Release Notes
11 April 2024, 15:27
These release notes provide information about the Active Roles 8.1.5 release. For the most recent documents and product information, see Active Roles Technical Documents on the One Identity support portal.
Active Roles 8.1.5 is a patch release with no new functionality.
For more information on the enhancements, see Enhancements.
For more information on the resolved issues, see Resolved issues.
For more information on the list of known issues, see Known issues.
The following enhancement has been implemented in Active Roles8.1.5.
| Enhancement | Issue ID |
|---|---|
|
General security enhancements in all Active Roles components. |
444729, 426064 |
The following is a list of issues addressed in this release.
| Resolved Issue | Issue ID |
|---|---|
|
Previously, when upgrading Active Roles from any version to 8.1.4, the upgrade step of importing custom Script Modules could silently fail, with the failure indicated only in the upgrade log. This issue was caused by a fix introduced in the now-deprecated Active Roles 8.1.3 release, which changed the GUID of the UpdateServicesToExecute module. This resulted in the in-place upgrade process not recognizing the module anymore as a built-in Script Module and attempting to insert it, resulting in its DN not being unique, and halting the upgrade process. The issue was fixed by implementing a safeguard which prevents the duplication of DN values. NOTE: Although the issue has been fixed, importing custom Script Modules during upgrade may still result in the following error generated in the build log: Error: Violation of UNIQUE KEY constraint 'UQ_ScriptModules_distinguishedName'. Cannot insert duplicate key in object 'dbo.ScriptModules'. The duplicate key value is (CN=UpdateServicesToExecute,CN=Builtin,CN=Script Modules,CN=Configuration). If this error occurs, verify that your custom Script Modules have been imported from your previous configuration. If not, import your previous configuration again. |
452818 |
|
Previously, Active Roles forced rebuilding dynamic groups each time a member was added to or removed from the dynamic group. This issue is now fixed, so Active Roles now rebuilds dynamic groups only if the rebuild is triggered manually or with a Scheduled Task. |
443493 |
| Resolved Issue | Issue ID |
|---|---|
|
Previously, when checking the group membership of hybrid Azure users, it could occur that their Advanced properties > Member Of page or their edsaAzureMemberOf attribute did not list all the groups in which the user was a member. This issue is now fixed. |
432835 |
|
Previously, when selecting multiple hybrid users, an intrusive error message appeared and the Member Of view of the users were not created properly. The issue is now fixed. |
432427 |
|
Previously, in case of a hybrid user, the email address displayed in the Properties window of the user did not match the email address displayed in the list of OU users. The issue has been fixed and now the correct email address appears. |
432127 |
|
Previously, attempting to run the Update Services To ExecuteOn built-in scheduled task failed, as Active Roles ran the ReauthenticatedTenantsUpdater built-in script module for the task instead of the UpdateServicesToExecute built-in script module. This issue occurred because the GUID of the UpdateServicesToExecute built-in script module was tied to the ReauthenticatedTenantsUpdater script module. The issue was fixed by changing the GUID of the UpdateServicesToExecute built-in script module to a new unique value. NOTE: You can only run the UpdateServicesToExecute built-in script module in a scheduled task named Update Services To ExecuteOn. Attempting to run the UpdateServicesToExecute built-in script in a scheduled task with a different name will result in an error. |
317060 |
| Resolved Issue | Issue ID |
|---|---|
|
Previously, the Azure AD Connector could fail finding all objects in Azure during import tasks. This issue could occur if HttpClient timed out during Graph API requests, for example because of network issues. In such cases, the Azure AD Connector could not handle the timeout correctly. The issue was fixed by:
|
437816 |
|
Previously, synchronizing (adding) a group member from a plain text source to the members attribute of a group with the Azure AD Connector, the procedure failed with the following error: Invalid property 'members' The issue was fixed by modifying the Azure AD Connector to use the proper Graph API calls and ExchangeOnlineManagement PowerShell module cmdlets when synchronizing Azure groups. |
414643 |
| Resolved Issue | Issue ID |
|---|---|
|
Previously, when using Active Roles in a forest topology with:
Then users registered in another child domain of the forest could not log in to the Active Roles Web Interface. This issue was fixed by making sure that if Active Roles does not find the user in the current domain, then it continues searching for them in the forest using wider referral scopes each time it fails. |
447483 |
|
Previously, when listing all attributes of an on-premises or hybrid user in the Active Roles Console or the Web Interface, users could experience performance degradation after some time. This issue could occur if:
To solve this problem, Active Roles now:
|
438247 |
|
Previously, authentication failed under the following conditions:
The issue has been fixed. |
437298 |
|
Previously, when creating a new cloud-only or hybrid Azure user, the Create Azure Account > Usage Location field was a text box instead of a drop-down box (as in the Azure Properties page of existing Azure users). To maintain consistency between Web Interface pages, this is fixed, and the Create Azure Account > Usage Location field is now also a drop-down box. |
393881 |
© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center
