4.3.0
Features and improvements
Python
Added support for Python 3.10.x for the
agtpython
andpxpython
connectors.The Python script connector now has the ability to do incremental listing and last modified time is accessible in the Python script.
Added alternate agtpython-3.7.exe and agtpython-3-10.exe connectors for Python 3.7 and 3.10 respectively.
Okta
Added the "Custom search expression for filtering groups" target address option for Okta target systems to be able to only list groups based on the specified group filter.
Modifications for the Okta connector to be able to list properly for 11.1.3 and earlier instances.
Directory Services
Modified the Active Directory DN,
agtaddn
connector to add ObjectType, ObjCount, ObjRelMBRCount, and ObjRelOWNRCount to the PerfConnectorExt performance statistics in the logs for the listobj operation for the object type and number of objects, group members, and owners.Extended the connector operation log information for the PerfConnector string for objects and object relationships for
agtldap
.Added the ability to specify the domain controller during the nrcreate operation for the Active Directory
nrcifs
network resource connector and using the _operationDC pseudo attribute.Enhanced the Azure connector to support advanced queries in the user search filter.
Adjusted Microsoft Azure Active Directory connector,
agtazure
, to use "user principal name" as longid.Refactored the Active Directory DN connector,
agtaddn
to improve stability.Enhanced logging for the Active Directory DN connector,
agtaddn
during listing and auto-discovery.Added the @accountLocked account attribute for Active Directory DN targets,
agtaddn
to be able to display the account lockout status of a user.Updated the Active Directory DN,
agtaddn
connector to log the last time that an attribute list was performed if the last list time attribute was set.Added the "_operationDC" pseudo attribute to the output for the Active Directory DN,
agtaddn
connector's create operation.Added an extra connect for the
nrcifs
andnrsmb
network resource connectors when listing local members of groups.Added support for the Azure connector to be able to list and manage Azure roles as groups.
Exchange
Added support for Microsoft Exchange 2019 for the Exchange connector.
Adjusted the Exchange connector to be able to return the proper GUID in hybrid mode when creating users, which is a different field used in regular mode, as well as to take the input from the domain controller into account when setting attributes.
Added support for the Exchange connector to be able to to connect into Exchange online to manage mailboxes in the cloud.
Added support for the Exchange 2007+ Server connector,
agtexg2k7
to be able to delete accounts in the hybrid mode.Adjusted the Microsoft Exchange connector,
agtexg2k7
to be able to use the new EXO V2 module to connect to Exchange online.
Add support for token renew to Google Applications connector,
agtgapps
, as well as account attribute orgUnitPath .Enhanced the Google Applications connector to be able to use the specified primaryEmail account attribute and return the proper long id.
SAP
Added a new address option 'Enable listing of group membership as attributes' for the
agtsapnw
connector.Added incremental listing to
agtsapnw
.Exposed the pseudo attribute "_expirepw" on the
agtsapnw
connector that expires passwords upon creation of an account.
Other
Documentation has been added for the detail of and training for creating custom connectors .
Removed the OpenSSL library dependencies from the
agtldap
,agtsm
, andagttelnet
connectors. The libcrypto and libssl dlls as well as mtcspi-openssl.dll are also no longer installed for Connector Pack installations to the Common Files directories.The libcrypto and libssl openssl dlls have been updated to version 1.1.1m for Connector Pack installations.
Modified the XML-RPC Web Service connector (
agtxml
) to add the URL target address parameter for the Server URL that services the XML requests.Added a name attribute to Oracle ERP Services,
agtoraerp
connector for group listing.Added ability to update the login attribute for Box Cloud Storage,
agtbox
connector.Adjusted the Amazon Web Services connector,
agtaws
to list additional attributes from discovered computer objects for further connection.Added an address attribute to ServiceNow IT Service Management Suite,
agtsvcnow
, to control proxy credentials.Updated the RSA Authentication Manager,
agtrsaam
connector to now make use of the 8.6.1 version of the RSA SecurID Authentication Agent SDK for C for authentication challenge response operations.Updated the DUO Authentication,
agtduo
connector to add support for DUO token devices and to add the "created", "last_login", "status", and "tokens" account attributes.Updated the Palo Alto Networks firewall with PAN-OS (SSH),
agtpanos
connector for the following:added the readline_match function to process instructions line by line
added the credentialoverride function to call the ExtractAddressParams function to ensure that prompts are set automatically
additional bug fix improvements for the connector operations
Added filtering to the Entrust IdentityGuard,
agtentrustig
connector to prevent duplicates for user listing during auto-discovery.Added verbose level log entries for Unix connectors,
agtaix
,when there are generic type password related failures to assist in debugging.Added function logsanitize that wipes passwords from the log output for unixssh and the ssh connectors.
Extended support for the Salesforce connector to include permission set groups.
Enhanced the Workday Human Resources connector,
agtworkday
to list future hires.Added a writability check for the listing operations for connectors and to report any errors when failing to write to a list file.
Resolved issues
Python
Fixed an issue with the Python script (Ticket) target for
pxpython
when updating the target address configuration that previously resulted in the "Operation results missing for index [0]." message.Fixed syntax issues for the listoverride.py Python sample script and List Override option for users containing special characters and to prevent potential SQL injection attacks.
Exchange
Fixed an issue with the Exchange connector by adding additional support for the hybrid mode and removing the _container_dn account attribute.
Removed legacy checking on the _container_dn attribute input from the Microsoft Exchange server,
agtexg2k7
connector as it is not necessarily needed in Exchange newer versions and sometimes causes issues.
Salesforce
Updated the Salesforce connector to add a retry loop for web requests that rely on looping over paged information and for when the WinHttp status code 500 is encountered.
Fixed an issue for session ID errors found in the SessionHeader session for the Salesforce connectors.
Fixed an issue with the Salesforce connector regarding invalid session failures by removing the logout operation.
SSH
Fixed connection time out issue with
agtssh
based connectors.Modified the Oracle Solaris Server 9.x+ (SSH) connector to add a "Custom shell" target address parameter to be able to change the location of the shell script to be used.
Fixed an issue with the SSH connector regarding passing configuration parameters into the PuTTY library and when compression is requested via address line attributes.
Directory Services
Modified persistent listing to ensure that intial incremental lists are aggregated into one
iddiscover
list for LDAP and ADDN targets.Fixed an
agtldap
crash for the 389 Directory Server for multi-node and replicated directory server configurations.Adjusted the Active Directory DN connector,
agtaddn
attribute definitions for cn, sAMAccountName and userPrincipalName. The former two are now sequence number -1, and the last sequence number 0, with all now having Ignore/None as possible actions for attribute creation and update.
PeopleSoft
Adjusted the PeopleSoft Application Server connector to use the Peoplesoft API user handle more efficiently when under heavy load.
Other
Added support for managing roles as groups to the Google Applications connector (
agtgapps
).Ehanced the error handling and logging for the Windows NT Server, (
agtnt
) connector when listing groups.Fixed an issue with the Success Factors Employee Central,
agtsfrestec
connector to use the URL properly.Fixed a crash for pslang connectors relating to kvg address line options to better handle kvgroups when converting arrays.
Modified the TopSecret connector,
agtts
for the verifyreset operation for password resets to now run a reset operation.Fixed error handling in reset operation for Sophos Safeguard,
agtsge
connector.Fixed the pagination for the Okta connector when listing groups from Okta target systems.
Fixed the Microsoft SQL Server,
agtsql
connector to allow the target administrator password to contain a semi-colon.Modified the SQL and Oracle scripted connectors to no longer show sensitive sql statement information during connector operations.
Fixed Oracle Group Delete operation by exposing isuseringroup callback into
agtorascript
oraebiz script.