ISL Conference Proxy 4.4.2240.57 for Windows and Linux (2023-02-02)

On 2nd of February the following was released:

ISL Conference Proxy 4.4.2240.57 for for Windows 64bit (Platform=win64, Revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31, req_os_version=0x06011db1-0x7fffffff)
ISL Conference Proxy 4.4.2240.57 for for Linux 64bit (Platform=linux64, Revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31, req_os_version=0x0206200000-0xffffffffff)

Modules

Administration 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Audit 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Authentication 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Backup 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Core Login 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
DNS 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
GeoIP 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Integrator 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
ISL AlwaysOn 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
ISL Groop 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
ISL Light 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
ISL Pronto 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Locale 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
NTP 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
PostgreSQL 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Reports 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
SSL 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
Storage 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)
System Monitor 4.4.2240.57 (revision=adfdb602bd8b5b80fc16133b1b78aa69792c0b62, release_date=2023-01-31)

Translations

administration_20230124_20230124_163922.translation
backup_20230124_20230124_163922.translation
core_login_20230124_20230124_163922.translation
integrator_20230124_20230124_163922.translation
isl_alwayson_20230124_20230124_163922.translation
isl_conference_proxy_20230124_20230124_163922.translation
isl_groop_20230124_20230124_163922.translation
isl_light_20230124_20230124_163922.translation
isl_pronto_20230124_20230124_163922.translation
reports_20230124_20230124_163922.translation
ssl_20230124_20230124_163922.translation

Update availability

All updates, except translations, have release date set to 2023-01-31. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License

Improvements

ISL Conference Proxy - Core - Add checks to utils/password/forgot/change/1 (SECURITY) ISLCONFPROXY-2982 More

Description
Additional checks and logs were added to "utils/password/forgot/change/1".

ISL Conference Proxy - Core - Filter out comments from "Filters that define access to web pages" (FEATURE) ISLCONFPROXY-2085 More

Description
Support for comments was added to /conf setting "Filters that define access to web pages". Lines that start with # are treated as comments and are now ignored.

ISL Conference Proxy - Core - Reconnect to better server in single address GRID (FEATURE) ISLCONFPROXY-2345 More

Description
ISL Conference Proxy now implements load balancing hint in AutoTransport MUX header response, which the client may use to reconnect to a better server directly. The feature is primarily intended to be used in single address GRID setups where servers are still publicly available with DNS names.

ISL Conference Proxy - Core - Add option to configure allowed times for ISL Light session and terminate ISL AlwaysOn sessions on time slot end (FEATURE) ISLCONFPROXY-2697 More

Description
Support for scheduled ISL Light sessions was implemented. ISL AlwaysOn sessions now have separate maximum session duration setting and sessions are terminated when time slot expires. Forcefully ending sessions at the end of scheduled time slots can be enabled/disabled with separate settings for ISL Light and ISL AlwaysOn sessions.

New settings:

ISL Light (Session Management)

Scheduled sessions (in UTC): default empty -> not set

End active sessions at schedule end time: default Yes -> close sessions

Maximum session duration (time limit in seconds): default empty -> no limit

ISL AlwaysOn (Access Management)

End active sessions at schedule end time: default Yes -> close sessions

Maximum session duration (time limit in seconds): default empty -> no limit

ISL AlwaysOn - Module - Return existing granted connection, skip obsolete connections (FEATURE) ISLCONFPROXY-2763 More

Description
In previous versions when grant access was invoked on client side, granting for same user returned error. This was now redesigned and existing connection is returned. Old style token grants are now disabled.

ISL AlwaysOn - Module - Expose computer constant uid info on computer register (FEATURE) ISLCONFPROXY-2782 More

Description
When ISL AlwaysOn computer is registered, more information is now added to logs, such as computer model info and type of computer.

ISL Light - Module - Expose ISL Light GUI feature - prevent session recording (FEATURE) ISLCONFPROXY-2798 More

Description
New setting was added to /conf -> ISL Light -> Permissions -> Remote Desktop -> "Allow operator to record sessions". When this setting is enabled the operator is able to record sessions (default). When this setting is disabled the operator is unable record sessions.

ISL Conference Proxy - Core - Login settings rule exec (FEATURE) ISLCONFPROXY-2815 More

Description
New rules for login settings rules:

["exec", "PLATFORM", "EXE", "ARG1", "ARG2"]: "EXE ARG1 ARG2" is executed if PLATFORM is empty or matches current platform ("win", "windows", "win32", "win64", "unix", "linux", "linux64"), further processing is stopped and output is used as a new login settings rules setting

["access-denied"]: reject login without a condition

["undo-key", "KEY"]: remove KEY from setting update

["domain-key", "KEY", "VALUE"] : sets a KEY=VALUE in the newly created domain object, ignored if the domain already exists

["undo-domain-key", "KEY"]: remove KEY from domain setting update

["domain-key-from-user-key", "KEY", "USERKEY"]: converts USERKEY=USERVALUE setting into domain settings update, useful when used with other rules which have user setting update as output

External authenticator settings "domain", "username" and "name" will now be handled and will update remap. Initial value for the new domain may be supplied in XML response as: <domainSetting name="KEY">VALUE</domainSetting>.

Login dialog responses "account", "object" and "redirect_system" with "multifactor_done" support "login_settings" key with the same JSON response protocol as login settings "exec" rule. In "account" response, "domain", "username" and "settings" are deprecated, "login_settings" is the replacement. Similarly to external authenticator, domain will now be created if it doesn't exist yet.

Similarly to external authenticator, SSO SAML login settings will now create the domain if it doesn't exist yet.

New possible values for "Security > External authenticator":

CONFIG-FILE;<file>; (read setting from CONFIG-FILE, mainly used for debuggers)

LOGIN-SETTINGS; (do not run external authenticator and just execute login settings rules, which should handle USERNAME and PASSWORD using "exec" rule)

[INTERNAL] ISL Conference Proxy - Core - Add config change api to db setting cache (FEATURE) ISLCONFPROXY-2822 More

Description
Config change api was added to db setting cache.

ISL Conference Proxy - Core - Handle chat app URL preview bots (FEATURE) ISLCONFPROXY-2839 More

Description
Cloud bot URL preview services are now blocked from downloading programs. /start and /download will redirect to downloads web page. WebAPI2 session/query/2 will return user error "Invalid user agent".

ISL Conference Proxy - Core - Move SSL settings to separate category in /conf (FEATURE) ISLCONFPROXY-2846 More

Description
SSL setting "User can create SSL certificates" was moved from /conf -> Security -> "Uncategorized" to new category in /conf -> Security -> System Administration -> SSL.

[INTERNAL] ISL Conference Proxy - Core - Register "internal/light/session/ip/throttle/flush/1" (FEATURE) ISLCONFPROXY-2862 More

Description
Register new webapi "internal/light/session/ip/throttle/flush/1" to flush throttle.

ISL Conference Proxy - SSL - Use webapi ver2 (FEATURE) ISLCONFPROXY-2868 More

Description
Use new webapi methods registered in ISLCONFPROXY-2842 in GUI. Progress checker used to poll for task status was updated, and will now perform checks in increasing intervals (2 seconds, 5 seconds, 15 seconds).

ISL Conference Proxy - Core - Add sidebar (FEATURE) ISLCONFPROXY-2877 More

Description
Sidebar was added to web template to replace secondary navigation on product pages. Sidebar is shown on all pages when user is logged in. It can be expanded and collapsed (collapsed by default on small screen). Sidebar state is stored between web sessions.

New hooks are added for sidebar modification (product pages: 1, 2, 3):

hook|sidebar.content

hook|sidebar.products-1#start

hook|sidebar.products-1.title

hook|sidebar.product_page_1

hook|sidebar.products-1.separator

hook|sidebar.product_page_1.icon

hook|sidebar.products-1#end

Sidebar icon colors can be changed by overriding ".sidebar-icon-color" in css or replaced by providing custom images.

ISL Conference Proxy - SSL - Provide reason when revoking certificates (FEATURE) ISLCONFPROXY-2881 More

Description
New webapi2 method system/ssl/certificate/revoke/2 was registered, that accepts also revocation reason. In previous versions certificates were revoked with reason unspecified, and user could not change this. Now user can select one from following reasons:

unspecified

keyCompromise

superseded

cessationOfOperation

[INTERNAL] ISL Conference Proxy - Core - XML STRICTv2 parser for translations (FEATURE) ISLCONFPROXY-2888 More

Description
Translation XML parser was made stricter.

ISL Conference Proxy - Core - Log HTTP header parse errors in more detail 2 (FEATURE) ISLCONFPROXY-2903 More

Description
HTTP POST multipart parser was fixed not to report invalid client requests as internal errors. Additionally exceptions in "FastCGI frontend" and "web request lib" will have more detail about the location of error.

ISL Conference Proxy - Core - Move failed data lifecycle logs to appropriate subsystem and escalate logs (FEATURE) ISLCONFPROXY-2905 More

Description
Severity of logs for failed data lifecycle operations is now escalated depending on the duration if failed attempts (time since operation started to fail). Base severity of logs is "warning" and is escalated to "critical" when operation is failing for longer as 3 × "Synchronize interval in seconds" setting.

ISL Conference Proxy - Core - systemd Wants network-online.target (FEATURE) ISLCONFPROXY-2910 More

Description
systemd confproxy.service file was fixed to include line "Wants=network-online.target".

ISL Conference Proxy - Core - Copy web pages v2100 to v2200, set v2200 as default (FEATURE) ISLCONFPROXY-2912 More

Description
Web pages v2100 were copied into new version v2200. v2200 is now the default version.

ISL Conference Proxy - Core - Delete flags for ICP 4.4.1947 branch (FEATURE) ISLCONFPROXY-2913 More

Description
All flags from 4.4.1947 branch were deleted. These flags are now considered as enabled and can not be disabled by user anymore. Deleted flags:

2018-07-13 ISLLIGHT-5082 android intent package

2018-07-13 ISLLIGHT-5082 android intent package setting

2019-08-30 ISLPRONTO-1294 clear escaped string containers and improve feedback

2017-09-10 ISLPRONTO-1068 Expose chat history size limit and query timeout via setting

2017-09-11 ISLPRONTO-1069 fix chat history size limit

2018-07-20 ISLPRONTO-1155 use 'Maximum chat query range(in days)' setting in chat history query

2019-06-12 ISLCONFPROXY-1966 register password strength settings

2019-06-12 ISLCONFPROXY-1966 use password strength setting on password change

2019-07-11 ISLCONFPROXY-1983 register and use password_requirement::reject_weak_passwords permission

2018-12-31 ISLLIGHT-5220 register webapi isllight/session/start/2

2018-12-31 ISLLIGHT-5220 use isl light to resume a session

2018-12-31 ISLLIGHT-5220 use isl light to start a session

2018-05-25 ISLCONFPROXY-1732 add trash marker support

2018-05-29 ISLCONFPROXY-1732 update isldt_now function

2017-05-18 ISLALWAYSON-1221 fix upload size estimate

2017-11-17 ISLALWAYSON-1270 raise version on every status change

2017-11-17 ISLALWAYSON-1270 use_number_and_string_for_object_version

2019-06-26 ISLCONFPROXY-1978 fix error when no locale installed

2019-08-29 ISLCONFPROXY-2011 make configure 2fa responsive

2019-06-11 ISLCONFPROXY-1965 dt default config skip empty values

2019-06-11 ISLCONFPROXY-1965 is_valid use standard APIs

2019-10-22 ISLCONFPROXY-1732 fortrash

2019-10-22 ISLCONFPROXY-1732 multicolumn indexes

2019-08-01 ISLCONFPROXY-1997 refresh grid sreg on config change

2019-09-24 ISLCONFPROXY-2000 grid sreg DT tables

2019-11-07 ISLCONFPROXY-2000 grid sreg startdb

2019-10-08 ISLCONFPROXY-2000 grid sreg initdb after v2

2019-09-24 ISLCONFPROXY-2032 grid sreg per server get API

2019-02-11 ISLCONFPROXY-1878 register settings with GRID static registry v2

2019-10-09 ISLCONFPROXY-1878 icpgridsreg remove DESC

2019-10-09 ISLCONFPROXY-1878 remove empty keys exception

2019-02-14 ISLCONFPROXY-1881 cache grid static registry settings

2019-02-28 ISLCONFPROXY-1881 expand setting registration with groups and description v2

2019-03-21 ISLCONFPROXY-1881 escape like wildcards

2019-04-04 ISLCONFPROXY-1881 register show_unreleased_settings dev flag

2019-08-23 ISLCONFPROXY-2007 add ca_released tag support

2019-05-22 ISLCONFPROXY-1944 register webapi2 domain/admin/domain/setting/page/section/list/1

2019-06-06 ISLCONFPROXY-1944 add push_top_permission to permission calculation

2019-05-22 ISLCONFPROXY-1943 register webapi2 domain/admin/user/setting/page/section/list/1

2019-05-20 ISLCONFPROXY-1902 register webapi2 domain/admin/domain/setting/overview/data/1

2019-05-20 ISLCONFPROXY-1942 register webapi2 domain/admin/user/setting/overview/data/1

2019-05-22 ISLCONFPROXY-1946 register webapi2 domain/admin/domain/setting/list/1

2019-05-22 ISLCONFPROXY-1945 register webapi2 domain/admin/user/setting/list/1

2019-04-15 ISLCONFPROXY-1916 register webapi2 domain/admin/user/setting/update/1

2019-08-05 ISLCONFPROXY-1916 support setting object properties

2019-04-15 ISLCONFPROXY-1901 register webapi2 domain/admin/domain/setting/update/1

2019-04-26 ISLCONFPROXY-1901 register user_domain_admin_edit_settings permission

2019-06-11 ISLCONFPROXY-1953 remove spread syntax and other js fixes for IE

2019-03-12 ISLCONFPROXY-1891 enable setting management view

2019-09-10 ISLCONFPROXY-2020 release settings batch 1 to core admin

2017-05-24 ISLCONFPROXY-1454 call broken on rp channel

2019-11-07 ISLCONFPROXY-2055 http 403 critical

2019-05-29 ISLCONFPROXY-1925 crypto zip

2019-05-29 ISLCONFPROXY-1925 certdump core_login

2019-05-29 ISLCONFPROXY-1925 read maindir

2019-05-08 ISLCONFPROXY-1971 write info file

2019-05-02 ISLCONFPROXY-1971 use not valid before

2019-05-02 ISLCONFPROXY-1971 ssl cert checks

2019-05-02 ISLCONFPROXY-1971 use executor queue

2019-06-07 ISLCONFPROXY-1971 use certdump api expiry info

2019-11-20 ISLCONFPROXY-2048 RefreshSettingsAndGroups

2019-10-21 ISLCONFPROXY-2048 dt_notify setting_info

2019-10-04 ISLCONFPROXY-2035 add sections and subsections to conf

2019-12-05 ISLCONFPROXY-2035 include tooltip js in conf

2019-07-02 ISLCONFPROXY-1981 akv log db notify

2019-07-02 ISLCONFPROXY-1981 akv log dt notify

2019-07-03 ISLCONFPROXY-1981 remove threshold setting

2019-08-21 ISLCONFPROXY-2006 show ISL AlwaysOn computer history errors in modal

2019-11-22 ISLCONFPROXY-2064 sanitize web server internal error URLs

2019-11-07 ISLCONFPROXY-2056 change order of valid password rule check

2018-05-25 ISLCONFPROXY-1732 use trash marker

2018-06-06 ISLCONFPROXY-1732 child of undelete

2018-06-06 ISLCONFPROXY-1732 delete bulk file on gc

2018-06-08 ISLCONFPROXY-1732 delayed move trash to gc

2018-06-11 ISLCONFPROXY-1732 notify grid static reg change

2019-12-19 ISLCONFPROXY-1732 trash range query

2018-06-13 ISLCONFPROXY-1742 undelete in /conf

2018-06-13 ISLCONFPROXY-1742 undelete in /conf DNS

2018-06-13 ISLCONFPROXY-1742 undelete in /conf storage

2018-06-13 ISLLIGHT-5055 (un)delete in /conf

2018-06-14 ISLGROOP-990 undelete in /conf

2018-06-14 ISLPRONTO-1185 (un)delete in /conf

2018-06-15 ISLPRONTO-1185 delete chat session permission

2018-06-15 ISLPRONTO-1185 reversible content delete

2018-06-15 ISLPRONTO-1185 use delete chat session permission

2018-06-20 ISLPRONTO-1185 remove delete chat signal

2018-06-20 ISLPRONTO-1185 use db trigger for (un)delete

2019-11-20 ISLCONFPROXY-2062 gui fixes

2019-12-04 ISLCONFPROXY-2063 redesign forced and disabled settings

2019-12-04 ISLCONFPROXY-2074 disable email input for password reset

2019-12-05 ISLCONFPROXY-2077 trim and ignore empty setting filter string

2019-12-05 ISLCONFPROXY-2078 use date object to set selected date for datepicker

2017-03-03 ISLCONFPROXY-1249 js error handler

2019-10-03 ISLALWAYSON-1492 set default os_version

2019-10-14 ISLALWAYSON-1490 port register_computer to hag

2019-10-16 ISLLIGHT-5374 improve mac reading from client data

2019-12-13 ISLCONFPROXY-2088 file storage checks

2019-12-09 ISLCONFPROXY-1909 allow webapp root handler

2019-10-17 ISLALWAYSON-1498 add action location

2019-11-29 ISLCONFPROXY-2070 filter out exception info

2019-12-12 ISLCONFPROXY-2070 exception for call_origin

2019-12-12 ISLCONFPROXY-2070 exception for parse error

2019-12-12 ISLCONFPROXY-2070 use exception instead of info

2020-01-07 ISLPRONTO-1314 debug in-memory panel

2020-01-08 ISLPRONTO-1314 xmlthash2 hexcode

2019-12-12 ISLCONFPROXY-2076 do not report internal error for remote proxy channels

2020-01-27 ISLALWAYSON-1516 add escape to bulk action messages

2020-01-27 ISLALWAYSON-1516 disable buttons while performing bulk share and unshare

2020-01-27 ISLALWAYSON-1516 do not update In Group field in change admin

2020-01-27 ISLALWAYSON-1516 store all selected computer data while performing bulk action

2020-02-03 ISLCONFPROXY-2088 core scopes init

2020-01-23 ISLCONFPROXY-2118 send with Message-ID

2020-01-23 ISLCONFPROXY-2118 set Message-ID

2020-01-23 ISLCONFPROXY-2123 setting for X-XSS-Protection

2019-11-29 ISLCONFPROXY-2071 dt orderby in vfs compat

2020-02-05 ISLALWAYSON-1500 use d_id in computer connection search

2020-02-02 ISLALWAYSON-1500 replace d_id search index

2020-02-05 ISLALWAYSON-1500 add use_d_id_query setting

2020-01-17 ISLCONFPROXY-2109 restart all moduleapps on ICP translations change

2020-01-17 ISLCONFPROXY-2110 export languages.json

2019-12-23 ISLPRONTO-1313 fake ios ua

2019-12-23 ISLPRONTO-1313 remove english text

2019-12-23 ISLPRONTO-1313 use version field for safari

2020-01-17 ISLCONFPROXY-2108 remove duplicate remote proxy info server_id

2020-02-02 ISLALWAYSON-1528 expose aon connections optimize

2020-02-02 ISLALWAYSON-1528 register connections optimize webapi

2019-12-24 ISLCONFPROXY-2096 add host to web request in public web watchdog

2020-01-16 ISLCONFPROXY-2103 return static data only

2020-01-16 ISLPRONTO-1315 reconnect.js serve api url

2020-01-28 ISLALWAYSON-1518 notify computer count change on migrate

2019-12-04 ISLCONFPROXY-2075 remove password change support from user update webapi

2019-12-16 ISLCONFPROXY-2086 left align setting values

2020-01-20 ISLCONFPROXY-2113 always load static password settings

2019-12-05 ISLCONFPROXY-2068 register gui features statically from light module

2019-12-06 ISLCONFPROXY-2068 setting encapsulation support

2019-12-12 ISLCONFPROXY-2068 remove gui features page in conf

2020-01-21 ISLCONFPROXY-2068 add encapsulation support to conf

2019-11-11 ISLCONFPROXY-2057 release settings batch 2 to core admin

2020-01-24 ISLCONFPROXY-2122 warning when revoking domain admin from self

2019-10-30 ISLCONFPROXY-2052 expose twilio error code to user

2019-09-13 ISLCONFPROXY-2026 remove reference to other modules

2019-10-23 ISLCONFPROXY-2049 dt functions in sql

2019-10-24 ISLCONFPROXY-2049 coalesce instead of case when

2019-10-24 ISLCONFPROXY-2049 inline isldt_xb

2019-10-25 ISLCONFPROXY-2049 inline type to string

2019-10-25 ISLCONFPROXY-2049 optimized fortrash

2019-10-25 ISLCONFPROXY-2049 optimized trash

2019-10-29 ISLCONFPROXY-2049 run tests

2020-03-18 ISLLIGHT-5474 hefa lock not needed

2020-03-18 ISLLIGHT-5474 init aux mt executor

2020-03-18 ISLLIGHT-5474 move plugins to another executor

2020-03-18 ISLLIGHT-5474 move translations to another executor

2020-03-10 ISLCONFPROXY-2153 reject invalid file storage paths

2020-03-10 ISLCONFPROXY-2154 store timestamp in internal errors

2020-03-11 ISLCONFPROXY-2154 conf timestamp in errors

2020-02-20 ISLCONFPROXY-2133 replace Bootstrap v3.3.7 with Bootstrap v3.4.1

2020-02-21 ISLCONFPROXY-2133 bootstrap 3.4.1 for template v1

2020-02-21 ISLCONFPROXY-2133 do not serve bootstrap 3.3.7

2020-02-21 ISLCONFPROXY-2140 do not serve bootstrap 3.3.7 (backup)

2020-02-24 ISLCONFPROXY-2139 do not serve bootstrap 3.3.7 (core login)

2020-02-24 ISLCONFPROXY-2143 deprecate template 1 support in core admin

2019-12-03 ISLCONFPROXY-2069 login settings access checks

2019-12-05 ISLCONFPROXY-2069 encode login.html args

2019-12-05 ISLCONFPROXY-2069 handle external dialog access denied error

2019-12-05 ISLCONFPROXY-2069 handle loginsso access denied error

2020-02-07 ISLCONFPROXY-2128 add support for network share storage location

2020-04-02 ISLCONFPROXY-2170 remove bloat panel

2020-04-02 ISLCONFPROXY-2171 add activity panel

2020-04-03 ISLCONFPROXY-2174 remove old task HEFA_LOCK

2020-03-09 ISLCONFPROXY-2152 use display none instead of hidden class

2020-04-03 ISLCONFPROXY-2173 handle origin tags

2020-04-03 ISLLIGHT-5489 session join webapi timing

2019-11-19 ISLCONFPROXY-2061 consider only ca_released settings v2

2020-03-30 ISLLIGHT-5491 move login to another executor

2020-02-25 ISLCONFPROXY-1877 samesite=none cookies

2020-02-26 ISLCONFPROXY-1877 clear CPSSOID

2020-02-19 ISLLIGHT-5468 update jquery-ui to v1.12

2020-02-18 ISLALWAYSON-1539 update jquery-ui to v1.12

2020-02-19 ISLGROOP-1058 update jquery-ui to v1.12

2020-02-19 ISLCONFPROXY-2136 update jquery-ui to v1.12

2020-01-10 ISLCONFPROXY-2101 handle delete notify

2018-08-22 ISLCONFPROXY-1772 check for empty chat content in reports

ISL Conference Proxy - Core - Delete flags for ICP 4.4.2018 branch (FEATURE) ISLCONFPROXY-2914 More

Description
All flags from 4.4.2018 branch were deleted. These flags are now considered as enabled and can not be disabled by user anymore. Deleted flags:

2019-07-11 ISLCONFPROXY-1985 gc joined keys

2019-07-11 ISLCONFPROXY-1985 gc lists

2019-07-11 ISLCONFPROXY-1985 gc sets

2019-08-27 ISLCONFPROXY-2010 core login: core webutils include

2019-08-27 ISLCONFPROXY-2010 core webutils include

2019-08-27 ISLCONFPROXY-2010 login tz include

2019-08-27 ISLCONFPROXY-2010 reports: core webutils include

2019-08-27 ISLLIGHT-5370 core webutils include

2019-08-27 ISLALWAYSON-1484 core webutils include

2019-08-27 ISLPRONTO-1289 core webutils include

2020-04-14 ISLCONFPROXY-2190 undo url path rewrite for GRID RP

2020-04-14 ISLCONFPROXY-2190 url path rewrite cookie fix

2019-08-28 ISLCONFPROXY-2012 ISLCP_WEB_STATICPOOL

2019-08-28 ISLCONFPROXY-2012 use /staticpool

2019-08-28 ISLALWAYSON-1486 use /staticpool

2019-08-28 ISLGROOP-1047 use /staticpool

2019-08-28 ISLLIGHT-5373 use /staticpool

2019-08-28 ISLPRONTO-1296 use /staticpool

2019-09-02 ISLPRONTO-1296 /staticpool for /live/islpronto

2019-09-02 ISLPRONTO-1296 automatic /staticpool paths

2020-04-08 ISLCONFPROXY-2182 do not throw if bulk file already deleted

2020-04-09 ISLCONFPROXY-2179 remove directory listing of v1 file server

2020-04-09 ISLCONFPROXY-2185 skip missing bulk files on check

2020-02-20 ISLCONFPROXY-2141 LIB-1081 strict XML SAX parser in translation recorder

2020-05-12 ISLCONFPROXY-2216 use load off servers for /staticpool

2019-08-28 ISLCONFPROXY-2014 use /staticpool (core login)

2019-08-28 ISLCONFPROXY-2015 use /staticpool (backup)

2019-08-28 ISLCONFPROXY-2016 use /staticpool (core admin)

2019-08-28 ISLCONFPROXY-2018 use /staticpool (reports)

2020-04-17 ISLCONFPROXY-2192 data_domain and data_user scopes

2020-04-17 ISLCONFPROXY-2192 fetch data_domain and data_user scopes

2020-04-14 ISLCONFPROXY-2165 add data Domain and User ID to Audit log

2020-04-14 ISLCONFPROXY-2165 use template for Audit log data

2020-04-21 ISLCONFPROXY-2193 add data lifecycle for data user and domain references

2020-02-12 ISLCONFPROXY-2132 init audit log database

2020-02-11 ISLCONFPROXY-2131 use ICP time for audit timestamp

2019-12-20 ISLCONFPROXY-2094 order audit logs by timestamp by default

2020-04-21 ISLCONFPROXY-2198 return USER_ERROR on invalid query filters

2019-10-07 ISLCONFPROXY-2040 register webapi2 internal/audit/event/new/1

2020-03-02 ISLCONFPROXY-2039 register webapi2 domain/admin/audit/event/list/1

2020-04-17 ISLCONFPROXY-2194 use flat template in Audit GUI and extract columns from data

2019-10-08 ISLCONFPROXY-2036 enable audit log view

2019-10-10 ISLCONFPROXY-2042 extend setting_group with translation info

2019-10-10 ISLCONFPROXY-2042 set translation info batch 1

2019-10-08 ISLCONFPROXY-2041 translate setting titles and descriptions

2019-10-11 ISLCONFPROXY-2041 use group translation info

2020-02-18 ISLCONFPROXY-2134 support json translator string in setting desc

2019-10-16 ISLCONFPROXY-2045 add audit logs

2019-12-19 ISLCONFPROXY-2093 add audit logs for changes to users

2020-03-27 ISLCONFPROXY-2167 add cnid to webapi2 params

2020-03-27 ISLCONFPROXY-2167 expose cnid in ws webapi

2020-03-27 ISLCONFPROXY-2167 generate cnid in mux webapi

2020-03-28 ISLCONFPROXY-2208 dump excessive use of hefa_lock

2020-03-30 ISLLIGHT-5493 remove hefa lock from rpc stack

2020-02-20 ISLCONFPROXY-2142 LIB-1080 support recursive tr json structures

2020-04-14 ISLCONFPROXY-2188 update gmail file block list

2020-04-23 ISLCONFPROXY-2204 move push event to different executor

2020-04-23 ISLCONFPROXY-2204 simpler hefa locks in management functions

2020-03-27 ISLALWAYSON-1548 use cnid for connection id

2020-04-07 ISLCONFPROXY-2181 redesign tooltips so user can click link

2020-02-13 ISLCONFPROXY-2117 release setting batch 4 to core admin

2020-04-14 ISLCONFPROXY-2186 recheck missing file on bulk file download

2020-04-06 ISLCONFPROXY-2180 wstun server header

2020-02-18 ISLALWAYSON-1540 handle bulk actions menu overflow

2020-02-20 ISLALWAYSON-1541 disable Move to Group action if no groups

2020-02-25 ISLCONFPROXY-2126 limit domain admin permission grant

2020-06-03 ISLCONFPROXY-2239 local_state for gc

2020-05-28 ISLCONFPROXY-1985 split gc indexes

2020-05-08 ISLGROOP-1065 prevent content duplication on multiple email receivers

2020-05-14 ISLALWAYSON-1556 remove aon_min.js from file upload

2020-03-30 ISLCONFPROXY-2164 backup deprecate template version 1 support

2020-05-14 ISLCONFPROXY-2218 handle non flat data structure in Audit tab

2020-05-18 ISLCONFPROXY-2221 increase Core Admin tab size to full window

2020-05-07 ISLCONFPROXY-2214 handle failed and empty file migration

2020-04-28 ISLCONFPROXY-1741 API service for download bulk file v2

2020-06-02 ISLCONFPROXY-2237 make file upload page responsive

2020-05-18 ISLCONFPROXY-2223 keep result fut on stack

2020-05-25 ISLCONFPROXY-2228 prevent Audit dropdowns being cut

2020-05-29 ISLCONFPROXY-2233 check edge version

2020-01-20 ISLCONFPROXY-2114 execute 2fa bypass before checking method availability

2020-02-12 ISLPRONTO-1316 use send beacon instead of sync xmlhttprequest

2020-03-30 ISLGROOP-1059 update jHtmlArea to v0.8

2020-02-03 ISLALWAYSON-1521 show full list of failed computers on bulk action

2020-02-05 ISLALWAYSON-1524 update computer list on Change Admin action

2019-08-27 ISLALWAYSON-1483 handle empty users array in change admin

2020-03-20 ISLALWAYSON-1546 prevent duplicates and missing computers on clear

2018-06-19 ISLCONFPROXY-1747 restrict http compression

2020-04-05 ISLCONFPROXY-2175 grid public address template

2020-03-31 ISLLIGHT-5486 update jHtmlArea to v0.8

2020-05-29 ISLCONFPROXY-2234 handle no available servers when counting associated data

2020-06-05 ISLCONFPROXY-2243 handle and show associated data count errors

2020-06-08 ISLCONFPROXY-2245 lower severity of 404 in call handler

2020-05-21 ISLCONFPROXY-2225 serve action result as preview in webapi action events

2020-05-22 ISLCONFPROXY-2226 redirect webapi action events to starting server

2020-05-22 ISLCONFPROXY-2226 reuse action info if exists

2020-05-22 ISLCONFPROXY-2227 use action events_after

2020-06-11 ISLCONFPROXY-2248 bulk receive replication status

2020-06-11 ISLCONFPROXY-2248 bulk recheck replication status

2020-06-12 ISLCONFPROXY-2252 flush scope cache when custom changes

2020-06-18 ISLCONFPROXY-2257 userCustom

2020-04-17 ISLALWAYSON-1553 discard computers from old webapi2 request

2020-06-18 ISLCONFPROXY-2258 handler URL

ISL Conference Proxy - Core - HTTP frontend handle invalid client IP addresses (FEATURE) ISLCONFPROXY-2921 More

Description
HTTP frontend X-Forwarded-For and FastCGI frontend REMOTE_ADDR will be checked if it's a valid IP address. If not, following errors will be logged:

HTTP frontend request invalid X-Forwarded-For

FastCGI frontend request invalid REMOTE_ADDR

In case errors are logged, reverse proxy configuration should be fixed.

ISL Conference Proxy - Core - Report X509 certificate subject in expiry check (FEATURE) ISLCONFPROXY-2926 More

Description
"x509-subject" and "x509-issuer" keys were added to license or certificate expiry check json files (*_expiry_check_info.json) to help identify the certificates.

ISL Conference Proxy - Core - Remove navigation dropdown (FEATURE) ISLCONFPROXY-2939 More

Description
Primary navigation dropdown was removed and replaced with simple user details popup with logout option.

ISL Light - Module - Unify web product page titles with desktop (FEATURE) ISLCONFPROXY-2945 More

Description
Remote Support page was renamed to "Sessions" both on web page and in navigation, Remote Access was renamed to "Computers".

ISL Conference Proxy - Core - Detect ISL Light in MUX transport (FEATURE) ISLCONFPROXY-2946 More

Description
MUX transport handler will now use "Service-Address" and "Service" request fields besides "Connection-Service" in logs.

ISL Conference Proxy - Core - OpenSSL 1.1.1s (FEATURE) ISLCONFPROXY-2948 More

Description
OpenSSL was upgraded to 1.1.1s.

ISL AlwaysOn - Module - Add hag logs to aon rpc calls (FEATURE) ISLCONFPROXY-2954 More

Description
Logs were added to ISL AlwaysOn RPC handler.

[INTERNAL] ISL Conference Proxy - Core - Expose user permissions in web template (FEATURE) ISLCONFPROXY-2961 More

Description
User permissions are now exposed in XPP template.

ISL Conference Proxy - Core - Dump available webtoken info when webtoken is invalid in webapi (FEATURE) ISLCONFPROXY-2964 More

Description
In case webtoken is expired, but some more info can be obtained from webtoken, logs in ISL Conference Proxy will now include this additional info.

ISL Conference Proxy - Administration - Add ISL Pronto chat and client permission setting to administration module and export (FEATURE) ISLCONFPROXY-2969 More

Description
Following settings were released and can now be set by Domain Admins in Administration pages (/users/administration). Settings from "/conf" pages (Old name) were renamed (New name) and now use same layout (Page, Section, Subsection) as Administration settings.

Old Name: View other filter's public chats
New Name: Show public chats from any filter
New Desc: This setting affects the "Clients", "Users" and "Chat history" panel in ISL Pronto. When this setting is enabled, operator can see all public chats, regardless of which filter the chat belongs to. When this setting is disabled, the operator will only see public chats that match the operator's filter(s), and public chats that don't belong to any filter.
Page: ISL Pronto
Section: Operator
Subsection: Chat Filters

Old Name: Show clients not matching the supporter's filter
New Name: Show clients from any filter
New Desc: This setting affects the "Clients" panel in ISL Pronto. When this setting is enabled, the operator can see all the clients in the "Clients" panel, regardless of which filter the client belongs to. When this setting is disabled, the operator will only see clients that match the operator's filter(s), and clients that are not in any specific filter.
Page: ISL Pronto
Section: Operator
Subsection: Chat Filters

ISL Conference Proxy - Core - Prevent forgot password from changing admin and external account passwords (FEATURE) ISLCONFPROXY-2984 More

Description
Forgot password procedure will not allow to change admin and external account passwords anymore. Critical log line "forgot password feature not allowed for the account" will be logged and user error "User account with this account ID does not exist." will be returned in such cases.

ISL Conference Proxy - Core - Forgot password token invalidation and throttling (FEATURE) ISLCONFPROXY-2985 More

Description
The number of reset password emails is now limited by default to 5 per 30 minutes, controlled by the new setting in /conf -> Security -> "Maximum forgot password e-mails per expiry period". Each new reset password email invalidates the older ones.

ISL Conference Proxy - Core - Add reCaptcha to change password webapis (FEATURE) ISLCONFPROXY-2991 More

Description
Recaptcha was added to following webapis:

utils/password/forgot/users/list/1

utils/password/forgot/users/list/2

utils/password/forgot/change/1

ISL Conference Proxy - Core - Skip module license check if ICP is running in reduced functionality mode (FEATURE) ISLCONFPROXY-2997 More

Description
Skip module license check if ICP is running in reduced functionality mode.

ISL Conference Proxy - Module GeoIP - Update database to GeoLite2-City 2023-01-16T17:48:56Z (FEATURE) ISLCONFPROXY-3002 More

Description
Updated GeoIP to use the database GeoLite2-City 2023-01-16T17:48:56Z.

[INTERNAL] ISL Conference Proxy - Core - Use sequence for id in bulk file index (DEFECT) ISLCONFPROXY-2741 More

Description
ISL Conference Proxy will now use sequence for id in bulk file index.

ISL Light - Module - Send rpc response before sending files in bulk file download (DEFECT) ISLCONFPROXY-2783 More

Description
In previous versions bulk files are sometimes sent before rpc response during bulk file download in ISL Light session. This was now redesigned, and rpc response should now be sent before bulk file.

The defect was fixed.

ISL Conference Proxy - Core - Check for missing arguments in internal/ssl/managed/set/1 (DEFECT) ISLCONFPROXY-2837 More

Description
In previous versions internal/ssl/managed/set/1 did not check for missing argument and vague error was returned. This was now redesigned and error with nicer description (Received empty certificate or private key.) should be returned.

The defect was fixed.

ISL Conference Proxy - SSL - Do not proceed when HPKP is used (DEFECT) ISLCONFPROXY-2841 More

Description
In previous version it was possible to install SSL managed certificate even if HTTP Public-Key-Pins were set on ISL Conference Proxy. This was now redesigned and check for HPKP keys is made first, if keys are set, installation will not proceed and error will be shown.

The defect was fixed.

ISL Conference Proxy - SSL - Create global task for certificate issuance (DEFECT) ISLCONFPROXY-2842 More

Description
In previous versions when installing SSL managed certificates, operation would fail in cases where whole procedure would take more than 30 seconds. This was now redesigned and new task is started in the background, with a timeout of 5 minutes. Following new webapi methods were registered:

system/ssl/certificate/get/2

system/ssl/certificate/renew/2

system/ssl/certificate/task/cancel/1

system/ssl/certificate/task/status/1

The defect was fixed.

ISL Conference Proxy - Administration - Add ordering to user export (DEFECT) ISLCONFPROXY-2873 More

Description
In previous versions user export in Administration pages was not ordered. This was now redesigned and users should now be ordered by dbid.

The defect was fixed.

ISL Groop - Module - Meetings of classroom type are not included into statistics (DEFECT) ISLCONFPROXY-2876 More

Description
In previous versions ISL Groop sessions with Classroom type were not included into Reports statistics (total sessions, session duration, ...). This was now fixed and Classroom sessions are also considered. Classroom type of sessions is now also shown in tooltip on graph when at least one classroom session exists in current interval OR when Classroom type of meetings are enabled for current user. Graph for single day is now also rendered correctly, in previous versions there was an empty graph.

The defect was fixed.

ISL Conference Proxy - Core - Do not make double logs on port check failure and adjust severity (DEFECT) ISLCONFPROXY-2902 More

Description
In previous versions failed port checks created duplicated logs. This was now redesigned and logs will be created in separate log subsystem ([Sysmon] Port checker). Severity of logs is also escalated when port check is failing, starting from "warning" and escalating to "critical".

The defect was fixed.

ISL Light - Module - Register Time limit setting in new section (DEFECT) ISLCONFPROXY-2920 More

Description
In previous version, setting "Time limit (seconds)" was not registered. This was now redesigned and setting was registered in /conf -> ISL Light -> Session Management -> "Maximum session duration (time limit in seconds)". Here administrator can set the time limit (in seconds) after which an ISL Light session will be ended. If this setting is left empty (default), no time limit is set.

The defect was fixed.

ISL Conference Proxy - Administration - Add missing translation for "Remove User" and "Delete Group", fix translate call parenthesis (DEFECT) ISLCONFPROXY-2925 More

Description
In previous versions some strings in Administration module were not translated: "Remove User", "Remove Member", "Delete Group". This was now redesigned, translate calls were fixed and mentioned strings should now be correctly translated.

The defect was fixed.

ISL AlwaysOn - Module - Limit height of modal windows (DEFECT) ISLCONFPROXY-2927 More

Description
In previous versions, scrolling in modals when updating multiple computers was not possible. This was now redesigned and modals have now limited height. Windows are also re-positioned on window resize.

The defect was fixed.

ISL Light - Module - Don't override translations global in common.js (DEFECT) ISLCONFPROXY-2929 More

Description
In previous versions translations variable was overridden, which resulted in some untranslated strings. This was now redesigned and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core - Remove overlay avatar from custom ISL Light Desk & Client icons (DEFECT) ISLCONFPROXY-2933 More

Description
In previous versions, when using customization and applying custom image as "Icon for ISL Light Client" or "Icon for ISL Light Desk", overlay avatar was added to icon. This was now redesigned and avatar was removed.

The defect was fixed.

ISL Light - Module - Move address write to RPC (DEFECT) ISLCONFPROXY-2938 More

Description
In previous versions desk IP and client IP address in ISL Light session would sometimes get swapped. This was now redesigned, address write was moved to RPC and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core - Position settings tooltip relative to i/info icon (DEFECT) ISLCONFPROXY-2940 More

Description
In previous versions, tooltips in /conf, displaying settings descriptions on i (info) icon were not aligned correctly. This was now redesigned, position was set to be relative to i (info) icon and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Administration - Register missing translations (DEFECT) ISLCONFPROXY-2944 More

Description
In previous versions some of the translations in Administration module were not registered. This was now fixed and translations for following strings were registered and should now be correctly translated:

"Search settings..."

"Users" and "Export Users"

The defect was fixed.

ISL AlwaysOn - Module - Store computer address to connection when granting access (DEFECT) ISLCONFPROXY-2947 More

Description
In previous versions computer address was not stored when granting ISL AlwaysOn access, which resulted that search by IP did not work for such computers. This was now redesigned, computer address is set on connection and issue should not happen anymore. Additionally, simple GUI to fix broken connections without "comp_addr" was added to ISL AlwaysOn optimize connections web page (/conf -> Activity Monitor -> Sessions -> Active -> ISL AlwaysOn -> DB Optimize -> Connections)

The defect was fixed.

ISL Conference Proxy - Administration - Validation of schedule settings causes JS error (DEFECT) ISLCONFPROXY-2960 More

Description
In previous versions when changing settings in "ISL Light -> Session Management" or "ISL AlwaysOn -> Access Management" error occurred when saving. This was now redesigned, setting can now be saved and is properly validated.

The defect was fixed.

ISL Conference Proxy - Core - ISL Player add missing platform icons for linux and mac on the downloads page (DEFECT) ISLCONFPROXY-2962 More

Description
In previous versions MacOS and Linux icons were missing next to the ISL Player entry on the downloads page. This was now redesigned and icons were added.

The defect was fixed.

ISL Conference Proxy - Administration - Handle sql.ErrNoRows when resolving user names (DEFECT) ISLCONFPROXY-2968 More

Description
In previous versions when resolving username and username did not exist, internal error was reported. This was now redesigned and user error should be returned.

The defect was fixed.

ISL Conference Proxy - Core - Fix on_not_found program query handling in customizations (DEFECT) ISLCONFPROXY-2986 More

Description
In previous versions query handling in customizations could result that programs were not downloaded correctly and download hanged. Query handling was now redesigned and programs should be correctly downloaded.

The defect was fixed.

ISL Conference Proxy - SSL - Fix Object doesn't support property or method 'startsWith' in IE (DEFECT) ISLCONFPROXY-2987 More

Description
In previous version SSL module pages failed to display correctly in Internet Explorer browser, due to use of unsupported methods. This was now redesigned and issue should not happen anymore.

The defect was fixed.

Tags: isl conference, proxy 4.4