Overview
This page lists new features, enhancements, and bug fixes for CrashPlan User Directory Sync (UDS).
For the CrashPlan cloud, see CrashPlan cloud release notes.
For articles about CrashPlan User Directory Sync, see CrashPlan User Directory Sync resources.
Releases
Version 1.6.4
February 2, 2022
- Updated CrashPlan User Directory Sync to Apache Log4j version 2.17.1 to further mitigate CVE-2021-45105, CVE-2021-44832, and CVE- 2021-45046. To protect your installation from this vulnerability, upgrade CrashPlan User Directory Sync to version 1.6.4.
- Improved error messages to more clearly specify where the issue lies (for example, with LDAP, scripting, or SCIM processing) when a problem causes the CrashPlan User Directory Sync to terminate early.
- Fixed a problem that incorrectly identified the LDAP query as responsible for errors in other parts of the software.
- Removed the default value of the
scim.baseurl
configuration property to prevent users from erroneously using the default value rather than entering their own value.
Version 1.6.3
December 15, 2021
- Updated CrashPlan User Directory Sync to Apache Log4j version 2.15.0 to remediate security vulnerability CVE-2021-44228. To protect your installation from this vulnerability, upgrade CrashPlan User Directory Sync to version 1.6.3.
- Added support for international email addresses.
Version 1.6.2
May 5, 2021
- Added the
userCertificate
attribute to the list of default attributes in theldap.schema.attributes.sensitive
configuration property. As a result, certificates are ignored for scripting and are omitted in logs. - Performance and stability improvements.
Version 1.6.1
March 4, 2021
- Added new properties in the config.properties file:
-
missing.user.scrub.enabled
: Determines whether to remove users from mapping when themissing.user.scrub.threshold
value is exceeded. -
missing.user.scrub.push
: Determines whether empty user data should be pushed to CrashPlan when performing the user removal authorized by themissing.user.scrub.enabled
setting. This effectively removes (or scrubs) the user's data that had previously been sent to CrashPlan. -
missing.user.scrub.threshold
: Determines how many times a user must be absent from the directory service before removing the user from mapping.
-
- Improved handling of users without a first name or a last name provided in CrashPlan.
Version 1.5.2
November 23, 2020
- Adds new properties in the config.properties file:
-
ldap.attrib.dateformat
: Specifies the date format that should be returned for the "When Changed" dates. The new property accepts a Java date format string. The default is configured for compatibility with Microsoft Active Directory. -
ldap.schema.attributes.returnattributes
: Specifies which user attributes will be explicitly returned in the query results. The new property defaults to a value of "*,+" which returns all attributes. However, specific attributes can be specified in a comma-separated array of attributes or wild cards.
-
- Introduces support for the the IBM "Blue Pages" directory service.
Version 1.5.1
August 13, 2020
- Corrects an issue where selecting the NONE value for the
ldap.bind.authtype
UDS configuration property did not result in anonymous binding. In addition, the STRONG value is removed from the list of valid values for the property. - Improved handling of directory services that don't support paging controls.
- Improved handling of success codes during missing user deactivation.
- If you use CrashPlan User Directory Sync version 1.5.0 or earlier with the
missed.user.check=true
configuration property, the User Directory Sync logging does not show that users were deactivated. To fix this issue, upgrade to the latest version of CrashPlan User Directory Sync (version 1.5.1 or later).
Version 1.5.0
March 18, 2020
- New properties in the config.properties file:
-
ldap.connection.allowunsafecerts
: Allows for self-signed certificates. -
scim.client.threads
: Sets the number of processing threads to use during synchronization.
-
- New
--changed-since
flag for theC42UserDirectorySync
executable that synchronizes all users who haven't been updated since the specified date. - Faster synchronization through the introduction of multi-threaded processing.
- Faster queries for missing users.
- Improved log messaging.
- Fixes an issue where installation of the embedded JRE incorrectly overwrote the existing JAVA_HOME variable.
-
Known issue: If you run a synchronization with the the
scim.client.threads
property set to a value higher than 1, and you use org scripts to automatically create new organizations in CrashPlan, a new organization will be created for each thread, resulting in duplicate organizations. To work around the issue, you must create all the organizations needed by users before running a synchronization.
Version 1.4.0
December 19, 2019
- Makes the following enhancements to the config.properties file:
- Adds the following Active Directory employee attributes for mapping to CrashPlan:
Manager
,City
,State
, andCountry
. - Adds a description and the default value for each property. The descriptions can be toggled to be displayed or hidden.
- Displays previously hidden properties.
- Adds the following Active Directory employee attributes for mapping to CrashPlan:
- Provides an explanation of the error in the Run Summary log when a UDS sync or dry run fails to complete.
- Fixes the following issues:
- Searches that included an "or" clause in the filter caused the search to loop without completing.
- LDAP validation results were not properly logged when the --trace flag was run.
- A query for for a multi-valued attribute (such as memberOf) returned an error when the attribute contained more than 1,500 values.
- An attribute size of zero generated an exception error.
Version 1.3.0
October 15, 2019
- Corrects an issue in which the UDS connection to the Active Directory server timed out due to a full work queue. PL-84190
- Returns an array for multi-valued items (like
MemberOf
) even when there's only one value in the array. PL-84138 - Adds the following Active Directory employee attributes to the config.properties file for mapping to CrashPlan:
Title
,Division
,Department
, andEmployee Type
. - Completes a dry run even if the SCIM service is unavailable.
- Provides support for Active Directory 2016.
- Adds upgrade instructions to the readme.txt file provided with UDS.
- Uses the
objectGUID
attribute for user UIDs because it is a unique ID in Active Directory. If you configure pre-1.3.0 versions of UDS to use theobjectSID
for user UIDs, the UDS automatically manages the ID translation. PL-82745 - Corrects an issue in which spaces were not allowed in paths. Spaces can now be used in UDS directories, scripts, and program file names.
- Improves dry run results output.
- Provides the URL to the configured LDAP server in the LDAP connection log.
- Performance and stability improvements.
Version 1.2.0
July 11, 2019
- Adds the ability to view the version of User Directory Sync in use.
- Adds the ability to map which LDAP attributes are used by User Directory Sync to provision and update CrashPlan user information.
- Now performs a "changes-only" sync when using either the default search or a custom search filter.
- Provides more detailed information during dry-runs, including attribute mapping and script results for each user.
- Introduces the option to run a full sync on demand with a new optional flag.
- Offers improved error messaging, including:
- A
usererror.log
that contains dry-run results and user errors during live syncs. - The scripts and the associated line number when the Active, Role, or Org script causes a sync to fail.
- A
Enhancements and updates
April 16, 2020
- Allows the Deactivation Delay setting to be edited for CrashPlan User Directory Sync providers in the CrashPlan console. Click the edit icon to set the length of time to delay deactivation after synchronization is performed.
- Displays additions, updates, and removals for all user attributes in the provisioning Sync Log. In addition, all Organization attribute values displayed in the Sync Log now include the orgId of the organization, and all Manager attribute values now include the userId.
Bug fixes
February 27, 2019
- Corrects an issue in which CrashPlan User Directory Sync could incorrectly indicate in the Sync Log that a username changed if the user's email address contains uppercase letters.
- Directory sync notification emails now stop sending if your CrashPlan User Directory Sync license expires.