NetIQ Self Service Password Reset 4.5 Patch Update 1 includes new features, improves usability, and resolves several previous issues.
Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback in the NetIQ Self Service Password Reset forum on Micro Focus Forums, our online community that also includes product information, blogs, and links to helpful resources.
The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the NetIQ Self Service Password Reset Documentation page. To download this product, see the NetIQ Downloads website.
The section outlines the security and software fixes in this release:
The section outlines the security fixes in this release:
This patch resolves the security vulnerabilities reported in Self Service Password Reset when customer runs Burp Suite tools (Bug 1168056).
This patch resolves the following issue with Self Service Password Reset installation when a user scans the Self Service Password Reset IP range for PCI compliance: Security Header Not Detected (Bug 1166198).
Self Service Password Reset includes the following software fixes for this release:
The Cancel button in the chain selection screen of Advance Authentication does not return to Self Service Password Reset screen while using Forgot Password (Bug 1169705).
When a user searches the user profile details in Help desk, it displays the details for the first time. When the user closes the page and search for another user’s profile, it does not display any information (Bug 1141154).
When a user makes a REST API call, the following error message is displayed:
{"error":true"errorCode":5027"errorMessage":"You do not have permission to perform the requested action.""errorDetail":"5027 ERROR_UNAUTHORIZED (this service requires authentication)"
The REST API call has been made public to fix this issue (Bug 1170218).
When a user logs in to Self Service Password Reset, the user is not forced to update profile even after setting the Force Update profile to True and the mandatory check box in Update Profile is unchecked (Bug 1169725).
When searching for a person in the organization chart view, the list displayed after specifying the name is the Search field does not match to the attributes set in Person Detail Display Labels (Bug 1166167).
While troubleshooting in the debug mode, the following health message is displayed:
ERROR, health.ApplianceStatusChecker, {#,health} error communicating with client 5015 ERROR_INTERNAL (unable to determine appliance hostname, hostname file environment param ApplianceHostnameFile is not set) i
To fix this issue, this patch has disabled appliance health status checker (Bug 1170519).
The updated user password is logged in the body content in SSPR.log when Self Service Password Reset is configured to perform password policy validation through External Password Check REST Server URLs.
To fix the issue, this patch made the user passwords hidden in SSPR.log (Bug 1153814).
When /sspr/public/rest/setpassword reseting the password, REST API does not sending the notification to the customers.
To enable REST API to send the new password to the user when using setPassword API, perform the following steps.
Open Configuration Editor.
Navigate to Settings > Web Services > Rest Services.
Enable Send Password to User
For more information, see Configuring External Web Services with REST (Bug 1170666).
This release includes support for the following operating system versions:
Appliance: You can deploy the Self Service Password Reset appliance in the following virtual systems:
Hyper-V version 4.0
VMware ESX 6.5 or later
Windows .msi File: You can deploy the Self Service Password Reset .msi file on the following platforms:
Windows Server 2016
Windows Server 2012
Windows Server 2019
Amazon Web Services EC2 Windows 2016
Microsoft Azure Marketplace Windows 2016
WAR File: You can deploy the Self Service Password Reset WAR file on the following platforms:
Red Hat Enterprise Linux Server 7.4 or later (64-bit)
SUSE Linux Enterprise Server
12 SP3, 12 SP4, and 12 SP5 (64-bit)
11 SP4 or later (64-bit)
Amazon Web Services EC2 SUSE Linux Enterprise Server 12 SP3
Red Hat Enterprise Linux 7.4
SUSE Linux Enterprise Server 12 SP3
Microsoft Azure Marketplace
Red Hat Enterprise Linux 7.4
SUSE Enterprise Server 12 SP3
For detailed information about system requirements, supported operating systems, and browsers, see Deployment Requirements of Self Service Password Reset
in the Self Service Password Reset 4.5 Installation Guide.
To install Self Service Password Reset, see Installing Self Service Password Reset
in the Self Service Password Reset 4.5 Installation Guide.
Self Service Password Reset 4.4 or later contains a schema change for password notifications of expired emails. You must extend the schema again to use the new attribute or you can use an existing LDAP attribute instead. For more information, see Configuring Self Service Password Reset for Password Expiration Notifications in the Self Service Password Reset 4.5 Administration Guide
.
To upgrade to Self Service Password Reset 4.5 Patch Update 1, you need to be on Self Service Password Reset 4.5.
For more information to upgrade to Self Service Password Reset 4.5 Patch Update 1 from Self Service Password Reset 4.4.x or before, see Automatically Upgrading Self Service Password Reset.
Log in to the Self Service Password Reset administration console as an administrator.
In the toolbar, click your name and then click Administration.
Click the About tab and then verify that the SSPR Version is the latest one.
Our goal is to provide documentation that meets your needs. If you have suggestions for improvements, please email Documentation-Feedback@netiq.com. We value your input and look forward to hearing from you.
For detailed contact information, see the Support Contact Information website.
For general corporate and product information, see the NetIQ Corporate website.
For interactive conversations with your peers and NetIQ experts, become an active member of our community. The NetIQ online community provides product information, useful links to helpful resources, blogs, and social media channels.
For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see http://www.microfocus.com/about/legal/.
Copyright © 2020 NetIQ Corporation. All Rights Reserved.