Centrify DirectManage Express 2.0.0 GA Release Notes (C) 2011 Centrify Corporation.

This software is protected by international copyright laws. All Rights Reserved. Table of Contents 1. 2. 3. 4. 5. About This Release New Features Bugs Fixed Known Issues Additional Information and Support

1. About This Release Centrify DirectManage Express centralizes the discovery, management and user administration of UNIX and Linux systems through integration into Active Directory-based tools and processes. Centrify Deployment Manager, part of DirectManage Express, enables you to identify non-Windows systems within your environment, analyze their readiness to integrate with DirectControl and Active Directory, as well as perform deployment of Centrify Suite editions to these systems. 2. New Features in DirectManage Express 2.0.0 GA The following is a list of new features in this release: * Support installation of Centrify Suite Platinum Edition. * Support discovery of computers hosted by a cloud service. Currently Amazon Elastic Compute Cloud (EC2) and VMWare vCloud are supported. 3. New Features in DirectManage Express 2.0.0 Early Access Suite Installation, Upgrade and Update capability: * Support installation of Centrify Suite Enterprise Edition in addition to Express Edition and Standard Edition. * Allow updating an installed Centrify Suite to a newer version. * Provide upgrade capability by allowing installation of new components on an existing Centrify Suite. Computers: * Support joining computers to auto zone or standard zone. * Support using private keys for authentication (only DES-EDE3-CBC encryption type is supported) * Display a computer's Active Directory properties. * Support using DirectAuthorize (dzdo) for privilege elevation. * Support using jump box to manage UNIX machines in a different network segment.

Miscellaneous: * Support running custom scripts on user-selected computers, users, or groups. 4. Bugs Fixed in DirectManage Express 2.0.0 GA * Memory consumption and time required to load the welcome page are reduced. More than 65536 items can now be shown in Users, Groups, and Histories nodes. * Allow configuration of auditing of shells in DirectAudit when installing Centrify Suite Enterprise Edition. 5. Bugs Fixed in DirectManage Express 2.0.0 Early Access * You can now uninstall Centrify Suite correctly on HP-UX computers when Deployment Manager is configured to use sudo to execute privileged commands. * The problem that the total number of computers in Step 3 not matching the number of computers you added is now fixed. * The results of previous Analyze steps on a computer are still preserved after Remove Software is invoked. * DirectManage Express now supports SQL Server Compact Edition SP2. Microsoft SQL Server Compact is a compact relational database produced by Microsoft that is included in some applications and also with Microsoft Developer Studio. The issue that Deployment Manager installation will fail if SQLCE 3.5 SP1 is installed has been resolved in this version. * The new Centrify OpenSSH package (v5.6p1-4.5.0) in Centrify Suite 2011 fixes the issue of removal of Centrify software failing on Red Hat PPC. * On ESX 4.1 machines, you no longer need to supply root user credentials for Deployment Manager to execute the "Analyze Your Environment" operation. * You can now add a user to a group that contains special characters such as a forward slash ('/') in its name on a Debian 5 x86_64 machine. 6. Known Issues The following sections describe common known issues or limitations associated with Centrify DirectManage Express. * On some OS platforms such as HPUX or Solaris, using a non-privileged user account to login and then using the "su" option for privileged commands may result in failure when performing some actions, such as joining a computer to a different zone using the "Join

Computer to Zone..." menu item. Or you may see extraneous strings in the "Enable audit for specific shells on the computers" listbox in the Manage Audit dialog. The workaround is to use a privileged user account to login. * The "UNIX name" field on the Properties dialog for a local user or local group on an AIX computer is disabled. This is because the chuser and chgroup commands do not allow for name change. * Deployment Manager will report an error when creating a local user on a HPUX machine in trusted mode. This is because it cannot set the password for the new user. The newly created user also cannot login since the password is not set. * On some platforms such as Red Hat, you cannot change a local user's password when the user name is the same as an AD user. * The Reset Password feature is disabled for a local user on a HPUX machine running in trusted mode. This feature is not allowed in trusted mode. * On a HPUX machine, it is possible that some actions to add, edit or map local users may fail due to the length of the command Deployment Manager sends to HPUX to perform the action. For examples, a user may have long GECOS or home directory paths; using sudo instead of root to execute the command may also lengthen it. * If you have both Centrify DirectControl console and Deployment Manager installed, and then un-install the DirectControl console, the welcome page of the Deployment Manager is no longer accessible. * Launching multiple instances of Deployment Manager It is not recommended that you launch multiple instances of Deployment Manager; you will be warned if you attempt to do so. If you run multiple instances at the same time you may experience the following problems: - The UI between the consoles is not synchronized. - There will be a chance of database conflicts. For example, analyzing computers would have a greater chance of failing as it may not be able to update the database. * History records contain non-printing characters There may be some non-printing characters displayed in the history records after running analysis; these are usually control characters captured while capturing the history and may be ignored. * Cannot deploy from ISO image Deployment manager cannot deploy packages contained in an ISO image of a CD, it can only understand individual packages downloaded from centrify.com.

* Special user accounts on AIX UIDs imported for special user accounts on AIX will be displayed as negative numbers. The UIDs are correct, it is just the display that is incorrect, and this may be ignored. * System.AccessViolationException shown Occasionally Deployment Manager will show an error dialog box reporting a System.AccessViolationException due to an attempt to read or write protected memory due to a problem with SQL CE. You should restart Deployment Manager if you encounter this. * Can discover a computer but not discover information or deploy Deployment Manager relies on the SSH service on computers it discovers in order to learn more about the computer and deploy software to it. If the SSH service is running but not functioning correctly, the computer will be discovered but Deployment Manager will be unable to learn more about it or deploy software. * Access violations occur when run under heavy load This is a known issue with Microsoft SQLCE. You can find more information about this, including a patch to fix it, at: http://support.microsoft.com/kb/970269/en-us * DirectManage Express will report that there is no software on the local system even though it successfully downloaded to a VMware Shared Folder. VMware Shared Folders do not trigger filesystem notifications so DirectManage is not notified. For the most up to date list of known issues, please refer to the Knowledge Base article in the Centrify Support Portal, KB-1662 for the latest known issues with Centrify DirectManage Express. 7. Additional Information and Support In addition to the documentation provided with this package, you can find the answers to common questions and information about any general or platform-specific known limitations as well as tips and suggestions from the Centrify Knowledge Base. You can also contact Centrify Support directly with your questions through the Centrify Web site, by email, or by telephone. To contact Centrify Support or to get help with installing or using this software, send email to support@centrify.com or call 1-408-542-7500, option 2. For information about purchasing or evaluating Centrify products, send email to info@centrify.com.