ISL Conference Proxy 4.4.2335.35 for Windows and Linux (2023-10-19)

On 19th of October the following was released:

ISL Conference Proxy 4.4.2335.35 for for Windows 64bit (Platform=win64, Revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17, req_os_version=0x06011db1-0x7fffffff)
ISL Conference Proxy 4.4.2335.35 for for Linux 64bit (Platform=linux64, Revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17, req_os_version=0x0206200000-0xffffffffff)

Important: ISL Conference Proxy module interface version was raised from 441 to 442. New modules will not load anymore on ISL Conference Proxy 4.4.2240.136 or older!

Important: SAML settings were redesigned and users are required to adjust them to prevent errors. Please see "Platform specific behaviour" in release notes of ISLCONFPROXY-3126 and adjust settings depending on your platform.

Modules

Administration 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Audit 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Authentication 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Backup 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Core Login 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
DNS 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
GeoIP 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Integrator 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
ISL AlwaysOn 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
ISL Groop 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
ISL Light 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
ISL Pronto 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Locale 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
NTP 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
PostgreSQL 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Reports 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
SSL 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
Storage 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)
System Monitor 4.4.2335.35 (revision=2548a2383d483b304d5986283558d463b6767deb, release_date=2023-10-17)

Translations

administration_20231017_20231017_110525.translation
backup_20231017_20231017_110525.translation
core_login_20231017_20231017_110525.translation
integrator_20231017_20231017_110525.translation
isl_alwayson_20231017_20231017_110525.translation
isl_conference_proxy_20231017_20231017_110525.translation
isl_groop_20231017_20231017_110525.translation
isl_light_20231017_20231017_110525.translation
isl_pronto_20231017_20231017_110525.translation
reports_20231017_20231017_110525.translation
ssl_20231017_20231017_110525.translation

Translations (newer translations, released on 2023-11-09)

administration_20231108_20231108_111545.translation
backup_20231108_20231108_111545.translation
core_login_20231108_20231108_111545.translation
integrator_20231108_20231108_111545.translation
isl_alwayson_20231108_20231108_111545.translation
isl_conference_proxy_20231108_20231108_111545.translation
isl_groop_20231108_20231108_111545.translation
isl_light_20231108_20231108_111545.translation
isl_pronto_20231108_20231108_111545.translation
reports_20231108_20231108_111545.translation
ssl_20231108_20231108_111545.translation

Update availability

All updates have release date set to 2023-10-17. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License

Improvements

ISL Conference Proxy - Core - Upgrade OpenSSL to 1.1.1w (SECURITY) [ISLCONFPROXY-3134] More

Description

OpenSSL was updated to 1.1.1w.

ISL Conference Proxy - Core - Add extra_check_user when calling session/query/2 webapi for ISL Light sessions (FEATURE) [ISLCONFPROXY-1818] More

Description

Join page will now add extra_check_user when calling session/query/2 for ISL Light module. This results in additional cmd line parameter in link for line for ISL Light Client: "--check-user true" resulting user has to manually click "Join" to establish a session (session does not start automatically anymore).

ISL Light - Module - Parse simple metrics data from client program (FEATURE) [ISLCONFPROXY-2721] More

Description

Performance messages from client will now be parsed and logged in log subsystem "[ISL Light] Performance messages from client".

ISL Conference Proxy - Core - Feedback when admin account attempts to login to user pages (FEATURE) [ISLCONFPROXY-2915] More

Description

In previous versions, when user with admin rights tried to login as regular user, he was shown general "Incorrect username or password" error message. This was redesigned and admin user will now be shown more specific error message: "This user is only able to access ISL Conference Proxy administration, because it's enabled as an Administrator account."

ISL Pronto - Module - Decrease log severity of 404 on events handler (FEATURE) [ISLCONFPROXY-2922] More

Description

Log severity was reduced from "critical" to "notice" when responding with 404 from the events handler.

ISL Conference Proxy - Core - Limit number of started ISL AlwaysOn actions (FEATURE) [ISLCONFPROXY-2957] More

Description

Starting ISL AlwaysOn actions is now limited to 20 actions in 10s by default.

ISL Conference Proxy - Core - Add dictionary support to ISL Network Start (FEATURE) [ISLCONFPROXY-3031] More

Description

Support for dictionaries was added to ISL Network Start program. Dictionaries are then used to effectively compress query parameter.

ISL Conference Proxy - Core - Add support for extra file in launch and launchpkt (FEATURE) [ISLCONFPROXY-3033] More

Description

Support for extra file was added to launch. Extra file can be used to reduce size of unauthenticated blob. When extra file is used, UA blob only contains command to jump to extra file (has same name as main file but ends with ".extra"). Hashing algorithm in packet generator was upgraded from MD5 to SHA256.

ISL Conference Proxy - Core - TLS 1.2 v2 profile without CBC and with forward secrecy (FEATURE) [ISLCONFPROXY-3037] More

Description

"TLS 1.2 v2" was added to settings "Security > Default SSL profile" with the cipher suite: - 0x1302 0x1301 0x1303 0xc02c 0xc02b 0xcca9 0xc030 0xc02f 0xcca8

v2 removes the following ciphers from "TLS 1.2" cipher suite:

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

TLS_RSA_WITH_AES_256_CBC_SHA256

TLS_RSA_WITH_AES_128_CBC_SHA256

TLS_RSA_WITH_AES_256_GCM_SHA384

TLS_RSA_WITH_AES_128_GCM_SHA256

Note: It is suggested to use ECDSA key instead of RSA when "TLS 1.2 v2" is selected to stay compatible with IE 11 on Windows 7 and Windows 8.

ISL Conference Proxy - Core - Reduce webtoken size for start new session link (FEATURE) [ISLCONFPROXY-3052] More

Description

Webtokens no longer contain/use "detected_time_zone" field. It was replaced with "time_zone_enum" field that instead of full timezone string stores enum of this timezone. Webtokens used in ISL Light start new session and ISL Groop join session link no longer contain "post_token" field. Together with removal of "detected_time_zone" and "time_zone_enum" this reduces size of webtokens.

ISL Conference Proxy - Core - Compress modules with LZMA2 (FEATURE) [ISLCONFPROXY-3055] More

Description

ICP modules are now compressed with LZMA2. Module interface was raised to 442, new modules can only be loaded on new ISL Conference Proxy.

ISL Conference Proxy - Core - Implement ICE registry, APIs and Cloudflare TURN support (FEATURE) [ISLCONFPROXY-3086] More

Description

ISL Conference Proxy now supports STURN/TURN local registry and API functions. This functionality is used by ISL Light module to return STUN/TURN server addresses via RPC calls. New settings are available in /conf -> Configuration -> ICE Configuration.

Set "List of ICE servers for RPC" to define the list of ICE (Interactive Connectivity Establishment) servers used by ISL Light RPC to establish direct connections. You can list explicit TURN servers, define the registered TURN servers by using {{turn_servers}} and/or define Cloudflare's RTC servers by using {{cloudflare}}. Each item in list is url with protocol stun or turn and following valid attributes:

username&password: uses simple authentication specified by username and password

secret: third party authentication as defined in rfc7635

turn_servers

cloudflare

If item specified is "{{turn_servers}}", the list is appended with known turn servers from registry. The servers in registry will return authentication parameters from rfc7635. If "{{cloudflare}}" is used, than Cloudflare settings must also be valid.

For example:
stun://some.nonexistant.com:19302, turn://some.nonexistant.com:19303, turn_servers, cloudflare
It is suggested to use only two stun/turn items. More items listed in this setting can increase connection times.

[INTERNAL] ISL Conference Proxy - Core - Add support for .ase and .less allowed staticresource file extensions in sdk (FEATURE) [ISLCONFPROXY-3091] More

Description

Support for .ase and .less file extensions was added to allowed staticresource file extensions.

ISL Light - Module - Implement ICE RPC handler (FEATURE) [ISLCONFPROXY-3092] More

Description

RPC call was added to ISL Light module that returns the list of ICE servers supported by ISL Conference Proxy. Additional RPC call returns the settings used to to calculate the quality of ICE connection when deciding on which connection to use in ISL Light session.

ISL Conference Proxy - Core, Core Login - Per-domain SSO/SAML settings and IdP metadata URL support (FEATURE) [ISLCONFPROXY-3096] More

Description

Per-domain SSO/SAML settings are now supported, thus enabling SAML to be configured just for some domains and not the entire server/GRID. New settings:

"Open URL after logout" (previously server, now per-user)

"Single sign-on user to domain cache max" (new server-wide, short term cache with a default 1000 entries)

"Enable single sign-on SAML" (previously server, now per-domain)

"SAML configuration cache max" (new server-wide, cache with default 10000 entries, affects medium term cache for SP/IdP metadata and long term cache for SP/IdP certificate checker)

"SAML service provider PEM cert file" (previously server, now per-domain)

"SAML service provider PEM key file" (previously server, now per-domain)

"SAML service provider PEM key file passphrase" (previously server, now per-domain)

"SAML identity provider XML metadata URL" (new per-domain, automatically download IdP metadata when needed by login, higher priority than setting "SAML identity provider XML metadata file")

"SAML identity provider XML metadata URL expire in seconds" (new per-domain, medium term cache expiry with default 300, long term cache for certificate checker is hard-coded to 7*86400)

"SAML identity provider XML metadata file" (previously server, now per-domain)

"SAML sign authentication request method" (previously server, now per-domain)

"SAML authenticate on every login" (previously server, now per-domain)

"SAML identity provider initiated login" (previously server, now per-domain)

"SAML login settings rules ([[rule...], ...])" (previously server, now per-domain)

Domain specific service provider metadata XML is located on:
https://server/sso/saml/sp/domain/DOMAINNAME/metadata.xml
https://subdomain.server/sso/saml/sp/domain/DOMAINNAME/metadata.xml (in case Subdomain is configured in web administration and Default user domain is set)
DOMAINNAME is escaped using URL path escape, just using "~" instead of "%" as escape character (dom/x is escaped as dom~2Fx).

Domain specific "SAML login settings rules ([[rule...], ...])" should not include the rule ["key", "domain", "sso"], because the domain is already implied.

User and password dialog will detect that SAML should be used for a specific user and single sign-on web based login will be started (password may be left empty):
\\somedomain\validuser (if somedomain is configured for SAML, web SSO will be started; if user is logged in already with a different account, the existing login session will be logged out)
\\somedomain\. (if somedomain is configured for SAML, web SSO will be started)
example@somedomain.xyz (alternative form for \\somedomain\validuser if email is set correctly in the account, but it will only work if account already exists on ISL Conference Proxy)

ISL AlwaysOn - Module - Extend session/query/2 to handle Android query for ISL AlwaysOn (FEATURE) [ISLCONFPROXY-3106] More

Description

Webapi2 session/query/2 was extended to check if user agent is Android. In this case "startProgramURL" in response is an Android intent containing grant blob.

ISL Light - Module - Extend Light RPC get_session_info with visible name (FEATURE) [ISLCONFPROXY-3107] More

Description

Light RPC call "get_session_info" was extended with an additional parameter, controlling whether or not visible name of session creator should be returned.

ISL Conference Proxy - Core - Delete flags for ICP 4.4.2044 branch (FEATURE) [ISLCONFPROXY-3117] More

Description

All flags from 4.4.2044 branch were deleted. These flags are now considered as enabled and can not be disabled by user anymore. Deleted flags:

2020-05-28 ISLCONFPROXY-2232 reduce dt function cost

2020-05-28 ISLCONFPROXY-2232 remove multicolumn indexes

2020-09-01 ISLCONFPROXY-2295 Fix Join page download bubble in firefox and close span tags inside translate

2020-08-18 ISLCONFPROXY-2292 use IE9 supported regex constructor

2020-08-10 ISLCONFPROXY-2280 disable sanitizeHTML for objects

2020-06-17 ISLCONFPROXY-2253 extract template data from url on /users/start/ios

2017-04-20 ISLCONFPROXY-1418 remove /start/ios

2017-04-20 ISLCONFPROXY-1418 serve /users/start/ios

2020-08-20 ISLCONFPROXY-2306 prevent multiple clicks on create meeting button

2020-06-23 ISLCONFPROXY-2259 enable tr recoding for light not licensed

2020-09-02 ISLCONFPROXY-2309 mac osv 11.x

2020-09-02 ISLCONFPROXY-2310 skip invalid wol_group

2020-09-10 ISLCONFPROXY-2240 register islcp_core app

2020-05-26 ISLCONFPROXY-2229 register jwt webhook settings

2020-05-26 ISLCONFPROXY-2229 use jwt webhook

2020-06-16 ISLCONFPROXY-2247 call user create delete api

2020-06-16 ISLCONFPROXY-2247 register user create delete api

2020-09-02 ISLCONFPROXY-2308 email apos

2020-08-11 ISLCONFPROXY-2290 deprecate tv1 in core admin

2020-06-01 ISLCONFPROXY-2267 check all events

2020-06-05 ISLCONFPROXY-2267 queue action updates

2020-07-02 ISLCONFPROXY-2265 use hsrv and preview when querying actions

2020-06-24 ISLCONFPROXY-2262 normalize newlines in translate handler

2019-08-29 ISLCONFPROXY-2013 htmldl rejected decode

2020-09-24 ISLCONFPROXY-2325 grid_sync order by

2020-09-24 ISLCONFPROXY-2325 sync category delete trigger order

2020-09-24 ISLCONFPROXY-2325 sync category dt write reorder

2020-09-16 ISLCONFPROXY-2317 register internal/utils/send/http/object/changed/1

2020-09-16 ISLCONFPROXY-2317 trigger http events from core admin

2020-06-05 ISLCONFPROXY-2242 expose recording files conf pages

2018-02-27 ISLCONFPROXY-1647 dt replicator stats interval setting

2018-11-30 ISLCONFPROXY-1825 increase webapi client timeout to 30 in core_admin

2019-01-21 ISLCONFPROXY-1856 disable password set for external users

2019-01-21 ISLCONFPROXY-1856 register and use admin/domain/user/is/external/1 to mark external users

2019-01-16 ISLCONFPROXY-1708 register webapi2 method admin/domain/user/create/1

2019-01-16 ISLCONFPROXY-1709 register webapi2 method admin/domain/user/update/1

2020-09-30 ISLCONFPROXY-2331 use regex_valid_email in administration module

2020-09-29 ISLCONFPROXY-2322 send lang and use translated description with jwt integration

2020-10-19 ISLCONFPROXY-2337 release setting batch 5 to core admin

2020-08-31 ISLCONFPROXY-2305 mail template output txt

2020-08-31 ISLCONFPROXY-2305 mail template output txt (aon)

2020-08-31 ISLCONFPROXY-2305 mail template output txt (groop)

2020-08-31 ISLCONFPROXY-2305 mail template output txt (light)

2020-08-31 ISLCONFPROXY-2305 webchat / mail template output txt (pronto)

2020-09-11 ISLCONFPROXY-2313 do not show disabled program download

2020-10-01 ISLCONFPROXY-2333 use owner customization in ISL Groop download link

2019-07-17 ISLCONFPROXY-1988 http event LICENSE_LIMIT_HIT

2020-06-18 ISLCONFPROXY-2255 add single actions and delete option to registered users

2020-06-18 ISLCONFPROXY-2255 register webapi2 method islgroop/sessions/users/registered/delete/list/1

2020-04-02 ISLCONFPROXY-2172 neutral proc color

2020-04-02 ISLCONFPROXY-2172 no scaling for storage

2020-09-03 ISLCONFPROXY-2311 LIB-1134 xml attr apos

2020-09-03 ISLCONFPROXY-2311 html5 attrs

2020-09-03 ISLCONFPROXY-2311 html5 attrs (groop)

2020-10-12 ISLCONFPROXY-2339 handle broken group owner on computer migrate

2020-10-23 ISLCONFPROXY-2346 check platform when doing push upgrade from conf

2020-09-15 ISLCONFPROXY-2316 set notify owner when creating meeting

2020-09-11 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/get/single/2

2020-09-11 ISLCONFPROXY-2314 show survey to registered users without login

2020-09-14 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/users/extinfo/get/single/2

2020-09-14 ISLCONFPROXY-2314 register webapi2 method islgroop/sessions/users/extinfo/update/single/2

2020-09-14 ISLCONFPROXY-2315 do not use user name in survey link

2020-07-01 ISLCONFPROXY-2261 register webapi2 method islgroop/sessions/users/registered/get/single/1

2020-07-09 ISLCONFPROXY-2261 register webapi2 method islgroop/sessions/users/registered/update/list/2

2020-07-01 ISLCONFPROXY-2261 add option to edit registered users

2020-09-23 ISLCONFPROXY-2321 check mandatory fields for registered user

2020-06-23 ISLCONFPROXY-2260 simplify configuration inconsistency error message and add log line

2020-04-02 ISLCONFPROXY-2169 dt grid meta data fast lock

2020-04-02 ISLCONFPROXY-2169 remove locks from grid db handler

2020-08-14 ISLCONFPROXY-2236 fix isl light session info set handler

2020-11-11 ISLCONFPROXY-2361 query users by username and realname and email

2020-11-12 ISLCONFPROXY-2363 use full_match for email and password regexp

2020-11-05 ISLCONFPROXY-2355 dt sync write timing

2020-11-06 ISLCONFPROXY-2355 report DT notify storage offload errors

2020-11-09 ISLCONFPROXY-2357 dt sync replication timing

2020-11-12 ISLCONFPROXY-2362 separate GRID DT sync queue

2020-11-13 ISLCONFPROXY-2367 move disconnect_rpc to separate executor

2020-11-10 ISLCONFPROXY-2359 add error message and commit timestamp to Audit log

2020-11-10 ISLCONFPROXY-2359 register webapi2 internal/audit/event/commit/1

2020-11-10 ISLCONFPROXY-2359 use transaction like Audit logs

2020-11-17 ISLCONFPROXY-2351 use audit transaction events

2020-11-19 ISLCONFPROXY-2378 reload audit logs when tab is opened

2020-11-24 ISLCONFPROXY-2381 use onmouseenter and onmouseleave for conf tooltip

2020-03-13 ISLCONFPROXY-579 handle webtoken logoff grid

2020-03-13 ISLCONFPROXY-579 init webtoken logoff

2020-03-02 ISLCONFPROXY-2147 check creation time in webtoken

2020-03-02 ISLCONFPROXY-2147 creation time in webtoken setting

2020-03-02 ISLCONFPROXY-2147 dump token age in webapi

2020-03-02 ISLCONFPROXY-2147 store creation time to webtoken

2020-11-10 ISLPRONTO-1223 execute leave chat from client grid object

2020-10-23 ISLPRONTO-1223 check if client exists on other server before leaving chat

2020-10-30 ISLCONFPROXY-2353 use http client without Keep-Alive

2020-10-23 ISLCONFPROXY-2347 order by for max age

2020-10-23 ISLCONFPROXY-2347 deleted index for max age

2020-10-23 ISLCONFPROXY-2347 lt notnull query for max age

2020-10-23 ISLCONFPROXY-2347 lt/le notnull support

2020-11-16 ISLCONFPROXY-2369 set jwt integration error description as error in wa2 response

2020-11-10 ISLCONFPROXY-2360 save changes on enter in dialog

2020-11-27 ISLCONFPROXY-2386 mac osv 27.x

2020-12-02 ISLCONFPROXY-2390 add translation tags on registered user actions

2020-12-08 ISLCONFPROXY-2399 save and reload selected audit log columns

2020-12-11 ISLCONFPROXY-2405 ISL Light RPC packet timing

2020-12-11 ISLCONFPROXY-2405 reduce ISL Light RPC reque

2020-09-24 ISLCONFPROXY-2326 right align dropdowns

2020-11-13 ISLCONFPROXY-2366 close file access before opening new

2020-12-03 ISLCONFPROXY-2394 LIB-1145 secure http header encoder

2020-12-03 ISLCONFPROXY-2394 pass dbhefa http encoder error to web transport

2020-12-03 ISLCONFPROXY-2394 report http encoder internal error

2020-12-02 ISLCONFPROXY-2391 do not reschedule same backup

2020-11-16 ISLCONFPROXY-2371 implement manual reconnect

2020-11-16 ISLCONFPROXY-2371 use grid sender

2020-03-13 ISLCONFPROXY-579 check user logoff

2020-09-25 ISLCONFPROXY-2327 invalidate webtoken on change password or email

2020-09-29 ISLCONFPROXY-2327 redirect to login page when reset password login fails

2020-10-14 ISLCONFPROXY-2343 invalidate webtoken on web logout

2020-11-12 ISLCONFPROXY-2364 clear invalid CPSESSID on web request

2020-11-18 ISLCONFPROXY-2376 register utils/logout/2 webapi

2020-12-14 ISLCONFPROXY-2408 allow empty user extra data when registering for meeting

2020-11-16 ISLCONFPROXY-2368 register webapi2 method domain/admin/computergroup/changeowner/1

2020-11-16 ISLCONFPROXY-2368 register webapi2 method domain/admin/computergroup/list/1

2020-11-16 ISLCONFPROXY-2368 use internal error on missing audit module

2020-12-17 ISLCONFPROXY-2414 LIB-1149 linux glibc in os_version

2020-12-22 ISLCONFPROXY-2414 LIB-1149 support linux glibc in os_version

2020-12-23 ISLCONFPROXY-2415 fix ios version display

2020-12-23 ISLCONFPROXY-2415 handle android min tgt

2020-12-08 ISLCONFPROXY-2400 send registered email by join UID

2020-12-10 ISLCONFPROXY-2403 use Filter Builder library for audit logs

2020-12-14 ISLCONFPROXY-2403 add timerange to Filter Builder

2020-12-16 ISLCONFPROXY-2411 register webapi2 domain/admin/audit/event/list/2

2020-12-22 ISLCONFPROXY-2413 show audit log transactions with error

2020-01-16 ISLCONFPROXY-2106 http host for cookie_domain

2020-11-16 ISLCONFPROXY-2370 enable computer group management view

2020-11-26 ISLCONFPROXY-2370 add client filter support to list table

2020-03-20 ISLCONFPROXY-2156 register webapi2 system/groups/optimize/1

2020-03-24 ISLCONFPROXY-2162 expose groups optimize

2020-12-14 ISLCONFPROXY-2406 filter out normal chars from special chars

2020-12-14 ISLCONFPROXY-2406 invert passwords blacklist permission

2020-12-14 ISLCONFPROXY-2406 numeric bounds for password requirement settings

2020-12-16 ISLCONFPROXY-2407 add supporter for numeric bound flags

2020-09-05 ISLCONFPROXY-2149 reduce number of DB queries in utils/group/query/1

2020-03-06 ISLCONFPROXY-2150 add Limit groups to domain setting

2020-03-06 ISLCONFPROXY-2150 limit utils/group/query webapi2 to domain

2020-03-09 ISLCONFPROXY-2151 add Maximum number of groups in domain setting

2020-03-09 ISLCONFPROXY-2151 add support to limit number of created groups

2020-08-07 ISLCONFPROXY-2288 login settings external groups

2020-08-12 ISLCONFPROXY-2288 allow info handle user groups (aon)

2020-08-12 ISLCONFPROXY-2288 groups type and domain index

2020-08-14 ISLCONFPROXY-2288 handle user groups

2020-08-14 ISLCONFPROXY-2288 return group type in webapi

2020-08-17 ISLCONFPROXY-2288 groups external_id column

2020-08-20 ISLCONFPROXY-2298 restrict type utils/groups/query/1-2

2020-09-15 ISLCONFPROXY-2323 dont write owner

2020-09-15 ISLCONFPROXY-2323 implement group acl in privileges

2020-09-15 ISLCONFPROXY-2323 keep group acls in deprecated api

2020-09-15 ISLCONFPROXY-2323 limit resolve to user_groups

2020-09-15 ISLCONFPROXY-2323 refactor resolve user in group

2020-09-15 ISLCONFPROXY-2323 refactor resolve user in privileges

2020-09-15 ISLCONFPROXY-2323 register utils/group/info/2

2020-09-15 ISLCONFPROXY-2323 register utils/group/query/3

2020-09-15 ISLCONFPROXY-2323 register utils/group/security/3

2020-09-15 ISLCONFPROXY-2323 register utils/group/update/2

2020-09-15 ISLCONFPROXY-2323 register utils/groups/create/2

2020-09-15 ISLCONFPROXY-2323 return all groups in webapi query

2020-09-15 ISLCONFPROXY-2323 switch privileges api

2021-01-28 ISLCONFPROXY-2448 allow existing member

2021-01-28 ISLCONFPROXY-2448 allow existing privileges

2021-01-28 ISLCONFPROXY-2450 fix hag warning for owner

2019-01-16 ISLCONFPROXY-1711 register webapi2 method admin/domain/group/list/1

2019-01-16 ISLCONFPROXY-1712 register webapi2 method admin/domain/group/create/1

2021-02-03 ISLCONFPROXY-2452 respond with new public code when creating new user group

2019-01-16 ISLCONFPROXY-1713 register webapi2 method admin/domain/group/update/1

2019-01-16 ISLCONFPROXY-1714 register webapi2 method admin/domain/group/remove/1

2019-01-16 ISLCONFPROXY-1715 register webapi2 method admin/domain/user/list/group/membership/1

2019-01-16 ISLCONFPROXY-1762 enable group management view

2021-02-01 ISLCONFPROXY-2437 update user group management views

2021-01-28 ISLCONFPROXY-2439 release user_domain_admin_edit_groups setting to administration

2020-11-02 ISLCONFPROXY-2354 read audit data from ISL Light programs

2020-12-02 ISLCONFPROXY-2380 isllight File Manager gui features

2021-02-01 ISLCONFPROXY-2449 change external_group into user_group with external flag

2021-02-02 ISLCONFPROXY-2451 read and use external column in group dt

2020-10-02 ISLCONFPROXY-2335 add user groups to share

2020-10-06 ISLCONFPROXY-2335 return allowed group type

2020-11-26 ISLCONFPROXY-2358 unify computer and computer group share dialogs

2020-10-05 ISLCONFPROXY-2332 register integrator_jwt_api_access_public_rsa_keys

2020-10-05 ISLCONFPROXY-2332 register webapi2 integrator/user/create/1

2020-10-12 ISLCONFPROXY-2332 register webapi2 integrator/domain/create/1

2020-10-12 ISLCONFPROXY-2332 register webapi2 integrator/domain/set/concurrent/limit/1

2020-10-26 ISLCONFPROXY-2348 register integrator lb service

2020-10-26 ISLCONFPROXY-2348 register integrator/lic/user/custom/get/1

2021-02-10 ISLCONFPROXY-2426 adjust severity for user errors in computer groups webapis

2021-02-11 ISLCONFPROXY-2465 allow vertical overflow in modals

2021-01-21 ISLCONFPROXY-2430 add new computer group owner search

2021-01-28 ISLCONFPROXY-2445 support lowercase order by

2021-02-12 ISLCONFPROXY-2467 use correct no results template

2021-03-02 ISLCONFPROXY-2443 order groups by name lowercase

2021-02-05 ISLCONFPROXY-2455 distinguish templates for filters

2021-02-01 ISLCONFPROXY-2446 register webapi2 method domain/admin/computergroup/list/2

2021-02-02 ISLCONFPROXY-2446 show invalid group members error

2020-10-21 ISLCONFPROXY-2336 register internal/utils/password/forgot/custom/1

2020-10-26 ISLCONFPROXY-2336 register integrator/utils/password/forgot/custom/1

2021-01-26 ISLCONFPROXY-2441 expose started from module to http events

2018-12-04 ISLCONFPROXY-1827 device name

2019-08-05 ISLALWAYSON-1482 add support for non saving options

2019-09-18 ISLCONFPROXY-2029 remove / from static_core_path_min_430

2020-11-27 ISLCONFPROXY-2385 use decode_email func with support for display name for from addresses

2021-02-22 ISLCONFPROXY-2473 allow sharing by default

2021-02-22 ISLCONFPROXY-2473 dont use spolicy

2020-12-07 ISLCONFPROXY-2398 strict error checking in relaxng mail check

2017-02-16 ISLCONFPROXY-1279 prevent webapi2 call registration

2018-11-13 ISLCONFPROXY-1814 domain redirect

2018-11-13 ISLCONFPROXY-1814 domain redirect setting

2021-02-24 ISLCONFPROXY-2474 allow all domain user groups

2021-02-24 ISLCONFPROXY-2474 register user_list_user_groups_domain permission

2021-02-12 ISLCONFPROXY-2471 backup restore SetDir instead of tar -C

2021-02-12 ISLCONFPROXY-2471 confproxy_proc innosetup main dir

2021-02-10 ISLCONFPROXY-2462 wrap long text in computer popup

2021-02-09 ISLCONFPROXY-2461 ignore empty packets

2021-01-05 ISLCONFPROXY-2420 set errors in internal/utils/password/forgot/custom/1

2021-01-05 ISLCONFPROXY-2420 pass lang to internal/utils/password/forgot/custom/1

2019-08-26 ISLCONFPROXY-2009 replace escape

2019-08-26 ISLGROOP-1128 replace escape

2019-08-26 ISLALWAYSON-1623 replace escape

2020-12-01 ISLCONFPROXY-2388 devflags xsum GRID feature

2019-08-26 ISLCONFPROXY-2028 replace escape (reports)

2019-08-26 ISLPRONTO-1300 replace escape

2020-12-02 ISLCONFPROXY-2389 config.json remove std www

2020-12-14 ISLCONFPROXY-2409 remove www root meta files

2020-12-03 ISLCONFPROXY-2099 force_geoip in map_path_to_http_backend

2019-05-10 ISLCONFPROXY-1929 register internal/utils/public/url/get/1

2019-06-05 ISLCONFPROXY-1964 LIB-1028 http request myself ipv6

2021-03-09 ISLCONFPROXY-2487 allow domain user groups

2021-03-09 ISLCONFPROXY-2487 check group type in resolve

2021-03-09 ISLCONFPROXY-2487 ignore grant action errors

2021-01-28 ISLCONFPROXY-2432 email rng xslt v2

2021-03-17 ISLCONFPROXY-2494 prevent keep_allow_on_computer_groups

2020-07-09 ISLCONFPROXY-2271 add BOM and remove escaping from exported CSV

2020-12-02 ISLCONFPROXY-2392 LIB-1144 use EnumPageFiles

2020-08-10 ISLCONFPROXY-2289 translate fields without supplied translation

2019-08-26 ISLLIGHT-5375 replace and html escape

2021-03-19 ISLCONFPROXY-2497 pg notify table

ISL Conference Proxy - Core - Upgrade to Go 1.20.8 and latest Go packages (FEATURE) [ISLCONFPROXY-3121] More

Description

Go was upgraded to version 1.20.8. Go packages were updated to latest versions.

ISL Conference Proxy - Core Login - SAML new settings (FEATURE) [ISLCONFPROXY-3126] More

Description

New SAML settings are supported:

SAML request binding method: Automatic (HTTP-POST, HTTP-Redirect) - default; HTTP-POST; HTTP-Redirect

SAML response binding method: HTTP-POST - default; HTTP-Artifact

SAML logout from identity provider: Automatic (Yes if available) - default; Yes; No

SAML logout NameID attribute: $SubjectNameID - default

Changes in default behaviour:

when redirecting from ISL Conference Proxy login page to identity provider, the redirect will be done with HTTP POST instead of 303 redirect to avoid passing sensitive information through browser location bar
the behaviour can be adjusted with "SAML request binding method"

if identity provider supports single logout, it will be used instead of potentially configured "Open URL after logout"

the behaviour can be adjusted with "SAML logout from identity provider"

unlike Yes, Automatic mode will only log critical errors and not outright stop the login/logout process in case of errors to ease the upgrade process

["key", "user_profile::password", "0"] is not strictly necessary anymore in "External authenticator login settings rules" because "Change Password" button will be now blocked even without this setting

default username key in "External authenticator login settings rules" is set to $SubjectNameID
if identity provider sets Subject NameID correctly, the setting "External authenticator login settings rules" can be left completely empty in the per-domain SAML setup for a basic test

Platform specific behaviour:

Microsoft ADFS:

set "SAML logout NameID attribute" to the same value as username key: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn

set "SAML sign authentication request method" to RSA-SHA256

response binding method HTTP-Artifact is not supported yet

Azure AD:
remove "Open URL after logout"

ISL Light - Module - Add ice allowed to spolicy (FEATURE) [ISLCONFPROXY-3127] More

Description

When returning ICE settings to client, ISL Light will now also read software policy. Policy name is "light::ice::allowed".

ISL Conference Proxy - Administration - Use descriptive errors on lack of permissions (FEATURE) [ISLCONFPROXY-3131] More

Description

More descriptive error messages are now used on lack of permissions on several places:

login page and login webapi2 calls

Administration web page

[INTERNAL] ISL Conference Proxy - Core - Dev flag to set certificate checker recheck interval, flush recheck files (FEATURE) [ISLCONFPROXY-3136] More

Description

New features:

dev flag "License and certificate expiry check interval (seconds)", default 3700 (expiry warning emails will be resent quicker when preconditions change, but not more often)

recheck files are displayed in Certificates panel

Debug > "Flush certificate expiry info" to delete recheck files (expiry warning emails will be resent after delete if necessary)

ISL Conference Proxy - Core - LibXML 2.11.5 (FEATURE) [ISLCONFPROXY-3138] More

Description

LibXML was updated to version 2.11.5.

ISL Conference Proxy - Module GeoIP - Update database to GeoLite2-City 2023-10-10T09:42:47Z (FEATURE) [ISLCONFPROXY-3150] More

Description

Updated GeoIP to use the database GeoLite2-City 2023-10-10T09:42:47Z.

ISL Light - Module - Add extra_check_user handling in session/query/2 webapi (FEATURE) [ISLLIGHT-5190] More

Description

Extra_check_user handling was added in session/query/2 webapi. Please see also ISLCONFPROXY-1818.

ISL Pronto - Module - Add cmd line for extra step before connecting to ISL Light session (FEATURE) [ISLPRONTO-1255] More

Description

Extra_check_user handling was added in session/query/2 webapi. Please see also ISLCONFPROXY-1818.

ISL Pronto - Module - Convert pronto grid legacy logs to AKV and fix client grid obj destroy on domain expiry (DEFECT) [ISLCONFPROXY-2908] More

Description

Legacy logs in Pronto module were converted to AKV logs and are now logged under new "[ISL Pronto] Grid" log subsystem. Furthermore, client grid object destroy procedure was redesigned.

The defect was fixed.

ISL Light - Module - Fix JS error in invite operator modal when viewing revoked invite (DEFECT) [ISLCONFPROXY-3059] More

Description

In previous version when user tried to modify session invite and invite was already revoked or used, JS error was shown. This was redesigned, modal is closed and error message that invitation was already revoked or used is shown.

The defect was fixed.

ISL Conference Proxy - Core - Editing of user profile is not possible if not all permissions for editing account are granted (DEFECT) [ISLCONFPROXY-3113] More

Description

In previous version when updating profile in My profile and missing some of the permissions, user would get error even if the field (for which user does not have permission to edit) was not changed. This was redesigned, My profile page now has inputs disabled for fields/actions that are not allowed to be changed by current user. Individual fields are updated so specific disabled inputs no longer block change of allowed fields. Issue should not happen anymore.

The defect was fixed.

ISL AlwaysOn - Module - ShowMessage fails when sending add remote computer email (DEFECT) [ISLCONFPROXY-3128] More

Description

In previous version, when user opened "Set Unattended access" in Computers pages, entered email in "Add remote computer tab" and clicked "Send", error was shown. This was redesigned, green success message is shown, when email is correctly sent and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core - WebAPI2 errors leak raw internal exceptions (DEFECT) [ISLCONFPROXY-3129] More

Description

In previous version when WebAPI2 call would fail, it would sometimes expose internal error. This was redesigned and explicit string error should now be returned.

The defect was fixed.

ISL Conference Proxy - Core - Protect login form against leaking secrets in URL bar (DEFECT) [ISLCONFPROXY-3135] More

Description

In previous version in case of a bug (accidental submit), login form would show private data in browser's URL bar. This was now redesigned and issue should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core, Administration - Broken and missing translations, broken cancel button in modal (DEFECT) [ISLCONFPROXY-3139] More

Description

In previous versions some of the translations were broken, resulting in untranslated string. This was redesigned, strings "Start New Session", "New Password" and "Cancel" button in Administration module modals should now be correctly translated.

The defect was fixed.

Tags: windows linux, isl proxy