OpenText Documentum Server 23.2 Release Notes
OpenText Documentum Server 23.2 Release Notes
OpenText Documentum Server 23.2 Release Notes
23.2
Release Notes
1 Introduction
These Release Notes provide an overview of Documentum™ Server 23.2, including new features,
delivery information, and supported platforms.
OpenText recommends that you read these Release Notes in conjunction with the documentation
included with the software package. If any conflicts exist, the Release Notes supersede the other
documentation.
We also recommend that you check OpenText My Support for any patches or documentation updates
that may have been posted after the initial release of this product.
Documentum Server is the core of the Documentum content management platform. Documentum
Server governs the content repository and enables a set of content management services for
controlling content and processes throughout distributed enterprises. Documentum Server lets you
store, manage, and deploy all types of content, including HTML and XML, graphics, and multimedia.
Documentum Server provides services such as the following:
• Integrated workflow
• Version control
• Security
With Documentum Server, users can share and reuse trusted content on demand within and between
business units. Administrators can define, organize, automate, and monitor all the functions and tasks
of complex business processes. Documentum Foundation Services (DFS) is no longer installed with
Documentum Server. You must install a DFS server on a machine that is different from the one on
which Documentum Server is installed.
2.1.5 Fetching images from Docker image registry using Pull Secrets
Administrators can pull Documentum images from a private container image registry or repository
using a secret. A pull secret can be configured in the HELM Charts. Please refer to the product
documentation and below link for more details:
https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/
Feature Benefit
RHEL 9.x as the base Operating System Documentum reference containers have
container image RedHat Enterprise Linux 9.x certified as base
OS image. Please refer to the OpenText
Documentum Platform Infrastructure
Certification Guide for supported databases with
this RHEL version
Java Method Server (JMS) supports Apache Embedded JMS in Documentum Server has a
Tomcat 9.0.71 newer hardened version of Apache Tomcat
9.0.71
With CE 21.4 and later versions, Documentum Workflow Designer and Process Engine, previously
part of Business Process Manager (BPM), were included with Documentum Platform. This provided
customers with advanced workflow capabilities. Documentum Workflow Manager and related plug-ins
that are packaged with Documentum Composer are now replaced with the advanced workflow
capabilities described in this section. Documentum Workflow Manager may be removed in a future
release and customers are recommended to plan accordingly.
Documentum supported LDAP synchronization and authentication are now deprecated in lieu of the
synchronization and SSO support offered by OTDS. The LDAP synchronization functionality is still
accessible for customers to plan their migration. Starting CE 21.4, Documentum offers leading
practices for customers to migrate from traditional LDAPv3 providers to OTDS.
2.2.1 Discontinued
The following features have been discontinued in this release:
Documentum CE 23.2 no longer supports Postgres 10.x and 11.x as a database since these versions
of the database are out of standard support in November 2023. Documentum provides options to use
Postgres 12.x up to the latest version of Postgres 15.x. Also, SQL Server 2016 is out of standard
support by its vendor and no longer supported by Documentum.
Documentum CE 23.2 no longer supports RHEL 6.x, Ubuntu 16.04.x LTS, Ubuntu 18.04.x LTS and
Windows Server 2016 as operating systems. Customers are provided with latest options of these
operating systems. RHEL 7.x, 8.x and 9.x is certified. Ubuntu 20.04.x LTS and Ubuntu 22.04.x LTS
versions are supported. Windows Server 2019, 2020, and 2022 is certified with the latest
Documentum CE release. Please refer to the OpenText Documentum Platform Infrastructure
Certification Guide for supported operating systems and databases.
Starting Documentum CE 22.4, reference docker images and HELM charts for Ubuntu operating
system have been deprecated and discontinued. Customers can build their own images using the
docker scripts and other packaging artifacts that have provided.
To search and download the list of software binaries on OpenText My Support, perform the
following steps:
1. For product releases 22.4 or later, on the Home page, click Knowledge > Software
Downloads.
Notes
For product releases prior to 22.4, on the Home page, click Knowledge >
Software Downloads and use the additional filters.
4 Documentation
Documentation for Documentum™ Server is available on My Support.
To search and download the list of documentation on OpenText My Support, perform the
following steps:
1. For product releases 22.4 or later, on the Home page, click Knowledge > Product
Documentation.
Note
For product releases prior to 22.4, on the Home page, click Knowledge >
Product Documentation and use the additional filters.
Before beginning installation, ensure that your system meets the requirements listed in Chapter 4,
Supported environments and compatibility. After installation, be sure to update your software to the
latest patched release, if any patches are available.
7 Fixed issues
This section provides information about past issues that have been fixed in this release.
CS-140331 AEK key upgrade fails upgrade from 22.2 to 22.4 in scenarios where the
AEK passphrase is not a very strong password as per the new
password complexity guidelines.
CS-141998 MIGRATION_CONTENT job fails when the target store is set to S3 with
error code DM_STORAGE_E_S3_PUSH_CONTENT_METADATA_FAIL
(CS0021756).
CS-140856 Documentum Server with seek API for streaming support for external
stores was introduced where in there was a mismatch in HTTP POST
request parameter name which ACS could not recognize. The fix is to
use the correct parameter name 'offset' instead of 'seek_offset'.
CS-140317 Documentum Server after startup fails to obtain socket for xPlore host
and hence does not start IA.
CS-139355 Connection broker binding not happening to the right IP when server is
attached with multiple Network Interface.
8 Known issues
The following known issues exist in this release.
CS-135504 Repository logs contain additional messages - “Unable to load monitor library"
Workaround: Create a soft link from libpcre.so.1->libpcre.so.0 using the
following command:
ln -s /usr/lib64/libpcre.so.1 /usr/lib64/libpcre.so.0
If you are installing DAR files with dardeployer.ini or if you get an error while
using composer.exe, then add the '-
Djava.locale.providers=COMPAT,SPI' property after -vmargs in
dardeployer.ini/composer.ini.
Note: The <correct-local-date-format> is different for different localized
Windows.
CS-135462 Documentum Server upgrade from 20.4 to 22.1 shows older references of
log4j2.
Workaround: You need to first patch 20.4 and make sure no references of
older log4j libraries are present before 22.1 upgrade.
CS-128912 Authentication fails intermittently for Documentum client applications when you
deploy the DAR files in the Kubernetes platform. This happens when headless
composer is invoked for installing the DAR files on the same Documentum Server
host.
Workaround: Ensure that you include the password in the client application
scripts. For example, in Documentum Server, the kube_cs.sh script contains the
password details as CLI arguments as follows:
java -Ddar="$darFile" -Dlogpath=$tempdarlogs -
Ddocbase=$DOCBASE_NAME -Duser=$INSTALL_OWNER -
Dpassword=$INSTALL_OWNER_PASSWORD -Ddomain= -cp
$DM_HOME/install/composer/ComposerHeadless/startup.jar
org.eclipse.core.launcher.Main -data
$DM_HOME/install/composer/workspace -application
org.eclipse.ant.core.antRunner -buildfile
$DM_HOME/install/composer/deploy.xml >>
${DOCUMENTUM}/dba/config/$DOCBASE_NAME/dars.log
If the DAR files are installed by installer, you must modify the installer scripts to
include the password.
CS-128870 On Linux, when you try to configure IJMS in the same host as Documentum
Server, it results in the "Failed to include persistent preferences from "<IJMS
install directory>/config/dfc.properties" error in the ACS log file resulting in failure
to access the ACS URL.
Workaround:
1. Stop IJMS.
2. Navigate to the location where the dfc.properties file exist in the IJMS
ACS installation directory. For example, <IJMS installation
directory>/tomcat<version>/webapps/ ACS/WEB-INF/classes.
3. Open the dfc.properties file and replace the <IJMS installation directory>
with <Documentum installation directory> as specified in bold and save
the dfc.properties file.
CS-127896 ServerApps, ACS, and other URLs do not get generated in an RCS secondary
environment.
Workaround: Enable the privileged clients using DA.
CS-126854 Unable to invoke the CFS configuration program installer when using
AdoptOpenJDK. This is a design limitation of InstallAnywhere software with
AdoptOpenJDK.
Workaround: In the command prompt window, navigate to
%DOCUMENTUM%\product\20.4\install and then run the following command:
Server_Configuration_Program.exe LAX_VM
“%JAVA_HOME%\bin\java.exe”
where JAVA_HOME represents AdoptOpenJDK.
CS-125750 Installation of DAR files are slow and may take more time in a Documentum
Server/SQL Server 2019 environment. This is a Microsoft limitation.
Workaround: Install the SQL Server 2019 for Microsoft Windows latest
cumulative update.
CS-125094 In a Red Hat Enterprise Linux 8.1 or 8.2/Red Hat OpenJDK 11 environment,
when you try to configure the repository and connection broker in the SSL mode
without certificates, the configuration of the repository fails.
Workaround: Configure the repository and connection broker in the SSL mode
without certificates using the supported version of Oracle JDK or use the
certificate-based Documentum Server.
CS-121167 The CFS configuration program installer may not be able to connect to the
repository of primary Documentum Server while configuring on a dual-stack
Windows environment. This is a design limitation of InstallAnywhere software with
Java 11 while connecting to another dual-stack environment.
Workaround: You must manually invoke the CFS configuration program through
the Java 8 process and provide the IPv4 address of the primary Documentum
Server to connect to its repository.
CS-120767 Java methods does not run when IJMS is installed on a different host of IPv6.
CS-120209 While configuring the repository, the Unable to register the Accelerated Content
Services Administration URL error message is displayed intermittently.
CS-48939 After consolidation of repositories, the user_rename operation does not rename
the user on the migrated repository.
CS-41733 Logging through IAPI when handling several login requests within a short time
frame takes a long time. This is because the DEVRANDOM variable is not added
in the startup script on Linux for remote Documentum Server.
export DEVRANDOM
CS-41543 When you configure the global repository after installing Documentum Server, the
DFC_DOCBROKER_EXCLUDED warning message occurs in the JMS, DFC, and
ACS log files. This is because the Teredo Tunneling Pseudo-Interface is enabled.
Workaround: Perform the following step:
Disable the IP Helper service from the Services dialog to disable the tunneling
permanently.
Restart the machine.
CS-41332 UCF function fails when you upgrade Documentum Server and RMA. This is
because the UCF installer adds the following line to the network configuration file
causing UCF to use IPv6 which is not supported:
<option value="-Djava.net.preferIPv6Addresses=true"/>
DC-7495 Warning messages are displayed in the server log directory while deploying ACS,
BOCS, and DMS. For example: Class Path entry <JAR1 NAME> in <JBOSS 7.x
HOME>/server/DctmServer_DMS/deployments/DMS.ear/dms-ws.war/WEB-
INF/lib/<JAR2 NAME>” does not point to a valid jar for a Class-Path reference.
However, you can ignore these warnings. The JBoss website contains more
information.
CS-128600 When Google Cloud Platform (GCP) releases a new certificate, the old certificate
stops working even though the expiry date is not reached. This is because the
public certificate from GCP expires every 90 days or earlier for various reasons. If
the old certificate stops working, then you must obtain the new certificate from
GCP and import it manually to the location of dfc.keystore. This is a GCP
limitation.
CS-128074 Authentication fails with OTDS when the password contains double quotes.
CS-125376 Content compression does not work when both the compression and encryption
are enabled for the REST store. This is a limitation. However, the compression
works correctly when only content compression is enabled for the REST store.
CS-122988 When you launch the dm_mailwrapper.sh script in Red Hat Enterprise Linux 8.x
operating system, it results in the /bin/mail: relocation error: /bin/mail: symbol
SSLv3_client_method version OPENSSL_1_1_0 not defined in file libssl.so.1.1
with link time reference error.
Workaround: Add the lines (shown in bold) in dm_mailwrapper.sh script and then
launch:
#!/bin/sh
…
subject=$1
address=$2
content_file=$3
…
LD_LIBRARY_PATH=/lib64
export LD_LIBRARY_PATH
/bin/mail -s "$subject" "$address" < $content_file
status=$?
…
if [ $delete_contents = 1 ] ; then
# remove the temporary content file once it is sent
\rm $content_file
fi
…
unset LD_LIBRARY_PATH
exit $status
CS-122754 LDAP user authentication is not supported with the TLS 1.3 protocol.
CS-119448 Member repository unable to use the global repository which is projected to other
connection broker.
Workaround: The global repository and the new repository must be projected to
the same connection broker.
CS-55842 Email copied from sent items can be imported twice in same repository folder. This
is an Aspose limitation.
CS-53868 Unable to move the existing objects data from the non-partitioned table to the
partitioned table on a data partition enabled CentOS/PostgreSQL environment.
CS-53307 When you invoke the RPC method, MIGRATE_TO_LITE with RECOVERY_MODE
on a CentOS/PostgreSQL environment, it results in an error.
CS-51822 When dm_document is updated, attribute_list is not getting populated. This results
in object IDs in dm_audittrail not returning in ascending order of its creation in the
PostgreSQL database.
CS-48801 When you run the nested groups incremental LDAP synchronization job on Sun
ONE directory server, it fails for the user_rename and group_rename operations
and reports an error in the JMS log.
CS-48516 In the Microsoft Cluster environment, LDAP synchronization job does not work
with Microsoft Cluster virtual host name.
CS-45744 The dm_policy object that is attached with the dm_procedure object can only be
deleted by a superuser irrespective of the owner of the dm_policy object.
Workaround:
1. Unlink the dm_procedure object from the dm_policy object. Then, delete
the dm_policy object using the privileges used to create the dm_policy
object.
2. Delete the dm_procedure object using the superuser privileges.
CS-43925 When you attempt to transfer content through ACS and BOCS with the
Asynchronous Write Job turned 'ON', the DFC deployed in the application context
sends a message to DMS instructing it to store the content located in BOCS. The
size of the message is directly proportional to the number of ACS server
configuration objects and the number of base URLs in the ACS config objects. If
the number of configuration objects or URLs exceeds 2, the message may get
truncated when it gets stored in the DMS database. Therefore, it is recommended
to avoid such configurations of ACS config object(s). This is a limitation.
CS-43570 If the number of file stores in Documentum Server are more than 100, any
additional file stores created do not work and results in the following error:
[DM_SESSION_E_STORESTAT_OVERFLOW]error: "The shared memory
segment for caching the ONLINE/OFFLINE status of the Documentum Storage
areas has reached its maximum size (100). Update access may be incorrectly
given to Offline or ReadOnly storage area (28003039800002b7).". The file store
status of some of the stores may be incorrect. This is a limitation.
CS-42094 Change object type to a subtype does not work for lightweight objects.
CS-41576 LDAP synchronization fails when you try to synchronize a high count of user data
from the Microsoft Active Directory with the java.net.ConnectException:
Connection timed out exception.
CS-41252 When querying, agent_exec loose time because it also goes through jobs that are
dedicated to another server.
Workaround: To avoid time loss, set the value of the target_server attribute to
current server or ANY SERVER.
CS-40838 When two users perform a move operation of two folders simultaneously, the
r_folder_path and i_ancestor_id parameters contain incorrect values causing
folder inconsistencies in Oracle and SQL Server.
CS-40238 Unable to edit or perform a search based on the definition of the a_retention_date
attribute for immutable objects. You must run the
UpdateDDInfoForRetentionDate.ebs script manually to update the data dictionary
information for a_retention_date attribute and republish the data dictionary
information for the a_retention_date attribute of the sysobject and subtypes of the
sysobjects for existing repositories. Execute the
UpdateDDInfoForRetentionDate.ebs script on the Documentum Server machine
where the repository is created, using the following command:
• On Windows: dmbasic -f
%DM_HOME%\bin\UpdateDDInfoForRetentionDate.ebs -eEntry_Point --
<docbaseName> <installOwner> <password>
• On Linux: dmbasic -f
$DM_HOME/bin/UpdateDDInfoForRetentionDate.ebs -eEntry_Point --
<docbaseName> <installOwner> <password>
If you have a new 7.1 or later installation, you do not have to execute the
UpdateDDInfoForRetentionDate.ebs script. You must execute the
UpdateDDInfoForRetentionDate.ebs script only if you have upgraded repositories
and if you want to allow users to edit or perform a search using the
a_retention_date attribute definition of immutable objects. For downloading the
UpdateDDInfoForRetentionDate.ebs script or the latest Documentum Server patch
containing the UpdateDDInfoForRetentionDate.ebs script, refer to the Support site.
CS-40207 DoMail requests fail when static IP address is configured for JMS listen address.
This is because DoMail class runs the validateRequestIPAddress method against
the localhost's IP address.
Workaround: To prevent DoMail requests from another Documentum Server (on a
different host) from failing, you must add an init parameter to DoMail's web.xml.
The name of this parameter must start with the keyword 'ip-' and its value must be
the IP address of a trusted host. For example:
<servlet>
<servlet-name>DoMail</servlet-name>
<description>Documentum Mail Servlet</description>
<servlet-class>com.documentum.server.impl.mailservlet.DoMail</servlet-class>
<init-param>
<param-name>ip-192.168.0.1</param-name>
<param-value>192.168.0.1</param-value>
<//init-param>
</servlet>
CS-39775 Renaming and deleting users and groups fail in the LDAP synchronization with the
Oracle Internet Directory (OID) Server.
CS-39553 Deletion of nested groups from the LDAP directory server is not properly
synchronized to Documentum Server.
Workaround: Explicitly provide a value for input argument -full_sync for the LDAP
synchronization job through Documentum Administrator before running it: TRUE
for full sync; FALSE for incremental sync.
CS-39232 acl_check_db cannot be set to TRUE with QBS. This is because DFC does not
support setRange with double security check in Documentum Server.
DA-10459 Unable to access DFC client application when Kerberos SSO is configured using
Sun Login module "com.sun.security.auth.module.Krb5LoginModule required" on
the SUSE Linux environment. This happens when the application server is
configured with the SUSE Linux environment. The following error message is
displayed when you try to access Documentum Administrator: SEVERE [http-nio-
8080-exec-8] org.apache.catalina.core.StandardWrapperValve.invoke
Servlet.service()for servlet [ComponentDispatcher] in context with path [/da] threw
exception [Servlet execution threw an exception] with root cause
java.lang.ClassNotFoundException:
com.dstc.security.kerberos.NotYetDecryptedException
CS-136126 When you enable multiple languages during an upgrade from 21.4 to 22.1, it
results in warnings in the logs of pods.
Workaround: Ignore the warnings as English is enabled by default.
CS-134636 When you upgrade Documentum Server 21.4 to 22.1 in a cloud environment,
some of the repositories and EBS scripts are not installed.
Workaround: Rerun the scripts manually and then run the Helm upgrade
command.
CS-130688 User authentication is successful even when the user state is set to 1 and
INACTIVE_UNSUBSCRIBED_USER is enabled.
Workaround: Modify the value of upd_last_chg_time_from_db to T in server.ini for
all the replicas.
CS-128717 User authentication fails when OTDS is in SSL mode with certificate-based
Documentum Server pod in a Kubernetes platform.
Workaround:
1. Obtain the OTDS certificate from https://<ingress-prefix.ingress-
host>/otdsws.
2. Copy the certificate in the Base64 encoded format (.CER or .PEM) and
place it in the Documentum Server pod.
3. Import the certificate in dfc.keystore located at
$DOCUMENTUM/certificate/ using the following command format:
keytool -importcert -keystore
$DOCUMENTUM/certificate/dfc.keystore -file <file path
of certificate to be imported> -alias otds.`hostname`
-storepass $DFC_SSL_TRUSTSTORE_PASSWORD -noprompt
CS-121973 When you try to perform any operations after installing IJMS on Docker, it results
in the ACS_ERROR_PROJECTING_DOCBROKER error. This occurs only when
Documentum Server and IJMS are installed on different Docker hosts. This is
because IJMS container does not have access to the hostname of the
Documentum Server container.
Workaround: Install the Documentum Server and IJMS on the same Docker
hosts.
CS-59040 Repository configuration fails with the use existing docbase option in the Docker
container.
CS-53709 Bundled Java does not work with CAS plug-in in a Docker container.
Workaround: Ensure that the Docker container exports the port number 64443.
Install the latest Java and generate the client server certificates and then copy the
UnlimitedJCEPolicy jar files to Documentum Server Java, CAS Server Java and
client server Java if you get the java.security.InvalidKeyException:Illegal key size
error.
26