If you have installed the Admin Tools on a non-MAS system to administer subscribers, you should apply this service pack by selecting "Administration Tools Update" to insure you have the latest updates. The supplemental server may need to be restarted to insure dynamic updates are installed.

Service Pack contents

Support of Exchange 2007 SP1 has been added with this service pack.

Summary of MAS issues fixed in this service pack

wi00010198 The Audix TUI does not prompt or play Delivery Status Notification (DSN) messages (Administrative Messages).

wi00014617 Exchange backend: The MAS can stop handling calls successfully if the Peer Exchange Server goes offline.

wi00016319 At times, Call Me and Notify Me stop working.

wi00016507 A VB 205 alarm is generated due to an empty error.xml.

wi00018685 The Mailbox Usage Report does not provide information on mailboxes with Caller Applications associated with them.

wi00021914 Audix TUI: Intermittently the header of a message is not played.

wi00028127 The Basic Metrics Report does not correctly display the �Total Subscriber Logon (TUI) Successes� or the �Percentage of Subscriber Logon Failures�.

wi00031323 A caller application that has a language other than the system default does not work as expected. Calls will be dropped.

wi00031914 Audix TUI: Unable to play back failed voice message when a Delivery Status Notification (DSN) message is received.

wi00032429 Change the 75% MAS drive fragmentation alarm from severity 4 to a severity 2

wi00032986 When using Dial by Name the order the names are spoken back varies depending on which MAS is accessed.

wi00034606 Extend the Alarming service to restart the mailbox monitor service if it generates dump files.

wi00035067 The MAS experiences heartbeat errors (1642 events) to the MSS.

wi00048072 The Fax service can restart continuously.

wi00048257 Notify Me: If two voice messages are received simultaneously, one of the Notify Me messages will not contain the correct contact information.

wi00049055 At times, under load, ports lock up which cause an out-of service condition for incoming and outgoing calls.

wi00049551 Notify Me: At times, the �Sender� for internal calls does not display the name and extension.

wi00049821 Audix TUI: There is a delay in response when speeding up or slowing down a message.

wi00050035 A memory leak in Fault Monitor server process causes the system to run slow and ports to become unresponsive.

wi00050113 At times, a 108 event is seen indicating that the Call Me server could not update a subscriber record.

wi00054682 The System Usage Report does not correctly provide the number of times users have logged in with the Audix TUI.

wi00064742 No personal greeting is played after the �Transfer to Mailbox� caller application is executed via Quick Messaging.

wi00065297 Aria TUI: The Audible Hourglass feature can cause memory corruption which results in an MAS restart being required.

wi00065998 At times, MWI stops working when the MWI service is running on a supplementary server.

Summary of MSS issues fixed in this service pack

wi00015727 Cross-site scripting security vulnerabilities in web pages.

wi00024254 Hostname appears in IP address field on external hosts web page.

wi00032725 Scripting error occurs during SFTP backup.

wi00033306 nfs-utils has security vulnerabilities.

wi00034278 Using Eject from the Web menu gives an error and the DVD is not ejected..

wi00035084 SMTP TLS by default is on. The default should be off.

wi00035973 The iptables command was not found during audits, causing error message to be generated.

wi00047880 Error in /etc/hosts localhost entry causes Ldapcorp to fail.

wi00047881 Need more logging for reformat-ldap.

wi00048247 Allow use of �/� in username for ftp backups.

wi00050284 Messages with user-defined flags are not reviewed by TUI.

wi00050561 MSS web certificates expiration issue due to date of 1/29/2038.

wi00053610 New passwords can be changed to same as old passwords.

wi00054064 The super.log needs to be managed.

wi00054271 Error messages in imapd log not descriptive.

wi00054357 A space needs to be added between Business and Purpose on the Welcome page.

wi00054754 Password expiration not working when AAA server configured.

Summary of WSO issues fixed in this service pack

wi00049969 When editing any free form Notify Me message body the text is applied to all rules.

wi00053901 Resolved an issue introduced with SP2 where WSO is installed on a drive other than C there are issues.

wi00054257 "Notify Me Auto Options" on "Option Summary" page incorrectly indicates disabled in Mouse-Over pop-up

Service Pack 3 Contents

� If French Canadian is set at the language on the incoming call tab then messages are not voiced out.

� Audix TUI: Calling the sender with H323 integration does not function correctly with ring no answer or busy.

� When a call gets transferred to an extension using a caller application it does not play calling party information.

� H.323 and SIP Integration do not present the calling party number on the station display.

� Open H323 tracing is broken.

� Dump files on rover1 while running with meteors, this happens with SIP Integration.

� When called from a Web Client to a SIP Integration machine, it rings the Extension and then goes for a Silence before dropping the call.

� Setting Class of Service "Max Call Answering Message Length" to zero causes CCI code to loop, the incoming call will loop saying "Message is too short" followed by "Please record your message" prompt.

� Audix TUI: Receive invalid entry when recording Caller Applications.

� Notify Me does not provide the time stamp of the message when English123 is selected.

� ARIA TUI doesn't clear DTMFs entered while playing sender information before playing the message.

� The MAS is sending SNMP alarms as Hex stream instead of ASCII.

� Domino: Modifications to Mailbox Monitor to better handle resources.

� Security: SQL service runs as local system account

� Provide a connectivity tool to test general MAS connectivity with clients.

� Audix TUI: If you record a new announcement, the announcement fails to be played by the caller application.

� Domino: Subscriber Options and recorded prompts cannot be deleted from the Lotus Notes client.

� An abundance of Notify Me messages can cause corruption of the database on the MSS.

� Serenade TUI: Unable to change the rewind and forward settings in VMSC.

� Domino: Broadcast Distribution List component is too heavy on MAS resources.

� Provide a connectivity tool, MMConWiz.exe to test general MAS connectivity with clients.

� Digits 2 -9 do not work in Auto attendant menu editor

� SIP: failures occur with many incoming fax calls.

� Domino: The Notes VMD component should only create the VMD summary document for it's own domain.

� Running load on a system experiences DTMFs sometimes being ignored, calls sometimes not being answered, and recordings sometimes missing a portion of the audio at the beginning, in the middle, or the end.

� MAS Starting using too much Virtual Memory after system reboot

� After Installation, the application event log shows continuous 44 blue events saying that the alarming service was started. The system event log also shows continuous 7031 red events saying that the alarming service terminated. The service list shows the MM Alarming service as not started.

� Unable to edit/delete SNMP NMS for Alarm value via MSS web page.

� Eastern Australia DST Time zone change.

� Activity log has many extraneous entries.

� Restore of 3.0 data or older onto 3.1 SP1 does not add new ldap attributes.

� The MSS goes offline while trying to add members to ELA lists using Provision.

� Occasionally, a system outage is caused by an Adata core dump.

� An alarm was raised by an Audit and the alarm does not clear when the Audit is successful.

� By default, SMTP TLS is on and the default should be changed to off.

� For the syseval report if there is an ascii name that starts with �++� the report does not complete successfully.

� MSS Backup fails, Gets Minor Alarms from Nightly Backup When Messages Are Deleted during Backup.

� Unable to login to the web form if user name contains a "z" OR "G".

� FTP backups fail, when upgraded from MM 2.0 to MM 3.1.

� At times the DVD-ram can get �stuck�.

� Security: MAS credentials can be found using web browser on MSS.

� Messages to subscribers with a email address starting with a digit get rejected by MSS.

� The field f�Accept Mail from Trusted Server� on MSS web admin page SMTP Options should be removed.

� Security: weakness in iim log viewer allowing most any file on the system to be viewed.

� Help files datetimeplay_help.htm, embassist_help.htm, noanswergreet_help.htm and savesent_help.htm missing from the WSO help of Japanese language is selected from the WSO login screen.

Service Pack 2 Contents

� In a Multi-MAS Domino environment, duplicate VMD objects are being crated multiple times each day. After the MAS is restarted (whether automatically or manually) there is a proven risk that it may fail to start up properly. The MAS gets access denied from the duplicate object.

� Serenade TUI: 1765 errors that result in the user being disconnected.

� The EnableWU.exe application is required to enable the Windows Update Service.

� Digits 2-9 do not work in the Automated Attendant.

� SIP: Under load, occasionally most of the ports goes out of service.

� Out calling port goes into bad state and brings down the rest of the ports eventually.

� Messages being delivered to the common name (subscriber name) and not the email address.

� Exchange backend: Users are unable to address a message to unverified mailbox numbers using either the Serenade or Audix TUI.

� The Serenade TUI crashes when using name addressing for some specific names.

� Do not receive warning that mailbox is more then 80% full.

� Text to speech stops reading certain email messages.

� Some new users are unable to change their password when the Educator is enabled

� The MAS is sending the wrong object identifier when generating a SNMP alarm

� Exchange backend: When a locked mailbox is unlocked using Active Directory, it still stays locked on some MASs in a multi-MAS Exchange configuration.

� Find Me still does not work in multi MAS environment, on the first attempt. This was an intermittent fault due to a small timing window where any change to a Find Me data item was not seen by the synchronizer resulting in the data item value not being populated to another MAS in the voice mail domain.

� Integration for NEC2400 80 packet length is not working

� SIP: Vserver dumps occur when the system is under load.

� Cannot 'print all' from Serenade TUI

� There are times that port hangs when a transfer fails.

� While calling into the Auto Attendant to an invalid station the caller is transferred to random users� extensions

� With the Audix TUI a memory leak occurs when an Extended Absence Greeting is deleted.

� AUDIX & Serenade TUI's do not allow addressing to unverifiable mailbox numbers

� A tool, alogdump, which is used by Avaya Services, is not functioning correctly.

� Domino backend: Memory leak within the user profile component when logging is disabled.

� Under load the voice browser stopped and restarted several times. This problem is in the managed TUIs (Audix and Serenade) and their use of the voice browser.

� SIP: Poor voice quality when playing out a GSM.

� When listening to a fax header it plays in numeric.

� The event 1765 is logged while forwarding a message from the Serenade TUI and the user is also disconnected.

� Digits 2 -9 do not work in Auto attendant menu editor

� MSS Backups fail, user gets Minor Alarms From Backup, when Messages Are Deleted During Backup

� Messages to subscribers with a email address starting with a digit are being rejected by the MSS.

� Infrequently a mailbox cannot be created.

� Email address starts with number - could have messages delivered to WRONG mailbox.

� Dormant mailboxes are not tracked correctly on the syseval report

� First attempt to change a greeting on a ELA mailbox always fails. The problem has migrated to the activation and de-activation of optional greetings for an ELA mailbox. When any optional greeting is turned on or off via the TUI or WSO for the �When the extension is not answered� option, the mailbox is locked up for about 15 minutes.

� IMAP4 super user receiving unsolicited status responses for all mailboxes while not IDLE.

� Additional information should be logged when a corrupted list is encountered.

� Infrequently Ais_net core dumps. It does restart immediately.

� The MSS fails when sending mail out to an email address with an ampersand "&". When the remote subscriber includes a subscriber with an email address that contains an ampersand "&", the ELA list creation fails. Creating a local user with a name that includes an ampersand "&" fails for Mailbox Manager and Modular Messaging MSS Subscriber Management.

� Minor alarms from a nightly backup occur when messages are deleted during the backup.

� FTP backup fails to some FTP servers (other than linux).

� The FSCheck does not raise an alarm when the file system full.

� The MAS Host Information Setup web page loses data if there are special characters in the admin login.

� When setting up the MAS Host Information, users can not successfully save data that uses a dash or a space in the Private Aliases field.

� Removed public as the default for the SNMP community.

� From Caller Experience : Call Handling users are not able to select the optional greeting

� WSO does not display PDL's unless the Identifier is unique - The identifier is NOT a required field.

� Some users, mostly remote users across the WAN receive the WSO error page.

� Users cannot record a record extended absence greeting via WSO.

Service Pack 1 contents

� Network access to the MAS is now only possible through the use of named Windows accounts.

� SIP: The audio quality is degraded the first time speed up/slow down is requested. However, subsequent requests sound fine.

� There is a problem with the H323 integrations where the current prompt is only partially played.

� Under load, calls to a few subscribers were failing with a315# errors. Callers would hear: �I'm sorry; there is a problem with the system. Please hang up and try again.�

� Setting the password expiration time does not work properly.

� When an unsent message is sent from an Audix TUI mailbox, the message will be received in the recipient�s mailbox but the MWI light does not go on to indicate the arrival of this new message.

� Domino backend: at times an error in MWI after sending a message to an Aria subscriber

� The XML document which contains details of when Daylight Savings Time (DST) starts and ends needs to be updated to handle changes in time zone schemes

� Exchange Broadcast Distribution Lists (BDL's) need to be mailbox enabled by the MISCM for Exchange 2007.

� Improve system error handling of malformed faxes in the MAS fax mailbox.

� Audix TUI experiences problems and drops the call when re-recording a personal greeting on MM-Exchange system

� Add logging needed to debug SIP issues.

� Off line monitoring is erroneously monitoring users not in the local voice mail domain.

� Improve handling of multi part messages in the Audix and Serenade TUI�s to resolve rare occurrences of subscriber disconnects during message review.

� The mailbox properties file gets corrupted and prevents a user from accessing his mailbox via the TUI.

� International versions of MM could generate dump files during Domino synchronization with the FEDB.

� After upgrading from MM1.1 to MM3.1, all the services have their startup type set to Automatic except the MM Service Connector whose startup type remains Manual. The service has to manually be started.

� Reviewing an unsent message using the Audix TUI before editing it, plays back the Exchange help message.

� The Out calling restrictions under the Caller tab of the Telephone User Interface in the VMSC do not work as expected.

� When sending a message from an MM through MN to an Exchange MM3.1, messages are not being received. The messages are being addressed correctly, the messages are getting delivered from the MN, but on the Exchange side the messages are not getting delivered.

� Pressing *0 while using the Audix TUI does not play the expected announcements ("No operator defined" followed by "Returned to previous activity. For help, press *H�) but disconnects the call instead.

� Playback time on the Aria TUI is long (average time about 5 seconds) on Domino backend.

� Upgrading from MM3.0 to MM3.1 displays a failed screen because there is no installation log folder in the Temp directory.

� QSIG integration: MAS attempts to transfer to an invalid extension, a 1711 info event is output stating number unassigned. However, 15+ 1711 error events stating cannot accept call in current state are also outputted which provide no useful information. Call manager should be changed to only output the one useful 1711 info event.

� If a message is forwarded multiple times (3-4) using the Voice Form, without adding any subject line and the message is then played back from the TUI, only the first part of the message is read out. The other embedded parts of the voice message are not read out by the TUI.

� Need a connectivity tool to test General MAS connectivity from clients.

� Steady handle count leak is being displayed for the vserver process on S3400 System under load.

� Find Me and Notify Me features do not get enabled when vmenable is run.

� Small memory leak when running against Exchange.

� If Danish, Czech or Russian is set as the primary domain language in the VMSC, after a system restart it will revert to "Not Set".

� The addition of Czech, Danish & Russian exceeded the 20 language limit of the Statement Manager. These languages cannot be initialized.

� Two exceptions that occur at the same clock tick cause a deadlock in the Exception handler. This causes the vserver process to hang and the system then has to be manually restarted.

� In the drop-down box for a caller app language it is not possible to select Hebrew, even if it is installed on the system.

� The message playback time is GMT instead of the system default on a Domino system.

� The DCT tool transposes the IMAP4 and MWI passwords

� The FQDN (Fully qualified domain name) is still needed by MISCM for sysprep, even when not joining the corporate network. The DCT prevents entering of the FQDN in its UI by stopping the "." character from being typed.

� When a call is forwarded to MM on RNA/Busy from a 12 digit extension the call is treated as a direct call and the caller is offered to logon whereas it should actually ask the caller to leave a call answer message for the 12 digit extension�s mailbox. When a call is forwarded from 10 or 11 digit extensions it works.

� Deleting an unsent message with the Audix TUI and Exchange backend doesn't work. The same unsent message is presented back to the user continuously and the user cannot finish reviewing his unsent messages.

� The TUI doesn�t release the port when an error occurs during call answer and the port cannot be used until it is released.

� No attempt to retry path replacement was made by H323 when it received an error meaning that occasionally more ports were used than was necessary.

� Problems with Mexican and Spanish Aria TUI prompts. A �shhh.� noise between phrases can be heard. The Spanish prompt for the dial by name option says Press *2 �whereas for English and French, the prompt for dial by name option says Press *.

� An intermittent problem deleting unsent messages using the Audix TUI.

� Getting an error message while testing WSO stating that the MAS can't access the default mailbox.

� Personal Operator schedule does not work. The Personal Operator schedule shows inactive when it is active.

� When data retrieved by the Operational History viewer is exported to a text file, the time of each event is 5 hours ahead of the time seen in the Operational History viewer.

� When the users call to retrieve their messages, the time given by the TUI is off by 5 hours.

� When a WSO load with 500 subscribers is run on a stand alone server to interface with a Domino system where WSO has been activated, the vserver is periodically reset.

� After creating a new user with the Audix TUI the default media message order does not take effect

� When the Assistant tab in Subscriber Options is opened, the Find me rule and MWI features have no rules listed. The features need to be unchecked and rechecked to display the rules.

� Excessive 1855 informational events in the event log for each subscriber. This event should only be logged when the mailbox properties error is corrected.

� When a standalone language pack (Arabic, Russian, Czech, and Danish) is installed, it causes the uninstallation of patches and service packs.

� While reviewing PDLs using the TUI, contacts as well as the lists are read out.

� Notify Me messages should display the senders name and not the senders mailbox address

� A problem with �delete on exit� has been resolved ensuring that deleted messages are always removed when this setting is chosen.

� In Audix TUI, if the Extended Absence greeting (EAG) is deactivated and then you try to listen to or record an EAG, it plays a prompt "Extended absence greeting not recorded"; instead of playing the prompt "Extended absence greeting is recorded but not active."

� The Address Templates portion of the MAS installation setup fails on a 64 bit version of a Windows 2003 server.

� After changing a trusted server protocol password in the Messaging Servers Administration pages in VMSC, administrators must restart all MAS servers in the VMD for the change to take effect. A MAS restart should not be needed for changes to the passwords to take effect.

� A user�s Extended Absence status was not being saved properly when they hung up without explicitly confirming the change.

� Using the "incoming ring count" feature to set the ring count for Analog integrations does not actually change the ring count.

� If an error is made while saving a greeting, the system prompts to start recording a message instead of saying there is a problem and disconnecting the call.

� After login to a mailbox, if the user enters "2" then "3" ,MM disconnects the call and plays the voice prompt "This call is experiencing difficulties. Please try again later.." is heard. What TUI does this apply to?

� The Call Me / Notify Me event log messages have been inadvertently renumbered through addition of new definitions in the middle of the message file and the original order needs to be restored.

� The called party information is not properly identified by MM for certain call scenarios. The most common call scenario is when vectoring is used on the CM.

� Message header showing a 1 hour later timestamp on a Domino system.

� SNMP alarming needs to send alarms to multiple destinations.

� Aria TUI changes to support native fax on Exchange.

� Unable to transfer to MBs with Quick Message

� A User cannot log into his own mailbox by calling his number if his mailbox is full. The following prompt is heard "The person for which you wish to leave a message does not have enough available space in his or her mailbox. We are not able to take your message at this time.� This is incorrect as the user is trying to log into the mailbox, not leave a message.

� A problem has been fixed where the H323 link to the switch needed a MAS restart to recover the integration

� Problem with Call Me if a Notify me rule contains multiple email addresses

� A section of code needs to be modified to prevent a potential exception in the Call Me server.

� An administrative message is sent back to the sender of a message if the recipient�s mailbox is full. While trying to listen to this administrative message with the TUI, the user hears silence and after a minute or two is disconnected. This causes the MAS service to restart.

� Message type is wrong on notifications for networked voice messages. If two separate Notify Me rules are created for voice mails and call-answer, users receive two notifications for the call-answer call; one notification for the call-answer rule and the other for the voice mail rule. The notification for the voice mail rule should not be received.

� To allow MM to support vectoring when using a SIP integration to connect with Communication Manager release 4.1.

� When a user forwards or rewinds the message while the TUI is playing a message header an exception is generated

� On an MSS system, notification messages sent to multiple email addresses do not get delivered to all the recipients. Only the first email address receives the notification message.

� Event message IDs that have been changed for the Callback Server need to be changed back to the original IDs

� A message that has a failed fax reception is sent in case the message has other useful parts (such as a voice part). However if there is actually no voice part, a message with a 0-byte TIIFF attachment is sent. This message should not be sent if there is no voice part.

� Heartbeat errors to the MSS (1642 events)

� Notify Me notifications are not received after installing SP2 on Windows 2003. Notify Me works fine on Windows 2003 SP1.

� MAS servers are failing with all ports returning fast-busy under heavy fax load.

� Fax sender generates mini dumps and prevents all fax sending until the service is restarted.

� Languages set are English, French and German. After selecting a language (German), the system still says English and all further prompts are in English. The CCI reverts back to the primary language (English) in spite of selecting another language.

� MM has an old version of the MCAPI library. This needs to be updated.

� In a multi-MAS setup, Find Me diverts the call through one MAS correctly in the first attempt but if it tries to divert it through another MAS, it doesn�t work in the first attempt. It diverts the call to a wrong number (previous Find me number set).

� If the Notify Me message is from an external caller, the sender name field in the Notify Me message shows �non-mail-user@..� instead of 'unknown sender'.

� A log line was removed that caused a handled exception. No user or system impact was observed.

� The tracing service creates three new scheduled tasks every time the server is stopped and started. The customer can periodically go in and delete the jobs to delay the machine form crashing but the system will eventually crash.

� Active directory is now set to Native Mode and anonymous access to the server is restricted.

� Non-essential services like the Printer Spooler Service and the File Replication Service should be disabled or removed during MAS installation.

� During MAS installation, Auditing is not enabled. The customer has to manually activate Auditing. It should be enabled by default during installation. If it is not enabled Windows Event Viewer does not log event entries in the security log.

� The SIP integration has been improved to make the use of out calling from the server less susceptible to toll fraud.

� Unable to delete/add a PDL if it contains a tombstone member. While reviewing the PDL from the TUI, as soon as the tombstoned member is reached, the call gets disconnected.

� When a fax send fails its last retry because the actual fax protocol fails then a success event (113) is wrongly generated. The sender is notified that the send failed but the success event logged is incorrect.

� MM returns a malformed response to a MWI Interrogate request resulting in retries that are unnecessary. This problem had no detrimental affect on MWI lamp status but the inefficiency has now been resolved.

� Selecting * on the Aria TUI incorrectly prompts �please enter password� when the prompt that should be heard is �Please enter the mailbox number of the person you are calling.�

� An upgrade to 3.1 from 3.0 causes the MAS to restart every 7 minutes and creates 1300 events.

� An application is required to enable the Windows Update Service. What application is required?

� An automated tool to correct the multiple $personextensibleschema on the Domino server after the MM installation is needed so that the DUC Subscriber Admin page can be displayed.

� The MM tab appears when the Active Directory is searched (right click on domain, do? Find.) If you double click on a user a who does not have an Exchange mailbox an error is received when the MM tab is clicked.

� The serviceability section in the MAS Voice Mail System Configuration (VMSC) tool needs to be extended to allow two NMS destinations and a field to provide a choice for the acknowledgement types needs to be added.

� Deleting an unsent message on Audix TUI and Exchange backend doesn't work. The same unsent message is presented back to the user continuously and the user cannot finish reviewing his unsent messages.

� SQL service is running as local system account.

� When user changes the password using Subscriber options an error occurs but the password is changed.

� When MAS Service is stopping with all other MM Services still running, the MAS experiences an exception and generate dump files.

� Remove TerminateThread call in the umlib::umThread class.

� Danish, Czech & Russian cannot be set as a domain primary language.

� Mailbox Monitor hangs after failed Imap4 connection to MSS.

� The Audix TUI may disconnect a user when reviewing a personal distribution list that contains a deleted user.

� *T fails after entering the mailbox to transfer to, but works if you dial by name.

� MM with SIP integration is not recording messages correctly when the caller hung up at the end of recording their message and do not press pound and then send, results into logging dump events.

� Notify me is not working when a time zone calculation is employed within its schedule.

� Duplicate entries are being added to the MWIStateDB.

� Remove non essential services.

� Exchange SO Online Help Needs Modification.

� Exchange 2007 � an MAS with Exchange 2007 system management tools installed cannot create external caller mailboxes for Exchange 2000/2003 non-Peers.

� Fast busy is heard when handling heavy fax traffic.

� Security: Administrative user auto login password exposed in registry.

� Replay of voice+fax message does not play the voice part of the message.

� MM3.1 with Exchange backend - Clicking the Advanced option causes ADUC to shut down.

� 60 Prompts missing from En-Au in Audix TUI.

� Add version information to Add-Monitor-Mbx and EnableWU.

� MM 3.1 SP1 FM still does not work in multi MAS environment.

� Security: Pen test indicates web server should use SSLv3

� The SSH service supports the protocol version 1.

� SNMP alarming needs to send alarms to multiple destination.

� Restore reported successful even if post-restore script fails.

� The system has multiple operating system accounts with the same User Identification Number (UID).

� The system is vulnerable to a serious denial of service attack based on the way the system is configured.

� The PAM configuration of the system does not track last login, or prevent the use of null passwords and track last login failed attempts.

� The apache web server is found to be exposing information without proper authentication.

� The user is not able to add a mailbox with default password. This is only if the password is the mailbox with 11 at the end.

� The remote subscribers are removed when LDAP timeouts.

� Install: java is not installed on the MAS which causes the user a problem if they try and use the Messaging Administration web screen on the MSS.

� The windows domain setup restricts to the domain administrator.

� The MSS server configuration allows directory listing.

� The SSL cookies are not secure.

� Clean up the errors in the web server log.

� Check and correct ownership of LDAP transaction logs.

� The MAS host information is not saved if there is any error/warning about corporate LAN.

� The incorrect syslog messages for directory updates.

� The Administration History web page does not display warning if max entries is hit.

� The current state of telnet connection is wrong on the Telnet Administration page

� Add the IDMU option to the AAA admin page.

� Support required for the Audix devices on the old S3400 motherboards.

� The ping diagnostic page does not work.

� The traffic measurement is not working from the console.

� During an audit the corrupted data is written to the tracelog but that log rolls over too quickly and the corrupted data is lost.

� Add README file to MCAPI library package.

� Weekly audits were incorrectly removing message files.

� The log dump tool is not working.

� The console browser rejects server certificate.

� Save does not work for AAA configuration on a fresh install.

� Using the administration history web page can result in the httpd ssl_error_logs getting rather large.

� There are errors in cron entries.

� The mailbox Lockout is not occurring despite many repeated failed login attempts with web client.

� There is an alarm is being raised when fan rpm level exceeds 5000.

� Attempting to disable Notify Me in VMSC results in the following error "Failed to save configuration data. If you have recently altered this property, please make sure that the MAS Voice Server service has successfully restarted if previously requested to do so."

� IMAP4 requests did not receive response due to a deadlock.

� Format errors were found in logon security warning message.

� Expunging a message caused a core dump.

� When an invalid or unavailable IP address is placed in the LDAP-AAA server field, the login page does not work and gives the error "Could not connect to login_proxy."

� Size of certificate name field on certificate management web page was restricted to 15 characters.

� While trying to modify the trusted server information, an error is received.

� Size of security warning text field on security warning web page is restricted to 5000 characters

� The ELA trusted server alarms come and go frequently, even when the customers are not using the ELA.

� The Software Management Software Update screen displays many low-level packages and should display only high-level packages

� Messaging Measurements web page failed when the telnet daemon is not started.

� All TUI�s are unable to create a message in the draft folder.

� After installing MSS using Web admin and creating the Postmaster mailbox, the Subscriber Management page displays a message in red about creating the Postmaster mailbox. The Text needs to changed so the correct information is provided.

� SFTP LAN backup failed when the backup directory name is too long

� Fan alarm is being raised until RMB is reset.

� Log entries are being created for notify me enabled subscribers when the server side folder gets changed.

� Messaging Measurements web page failed when telnet not in iptables.

� Trusted server name was allowed to be �tui� (case insensitive).

� An alarm is being raised when fan rpm level exceeds 6000.

� Cached web pages remain in the client�s web browser creating a situation of having secure data accessible on the client�s PC.

� Auto complete is not disabled for the MSS and MN login form. Due to this a user�s login ID and password are stored and can be retrieved by anyone accessing the user�s computer.

� While trying to login to an ELA mailbox via the Aria TUI, users get a message stating that there is a problem with the system please try again later .

� PDLs with tombstone member were unable to be added or deleted

� Protocol diagnostic web pages were vulnerable to some security issues.

� Anonymous LDAP access to the MSS could not be turned off.

� Some web pages were vulnerable to security issues

� Anonymous LDAP user is allowed access to all information.

� Ais_net was causing core dumps. What condition was actually causing the core dump?

� Samba release corrected security vulnerabilities.

� Aria message order on subscriber web page was incorrect.

� When the Automatic Notification Rule to send a Page when any new message arrives in the mailbox is modified via SO and the same rule is opened in WSO then the Pin/Message text box is populated with the string %1%.

� WSO needs a web method to return the Personal Operator mailbox time zone.

� The WSO installation on a stand alone server fails due to an incorrect virtual directory setup.

� WSO Time zone of personal operator needs to be considered while showing schedules.

� The notification rules page does not work properly when the Pager method is selected.

� The functionality which requires the use of schedules (Find me, Call me, Notify me) is not administrable from within WSO.

� The Attendant schedule does not update after applying a Personal Operator with a time zone difference.

� Time zone is not calculated correctly when subscriber's time zone is set to GMT.

� Greetings cannot be recorded with the AVP.

� Remove �unsupported OS/browser combination� warning for IE7.0.

� WSO tries to retrieve the attendant schedules from an MAS it is not connected to.

� When a WSO patch is installed and then WSO is uninstalled on a stand alone server, WSO can not be reinstalled on the system because the patch that had been installed can not be uninstalled.

� Certain users, mostly remote users across the WAN are getting WSO error page when trying to login.

� WSO does not display PDL's unless the Identifier is unique - The identifier is NOT a required field.

Released updates included in this Service Pack since the last Service Pack

MM310301

More information

� This software update is only intended to be installed against the following release(s) of Modular Messaging:

- MM 3.1

� This software update contains code changes applicable to Avaya Modular Messaging when installed against the following Message Stores

- Avaya Message Store

- Microsoft Exchange

- Lotus Domino

� This software update (7.1.471.0) is only intended to be installed against the following builds of Modular Messaging or higher

- MAS 7.1.229.0 (base release)

- MAS 7.1.229.0 (software-only install for Microsoft Exchange systems)

- MSS 3.1-12.1 (base release)

- WSO 7.1.229.0 (base release)

PATCH DETAILS

MAS files delivered in this service pack

File	Version	Date
ocuabout.dll	7.1.471.0	3/4/2008
Setup.exe	7.1.471.0	3/4/2008
umlocaleconverter.dll	7.1.471.0	3/4/2008
Umschedule.dll	7.1.471.0	3/4/2008
UmMsgVictoryMailbox.dll	7.1.471.0	3/4/2008
MiScmGVConfig.dll	7.1.471.0	3/4/2008
MMDCT.exe	7.1.471.0	3/4/2008
app080A.mdb	7.1.471.0	1/13/2007
dnTUIAudix.dll	7.1.471.0	3/4/2008
dnTUISerenade.dll	7.1.471.0	3/4/2008
dnTUIModel.dll	7.1.471.0	3/4/2008
Ophist.mdb	7.1.471.0	7/21/2006
phr080A.ovf	7.1.471.0	1/13/2007
sipcmsm.dll	7.1.471.0	3/4/2008
StatementManager.dll	7.1.471.0	3/4/2008
Tuivlib.dll	7.1.471.0	11/8/2007
PLUS.P		11/8/2007
UMEventMsg409.dll	7.1.471.0	10/3/2007
umexchangevmd.dll	7.1.471.0	3/4/2008
UmMsgDominoMailbox.dll	7.1.471.0	3/4/2008
UmMsgDominoSession.dll	7.1.471.0	3/4/2008
ocserver.dll	7.1.471.0	3/4/2008
UmUpDominoServer.dll	7.1.471.0	3/4/2008
UmUpDominoServerProfile.dll	7.1.471.0	3/4/2008
umupfedbmanager.dll	7.1.471.0	3/4/2008
UmUpServerProfile.dll	7.1.471.0	3/4/2008
UpVictoryServerProfile.dll	7.1.471.0	3/4/2008
var080A.mdb	7.1.471.0	1/13/2007
Vcmsm.dll	7.1.471.0	3/4/2008
MMSchedule.dll	7.1.471.0	3/4/2008
Callbackserver.exe	7.1.471.0	3/4/2008
Callbackservereventmsg409.dll	7.1.471.0	3/4/2008
Callbackservereventmsg407.dll	7.1.471.0	3/4/2008
Callbackservereventmsg410.dll	7.1.471.0	3/4/2008
Callbackservereventmsg40c.dll	7.1.471.0	3/4/2008
Callbackservereventmsg413.dll	7.1.471.0	3/4/2008
Callbackservereventmsg416.dll	7.1.471.0	3/4/2008
callbackservereventmsgc0a.dll	7.1.471.0	3/4/2008
Callbackservereventmsg404.dll	7.1.471.0	3/4/2008
Callbackservereventmsg411.dll	7.1.471.0	3/4/2008
Callbackservereventmsg412.dll	7.1.471.0	3/4/2008
Callbackservereventmsg804.dll	7.1.471.0	3/4/2008
VictoryMonitorManager.dll	7.1.471.0	3/4/2008
SNMP.dll	7.1.471.0	3/4/2008
Ocadmin.dll	7.1.471.0	3/4/2008
SQLAccountChange.exe	7.1.471.0	3/4/2008
Rmeveryone.exe	7.1.471.0	3/4/2008
Mmapasswordpolicy.dll	7.1.471.0	3/4/2008
SM_PID_TimeZoneInformation.property
MISCMGVConfig.dll	7.1.471.0	3/4/2008
umfaxsender.exe	7.1.471.0	3/4/2008
umupdominosynchroniser.dll	7.1.471.0	3/4/2008
MMDumpHelper.dll	7.1.471.0	3/4/2008
ctoiss.dll	7.1.471.0	3/4/2008
OpHistView.exe	7.1.471.0	3/4/2008
UmGenMsgSM.dll	7.1.471.0	3/4/2008
UmUpExchangeServer.dll	7.1.471.0	3/4/2008
libmcapi.dll	7.1.471.0	3/4/2008
UmStorageOnStream.dll	7.1.471.0	3/4/2008
ctoi.dll	7.1.471.0	3/4/2008
Tracer.exe	7.1.471.0	3/4/2008
Add-Monitor-Mbx.exe	7.1.471.0	3/4/2008
ADSetup.exe	7.1.471.0	3/4/2008
umupvictorysynchroniser.dll	7.1.471.0	3/4/2008
umupcontactmemberscollection.dll	7.1.471.0	3/4/2008
mwiinternal.dll	7.1.471.0	3/4/2008
MMConWiz.exe	7.1.471.0	10/19/2007
msvcp71.dll	7.1.471.0	3/4/2008
msvcr71.dll	7.1.471.0	3/4/2008
EnableWU.exe	7.1.471.0	3/4/2008
marssm.dll	7.1.471.0	3/4/2008
umnotesvmd.dll	7.1.471.0	3/4/2008
RSTextToSpeechSM.dll	7.1.471.0	3/4/2008
createsecuritygroup.ps1		7/20/2007
create-mbx.ps1		1/30/2007
create-mbx.bat		1/30/2007
create-bdl.ps1		1/30/2007
create-bdl.bat		1/30/2007
MMBroadcastListManager.dll	7.1.471.0	3/4/2008
MMDominoBroadcastListProvider.dll	7.1.471.0	3/4/2008
csutil.dll	7.1.471.0	3/4/2008
INADScall.dll	7.1.471.0	3/4/2008
INADScallps.dll	7.1.471.0	3/4/2008
OCPersonalConfig.dll	7.1.471.0	3/4/2008
MMConWiz.exe	7.1.471.0	3/4/2008
DominoMonitorManager.dll	7.1.471.0	3/4/2008
Phr0C0C.ovf		3/4/2008
create-mbx.msh		10/26/2007
datetimeplay_help.htm		11/10/2007
embassist_help.htm		11/10/2007
noanswergreet_help.htm		11/10/2007
savesent_help.htm		11/10/2007
asconfig.exe	7.1.471.0	3/4/2008
CallerApps.dll	7.1.471.0	3/4/2008
UmCaDeploymentps.dll	7.1.471.0	3/4/2008
UMServer409.dll	7.1.471.0	3/4/2008
gv_fmserver.exe	7.1.471.0	3/4/2008
CreateDump.exe	7.1.471.0	3/4/2008
UmCaDeployment.dll	7.1.471.0	3/4/2008
Retart3MMServices.bat		1/25/2008
rules		1/14/2008
MMEvnMon.exe	7.1.471.0	3/4/2008
dnamlib.dll	7.1.471.0	3/4/2008
dnTUIHandler.dll	7.1.471.0	3/4/2008
faxrenderingmanager.dll	7.1.471.0	3/4/2008
faxgenerator.dll	7.1.471.0	3/4/2008

MSS RFUs delivered in this service pack

A5011rf+j.rpm

B7040rf+a.rpm

E5011rf+a.rpm

M7040rf+k.rpm

U7040rf+c.rpm

Z7040rf+a.rpm

WSO files delivered in this service pack

File	Version	Date
WSOWebService.dll	7.1.471.0	3/4/2008
NotifyMe.js	7.1.471.0	1/25/2007
NotifyMeControl_Automatic.ascx	7.1.471.0	1/25/2007
TimeZoneData.xml
Wbso.dll	7.1.471.0	3/4/2008
Wso.vbs		2/19/2008
Setup.exe	7.1.471.0	3/4/2008
MMSchedule.dll	7.1.471.0	3/4/2008
WsoCommon.dll	7.1.471.0	3/4/2008
IIS.dll	7.1.471.0	3/4/2008
MMGreetingRules.xsd	7.1.471.0	3/4/2008
MMPhoneService.dll	7.1.471.0	3/4/2008
MMPhoneModel.dll	7.1.471.0	3/4/2008
MMGreeting.dll	7.1.471.0	3/4/2008
WsoLanguages.dll	7.1.471.0	3/4/2008
ApplicationPreferences.aspx	7.1.471.0	3/4/2008
FlexibleCallHandling.aspx	7.1.471.0	3/4/2008
FlexibleCallHandlingControl.ascx	7.1.471.0	3/4/2008
Global.asax	7.1.471.0	3/4/2008
WSOWebService\Web.config	7.1.471.0	3/4/2008
dnTUIAudix.dll	7.1.471.0	3/4/2008
dnadapters.dll	7.1.471.0	3/4/2008
greetingrules.dll	7.1.471.0	3/4/2008
dntuimodel.dll	7.1.471.0	3/4/2008
dninterfaces.dll	7.1.471.0	3/4/2008
UpVictoryServerProfile.dll	7.1.471.0	3/4/2008
UmMsgVictoryMailbox.dll	7.1.471.0	3/4/2008
PersonalOperatorControl.ascx	7.1.471.0	3/4/2008
Service1.asmx	7.1.471.0	3/4/2008

Administration Tools files delivered in this Service pack

File	Version	Date
UserAdmin.dll	7.1.471.0	3/4/2008
setup.exe	7.1.471.0	3/4/2008
ocuabout.dll	7.1.471.0	3/4/2008
UMAbout409.dll	7.1.471.0	3/4/2008
ocserver.dll	7.1.471.0	3/4/2008
ocadmin.dll	7.1.471.0	3/4/2008
vmsc409.dll	7.1.471.0	3/4/2008
asconfig.exe	7.1.471.0	3/4/2008
umvictoryvmd.dll	7.1.471.0	3/4/2008
umexchangevmd.dll	7.1.471.0	3/4/2008
asconfig409.chm	7.1.471.0	1/09/2007
AsconfigAV409.chm	7.1.471.0	1/09/2007
ASConfigLD409.chm	7.1.471.0	1/09/2007
CallerAppsEditor409.dll	7.1.471.0	3/4/2008
CallerAppsEditor.dll	7.1.471.0	3/4/2008
UmCaDeploymentps.dll	7.1.471.0	3/4/2008

INSTALLATION

Please read the following notes before you install this build of Avaya Modular Messaging.

For any Messaging Application Server (MAS):

Please ensure that you have reviewed the latest SWINS Configuration Note for your installation and made any required changes. The latest released documents can be found on the support.avaya.com website.

For any Messaging Storage Server (MSS - does not apply to Exchange or Domino back-ends):

On only one MAS, you must ensure that the Message Storage Server Update is selected for installation and that it completes successfully.

The following RFUs are installed with this update; A5011rf+j.rpm, B7040rf+a.rpm, E5011rf+a.rpm, M7040rf+k.rpm, U7040rf+c.rpm and Z7040rf+a.rpm.

For any Microsoft Exchange Server or Lotus Domino -based MAS systems (does not apply to MSS back-ends):

To install the Messaging Application Server Updates you will need to use the service account / customer account login on the MAS. This is the account you used when installing the MAS software.

Download MM310400.exe from the Avaya Support website (http://support.avaya.com/).

Messaging Application Server and Supplementary Servers

Pre-Install

Launch the port monitor and disable all the ports. Start/Programs/Avaya Modular Messaging/Port Monitor. Select all ports and click on the disable button. Close the Port Monitor.
Note: There should be no open items on the desktop.
Note: Any Modular Messaging service that is set to Manual will be set to Disabled during the installation. If you don�t want this to happen, set the start type of the services running on this server to Automatic before this installation.
Note: On machines (other than the main MAS servers) that have only the administration tools installed, just run this update separately on those machines.
SQL server memory usage can grow past 1 GB. These are the steps that can be taken to control the memory usage of the SQL server. To be completed on each MAS in the VMD

1) Launch a command prompt.

2) Run the command: osql -D FEDB -E -d FEDB

3) At the SQL prompt enter the commands (on separate lines):

sp_configure 'show advanced options' , '1'

reconfigure with override
go

4) At this point the command will be executed.

5) quit

Install

If the system is eligible for this update, the check-box for the �Messaging Application Server Update� will be grayed and checked.
Note: For MSS Backend, if this is a one MAS system, or the first MAS of a many MAS system, make sure that you check the box now.
Press �Install� to start the installation of this update.
You may see a dialog requesting you close any open applications that are known to interfere with this update.
You will see a dialog that will stop all the Modular Messaging services before the installation can continue.
The installation will automatically continue and install the update.
You will be prompted to uninstall any patches that are already on the system prior to this software update. Choose continue to remove these patches. If prompted for a Restart after the last patch is removed, select Restart and allow the system to reboot and continue to step 8. Otherwise the system will detect that a restart is not necessary and the service pack will automatically install. Follow remaining instructions and continue to step 9.
When the MAS come back online, all updates have been removed and the Service Pack will be installed.

NOTE: If the installer originally selected the "Message Storage Server Update" for this server, after the reboot, this option will need to be reselected.

You will see a dialog that will start all the Modular Messaging services that are not disabled.
After a successful installation, the �Messaging Application Server Update� checkbox will be grayed and unchecked.
You may be prompted to reboot the server, press the �Restart� button and the system will reboot.

Post-Install

After the system restarts login.
Open the port monitor, Start/Programs/Avaya Modular Messaging/Port Monitor.

Enable all the ports by selecting all ports and clicking on the enable button.

Verify the settings for SQL memory control have been applied.

1) Launch a command prompt.

2) Run the command: osql -D FEDB -E -d FEDB

3) At the SQL prompt enter the commands (on separate lines):

sp_configure

4) Inspect the output to see the value of the 'max_server_memory' options which will now be 200. Prior to the change, the value was 2147483647.

Message Storage Server

Pre-Install

This update is not applicable to Microsoft Exchange or Lotus Domino systems.
On only one MAS, you must ensure that the Message Storage Server Update is selected for installation and that it completes successfully.

Install

Log in to the MSS web forms as a user who can install a service pack.
Go to Software Management->Software Update->Service Pack.
Follow the rest of the prompts to get to the list of service packs that need to be installed. There is no need to do a backup first (you will likely get a warning about no backup done in the last 2 hours).
Follow the prompts to complete the software installation.
Reboot the system.

Web Subscriber Options Standalone Server (WSO)

Install

This procedure is for a "standalone" WSO server only. This includes servers that are co-resident with the Web Client. If the WSO server is co-resident with the Messaging Application Server (MAS) do NOT follow any of the instructions for WSO patches, follow the instructions for installing/removing the patch on the MAS.

1. Run the MM310400.exe executable. If the system is eligible for this update, the check-box for the �Web Subscriber Options Update� will not be grayed and will be checked.

2. Press �Install� to start the installation of this update.

3. The installation will automatically continue and install the update.

4. After a successful installation, the �Web Subscriber Options Update� checkbox will be grayed and unchecked.

5. Press �Close�, if prompted to reboot the server, then press the �Restart� button and the system will reboot.

KNOWN ISSUES

1. Domino CPE will only install to the default location "C:\Program Files\Avaya Modular Messaging\". This issue did exist prior to this SP.

2. While uninstalling this service pack, a message may appear that the cslog_server.exe process is still running. The user will have to manually end the cslog_server.exe process from the Task Manager to proceed with the uninstallation of the patch.

3. While installing this service pack on a system on which MM3.1 SP1 Patch2 is installed, the user will have to manually stop the cslog_server.exe and the gv_fmserver.exe processes from the Task Manager to proceed with the installation.

4. For MSS back-end, sometimes user does not get the mails sent from MM account.

UNINSTALLATION

Messaging Application Server

Uninstalling this update will take the Messaging Application Server back to the previous GA version.

Pre-Uninstall

1. Launch the port monitor and disable all the ports. Start/Programs/Avaya Modular Messaging/Port Monitor. Select all ports and click on the disable button. Close the Port Monitor

2. Note: There should be no open items on the desktop.

Uninstall

1. Open the Add or Remove Programs from the Windows Control Panel.

2. Select "MM Uninstallation Wizard" in the list and press "Change". You will see the Modular Messaging Uninstallation Wizard displayed.

3. Go to the Patches section and find the update you want to uninstall. You can only select one patch at a time to uninstall and it must be in the order of most recent patches first. Check the checkbox next to it and press "Uninstall".

4. You may see a dialog requesting you close any open applications that are known to interfere with uninstalling this update.

5. You will see a dialog that will stop all the Modular Messaging services before the uninstallation can continue.

6. The uninstallation will automatically continue and uninstall the update.

7. After a successful uninstallation, the update will be removed from the Patches section of the Uninstallation Wizard.

8. You may be prompted to reboot the server, press the �Restart� button and the system will reboot.

9. After the uninstall has completed, it should be verified that the selected components have been removed by using Add or Remove Programs from the Windows Control Panel and then selecting the �MM Uninstallation Wizard�.

10. If WSO was selected to be removed and still appears, then follow the instructions above to remove it again.

11. It should also be verified that the MM services were started after the uninstallation. If the MM services do not show as started, use either the server recovery script or a server reboot to start them.

Post-Uninstall

1. If a reboot was requested, after the system restarts, login.

2. Open the port monitor, Start/Programs/Avaya Modular Messaging/Port Monitor.

a. Enable all the ports by selecting all ports and clicking on the enable button.

Message Storage Server

Uninstall

If it is desired to take the system back to the GA release (no patches installed):

a. On the MSS web forms, go to Software Management->Software Removal and select the following RFUs to be removed; A5011rf+j.rpm, B7040rf+a.rpm, E5011rf+a.rpm, M7040rf+k.rpm and Z7040rf+a.rpm.

Web Subscriber Options on a standalone server (WSO)

Uninstall

If the WSO server is co-resident with the Messaging Application Server (MAS) do NOT follow any of the instructions for WSO patches, follow the instructions for installing/removing the patch on the MAS.

To remove a patch on a standalone WSO server

Open the Add or Remove Programs from the Windows Control Panel.
Select "MM Uninstallation Wizard" in the list and press "Change". You will see the Modular Messaging Uninstallation Wizard displayed.
Go to the Patches section and find the update you want to uninstall. You can only select one patch at a time to uninstall and it must be in the order of most recent patches first. Check the checkbox next to it and press "Uninstall".
The uninstallation will proceed.
After a successful uninstallation, the update will be removed from the Patches section of the Uninstallation Wizard.
You may be prompted to reboot the server, if so, press the �Restart� button and the system will reboot.