1. Changes to Multiple Programs
2. Changes to Individual Programs

Release Notes for JRButils for AD v15

Changes to Individual Programs

Adchkhome

• Updated to work for AD enabled NSS volumes on Micro Focus servers. Permissions, quotas and ownership may be retrieved, checked and displayed for such volumes.
• Fixed an issue where some output fields were not displayed when processing subdirectories of a path, without also using /c to perform specific checks.
• Removed the requirement that the path be given in UNC format when using /d to check subdirectories.

Adchrcheck

• Updated to retrieve owners from AD enabled NSS volumes subject to having sufficient rights. Note that Windows APIs always return Administrators as the owner.
• Modified /i to give greater control over whether names containing extended characters, control characters, and/or non-standard printable characters are reported. Any combination of these may now be selected.

Adcreate

• Updated to support fully creating home directories on AD enabled NSS volumes on OES Linux servers. Adcreate recognises when the path exists on an NSS volume and uses the appropriate methods to set ownership and permissions. NSS style permissions may be given via /d.

Addelete

• Updated to fully work when a home directory is on an AD enabled NSS volume on an OES Linux server. This included some minor tweaks, and adding code to retrieve the home directory owner can be retrieved when /a is used to ensure the user being deleted owns the home directory, before it is deleted. Windows APIs always return Administrators as the owner on NSS.

Adfsrights

• Fixed an issue where it was defaulting to /d=s instead of /d=a when a value for /d was not given.

Adfsupdate

• Added /n=g for use when copying directory permissions. This causes the permissions to be copied immediately after directory creation rather than after the contents have been copied into the directory. It may speed the application of permissions by avoiding having to apply inherited entries to all child folders and files. Instead, these are incorporated into the DACL when the file or subdirectory is created.
• Added /n=u to display the elapsed time (hh:mm:ss) for the requested action, in the final totals line.
• Enhanced to support wildcarded copying of directories when using /$. For example, “adfsupdate p:\bob\b* r:\bob /$/s” will copy all directories from p:\bob where ‘b’ is the first character of the name.
• Modified to resolve Windows paths incorporating a share and to use the resolved path for the requested operation. This eliminates any possible issues arising from inadequate share permissions.
• Added consistency checks to give explicit error messages when input paths and options mismatch e.g. the path includes a file when /$ is used, or does not include a file when /# is used.
• Fixed an issue where a target path was not created when copying, using /c, and “\*” or “\*.*“ was appended to the path e.g. p:\data\2021\*.*.

Adgetrest

• Modified to check if the user running the program is a member of the “Protected Users” group which disables caching of credentials and consequently prevents connecting to other domain controllers to find the most recent login date, and date of last change. Errors arising from the failure to connect are now suppressed.

Adgetval

• Fixed an issue in the fully GUI versions where the row number column was not being populated.
• Fixed an issue in the command line versions when using an input file containing header lines (indicated by “xxheader”), the white space, comma or semicolon following “xxheader” was not skipped.
• Updated to allow “%xxheader” to appear in the value given for /a on the command line. It causes a single header line to be displayed, formatted as per the value for /a with “%xxheader” removed, and using the attribute names in place of values.
• Modified to check if the user running the program is a member of the “Protected Users” group which disables caching of credentials and consequently prevents connecting to other domain controllers to find the most recent login date, and date of last change. Errors arising from the failure to connect are now suppressed.
• Updated to display both the numeric value and the supported encryption types for attribute msDS-SupportedEncryptionTypes e.g. “28 (RC4, AES 128, AES 256)”.

Adgetvolquota

• Updated to retrieve quotas on AD enabled NSS volumes on Micro Focus OES Linux servers. The option (/v) to display all quotas on a volume may also be used on such volumes.

Adgrpadd

• Added /h to allow specifying a container in which to create groups when /c is used. This may be useful when using an input file of groups containing just their CNs.

Adgrplist

• Fixed an issue where it processed wildcards incorrectly when the group name was given in the form groups/comp*.

Adimport

• Updated to support creating home directories on AD enabled NSS volumes on Micro Focus servers. The following may be done:
  • Permissions assigned or removed.
  • Ownership set.
  • Attributes set.
  • A directory quota set or removed.
  • A volume quota set or removed.
  Two new control statements have been added:
  • Home directory nss rights.
  • Second home directory nss rights.
  Permissions for such volumes must be given using Micro Focus format e.g RWCEMFA.
• Updated to accept quota values in terabytes.
• Updated to report values set for volume and directory quotas in MB instead of KB.
• Corrected an oversight where it was not accepting object names in canonical format (e.g. /abc/sales/daniel) in export mode.

Adlookup

• Fixed an issue with filtering on string values where it was not working correctly for the equals operator.
• Updated to display both the numeric value and the supported encryption types for attribute msDS-SupportedEncryptionTypes e.g. “28 (RC4, AES 128, AES 256)”.

Adobjsec

• Fixed an issue where an ACE could be removed when modifying the flags or permissions via right click.
• Made various changes to the dialog box for modifying ACEs including making the size changeable, and performing background consistency checks so that for example, when adding an ACE, the ACE type changes in accordance with the “Applies to” field selection.

Adquotas

• Fixed an issue where the object class output field was not populated when displaying all volume quotas on a volume.
• Fixed an issue where it did not display the object name when retrieving directory quota values for user’s home directories via the system service.
• Updated to support setting and displaying volume and directory quotas on AD enabled NSS volumes on an OES Linux server.

Adsethome

• Fixed an oversight where it did not accept terabytes as units when setting a volume based quota via /s.
• Added /m=v to suppress verifying the home directory path. This may be useful when the target host is known to be unavailable.
• Worked around an unexplained issue which caused opening an Active Directory object to fail after verifying a path on an AD enabled NSS volume.
• Modified to check if the FILE_PERSISTENT_ACLS bit is set in the home volume property flags and to report that permissions and ownership cannot be set when this is the case.
• Fixed an issue where it reported an error when volume quota units were give in uppercase e.g. /s=500MB.
• Added support for AD enabled NSS volumes on Micro Focus OES Linux servers. Permissions, volume quotas, and file ownership may be set. These volumes require NSS style permissions instead of the usual Windows permissions. /$ must be used when specifying NSS style permissions via /r and /t.

Adsetowner

• In previous versions /d was ignored when using /r on the basis that /r would be used to restore values for individual files or directories e.g. using a file created by adwhodidit. However, following a customer request, the behaviour has been modified to allow /d to interact with /r allowing for example, the ownership to be set on whole directory structures when a path and owner appears in the file.
• Tidied the output when using /r to avoid two output lines being created for one entry in some cases.

Adsettrust

• Added support for setting and removing trustees for Active Directory users and groups on AD enabled NSS volumes on Micro Focus OES Linux servers.

Adsetval

• Fixed an issue where it was reporting a misleading reason for failure when attempting to assign a user principal name already used by another object.

Adsetvolquota

• Added support for setting and removing quotas on AD enabled NSS volumes on Micro Focus OES Linux servers.
• Improved the error messages when using /d (set a default quota or threshold) with incompatible parameters or options.

Adtrstlist

• Changed /z which retrieves the DACL using an old API, to /$.
• Added a new /z providing a means to limit the display of ACEs to those with selected security principals. A comma separated list of names may be given, or the name of a file containing names may be given. /z provides the opposite functionality to /a which excludes selected security principals.
• Updated the GUI versions to be able to browse for objects when populating security principal inclusion or exclusion lists.
• Corrected an issue when adding a trustee via right click where it might not display the IO inheritance setting for the new trustee, despite this value being set correctly.
• Made various minor enhancements to the trustee change dialog box including making it resizeable for better display of long names or paths.
• Added security principal object class as an optional output field for command line versions via /w=v. This option already existed in GUI versions.
• Changed the behaviour of the GUI versions to give better consistency when changing the “Path processing” and “Contents processing” options.
• Updated to support displaying Active directory and/or eDirectory trustees on Micro Focus OES Linux server volumes which have been AD enabled.
• Updated /v to provide control over whether Active directory and/or eDirectory trustees are displayed on AD enabled Micro Focus volumes. The default is to display only Active Directory trustees.
• Fixed an issue in the GUI versions where it had ceased to display ACEs as cacls, icacls or adsettrust commands.

Adwhodidit

• Added units (MB, GB, etc) to column headers for relevant columns e.g logical and physical size.
• Fixed an issue where units of TB were not accepted in a filter value.
• Fixed a minor issue when filtering on sizes where the filtering was done on byte values rather than in the requested output units. This resulted in some apparent anomolies in the filtered output due to rounding when displaying the results in other units.
• Modified so that when /c is used to give give a column width for the path, it is also applied to the full path field (fp) when no width is given for that field.
• Updated the GUI versions to be able to display all fields for each file or directory, one field per line, as per /z in the command line versions.
• Updated the GUI versions to have the exact same flexibility as the command line versions when selecting files and directories to process. This largely involved adding a checkbox controlling whether or not to display the properties of the named path.
• Updated the GUI versions to give separate counts in the status bar for files and directories processed.
• Fixed an issue in the GUI versions where random characters were displayed in the owner edit box when attempting to change ownership on a non-NTFS drive.
• Fixed an issue with the right click copy option in the GUI versions where copying sometimes failed if the selected path or file contained extended characters.
• Fixed an issue with the right click copy option in the GUI versions where copying selected files from NSS to NTFS could result in the names being converted to uppercase.
• Made minor changes to all dialog boxes displayed when right clicking in the list view including ensuring that they are re-sizeable for displaying long paths or long error messages.
• Updated the GUI versions to allow execution of a program via right click in the list view.
• Updated the GUI versions to allow opening a file with the program associated with the extension, via right click in the list view.
• Fixed an issue in the GUI versions with filtering on owner where in some circumstances, an owner found by browsing could be enclosed in two sets of double quotes resulting in the expression being declared invalid.
• Modified /a in the command line versions so that in addition to specifying delimited output and the delimiting character, ‘q’ can also be specified to force values to be enclosed in double quotes. This option had somehow been lost over time, other than via /b which sets a range of options.
• Fixed an issue where the path length field was not being right justified in command line versions.
• Modified to, by default, include field headers when producing delimited output.
• Fixed an issue where it could hang when trying to retrieve a file owner for some drives mapped to non Microsoft file systems e.g. a CIFS mapping to an AD enabled NSS volume on an OES Linux server.
• Updated to retrieve file and directory owners via the Micro Focus Virtual File Services interface for a drive mapped to an AD enabled NSS volume.
• Fixed an issue with copying a directory structure via right click in the GUI versions, where it no longer copied directory permissions (but did copy file permissions), due to a change made a couple of years ago in the copying code.
• Added /w to reinstate the last access dates and times on NTFS directories, subject to having sufficient rights to do so. The act of retrieving the contents of a directory causes its last access date and time to be updated.
• Fixed an issue in the GUI versions when right clicking on a date to modify where it displayed a message box reporting “Invalid argument to date encode” when there was no existing date value.