Oracle® Fusion Middleware

Release Notes for Oracle Platform Security Services

12c (12.2.1.3.0)

E83391-03

December 2017

This document describes all known issues for this release of Oracle Platform Security Services.

Oracle Fusion Middleware Release Notes for Oracle Platform Security Services, 12c (12.2.1.3.0)

E83391-03

Copyright © 2015, 2017, Oracle and/or its affiliates. All rights reserved.

Primary Author: Luna Nair

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Contents

Preface

- Audience

- Documentation Accessibility

- Related Documents

- Conventions

1 Introduction

- Latest Release Information

- Purpose of this Document

- System Requirements and Specifications

- Certification Information

- Product Documentation

- Oracle Support

- Licensing Information

2 What’s New In This Release

- New Features

- Deprecated Features

3 Known Issues and Workarounds

- JNDI Connection Exception and JDK Version

- Limitation on the Maximum Length of Policy Artifact Names and Stripe Names

- Limit USE Privilege to OPSS and IAU Schemas in Oracle EBR Environment

4 Documentation Changes

Preface

Oracle Platform Security Services 12.2.1.3.0 release notes summarizes the release information related to the issues fixed, general issues and their workaround, deprecated and removed functionality, and more. This release of the product is in maintenance mode and will no longer have new features or content.

Audience

This document is intended for the users of Oracle Platform Security Services.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.

Related Documents

For more information, see the following resources:

- Oracle Platform Security Services Documentation Library
This contains all documentation for all Oracle Platform Security Services 12c products.

- Oracle Technology Network
This site contains additional documentation that is not included as part of the documentation libraries.

Conventions

The following text conventions are used in this document:

Convention

Meaning

boldface

Boldface type indicates graphical user interface elements associated with an action, or terms defined in text or the glossary.

italic

Italic type indicates book titles, emphasis, or placeholder variables for which you supply particular values.

monospace

Monospace type indicates commands within a paragraph, URLs, code in examples, text that appears on the screen, or text that you enter.

1 Introduction

This chapter introduces the Release Notes for Oracle Platform Security Services. It includes the following sections:

Topics

- Latest Release Information

- Purpose of this Document

- Product Documentation

- System Requirements and Specifications

- Certification Information

- Product Documentation

- Oracle Support

Latest Release Information

This document is accurate at the time of publication. Oracle will update the release notes periodically after the software release. You can access the latest information and additions to these release notes on the Oracle Technology Network at:

http://www.oracle.com/technetwork/indexes/documentation/index.html

Purpose of this Document

This document contains the release information for Oracle Platform Security Services 12.2.1.3.0. It describes the differences between the software and its documented functionality.

Oracle recommends you review its contents before installing, or working with the product.

System Requirements and Specifications

Oracle Platform Security Services installation and configuration will not complete successfully unless users meet the hardware and software pre-requisite requirements before installation. See Oracle Fusion Middleware System Requirements and Specifications.

Certification Information

To see versions of platforms and related software for which Oracle Platform Security Services is certified and supported, go to http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html.

Product Documentation

For complete documentation on Oracle Platform Security Services, go to http://docs.oracle.com//middleware/12213/opss/index.html.

Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support at https://support.oracle.com

Licensing Information

For the latest information on Oracle Fusion Middleware Licensing, see Licensing Information User Manual.

Detailed information regarding license compliance for Oracle Fusion Middleware is available at:

http://www.oracle.com/technetwork/middleware/ias/overview/index.html

2 What’s New In This Release

This chapter describes the features and improvements in Oracle Platform Security Services (OPSS). The following topics introduce the new and changed features of Oracle Platform Security Services and provide pointers to additional information.

- New Features

- Deprecated Features

New Features

Oracle Platform Security Services includes the following new features in the 12.2.1.3.0 release:

- When migrating application policies for an application using the migrateSecurityStore WLST command, the behavior of the how policies are merged using the overwrite parameter has been changed. See Migrating Application Policies with migrateSecurityStore in Securing Applications with Oracle Platform Security Services.

- The Keystore Service (KSS) has been updated to support Subject Alternative Name (SAN) SSL certificates. See Managing Certificates with WLST in Securing Applications with Oracle Platform Security Services and generateKeyPair in WLST Command Reference for Infrastructure Security.

Deprecated Features

There are no deprecated features in this release.

3 Known Issues and Workarounds

This chapter describes the known issues and their workarounds.

- JNDI Connection Exception and JDK Version

- Limit USE Privilege to OPSS and IAU Schemas in Oracle EBR Environment

- Limitation on the Maximum Length of Policy Artifact Names and Stripe Names

JNDI Connection Exception and JDK Version

Issue

JNDI Connections throw the javax.naming.NamingException: LDAP response read timed out , timed out : —1ms exception.

This issue is found in domains configured to use an Oracle Identity Directory security store, or when using the User Role API or IGF/IDS against an LDAP identity store on any of the following JDK versions: Java SE 6u85, 7u72, or 8u20.

Workaround

Update the JDK to a version supported in this release. For certified JDK versions, see Oracle Fusion Middleware 12c Certifications at http://www.oracle.com/technetwork/middleware/ias/downloads/fusion-certification-100350.html

For example:

-jreloc C:\Progra~1\Java\jdk1.8.0_21

Limitation on the Maximum Length of Policy Artifact Names and Stripe Names

Issue

Due to the limitation on the maximum column length of index in MS SQL Server, when using MS SQL Server as the OPSS security store, the OPSS policy artifact names and OPSS application policy stripe names cannot exceed 147 characters and 226 characters, respectively.

Workaround

Currently, there is no workaround for this issue.

Limit USE Privilege to OPSS and IAU Schemas in Oracle EBR Environment

Issue

In Oracle Edition-based redefinition (EBR) environment, after creating an edition, OPSS recommends that you explicitly grant the USE privilege on the edition to OPSS schemas and Audit schemas, rather than granting the USE privilege on the edition to PUBLIC. For information about EBR, see Using Edition-Based Redefinition in Oracle Database Development Guide.

Workaround

To grant the USE privilege on the edition to OPSS and AUDIT schemas, use the SQL statement GRANT USE ON EDITION in the following manner.

GRANT USE ON EDITION edition_name TO OPSS_SCHEMA;
GRANT USE ON EDITION edition_name TO IAU_SCHEMA;
GRANT USE ON EDITION edition_name TO IAU_APPEND_SCHEMA;
GRANT USE ON EDITION edition_name TO IAU_VIEWER_SCHEMA;
"""

4 Documentation Changes

The Oracle Platform Security Services documentation includes the following changes in the 12.2.1.3.0 release:

- The sections “Upgrading Security to 12.2.1.x” and “Compatibility Table for 11g and 12c Versions” have been moved to Securing Datastores in Planning an Upgrade of Oracle Fusion Middleware.

- The page reference help in Fusion Middleware Control has been enhanced to provide more descriptive content.

- Clarified the procedures for migrating credentials in the same domain and across domains. See Migrating the Security Store with migrateSecurityStore in Securing Applications with Oracle Platform Security Services.

- The chapters “Identity Directory Service WLST Commands” and “Library Oracle Virtual Directory WLST Commands” have been moved from WLST Command Reference for Infrastructure Security to Identity Directory Service WLST Commands and Library Oracle Virtual Directory WLST Commands in WebLogic Scripting Tool Command Reference for Identity and Access Management.

- Added an example that illustrates how you can set up a domain that uses either third-party CA signed or internal CA signed certificates throughout the domain in place of the demonstration CA certificates. See Setting Up a Security Hardened Domain: An Example in Securing Applications with Oracle Platform Security Services.

Oracle Legal Notices

Copyright Notice

Copyright © 1994-2018, Oracle and/or its affiliates. All rights reserved.

License Restrictions Warranty/Consequential Damages Disclaimer

This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited.

Warranty Disclaimer

The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing.

Restricted Rights Notice

If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable:

U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs. No other rights are granted to the U.S. Government.

Hazardous Applications Notice

This software or hardware is developed for general use in a variety of information management applications. It is not developed or intended for use in any inherently dangerous applications, including applications that may create a risk of personal injury. If you use this software or hardware in dangerous applications, then you shall be responsible to take all appropriate fail-safe, backup, redundancy, and other measures to ensure its safe use. Oracle Corporation and its affiliates disclaim any liability for any damages caused by use of this software or hardware in dangerous applications.

Trademark Notice

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group.

Third-Party Content, Products, and Services Disclaimer

This software or hardware and documentation may provide access to or information about content, products, and services from third parties. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to third-party content, products, and services unless otherwise set forth in an applicable agreement between you and Oracle. Oracle Corporation and its affiliates will not be responsible for any loss, costs, or damages incurred due to your access to or use of third-party content, products, or services, except as set forth in an applicable agreement between you and Oracle.

Pre-General Availability Draft Documentation Notice

If this document is in public or private pre-General Availability status:

This documentation is in pre-General Availability status and is intended for demonstration and preliminary use only. It may not be specific to the hardware on which you are using the software. Oracle Corporation and its affiliates are not responsible for and expressly disclaim all warranties of any kind with respect to this documentation and will not be responsible for any loss, costs, or damages incurred due to the use of this documentation.

Private Pre-General Availability Draft Documentation Notice

If this document is in private pre-General Availability status:

The information contained in this document is for informational sharing purposes only and should be considered in your capacity as a customer advisory board member or pursuant to your pre-General Availability trial agreement only. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described in this document remains at the sole discretion of Oracle.

This document in any form, software or printed matter, contains proprietary information that is the exclusive property of Oracle. Your access to and use of this confidential material is subject to the terms and conditions of your Oracle Master Agreement, Oracle License and Services Agreement, Oracle PartnerNetwork Agreement, Oracle distribution agreement, or other license agreement which has been executed by you and Oracle and with which you agree to comply. This document and information contained herein may not be disclosed, copied, reproduced, or distributed to anyone outside Oracle without prior written consent of Oracle. This document is not part of your license agreement nor can it be incorporated into any contractual agreement with Oracle or its subsidiaries or affiliates.

Documentation Accessibility

For information about Oracle's commitment to accessibility, visit the Oracle Accessibility Program website at http://www.oracle.com/pls/topic/lookup?ctx=acc&id=docacc.

Access to Oracle Support

Oracle customers that have purchased support have access to electronic support through My Oracle Support. For information, visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=info or visit http://www.oracle.com/pls/topic/lookup?ctx=acc&id=trs if you are hearing impaired.