TIBCO ActiveMatrix(R) Policy Agent 3.1.0 Hotfix 06 is now available.
book
Article ID: KB0103958
calendar_today
Updated On:
Products
Versions
TIBCO ActiveMatrix Policy Agent
-
Not Applicable
-
Description
Description: You can download this HotFix from the TIBCO Product Support FTP server using your eSupport username and password, at ftp://support-ftp.tibco.com
Once you have successfully logged into the server, you will find the hotfix packages under available_downloads/ActiveMatrix/PolicyAgent/3.1.0/hotfix-06
Listed below is a summary of updates included. Please refer to the associated readme document for any additional information.
================================================================================ Closed Issues in 310_hotfix06 (This Release) PA-572 Fixed a thread synchronization defect while connecting to LDAP during authentication. Turning off thread synchronization during LDAP connect is now possible, by setting a java property to false in Policy Agent startup TRA file. The java property name is com.tibco.ldap.performSynchronizedLDAPConnect.
PA-577 Fixed a defect that was causing Policy Agent to slow down while enforcing LDAP Authentication Policy if the LDAP server is slow to respond. Now it is possible to set LDAP read timeout and turn off connection pooling by setting appropriate java properties in Policy Agent startup TRA file.
LDAP connection timeout can be set by setting com.sun.jndi.ldap.read.timeout java property to the desired read timeout value in milliseconds
Connection pooling can be turned off by setting com.sun.jndi.ldap.connect.pool java property to false
================================================================================ Closed Issues in 310_hotfix05 PA-565 Fixed a defect in which a NullPointerException thrown while processing LDAP Infrastructure Policy was causing Policy to go into the Rejected/Unapplied state.
PA-562 Fixed a defect that caused producer leak during invocation of SOAP/JMS Proxy Endpoint.
PA-564 Fixed a defect where policy agent was not encoding multi-byte character correctly for JMS message of type Text
PA-569 Fixed a signature verification defect. Signature verification no longer fails if the Certificate Issuer DN contains email attribute.
PA-548 Fixed a defect that was causing Policy Agent to fail while processing the request, if the SOAPAction inside SOAP request is not enclosed in quotes.
PA-566 Fixed a defect that was causing Policy Agent to fail while processing the request with empty SOAPAction header
================================================================================ Closed Issues in 310_hotfix04 PA-546 Fixed a defect in which policy agent created a new Provider EMS connection for every request that Policy Agent forwarded to the target SOAP/JMS service. Policy Agent now reuses the connection.
PA-560 Backported fixes for following issues to the bundled Tomcat: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3718 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2693
================================================================================ Closed Issues in 310_hotfix03 PA-531 Fixed a defect in which logging policy database tables were not getting cleaned up properly, which was causing indefinite growth of the database and agent slowness.
PA-543 Fixed signature verification failure due to XML canonicalization issue at XML security layer.
================================================================================ Closed Issues in 310_hotfix02 PA-526 Fixed a defect causing signature verification to fail at receiver side. The attribute Id that the Credential Mapping SAML policy added to the SAML Assertion is no longer ignored while calculating the digest value for the Assertion during signing.
PA-528 Fixed a defect that caused Policy Agent to fail to enforce policy at reference endpoint while parsing outbound SOAP request.
================================================================================ Closed Issues in 310_hotfix01
PA-515 Fixed a defect in which Policy Agent was not able to connect to MicroSoft SQL Server 2008.
PA-514 Fixed a defect that caused Policy Agent's SSL handshake with secured endpoint to fail.