Safeguard Authentication Services 5.0.1
Release Notes
May 2021
These release notes provide information about the Safeguard Authentication Services 5.0.1 release.
About this release
Safeguard Authentication Services extends the capabilities of UNIX, Linux, and Mac systems to seamlessly and transparently join Active Directory and integrate Unix identities with Active Directory Windows accounts.
Safeguard Authentication Services 5.0.1 is a minor release that includes various bug and stability fixes. See Resolved issues for a list of fixes included in this release.
End of support notice
After careful consideration, One Identity has decided to cease the development of the Management Console for Unix (MCU). Therefore, the MCU will enter limited support for all versions on April 1, 2021. Support for all versions will reach end of life on Nov 1, 2021. For definitions of support, see the Software Product Support Lifecycle Policy.
As One Identity retires the MCU, we are building its feature set into modern platforms starting with Software Distribution and Profiling. Customers that use the MCU to deploy Authentication Services and Safeguard for Sudo can now use our Ansible collections for those products, which can be found at Ansible Galaxy.
The following is a list of issues addressed in this release.
Table 1: General resolved issues
| macOS: Initial support for 11.0. x86_64 only. |
259417 |
|
Scripts: Status, fixed Redhat 6 false positive on SELinux. |
258782 |
| vascert: Fixed issue on Catalina with storing the cert. |
257240 |
| Packaging: Fixed issue with vasdbeing started from install and not joining. |
256834 |
| vgptool: Accept a group policy with the new license style. |
256268 |
|
Starling: Fixed possible hang on return from Starling join request. |
255367 |
|
vasypd: Fixed failure to restart with a dangling .pid file. |
254681 |
|
vastool: Added a new SPN, as /<SNAME> for service use. |
254292 |
|
vgptool: Ignore Warning: lines in visudo -c output. |
252911 |
|
Group policy: Added support for the new license style to the License Policy. |
252330 |
|
NSS: Fixed 64-bit NSS call failures on Linux on PPC64 with SLES 11.4. |
251944 |
|
vasypd: When starting, use vas.conf instead of the cache to determine the joined domain. This fixes a rare start-up timing issue. |
251415 |
|
vasd: If a child daemon cannot make its socket file due to a full disk, do not segfault, and slow down re-tries to once a second. |
249941 |
|
PAM: When username-attr-name is not sAMAccountName, allow it to be used as a login name. |
249940 |
|
Group policy: Fixed issue with Apply button not being enabled on change. |
246381 |
|
vasd: Fixed possible segfault if the daemon account does not exist. |
246117 |
|
AIX: In Heimdal, use thread-safe errno. This helps commands like mkdir, lstat,and so on, running in a thread. |
244563 |
|
PAM: Treat the gdm-vmwcred service as if try_first_pass was set. |
240627 |
|
NSS: Fixed NSS module affecting umask value of other threads during NSS calls. |
239973 |
|
MS Windows: Show Unix account tab when DN contains an extra '='. |
239718 |
|
dnsupdate: On macOS, handle an issue that can trigger removing the SRV after some time after reboot or restart. |
235715 |
|
Scripts: Fixed a bad substitution error on some OSes in vas_oneway_setup.sh. |
233310 |
|
dnsupdate: Fixed issue on Solaris 10 with ipmond -i not working. |
199527 |
|
Snapshot: Add rsyslog.conf and rsyslog.d/* to snapshot. |
23184 |
|
Windows: Update signing to sha256. |
23164 |
The following is a list of issues, including those attributed to third-party products, known to exist at the time of release.
Table 2: Known issues
|
You must upgrade all Windows components on all Windows systems to Authentication Services 4.2.1 or higher before modifying the QAC (Quest Authentication Configuration) in Active Directory using Control Center from QAS 4.2.0 or higher. For more information, please see the KB Article 314330.
This was corrected in Authentication Services 4.2.1. |
198991 |
The following table provides a list of supported Unix and Linux platforms for Safeguard Authentication Services.
Table 3: Unix agent: Supported platforms
|
Amazon Linux AMI |
|
x86_64 |
|
Apple macOS |
10.13 or later |
x86_64 |
|
CentOS Linux |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Debian |
Current supported releases |
x86_64, x86, AARCH64 |
|
Fedora Linux |
Current supported releases |
x86_64, x86, AARCH64 |
|
FreeBSD |
10.x, 11.x, 12.x |
x32, x64 |
|
HP-UX |
11.31 |
PA, IA-64 |
|
IBM AIX |
7.1, 7.2 |
Power 4+ |
|
OpenSuSE |
Current supported releases |
x86_64, x86, AARCH64 |
|
Oracle Enterprise Linux (OEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Oracle Solaris |
10 8/11 (Update 10),
11.x |
SPARC, x64 |
|
Red Hat Enterprise Linux (RHEL) |
5, 6, 7, 8 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
SuSE Linux Enterprise Server (SLES)/Workstation |
11, 12, 15 |
Current Linux architectures: s390, s390x, PPC64, PPC64le, ia64, x86, x86_64, AARCH64 |
|
Ubuntu |
Current supported releases |
x86_64, x86, AARCH64 |
