Designer 3.0.1 for Novell Identity Manager: Readme
May 05, 2009
Documentation
Localization
Installation
Encryption/Security
Generating Documentation for Projects
General Issues
Linux-Specific Issues
Workflow/Provisioning
Version Control
Legal
Documentation
What's New in Designer 3.0.1
The What's New section for Designer 3.0.1 for Identity Manager is included in the build. It will
also be available online after Designer 3.0.1 is
released.
Finding Documentation
The documentation for Designer 3.0.1 for Identity Manager is included in the build. It will
also be available online after the latest version is
released.
For information about Novell®
Identity Manager 3.6, refer to the documentation located at the Novell
Product Documentation Web site.
Browsing or Searching
- To browse the Designer help topics after Designer is installed:
- In Designer, click Help > Help Contents.
- Select a book, browse the table of contents, then click a topic.
- To search for specific Designer information after Designer is installed:
- Click Help > Search, then enter text. Or press F1 on any page. (In Linux, press CTRL-F1.)
- Type a topic in the Search field, then click Go.
Designer includes User Interface translation for Brazilian Portuguese, Chinese
(Simplified), Chinese (Traditional), Dutch, French, German, Italian, Japanese, and Spanish. The User
Interface language can be chosen at install or at runtime through the preferences dialog box.
This release does not include translation of Designer runtime help or product
documentation. At this time, project documentation generated by Designer is available in English only.
Some plugins are provided by the metadirectory and are available only in languages
supported by the metadirectory: Chinese (Simplified), Chinese (Traditional), French, German, and Japanese. Some
third-party plugins might be available in English only.
Installation
Unable to Install Designer on Windows
Some users have reported the inability to install Designer on Windows*. The install starts to run but
closes with the following error:
"This Application has Unexpectedly Quit."
If you see this issue, do the following:
Right-click the Designer install.exe file and choose Properties. Select the Compatibility tab.
Under the Compatibility mode section, choose the option to "Run this program in compatibility mode" and select Windows 2000 from the
drop-down menu. The Designer install should execute normally.
Installing Designer To a Network Drive with UAC Turned On in Windows Vista
Designer 3.0.1 is officially tested and supported on Windows Vista. However, if you turn on User Account
Control (UAC) in Windows Vista, programs may be unable to access some network locations and you cannot install Designer to a network
drive. This problem may also occur when you use the command prompt to access a network location.
To resolve this problem, you need to configure the EnableLinkedConnections registry value as per an article
entitled "After you turn on User Account Control in Windows Vista, programs may be unable to access some network locations" dated
July 20, 2007, in the Microsoft Knowelge Base.
Follow these steps to apply the workaround to configure the EnableLinkedConnections registry value:
1. Click Start, type regedit in the Start Search box, and then press ENTER.
2. Locate and then right-click the following registry subkey:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. Point to New, and then click DWORD Value.
4. Type EnableLinkedConnections, and then press ENTER.
5. Right-click EnableLinkedConnections, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Exit Registry Editor, and then restart the computer.
Installing on English Windows with East Asian Language Pack and with
Double Byte Install Path
When installing to a path where there are double byte characters and if your operating system
is running the English version of Windows
with the East Asian Language Packs installed, the install package will throw an error saying that it is unable to extract the
compressed file.
There are known issues with using Double Byte Character Sets (DBCS) in Windows file paths. We cannot provide fix at this time
as this would
have to come from the OS vendor or the install framework vendor. As an alternative you can install to DBCS paths when
installing to a localized
version of the operating system.
Designer Installs Its Own JRE
The installation installs a JRE specifically for Designer. This JRE won't impact Java* installed for
other uses on the workstation.
During Linux Install, Root Privileges are Required
Installing NICI requires root privileges.
The install program prompts you for the root password so that you can install this component.
On Linux, Install Throws an Exception Error
The following error occurs with some versions of Linux:
- Invocation of this Java Application has caused an InvocationTargetException. This application will now exit.
The xhost program makes Linux more secure by not allowing other hosts and users to make connections to
the X server. If you are logged in as a valid user and are trying to run the install as root, this error can occur. For more
information on xhost, refer to the man page for xhost.
Encryption/Security
Project Files Are Not Encrypted
Passwords are obfuscated. However, if you have other sensitive data in your project file, it is not
encrypted in any way, and you must take care to safeguard your information.
Generating Documentation for Projects
Use the Adobe Acrobat Reader for Linux
By default, Linux might be using a PDF reader (Evince) that doesn't
support the embedded font we use to display double-byte characters. We recommend that you use the Adobe Acrobat
Reader for Linux to support these languages.
General Issues
Notification Templates Are Filtered by Name and Locality Settings
When running Designer in any language, by default you see only notification templates
for the language that you are running in. To see templates in additional languages, change the filter settings for the
Outline view:
- Click the filter icon in the upper-right corner of the Outline view.
- Select the languages that you want to see.
Also, when creating new templates, you must add the proper language code to the template
name so that your new templates are filtered correctly. For example, a German template should be named
<TemplateName_de>. The language codes are as follows:
de-German
es-Spanish
fr-French
it-Italian
ja-Japanese
nl-Dutch
pt-Portugese
ru-Russian
sv-Swedish
zh-CN-Chinese Simplified
zh-TW-Chinese Traditional
en-English (or leave the language code off)
Designer Doesn't Launch after Installation on Windows Vista
Windows Vista has implemented a new "User Account Control" feature that prevents applications
to run as "Administrator" unless you specifically allow it. To run Designer in Vista, right-click the Designer shortcut
and choose the option to "Run as Administrator". You can also choose to disable "User Account Control" by selecting Start >
Control Panel > User Accounts > Turn User Account Control On or Off (have to be an administrator or equivalent).
Live Operations On Windows Vista Are Slow
When running Designer on Windows Vista, you may see poor performance when doing
live operations against a Windows 2003 server. You can resolve this issue by disabling TCP Auto Tuning on Windows Vista.
To do this, open a command prompt and enter the following:
netsh interface tcp set global autotuninglevel=disabled
JVM Crashes When Closing Designer On Windows Vista
After performing any live operation in Designer on Windows Vista, the JVM might crash
when you close Designer. This is due to an errant call in JClient. If this happens, no data is lost--simply close the error window.
This issue is being addressed.
Minimum Resolution Required for Designer
The minimum resolution required for Designer is 1024 x 768. The minimum recommended resolution for
Designer is 1280 x 1024.
Back Up Your Project Files and Project Data
It is a good practice to protect your work by periodically saving your project. We strongly suggest
that you use the Version Control feature in Designer 3.0.1 to automatically create versioned backups of your projects. You can also
easily make a copy of your projects by performing the following:
- Right-click a project in the Project view.
- Select Copy Project.
The Application Schema Is Not Imported by Default
Application schema is not automatically imported by default. You
can always perform a refresh application schema operation on a particular application after the project has been imported:
- Right-click the driver
- Select Live > Refresh application schema.
You can also change this preference by selecting Window > Preferences >Novell >Identity Manager > Import/Deploy >
Behaviors> Import, then select Include application schema when importing drivers.
Running Designer with 120 DPI Fonts in Windows
120 DPI is too large for text in standard Windows XP decorations. Adjust the Display settings:
- In the Control Panel, select Display > Appearance > Effects.
- In "Use the following method to smooth edges of screen fonts," toggle Standard to ClearType.
If you have a display that necessitates 120+ DPI fonts, you need ClearType. Besides the obvious anti-aliasing aspects, ClearType
gives fonts better weight. Without ClearType, the fonts are too thin and light, decreasing readability.
- Click OK, then click Advanced.
- In the Item field, reduce the Icon, Menu, Message Box, Selected Items, and ToolTip sizes.
- Reduce title bars and related controls to a preferred size.
- Fix icon spacing and scroll bar width.
- Make sure that you are running at a very high resolution.
This helps eliminate most of the display issues on an HD monitor.
Boosting Modeler Performance
If you want to maximize the performance on large-scale operations (for example, copy/paste
of several objects), you will find that the performance is up to ten times faster if you hide or close the Outline view.
You get even more performance if you also close the Properties view. To quickly restore these views, click Window >
Reset Perspective.
If a Project Contains a JDBC 3.5 Driver
If a project contains a JDBC 3.5 driver, you might notice the default driver name is JDBC 3\.5. This is
normal and will allow the driver to deploy correctly.
Designer 3.0.1 Does Not Support 2.1.1 Workspaces
Designer 2.1.1 workspaces are not compatible with Designer 3.0.1. Designer stores projects and configuration
information in a workspace. These workspaces are not compatible from one version of Designer to another. You need to point Designer 3.0.1 to a
new workspace, and not to a workspace used by a previous version of Designer.
If you have Designer 2.1.1 projects,
export your projects from 2.1.1 and import them into Designer 3.0.1. This runs the Converter wizard on the project, making it compatible
with Designer 3.0.1 architecture. In Designer 3.0.1, workspaces are found under the C:\Documents and Settings\Username\designer_workspace
directory for Windows XP, under C:\users\Username\designer_workspace for Windows Vista, and under the
\home\username\designer_workspace directory for Linux.
Unable to Import Schema with Class Names that Contain Double Quotation Marks
Designer cannot successfully import schema with class names that contain double quotes (for example, "customClass1"). The schema appears to be imported, but when you restart Designer it is no longer available.
To resolve this issue, you can deselect the quoted class (in the Designer Schema Import Wizard) before importing the schema.
Linux-Specific Issues
JVM Terminated. Exit Code=1 Error
Some installations have reported a JVM terminated. exit code=1 error on SLED 10 SP1 workstations. You can apply a temporary
workaround by performing the following to the /etc/X11/xorg.conf:
Section "Extensions"
Option "MIT-SHM" "no"
EndSection
Disabling this extension degrades performance, so it is not the best solution.
Installing Designer on openSUSE 10.3 with GNOME Interface
The GNOME interface in openSUSE 10.3 does not initially work with IDM Designer. Some of the problems
have been that Designer doesn't launch under GNOME, or Designer crashes as soon as you hover over a tooltip activated place, or
Designer crashes when deleting objects from the Project view.
In order for openSUSE 10.3 with GNOME to work with Designer 3.0.1, you need to update all of the libraries from openSUSE.org. Be sure
to include the following:
bug-buddy and
gtk2
If you are having problems when running the updates, or if you need to configure the update server,
go to the
"YaST Online Update" documentation site for additional help.
Stack Smashing Error on openSUSE 10.3
When starting Designer (on openSUSE 10.3) with StartDesigner.sh, you may receive the following error on the console:
"*** stack smashing detected ***: ~/designer/eclipse/jre/bin/java terminated"
and Designer fails to start. This error may be a result of using the Smart Common Input Method platform
(SCIM) language input system on your Linux desktop, and specifically the
scim-bridge-gtk module for GTK. You can fix this error in one of two ways:
1) remove the scim-bridge-gtk module, or
2) export the enviroment variable GTK_IM_MODULE=xim (click
"export GTK_IM_MODULE=xim" for further instructions).
Installing Designer on Debian-Based Linux Distributions
Although we cannot officially support all Linux distributions, many customers have reported
success running Designer on Debian-based distributions, such as Ubuntu. To do this, perform the following steps:
1) Download and extract (to a folder of your choice) Designer from the coolsolutions web site.
2) Use Ubuntu's synaptic package manager to install the alien, rpm, and gettext packages
(or from the command line, type sudo apt-get -f install alien rpm gettext
).
3) Change directories to the designerInstallDir directory.
4) Use rpm to install the nici rpm (from the command line, type sudo rpm -ivh --nodeps components/nici/nici.i386.rpm
)
*this adds an entry to the rpm database that the installer checks for when you type rpm -qa
at the command line.
5) The gettext rpm is also required for the standard Designer installer. Download any installable gettext.rpm version
and install it, such as rpm -ivh --nodeps gettext[version].rpm
. This adds the gettext entry to the rpm database.
6) Run the standard Designer ./install
script as a normal desktop user.
Running eDirectory with Designer on Linux
If you are running eDirectory on Linux and also want to run Designer, you might need to run Designer
as root. The eDirectory install requires you to install its base packages as root. This prevents a typical user
from running them. Specifically, Designer crashes if you are running as a non-root user when importing or deploying and
when connecting to a tree.
Running Designer on Linux with gtk-qt-engine
We don't recommend running Designer with the gtk-qt-engine RPM installed. This RPM package is
installed with SUSE Linux and some other Linux Distributions. Known issues cause crashes and Designer theme issues when this
package is installed.
If you must use this RPM package, obtain the latest version. You can download this version from
http://www.kde-look.org.
Even with the latest version of the package, Designer theme functionality might not be present.
To determine whether you have the gtk-qt-engine RPM package installed, enter:
If gtk-qt-engine appears in the list, you should remove the package by issuing the following command as
the root user:
rpm -e gtk-qt-engine
If You Encounter Display Issues on Linux
GNOME
If you encounter display issues in GNOME*:
- Select the Applications menu.
- Click Preferences > Font, then decrease the size of the application font.
- You can also adjust the thematic elements to your liking. Keep in mind that GTK thematic elements can cause performance issues
with Designer. If Designer is running slowly, especially when you use pull-down menus and other widgets, you might try changing to a
simplified GTK theme.
Normally, this process fixes display issues.
KDE
Because Eclipse (Designer) is a GTK application, it is recommended that you use GTK
themes rather than qt-based themes. This can be accomplished using one of the following methods:
Prerequisites:
You must remove the gtk-qt-engine package mentioned in the previous section. This can be done through YaST or by using the instructions
given above.
You need to have the following packages installed on your Linux system. If you installed the GNOME subsystem, you already have these
packages installed:
gtk-engines
gtk2-engines
control-center2 > Gnome Control Center
gtk2-themes > or the themes you downloaded, and all the related dependencies
gnome-themes > only needed if you are going to use Gnome Control Center to set your theme
Do one of the following:
-
Set your GTK theme and font settings from the KDE SUSE menu. Select Utilities > Desktop >Gnome Control Center.
You can set this control center application to automatically run each time KDE is started. The following command will
accomplish this:
ln -s /opt/gnome/lib/control-center-2.0/gnome-settings-daemon /home/user/.kde/Autostart
(for "user", use your username)
or
- Create a GTK control file (usually named .gtkrc-2.0) in your user home directory or the directory where your system is
configured to look for GTK2_RC_FILES. Entering "set |grep gtk" shows how this environment variable is configured and which files
it is looking for. The file should include the following information. You can use any font and GTK theme that you prefer.
include "/opt/gnome/share/themes/Xfce-stellar/gtk-2.0/gtkrc" style "user-font"
{
font_name="Sans Serif 6"
}
widget_class "*" style "user-font" gtk-theme-name="Xfce-stellar"
gtk-font-name="Sans Serif 6"
Launching Designer from the Shell on Linux
The StartDesigner.sh file sets important variables, permissions, and memory parameters. If Designer
isn't launched from this file, Designer won't function correctly or be able to call other programs (for example, Mozilla*) on
Linux.
StartDesigner.sh is located in the /path to the Designer install/designer/eclipse directory.
JVM Crashes when Launching Designer, the Welcome Page or Opening Help On 64-bit Linux
If the 32-bit version of xulrunner is installed on a 64-bit Linux distribution, the JVM might crash when you launch Designer,
when the Welcome Page displays, or when you view a Help topic. To resolve this problem, perform the following:
- Open the Designer.ini file located in the Designer install directory
- Add the following line to the end of the Designer.ini file:
-Dorg.eclipse.swt.browser.XULRunnerPath=/usr/lib/xulrunner-1.9/
- Save the Designer.ini file and launch Designer.
Welcome Page and Help System Don't Display on Some Linux Distributions
If the welcome page and Help system don't display correctly on Linux, it is probably because
your version of xulrunner isn't compatible with Eclipse. Designer uses the embedded browser that xulrunner provides in a few places, including the Welcome page and Help system.
To download a compatible version of xulrunner:
1) Download the xulrunner installer for Linux.
2) Unregister your current version of xulrunner by running the following command as root:
xulrunner --unregister-global
3) Follow the instructions to install xulrunner here.
4) Restart Designer and confirm that the welcome page is working as expected.
Workflow/Provisioning
A Form Field That Returns Undefined Does Not
Display an Error or Warning
If a field on a form used by a workflow returns the value "undefined", the form does not display
an Error or Warning message. This situation results from a problem in the script. In general, if a form script evaluates to
"undefined", the script is considered to be in error. The workaround is to make sure you do not set "undefined" in the
preactivity mappings. To do this, use a try/catch/finally block to ensure that there is always a valid value being sent to each control.
Possible Timeout When Setting Trustee Rights on a Provisioning Request Definition
You might encounter the following error message when trying to set Trustee Rights on a provisioning
request definition or when trying to access the Identity Vault via the ECMA expression builder:
Cannot connect to host 'xxx', verify the address is correct and the server is running.
If the address is correct and the server is running, this might be caused by a slow connection.
You can change the connection timeout by setting the Connection preference via Window > Preferences
> Novell > Provisioning.
Saving Incorrect Credentials in the Provisioning
Request Definition Editor
When you connect to the Identity Vault from the provisioning request editor (for example when
setting Trustee rights on a provisioning request definition) you are prompted for your Identity Vault credentials. If you type an
incorrect password and click the Save password button in the Identity Vault credentials dialog box, you cannot connect to the
Identity Vault and you are not prompted to retype your credentials.
To work around this issue, access the Modeler view and reconfigure the Identity Vault credentials for the project.
Version Control Compare with New User Application Driver Shows Ignorable Error
If you add a User Application driver to a project under version control, and you perform a compare,
(after checking in the project again), you might see the following exception in the error log:
Unable to find a light item for the path: Model/Provisioning/AppConfig/.appconfig
You can safely ignore this error.
Exceptions Thrown When Importing Project Archive
If you import a project archive file into Designer, you might not see existing team definitions. You also see the following error
in the error log:
org.eclipse.core.internal.resources.ResourceException:
Resource'/myProject/Model/Provisioning/AppConfig/TeamDefs/TeamDefs.digest'
To make the team definitions available, restart Designer.
Role Compare Shows Incorrect Results
If you use both the User Application user interface and Designer to create roles, Designer's Live > Compare feature
might not display the expected results. To work around this problem, you can:
--Use only Designer to create, delete, or modify all roles.
--Use the Compare window that displays during a deploy. The Compare window displays the correct results.
You can cancel the deploy, if you only want to see the compare results.
Null Pointer Exception Error When Checking In Provisioning Objects To Version Control
If you perform a Commit on any provisioning objects to version control when the Provisioning Request Definition (PRD) is
open with unsaved changes, you'll receive a Null Pointer Exception error in the error log. You might not realize that the commit failed unless
you have the Error Log view open. The easy workaround is to save the provisioning
object before checking it into version control or close the object without saving it. This bug will be fixed in a future release of Designer.
Reverting an Open Provisioning Request Definition Causes an Unexpected Behavior
If you revert a provisioning request definition (PRD) while it is open in the provisioning request definition editor,
the editor closes, then reopens with the refreshed version of the PRD. This is a normal action of the provisioning request definition editor.
Reverting Locale Changes Might Display Incorrect Status
When you use the Locales and Localization Resource Groups window (Configure > Locales)
to add and remove locales, then perform a version control Revert, Designer might incorrectly indicate that the local object has changed. When you
close the window by clicking OK and you have not made changes,
Designer indicates that the local object has changed. You can ensure that this does not happen by clicking Cancel instead of OK.
Problems When Setting Trustees on Read-only Provisioning Request
Definitions after Migrating User Application driver to 3.6.1
If you set trustees on one of the read-only provisioning request definitions (such as the Roles or Attestation objects)
on a User Application driver migrated to 3.6.1, Designer creates an extra copy of the provisioning request definition. You will see two objects
with the same name in the Provisioning view.
To delete the extra object:
- Backup your project.
- With the project open, access the Navigator view, then navigate to the project's Model\Provisioning\AppConfig\RequestDefs folder.
The Navigator view displays the provisioning request definitions as .prd and .digest files. The extra copy of the provisioning request
definition has the same name but with a number appended to it. For example, the Attestation Report displays in the Navigator view as
AttestationReport.prd and AttestationReport.digest. The extra copy displays as AttestationReport1.prd and
AttestationReport1.digest.
- Delete the files with the number appended to the name; for example, AttestationReport1.prd and AttestionReport1.digest.
- Save the project.
Version Control
404 Error When Comparing Version Control Revisions On Large Projects
There is an intermittent problem that occurs when you compare a large project, or when you have a very slow connection
when comparing a project. Compare takes a long time to run and not all of the items appear in the Compare window. Most of the time this problem goes
away when you try again. If the problem persists, contact Novell Support for information about turning off the status thread temporarily.
Driver Not Appearing in Version Control or Modeler Views after Running Get Updates
If you add a driver to a driver set on one computer, save that update to a version control server, then perform
a Get Updates on a second computer, you won't see the driver added to the driver set. The fix to this issue is to refresh the Modeler view by
closing and then reopening the view. Then run refresh on the Version Control view.
Copy/Paste, Drag&Drop Operations in Navigator View Don't Update Version Control
Copy and paste, drag & drop operations in the Navigator View are not handling files properly if they are under
version control. The workaround is to perform these operations from the Project view.
Legal Notices
A portion of Designer code includes derivative Eclipse code, where we have enhanced Eclipse source
code to best suite the needs of our product and customers. This code has been contributed back to the Eclipse community
under the EPL license agreement under Bugzilla entry #105582. The contributed code deals solely with general-purpose
Eclipse framework UI and contains no Identity Manager-specific code, concepts, or logic. Novell retains full rights and ownership
of all code outside of the specific code contributed, as noted in submission #105582.
This product includes software developed by IBM Corp. using the Eclipse platform (all rights reserved)
and the Apache Software Foundation (http://www.apache.org). Novell is an Eclipse Foundation Member.
This product includes TightVNC viewer software, which is a free remote control software package
derived from VNC. This is under the GPL license and ships as a separate plug-in, apart from the core Designer plug-ins.
(http://www.tightvnc.com).
Novell, Inc. makes no representations or warranties with respect to the contents or use of this
documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further,
Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any
obligation to notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export
controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverable. You agree not to export or re-export to entities on the
current US export exclusion lists or to any embargoed or terrorist countries as specified in the US export laws. You agree to not
use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to www.novell.com/info/exports/ for more information on exporting Novell
software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.
Copyright ©
2005-2009 Novell, Inc. All rights
reserved. No part of
this publication may be reproduced, photocopied, stored on a retrieval
system, or transmitted without the express written consent of the
publisher.
Novell, Inc. has
intellectual property rights relating to
technology
embodied in the product that is described in this document. In
particular, and without limitation, these intellectual property rights
may include one or more of the US patents listed at
http://www.novell.com/company/legal/patents/ and one or more additional
patents or pending patent applications in the US and in other countries.
For a list of trademarks, see the Novell Trademark and
Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html).
All third-party trademarks are the property of their
respective owners.
A trademark symbol (®,
TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.