Centrify® Server Suite 2015.1 Release Notes

© 2004-2015 Centrify Corporation.

This software is protected by international copyright laws.

All Rights Reserved.

Table of Contents

1. About This Release 1

2. Media 1

a) 32-bit Windows Tools (Enterprise or Standard) 1

b) 64-bit Windows Tools (Enterprise or Standard) 2

c) UNIX/Linux agents (DM version) 2

3. Support Statement 2

4. Notice of Termination of Support 3

5. Security Advisories 3

6. Centrify Server Suite Product Component Version Table 4

7. Download Center in Centrify Support Portal 4

8. Bugs Fixed 4

9. Known Issues 4

10. Additional Information and Support 5

 

1. About This Release

 

The Centrify Server Suite is an integrated family of Active Directory-based auditing, access control and identity management solutions that secure your cross-platform environment and strengthen regulatory compliance initiatives.

 

·         Centrify DirectControl secures your platforms using the same authentication and Group Policy services deployed for your Windows environment.

·         Centrify DirectAuthorize centrally manages and enforces role-based entitlements for fine-grained control of user access and privileges on UNIX, Linux, Mac OS/X and Windows systems.

·         Centrify DirectAudit delivers auditing, logging and real-time monitoring of user activity on your Windows, UNIX and Linux system.

·         Centrify DirectManage is an integrated set of administration and management tools that centralize the discovery, management and user administration of UNIX and Linux systems through integration into Active Directory-based tools and processes.

·         Centrify DirectSecure is a policy-based software solution that secures sensitive information by dynamically isolating and protecting cross-platform systems and enabling optional end-to-end encryption of data in motion.

 

Built on a common architecture, the seamlessly integrated Centrify Server Suite of solutions helps you improve IT efficiency, strengthen regulatory compliance initiatives, and centrally secure your heterogeneous computing environment.

 

This Centrify Server Suite release includes packages for Windows, UNIX, Linux, and Mac OS X operating system environments.

 

Centrify software is protected by U.S. Patents 7,591,005, 8,024,360, 8,321,523, and 9,015,103 B2.

2. Media

 

The files for this Centrify Server Suite release are organized onto five media, each available in ISO and zip form:

a) 32-bit Windows Tools (Enterprise or Standard)

 

<root> folder

This folder contains files that describe the directory layout and give you access to additional information.

·         readme.txt provides a brief summary of where to find files in a plain text format.

·         Copyright.txt and Acknowledgements.txt provides copyright information and legal notices for third party and open source software used in Centrify Server Suite.

·         Centrify-end-user-license-agreement.txt provides the text of the license agreement displayed during installation.

·         This file, Centrify-Server-Suite-<suite version number>-Release-Notes.html provides a formatted, browsable and printable version of the Release Notes.

·         autorun.inf controls the autorun program on Windows computers.

 

Agent folder

This folder contains the installer packages for installing the 32-bit Centrify DirectManage Windows Agent on Windows computers. 

 

Common folder

This folder contains the installer packages for Centrify common component and Microsoft .NET Framework 3.5 Service pack 1.

 

Resources Folder

This folder contains resources for internal use for the media.  It can be safely ignored.

 

DirectManage folder

This folder contains the installer packages for installing the 32-bit Centrify DirectManage utilities on Windows computers.

 

DirectAudit folder

This folder contains the Windows components for Centrify DirectAudit.  This folder is only present on the Enterprise version.

 

Documentation folder

This folder contains the documentation set for Centrify Server Suite as well as release note files for Centrify Server Suite components.

Note: You must have Adobe Acrobat Reader to view and print the documentation. The release notes are in HTML format.

 

b) 64-bit Windows Tools (Enterprise or Standard)

 

<root> folder

This folder contains files that describe the directory layout and give you access to additional information.

·         readme.txt provides a brief summary of where to find files in a plain text format.

·         Copyright.txt and Acknowledgements.txt provides copyright information and legal notices for third party and open source software used in Centrify Server Suite.

·         Centrify-end-user-license-agreement.txt provides the text of the license agreement displayed during installation.

·         This file, Centrify-Server-Suite-<suite version number>-Release-Notes.txt provides a formatted, printable version of the Release Notes.

·         autorun.inf controls the autorun program on Windows computers.

 

Agent folder

This folder contains the installer packages for installing the 64-bit Centrify DirectManage Windows Agent on Windows computers. 

 

Common folder

This folder contains the installer packages for Centrify common component and Microsoft .NET Framework 3.5 Service pack 1.

 

Resources Folder

This folder contains resources for internal use for the media.  It can be safely ignored.

 

DirectManage folder

This folder contains the installer packages for installing the 64-bit Centrify DirectManage tools on Windows computers.

 

DirectAudit folder

This folder contains the Windows components for Centrify DirectAudit. This folder is only present on the Enterprise version.

 

Documentation folder

This folder contains the documentation set for Centrify Server Suite as well as release note files for Centrify Server Suite components.

Note: You must have Adobe Acrobat Reader to view and print the documentation. The release notes are in HTML format.

 

c) UNIX/Linux agents (DM version)

 

This image contains tarred / zipped bundles of files for each supported platform, an adcheck for each supported platform and a matching manifest for use with Centrify Deployment Manager.

3. Support Statement

 

Support is provided according to KB-1200 (Centrify Product Support Policies) through the dates shown below:  

  

Release

Release Date

End of Core Support

End of Extended Support

Centrify Windows Agent:

 

 

 

Windows Agent 3.2.3

July 2015

July 2018

July 2020

Windows Agent 3.2.0 – 3.2.2

January 2014

January 2017

January 2019

Windows Agent 3.1.0 – 3.1.3

July 2013

July 2016

July 2018

Windows Agent 3.0.0 – 3.0.1

January 2013

January 2016

January 2018

DirectControl:

 

 

 

DirectControl 5.2.3

July 2015

July 2018

July 2020

DirectControl 5.2.2

February 2015

February 2018

February 2020

DirectControl 5.2.0 – 5.2.1

August 2014

August 2017

August 2019

DirectControl 5.1.3

January 2014

January 2017

January 2019

DirectControl 5.1.1 – 5.1.2

July 2013

July 2016

July 2018

DirectControl 5.1.0

January 2013

January 2016

January 2018

DirectControl 5.0.5

December 2012

December 2015

December 2017

DirectControl 5.0.4

September 2012

September 2015

September 2017

DirectControl 5.0.0 – 5.0.3

October 2011

October 2014

October 2016

DirectControl 4.4.4

May 2012

May 2015

May 2017

DirectControl 4.4.x

January 2010

January 2013

January 2015

DirectControl 4.3.x.

May 2009

May 2012

May 2014

DirectControl 4.2.x

December 2008

December 2011

December 2013

DirectControl 4.x.

October 2007

October 2010

October 2012

DirectControl 3.x.

April 2006

April 2009

April 2011

DirectControl 2.x.

September 2005

September 2008

September 2010

DirectControl 1.x.

March 2005

March 2008

March 2010

DirectAuthorize:

 

 

 

DirectAuthorize 3.2.3

July 2015

July 2018

July 2020

DirectAuthorize 3.2.0 – 3.2.2

January 2014

January 2017

January 2019

DirectAuthorize 3.1.0 – 3.1.3

July 2013

July 2016

July 2018

DirectAuthorize 3.0.0 – 3.0.1

January 2013

January 2016

January 2018

DirectAuthorize 2.x.

October 2011

October 2014

October 2016

DirectAuthroize 1.2.1

May 2012

May 2015

May 2017

DirectAuthorize 1.2

January 2010

January 2013

January 2015

DirectAuthorize 1.x

December 2008

October 2010

October 2012

DirectAudit:

 

 

 

DirectAudit 3.2.3

July 2015

July 2018

July 2020

DirectAudit 3.2.0 – 3.2.2

January 2014

January 2017

January 2019

DirectAudit 3.1.0 – 3.1.3

July 2013

July 2016

July 2018

DirectAudit 3.0.0 – 3.0.1

January 2013

January 2016

January 2018

DirectAudit 2.x.

October 2011

October 2014

October 2016

DirectAudit 1.3.x

February 2011

February 2014

February 2016

DirectAudit 1.1.x

July 2008

July 2011

July 2013

DirectAudit 1.x

May 2007

May 2010

May 2012

DirectSecure:

 

 

 

DirectSecure 5.2.2

May 2015

May 2018

May 2020

DirectSecure 5.1.1

August 2013

August 2016

August 2018

DirectSecure 1.2.x

August 2011

August 2014

August 2016

DirectSecure 1.x

May 2009

May 2012

May 2014

Deployment Manager:

 

 

 

Deployment Manager 5.2.3

July 2015

July 2018

July 2020

Deployment Manager 5.2.2

February 2015

February 2018

February 2020

Deployment Manager 5.2.0

August 2014

August 2017

August 2019

Deployment Manager 5.1.3

January 2014

January 2017

January 2019

Deployment Manager 5.1.0 – 5.1.2

January 2013

January 2016

January 2018

Deployment Manager 2.x

May 2011

May 2014

May 2016

Deployment Manager 1.x

June 2010

June 2013

June 2015

Zone Provisioning Agent:

 

 

 

ZPA 5.2.3

July 2015

July 2018

July 2020

ZPA 5.2.2

February 2015

February 2018

February 2020

ZPA 5.2.0

August 2014

August 2017

August 2020

ZPA 5.1.3

January 2014

January 2017

January 2019

ZPA 5.1.1 – 5.1.2

July 2013

July 2016

July 2018

ZPA 5.1.0

January 2013

January 2016

January 2018

ZPA 5.0.x

August 2011

August 2014

August 2016

ZPA 1.x

February 2010

February 2013

February 2015

OpenSSH:

 

 

 

OpenSSH 5.2.3

July 2015

July 2018

July 2020

OpenSSH 5.2.2

February 2015

February 2018

February 2020

OpenSSH 5.1.3 – 5.1.4

January 2014

January 2017

January 2019

OpenSSH 5.1.1 – 5.1.2

July 2013

July 2016

July 2018

OpenSSH 5.1.0

January 2013

January 2016

January 2018

OpenSSH 4.5.5

December 2012

December 2015

December 2017

OpenSSH 4.5.4

September 2012

September 2015

September 2017

OpenSSH 4.5.x

February 2011

February 2014

February 2016

OpenSSH 4.3.x

January 2010

January 2013

January 2015

OpenSSH 4.1.x

September 2008

September 2011

September 2013

OpenSSH 3.x

July 2006

July 2009

July 2011

Centrify Samba:

 

 

 

Samba 4.5.6 – 4.5.9

September 2013

September 2016

September 2018

Samba 4.5.5

March 2013

March 2016

March 2018

Samba 4.5.4

October 2012

October 2015

October 2017

Samba 4.5.x

June 2011

June 2014

June 2016

Samba 4.3.x

December 2009

December 2012

December 2014

Samba 4.0.x

December 2007

December 2010

December 2012

Samba 3.x

September 2006

September 2009

September 2011

Centrify PuTTY

 

 

 

PuTTY 5.x-0.64

July 2015

July 2018

July 2020

PuTTY 5.x-0.63

November 2013

November 2016

November 2018

PuTTY 5.x-0.62

July 2013

July 2016

July 2018

PuTTY 3.x-0.60

October 2007

October 2010

October 2012

PuTTY 3.x-0.59

July 2006

 July 2009

July 2011

Kerberos Tools:

 

 

 

Tools 5.1.0

March 2013

March 2016

March 2018

Tools 4.x

February 2009

February 2012

February 2014

Tools 3.x

July 2006

July 2009

July 2011

 

You can also see www.centrify.com/product-lifecycle for the complete table.

4. Notice of Termination of Support

 

Next release will be the last release of Centrify Suite in which the following operating system platforms will be supported:

·         Mac OS X 10.8

·         Fedora 20

·         Debian Linux 6

·         Ubuntu 14.10

·         HPUX 11.11, 11.23

·         Oracle Solaris 9

 

This is the last release of Centrify Suite in which the following operating system platforms will be supported:

·         All 32-bit Windows

·         Fedora 19

·         Oracle Enterprise Linux 4.x

·         OpenSUSE 12.1, 12.2, 12.3

·         Oracle Solaris 8

 

Support is removed for the following operating system platforms in this release:

·         Windows Server 2003, Windows Server 2003 R2

·         AIX 5.3

·         Ubuntu 10.04 LTS, 13.04, 13.10

·         Linux Mint 15, 16

5. Security Advisories

 

·         Server Suite 2014.1 DirectManage Access Manager 5.2.0-220 addresses a security vulnerability that might result in packet data being sent to Active Directory that is not encrypted but is integrity protected and therefore tamper-proof.  Passwords are not affected.  Security rating is low.  (Ref: 66953)

·         Server Suite 2014.1 DirectControl 5.2.1-301 fixes an improper information disclosure in adsetgroups.  Security rating is medium.  (Ref: 71991) 

·         Server Suite 2015 addresses a security vulnerability that may result in data leakage in the DirectAudit component of Server Suite Enterprise Edition.  Security rating is medium. If you are using versions prior to Suite 2015, you need to apply the workaround described in KB-5070.  There is no need to apply the workaround if you are using DirectAudit 3.2.2 or later.  (Ref: 76167) 

 

For more information, see the Centrify Product Security Policies in www.centrify.com/product-policy

6. Centrify Server Suite Product Component Version Table

 

Table 1: Centrify Server Suite Product Component Versions

Suite Version

General Release

DirectManage Access

DirectControl Agent

Centrify OpenSSH

DirectManage Audit

DirectAudit

Agent

Windows Agent

Deployment Manager

Centrify PuTTY

2015.1 Update

March 2016

5.2.3

5.2.3 Update

5.2.3

3.2.3

3.2.3 Update

3.2.3

5.2.3

5.1.6

2015.1

July 2015

5.2.3

5.2.3

5.2.3

3.2.3

3.2.3

3.2.3

5.2.3

5.1.6

2015

February 2015

5.2.2

5.2.2

5.2.2

3.2.2

3.2.2

3.2.2

5.2.2

5.1.5

2014.1 Update

November 2014

5.2.0

5.2.1

5.1.4

3.2.1

3.2.1

3.2.1

5.2.0

5.1.4

2014.1

August 2014

5.2.0

5.2.0

5.1.4

3.2.1

3.2.1

3.2.1

5.2.0

5.1.4

2014

February 2014

5.1.3

5.1.3

5.1.3

3.2.0

3.2.0

3.2.0

5.1.3

5.1.3

 

·         For DirectManage Access, DirectControl Agent and Centrify OpenSSH, see the DirectControl release notes in the Documentation folder for more information.

·         For DirectManage Audit and DirectAudit Agent, see the DirectAudit release notes in the Documentation directory for more information.

·         For Windows Agent, see the Windows Agent release notes in the Documentation directory for more information.

·         For Deployment Manager, see the Deployment Manager release notes in the Documentation directory for more information.

·         For Centrify PuTTY, see the Centrify PuTTY release notes in the Documentation directory for more information.

 

Note, you can find all the Centrify Server Suite release notes and documentation in the Documentation & Application Notes page in Centrify support portal.

 

Also see www.centrify.com/product-versions for suite product versions.

7. Download Center in Centrify Support Portal

 

You can get all the supported releases from the download center in Centrify support web site:

 

https://www.centrify.com/support/customer-support-portal/download-center/

 

·         All the ISO, ZIP, TGZ and DMG (Mac only) files are associated with the MD5 checksum.  You can move the cursor to the target file and see it.

·         Starting from Suite 2015.1, the following RPM files are also protected by the GPG signature.  You can find the GPG public key in the download center.  Notice that the SUSE i386 RPM packages are not signed.

-   centrifyda-<version>-rhel4-i386.rpm

-   centrifydc-<version>-rhel4-i386.rpm

-   centrifydc-ldapproxy-<version>-rhel4-i386.rpm

-   centrifydc-nis-<version>-rhel4-i386.rpm

-   centrifydc-openssh-<stock-version>-<version>-rhel4-i386.rpm

-   centrifyda-<version>-rhel4-x86_64.rpm

-   centrifydc-<version>-rhel4-x86_64.rpm

-   centrifydc-ldapproxy-<version>-rhel4-x86_64.rpm

-   centrifydc-nis-<version>-rhel4-x86_64.rpm

-   centrifydc-openssh-<stock-version>-<version>-rhel4-x86_64.rpm

-   centrifyda-<version>-suse10-x86_64.rpm

-   centrifydc-<version>-suse10-x86_64.rpm

-   centrifydc-ldapproxy-<version>-suse10-x86_64.rpm

-   centrifydc-nis-<version>-sus10-x86_64.rpm

-   centrifydc-openssh-<stock-version>-<version>-suse10-x86_64.rpm

8. Bugs Fixed

 

This release features the following updates:

 

·         See release notes for individual Centrify Server Suite packages.

9. Known Issues

 

The following sections describe common known issues or limitations associated with this release of Centrify Server Suite.

 

In addition to the known issues described in this section, you should review the details in the appropriate suite component release-notes.txt file and in the platform-specific release-notes-agent.txt file for the operating environments you support.

 

·        adcheck reports failure on mount check when run using sudo

 

adcheck should be run by root, and one way to do this is for a non-root user to use sudo, for example:

 

sudo adcheck-<platform> -t os

 

If the user running sudo does not have /usr/sbin set in the path then the MOUNT check will fail, reporting that some filesystems in /etc/fstab are either not mounted or mounted improperly (REF#: 15664).

 

·        Install.sh may fail on Ubuntu 10.04 and later

 

With Ubuntu 10.04 and later, installation of Centrify Server Suite may fail with a dependency for x11-ssh-askpass. If you encounter this issue you should restart Centrify Server Suite installation using the Custom (C) option, installing all necessary packages except Centrify OpenSSH. Then install Centrify OpenSSH separately using the dpkg package manager and specifying the --force-depends option on the command line (REF#: 18166).

 

For the most up to date list of known issues, please login to the Customer Support Portal at http://www.centrify.com/support and refer to Knowledge Base articles for any known issues with the release.

10. Additional Information and Support

 

In addition to the documentation provided with this package, you can find the answers to common questions and information about any general or platform-specific known limitations as well as tips and suggestions from the Centrify Knowledge Base.

 

The Centrify Resource Center provides access to a wide range of packages and tools that you can download and install separately, such as updated Kerberos and PuTTY programs that have been optimized to work with Centrify DirectControl. For more information, see the Centrify Resource Center Web site:

www.centrify.com/resources

You can also contact Centrify Support directly with your questions through the Centrify Web site, by email, or by telephone. To contact Centrify Support or to get help with installing or using this version of Centrify Samba, send email to support@centrify.com or call 1-669-444-5200, option 2. For information about purchasing or evaluating Centrify products, send email to info@centrify.com.