ActiveRoles Quick Connect
version 3.5.2
Release Notes
March 12, 2008
Welcome to ActiveRoles Quick Connect
New in this Release
Resolved Issues and Enhancements
Known Issues
System Requirements
Global Operations
Getting Started
For More Information
ActiveRoles Quick Connect automates the management of Active Directory user account lifecycle based on external data, and provides an identity management solution that extends the capabilities of ActiveRoles Server beyond Active Directory. An option of ActiveRoles Quick Connect, the Scheduled Import Wizard automates the tasks of maintaining Active Directory user accounts in sync with external data sources, such as HR and ERP systems, and enables quick and efficient propagation of identity information from external data sources to Active Directory, thus lowering account provisioning workload and costs, and ensuring consistent and accurate representation of identity information in Active Directory. With the ability to create and modify user accounts based on external data, the Scheduled Import Wizard also increases security through business process integration and by reducing the amount of manual processing that must occur between systems when identity information changes (for example, when an employee joins or leaves the organization). Another option is ILM Integration, which provides the ActiveRoles Server Management Agent for Microsoft Identity Integration Server (MIIS). The Management Agent enables bi-directional synchronization of user accounts, groups and other directory data between ActiveRoles Server and MIIS. For organizations that rely on MIIS for enterprise provisioning, the ILM Integration solution facilitates the user provisioning in Active Directory based on users' identities in corporate data stores. With the ability to export identity information from MIIS to ActiveRoles Server, ILM Integration makes it possible to have MIIS populate Active Directory in compliance with the business rules and security policies defined in ActiveRoles Server. The ILM Integration component includes a deployment panel, allowing you to easily examine and adjust all the solution configuration-related characteristics in line with the rules and policies controlling the management actions that supplement identity data flows between MIIS, ActiveRoles Server, and data repositories. The deployment panel allows you to configure a wide variety of provisioning rules and policies without writing a single line of code. |
This section discusses the new features added with the maintenance release of Quick Connect 3.5.2, as compared to the initial release of version 3.5.0. For information about new features and enhancements included in ActiveRoles Quick Connect version 3.5, refer to the What's New document for ActiveRoles Quick Connect 3.5. You can access that document from the Documentation page in the ActiveRoles Server CD Autorun window. New Features Included in Version 3.5.2
|
This section provides a list of issues that were resolved in ActiveRoles Quick Connect version 3.5.2 (as compared to version 3.5.1). Fixed: Compatibility issues with ActiveRoles Server version 6.0.4. |
| This section provides a list of the currently known issues that customers may experience with ActiveRoles
Quick Connect 3.5.2. For each issue, the list includes an ID number, which identifies the issue, a brief description of the problem, and a workaround, if any exists, for the problem. The list is divided by component so that the issues related to each individual component of the product are grouped together:
CR0105217 This problem shows up if you have uninstalled the Administration Service from the computer running the Scheduled Import Wizard server-side components. In this case, the Setup program cannot update the configuration of ActiveRoles Server, which is to be performed via the Administration Service. As a result, the uninstall process cannot proceed. WORKAROUND CR0120399 This problem shows up if the ActiveRoles Server console connects by the NetBIOS name of the computer running the Administration Service. In this case, when you open the "Change Administration Service" window from the Scheduled Import Wizard user interface, the list of Administration Services is empty in that window. WORKAROUND CR0139632 This problem shows up if the account in question resides in a domain that is not registered with the ActiveRoles Server Administration Service to which the ActiveRoles Server console is connected. CR0142533 This problem shows up if you attempt to change the Target Server setting immediately after the Synchronization Agreement is created. If you do so, you may encounter the error "Cannot find Scheduled Import Wizard server-side components on 'servername'. You may need to reinstall Scheduled Import Wizard on that computer." WORKAROUND CR0142546 WORKAROUND CR0191238 WORKAROUND CR0191244 CR0191250 WORKAROUND CR0191507 CR0191513 The test of attribute flow rules does not detect an error situation where Attribute Flow is going to rename or move user accounts so that multiple accounts receive the same Distinguished Name. You must check your attribute flow settings in order to prevent this situation. CR0191658 WORKAROUND CR0192078 WORKAROUND CR0195793 CR0195796, CR0195976 CR0196555 WORKAROUND CR0197276 WORKAROUND CR0198205 This problem may occur, for example, with the rule configured to add a certain user account to multiple groups, say, Group1 and Group2. If the Synchronization Agreement has successfully added the account to Group1 but failed to add it to Group2, the "Users with group membership changed" counter is not increased by one. The counter should be increased since the user account in question has its group memberships changed. WORKAROUND You can also examine the list of errors in the lower part of the window for information on the user accounts the Synchronization Agreement failed to add or remove from groups when processing the group membership rules: In the list, click an error, if any, with the following description: "Error committing changes to AD on group membership assignment." Then, in the area above the list heading, click Details. CR0198493 WORKAROUND CR0204682 WORKAROUND CR0206475 WORKAROUND CR0207278 WORKAROUND
Important: This adjustment is lost whenever changes are made to the Active Directory Scope configuration settings of the Synchronization Agreement, so the "Retain Deprovisioned" rule needs to be manually added to the Managed Unit again once the Active Directory Scope configuration settings have been modified. CR0207581 WORKAROUND CR0208697 WORKAROUND CR0140143 WORKAROUND CR0142025 This problem shows up in the following situation. You have a rules extension (so-called "provisioning DLL") configured to create objects in the connector space based on changes to objects in the metaverse. The rules extension creates an object and then the object is exported by the ActiveRoles Server Management Agent. Later on, when importing that object, the ActiveRoles Server Management Agent returns the export-change-not-reimported error. This issue is due to the letter case that the rules extension uses when specifying the distinguished name of the object. If the rules extension uses the letter case different from that returned by the Management Agent during the import operation, the error in question occurs. For example, you encounter the export-change-not-reimported error when the rules extension specifies the entry "cn=" in lower case whereas the Management Agent returns that entry in upper case: "CN=" WORKAROUND CR0201837 WORKAROUND CR0206503 WORKAROUND CR0206729 WORKAROUND CR0207172 WORKAROUND CR0208254 WORKAROUND CR0209393 WORKAROUND |
ActiveRoles Quick Connect includes the Scheduled Import Wizard and ILM Integration components. The tables below outline system requirements for installing and running each of these components. The Scheduled Import Wizard setup prompts you to install two features: the server-side components and the client-side components. The server-side components are to be installed on the computer running the ActiveRoles Server Administration Service, whereas the client-side components are to be installed on the computer running the ActiveRoles Server console (MMC Interface). The next two table detail the system requirements for each of those two features. The hardware and software requirements for the server-side components of the Scheduled Import Wizard include:
The hardware and software requirements for the client-side components of the Scheduled Import Wizard include:
The hardware and software requirements for Quick Connect ILM Integration include:
|
This section contains information about installing and operating this product in non-English configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation. This release was not enabled and tested for international operation. Only U.S. English configurations of this product and U.S. English datasets are fully supported. Support for non-ASCII characters or non-English configurations may work appropriately, but these configurations have not been tested and this release should be used with caution in these environments. |
Contents of the Release Package The ActiveRoles Quick Connect release package is included on the ActiveRoles Server distribution CD, and contains the following product items:
Installation Procedure Use these steps to install and start working with the Scheduled Import Wizard:
Use these steps to install and start working with ILM Integration:
|
Contacting Quest Software:
|
Please refer to our Web site for regional and international office information. Contact Customer Support: Quest Support is available to customers who have a trial version of a Quest product or who have purchased a commercial version and have a valid maintenance contract. Quest Support provides around the clock coverage with SupportLink, our web self-service. Visit SupportLink at http://support.quest.com From SupportLink, you can do the following:
View the Global Support Guide for a detailed explanation of support programs, online services, contact information, and policy and procedures. The guide is available at: http://support.quest.com/pdfs/Global Support Guide.pdf |
This document contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser's personal use without the written permission of Quest Software, Inc. © 2008 Quest Software, Inc. ALL RIGHTS RESERVED. Quest, Quest Software, the Quest Software logo, Aelita, AppAssure, Benchmark Factory, Big Brother, DataFactory, DeployDirector, ERDisk, Fastlane, Final, Foglight, Funnel Web, I/Watch, Imceda, InLook, IntelliProfile, Internet Weather Report, InTrust, IT Dad, JClass, Jint, JProbe, Knowledge Xpert, LeccoTech, LiteSpeed, LiveReorg, Matrix Insight, Matrix.Net, MIQ, NBSpool, NetBase, Npulse, PerformaSure, PL/Vision, Quest Central, RAPS, SharePlex, Sitraka, SmartAlarm, Speed Change Manager, Speed Coefficient, Spotlight, SQL Firewall, SQL Impact, SQL LiteSpeed, SQL Navigator, SQLab, SQLGuardian, SQLProtector, SQL Watch, Stat, Stat!, StealthCollect, Tag and Follow, Toad, T.O.A.D., Vintela, Virtual DBA, Xaffire, and XRT are trademarks and registered trademarks of Quest Software, Inc in the United States of America and other countries. Other trademarks and registered trademarks used in this guide are property of their respective owners. If you have any questions regarding your potential use of this material, contact: Quest Software World Headquarters Web: http://www.quest.com Disclaimer The information in this document is provided in connection with Quest products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Quest products. EXCEPT AS SET FORTH IN QUEST'S TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, QUEST ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL QUEST BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF QUEST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Quest makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Quest does not make any commitment to update the information contained in this document. |