Oracle® Fusion Middleware

Release Notes for Oracle Platform Security Services

12c (12.2.1)

E66553-01

October 2015

This document describes issues and workarounds for Oracle Platform Security Services 12.2.1.

Oracle Fusion Middleware Release Notes for Oracle Platform Security Services, 12c (12.2.1)

E66553-01

Copyright © 2011, 2015, Oracle and/or its affiliates. All rights reserved.

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Contents

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Introduction

- 1.1 Latest Release Information

- 1.2 Purpose of This Document

- 1.3 Certification Information

2 Oracle Platform Security Services

- 2.1 WSLT Security Commands

- 2.1.1 listAppRoles Command Outputs Wrong Characters

- 2.1.2 listResources Command Throws Exception

- 2.2 JNDI Connection Exception and JDK Version

- 2.3 FIPS Support Issue

- 2.4 Oracle Fusion Middleware Audit Framework

- 2.4.1 Configuring Auditing for Oracle Access Manager

- 2.4.2 Audit Reports do not Display Translated Text in Certain Locales

- 2.4.3 Audit Reports Always Display in English

- 2.5 Users and Identity Store

- 2.5.1 libovdconfig.bat Does Not Support a Space in File Path

- 2.5.2 Users with Same Name in Multiple Identity Stores

Preface

This document describes all known issues with Oracle Platform Security Services 12c (12.2.1).

Audience

This document is intended for all users of Oracle Platform Security Services 12c (12.2.1).

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Related Documents

For more information, see the following Oracle resources:

- Oracle Technology Network at http://www.oracle.com/technetwork/index.html.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Introduction

This chapter introduces Oracle Fusion Middleware Release Notes for Oracle Platform Security Services 12c (12.2.1).

This chapter includes the following sections:

- Latest Release Information

- Purpose of This Document

- Certification Information

1.1 Latest Release Information

This document is accurate at the time of publication. Oracle will update the release notes periodically after a software release. You can access the latest information and additions to these release notes on the Oracle Technology Network at:

http://www.oracle.com/technetwork/indexes/documentation/index.html

1.2 Purpose of This Document

This document contains the release information for Oracle Platform Security Services12c (12.2.1). It describes differences between the software and its documented functionality.

Oracle recommends that you review its contents before installing or working with the product.

1.3 Certification Information

For certification information, see Oracle Fusion Middleware 12c Certifications at http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html.

2 Oracle Platform Security Services

This chapter describes issues and workarounds with artifacts associated with Oracle Platform Security Services (OPSS).

This chapter includes the following sections:

- WSLT Security Commands

- JNDI Connection Exception and JDK Version

- FIPS Support Issue

- Oracle Fusion Middleware Audit Framework

- Users and Identity Store

The following documents are relevant to the topics discussed in these notes:

- Oracle Fusion Middleware Securing Applications with Oracle Platform Security Services

- Administering Oracle Fusion Middleware

2.1 WSLT Security Commands

The following sections describe issues with security WLST commands:

- listAppRoles Command Outputs Wrong Characters

- listResources Command Throws Exception

2.1.1 listAppRoles Command Outputs Wrong Characters

On Linux and Windows platforms, when the locale is set to non-UTF8 locales, such as the fr_FR_iso88591 locale, the listAppRoles command may output the character '?' instead of the expected character.

2.1.2 listResources Command Throws Exception

The listResources command throws an exception if the optional type argument is not specified. The workaround is to specify a value for this argument.

2.2 JNDI Connection Exception and JDK Version

JNDI Connections throw the javax.naming.NamingException: LDAP response read timed out, timeout used:-1ms exception.

This issue is found in domain configured to use an LDAP security store running on any of the following JDK versions: Java SE 6u85, 7u72, or 8u20.

Workaround

Update JDK to Java SE 6u95, 7u80, or 8u45. For certified JDK versions, see Oracle Fusion Middleware 12c Certifications at http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html.

2.3 FIPS Support Issue

Running OPSS with Federal Information Processing Standards (FIPS) compliance has a known issue that requires a patch to fix it.

Workaround

Download and apply the patch that fixes bug number 21838659 to solve the issue.

2.4 Oracle Fusion Middleware Audit Framework

The following sections describe issues with the Oracle Fusion Middleware Audit Framework:

- Configuring Auditing for Oracle Access Manager

- Audit Reports do not Display Translated Text in Certain Locales

- Audit Reports Always Display in English

2.4.1 Configuring Auditing for Oracle Access Manager

Although Access Manager appears as a component in Fusion Middleware Control, you cannot configure auditing for Access Manager using Fusion Middleware Control.

2.4.2 Audit Reports do not Display Translated Text in Certain Locales

The standard audit reports packaged with Oracle Business Intelligence Publisher support a number of languages. Business Intelligence Publisher can start in different locales and, at start-up, you can specify the language of choice by setting the preferred locale in Preferences.

If you started Oracle Business Intelligence Publisher on any of the locales:

- zh_CN (simplified chinese)

- zh_TW (traditional chinese)

- pt_BR (portuguese brazilian)

then the entire report including labels, headers, titles shows in English.

This issue will be fixed in a future release of Business Intelligence Publisher.

2.4.3 Audit Reports Always Display in English

The standard audit reports packaged with Business Intelligence Publisher support a number of languages, but report titles and descriptions are displayed in English even when they have been translated.

This issue will be fixed in a future release of Business Intelligence Publisher.

2.5 Users and Identity Store

The following sections describe issues with identities:

- libovdconfig.bat Does Not Support a Space in File Path

- Users with Same Name in Multiple Identity Stores

2.5.1 libovdconfig.bat Does Not Support a Space in File Path

On the Microsoft Windows platform, the libovdconfig.bat script does not work if the path to your Java installation (specified with in the -jreLoc option) includes a space character, such as the C:\Program Files\Java\jdk1.7.0_21 path.

Workaround

Provide the path to your Java installation in DOS 8.3 format:

-jreloc C:\ProgramFiles\Java\jdk1.7.0_21

2.5.2 Users with Same Name in Multiple Identity Stores

If a user name is present in more than one LDAP repository and the virtualize property is set to use LibOVD, then the data in only one of those repositories is returned when you query that user name with the User and Role API.

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2015, Oracle and/or its affiliates. All rights reserved.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information on content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services.

Alpha and Beta Draft Documentation Notice

If this document is in preproduction status:

This documentation is in preproduction status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.