v6.1 [Dec 20, 2008]
Features and Enhancements
-Standards-based login communication—SBR Administrator uses HTTPS instead
of a proprietary protocol for login requests. If the Steel-Belted Radius server
does not have a current server certificate, the server generates a new
self-signed server certificate.
-Certificate revocation list (CRL) cache and proxy enhancements—Certificate
processing has been improved in Release 6.1 in several respects:
--Support for CRL cache flushing
--CRL cache timeout
--Enforcement of CRL serial numbers
--CRL proxy connection settings
--Proxy exclusion list
--Static CDPs
--CCM replication
-Support for background CCM replication
-Replication backup and restore
-Daylight savings time—Release 6.1 adds support for automatic adjustment of
system clock for daylight savings time. Additionally, users can choose between
local time and UTC (coordinated universal time) for timestamps in the event log
file.
-Configurable error handling for backend databases—Users can now specify
whether errors should cause a disconnect/reconnect to a MySQL, ODBC, or
Oracle database.
-Steel-Belted Radius is now based on the Birdstep RDMe database. Users who
are upgrading from previous releases of Steel-Belted Radius may have to do
some manual data conversion depending on the operating system they are
running.
Problems Resolved in Release 6.1.7
--SBR does not accept UTF-8 passwords for Windows Domain authentication.
(598548)
--SecurID User Suffix authentication does not support EAP-32. (671091)
--If the SecurID Prefix method or the SecurID Suffix method is used first, SBR will
not try any methods listed below it. (677039)
--SBR does not use the latest version of the Ace Client libraries for RSA SecurID
authentication. (682089)
--SBR is not properly parsing tagged attributes in authentication and accounting
requests. (684730)
--SBR sometimes crashes upon startup on Linux. (692780)
--The LDAP command-line interface becomes unresponsive once or twice a
week. (705066)
Windows Domain authentication fails with UPN credentials sent from certain
brands of handheld devices. (727892)
--IPv6 addresses do not show up on the RADIUS client page in the administrator
GUI. (745637)
--SBR sometimes crashes when processing an inbound request if an IPv6
RADIUS client has been configured. (747146)
--SBR accepts insecure cipher suites on TCP port 1813. (749721)
--SBR may have OpenSSL vulnerability CVE-2012-2110. (770475)
--SBR sends “Access Challenge” rather than “Access Reject” when receiving an
incorrect on-demand tokencode. (774549)
