-43645] connection resets when adding users via adtool en masse
• 77390 - Connection refused during startup causes PBIS join status Unknown
• 53278 - [EDR-40667] Adjust lwsmd shutdown sequence to occur after sshd

8.5.4

PowerBroker Identity Services Open 8.5.4.334

Released: June 2017

Features

• 98512 - update-dns: added option to specify dnsserver
• 87581 - [EDR-42787] Add support for Suse 11 PPC
• 75481 - Add a switch to adtool to output a keytab file for computer accounts
• 54837 - Add a switch to adtool to output a keytab file for user accounts
• 45519 - Apache 2.4 Support

Bug Fixes

• 100591 - OpenSuse 13.2: Domainjoin resumable host name error
• 91964 - [EDR-42899] AIX EventLog Getting error: lsass: [eventlog] Failed to write records. Error code [5]
• 91918 - 32 bit rpm upgrade package are not signed - fails to install
• 88932 - [EDR-42814] Install should continue with warning after SELinux issues when not running enforcing
• 88248 - [EDR-42809] lwsmd daemon performance improvements on AIX with large numbers of users
• 80555 - adtool move-object missing new-line from stdout message
• 76688 - Endless loop in LWIO list handling
• 74998 - gpagentd starts up eventfwd but doesn't set it to autostart
• 71764 - [EDR-41766] DB2 crashing with PBIS
• 65617 - [EDR-41313] /opt/pbis/bin/config throws an error if the configuration is done prior to the domain join
• 60433 - joining a different domain without leave can breaks future upgrades
• 54811 - Computer name 15 character limit should not be applied on all attributes

8.5.3

PowerBroker Identity Services Open 8.5.3.293

Released: March 2017

Bug Fixes

• 85373 - Solaris: EULA doesn't appear when running the .sh file without install as a parameter
• 84274 - fix group membership lookup for ldap queries in PBIS Open
• 82902 - [EDR-42510] can not change root passwd with PBIS 8.5 installed on Solaris 10
• 81441 - [EDR-42389] Password reset not workong on Solaris 11
• 77365 - Update OpenSSL to 1.0.2j
• 77146 - Adtool core dumps with Solaris 10
• 59472 - [EDR-41023] wrong value for $LOGNAME
• 59471 - [EDR-41022] Problems with AIX LPM crashing lwsmd

Features

• 71766 - [EDR-41773] support for RHEL on IBM System z (z/linux s390)

8.5.2

PowerBroker Identity Services Open 8.5.2.265

Released: December 2016

Bug Fixes

• 77505 - [EDR-42142] Issues migrating PBIS agent to RODC site - netlogon plugin
• 72263 - ADTool does not handle commas in user arguments
• 71797 - UserMonitorCheckInterval range is incorrectly mentioned in config tool
• 71767 - Update OpenSSL Libraries to 1.0.2i
• 71762 - [EDR-41732] Creating users with adtool does not set "require password at next login"
• 70096 - Add support for Samba 4.x
• 74987 - gpagentd does not tell user monitor when refresh interval changes
• 68080 - [EDR-40067] - Group policy agent hangs during upgrade
• 65836 - Mac: Upgrade from 8.3.4 to 8.5 doesn't retain the domain join state
• 52726 - adtool search-user also returns computer accounts
• 40410 - [EDR-39888] Usermonitor exits on all issues

Features

• 72602 - Mac OSX 10.12 Sierra Support
• 66917 - ADTool add option to set/un-set any attribute on an entity

8.5.1

PowerBroker Identity Services Open 8.5.1.206

Released: September 2016

Bug Fixes

• 41074 - [EDR-40857] lsass sometimes fails to load the AD provider on multi-NIC systems
• 50398 - [EDR-40702] When using Pam faillock on domain join pam files must be moved in and out to allow the join.
• 64463 - Domainjoin setname Cent 7.1 returns ERROR_BAD_COMMAND
• 65001 - Rebranding to new BT Logo
• 70422 - Fedora 22+ - PBIS can not parse krb5.conf includedir by default

8.5.0

PowerBroker Identity Services Open 8.5.0.153

Released: August 2016

Features

• 54545 - Sign ppc64le packages
• 54544 - Sign ppc64 packages
• 47079 - [EDR-40156] Add option to LWSM to persist logging settings
• 46766 - [EDR-40156] Need the ability to permanently set log level on service
• 30198 - [EDR-39747] Support for Mac OSX 10.11
• 29006 - [EDR-39680] Blacklist specific DCs

Bug Fixes

• 65452 - ad-cache --delete-all should succeed when a zero way trust domain is offline
• 65217 - lwsmd is running under unconfined_exec_t and should be bin_t
• 64974 - CentOS 6.x machines semodule pbis version not correct
• 59474 - [EDR-41016] AIX: Duplicate Files in different packages
• 57751 - Remove error messages from Debian install logs: regshell (error = 87 - ERROR_INVALID_PARAMETER)
• 54930 - Fix exit status when calling domainjoin-cli with invalid options
• 54929 - Allow PBIS Local Provider groups and users to be provisioned with IDs under 1000
• 54876 - [EDR-40778] Installing on RHEL7 PPC64 fails when CPUs are offline
• 54766 - [EDR-40773] SUCCESS message should be included in the logs that domainjoin-cli creates
• 54456 - [EDR-40751] Support for Single Label Domains (SLD) in domainjoin-cli
• 54205 - remove RHEL specific naming from the PPC64 package folders
• 54033 - Update OpenSSL Libraries to latest version
• 53630 - PBIS agent installs should not include administration documentation
• 53613 - Fix the lock file location on AIX
• 53509 - [EDR-40671] Fix file permissions for lwsmd service file - 755
• 52096 - [EDR-40787] Clearing cache takes domain offline in one-way trust scenario
• 51701 - [EDR-40534] Fix for various SELinux error messages for /var/lib/pbis/.lsassd and postfix
• 51416 - Update adtool reset-user-password --password - to correctly accept STDIN input
• 50387 - [EDR-40451] AIX lsuser ALL only shows local users
• 50249 - On 8.3.4 local users on Debian systems could not change their password
• 50089 - [EDR-40388] Use the Default Domain Separator Character when processing Policies like RequireMembershipOf
• 50083 - [EDR-40378] Allow local users to login if lsass is in a hung state
• 48939 - Correction to the pam-auth-update list to refer to Powerbroker Identity Services
• 48055 - Fix the lsa usage description to list modes in alphabetical order
• 48054 - Fix the find-objects help usage to include all available modes
• 46504 - Updated Java SSO support
• 46313 - [EDR-40140] Fix adtool to set the correct attributes to allow domain join to succeed for computer accounts
• 46260 - [EDR-40067] LWSMD Hangs during shutdown
• 46079 - TrustEnumerationWait setting is missing in Platform 7
• 46076 - Ensure invalid values for config parameters (e.g. CacheEntryExpiry) do not crash the AD Provider
• 46004 - [EDR-40078,EDR-40434,EDR-40572] Ensure user-ignore, group-ignore, user-override and group-override are not overwritten when upgrade is performed
• 46003 - [EDR-40182] Fix issue with adtool reset-user-password returning error 700086
• 46076 - Ensure invalid values for config parameters do not crash the AD Provider
• 47681 - systemd: Ignoring invalid environment
• 40778 - [EDR-39902] RHEL7: "logger 2>&-" generates a coredump when pbis is installed
• 30216 - [EDR-39748] Fix excessive syslog messages on RHEL pam stack with unix_chkpwd

Notice

• Documentation has been removed from the agent installs.