Release Notes 4.1.4.4

Software Fixes

The following problems were fixed in software release 4.1.3.93:

• The special characters, ampersand (&), less than (<), greater than (>), and quote (“) are not

recognized correctly in an Authentication Policy name and all clients using an Authentication

Policy with the aforementioned special characters will not be able to get access rights.

(19599)

• The NAS-Identifier is not sent with Transaction Tracer or User Rights Simulator packets.

Some RADIUS servers, such as the Merit AAA Server, require either the NAS-Identifier or

the NAS-IP-Address for all packets sent to the server and will refuse packets that do not

contain this information. (19576)

• A user name can be added with the same name as an existing Identity Profile, but an Identity

Profile name cannot be added with the same name as an existing user. (19601)

• When uploading a distribution software image file through the Local Update tab, select a row

in the Uploaded Software Versions table before performing the upload. (19528)

• Some clients not logged off at "re-authenticate at fixed time of day" timeout. (19478)

• Remote CLI access via SSH allows network administrators all the rights of a super

administrators. (19488)

• Modified Logon Customization on imported rights will not take affect until the Access

Control Server is rebooted. (19493)

• In a redundant system, uploading a large DIST file over a slow connection to the primary

may cause a failover. (19534)

• Maximum concurrent logons for Authenticated Identity Profile not enforced. (19702)

• User Rights does not match with correct Rights row. (19712)

• IPsec certificate authentication allows invalid certificates to be used. (19761)

• Authentication and group retrieval fails using iPlanet LDAP. (19518)

• MIBs walked received inappropriate variables. (19536)

• Import informed the administrator of what hash to use on failure. (19672)

• PPTP roaming not working. (19687)

• SSL Certificate Signing Request (CSR) generation now accepts the FQDN or IP address of

Vernier System unit. (19692)

• Windows NT 4.0 Workstation as a client is unable to use the NT Domain Logon feature with

Windows 2000 Server as the Primary Domain controller. (19740, 19897, 19899)

• After a failover a super or network administrator is unable to logon. (19803)

• Encryption selection in Access Policy not being enforced. (19831)

• Web logon does not work after loading new SSL certificate. (19860)

• New uploaded Thawte SSL Certificate unavailable upon reboot. (19933)