VIP Enterprise Gateway - LDAP to RADIUS Mapping Configuration Not Preserved When Configured

Products

• VIP Service

Issue/Introduction

When configuring the LDAP to RADIUS mapping section of a RADIUS validation server configuration on VIP Enterprise Gateway the settings appear to be saved successfully when submitting the changes. However, when making any subsequent changes to the validation server and saving them the LDAP to RADIUS mapping disappears and the Configure LDAP to RADIUS mapping box is unchecked.

Environment

VIP Enterprise Gateway 9.11.2

Cause

This is caused by a regression and only pertains to EGW 9.11.2. It does not affect 9.11.1 or earlier.

Resolution

Please apply the attached hotfix. This issue will be formally addressed in VIP Enterprise Gateway 9.11.3 which is set to be released during Summer 2026.

Note: This patch should be applied only on VIP Enterprise Gateway 9.11.2

To apply the hotfix, follow the steps below:

1. Download VIP_EG_9_11_2_BRCMVIP-9444_VIP-7690_Patch.zip and extract the contents to a temporary location (for example, /opt/temp/ [Linux] or c:/temp [Windows]).
2. Stop the below services from the EG Console.
   - Symantec Ldap DirSync Service (note: if there is any ongoing simulation or synchronization; let them complete before stopping it).
   - Symantec Self Service Portal Service (SSP IdP)
   - Symantec VIP Manager Service (VIPMGR IdP)
3. Stop the VIP Enterprise Gateway Service.
4. Make a backup of the following files.
          - <VRSN_MAUTH_HOME>/server/webapps/vipconsole.war 
          - <VRSN_MAUTH_HOME>/server/ext/ldapsync.jar
          - <VRSN_MAUTH_HOME>/server/ext/idp.jar
5. Delete the following directories
         - <VRSN_MAUTH_HOME>/server/work/jetty-0.0.0.0-8232-vipconsole.war-_vipegconsole-any-
         - <VRSN_MAUTH_HOME>/IDP/services/SSP/jetty-0_0_0_0-8233-idp_jar-_myvip-any-
         - <VRSN_MAUTH_HOME>/IDP/services/SSP/jetty-0_0_0_0-8233-idp_jar-_vipssp-any-
         - <VRSN_MAUTH_HOME>/IDP/services/VIPMGR/jetty-0_0_0_0-8234-idp_jar-_vipmgr-any-
6. From the temporary directory where you extracted the binary file contents, copy the following files: 
         - Copy vipconsole.war to the <VRSN_MAUTH_HOME>/server/webapps.
         - Copy ldapsync.jar to the <VRSN_MAUTH_HOME>/server/ext
         - Copy idp.jar to the <VRSN_MAUTH_HOME>/server/ext
7. Start the VIP Enterprise Gateway Service.
8. Log into the EG Console and start all required services.

Rolling back the patch:

If you encounter any issue after installing this patch, use the following steps to revert the changes.

1. Stop the below services from the EG Console.
         - Symantec Ldap DirSync Service (note: if there is any ongoing simulation or synchronization; let them complete before stopping it).
         - Symantec Self Service Portal Service (SSP IdP)
         - Symantec VIP Manager Service(VIPMGR IdP)
2. Stop the VIP Enterprise Gateway Service.
3. Delete the following directories
         - <VRSN_MAUTH_HOME>/server/work/jetty-0.0.0.0-8232-vipconsole.war-_vipegconsole-any-
         - <VRSN_MAUTH_HOME>/IDP/services/SSP/jetty-0_0_0_0-8233-idp_jar-_myvip-any-
         - <VRSN_MAUTH_HOME>/IDP/services/SSP/jetty-0_0_0_0-8233-idp_jar-_vipssp-any-
         - <VRSN_MAUTH_HOME>/IDP/services/VIPMGR/jetty-0_0_0_0-8234-idp_jar-_vipmgr-any-
4. From the location where you backed up the VIP Enterprise Gateway files during installation of the patch copy the following files: 
        - Copy vipconsole.war to the <VRSN_MAUTH_HOME>/server/webapps.
        - Copy ldapsync.jar to the <VRSN_MAUTH_HOME>/server/ext.
        - Copy idp.jar to the <VRSN_MAUTH_HOME>/server/ext.
5. Start the VIP Enterprise Gateway Service.
6. Log into the EG Console and start all required services.