Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

OpenText Documentum Server CE 22.2 Release Notes

Download as pdf or txt
Download as pdf or txt
You are on page 1of 27

OpenText™ Documentum™

Server CE 22.2

Release Notes
Contents
1 Introduction .................................................................................................................................... 3
1.1 Release Notes revision history .................................................................................................. 3

2 About Documentum Server 22.2 .................................................................................................. 3


2.1 New features.............................................................................................................................. 3
Optional Mandatory ACLs (MACLs) ............................................................................. 4
Oracle 19c instant client certification ............................................................................ 4
RSA-2048-bit certificate support .................................................................................. 5
Master (AEK) Key rotation support in Cloud/Containers .............................................. 5
Improvements and new certifications in CE 22.2 ......................................................... 6
Experimental features ................................................................................................... 6
2.2 Discontinued and deprecated features ...................................................................................... 7

3 Packaging and documentation ..................................................................................................... 7


4 Supported environments and compatibility ................................................................................ 8

5 Installation and upgrade notes ..................................................................................................... 8

6 Fixed issues .................................................................................................................................... 8

7 Known issues ............................................................................................................................... 10

8 Contact information ..................................................................................................................... 27

Documentum Server 22.2 Release Notes 2


1 Introduction
This Release Notes provide an overview of Documentum Server 22.2, including new features,
delivery information, and supported platforms.

OpenText recommends that you read this Release Notes in conjunction with the documentation
included with the software package. If any conflicts exist, the Release Notes supersede the other
documentation.

We also recommend that you check OpenText My Support (https://support.opentext.com) for any
patches or documentation updates that may have been posted after the initial release of this product.

1.1 Release Notes revision history


Revision date Sections revised Description of revisions

May 2022 First release. All new content.

2 About Documentum Server 22.2


This section provides an overview of Documentum Server 22.2.

Documentum Server is the core of the Documentum content management platform. Documentum
Server governs the content repository and enables a set of content management services for
controlling content and processes throughout distributed enterprises. Documentum Server lets you
store, manage, and deploy all types of content, including HTML and XML, graphics, and multimedia.
Documentum Server provides services such as the following:

• Integrated workflow
• Lifecycle and process automation
• Version control
• Security
• Data dictionary for capturing and configuring business rules

With Documentum Server, users can share and reuse trusted content on demand within and between
business units. Administrators can define, organize, automate, and monitor all the functions and tasks
of complex business processes. Documentum Foundation Services (DFS) is no longer installed with
Documentum Server. You must install a DFS server on a machine that is different from the one on
which Documentum Server is installed.

2.1 New features


Documentum Server 22.2 includes the following new features.

Documentum Server 22.2 Release Notes 3


Optional Mandatory ACLs (MACLs)
Trusted Content Services (TCS) provides application-level encryption of content at rest and MACLs
for dynamic contextual access. From the 22.2 CE release, MACLs are disabled by default. This
provides an improvement in performance involving complex user groups and ACL permissions. TCS
is used to deploy encrypted content at rest and many Documentum deployments have significantly
high volume of users, content, and processing. MACL features will not be available with this feature
and TCS will not force any additional MACL security checks.

Oracle 19c instant client certification


Documentum Server installer can now be deployed using Oracle instant client. Oracle’s Instant Client
offers greater compartmentalization and security over Oracle’s original standard client.

Documentum Server 22.2 Release Notes 4


RSA-2048-bit certificate support
Documentum Server has supported RSA 1024 key length asymmetric keys. From the 22.2 CE
release and in response to NSA/ENISA guidelines, support for RSA 2048 key lengths have been
provided. The recommended practice to secure a Documentum deployment is to use RSA 2048 or
greater key lengths. Schema changes will not be necessary when the length must increase again and
Documentum upgrades from earlier keys are supported.

Master (AEK) Key rotation support in Cloud/Containers


Master (AEK) key rotation allows customers to change their AEK key in case the AEK key has been
compromised or to move to more secure keys. This feature was supported in on-premises
Documentum deployments. From the 22.2 CE release, the same feature has been provided in
container deployments. No new parameters have been added for this feature in already existing Helm
charts.

Documentum Server 22.2 Release Notes 5


Improvements and new certifications in CE 22.2

Feature Benefit

Windows Server Core 2019 Documentum CE 22.2 now supports the


headless version of Windows Server, including
silent installation

Java Method Server (JMS) supports Apache Embedded JMS in Documentum Server has a
Tomcat 9.0.58 newer hardened version of Apache Tomcat
9.0.58.

NetApp Storage GRID 11.6.2 This version of S3 store supports object level
WORM retention for customers looking for
compliance and governance capabilities.

Latest JDK Latest JDK 11.0.15 is certified in this release.

Experimental features

These are features offered for developers and early adopters and help in early access to interested
customers. These features might not always work as expected and might have limitations too. It is
highly recommended to try these features in lower environments and not in production type
environments. Customers could raise support requests, but these requests can only be considered as
minor in severity and for feedback only.

Documentum Server 22.2 Release Notes 6


2.1.6.1 Experimental Feature – Documentum Event Hub

With CE 21.4 and later releases, Documentum offers Documentum Event Hub as an experimental
feature. This experimental feature allows centralized configuration and easy to capture events.
Documentum clients can automatically send events masking sensitive data to a fluentd data collector
service that is authorized. Refer to the sections in the Documentum Cloud Deployment Guide for
detailed instruction on deployment and configuration of the Event Hub.

2.2 Discontinued and deprecated features


Starting Documentum Server CE 20.3, traditional mechanisms of Single sign-on (SSO) supported by
Documentum Server were deprecated with a go-forward replacement option with OpenText Directory
Services (OTDS). OTDS offers industry standard SSO and user/group management capabilities. The
older authentication plug-ins are now removed from the released binaries starting Documentum
Server CE 21.4. The functionality has now been integrated and improved inside Documentum Server
16.4 and later releases. OTDS integration with Documentum provides a more flexible alternative with
support for multiple SSO and identity providers and with native cloud support.

Documentum supported LDAP synchronization and authentication are now deprecated in lieu of the
synchronization and SSO support offered by OTDS. The LDAP synchronization functionality is still
accessible for customers to plan their migration. In CE 21.4 and onwards, Documentum offers leading
practices for customers to migrate from traditional LDAPv3 providers to OTDS.

With CE 21.4 and later versions, Documentum Workflow Designer and Process Engine, previously
part of Business Process Manager (BPM), are now included with Documentum Platform. This
provides customers with advanced workflow capabilities. Documentum Workflow Manager and
related plug-ins that are packaged with Documentum Composer are now deprecated starting CE
21.4. Documentum Workflow Manager may be removed in a future release and customers are
recommended to plan accordingly.

Documentum has been providing reference container images on CentOS Linux for all supported and
containerized components of the Documentum stack. From the CE 21.4 release and given that
updates might not be available on CentOS 8 distributions soon, OpenText Documentum now provides
Oracle Linux containers as a drop -in replacement for customers to use. From the CE 22.1 release,
CentOS 7.x and 8.x is deprecated as a supported Operating System for Documentum Server.

With Documentum Server CE 22.2 deployments, OpenText Directory Services CE 22.1 release and
onwards work seamlessly. If customers want to upgrade their OTDS versions from earlier releases
(earlier to OTDS 22.1 CE release) to the latest OTDS release, they must migrate their OTDS data to
the new OTDS instance before upgrade. For example, Documentum Server CE 22.2 is compatible
with OTDS 22.1. For customer on OTDS 16.x or 20.x or 21.x, they must first migrate their data before
upgrading to OTDS 22.1. This limitation is due to architectural changes to OTDS. Customers are
requested to refer to the Documentum Server Upgrade and Migration guide for migration instructions
from an older OTDS instance.

3 Packaging and documentation


Downloads and documentation for Documentum Server are available on OpenText My Support
(https://support.opentext.com).

Documentum Server 22.2 Release Notes 7


4 Supported environments and compatibility
For information, see OpenText Documentum Platform Infrastructure Certification Guide.

5 Installation and upgrade notes


This section provides additional installation and upgrade information, including related or third-party
product information and any required critical patches.

Before beginning installation, ensure that your system meets the requirements listed in Chapter 4,
Supported environments and compatibility. After installation, be sure to update your software to the
latest patched release, if any patches are available.

The OpenText Documentum Platform and Platform Extensions Installation Guide contains installation
instructions for your product. The OpenText Documentum System Upgrade and Migration Guide
contains upgrade information for your product. These documents are available from OpenText My
Support (https://support.opentext.com).

6 Fixed issues
This section provides information about past issues that have been fixed.

Documentum Server 22.2 Release Notes 8


Issue number Issue description

Only installation owner receives the job notification for


CS-137225
dm_LDAPSynchronization, other users are omitted.

CS-137220 Memory Leak with JMSHealthChecker method Docbroker checkpoint.

Frequent documentum.exe crashes in module ntdll.dll without access_violation


CS-136954
crash dump in docbase log. This issue is seen since a Null assignment fails after
object deletion, so there are chances for double delete of object.
Unable to view the complete LDAP Log file and it is truncated when viewed from
CS-136820
DA.

CS-136658 When SAML token validation is performed many times in a short time frame
results in locks not being released. We initialize or bootstrap opensaml libraries
as part of doPost() operation and this invoked every time we perform SAML
token validation. If there are concurrent access to the SAML plug-in within a short
timeframe, InitializationService.initialize() does not release a lock on one of the
resources which blocks all further requests results in CPU Spike.

CS-136324 If an AWS S3 bucket is created with store_params as empty proxy_host and


proxy_port values, the S3 plug-in throws NumberFormatException. This issue is
fixed in CE 22.2 to validate the key value pair configured by user and set proxy
only if its valid.

CS-136283 Dm_UserRename java job does not rename dm_group.users_names attributes if


we only change cases (upper or lower) in the username.

CS-136229 Applying Retention Causes high CPU usage in Documentum Server when SSL is
enabled.

CS-136126 When you enable multiple languages during an upgrade from 21.4 to 22.1, it
results in warnings in the logs of pods.

Documentum Server 22.2 Release Notes 9


7 Known issues
The following known issues exist in this release.

Issue number Issue description

Installation and Upgrade

CS-135504 Repository logs contain additional messages - “Unable to load monitor library"

Workaround: Create a soft link from libpcre.so.1->libpcre.so.0 using the following


command:
ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.0

The library is seen using the following command:

find / -name libpcre.so.1


/usr/lib64/libpcre.so.1

CS-137848 Upgrade of Documentum Server from a previous version to CE 22.2 can fail if
different AEK Key algorithms are used.

Workaround:

1. First upgrade the Documentum Server to 22.2.

2. Upgrade connection broker and then the repository.


3. After connection broker and repositories are upgraded, only then upgrade
the AEK key.

CS-137870 Populating custom locale (pt_BR locale) directly results in errors.


Workaround: Populating of data_dictionary_pt_BR.txt file before
data_dictionary_pt.txt results in errors. data_dictionary_pt_BR.txt deployment fails
only if you do not have pt installed on Documentum Server. In case you have pt
installed, these errors will not appear.

First populate data_dictionary_pt.txt and then data_dictionary_pt_BR.txt file in the


same environment and deployment succeeds.

CS-137902 With Docker containers, seamless upgrade configuration to CE 22.2 version fails
due to mismatch of RSA key length.

Workaround: Server.ini from the older version contains RSA key length value as
1024. With 22.2 this value is 2048. During a seamless upgrade, errors are seen at
startup and the upgrade fails.

It is recommended to manually update RSA key length to 2048 in 22.1 container


before seamless configuration and run seamless upgrade again.
CS-133965 When you create a repository after the installation of Documentum Server,
installation of DAR files results in an error.

Documentum Server 22.2 Release Notes 10


Issue number Issue description

Installation and Upgrade


Workaround: Add 'dfc.date_format=<correct-local-date-format>' in
C:\Documentum\config\dfc.properties.

If you are installing DAR files with dardeployer.ini or if you get an error while using
composer.exe, then add the '-Djava.locale.providers=COMPAT,SPI'
property after -vmargs in dardeployer.ini/composer.ini.

Note: The <correct-local-date-format> is different for different localized Windows.

CS-133005 Java configurations are updated incorrectly when Documentum Server is upgraded
to 21.2.

Workaround: Before upgrading Documentum Server, you must manually delete


JAVA_LINK from the %Documentum%\java64 directory.

CS-135462 Documentum Server upgrade from 20.4 to 22.1 shows older references of log4j2.

Workaround: You need to first patch 20.4 and make sure no references of older
log4j libraries are present before 22.1 upgrade.

CS-128912 Authentication fails intermittently for Documentum client applications when you
deploy the DAR files in the Kubernetes platform. This happens when headless
composer is invoked for installing the DAR files on the same Documentum Server
host.

Workaround: Ensure that you include the password in the client application
scripts. For example, in Documentum Server, the kube_cs.sh script contains the
password details as CLI arguments as follows:

java -Ddar="$darFile" -Dlogpath=$tempdarlogs -


Ddocbase=$DOCBASE_NAME -Duser=$INSTALL_OWNER -
Dpassword=$INSTALL_OWNER_PASSWORD -Ddomain= -cp
$DM_HOME/install/composer/ComposerHeadless/startup.jar
org.eclipse.core.launcher.Main -data
$DM_HOME/install/composer/workspace -application
org.eclipse.ant.core.antRunner -buildfile
$DM_HOME/install/composer/deploy.xml >>
${DOCUMENTUM}/dba/config/$DOCBASE_NAME/dars.log

If the DAR files are installed by installer, you must modify the installer scripts to
include the password.

Documentum Server 22.2 Release Notes 11


Issue number Issue description

CS-128870 On Linux, when you try to configure IJMS in the same host as Documentum
Server, it results in the "Failed to include persistent preferences from "<IJMS install
directory>/config/dfc.properties" error in the ACS log file resulting in failure to
access the ACS URL.

Workaround:

1. Stop IJMS.

2. Navigate to the location where the dfc.properties file exist in the IJMS ACS
installation directory. For example, <IJMS installation
directory>/tomcat<version>/webapps/ ACS/WEB-INF/classes.

3. Open the dfc.properties file and replace the <IJMS installation directory>
with <Documentum installation directory> as specified in bold and save
the dfc.properties file.

For example, change


From
#include /home/<installowner>/<IJMS installation
directory>/config/dfc.properties
To
#include /home/<installowner>/<Documentum installation
directory>/config/dfc.properties
4. Restart IJMS.

CS-128634 When you try to upgrade RCS from 20.4 to 21.2 in the secure mode, the upgrade
fails.
Workaround: Add the following lines in the dfc.properties file before upgrading
RCS:
dfc.security.ssl.truststore=%DOCUMENTUM%\dba\secure\dfc.keyst
ore
dfc.security.ssl.truststore_password=<truststore password>
dfc.security.ssl.use_existing_truststore=false

CS-127896 ServerApps, ACS, and other URLs do not get generated in an RCS secondary
environment.

Workaround: Enable the privileged clients using DA.

Documentum Server 22.2 Release Notes 12


Issue number Issue description

CS-126854 Unable to invoke the CFS configuration program installer when using
AdoptOpenJDK. This is a design limitation of InstallAnywhere software with
AdoptOpenJDK.

Workaround: In the command prompt window, navigate to


%DOCUMENTUM%\product\20.4\install and then run the following command:

Server_Configuration_Program.exe LAX_VM
“%JAVA_HOME%\bin\java.exe”

where JAVA_HOME represents AdoptOpenJDK.

CS-125750 Installation of DAR files are slow and may take more time in a Documentum
Server/SQL Server 2019 environment. This is a Microsoft limitation.

Workaround: Install the SQL Server 2019 for Microsoft Windows latest cumulative
update.

CS-125094 In a Red Hat Enterprise Linux 8.1 or 8.2/Red Hat OpenJDK 11 environment, when
you try to configure the repository and connection broker in the SSL mode without
certificates, the configuration of the repository fails.

Workaround: Configure the repository and connection broker in the SSL mode
without certificates using the supported version of Oracle JDK or use the
certificate-based Documentum Server.

CS-121167 The CFS configuration program installer may not be able to connect to the
repository of primary Documentum Server while configuring on a dual-stack
Windows environment. This is a design limitation of InstallAnywhere software with
Java 11 while connecting to another dual-stack environment.
Workaround: You must manually invoke the CFS configuration program through
the Java 8 process and provide the IPv4 address of the primary Documentum
Server to connect to its repository.

Documentum Server 22.2 Release Notes 13


Issue number Issue description

CS-121081 Getfile operation does not work for existing external filestore on an upgrade
environment.

Workaround:

1. Perform the following in IAPI:


retrieve,c,dm_extern_file where name='dm_extern_file
store name'
set,c,l,a_location <create and update the previous
location object name>
save,c,l

2. Restart the Documentum services.

CS-121075 Getfile operation does not work for existing external stores (ATMOS, Swift, ViPR,
and S3) during upgrade with changed aek.key file.

Workaround:

1. Perform the following in IAPI:


retrieve,c,<dm_external_store_type> where name='<name
of storage object name>'
set,c,l,credential_key <valid_credential_key>
save,c,l

2. Restart the Documentum services.

CS-120767 Java methods does not run when IJMS is installed on a different host of IPv6.

CS-120520 dm_bof_registry user is not created while configuring the global repository using
the external connection broker on a dual-stack environment.
Workaround:

1. Configure the connection broker in one host.


2. Create a repository in another host. The installation complains about
dm_bof_registry user creation.
3. When the installation finishes, you must manually create a
dm_bof_registry user with the following details:
user_name: dm_bof_registry
user_login_name: dm_bof_registry
user_source: inline password
user_password: <bof registry user password>
user_state: 0
default_folder: /dm_bof_registry
user_privileges: 0
client_capability: 0

Documentum Server 22.2 Release Notes 14


Issue number Issue description

CS-120209 While configuring the repository, the Unable to register the Accelerated Content
Services Administration URL error message is displayed intermittently.

CS-50394 The authentication plug-in fails to load for Netegrity test on RHEL 7.0 with SDK
12.51CR05.

Workaround: For Windows: For 12.51 CA SDK, ETPKI libraries are generated at
\\CA\SC\CAPKI\Windows\amd64\64\lib instead of \\CA\SC\ETPKI\lib. Perform the
following steps:

1. Copy <installdir>/sdk/bin64 and <installdir>/etpki/ETPKI/lib to


%DM_HOME/install/external_apps/authplugins/lib. For 12.51, copy
%ETPKIHOME/<OS NAME> to %DM_HOME/install
/external_apps/authplugins/lib.

2. Copy the supporting shared libraries ADD %Siteminder_bin64% and


%Siteminder_ETPKI% to %PATH% environment variable.

For Linux: For 12.51 CA SDK, ETPKI libraries are generated at


<installdir>/etpki/CAPKI/Linux/amd64/64/lib instead of <installdir>/etpki/ETPKI/lib.
Perform the following steps:

1. Copy <installdir>/sdk/bin64 and <installdir>/etpki/ETPKI/lib to


$DM_HOME/install/external_apps/authplugins/lib. For 12.51, copy
$ETPKIHOME/<OS NAME> to $DM_HOME/instal
l/external_apps/authplugins/lib.

2. Copy supporting shared libraries ADD $Siteminder_bin64 and


$Siteminder_ETPKI to LD_LIBRARY_PATH environment variable. Or you
can also copy $Siteminder_bin64/sdk/bin64 and
$Siteminder_ETPKI/etpki/ETPKI/lib to
$DM_HOME/install/external_apps/authplugins/lib.

CS-48939 After consolidation of repositories, the user_rename operation does not rename
the user on the migrated repository.

CS-46159 Documentum Server installer does not validate the Keystore file name and
Keystore password file name values while configuring the connection broker using
the Use certificates option.

Workaround: Create a default AEK key with the name as aek.key and default
passphrase before configuring the connection broker and repository. Also, ensure
that you use the default AEK key (aek.key) while configuring the repository.

Documentum Server 22.2 Release Notes 15


Issue number Issue description

CS-41937 When you install Documentum Server on multiple hosts, the


DM_SESSION_E_AUTH_FAIL exception occurs in server.log and ServerApps.log
on the remote Documentum Server side.

Workaround: Perform the following steps:

1. Navigate to Documentum Administrator > Client Rights Management >


Privileged Clients > Manage Clients. All clients for both hosts are displayed.
2. For the appropriate client on the secondary host, select the following
options:

a. Enable trusted login

b. Enables trusted server privilege

CS-41733 Logging through IAPI when handling several login requests within a short time frame
takes a long time. This is because the DEVRANDOM variable is not added in the
startup script on Linux for remote Documentum Server.

Workaround: Add the following lines in DM_HOME /bin/dm_set_server_env.sh


before starting RCS:

DEVRANDOM=/dev/urandom

export DEVRANDOM

CS-41543 When you configure the global repository after installing Documentum Server, the
DFC_DOCBROKER_EXCLUDED warning message occurs in the JMS, DFC, and
ACS log files. This is because the Teredo Tunneling Pseudo-Interface is enabled.
Workaround: Perform the following step:

From the command prompt, type

netsh interface teredo set state disabled


Or

Disable the IP Helper service from the Services dialog to disable the tunneling
permanently.
Restart the machine.

CS-41332 UCF function fails when you upgrade Documentum Server and RMA. This is
because the UCF installer adds the following line to the network configuration file
causing UCF to use IPv6 which is not supported:

<option value="-Djava.net.preferIPv6Addresses=true"/>

Documentum Server 22.2 Release Notes 16


Issue number Issue description

CS-40415 Unable to install Documentum Server on some localized Windows operating


systems.

Workaround: Create a group "Everyone" on the localized server operating system


manually. Proceed with the Documentum Server installation.

This is a limitation.

CS-34238 Warnings are displayed in the log directory of DAR (IndexAgentDefaultFilters.dar


and MessaginApp.dar) installations in the upgrade environment. However, you can
ignore these warnings since the version label is not used anywhere in the BOF
service class.

DC-7495 Warning messages are displayed in the server log directory while deploying ACS,
BOCS, and DMS. For example: Class Path entry <JAR1 NAME> in <JBOSS 7.x
HOME>/server/DctmServer_DMS/deployments/DMS.ear/dms-ws.war/WEB-
INF/lib/<JAR2 NAME>” does not point to a valid jar for a Class-Path reference.
However, you can ignore these warnings. The JBoss website contains more
information.

Server and Administration

CS-128600 When Google Cloud Platform (GCP) releases a new certificate, the old certificate
stops working even though the expiry date is not reached. This is because the public
certificate from GCP expires every 90 days or earlier for various reasons. If the old
certificate stops working, then you must obtain the new certificate from GCP and
import it manually to the location of dfc.keystore. This is a GCP limitation.

CS-128074 Authentication fails with OTDS when the password contains double quotes.

Documentum Server 22.2 Release Notes 17


Issue number Issue description

CS-126922 Log information is not recorded in the otdsauth.log file.

Workaround:

1. Take a backup of log4j2.properties for OTDS authentication.

2. Update the log4j2.properties file with the following values:

rootLogger.level=INFO
rootLogger.appenderRefs = A1, F1
rootLogger.appenderRef.A1.ref = STDOUT
rootLogger.appenderRef.F1.ref = File
#--------------------------CONSOLE ------------------
appender.A1.type=Console
appender.A1.name=STDOUT
appender.A1.layout.type=PatternLayout
appender.A1.layout.pattern=%d{ABSOLUTE} %5p [%t] %c - %m%n
#----------------------------FILE --------------------------
appender.FILE_TRACE.type=RollingFile
appender.FILE_TRACE.name=File
appender.FILE_TRACE.fileName=$H(SERVER_INSTANCE_DIR)
/logs/otdsauth.log
appender.FILE_TRACE.filePattern=${filename}.%d{yyyy-MM-dd}
appender.FILE_TRACE.layout.type=PatternLayout
appender.FILE_TRACE.layout.pattern=%d{ABSOLUTE}
%5p [%t] %c - %m%n
appender.FILE_TRACE.policies.type=Policies
appender.FILE_TRACE.policies.time.type=TimeBasedTriggeringPolicy
appender.FILE_TRACE.policies.time.interval=1
appender.FILE_TRACE.policies.time.modulate=true
appender.FILE_TRACE.policies.size.type=SizeBasedTriggeringPolicy
appender.FILE_TRACE.policies.size.size=10MB
appender.FILE_TRACE.strategy.type=Default
Replace $H(SERVER_INSTANCE_DIR) with the absolute path of JMS log
folder.

3. Restart JMS.

CS-125376 Content compression does not work when both the compression and encryption are
enabled for the REST store. This is a limitation. However, the compression works
correctly when only content compression is enabled for the REST store.

Documentum Server 22.2 Release Notes 18


Issue number Issue description

CS-122988 When you launch the dm_mailwrapper.sh script in Red Hat Enterprise Linux 8.x
operating system, it results in the /bin/mail: relocation error: /bin/mail: symbol
SSLv3_client_method version OPENSSL_1_1_0 not defined in file libssl.so.1.1 with
link time reference error.

Workaround: Add the lines (shown in bold) in dm_mailwrapper.sh script and then
launch:
#!/bin/sh

subject=$1
address=$2
content_file=$3

LD_LIBRARY_PATH=/lib64
export LD_LIBRARY_PATH
/bin/mail -s "$subject" "$address" < $content_file
status=$?

if [ $delete_contents = 1 ] ; then
# remove the temporary content file once it is sent
\rm $content_file
fi

unset LD_LIBRARY_PATH
exit $status

CS-122754 LDAP user authentication is not supported with the TLS 1.3 protocol.

CS-120157 Limited support for the data partition feature on PostgreSQL.

CS-119448 Member repository unable to use the global repository which is projected to other
connection broker.
Workaround: The global repository and the new repository must be projected to the
same connection broker.

CS-56179 Setting HA_SETUP_ENABLED is causing a workflow to have Documentum


Server affinity for its whole activities, even if they are sequential or parallel. If a
Documentum Server crashes, all associated workflows are stuck or in paused state.

Workaround: Manual steps are required to move these workflows/workitems to an


available Documentum Server. Fetch all completed workitems of associated crashed
Documentum Server’s workflows and then set a_wq_name of workitem to available
Documentum Server config name. Then, rest of workitems are processed through
the configured Documentum Server.

Documentum Server 22.2 Release Notes 19


Issue number Issue description

CS-55842 Email copied from sent items can be imported twice in same repository folder. This is
an Aspose limitation.

CS-53868 Unable to move the existing objects data from the non-partitioned table to the
partitioned table on a data partition enabled CentOS/PostgreSQL environment.

CS-53307 When you invoke the RPC method, MIGRATE_TO_LITE with RECOVERY_MODE
on a CentOS/PostgreSQL environment, it results in an error.

CS-52847 Delay in executing drop_index call on a CentOS/PostgreSQL environment. This


occurs only when select queries are frequently being executed on dm_sysobject
types. Since read commit does not happen by default, drop index call hangs until the
selects are not executed.
Workaround: Set lock_timeout parameter in postgresql.conf to a value in
millisecond (preferably to a lower value) so that any query statement waits only for
the time as indicated in this parameter while attempting to acquire a lock on a table,
index, row, or other database object. This is required if there is any exclusive lock on
the tables in the database.

CS-52769 In a Windows/PostgreSQL environment, when closeBatch and flushBatch methods


are run, batch [isBatchActive()] and implicit transaction [isTransactionActive()] are
both still open.

CS-52561 Creating a blob store with names in uppercase on a CentOS/PostgreSQL


environment is not supported.

CS-51940 UpdateStatsDoc job is not supported on a CentOS/PostgreSQL environment.

CS-51822 When dm_document is updated, attribute_list is not getting populated. This results in
object IDs in dm_audittrail not returning in ascending order of its creation in the
PostgreSQL database.

CS-48801 When you run the nested groups incremental LDAP synchronization job on Sun
ONE directory server, it fails for the user_rename and group_rename operations and
reports an error in the JMS log.

CS-48516 In the Microsoft Cluster environment, LDAP synchronization job does not work with
Microsoft Cluster virtual host name.

Documentum Server 22.2 Release Notes 20


Issue number Issue description

CS-45744 The dm_policy object that is attached with the dm_procedure object can only be
deleted by a superuser irrespective of the owner of the dm_policy object.

Workaround:
1. Unlink the dm_procedure object from the dm_policy object. Then, delete the
dm_policy object using the privileges used to create the dm_policy object.

2. Delete the dm_procedure object using the superuser privileges.

CS-43925 When you attempt to transfer content through ACS and BOCS with the
Asynchronous Write Job turned 'ON', the DFC deployed in the application context
sends a message to DMS instructing it to store the content located in BOCS. The
size of the message is directly proportional to the number of ACS server
configuration objects and the number of base URLs in the ACS config objects. If the
number of configuration objects or URLs exceeds 2, the message may get truncated
when it gets stored in the DMS database. Therefore, it is recommended to avoid
such configurations of ACS config object(s). This is a limitation.

CS-43570 If the number of file stores in Documentum Server are more than 100, any additional
file stores created do not work and results in the following error:
[DM_SESSION_E_STORESTAT_OVERFLOW]error: "The shared memory segment
for caching the ONLINE/OFFLINE status of the Documentum Storage areas has
reached its maximum size (100). Update access may be incorrectly given to Offline
or ReadOnly storage area (28003039800002b7).". The file store status of some of
the stores may be incorrect. This is a limitation.

CS-42094 Change object type to a subtype does not work for lightweight objects.

CS-41576 LDAP synchronization fails when you try to synchronize a high count of user data
from the Microsoft Active Directory with the java.net.ConnectException: Connection
timed out exception.
Workaround: Set the value of the method_arguments attribute in the LDAP
synchronization job to ignore.

API> retrieve,c,dm_job where object_name='dm_LDAPSynchronization'

API> append,c,l,method_arguments

SET> -referral <follow/ignore>

API> save,c,l
If you do not set this value, or specify some other value, the default value follow is
set.

Documentum Server 22.2 Release Notes 21


Issue number Issue description

CS-41252 When querying, agent_exec loose time because it also goes through jobs that are
dedicated to another server.

Workaround: To avoid time loss, set the value of the target_server attribute to
current server or ANY SERVER.

CS-41027 Redundant joins in newly created SDT views.

Workaround: Create an environment variable DM_NO_EXTRA_JOINS and set its


value as T. Then, restart Documentum Server.
To update the existing views, do the following in SQLplus:

UPDATE dm_type_s

SET views_valid = 0;

commit;

The view gets updated whenever you use a type object for the first time in
Documentum Server. Otherwise, the view remains the same.

CS-40838 When two users perform a move operation of two folders simultaneously, the
r_folder_path and i_ancestor_id parameters contain incorrect values causing folder
inconsistencies in Oracle and SQL Server.
Workaround: Add disable_folder_synchronization = T in the server.ini file. By
default, the value is F.

CS-40701 When running the dm_event_sender_java method using the DO_METHOD directly,
the <argument_name>:<argument_value> pair needs to be passed in while
executing the method. Passing only the argument_value (as done in the
dm_event_sender docbasic method) does not work, unless the queue API is called.
With queue API, DFC appends the argument_name before the argument_value
during the execution of the Java method. All argument names are mandatory and
need to be passed to the Java method. If a particular argument name has no value,
pass an empty string.

CS-40474 Performance issue is encountered when promoting a document in lifecycle, within a


transaction. This occurs due to concurrent access to the dmc_tcf_activity object.

Documentum Server 22.2 Release Notes 22


Issue number Issue description

CS-40238 Unable to edit or perform a search based on the definition of the a_retention_date
attribute for immutable objects. You must run the
UpdateDDInfoForRetentionDate.ebs script manually to update the data dictionary
information for a_retention_date attribute and republish the data dictionary
information for the a_retention_date attribute of the sysobject and subtypes of the
sysobjects for existing repositories. Execute the UpdateDDInfoForRetentionDate.ebs
script on the Documentum Server machine where the repository is created, using
the following command:

• On Windows: dmbasic -f
%DM_HOME%\bin\UpdateDDInfoForRetentionDate.ebs -eEntry_Point --
<docbaseName> <installOwner> <password>

• On Linux: dmbasic -f $DM_HOME/bin/UpdateDDInfoForRetentionDate.ebs -


eEntry_Point -- <docbaseName> <installOwner> <password>
If you have a new 7.1 or later installation, you do not have to execute the
UpdateDDInfoForRetentionDate.ebs script. You must execute the
UpdateDDInfoForRetentionDate.ebs script only if you have upgraded repositories
and if you want to allow users to edit or perform a search using the a_retention_date
attribute definition of immutable objects. For downloading the
UpdateDDInfoForRetentionDate.ebs script or the latest Documentum Server patch
containing the UpdateDDInfoForRetentionDate.ebs script, refer to the Support site.

CS-40207 DoMail requests fail when static IP address is configured for JMS listen address.
This is because DoMail class runs the validateRequestIPAddress method against
the localhost's IP address.

Workaround: To prevent DoMail requests from another Documentum Server (on a


different host) from failing, you must add an init parameter to DoMail's web.xml. The
name of this parameter must start with the keyword 'ip-' and its value must be the IP
address of a trusted host. For example:

<servlet>

<servlet-name>DoMail</servlet-name>

<description>Documentum Mail Servlet</description>

<servlet-class>com.documentum.server.impl.mailservlet.DoMail</servlet-class>

<init-param>

<param-name>ip-192.168.0.1</param-name>

<param-value>192.168.0.1</param-value>

<//init-param>

</servlet>

Documentum Server 22.2 Release Notes 23


Issue number Issue description

CS-39933 Using comma in the LDAP binding password results in an error.

Workaround: Use the single quote if the password has a comma. For example:

API> encrypttext,c,'password,123'

CS-39775 Renaming and deleting users and groups fail in the LDAP synchronization with the
Oracle Internet Directory (OID) Server.

CS-39553 Deletion of nested groups from the LDAP directory server is not properly
synchronized to Documentum Server.

Workaround: Explicitly provide a value for input argument -full_sync for the LDAP
synchronization job through Documentum Administrator before running it: TRUE for
full sync; FALSE for incremental sync.

CS-39232 acl_check_db cannot be set to TRUE with QBS. This is because DFC does not
support setRange with double security check in Documentum Server.

DFC-11836 [Internationalization] dd_populate.ebs for Loaddatadictionary populates labels only in


two-letter locale names even though the data dictionary file contains locale_name
with five-letter locale.

DFC-10894 Invalid license exception occurs during multi-domain authentication when


Documentum Server internal JDK is used.

DA-10459 Unable to access DFC client application when Kerberos SSO is configured using
Sun Login module "com.sun.security.auth.module.Krb5LoginModule required" on the
SUSE Linux environment. This happens when the application server is configured
with the SUSE Linux environment. The following error message is displayed when
you try to access Documentum Administrator: SEVERE [http-nio-8080-exec-8]
org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service()for servlet
[ComponentDispatcher] in context with path [/da] threw exception [Servlet execution
threw an exception] with root cause java.lang.ClassNotFoundException:
com.dstc.security.kerberos.NotYetDecryptedException

Documentum Server 22.2 Release Notes 24


Issue number Issue description

Docker/Kubernetes

CS-136126 When you enable multiple languages during an upgrade from 21.4 to 22.1, it results
in warnings in the logs of pods.

Workaround: Ignore the warnings as English is enabled by default.

CS-134636 When you upgrade Documentum Server 21.4 to 22.1 in a cloud environment, some
of the repositories and EBS scripts are not installed.

Workaround: Rerun the scripts manually and then run the Helm upgrade command.

CS-130688 User authentication is successful even when the user state is set to 1 and
INACTIVE_UNSUBSCRIBED_USER is enabled.
Workaround: Modify the value of upd_last_chg_time_from_db to T in server.ini for
all the replicas.

CS-128717 User authentication fails when OTDS is in SSL mode with certificate-based
Documentum Server pod in a Kubernetes platform.

Workaround:

1. Obtain the OTDS certificate from https://<ingress-prefix.ingress-


host>/otdsws.

2. Copy the certificate in the Base64 encoded format (.CER or .PEM) and
place it in the Documentum Server pod.
3. Import the certificate in dfc.keystore located at $DOCUMENTUM/certificate/
using the following command format:

keytool -importcert -keystore


$DOCUMENTUM/certificate/dfc.keystore -file <file path of
certificate to be imported> -alias otds.`hostname` -
storepass $DFC_SSL_TRUSTSTORE_PASSWORD -noprompt

CS-121973 When you try to perform any operations after installing IJMS on Docker, it results in
the ACS_ERROR_PROJECTING_DOCBROKER error. This occurs only when
Documentum Server and IJMS are installed on different Docker hosts. This is
because IJMS container does not have access to the hostname of the Documentum
Server container.

Workaround: Install the Documentum Server and IJMS on the same Docker hosts.

CS-59040 Repository configuration fails with the use existing docbase option in the Docker
container.

Documentum Server 22.2 Release Notes 25


Issue number Issue description

CS-53709 Bundled Java does not work with CAS plug-in in a Docker container.
Workaround: Ensure that the Docker container exports the port number 64443.
Install the latest Java and generate the client server certificates and then copy the
UnlimitedJCEPolicy jar files to Documentum Server Java, CAS Server Java and
client server Java if you get the java.security.InvalidKeyException:Illegal key size
error.

Documentum Server 22.2 Release Notes 26


8 Contact information
OpenText Corporation
275 Frank Tompa Drive
Waterloo, Ontario
Canada, N2L 0A1

OpenText My Support: https://support.opentext.com

For more information, visit www.opentext.com

Copyright © 2022 Open Text. All Rights Reserved.


Trademarks owned by Open Text. One or more patents may cover this product. For more information, please visit https://www.opentext.com/patents.
Disclaimer
No Warranties and Limitation of Liability
Every effort has been made to ensure the accuracy of the features and techniques presented in this publication. However, Open Text Corporation and its affiliates accept
no responsibility and offer no warranty whether expressed or implied, for the accuracy of this publication.

27

You might also like