NetCrusader/Web Release Notes

Software Version 5.0

[Notices] [Contents]

These release notes provide release information on NetCrusader™/Web Version 5.0 software.

This document contains the following sections:

• Release Contents
  
• New Features
  
• Unsupported Features
  
• Problems Fixed
  
• Known Problems and Workarounds
  
• Operations Notes
  
• Obtaining Supporting Software
  
• Obtaining Technical Support
  

To ensure that you are using the latest Entegrity documentation, check the Entegrity Documentation Library located in the technical support area of our web site (http://support.entegrity.com). This library contains the latest document revisions. You can find a document's revision date on its Notices page.

2. Release Contents

Version 5.0 of NetCrusader/Web runs only on the following operating systems:

• Windows NT Version 4.0, Service Pack 3 or greater
  
• Windows 2000 Server and Advanced Server
  

For a description of product prerequisites, including supported web servers and web browsers, see the Prerequisites chapter of the NetCrusader/Web Installation and Operation Guide.

The product CD contains the following items:

• NetCrusader/Web 5.0 Security Adapter
  
• NetCrusader/Web 5.0 Toolkit
  
• Microsoft Management Console 1.1 (for Windows NT users only)
  For a description of the contents of the NetCrusader/Web product, see the Product Overview chapter of the NetCrusader/Web Overview Guide.

The following new features were added in Version 5.0:

• Support for Windows 2000 Server and Advanced Server

• Support for Microsoft Internet the Microsoft Internet Information Server 5.0 web server on Windows 2000 Server editions. (The IIS web server is a standard part of the Windows 2000 Server operating system.)

• Support for the preconfig.tcl script that ships with the NetCrusader Security Server product that was introduced in Version 4.1 has been updated. For more information on this script, see the release notes for Version 4.1.

• In the Documentation Library on the product CD, we have added an HTML version of the NetCrusader Commander help file so that users can browse Commander help offline. To access the HTML version, launch the doclib\index.htm file with any HTML browser.

  The following new features were added in Version 4.1:

• NetCrusader/Web Version 4.1 now supports Entegrity Gradient PC-DCE Version 4.0 or later.

• The preconfig.tcl script that ships with the NetCrusader Security Server product has been updated to include NetCrusader/Web support. This script is a TCL/TK script that allows the cell administrator to designate a local administrator who can configure the NetCrusader Security Service client on client machines. This allows local administrators to configure a full client into a cell without knowing the cell administrator password. The NetCrusader/Web Installation and Operation Guide has been updated to include information on using the NetCrusader/Web support in this script.

• An additional sample is included on the NetCrusader/Web product CD in the NT40\Toolkit\Samples directory. This sample shows some sample code for a Web-based banking application. The application itself was not tested fully with this product, but is included to show how you could use NetCrusader/Web for such an application.

The following features were dropped as of Version 5.0:

• LDAP Support — NetCrusader/Web no longer supports the Innosoft Distributed Directory Server (IDDS) for LDAP (Lightweight Directory Access Protocol) as a security registry.

• The product CD no longer contains NetCrusader Security Software (PC-DCE). You must obtain that product separately from Entegrity.

• The product CD no longer contains the Internet Explorer browser. You can obtain that product separately from Microsoft.

The following historical information is provided for quick reference. For details, see the release notes for the specific version.

Version 4.1

As of Version 4.1, the AIX and Solaris operating systems are not supported in the general product. Contact Entegrity Technical Support for information on NetCrusader/Web support on AIX and Solaris platforms and their corresponding web servers.

Version 4.0.1

The following features were dropped as of Version 4.0.1:

• The Secure Local Proxy (SLP) client
  
• Compatibility with IIS version 3.0
  
• Junctions to SCGI ("Wand") Servers
  

NetCruasder/Web Commander would crash when performing the following:

• Select the Options property sheet and click OK or Cancel.
  
• Select the New User or New Group property sheet and click OK or Cancel.
  

This problem was specific to the Commander interface when used with Microsoft Management Console version 1.2, which is a standard component of the IIS 5.0 product on Windows 2000. It was a result of a misplaced resource deallocation from the Commander's snap-in interface. The crash did not lead to any loss of data.

This problem has been fixed.

User Able to Login without Password

Under some circumstances, if a user authenticated to a website with NetCrusader/Web and then closed the browser and either reopened it or went to another machine using a different browser, the user was able to access the secured site with a only a userid. This has been fixed.

User Unable to Log in After Entering Invalid Password

In version 4.0 and 4.0.1, if a user typed the password incorrectly, the user was never able to authenticate again without closing and reopening the browser. This has been fixed.

6. Known Problems and Workarounds

This sections contains information on suggested solutions to problems known to exist in this release of the NetCrusader/Web software.

NetCrusader/Web Commander Unable to Show Nested Virtual Folders

This is a current limitation of the design of NetCrusader Commander. Commander has the ability to display the Internet Information Server's nested virtual folders only at the root level. This design issue will be addressed in a future patch.

To work around this issue, create virtual directories only at the root level.

Problems when Launching Commander

Sometimes when launching NetCrusader Commander, the message "The selected file is not a Microsoft Management Console document" appears.

This error appearly mainly with early versions of the Microsoft Management Console (MMC) or when using MMC Version 1.2 or 1.3 to open files created with MMC Version 1.1.

To overcome this problem, install a later version of MMC. On Windows 2000 systems, saving MMC 1.1 format files as MMC 1.2 format files solves the problem.

Commander Crashes When You Try to Access Online Help

If Commander crashes when you try to access NetCrusader Management online help, it means that the Commander help file Commandr.chm is corrupt.

To solve this problem:

1. Obtain a working copy of Commandr.chm from another system or from Entegrity Technical Support. (You can tell if the file is working by double-clicking it. If help launches successfully standalone, the file works.)

2. Place a fresh copy in these two places:
   • <install_dir>NetCrusader\help
     
   • C:\WINNT\Help
     

Make sure that the copy in C:\WINNT\Help is not corrupt. Microsoft MMC looks for there for the help file.

Adding NetCrusader Management as a Snap-In (Windows NT only)

When adding standalone snap-ins to the Microsoft Management Console (MMC), NetCrusader Management appears as one of the available snap-ins. NetCrusader Management is the snap-in within NetCrusader Commander.

Never add NetCrusader Management as a snap-in to other MMC items (for example, Internet Service Manager). NetCrusader Management, when trying to authenticate, displays a message box prompting for a user name. Due to Windows user interface updating, this could cause the embedding MMC to crash. The only way to recover that MMC program would be to re-install the corresponding product.

Using NetCrusader/Web with NetCrusader/CORBA

If you want to use NetCrusader/CORBA with NetCrusader/Web 4.0 and higher, update corbasec.dll with the new version provided on the Entegrity NetCrusader/Web distribution CD.

Administrative Notes

You cannot change ACLs for, or delete, any group of which the security administrator is a member. (This restriction is to prevent accidentally doing this and losing the ability to manage the system). If you need to do one of these tasks, temporarily remove the administrator from the group you want to delete or change ACLs for so that you may perform the desired action.

Error when Installing in Netscape Enterprise Server Environments

If you install NetCrusader/Web on a machine with Netscape Enterprise Server Version 3.5 or later the installation may fail if Microsoft Windows NT Option Pack 4 is not installed on that machine. When installing, you will receive a fatal error "netcauth.dll failed to self-register." netcauth.dll is the COM object and is used only with NetCrusader/Web deployments on Microsoft Internet Information Server (IIS). This NetCrusader/Web Dynamic Link Library (netcauth.dll) is not intended to be run in an exclusive Netscape Enterprise Server environment.

Installing with Older NetCrusader Security Software

NetCrusader/Web 4.1 works only with Version 4.0 or later of the NetCrusader Security software. If you install NetCrusader/Web v4.1 on a system containing an older version of the NetCrusader Security software, a message box asking for an upgrade to 4.0 appears and the setup exits.

Using NetCrusader Security Tools with NetCrusader/Web

This version of NetCrusader/Web requires Version 4.0 of the NetCrusader Security software. That security software contains new management tools, Visual ACL Editor and DCE Director, which let you manage your DCE cell (for example, you can manage users, groups, and ACLs).

We recommend that you use NetCrusader Commander instead of these tools for managing web server security. If you need to perform general DCE management, use the management tools.

Large Time Skews Can Cause Installation Failure

Time skews (differences in clock settings) of greater than five minutes between a Security Adapter host and the master Security Server host can cause the installation of the Security Client on the Security Adapter host to fail, thereby causing installation of the Security Adapter to fail. If you experience an unexplained installation failure, please check for this condition.

Problems Caused by Installing into Wrong Directory

Do not install the Security Adapter into the same directory as the Security Client or as the Security Server. This can cause several installation and uninstallation problems.

Uninstallation Notes

When uninstalling the product, you must uninstall the NetCrusader/Web Security Adapter first, and then uninstall the Security Client or Server.

For IIS, if you have enabled junctions, or if you have created virtual directories to the sample applications in the samples directories, you must delete these virtual directories prior to uninstalling the product, otherwise uninstall will not be able to remove all the directories.

7. Operations Notes

The following operations notes contain tips to help ensure smooth running of NetCrusader/Web and, in some instances, further explanations of how NetCrusader/Web works.

Security Infrastructure

It is highly recommended that you use PC-DCE 4.0.3 as the security infrastructure. PC-DCE 4.0.3 contains a major fix to its IP Address resolution mechanism that aids in the smooth operation of the web adapter's configuration process.

Using Commander to Assign ACLs on Groups

When using Commander to assign ACLs on a group, you must wait for a default period of cache timeout after the assignment before seeing the new permissions take effect on a user who was previously not in the permitted group but an invalid login attempt was made earlier within the timeout period. (The default cache timeout is usually 5 minutes or 300 seconds.)

For example, if user A does not have access permissions for your website and attempts to login, user A sees the red access denied page. If user A is then immediately added to a group which has permissions, then A still continues to see the red screen if the next login attempt is made within the default cache timeout period. (By default, the cache timout period is set to 300 seconds or 5 minutes.)

For A to login successfully, A has to login after 5 minutes of inactivity. This enables the Security Adapter to obtain the latest group membership information for user A.

New Logins and Browser Sessions

For best results, use a new browser to attempt a new login for a user. This is because any previous failed login attempts will be remembered in the server-side session cache for the current browser. A future enhancement is planned for the product which will enhance the server-side cache management for better browsing capability for the client.

Also note that when loging into a website using a new browser, you may use the same browser to login to another website. But, if you attempt to return to your previous website after the cache's timeout of 300 seconds, then you will not be allowed to enter that website and will be shown the red access denied screen. This is because your previous login cache data would have expired due to 5 minutes of inactivity.

If you need further information, please contact support@entegrity.com.

8. Obtaining Supporting Software

The NetCrusader/Web 4.1 CD does not contain any NetCrusader Security software (PC-DCE). To obtain this software, please contact Entegrity sales or support.

9. Obtaining Technical Support

If you purchased your NetCrusader product from Entegrity Solutions, you are entitled to 30 days of limited technical support beginning on the day the product is expected to arrive.

You may also purchase a support plan that entitles you to additional services. You must register prior to receiving this support. For details, refer to the customer support information package that accompanied your shipment or refer to the Technical Support area of http://support.entegrity.com. The Web site also contains online forms for easy registration.

If you purchased NetCrusader from a reseller, please contact the reseller for information on obtaining technical support.

Contacting Entegrity Solutions

For a complete listing of Entegrity Solutions Corporation sales, research and development, and solutions centers worldwide, please see the Entegrity web site at http://www.entegrity.com.

[Notices] [Contents]

To make comments or ask for help, contact support@entegrity.com.

Copyright © 1997-2001 Entegrity Solutions Corporation & its subsidiaries
All Rights Reserved.