Centrify® Server Suite 2015.1 Release Notes
© 2004-2015 Centrify Corporation.
This software is protected by international copyright laws.
All Rights Reserved.
Table of Contents
a) 32-bit Windows Tools (Enterprise or Standard) 1
b) 64-bit Windows Tools (Enterprise or Standard) 2
c) UNIX/Linux agents (DM version) 2
4. Notice of Termination of Support 3
6. Centrify Server Suite Product Component Version Table
7. Download Center in Centrify Support Portal 4
10. Additional Information and Support 5
The Centrify Server Suite is an integrated family of Active Directory-based auditing, access control and identity management solutions that secure your cross-platform environment and strengthen regulatory compliance initiatives.
· Centrify DirectControl secures your platforms using the same authentication and Group Policy services deployed for your Windows environment.
· Centrify DirectAuthorize centrally manages and enforces role-based entitlements for fine-grained control of user access and privileges on UNIX, Linux, Mac OS/X and Windows systems.
· Centrify DirectAudit delivers auditing, logging and real-time monitoring of user activity on your Windows, UNIX and Linux system.
· Centrify DirectManage is an integrated set of administration and management tools that centralize the discovery, management and user administration of UNIX and Linux systems through integration into Active Directory-based tools and processes.
· Centrify DirectSecure is a policy-based software solution that secures sensitive information by dynamically isolating and protecting cross-platform systems and enabling optional end-to-end encryption of data in motion.
Built on a common architecture, the seamlessly integrated Centrify Server Suite of solutions helps you improve IT efficiency, strengthen regulatory compliance initiatives, and centrally secure your heterogeneous computing environment.
This Centrify Server Suite release includes packages for Windows, UNIX, Linux, and Mac OS X operating system environments.
Centrify software is protected by U.S. Patents 7,591,005, 8,024,360, 8,321,523, and 9,015,103 B2.
The files for this Centrify Server Suite release are organized onto five media, each available in ISO and zip form:
<root> folder
This folder contains files that describe the directory layout and give you access to additional information.
· readme.txt provides a brief summary of where to find files in a plain text format.
· Copyright.txt and Acknowledgements.txt provides copyright information and legal notices for third party and open source software used in Centrify Server Suite.
· Centrify-end-user-license-agreement.txt provides the text of the license agreement displayed during installation.
· This file, Centrify-Server-Suite-<suite version number>-Release-Notes.html provides a formatted, browsable and printable version of the Release Notes.
· autorun.inf controls the autorun program on Windows computers.
Agent folder
This folder contains the installer packages for installing the 32-bit Centrify DirectManage Windows Agent on Windows computers.
Common folder
This folder contains the installer packages for Centrify common component and Microsoft .NET Framework 3.5 Service pack 1.
Resources Folder
This folder contains resources for internal use for the media. It can be safely ignored.
DirectManage folder
This folder contains the installer packages for installing the 32-bit Centrify DirectManage utilities on Windows computers.
DirectAudit folder
This folder contains the Windows components for Centrify DirectAudit. This folder is only present on the Enterprise version.
Documentation folder
This folder contains the documentation set for Centrify Server Suite as well as release note files for Centrify Server Suite components.
Note: You must have Adobe Acrobat Reader to view and print the documentation. The release notes are in HTML format.
<root> folder
This folder contains files that describe the directory layout and give you access to additional information.
· readme.txt provides a brief summary of where to find files in a plain text format.
· Copyright.txt and Acknowledgements.txt provides copyright information and legal notices for third party and open source software used in Centrify Server Suite.
· Centrify-end-user-license-agreement.txt provides the text of the license agreement displayed during installation.
· This file, Centrify-Server-Suite-<suite version number>-Release-Notes.txt provides a formatted, printable version of the Release Notes.
· autorun.inf controls the autorun program on Windows computers.
Agent folder
This folder contains the installer packages for installing the 64-bit Centrify DirectManage Windows Agent on Windows computers.
Common folder
This folder contains the installer packages for Centrify common component and Microsoft .NET Framework 3.5 Service pack 1.
Resources Folder
This folder contains resources for internal use for the media. It can be safely ignored.
DirectManage folder
This folder contains the installer packages for installing the 64-bit Centrify DirectManage tools on Windows computers.
DirectAudit folder
This folder contains the Windows components for Centrify DirectAudit. This folder is only present on the Enterprise version.
Documentation folder
This folder contains the documentation set for Centrify Server Suite as well as release note files for Centrify Server Suite components.
Note: You must have Adobe Acrobat Reader to view and print the documentation. The release notes are in HTML format.
This image contains tarred / zipped bundles of files for each supported platform, an adcheck for each supported platform and a matching manifest for use with Centrify Deployment Manager.
Support is provided according to KB-1200 (Centrify Product Support Policies) through the dates shown below:
|
Release |
Release Date |
End of Core Support |
End of Extended Support |
|
Centrify Windows Agent: |
|
|
|
|
Windows Agent 3.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
Windows Agent 3.2.0 – 3.2.2 |
January 2014 |
January 2017 |
January 2019 |
|
Windows Agent 3.1.0 – 3.1.3 |
July 2013 |
July 2016 |
July 2018 |
|
Windows Agent 3.0.0 – 3.0.1 |
January 2013 |
January 2016 |
January 2018 |
|
DirectControl: |
|
|
|
|
DirectControl 5.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
DirectControl 5.2.2 |
February 2015 |
February 2018 |
February 2020 |
|
DirectControl 5.2.0 – 5.2.1 |
August 2014 |
August 2017 |
August 2019 |
|
DirectControl 5.1.3 |
January 2014 |
January 2017 |
January 2019 |
|
DirectControl 5.1.1 – 5.1.2 |
July 2013 |
July 2016 |
July 2018 |
|
DirectControl 5.1.0 |
January 2013 |
January 2016 |
January 2018 |
|
DirectControl 5.0.5 |
December 2012 |
December 2015 |
December 2017 |
|
DirectControl 5.0.4 |
September 2012 |
September 2015 |
September 2017 |
|
DirectControl 5.0.0 – 5.0.3 |
October 2011 |
October 2014 |
October 2016 |
|
DirectControl 4.4.4 |
May 2012 |
May 2015 |
May 2017 |
|
DirectControl 4.4.x |
January 2010 |
January 2013 |
January 2015 |
|
DirectControl 4.3.x. |
May 2009 |
May 2012 |
May 2014 |
|
DirectControl 4.2.x |
December 2008 |
December 2011 |
December 2013 |
|
DirectControl 4.x. |
October 2007 |
October 2010 |
October 2012 |
|
DirectControl 3.x. |
April 2006 |
April 2009 |
April 2011 |
|
DirectControl 2.x. |
September 2005 |
September 2008 |
September 2010 |
|
DirectControl 1.x. |
March 2005 |
March 2008 |
March 2010 |
|
DirectAuthorize: |
|
|
|
|
DirectAuthorize 3.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
DirectAuthorize 3.2.0 – 3.2.2 |
January 2014 |
January 2017 |
January 2019 |
|
DirectAuthorize 3.1.0 – 3.1.3 |
July 2013 |
July 2016 |
July 2018 |
|
DirectAuthorize 3.0.0 – 3.0.1 |
January 2013 |
January 2016 |
January 2018 |
|
DirectAuthorize 2.x. |
October 2011 |
October 2014 |
October 2016 |
|
DirectAuthroize 1.2.1 |
May 2012 |
May 2015 |
May 2017 |
|
DirectAuthorize 1.2 |
January 2010 |
January 2013 |
January 2015 |
|
DirectAuthorize 1.x |
December 2008 |
October 2010 |
October 2012 |
|
DirectAudit: |
|
|
|
|
DirectAudit 3.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
DirectAudit 3.2.0 – 3.2.2 |
January 2014 |
January 2017 |
January 2019 |
|
DirectAudit 3.1.0 – 3.1.3 |
July 2013 |
July 2016 |
July 2018 |
|
DirectAudit 3.0.0 – 3.0.1 |
January 2013 |
January 2016 |
January 2018 |
|
DirectAudit 2.x. |
October 2011 |
October 2014 |
October 2016 |
|
DirectAudit 1.3.x |
February 2011 |
February 2014 |
February 2016 |
|
DirectAudit 1.1.x |
July 2008 |
July 2011 |
July 2013 |
|
DirectAudit 1.x |
May 2007 |
May 2010 |
May 2012 |
|
DirectSecure: |
|
|
|
|
DirectSecure 5.2.2 |
May 2015 |
May 2018 |
May 2020 |
|
DirectSecure 5.1.1 |
August 2013 |
August 2016 |
August 2018 |
|
DirectSecure 1.2.x |
August 2011 |
August 2014 |
August 2016 |
|
DirectSecure 1.x |
May 2009 |
May 2012 |
May 2014 |
|
Deployment Manager: |
|
|
|
|
Deployment Manager 5.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
Deployment Manager 5.2.2 |
February 2015 |
February 2018 |
February 2020 |
|
Deployment Manager 5.2.0 |
August 2014 |
August 2017 |
August 2019 |
|
Deployment Manager 5.1.3 |
January 2014 |
January 2017 |
January 2019 |
|
Deployment Manager 5.1.0 – 5.1.2 |
January 2013 |
January 2016 |
January 2018 |
|
Deployment Manager 2.x |
May 2011 |
May 2014 |
May 2016 |
|
Deployment Manager 1.x |
June 2010 |
June 2013 |
June 2015 |
|
Zone Provisioning Agent: |
|
|
|
|
ZPA 5.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
ZPA 5.2.2 |
February 2015 |
February 2018 |
February 2020 |
|
ZPA 5.2.0 |
August 2014 |
August 2017 |
August 2020 |
|
ZPA 5.1.3 |
January 2014 |
January 2017 |
January 2019 |
|
ZPA 5.1.1 – 5.1.2 |
July 2013 |
July 2016 |
July 2018 |
|
ZPA 5.1.0 |
January 2013 |
January 2016 |
January 2018 |
|
ZPA 5.0.x |
August 2011 |
August 2014 |
August 2016 |
|
ZPA 1.x |
February 2010 |
February 2013 |
February 2015 |
|
OpenSSH: |
|
|
|
|
OpenSSH 5.2.3 |
July 2015 |
July 2018 |
July 2020 |
|
OpenSSH 5.2.2 |
February 2015 |
February 2018 |
February 2020 |
|
OpenSSH 5.1.3 – 5.1.4 |
January 2014 |
January 2017 |
January 2019 |
|
OpenSSH 5.1.1 – 5.1.2 |
July 2013 |
July 2016 |
July 2018 |
|
OpenSSH 5.1.0 |
January 2013 |
January 2016 |
January 2018 |
|
OpenSSH 4.5.5 |
December 2012 |
December 2015 |
December 2017 |
|
OpenSSH 4.5.4 |
September 2012 |
September 2015 |
September 2017 |
|
OpenSSH 4.5.x |
February 2011 |
February 2014 |
February 2016 |
|
OpenSSH 4.3.x |
January 2010 |
January 2013 |
January 2015 |
|
OpenSSH 4.1.x |
September 2008 |
September 2011 |
September 2013 |
|
OpenSSH 3.x |
July 2006 |
July 2009 |
July 2011 |
|
Centrify Samba: |
|
|
|
|
Samba 4.5.6 – 4.5.9 |
September 2013 |
September 2016 |
September 2018 |
|
Samba 4.5.5 |
March 2013 |
March 2016 |
March 2018 |
|
Samba 4.5.4 |
October 2012 |
October 2015 |
October 2017 |
|
Samba 4.5.x |
June 2011 |
June 2014 |
June 2016 |
|
Samba 4.3.x |
December 2009 |
December 2012 |
December 2014 |
|
Samba 4.0.x |
December 2007 |
December 2010 |
December 2012 |
|
Samba 3.x |
September 2006 |
September 2009 |
September 2011 |
|
Centrify PuTTY |
|
|
|
|
PuTTY 5.x-0.64 |
July 2015 |
July 2018 |
July 2020 |
|
PuTTY 5.x-0.63 |
November 2013 |
November 2016 |
November 2018 |
|
PuTTY 5.x-0.62 |
July 2013 |
July 2016 |
July 2018 |
|
PuTTY 3.x-0.60 |
October 2007 |
October 2010 |
October 2012 |
|
PuTTY 3.x-0.59 |
July 2006 |
July 2009 |
July 2011 |
|
Kerberos Tools: |
|
|
|
|
Tools 5.1.0 |
March 2013 |
March 2016 |
March 2018 |
|
Tools 4.x |
February 2009 |
February 2012 |
February 2014 |
|
Tools 3.x |
July 2006 |
July 2009 |
July 2011 |
You can also see www.centrify.com/product-lifecycle for the complete table.
Next release will be the last release of Centrify Suite in which the following operating system platforms will be supported:
· Mac OS X 10.8
· Fedora 20
· Debian Linux 6
· Ubuntu 14.10
· HPUX 11.11, 11.23
· Oracle Solaris 9
This is the last release of Centrify Suite in which the following operating system platforms will be supported:
· All 32-bit Windows
· Fedora 19
· Oracle Enterprise Linux 4.x
· OpenSUSE 12.1, 12.2, 12.3
· Oracle Solaris 8
Support is removed for the following operating system platforms in this release:
· Windows Server 2003, Windows Server 2003 R2
· AIX 5.3
· Ubuntu 10.04 LTS, 13.04, 13.10
· Linux Mint 15, 16
· Server Suite 2014.1 DirectManage Access Manager 5.2.0-220 addresses a security vulnerability that might result in packet data being sent to Active Directory that is not encrypted but is integrity protected and therefore tamper-proof. Passwords are not affected. Security rating is low. (Ref: 66953)
· Server Suite 2014.1 DirectControl 5.2.1-301 fixes an improper information disclosure in adsetgroups. Security rating is medium. (Ref: 71991)
· Server Suite 2015 addresses a security vulnerability that may result in data leakage in the DirectAudit component of Server Suite Enterprise Edition. Security rating is medium. If you are using versions prior to Suite 2015, you need to apply the workaround described in KB-5070. There is no need to apply the workaround if you are using DirectAudit 3.2.2 or later. (Ref: 76167)
For more information, see the Centrify Product Security Policies in www.centrify.com/product-policy
Table 1: Centrify Server Suite Product Component Versions
|
Suite Version |
General Release |
DirectManage Access |
DirectControl Agent |
Centrify OpenSSH |
DirectManage Audit |
DirectAudit Agent |
Windows Agent |
Deployment Manager |
Centrify PuTTY |
|
2015.1 Update |
March 2016 |
5.2.3 |
5.2.3 Update |
5.2.3 |
3.2.3 |
3.2.3 Update |
3.2.3 |
5.2.3 |
5.1.6 |
|
2015.1 |
July 2015 |
5.2.3 |
5.2.3 |
5.2.3 |
3.2.3 |
3.2.3 |
3.2.3 |
5.2.3 |
5.1.6 |
|
2015 |
February 2015 |
5.2.2 |
5.2.2 |
5.2.2 |
3.2.2 |
3.2.2 |
3.2.2 |
5.2.2 |
5.1.5 |
|
2014.1 Update |
November 2014 |
5.2.0 |
5.2.1 |
5.1.4 |
3.2.1 |
3.2.1 |
3.2.1 |
5.2.0 |
5.1.4 |
|
2014.1 |
August 2014 |
5.2.0 |
5.2.0 |
5.1.4 |
3.2.1 |
3.2.1 |
3.2.1 |
5.2.0 |
5.1.4 |
|
2014 |
February 2014 |
5.1.3 |
5.1.3 |
5.1.3 |
3.2.0 |
3.2.0 |
3.2.0 |
5.1.3 |
5.1.3 |
· For DirectManage Access, DirectControl Agent and Centrify OpenSSH, see the DirectControl release notes in the Documentation folder for more information.
· For DirectManage Audit and DirectAudit Agent, see the DirectAudit release notes in the Documentation directory for more information.
· For Windows Agent, see the Windows Agent release notes in the Documentation directory for more information.
· For Deployment Manager, see the Deployment Manager release notes in the Documentation directory for more information.
· For Centrify PuTTY, see the Centrify PuTTY release notes in the Documentation directory for more information.
Note, you can find all the Centrify Server Suite release notes and documentation in the Documentation & Application Notes page in Centrify support portal.
Also see www.centrify.com/product-versions for suite product versions.
You can get all the supported releases from the download center in Centrify support web site:
https://www.centrify.com/support/customer-support-portal/download-center/
· All the ISO, ZIP, TGZ and DMG (Mac only) files are associated with the MD5 checksum. You can move the cursor to the target file and see it.
· Starting from Suite 2015.1, the following RPM files are also protected by the GPG signature. You can find the GPG public key in the download center. Notice that the SUSE i386 RPM packages are not signed.
- centrifyda-<version>-rhel4-i386.rpm
- centrifydc-<version>-rhel4-i386.rpm
- centrifydc-ldapproxy-<version>-rhel4-i386.rpm
- centrifydc-nis-<version>-rhel4-i386.rpm
- centrifydc-openssh-<stock-version>-<version>-rhel4-i386.rpm
- centrifyda-<version>-rhel4-x86_64.rpm
- centrifydc-<version>-rhel4-x86_64.rpm
- centrifydc-ldapproxy-<version>-rhel4-x86_64.rpm
- centrifydc-nis-<version>-rhel4-x86_64.rpm
- centrifydc-openssh-<stock-version>-<version>-rhel4-x86_64.rpm
- centrifyda-<version>-suse10-x86_64.rpm
- centrifydc-<version>-suse10-x86_64.rpm
- centrifydc-ldapproxy-<version>-suse10-x86_64.rpm
- centrifydc-nis-<version>-sus10-x86_64.rpm
- centrifydc-openssh-<stock-version>-<version>-suse10-x86_64.rpm
This release features the following updates:
· See release notes for individual Centrify Server Suite packages.
The following sections describe common known issues or limitations associated with this release of Centrify Server Suite.
In addition to the known issues described in this section, you should review the details in the appropriate suite component release-notes.txt file and in the platform-specific release-notes-agent.txt file for the operating environments you support.
· adcheck reports failure on mount check when run using sudo
adcheck should be run by root, and one way to do this is for a non-root user to use sudo, for example:
sudo adcheck-<platform> -t os
If the user running sudo does not have /usr/sbin set in the path then the MOUNT check will fail, reporting that some filesystems in /etc/fstab are either not mounted or mounted improperly (REF#: 15664).
· Install.sh may fail on Ubuntu 10.04 and later
With Ubuntu 10.04 and later, installation of Centrify Server Suite may fail with a dependency for x11-ssh-askpass. If you encounter this issue you should restart Centrify Server Suite installation using the Custom (C) option, installing all necessary packages except Centrify OpenSSH. Then install Centrify OpenSSH separately using the dpkg package manager and specifying the --force-depends option on the command line (REF#: 18166).
For the most up to date list of known issues, please login to the Customer Support Portal at http://www.centrify.com/support and refer to Knowledge Base articles for any known issues with the release.
In addition to the documentation provided with this package, you can find the answers to common questions and information about any general or platform-specific known limitations as well as tips and suggestions from the Centrify Knowledge Base.
The Centrify Resource Center provides access to a wide range of packages and tools that you can download and install separately, such as updated Kerberos and PuTTY programs that have been optimized to work with Centrify DirectControl. For more information, see the Centrify Resource Center Web site:
You can also contact Centrify Support directly with your questions through the Centrify Web site, by email, or by telephone. To contact Centrify Support or to get help with installing or using this version of Centrify Samba, send email to support@centrify.com or call 1-669-444-5200, option 2. For information about purchasing or evaluating Centrify products, send email to info@centrify.com.