CorporateTime Server 5.3

and

LDAP Connector 1.5 for Critical Path InJoin Directory Server

LDAP Connector 1.5 for Syntegra Global Directory Server

LDAP Connector 1.5 for Netscape Directory Server

LDAP Connector 1.5 for iPlanet Directory Server

This file was last modified 2002-06-17

---

Thank you for choosing CorporateTime Server. These release notes contain supported platforms, system requirements, features, and known limitations of this product. Please see the CorporateTime Server Administrator's Guide and Reference Manual for information about configuring, administering and maintaining your calendar server. PDF versions of these manuals are also available on the Steltor web site (Administrator's Guide | Reference Manual). Please see the readme for installation instructions.

If you are using CorporateTime Server in conjunction with Caldera Volution Messaging Server, please see the readme and release notes for CorporateTime Server 5.3 for Caldera Volution Messaging Server instead.

This product can be used with an internal directory or an external LDAP directory server. Support for the Lightweight Directory Access Protocol (LDAP) is offered through separate connectors: LDAP Connector 1.5 for Critical Path InJoin Directory Server (formerly ISOCOR Global Directory Server), LDAP Connector 1.5 for Syntegra Global Directory Server (formerly Control Data Systems Global Directory Server), LDAP Connector 1.5 for Netscape Directory Server, and LDAP Connector 1.5 for iPlanet Directory Server. If you already use an LDAP Connector of version 1.3, no manual upgrade procedure is necessary.

---

Contents of this file

• System requirements
• How to report problems
• What's new in this release
• Patches and enhancement packs
• Limitations, caveats, and known problems with this release

---

System requirements

Windows:

• one of the following operating systems:
  • Windows NT 4.0 (Server) with Service Pack 4 or higher
  • Windows 2000 (Server)

UNIX:

• one of the following operating systems:
  • Sun Solaris 2.6 or 8
  • HP-UX 10.20 or 11.0
  • IBM AIX 4.3.3
  • SuSE Linux Enterprise Server 7 for S/390 and zSeries (kernel 2.4)
  • Red Hat Linux 7.2

All Platforms

• 64 MB RAM or more is recommended for computers handling a large number of users or running services in addition to those of the calendar server
• 70 MB of disk space for operation, plus space for the calendar database and log files
• an HTML browser to use the Calendar Administrator (must support Javascript, cookies, frames and tables) and to view the on-line manual
• SMTP messaging server for mail notifications
• for installations using a directory server, one of the following combinations:
  • Critical Path InJoin Global Directory Server 3.0 (formerly ISOCOR Global Directory Server) and LDAP Connector 1.5 for Critical Path InJoin Directory Server
  • Syntegra Global Directory Server 2001 (formerly Control Data Global Directory Server) and LDAP Connector 1.5 for Syntegra Global Directory Server
  • Netscape Directory Server 4.2 (4.12 for HP-UX 10.20) and LDAP Connector 1.5 for Netscape Directory Server
  • iPlanet Directory Server 5.0 and LDAP Connector 1.5 for iPlanet Directory Server

Note:

Up to 150 MB free disk space may be necessary for installation.

---

How to report problems

Please contact Steltor's technical support department at support@steltor.com or call (514)733-8500.

---

What's new in this release

The following features are new to CorporateTime Server 5.3. Please see the CorporateTime Server 5.2 release notes for an account of the functionality enhancements made between the 5.1 and 5.2 releases.

• Performance enhancements
• Improved Outlook support
• 5.2 patches and enhancement packs
• New authentication plug-ins
• Windows scalability improvements
• Extended platform support
• Extended directory server support
• Cluster environments
• E-mail notification subjects when working as a designate
• Easier e-mail filtering
• Improved behaviour for old reminders
• Euro included in character set mappings
• Time zone adjustments
• Languages for LDAP groups
• Improved Japanese support
• SYSOP logons for CAPI, unicp* utilities and uniical
• Planning your upgrade
• New parameters
• Changes to existing parameters
• New utilities
• Changes to existing utilities
• Bug fixes

Performance enhancements

CorporateTime Server 5.3 includes a number of performance enhancements, including:

• Reduced Engine startup times due to optimized reading of time zone files
• Faster sign-in times when using built-in ACE plug-ins
• Improved CWS response when processing many replication requests for the same event to the same node. Requests for large meetings are now replicated up to six times faster.
• Reduced memory consumption by Engine processes on HP-UX platforms of approximately 80 KB
• Pre-3.0 CorporateSync clients will benefit from optimized data selection

This release has also been tuned specifically for maximum performance with the latest Steltor client releases, including CorporateTime 6.0, CorporateTime Outlook Connector 3.3 and CorporateSync 3.0.

• Folder management has been enhanced to support the full range of information available in the native client Address Book, with a dramatic increase in performance over CorporateTime Server 5.2 when used with 6.0 versions of the native client
• Both CorporateSync and Outlook users will experience faster synchronization through streamlining the way in which events are marked as changed

Improved Outlook support

This release also offers major performance enhancements for users of CorporateTime Outlook Connector, including:

• Faster free/busy time lookup
• Faster opening of other users' folders

The calendar server has also been extended to support Outlook XP features including:

• X.509 certificates and Instant Messaging addresses for contacts
• Colours for meetings
• Attendees suggesting meeting durations and start times

5.2 patches and enhancement packs

All new features and bug fixes introduced in patches and enhancement packs offered for the 5.2 release of CorporateTime Server have been incorporated into the 5.3 release.

New authentication plug-ins

CorporateTime Server 5.3 includes new authentication plug-ins:

• For Web server authentication methods such as mod_ssl and mod_ldap — web:CAL
• For Kerberos v.5 (GSSAPI) — gssapi:kerberos5
• For Kerberos v.5 (GSSAPI) under SASL — sasl:gssapi

Please see the documentation in the CorporateTime Server Administrator's Guide, Appendix D, "Security."

Please note that this release of these plug-ins is to be used with calendar servers of version 5.3 ONLY. The libraries included in this release should not be used with any clients or other server versions; these will have their own libraries.

Windows scalability improvements

The available address space for calendar server processes has been increased from 2 GB to 3 GB, for performance enhancements in installations with large user bases. To take advantage of this feature, you must also enable it in the Windows kernel; see the CorporateTime Server Administrator's Guide, Appendix C, "System Configuration," for details.

Extended platform support

CorporateTime Server 5.3 now supports SuSE Linux Enterprise Server 7 for use on IBM S/390 and zSeries mainframes.

Extended directory server support

CorporateTime Server 5.3 is officially certified for use with iPlanet Directory Server 5.0. In addition, support for ISOCOR Global Directory Server has been updated to Critical Path InJoin Directory Server 3.1, and support for Control Data Systems Global Directory Server has been updated to Syntegra Global Directory Server 2001.

Cluster environments

CorporateTime Server 5.3 now offers enhanced support for cluster environments. Please see the documentation concerning the [ENG] calendarhostname parameter in Reference Appendix B of the CorporateTime Server Reference Manual, and the general documentation in the CorporateTime Server Administrator's Guide, Appendix C, "System Configuration."

E-mail notification subjects when working as a designate

If a designate sends e-mail notification while working on behalf of another user or a resource that does not have an e-mail address, the designate's e-mail address will be used as the value of the "From:" field for that notification.

Easier e-mail filtering

To make it easier for users to filter the calendar server's e-mail notifications and reminders (for example, to redirect all reminders to a pager), all messages sent through the calendar server will contain the following MIME header:

X-Steltor: 1

Reminders will also contain the following:

X-Steltor-Reminder: 1

Improved behaviour for old reminders

Normally, the calendar server will attempt to send a reminder up to half an hour after its original delivery time. However, if a new meeting is created with a reminder set to occur before the current time, no reminder will be delivered for that meeting. For example, if you create a meeting starting five minutes from now with a reminder set for ten minutes before the start time of the meeting, the server will not deliver the reminder.

Euro included in character set mappings

The character set mappings used by the calendar server now support the Euro character.

Time zone adjustments

The calendar server time zone file has been adjusted to correctly reflect Mexico's time zone.

Languages for LDAP groups

The calendar server now supports multiple attributes beginning with "cn" for groups, in compliance with RFC 2596. Note that although the calendar server can read data stored in this format, it will not use this format to write data to the directory server.

Improved Japanese support

Character set mappings for the Japanese language have been improved to include all characters in the NEC Kanji character set.

SYSOP logons for CAPI, unicp* utilities and uniical

This release of the calendar server includes configurable parameters that allow and prevent CAPI applications, unicp* utilities and the uniical utility logging on as SYSOP. Please see the documentation concerning the [ENG] allowsysoplogons_capi, [ENG] allowsysoplogons_unicp and [ENG] allowsysoplogons_uniical parameters in Reference Appendix B of the CorporateTime Server Reference Manual.

Planning your upgrade

Because the upgrade procedure requires a key rebuild (though no change in the database schema), it is recommended that you schedule downtime approximately equivalent to half the time unidbfix takes to run on your system.

New parameters

unison.ini

Section	Parameter	Description
[ENG]	allow_sysoplogon_capi	Allows and prevents CAPI applications logging on to the calendar server as SYSOP. Requires CAPI 3.0 (available soon)
	allow_sysoplogon_unicp	Allows and prevents the unicp* family of utilities logging on to the calendar server as SYSOP
	allow_sysoplogon_uniical	Allows and prevents the uniical utility logging on to the calendar server as SYSOP
	calendarhostname	To be used only in operating system cluster environments; specifies the cluster host name of the calendar server host, overriding the physical host name

Changes to existing parameters

unison.ini

Section	Parameter	Change
[ACE]	slibcachecount	Default value on AIX platforms changed to 20
[LDAP]	lberssllibname	default value on Windows platforms changed to nsldapssl32v41
	ldapssllibname	default value on Windows platforms changed to nsldapssl32v41
[NOTIFY]	ignoreoldreminders	Default value changed from 60 to 30
	limitremindercheck	Default value changed from 90 to 30

New utilities

Utility	Description
unisyncrefresh	Refreshes synchronization records. Can increase performance when used with pilots of CorporateSync 3.0 and CorporateTime Outlook Connector 3.3.

Changes to existing utilities

Utility	Change
unireqdump	-chunk option made obsolete
unirmold	New -sync option to remove old synchronization records. Added ability to specify resource filters when using -res option.

Bug fixes

• If the SYSOP password for a node is blank, server utilities will now accept only an empty string for authentication. If the SYSOP password you have been using is not accepted any longer after you upgrade your server, it may be that the SYSOP password is actually blank.
• Because of architectural requirements, event calendars may no longer be invited to meetings and events, regardless of their scheduling rights setting. Because of this change, users may no longer add event calendars to groups either.
• CPU usage times are now reported correctly in the stats.log file. Although your CPU usage times may appear to jump substantially (a factor of 100 on UNIX platforms and at least 50 on Windows platforms), the usage times are in fact the same as in previous releases. The difference is caused by errors in calculations present in earlier releases.
• An error message is now correctly logged when an invalid value is specified for the unison.ini [CWS] emailcharsetmap parameter.
• unistatus -sn correctly lists all serial numbers, without a security error when a serial number comment matches the name of a private group.
• The server upgrade now correctly removes a number of parameters from the unison.ini file when their values match the default in the code. Parameters affected are: [SYS] sys_owner, [ENG] readlocktimeout, [ENG] writelocktimeout, [DB] db_files, [DB] db_pages, [CWS] noreqsleep, [CWS] startupsleep, and [ACE] slibcachecount.
• On HP-UX platforms, e-mail dates have correct time zone offsets. [729]
• Server-side reminders are now sent correctly in users' own time zones rather than in the time zone of the server. [608]
• SMS notification now sent to remote attendees for event time changes. [607]
• Node UIDs are now validated after using the unib2lendian, unil2bendian and unil2lendian utilities. [155]
• The unicpoutu and unicpoutr utilities no longer loop when very long words are present in comments. [085]

CorporateTime Outlook Connector

• Opening and modifying "the series" for a recurring event now takes into account all occurrences, including exceptions to the recurrence rule.
• A number of problems with attendee status caused by updating recurrence rules have been fixed.
• Categories can now be assigned to meetings created using other Steltor calendar clients.
• Modifications to details and attachments are correctly replicated to remote nodes.
• Meetings created during a synchronization session are now correctly returned to the client without having to reset the folder. [918]
• Synchronization now operates normally when the time is changed on the server. [592]
• All users of CorporateTime Outlook Connector can now be moved to other nodes without client-specific data causing problems, and without losing Inbox data. [480, 481, 482]

---

Patches and enhancement packs

Patch 1

Patch 1 prevents invalid synchronization contexts and corrects problems with mail notification dates. If your system has experienced a problem with slowness caused by the creation of invalid synchronization contexts in the database, Patch 1 will correct the problem and clean up any existing invalid synchronization records.

Patch 1 is now available for all platforms. Note that Patch 1 supersedes Fix 00900 previously issued for Solaris platforms only. If you have already installed Fix 00900, it is recommended that you upgrade to Patch 1 at your next maintenance window.

Download Patch 1 here.

---

Limitations, caveats, and known problems with this release

• HP-UX 10.20 patch
• Solaris 2.6 patches
• unimvuser and UIDs
• Event calendars and "Can invite me to events" setting
• Creating holidays on large nodes
• Using SASL encryption with the Calendar Administrator
• Moving users in node networks with master nodes
• Upgrading large installations
• Resource double-booking
• Using Secure Sockets Layer (SSL) to connect to an external LDAP directory server
• First startup after upgrade
• Installing on HP-UX platforms using SASL
• Using the Global Agenda with pre-5.0 nodes and external LDAP directory servers
• [ACE_PLUGINS_CLIENT] web_attribute_valuemax parameter
• SASL and GSSAPI on SuSE Linux Enterprise Server 7 for S/390 and zSeries

HP-UX 10.20 patch

Before installing CorporateTime Server 5.3 on an HP-UX 10.20 system, you must apply patch PHSS_15043 (or the newer version if this one is superseded). For HP-UX 11.0 systems, the necessary patch number is PHSS_16587 (or the newer version if this one is superseded). These patches can be downloaded from http://us-support.external.hp.com or http://europe-support.external.hp.com.

Solaris 2.6 patches

Due to a change in compilers, CorporateTime Server 5.3 for Solaris 2.6 now requires the C runtime library libCrun.so.1. This library is available in the latest Solaris 2.6 operating system patches at http://www.sun.com. The appropriate patch must be installed before installing the calendar server.

NOTE: Please DO NOT install the following version of the patches:

• Patch ID 105591-08

If you have installed this patch, please unistall it and re-install the latest patch.

unimvuser and UIDs

unimvuser cannot move a user specified only by the UID key.

Event calendars and "Can invite me to events" setting

Event calendars should be created with "Can invite me to events" disabled by default. This does not occur using the Calendar Administrator.

Creating holidays on large nodes

Problems encountered when creating holidays on nodes with large user counts may be caused by the value of the [ENG] readlocktimeout and writelocktimeout parameters. Wait until after normal business hours, raise the parameter values, add the holidays, and when finished lower the parameters to their previous values.

Using SASL encryption with the Calendar Administrator and CorporateTime Server Administrator

If SASL is the only supported encryption mechanism on your server, you will not be able to connect through the Calendar Administrator or CorporateTime Server Administrator unless you install the SASL library (libsasl) on the client machine. This library should be installed in the <cgi-bin>/caladmin/ directory for the Calendar Administrator; for the CorporateTime Server Administrator, it should be installed in the C:\WINNT\System32 directory.

Moving users in node networks with master nodes

After using the unimvuser utility to move a user between nodes, there may be a delay before that user's new location is replicated to the master node. During this time, that user will not be able to sign in.

Upgrading large installations

Due to a limitation of the UNIX tar utility, you may encounter problems when upgrading to CorporateTime Server 5.3 if the total size of the files in your /users/unison directory exceeds 2 GB. Contact Steltor Support at support@steltor.com for information on bypassing this limitation.

Resource double-booking

It is not currently possible to configure some resources to allow double-booking and some not to allow double-booking, even by locating those groups of resources on different servers within the node network. The [ENG] allowresourceconflicts and [LIMITS] resourceconflicts parameters must be set to the same value for all servers in your installation.

Using Secure Sockets Layer (SSL) to connect to an external LDAP directory server

Make sure that you have a recent version of the Netscape LDAP SSL API. Version 4.1 has been certified; Version 3.0 is not supported. The most recent version is available at http://www.iplanet.com/downloads/developer/.

In addition, the value of the [LDAP] certdbpath parameter must follow UNIX path syntax, even on Windows NT installations of the calendar server. For example, on Windows platforms, use /Program Files/Netscape/Users/ngaiom/cert7.db instead of C:\Program Files\Netscape\Users\ngaiom\cert7.db.

First startup after upgrade

The server startup routine includes a cleanup of old sync records, which may cause the first startup after an upgrade to take an unusual amount of time. This cleanup has a timeout of six minutes per node, so the maximum added startup time is six minutes multiplied by the number of nodes on your server. If any cleaning up still remains to be done after the six-minute timeout, it will be continued the next time the server is started.

Installing on HP-UX platforms using SASL

After upgrading your calendar server, you must manually rename /users/unison/bin/uniengd_dynamiclink to /users/unison/bin/uniengd.

Using the Global Agenda with pre-5.0 nodes and external LDAP directory servers

If your calendar server node has existed with an external directory since a 5.0 or earlier version, you will not be able to use the "E-mail Agenda to a Friend" feature of Steltor's Web clients until you create a global user account in your LDAP directory server. For more information on this procedure, contact Steltor support at support@steltor.com.

[ACE_PLUGINS_CLIENT] web_attribute_valuemax parameter

The value of this parameter must be set two integers higher than the desired value.

SASL and GSSAPI on SuSE Linux Enterprise Server 7 for S/390 and zSeries

Steltor does not currently support the use of SASL or GSSAPI for SuSe Linux Enterprise 7 for S/390 and zSeries.

Copyright © 1993-2002 Steltor Inc. All rights reserved.