CUMULATIVE POST ITMS 8.7.2 POINT FIXES

Products

• IT Management Suite
• Client Management Suite
• Server Management Suite

Issue/Introduction

This cumulative point fix article contains fixes for SMP (Symantec Management Platform) and other Solutions for issues resolved for customers with ITMS 8.7.2 until the next ITMS version is released/installed.

Environment

ITMS 8.7.2

Resolution

SMP/SMA (Symantec Management Platform/Symantec Management Agent) Fixes:

Azure import - Imported users assigned Computer resource type	While using a User import rule, imported users appeared to become "Computer" Resource type.
Azure Authentication Provider with Proxy with Authentication	When you click "discover" on "New Azure Authentication Provider" page, you get the message below when there is a proxy in the environment: Failed to execute query https://login.microsoftonline.com/common/.well-known/openid-configuration
Clone item action work in folder where permission restricted	Steps to duplicate issue: Clone admin Role Import Azure Accounts and reconfigure NS to Azure Auth. Add some "Azure" user to that role. Create folder (in Jobs and tasks), add some task in this folder, and remove all permissions except "read" from that folder. Open console with "Azure" user from this role. Open created folder (legacy console) and try to clone existing item -> Clone process passed correctly, but should not be allowed. As verification add "local" user to the same role, and open console with it. Clone process restricted for that user.
Nested If Statement Evaluates False	Nested IF statements evaluate false. Exact same happens if IF statement is in the job twice. The first time it is a nested IF statement and evaluates false. The next time it is not a nested IF statement and evaluates true.
User account can not bulk delete assets/resources	Issue with assets deletion on Users. You can delete 1 asset one by one, but you can't delete when selecting multiple computers. It works when doing it with Admin permissions.
Clone item action work in folder where permission is restricted	Further fixes to this issue were added.
Data Source authentication changes in UI after upgrade	This is related to recent changes allowing to provide specific user/password for Windows Authentication in OLEDB data source. Before the upgrade to 8.7.2, datasource had Windows Authentication selected. After upgrade to 8.7.2, when datasource is loaded into UI, it shows SQL Server Authentication (with empty username and password)
Fixed problem with Azure expired access token re-creation	You are setting up the Azure Import Rule.  The "Loading Groups" eventually times out.  You are getting error 401 Unauthorized in the logs: PerformCall failed with http request exception for url 'https://graph.microsoft.com/v1.0/groups/19e03f2b-dbf3-412b-b95f-5ec01637c896/members?$top=500' Response status code does not indicate success: 401 (Unauthorized). Token timeout and failure during re-initialization.
SQL performance decrease after upgrade	You have observed a degradation of performance while using core views like vComputer - it causes certain queries, filters, targets etc. to time out.  Related tcp/ip sql tables/views needed to be optimized.
Slow performance with vSiteServices	Issue related to every time you go to SMP Console>Settings>Site Server settings, you get performance issue / slow page to load all available Site Servers.
SQL server flooded with login failures	Fixing an issue with an inefficient .NET connection pool usage for SQL. Addressing issues with database connections because login failures: NS Log entry: [5/5] SQL connection failed, current user=example\user-sql, total time=00:00:05.0090001 A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: TCP Provider, error: 0 - The specified network name is no longer available.) SQL Server Log entries: 2024-05-18 18:01:36.81 Logon       Login failed for user 'user-sql'. Reason: Failed to open the explicitly specified database 'Altiris_CMDB'. [CLIENT: 10.0.0.22] 2024-05-18 18:01:36.82 Server      The SQL Server Network Interface library could not register the Service Principal Name (SPN) [ MSSQLSvc/servername.exemple.com ] for the SQL Server service. Windows return code: 0x2098, state: 15. Failure to register a SPN might cause integrated authentication to use NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies and if the SPN has not been manually registered. Could not connect because the maximum number of '32267' user connections has already been reached. The system administrator can use sp_configure to increase the maximum value. The connection has been closed. [CLIENT: 10.0.0.22]
IIS on site servers hangs/stops	Fixing an issue related to duplicated NTLM/Negotiate sections in <location path="Default Web Site/Altiris/ClientTaskServer">. We removed them from applicationHost.config file.
SMP Server service consuming all available RAM	Fixed: NS Message Queue optimized - avoiding XML serialization inside same process SendMessage outside of AeXSvc goes through global thread pool queue limits / waits / retries implemented more logging and statistics
Down Replication jobs are hanged with warning 'Unable to acquire mutex lock' on Child NS
SMP Server shows incorrect OS name for Win11 IoT LTSC 2024 and Win11 LTSC 2024	Fixed issue where after Symantec Management Agent is isntalled and basic inventory is sent, their OS names looks incorrect if those new client machines are Windows 11 IoT LTSC 2024 and/or Windows 11 LTSC 2024
Data Connector rule cuts imported name	Fixed issue where: 1. While updating CI Names through Data Connector Import Rule, when Importing Departments, you are using the System Number (for example) as Resource Lookup Key. 2. The Name would not be changed by the import Rule. 3. When you change it via the Edit function in the Console, everything is fine. 4. While querying the Database, the Name would change in some Places. But not in RM_ResourceDepartment, which is place where the Reports get the Name from.
RM_ResourceUser table in the Name column includes domain/username
Cancel button on CEM policy removes targets	Fixed issue from the following scenario: 1. Open Cloud-enabled Management Settings From Settings >Notification Server >Cloud-enabled Management >Policy>Cloud-enabled Management Settings 2. Have a traget inside the "Applies To" 3. Hit "Cancel" 4. Error messages: Attempt to change read-only item: 'Cloud-enabled Management Settings' (7f421ee9-865e-4766-9e93-bfe815a0ce3b) Error in Maintenance Windows page. Item is not writeable:  'Cloud-enabled Management Settings' (7f421ee9-865e-4766-9e93-bfe815a0ce3b) and if you refresh the target, it is gone.
Failed to install the product from the file UnixAgent.config	KB 379413

Download file: "SMA_SMP_8_7_2_PF_v6_11Oct2024.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

TS (Task Server) Fixes:

Nested If Statement Evaluates False Note:  This point fix only needs to be installed on remote Task Server(s) to complete the fix for "Nested If Statement Evaluates False". Both SMA_SMP_8_7_2_PF_v5_02Sep2024.zip (or later. See above) and Remote_TS_8_7_2_PF_v2_07Aug2024.zip need to be applied to fully address the issue.	N/A
Task Server AtrsHost Crashing Due to Possible Memory Issue	KB 373081 (Internal)

Download file: "Remote_TS_8_7_2_PF_v2_07Aug2024.zip"
Install instructions:
The pointfix available in Remote_TS_8_7_2_PF_v2_07Aug2024.zip is for remote Task Server(s) and it must be installed on all remote task servers manually by running pfinstaller2.exe directly on them.  

SMF (Software Management Framework) Fixes:

 

INV (Inventory Solution) Fixes:

Lenovo model name is incorrectly reported after upgrade to 8.7.2	Lenovo is known to put their model name in an improper wmi column. Added back previous workaround.
StandAlone inventory does not collect local users	Steps to reproduce: Create local user which is not member of any group Use Standalone inventory with all Inventory data classes selection Result - NSE does not contain any references to this local user

Download file: "INV_8_7_2_PF_v1_28Jun2024.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

 

SWM (Software Management Solution) Fixes:

 

 

Patch (Patch Management Solution) Fixes:

Proxy changes is causing PMImport to fail after upgrading	366969
RHN Channel Import is failing	369599
Migrate Red Hat integration from RHSM to Hybrid Cloud Console	222654

Download file: "Patch_8_7_2_PF_v3_27Jun2024.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

DS (Deployment Solution) Fixes:

 

ULM (Unix/Linux/Mac) Fixes:

macOS UI installer - not notarized	Addressing the following: Starting November 1, 2023, the Apple notary service no longer accepts uploads from altool or Xcode 13 or earlier.
Adding support for:  SUSE 15 SP5 - ULM
Adding support for: Ubuntu 24.04 LTS - ULM
Ubuntu 24.04 LTS is not detected properly	Fixed issue with: Ubuntu 24.04 LTS is not detected for all fields properly and sends incorrect OS system mask to SMP server
Adding macOS 15 (Sequoia) Support (ULM)

Download file: "ULM_8.7.2_PF_v3_03Oct2024.zip"
Install instructions are included in the Readme.pdf inside this attachment.

 

WF (Workflow Solution) Fixes:

GetSMPUserInfosByGroupName error Unable to retrieve the user SID	Fixed issue with: Project components wasn't able to get users info from Role where member is other role or when there is an account manually created but without Windows credentials specified.

Download file: "Workflow_8_7_2_PF_v1_26Jul2024.zip"
Install instructions are included in the Readme.pdf inside this attachment.

Additional Information

273903 "CUMULATIVE POST ITMS 8.7.1 POINT FIXES"
261271 "CUMULATIVE POST ITMS 8.7 RTM POINT FIXES"  
249427 "CUMULATIVE POST ITMS 8.6 RU3 POINT FIXES"
198337 "CUMULATIVE POST ITMS 8.5 RU4 POINT FIXES"