Skip to main content

4.3.0

Features and improvements

Python

  • Added support for Python 3.10.x for the agtpython and pxpython connectors.

  • The Python script connector now has the ability to do incremental listing and last modified time is accessible in the Python script.

  • Added alternate agtpython-3.7.exe and agtpython-3-10.exe connectors for Python 3.7 and 3.10 respectively.

Okta

  • Added the "Custom search expression for filtering groups" target address option for Okta target systems to be able to only list groups based on the specified group filter.

  • Modifications for the Okta connector to be able to list properly for 11.1.3 and earlier instances.

Directory Services

  • Modified the Active Directory DN, agtaddn connector to add ObjectType, ObjCount, ObjRelMBRCount, and ObjRelOWNRCount to the PerfConnectorExt performance statistics in the logs for the listobj operation for the object type and number of objects, group members, and owners.

  • Extended the connector operation log information for the PerfConnector string for objects and object relationships for agtldap .

  • Added the ability to specify the domain controller during the nrcreate operation for the Active Directory nrcifs network resource connector and using the _operationDC pseudo attribute.

  • Enhanced the Azure connector to support advanced queries in the user search filter.

  • Adjusted Microsoft Azure Active Directory connector, agtazure , to use "user principal name" as longid.

  • Refactored the Active Directory DN connector, agtaddn to improve stability.

  • Enhanced logging for the Active Directory DN connector, agtaddn during listing and auto-discovery.

  • Added the @accountLocked account attribute for Active Directory DN targets, agtaddn to be able to display the account lockout status of a user.

  • Updated the Active Directory DN, agtaddn connector to log the last time that an attribute list was performed if the last list time attribute was set.

  • Added the "_operationDC" pseudo attribute to the output for the Active Directory DN, agtaddn connector's create operation.

  • Added an extra connect for the nrcifs and nrsmb network resource connectors when listing local members of groups.

  • Added support for the Azure connector to be able to list and manage Azure roles as groups.

Exchange

  • Added support for Microsoft Exchange 2019 for the Exchange connector.

  • Adjusted the Exchange connector to be able to return the proper GUID in hybrid mode when creating users, which is a different field used in regular mode, as well as to take the input from the domain controller into account when setting attributes.

  • Added support for the Exchange connector to be able to to connect into Exchange online to manage mailboxes in the cloud.

  • Added support for the Exchange 2007+ Server connector, agtexg2k7 to be able to delete accounts in the hybrid mode.

  • Adjusted the Microsoft Exchange connector, agtexg2k7 to be able to use the new EXO V2 module to connect to Exchange online.

Google

  • Add support for token renew to Google Applications connector, agtgapps , as well as account attribute orgUnitPath .

  • Enhanced the Google Applications connector to be able to use the specified primaryEmail account attribute and return the proper long id.

SAP

  • Added a new address option 'Enable listing of group membership as attributes' for the agtsapnw connector.

  • Added incremental listing to agtsapnw .

  • Exposed the pseudo attribute "_expirepw" on the agtsapnw connector that expires passwords upon creation of an account.

Other

  • Documentation has been added for the detail of and training for creating custom connectors .

  • Removed the OpenSSL library dependencies from the agtldap , agtsm , and agttelnet connectors. The libcrypto and libssl dlls as well as mtcspi-openssl.dll are also no longer installed for Connector Pack installations to the Common Files directories.

  • The libcrypto and libssl openssl dlls have been updated to version 1.1.1m for Connector Pack installations.

  • Modified the XML-RPC Web Service connector (agtxml) to add the URL target address parameter for the Server URL that services the XML requests.

  • Added a name attribute to Oracle ERP Services, agtoraerp connector for group listing.

  • Added ability to update the login attribute for Box Cloud Storage, agtbox connector.

  • Adjusted the Amazon Web Services connector, agtaws to list additional attributes from discovered computer objects for further connection.

  • Added an address attribute to ServiceNow IT Service Management Suite, agtsvcnow , to control proxy credentials.

  • Updated the RSA Authentication Manager, agtrsaam connector to now make use of the 8.6.1 version of the RSA SecurID Authentication Agent SDK for C for authentication challenge response operations.

  • Updated the DUO Authentication, agtduo connector to add support for DUO token devices and to add the "created", "last_login", "status", and "tokens" account attributes.

  • Updated the Palo Alto Networks firewall with PAN-OS (SSH), agtpanos connector for the following:

    • added the readline_match function to process instructions line by line

    • added the credentialoverride function to call the ExtractAddressParams function to ensure that prompts are set automatically

    • additional bug fix improvements for the connector operations

  • Added filtering to the Entrust IdentityGuard, agtentrustig connector to prevent duplicates for user listing during auto-discovery.

  • Added verbose level log entries for Unix connectors, agtaix ,when there are generic type password related failures to assist in debugging.

  • Added function logsanitize that wipes passwords from the log output for unixssh and the ssh connectors.

  • Extended support for the Salesforce connector to include permission set groups.

  • Enhanced the Workday Human Resources connector, agtworkday to list future hires.

  • Added a writability check for the listing operations for connectors and to report any errors when failing to write to a list file.

Resolved issues

Python

  • Fixed an issue with the Python script (Ticket) target for pxpython when updating the target address configuration that previously resulted in the "Operation results missing for index [0]." message.

  • Fixed syntax issues for the listoverride.py Python sample script and List Override option for users containing special characters and to prevent potential SQL injection attacks.

Exchange

  • Fixed an issue with the Exchange connector by adding additional support for the hybrid mode and removing the _container_dn account attribute.

  • Removed legacy checking on the _container_dn attribute input from the Microsoft Exchange server, agtexg2k7 connector as it is not necessarily needed in Exchange newer versions and sometimes causes issues.

Salesforce

  • Updated the Salesforce connector to add a retry loop for web requests that rely on looping over paged information and for when the WinHttp status code 500 is encountered.

  • Fixed an issue for session ID errors found in the SessionHeader session for the Salesforce connectors.

  • Fixed an issue with the Salesforce connector regarding invalid session failures by removing the logout operation.

SSH

  • Fixed connection time out issue with agtssh based connectors.

  • Modified the Oracle Solaris Server 9.x+ (SSH) connector to add a "Custom shell" target address parameter to be able to change the location of the shell script to be used.

  • Fixed an issue with the SSH connector regarding passing configuration parameters into the PuTTY library and when compression is requested via address line attributes.

Directory Services

  • Modified persistent listing to ensure that intial incremental lists are aggregated into one iddiscover list for LDAP and ADDN targets.

  • Fixed an agtldap crash for the 389 Directory Server for multi-node and replicated directory server configurations.

  • Adjusted the Active Directory DN connector, agtaddn attribute definitions for cn, sAMAccountName and userPrincipalName. The former two are now sequence number -1, and the last sequence number 0, with all now having Ignore/None as possible actions for attribute creation and update.

PeopleSoft

  • Adjusted the PeopleSoft Application Server connector to use the Peoplesoft API user handle more efficiently when under heavy load.

Other

  • Added support for managing roles as groups to the Google Applications connector (agtgapps).

  • Ehanced the error handling and logging for the Windows NT Server, (agtnt) connector when listing groups.

  • Fixed an issue with the Success Factors Employee Central, agtsfrestec connector to use the URL properly.

  • Fixed a crash for pslang connectors relating to kvg address line options to better handle kvgroups when converting arrays.

  • Modified the TopSecret connector, agtts for the verifyreset operation for password resets to now run a reset operation.

  • Fixed error handling in reset operation for Sophos Safeguard, agtsge connector.

  • Fixed the pagination for the Okta connector when listing groups from Okta target systems.

  • Fixed the Microsoft SQL Server, agtsql connector to allow the target administrator password to contain a semi-colon.

  • Modified the SQL and Oracle scripted connectors to no longer show sensitive sql statement information during connector operations.

  • Fixed Oracle Group Delete operation by exposing isuseringroup callback into agtorascript oraebiz script.