Designer for Novell Identity Manager: Readme

The What's New section for Designer 3.0 for Identity Manager is included in the build. It will also be available online after Designer 3.0 is released.

Finding Documentation

The documentation for Designer 3.0 for Identity Manager is included in the build. It will also be available online after the official 3.0 version is released.

For information about Novell^® Identity Manager 3.6, refer to the documentation located at the Novell Product Documentation Web site.

Browsing or Searching

To browse the Designer help topics after Designer is installed:

In Designer, click Help > Help Contents.
Select a book, browse the table of contents, then click a topic.

To search for specific Designer information after Designer is installed:

Click Help > Search, then enter text. Or press F1 on any page. (In Linux, press CTRL-F1.)
Type a topic in the Search field, then click Go.

F1 Help inMaximized Editors

If you maximize an editor (for example, the Modeler), help topics do not display when you press F1. To view the help, minimize the editor.

Designer includes User Interface translation for Brazilian Portuguese, Chinese (Simplified), Chinese (Traditional), Dutch, French, German, Italian, Japanese, and Spanish. The User Interface language can be chosen at install or at runtime through the preferences dialog box.

Non-Translated Components

This release does not include translation of Designer runtime help or product documentation. At this time, project documentation generated by Designer is available in English only.

Plug-Ins

Some plugins are provided by the metadirectory and are available only in languages supported by the metadirectory: Chinese (Simplified), Chinese (Traditional), French, German, and Japanese. Some third-party plugins might be available in English only.

Installation

Unable to Install Designer on Windows

Some users have reported the inability to install Designer on Windows*. The install starts to run but closes with the following error:

"This Application has Unexpectedly Quit."

If you see this issue, do the following:

Right-click the Designer install.exe file and choose Properties. Select the Compatibility tab. Under the Compatibility mode section, choose the option to "Run this program in compatibility mode" and select Windows 2000 from the drop-down menu. The Designer install should execute normally.

Installing Designer To a Network Drive with UAC Turned On in Windows Vista

Designer 3.0 is officially tested and supported on Windows Vista. However, if you turn on User Account Control (UAC) in Windows Vista, programs may be unable to access some network locations and you cannot install Designer to a network drive. This problem may also occur when you use the command prompt to access a network location.

To resolve this problem, you need to configure the EnableLinkedConnections registry value as per an article entitled "After you turn on User Account Control in Windows Vista, programs may be unable to access some network locations" dated July 20, 2007, in the Microsoft Knowelge Base.

Follow these steps to apply the workaround to configure the EnableLinkedConnections registry value:

1. Click Start, type regedit in the Start Search box, and then press ENTER.
2. Locate and then right-click the following registry subkey: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
3. Point to New, and then click DWORD Value.
4. Type EnableLinkedConnections, and then press ENTER.
5. Right-click EnableLinkedConnections, and then click Modify.
6. In the Value data box, type 1, and then click OK.
7. Exit Registry Editor, and then restart the computer.

Installing on English Windows with East Asian Language Pack and with Double Byte Install Path

When installing to a path where there are double byte characters and if your operating system is running the English version of Windows
with the East Asian Language Packs installed, the install package will throw an error saying that it is unable to extract the compressed file.
There are known issues with using Double Byte Character Sets (DBCS) in Windows file paths. We cannot provide fix at this time as this would
have to come from the OS vendor or the install framework vendor. As an alternative you can install to DBCS paths when installing to a localized
version of the operating system.

Designer Installs Its Own JRE

The installation installs a JRE specifically for Designer. This JRE won't impact Java* installed for other uses on the workstation.

During Linux Install, Root Privileges are Required

Installing eDirectory^TM base components and NICI requires root privileges. The install program prompts you for the root password so that you can install these components.

On Linux, Install Throws an Exception Error

The following error occurs with some versions of Linux:

Invocation of this Java Application has caused an InvocationTargetException. This application will now exit.

The xhost program makes Linux more secure by not allowing other hosts and users to make connections to the X server. If you are logged in as a valid user and are trying to run the install as root, this error can occur. For more information on xhost, refer to the man page for xhost.

On Linux, Resizing Process Window after Pre-Installation Summary Halts Installation of Designer

This is a problem with the underlying install framework in use by Designer. The issue is being tracked and addressed by the third party company responsible for that install framework.

Encryption/Security

Project Files Are Not Encrypted

Passwords are obfuscated. However, if you have other sensitive data in your project file, it is not encrypted in any way, and you must take care to safeguard your information.

Generating Documentation for Projects

Use the Adobe Acrobat Reader for Linux

By default, Linux might be using a PDF reader (Evince) that doesn't support the embedded font we use to display double-byte characters. We recommend that you use the Adobe Acrobat Reader for Linux to support these languages.

General Issues

Notification Templates Are Filtered by Name and Locality Settings

When running Designer in any language, by default you see only notification templates for the language that you are running in. To see templates in additional languages, change the filter settings for the Outline view:

Click the filter icon in the upper-right corner of the Outline view.
Select the languages that you want to see.

Also, when creating new templates, you must add the proper language code to the template name so that your new templates are filtered correctly. For example, a German template should be named <TemplateName_de>. The language codes are as follows:

de-German
es-Spanish
fr-French
it-Italian
ja-Japanese
nl-Dutch
pt-Portugese
ru-Russian
sv-Swedish
zh-CN-Chinese Simplified
zh-TW-Chinese Traditional
en-English (or leave the language code off)

Designer Doesn't Launch after Installation on Windows Vista

Windows Vista has implemented a new "User Account Control" feature that prevents applications to run as "Administrator" unless you specifically allow it. To run Designer in Vista, right-click the Designer shortcut and choose the option to "Run as Administrator". You can also choose to disable "User Account Control" by selecting Start > Control Panel > User Accounts > Turn User Account Control On or Off (have to be an administrator or equivalent).

Live Operations On Windows Vista Are Slow

When running Designer on Windows Vista, you may see poor performance when doing live operations against a Windows 2003 server. You can resolve this issue by disabling TCP Auto Tuning on Windows Vista. To do this, open a command prompt and enter the following:

netsh interface tcp set global autotuninglevel=disabled

JVM Crashes When Closing Designer On Windows Vista

After performing any live operation in Designer on Windows Vista, the JVM might crash when you close Designer. This is due to an errant call in JClient. If this happens, no data is lost--simply close the error window.

This issue is being addressed.

Minimum Resolution Required for Designer

The minimum resolution required for Designer is 1024 x 768. The minimum recommended resolution for Designer is 1280 x 1024.

Back Up Your Project Files and Project Data

It is a good practice to protect your work by periodically saving your project. We strongly suggest that you use the Version Control feature in Designer 3.0 to automatically create versioned backups of your projects. You can also easily make a copy of your projects be performing the following:

Right-click a project in the Project view.
Select Copy Project.

The Application Schema Is Not Imported by Default

Application schema is not automatically imported by default. You can always perform a refresh application schema operation on a particular application after the project has been imported:

Right-click the driver
Select Live > Refresh application schema.
You can also change this preference by selecting Window > Preferences >Novell >Identity Manager > Import/Deploy > Behaviors> Import, then select Include application schema when importing drivers.

Running Designer with 120 DPI Fonts in Windows

120 DPI is too large for text in standard Windows XP decorations. Adjust the Display settings:

In the Control Panel, select Display > Appearance > Effects.
In "Use the following method to smooth edges of screen fonts," toggle Standard to ClearType.
If you have a display that necessitates 120+ DPI fonts, you need ClearType. Besides the obvious anti-aliasing aspects, ClearType gives fonts better weight. Without ClearType, the fonts are too thin and light, decreasing readability.
Click OK, then click Advanced.
In the Item field, reduce the Icon, Menu, Message Box, Selected Items, and ToolTip sizes.
Reduce title bars and related controls to a preferred size.
Fix icon spacing and scroll bar width.
Make sure that you are running at a very high resolution.
This helps eliminate most of the display issues on an HD monitor.

Boosting Modeler Performance

If you want to maximize the performance on large-scale operations (for example, copy/paste of several objects), you will find that the performance is up to ten times faster if you hide or close the Outline view. You get even more performance if you also close the Properties view. To quickly restore these views, click Window > Reset Perspective.

If a Project Contains a JDBC 3.5 Driver

If a project contains a JDBC 3.5 driver, you will notice the default driver name is JDBC 3\.5. This is normal and will allow the driver to deploy correctly.

Designer 3.0 Does Not Support 2.1.1 Workspaces

Designer 2.1.1 workspaces are not compatible with Designer 3.0. Designer stores projects and configuration information in a workspace. These workspaces are not compatible from one version of Designer to another. You need to point Designer 3.0 to a new workspace, and not to a workspace used by a previous version of Designer.

If you have Designer 2.1.1 projects, export your projects from 2.1.1 and import them into Designer 3.0. This runs the Converter wizard on the project, making it compatible with Designer 3.0 architecture. In Designer 3.0, workspaces are found under the C:\Documents and Settings\Username\designer_workspace directory for Windows XP, under C:\users\Username\designer_workspace for Windows Vista, and under the \home\username\designer_workspace directory for Linux.

Linux-Specific Issues

JVM Terminated. Exit Code=1 Error

Some installations have reported a JVM terminated. exit code=1 error on SLED 10 SP1 workstations. You can apply a temporary workaround by performing the following to the /etc/X11/xorg.conf:

Section "Extensions"
Option "MIT-SHM" "no"
EndSection

Disabling this extension degrades performance, so it is not the best solution.

Installing Designer on openSUSE 11

Designer 3.0 is not officially supported or tested on openSuSE 11.0. However, if you want to run Designer on openSuSE 11.0, perform the following steps:

1) Remove the following lines from the Designer.ini file, which is found in the directory where you installed Designer:

-XX:+UseParallelGC
-XX:ParallelGCThreads=20
-XX:+UseParallelOldGC

2) Install the libpng3 package using the Software Management component of YaST.

Installing Designer on openSUSE 10.3 with GNOME Interface

The GNOME interface in openSUSE 10.3 does not initially work with IDM Designer. Some of the problems have been that Designer doesn't launch under GNOME, or Designer crashes as soon as you hover over a tooltip activated place, or Designer crashes when deleting objects from the Project view. In order for openSUSE 10.3 with GNOME to work with Designer 3.0, you need to update all of the libraries from openSUSE.org. Be sure to include the following:

bug-buddy and

gtk2

If you are having problems when running the updates, or if you need to configure the update server, go to the "YaST Online Update" documentation site for additional help.

Stack Smashing Error on openSUSE 10.3

When starting Designer (on openSUSE 10.3) with StartDesigner.sh, you may receive the following error on the console:

"*** stack smashing detected ***: ~/designer/eclipse/jre/bin/java terminated"

and Designer fails to start. This error may be a result of using the Smart Common Input Method platform (SCIM) language input system on your Linux desktop, and specifically the scim-bridge-gtk module for GTK. You can fix this error in one of two ways:

1) remove the scim-bridge-gtk module, or
2) export the enviroment variable GTK_IM_MODULE=xim (click "export GTK_IM_MODULE=xim" for further instructions).

Installing Designer on Debian-Based Linux Distributions

Although we cannot officially support all Linux distributions, many customers have reported success running Designer on Debian-based distributions, such as Ubuntu. To do this, perform the following steps:

1) Download and extract (to a folder of your choice) Designer from the coolsolutions web site.
2) Use Ubuntu's synaptic package manager to install the alien, rpm, and gettext packages (or from the command line, type sudo apt-get -f install alien rpm gettext).
3) Change directories to the designerInstallDir directory.
4) Use rpm to install the nici rpm (from the command line, type sudo rpm -ivh --nodeps components/nici/nici.i386.rpm) *this adds an entry to the rpm database that the installer checks for when you type rpm -qa at the command line.
5) The gettext rpm is also required for the standard Designer installer. Download any installable gettext.rpm version and install it, such as rpm -ivh --nodeps gettext[version].rpm. This adds the gettext entry to the rpm database.
6) Run the standard Designer ./install script as a normal desktop user.

Opening External Links in the Readme Displayed at the End of the Designer Install

Our installation framework provided by Macrovision confirms that opening external links in the Readme at the end of the Linux install is a problem with the Macrovision framework. At this time, you need to open these links manually.

Running eDirectory with Designer on Linux

If you are running eDirectory on Linux and also want to run Designer, you might need to run Designer as root. The eDirectory install requires you to install its base packages as root. This prevents a typical user from running them. Specifically, Designer crashes if you are running as a non-root user when importing or deploying and when connecting to a tree.

Running Designer on Linux with gtk-qt-engine

We don't recommend running Designer with the gtk-qt-engine RPM installed. This RPM package is installed with SUSE Linux and some other Linux Distributions. Known issues cause crashes and Designer theme issues when this package is installed.

If you must use this RPM package, obtain the latest version. You can download this version from http://www.kde-look.org.

Even with the latest version of the package, Designer theme functionality might not be present.

To determine whether you have the gtk-qt-engine RPM package installed, enter:

rpm -qa|grep gtk-qt

If gtk-qt-engine appears in the list, you should remove the package by issuing the following command as the root user:

rpm -e gtk-qt-engine

If You Encounter Display Issues on Linux

GNOME
If you encounter display issues in GNOME*:

Select the Applications menu.
Click Preferences > Font, then decrease the size of the application font.
You can also adjust the thematic elements to your liking. Keep in mind that GTK thematic elements can cause performance issues with Designer. If Designer is running slowly, especially when you use pull-down menus and other widgets, you might try changing to a simplified GTK theme.

Normally, this process fixes display issues.

KDE
Because Eclipse (Designer) is a GTK application, it is recommended that you use GTK themes rather than qt-based themes. This can be accomplished using one of the following methods:

Prerequisites:

You must remove the gtk-qt-engine package mentioned in the previous section. This can be done through YaST or by using the instructions given above.

You need to have the following packages installed on your Linux system. If you installed the GNOME subsystem, you already have these packages installed:

gtk-engines

gtk2-engines

control-center2 > Gnome Control Center

gtk2-themes > or the themes you downloaded, and all the related dependencies

gnome-themes > only needed if you are going to use Gnome Control Center to set your theme

Do one of the following:

Set your GTK theme and font settings from the KDE SUSE menu. Select Utilities > Desktop >Gnome Control Center. You can set this control center application to automatically run each time KDE is started. The following command will accomplish this:

Create a GTK control file (usually named .gtkrc-2.0) in your user home directory or the directory where your system is configured to look for GTK2_RC_FILES. Entering "set |grep gtk" shows how this environment variable is configured and which files it is looking for. The file should include the following information. You can use any font and GTK theme that you prefer.
include "/opt/gnome/share/themes/Xfce-stellar/gtk-2.0/gtkrc" style "user-font"
{
font_name="Sans Serif 6"
}
widget_class "*" style "user-font" gtk-theme-name="Xfce-stellar"
gtk-font-name="Sans Serif 6"

Launching Designer from the Shell on Linux

The StartDesigner.sh file sets important variables, permissions, and memory parameters. If Designer isn't launched from this file, Designer won't function correctly or be able to call other programs (for example, Mozilla*) on Linux.

StartDesigner.sh is located in the /path to the Designer install/designer/eclipse directory.

Welcome Page and Help System Don't Display on Some Linux Distributions

If the welcome page and Help system don't display correctly on Linux, it is probably because your version of xulrunner isn't compatible with Eclipse. Designer uses the embedded browser that xulrunner provides in a few places, including the Welcome page and Help system.

To download a compatible version of xulrunner:

1) Download the xulrunner installer for Linux.

2) Unregister your current version of xulrunner by running the following command as root:

xulrunner --unregister-global

3) Follow the instructions to install xulrunner here.

4) Restart Designer and confirm that the welcome page is working as expected.

Workflow/Provisioning

A Form Field That Returns Undefined Does Not Display an Error or Warning

If a field on a form used by a workflow returns the value "undefined", the form does not display an Error or Warning message. This situation results from a problem in the script. In general, if a form script evaluates to "undefined", the script is considered to be in error. The workaround is to make sure you do not set "undefined" in the preactivity mappings. To do this, use a try/catch/finally block to ensure that there is always a valid value being sent to each control.

Possible Timeout When Setting Trustee Rights on a Provisioning Request Definition

You might encounter the following error message when trying to set Trustee Rights on a provisioning request definition or when trying to access the Identity Vault via the ECMA expression builder:

Cannot connect to host 'xxx', verify the address is correct and the server is running.

If the address is correct and the server is running, this might be caused by a slow connection.

You can change the connection timeout by setting the Connection preference via Window > Preferences > Novell > Provisioning.

Saving Incorrect Credentials in the Provisioning Request Definition Editor

When you connect to the Identity Vault from the provisioning request editor (for example when setting Trustee rights on a provisioning request definition) you are prompted for your Identity Vault credentials. If you type an incorrect password and click the Save password button in the Identity Vault credentials dialog box, you cannot connect to the Identity Vault and you are not prompted to retype your credentials.

To work around this issue, access the Modeler view and reconfigure the Identity Vault credentials for the project.

Version Control Compare with New User Application Driver Shows Ignorable Error

If you add a User Application driver to a project under version control, and you perform a compare, (after checking in the project again), you might see the following exception in the error log:

Unable to find a light item for the path: Model/Provisioning/AppConfig/.appconfig

You can safely ignore this error.

Exceptions Thrown When Importing Project Archive

If you import a project archive file into Designer, you might not see existing team definitions. You also see the following error in the error log:

org.eclipse.core.internal.resources.ResourceException:
Resource'/myProject/Model/Provisioning/AppConfig/TeamDefs/TeamDefs.digest'

To make the team definitions available, restart Designer.

Role Compare Shows Incorrect Results

If you use both the User Application user interface and Designer to create roles, Designer's Live > Compare feature might not display the expected results. To work around this problem, you can:

--Use only Designer to create, delete, or modify all roles.
--Use the Compare window that displays during a deploy. The Compare window displays the correct results.

You can cancel the deploy, if you only want to see the compare results.

Null Pointer Exception Error When Checking In Provisioning Objects To Version Control

If you perform a Commit on any provisioning objects to version control when the Provisioning Request Definition (PRD) is open with unsaved changes, you'll receive a Null Pointer Exception error in the error log. You might not realize that the commit failed unless you have the Error Log view open. The easy workaround is to save the provisioning object before checking it into version control or close the object without saving it. This bug will be fixed in a future release of Designer.

Reverting an Open Provisioning Request Definition Causes an Unexpected Behavior

If you revert a provisioning request definition (PRD) while it is open in the provisioning request definition editor, the editor closes, then reopens with the refreshed version of the PRD. This is a normal action of the provisioning request definition editor.

Reverting Locale Changes Might Display Incorrect Status

When you use the Locales and Localization Resource Groups window (Configure > Locales) to add and remove locales, then perform a version control Revert, Designer might incorrectly indicate that the local object has changed. When you close the window by clicking OK and you have not made changes, Designer indicates that the local object has changed. You can ensure that this does not happen by clicking Cancel instead of OK.

Problems When Setting Trustees on Read-only Provisioning Request Definitions after Migrating User Application driver to 3.6.1

If you set trustees on one of the read-only provisioning request definitions (such as the Roles or Attestation objects) on a User Application driver migrated to 3.6.1, Designer creates an extra copy of the provisioning request definition. You will see two objects with the same name in the Provisioning view.

To delete the extra object:

Backup your project.
With the project open, access the Navigator view, then navigate to the project's Model\Provisioning\AppConfig\RequestDefs folder. The Navigator view displays the provisioning request definitions as .prd and .digest files. The extra copy of the provisioning request definition has the same name but with a number appended to it. For example, the Attestation Report displays in the Navigator view as AttestationReport.prd and AttestationReport.digest. The extra copy displays as AttestationReport1.prd and AttestationReport1.digest.
Delete the files with the number appended to the name; for example, AttestationReport1.prd and AttestionReport1.digest.
Save the project.

Version Control

404 Error When Comparing Version Control Revisions On Large Projects

There is an intermittent problem that occurs when you compare a large project, or when you have a very slow connection when comparing a project. Compare takes a long time to run and not all of the items appear in the Compare window. Most of the time this problem goes away when you try again. If the problem persists, contact Novell Support for information about turning off the status thread temporarily.

Driver Not Appearing in Version Control or Modeler Views after Running Get Updates

If you add a driver to a driver set on one computer, save that update to a version control server, then perform a Get Updates on a second computer, you won't see the driver added to the driver set. The fix to this issue is to refresh the Modeler view by closing and then reopening the view. Then run refresh on the Version Control view.

Copy/Paste, Drag&Drop Operations in Project View Don't Update Version Control

Copy and paste, drag & drop operations in the Project View are not handling files properly if they are under version control. There is presently no workaround. Also, these operations, as well as delete and rename, do not work from the Navigator view.

Legal Notices

A portion of Designer code includes derivative Eclipse code, where we have enhanced Eclipse source code to best suite the needs of our product and customers. This code has been contributed back to the Eclipse community under the EPL license agreement under Bugzilla entry #105582. The contributed code deals solely with general-purpose Eclipse framework UI and contains no Identity Manager-specific code, concepts, or logic. Novell retains full rights and ownership of all code outside of the specific code contributed, as noted in submission #105582.

This product includes software developed by IBM Corp. using the Eclipse platform (all rights reserved) and the Apache Software Foundation (http://www.apache.org). Novell is an Eclipse Foundation Member.

This product includes TightVNC viewer software, which is a free remote control software package derived from VNC. This is under the GPL license and ships as a separate plug-in, apart from the core Designer plug-ins. (http://www.tightvnc.com).

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export, or import deliverable. You agree not to export or re-export to entities on the current US export exclusion lists or to any embargoed or terrorist countries as specified in the US export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2005-2008 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the US patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the US and in other countries.

For a list of trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html).

All third-party trademarks are the property of their respective owners.

A trademark symbol (^®, ^TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark.

Designer 3.0 for Novell Identity Manager: Readme

Documentation

What's New in Designer 3.0