7.2.0-ISS-SDI-FP0007

1 ABOUT THIS FIXPACK

This fix pack can be applied over SDI 7.2.0 GA or SDI 7.2.0 GA with any previous fix pack level on all supported platforms for SDI 7.2.0.

Consult the readme file 7.2.0-ISS-SDI-FP0007_README.html for complete instructions and information.

2 Fixes
==================

2.1 Fixes included in Fix Pack 1
====================================
APAR Description

IO20596 TDISRVCTL FAILS WITH CTGDJB125E
IO20602 THE HTTP SERVER CONNECTOR DOES NOT DISPLAY THE WORK OBJECT DATA IN THE HTTP.BODY AS EXPECTED.
IO20656 AXIS2WSCLIENT FUNCTION COMPONENT STACK OVERFLOW
IO20664 NOCLASSDEFFOUNDERROR WHEN USING TDISRVCTL
IO20895 NOTES CONNECTOR NOT RETURNING HANDLE TO CURRENTLY READ DOCUMENT
IO21045 TDISRVCTL IS RETURNING AN ERROR
IO21203 THE LOG4J LOGGER FAILS TO APPEND TO LOG FILE AFTER FIRST ASSEMBLYLINE EXECUTION
IO21299 PROTECTED PROPERTIES STORED IN CLEAR TEXT AFTER DOWNLOAD FROM SERVER
IO21296 DOMINOUSERCONNECTOR IS UNABLE TO CREATE USERS WHOSE FULL NAMES DIFFER ONLY FOR THE ORGANIZATION
IO21471 RXA 2.3 JARS UPDATED to 2.3.0.9

2.2 Fixes included in Fix Pack 2
====================================
IO21728 HTTPSERVER CONNECTOR CRASHING WITH INCOMPLETE TRAILING ESCAPE
IO21861 ASSEMBLYLINE POOL NULLPOINTEREXCEPTION WHEN COM.IBM.DI.SERVER.PERFSTATS IS ENABLED.
IO20951 ECLIPSE PLUG-IN FAILS INSTALLATION
IO21911 REMOTECOMMANDLINE FC USING SYSTEM USER
IO22070 TDI TPAEIFCHANGEDETECTIONCONNECTOR FAILS WITH A COM.IBM.DB2.JCC.C.SQLEXCEPTION
IO22088 DSMLV2SOAPSERVERCONNECTOR THROWS ILLEGALARGUMENTEXCEPTION AND STOPS
IO22068 THREE BACKSLASH CHARACTERS APPEAR WITHIN DN WHEN HANDLING SPECIAL CHARACTERS
IO22241 ASSEMBLY LINE CONNECTOR ONLY ALLOWING ITERATOR MODE
IO22100 TARGET USER RDN ATTRIBUTE IS NOT CUSTOMIZABLE

2.3 Fixes included in Fix Pack 3
====================================
IO22674 THE DSMLV2SOAPCONNECTOR THROWS A JAVA.LANG.CLASSCASTEXCEPTION:[B INCOMPATIBLE WITH JAVA.LANG.STRINGBUFFER ERROR
IO22711 THE TDI SERVER DOCUMENT DOES NOT MANAGE THE ACTIVEMQ MANAGEMENT AND ACTIVEMQ TRANSPORT PORTS CORRECTLY
IO22799 IBMDIRECTORYSERVERCHANGELOGCONNECTOR DOES NOT RETURN THE TARGETDN WHEN MERGE MODE = "RETURN ONLY CHANGED DATA"
IO22976 DOMINO CHANGE DETECTION CONNECTOR CRASHES SDI/TDI AND DOMINO SERVER WHEN CONNECTING TO DOMINO SERVER V9.0 OVER IIOP SESSION
IO22999 COMPLEXTYPEGENERATORFC AND JDK 7 FAILS TO BUILD JAR
IO23212 THE VIRTUAL DIRECTORY (VIRTDIR) EXAMPLE FAILS: "ERROR WHILE INITIALIZING SYSTEM STORE FOR PAGING SUPPORT"
IO23213 THE EXCEPTION JAVA/LANG/OUTOFMEMORYERROR "FAILED TO CREATE A THREAD" RECEIVED USING DOMINO CHANGE DETECTION CONNECTOR
IO23350 SDI DERBY STARTING WITH SYSTEM JVM
IO23298 THE SANDBOX RECORD/PLAYBACK FUNCTION DOES NOT WORK
IO23352 A JAVA.LANG.STRINGINDEXOUTOFBOUNDSEXCEPTION MAY OCCUR WHEN USING THE ITIMAGENTCONNECTOR
IO23353 THE ITIMAGENTCONNECTOR DOES NOT SEND A DELETE REQUEST TO THE DAML AGENT AS EXPECTED
IO23318 THE TDISRVCLT UTILITY FAILS TO READ THE 'ITERATESTATEKEY' VALUE SET BY A CHANGELOG CONNECTOR
IO23650 INCORRECT TDI_SOLDIR
IO23651 THE LDIFPARSER IS NOT PROPERLY PARSING THE CR CHARACTER
IO23639 SCHEDULER IGNORING SERVER OPTION -M (SIMULATION MODE)
IO23653 DSMLV2SOAPCONNECTOR IS NOT PASSING REQUESTID ATTRIBUTE AS PART OF THE < BATCHREQUEST > TAG
IO23654 THE TDISRVCTL -OP STATUS COMMAND DOES NOT LIST ALL CONFIGS RUNNING, ALTHOUGH THE ASSEMBLYLINES ARE LISTED
IO23724 FXTAG FILE FROM FIXPACKS HAVE INVALID XML FORMAT FOR THE FIXID TAG
IO23657 PERFORMANCE ISSUES IN SDI 7.2 FP 2 WITH PROCESSING JAVASCRIPT
IO23685 FLOW SIMPLE ATTRIBUTE MAPPING IN FDS
IO23823 TDISRVCTL UTILITY FAILS TO CONNECT TO TDI SERVER
IO23824 TDI PASSWORD PLUGIN ENCRYPTION RESULTS IN WRONG ECRYPTED DATA IN MULTIPLE LDAP SYNC SCENARIO.
IO23817 TIMERCONNECTOR DOES NOT CORRECTLY WORKS WITH MOSCOW TIME
IO23878 DELTA ENGINE FAILS AFTER FIXPACK INSTALL

2.4 Fixes included in Fix Pack 4
====================================
IO22097 STATEMENT 'CONTINUE' ISSUE WITHIN A WHILE LOOP
IO24040 SDI 7.2 RUNNING ON FDS INCORRECTLY IMPORTS THE CN OF A PERSON FROM AD
IO24366 UNKNOWN MEMBER 'GETSTRING' IN JAVA CLASS 'JAVA.LANG.STRING'
IO24497 WEAK CIPHERS CAUSE CONNECTION PROBLEMS FOR COMPONENT USING RXA RESOURCES
IO24535 STARTING THE CONFIG EDITOR MAY UPDATE THE PROPERTY FILE WITH OLD VALUES
IO24648 HTTP CLIENT CONNECTOR LACKS THE "HOST" HTTP-HEADER IN THE "CONNECT" REQUEST
IO24674 AXIS EASY WEB SERVICE SERVER CONNECTOR REMOVE THE NEED TO AUTHENTICATION WHEN REQUESTING THE WSDL
IO24672 SAP ALE IDOC CONNECTOR THROWS EXCEPTION ORG.XML.SAX.SAXPARSEREXCEPTION:INVALID BYTE 2-3 BYTE UTF8 SEQ
IO24690 THE INCREMENTAL SYNCHRONIZATION IN FDS UNEXPECTEDLY DELETES USERS FROM SDS AND ISAM
IO24776 DELTA STORE HAS NAMING ISSUES WHEN USING MIXED CASE
IO25931 PROJECT FILES ARE NOT TRANSLATED CORRECTLY
IO24999 DOMINO CHANGE DETECTOR CONNECTOR ISSUES WITH DOMINO 9
IO25914 JMSCONNECTOR DOES NOT RECOGNIZE A BYTE ARRAY IN THE "MESSAGE" ATTRIBUTE OF THE CONN ENTRY
IO25617 XML PARSER GENERATES XMLSTREAMEXCEPTION, NAMESPACE <X> HAS NOT BEEN BOUND TO A PREFIX
IO25212 SQLEXCEPTION: INVALID PARAMETER: UNKNOWN COLUMN NAME TABLE_NAME. ERRORCODE=-4460, SQLSTATE=NULL
IO25282 COMPROXY.DLL FAILS TO CAPTURE EXCEPTION MESSAGE
IO25906 UNABLE TO GET SPECIAL CHARACTERS FROM SYSTEM.SHELLCOM
IO25907 ORACLE DIRECTORY SERVER TIMEOUT IS NOT RECOGNIZED BY THE SUN DIRECTORY CHANGE DETECTION CONNECTOR
IO25908 THE 'DROP TABLE CANNOT BE PERFORMED ON IDI_DS_TABLE' ERROR OCCURS IN THE "SERVER PROPERTY STORE EDITOR"
IO25909 GETNEXTDOCUMENT(OLDDOC) METHOD IN NOTES CONNECTOR RETURNS OLDDOC INSTEAD OF THE NEXT DOCUMENT
IO25910 SAP JCO V3 CONNECTOR - CLASSNOTFOUND ERROR
IO25911 THE JCO.CLIENT.PASSWD PASSWORD VALUE IS SHOWN IN CLEAR TEXT
IO25912 DELTA VALUES PERTAINING TO DOUBLE AND INTEGER TYPE ARE NOT UPDATED IN TARGET RESOURCE
IO25863 KEEPALIVE FOR THE LDAP SERVER CONNECTOR
IO25915 ORACLE DIRECTORY SERVER TIMEOUT IS NOT RECOGNIZED BY THE SUN DIRECTORY CHANGE DETECTION CONNECTOR
IO25916 SERVER IGNORES CERTIFICATE ALIAS DEFINED FOR API.KEY.ALIAS PARAMETER
IO25885 SAP COMPONENT SUITE NO MORE WORKING WITH SAP JCO GREATER 3.0.14
IO25887 NO TYPE=B CONNECTION POSSIBLE WITH SAP COMPONENT SUITE
IO25919 IBM DIRECTORY SERVER CHANGELOG CONNECTOR FAILS TO FIND CHANGELOG NUMBER
IO25920 DASHBOARD 'LDAP SERVER AUTHENTICATION' FAILS TO ENFORCE GROUP MEMBERSHIP
IO25921 DASHBOARD AUTHENTICATION UNKNOWINGLY DISABLED
IO25922 SUN DIRECTORY CHANGE DETECTION CONNECTOR FAILS TO RETURN OPERATIONAL ATTRIBUTES
IO25923 IBM DIRECTORY SERVER CHANGELOG CONNECTOR DOES NOT RECONNECT AFTER TIMEOUT
IO25956 HOW TO USE PROXY WITH AXIS2WSCLIENT FC
IO25924 INVOKESOAPWS FUNCTION COMPONENT FAILS WITH A 'CONNECTION RESET' DUE TO AN INVALID 'SOAPACTION' HTTP HEADER
IO25925 HTTPCLIENT CONNECTOR FAILS TO CONNECT TO SERVER REQUIRING SNI EXTENSION IN TLS
IO25987 THE CONN OBJECT IS FOUND AS UNDEFINED
IO25989 PROBLEM PARSING COMPONENT DEFINATION FILE IDI.INF
IO25443 LARGE NUMBER OF 'COMMUNICATION ERROR' MESSAGES SEEN WITHIN A SECOND WHEN THE ENDPOINT IS NOT REACHABLE.

2.5 Fixes included in Fix Pack 5
====================================
IO25913 AMC AND AM SUPPORT FOR TLS COMMUNICATIONS
IO26269 XML PARSING PROBLEM OCCURS READING CONFIGURATION FILES

====================================

IO26846   NTLM AUTHENTICATION FOR HTTP CLIENT CONNECTOR
IO27043   THE AXIOM LIBRARY CLASSIFIES WHITE SPACE AS "TEXT_NODE", WHILE IT SHOULD HAVE USED "SPACE_NODE"
IO27049   SUN DIRECTORY CHANGE DETECTION CONNECTOR FAILS AGAINST ORACLE UNIFIED DIRECTORY 12G SERVER
IO27003   PACKET DUMP DATA APPEARS IN NON-DEBUG LOG OF LDAP SERVER CONNECTOR
IO26915   TOLOCALELOWERCASE([LOCALE]) DOES NOT TAKE OPTIONAL PARAMETER 'LOCALE'
IO27032   HTPCLIENTCONNECTOR CANNOT CONNECT WITH NTLM; RETURNS TWO WW-AUTHENTICATE" HEADERS
IO27065   PROBLEM WITH DELTA TDI AND AD CHANGE LOG CONNECTOR
IO26914   CONFIGURATION XML FILE SHOWS PASSWORD FIELD ENCRYPTED VALUE WHEN INHERITING FROM EXTERNAL PROPERTY
IO26984   HTTPSERVERCONNECTOR WILL TERMINATE AL ON THE "%" CHARACTER PASSED AT THE END OF URL
IO26882   JMS CONNECTOR ACCEPTS ONLY PREDEFINED VALUES FOR "SSL CIPHERSUITE" PARAMETER
IO26451   JAVACLASSFC FAILS WITH 'ENTRY NOT FOUND
IO26653   AXIS2 WS CLIENT FC, SETTING TIMEOUT VALUE
IO27116   FDS - INITIAL SYNCHRONIZATION FOR GROUP FAILS
IO27117   FDS - INCREMENTAL SYNCHRONIZATION FOR GROUP FAILS WITH [LDAP:ERROR CODE 32 - NO SUCH OBJECT]
IO26891   TDI ISSUE WITH SUB AL AFTER HANDLED ERROR
IO27121   THE JDBCSELECT PARAMETER IS INCORRECTLY USED IN LOOKUP MODE

IO27118  FDS - LOG STATEMENT REFERS TO 'UNKNOWN' HOOK
IO27650  THE FEDERATED DIRECTORY SERVER (FDS) INCREMENTAL SYNCHRONIZATION FAILS TO TIMEOUT
IO27216  SAP ABAP APPLICATION SERVER FUNCTION COMPONENT (SAPR3RFCFCV3) FAILS TO RETURN JCO EXCEPTION TO THE ASSEMBLYLINE ERROR OBJECT
IO27288  TOISOSTRING() DOES NOT CONFIRM TO THE TOISOSTRING() METHOD DEFINED IN LATER ECMASCRIPT VERSIONS.
IO26915  TOLOCALELOWERCASE([LOCALE]) DOES NOT TAKE OPTIONAL PARAMETER 'LOCALE'
IO27412  CONFIGURATION EDITOR ABORTS WITH 'UNHANDLED EVENT LOOP EXCEPTION - JAVA.LANG.STACKOVERFLOWERROR
IO27626  CONTAINERS ARE NOT FILTERED BASED ON THE INCLUDE/EXCLUDE FIELD
IO26914  CONFIGURATION XML FILE SHOWS PASSWORD FIELD ENCRYPTED VALUE WHEN INHERITING FROM EXTERNAL PROPERTY
IO26984  HTTPSERVERCONNECTOR WILL TERMINATE AL ON THE "%" CHARACTER PASSED AT THE END OF URL
IO27518  EXPRESSION EDITOR FAILS TO FIND PROPERTY
IO27538  SDI ERROR CTGDIK222E - INITIALIZATION OF REPOSITORY DESTINATION *** FAILED: PARAMETER PASSWORD ('JCO.CLIENT.PASSWD') IS MISSING
IO27589  CE - CONNECT AND NEXT BUTTON FOR IDS CHANGELOG CONNECTOR DOES NOT FETCH ATTRIBUTES
IO27116  FDS - INITIAL SYNCHRONIZATION FOR GROUP FAILS
IO27117  FDS - INCREMENTAL SYNCHRONIZATION FOR GROUP FAILS WITH [LDAP:ERROR CODE 32 - NO SUCH OBJECT]
IO27855  AXIS2WSCLIENTFC RETURNS NPE AT LOGIN ATTEMPT
IO27856  SDI CE BUILD ERROR AFTER IMPORTING CONFIG WITH "CONTAINER NAME=PACKAGE
IO27810  HTTP CLIENT CONNECTOR WITH OUT PARSER USES ONLY ISO-8859-1 ENCODING
IO27791  CTGDIS895E INVALID PROPERTY NAME PASSED TO THE CONSTRUCTOR
IO28240  UNABLE TO USE ISAM REGISTRY ATTRIBUTES WITH ISAM V2 CONNECTOR
IO28213  SENDEMAIL FUNCTION COMPONENT FAILS WITH PROTOCOL BEYOND TLSV1
IO27663  LARGE INCREASE IN HEAP USAGE IS SEEN DUE TO CLASSINFOCACHE
IO28235  PATCH METHOD MISSING FROM HTTPCLIENT CONNECTOR DROP-DOWN LIST

3 New Properties
===================
The new property com.ibm.di.suppressSchema when set to true will not save schema items in the configuration file. The schema items are mainly used for building the solution. When an attempt is made to transfer with RMI a TDI configuration file having large number of schema items, a stack overflow error may be thrown. This could happen e.g. between the Configuration Editor and the server, or between the server and AMC.

See http://www.ibm.com/support/docview.wss?uid=swg21623396 for a description.

The JDBC connector uses the schema list when one wants to automatically create a table. If one wants to use this behavior, the com.ibm.di.suppressSchema property should not be set to true.

## ----------------------------------
## Suppress schema
## ----------------------------------
com.ibm.di.suppressSchema=true

The new property com.ibm.di.SSLProtocols and com.ibm.di.SSLServerProtocols will enable only those protocols mentioned against this property. Setting these property to TLSv1,TLSv1.1,TLSv1.2 will ensure that TLS protocol cannot be negotiated down to SSL. These properties should be added to the existing solution.properties. For maximum security, only TLS1.2 should be used, if possible. Also, the latest LA fix pack containing IBM Java 8 should be used, for the newest implementation of TLS.

## ----------------------------------
## Protocols to use for SSL
## ----------------------------------
com.ibm.di.SSLProtocols=TLSv1,TLSv1.1,TLSv1.2
com.ibm.di.SSLServerProtocols=TLSv1,TLSv1.1,TLSv1.2

4 Axis2 updated to version 1.7.6
===============================
SDI 7.2.0 Fix Pack 4 ships Axis2 version 1.7.6 ( Also shipped in SDI 7.2.0 Fix Pack6 )

5 Support for SAP JCo version 3
=================================
For detailed documentation refer SAP_JCo_V3_README.txt file.

6 IBM Security Learning Academy
===============================
Directory Integrator courses from the IBM Security Learning Academy can be found at the link below.
https://www.securitylearningacademy.com/local/navigator/index.php?level=iadi01

7 RXA Jars  updated
===============================

SDI 7.2.0 Fix Pack 4 onwards, RXA 2.3 jars shipped in SDI have been updated to the latest RXA fix pack version 2.3.0.14. ( Also included in Fix Pack 6)