ISL Conference Proxy 4.4.2120.54 with modules for Windows and Linux (2021-09-28)

On 28th of September the following was released:

ISL Conference Proxy 4.4.2120.54 for for Windows 64bit (Platform=win64, Revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25, req_os_version=0x06011db1-0x7fffffff)
ISL Conference Proxy 4.4.2120.54 for for Linux 64bit (Platform=linux64, Revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25, req_os_version=0x0206200000-0xffffffffff)

Important: Minimum Windows version was raised from NT 6.1.0 to NT 6.1.7601. Windows 7 and Windows Server 2008 R2 will now require Service Pack 1 (SP1) to run ISL Conference Proxy!

Important: ISL Conference Proxy module interface version was raised from 440 to 441. New modules will not load anymore on ISL Conference Proxy 4.4.2044.79 or older!

Modules

Administration 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Audit 4.4.2120.54(revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Authentication 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Backup 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Core Login 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
DNS 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
GeoIP 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Integrator 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
ISL AlwaysOn 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
ISL Groop 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
ISL Light 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
ISL Pronto 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Locale 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
NTP 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
PostgreSQL 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Reports 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
Storage 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)
System Monitor 4.4.2120.54 (revision=d2bf982dedf094c9fe249b7853b9a721f9e6ec31, release_date=2021-09-25)

Translations

administration_20210924_20210924_115203.translation
backup_20210924_20210924_115203.translation
core_login_20210924_20210924_115203.translation
integrator_20210924_20210924_115203.translation
isl_alwayson_20210924_20210924_115203.translation
isl_conference_proxy_20210924_20210924_115203.translation
isl_groop_20210924_20210924_115203.translation
isl_light_20210924_20210924_115203.translation
isl_pronto_20210924_20210924_115203.translation
reports_20210924_20210924_115203.translation

Update availability

All updates, except translations, have release date set to 2021-09-25. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License

Improvements

ISL Light - Module - Correctly escape username and email in transfer session window (SECURITY) [ISLCONFPROXY-2493] More

Description
In previous versions username and email weren't properly escaped in ISL Light transfer session window. This was redesigned and data is properly escaped.

The defect was fixed.

ISL Conference Proxy - Core - Escape username in utils/login/* and utils/login/dialog/* responses (SECURITY) [ISLCONFPROXY-2582] More

Description
In previous versions WebAPI2 utils/login/* and utils/login/dialog/* response descriptions were not escaped correctly. This was redesigned and response descriptions are escaped correctly.

The defect was fixed.

ISL AlwaysOn - Module - Session join throttler (FEATURE) [ISLALWAYSON-1535] More

Description
Failed attempts to use a grant code are now throttled in ISL AlwaysOn. Please see also ISLCONFPROXY-2111.

ISL Conference Proxy - Core - pg_tool add restore to another server in GRID option (FEATURE) [ISLCONFPROXY-1489] More

Description
Option --grid-clone was added to pg_tool command when using dump_table and restore. Meta information after the latter command will now configure GRID servers not to recheck restored data as it will be assumed correct.

ISL Conference Proxy - Module DNS - Option to keep backward compat wildcard GRID entries in single address GRID setup (FEATURE) [ISLCONFPROXY-1654] More

Description
"Keep backward compatible load balancer wildcard records" option was added to single address GRID setting to allow easier migration from regular wildcard GRID setups. Old clients might still need wildcard addresses.

ISL Conference Proxy - Core, Module islonline.net - Create secure redirect cookie webapi (FEATURE) [ISLCONFPROXY-1815] More

Description
Added a new webapi2 method integrator/webtoken/secure_redirect/encode/1. This method creates secure redirect webtokens (e.g. Login with redirect). To use this method JWT key right "webtoken_secure_redirect_encode_1" is required.

[INTERNAL] ISL Conference Proxy - Core - Pass C++ static HTML/JS/CSS resources through Go flag preprocessor (FEATURE) [ISLCONFPROXY-2024] More

Description
C++ modules were improved to use Go flag preprocessor for .html, .css, .js, .txt, .xml, .xsl:

Core

ISL AlwaysOn

ISL Groop

ISL Light

ISL Pronto

Reports

Core web pages are now available in html folder, not embedded in binary anymore.

Dev flags were added affecting core and C++ modules:

"Web content source directory"

"Web content source directory (core only)"

"Web content don't keep in memory"

ISL Conference Proxy - Core - Session join throttler (FEATURE) [ISLCONFPROXY-2111] More

Description
Failed attempts to join a session with a code are now throttled. The new settings in Security:

Max failed attempts to join a session from IP address (default: 60)

Max failed attempts to join a session period in seconds (default: 60)

GRID-wide max failed attempts to join a session (default: yes)

ISL Conference Proxy - Core - Restrict program download arguments (FEATURE) [ISLCONFPROXY-2160] More

Description
ICP will now filter all program parameters in program web start URLs and MUX channels. By default, parameters that are used by modules, are added automatically to allow list. Three new settings were introduced:

Programs download unsafe arguments action: allow & log unknown parameters as warning by default, but can be increased to rejected (403 access denied)

Program download log unsafe argument values (insecure, only for debugging): unsafe arguments will be sanitized by default to prevent credentials leaking into logs, "No" by default

Programs download safe arguments (SCOPERX;LCWEBNAMERX;ARGRX;VALRX; ...): multiline allow list rules, for example to allow x=y for ISL Light and ISL Light Desk:
web;isllight(desk)?;x;y;

List of scopes:

web (used by web browser and ISL Network Start)

mux-netstart (used by ISL Network Start, ISL Light, ISL Player)

wa2-customization (used by mobile ISL Light)

islalwayson-mux-programs-start-2 (used by ISL AlwaysOn)

islgroop-mux-program-download (used by ISL Groop)

islpronto-mux-program-download (used by ISL Pronto)

web scope rules will also automatically match ISL Network Start's download in mux-netstart, so there is no need to duplicate rules for mux-netstart when allowing parameters in web start URLs.

ISL Conference Proxy - Core - Simpler grid clone restore (FEATURE) [ISLCONFPROXY-2161] More

Description
Button "Create GRID connection file" in "GRID:Create" will now add a server immediately in GRID. A message "Services not available: <id>" will appear in web administration for servers that have services disabled, this includes newly added servers as they have all services disabled. A new file "offline" in ISL Conference Proxy installation directory now prevents ISL Conference Proxy from opening ports on startup. Then file "offline" will be deleted and file "offline_ready" will appear. PostgreSQL will now be initialized, useful for running "pg_tool restore". When "offline_ready" is deleted, ISL Conference Proxy startup will finish and open ports.

ISL Conference Proxy - Core - Create internal webapi2 to validate and parse filters (FEATURE) [ISLCONFPROXY-2341] More

Description
Added a new webapi2 method integrator/utils/filter/validate/1. This method validates strings that define access filters. In case of an invalid filter this method can be used to show a warning to the user. On the contrary, when a valid filter is provided confirm with the user that the filter has been parsed successfully.

[INTERNAL] ISL Conference Proxy - Core - Count number of settings set for user and store it in DB (FEATURE) [ISLCONFPROXY-2417] More

Description
Two new columns have been added to "DT Raw Data > user" table:

setting_count: Contains total number of settings set for user.

setting_keys: Contains first 10 setting keys.

When a new user is created their setting_count is set to 0. Every setting change triggers a setting recount. This includes changes through /conf as well as through Administration module. For the latter a new webapi2 method had to be registered internal/signal/user/setting/update/1. This method is called on every setting update from administration. Only settings released to administration module are counted.

ISL Conference Proxy - Core - Only report HTTP 404 as critical for /users and /static handlers (FEATURE) [ISLCONFPROXY-2422] More

Description
Log severity for "HTTP Request Error" has been reduced from critical to error in the following cases:

HTTP Error code 404 "Page not found"

Outside of intranet

Referrer matches a domain served by ISL Conference Proxy

Unknown URL handler path

[INTERNAL] ISL Conference Proxy - Core - Export logs on local TCP port for testing (FEATURE) [ISLCONFPROXY-2423] More

Description
New setting "Moduleapp test log export env" has been added to "Flags:dev", which enables log export on local TCP port that is stored in moduleapp env var "ISLCP_TEST_LOG_EXPORT". Port requires valid runtime secret key. Feature is used for testing purposes only.

ISL Conference Proxy - Administration - Register and use "main user" setting (FEATURE) [ISLCONFPROXY-2425] More

Description
Added "Main User" setting. Main user's "enabled" setting is protected and can not be disabled using administration module (only by system administration). Additionally, main user's settings are protected and can not be changed by other domain admins. They can be changed by system administrator (using conf) or by the main user himself (using administration module). Also added fallback so main users always have all administration permissions granted.

[INTERNAL] ISL Conference Proxy - Core - Register wa2 method "internal/grid/reconnect/1" (FEATURE) [ISLCONFPROXY-2427] More

Description
Added new webapi2 method internal/grid/reconnect/1. This method can disable disconnected servers from GRID and disable default reconnect task or run reconnect task and servers should reconnect immediately after the task is run. WebAPI2 call is available if dev flag "test_webapis" is enabled.

ISL Conference Proxy - Core - Raise Windows min version from NT 6.1.0 to NT 6.1.7601 (FEATURE) [ISLCONFPROXY-2428] More

Description
Minimum Windows version was raised from NT 6.1.0 to NT 6.1.7601 (from os_version=0x06010000-0x7fffffff to os_version=0x06011db1-0x7fffffff). Windows 7 and Windows Server 2008 R2 will need to have service pack 1. ICP start-up log lines will now include RUNT_OSVERSION key.

ISL Conference Proxy - Administration - Respond with setting count and keys in domain/admin/user/list/2 (FEATURE) [ISLCONFPROXY-2431] More

Description
Added a new webapi2 method domain/admin/user/list/2. This method is used to return a list of users along with their setting_count and setting_keys.

ISL Conference Proxy - Administration - Add read-only tag (FEATURE) [ISLCONFPROXY-2453] More

Description
Added support for new tag "read-only". Settings with this tag are shown in GUI but are locked and can't be modified.

ISL Conference Proxy - Core - Release Administration settings: concurrent license usage and limit number of owned connections (FEATURE) [ISLCONFPROXY-2454] More

Description
Following settings were released and can now be set by Domain Admins in Administration pages (/users/administration). Settings from "/conf" pages (Old name) were renamed (New name) and now use same layout (Page, Section, Subsection) as Administration settings.
Old Name: Max concurrent usage (hard limit)
New Name: Max license usage (hard limit)
Comment: Setting serves as an upper bound limit for the "Max license usage" setting (see below).
Page: General
Section: Account
Subsection: License Usage

Old Name: Max concurrent usage (per user setting)
New Name: Max license usage
Comment: Setting limits the number of concurrent sessions the user can start. One session counts as one ISL light session or one AlwaysOn session or one ISL Groop meeting with up to 10 participants. If the user tries to start more sessions an error message is shown explaining he has reached his concurrent usage limit
Page: General
Section: Account
Subsection: License Usage

Old Name: Max number of ISL AlwaysOn user connections (hard limit)
New Name: Max number of owned connections (hard limit)
Comment: Setting serves as an upper bound limit for the "Max number of owned connections" setting (see below)
Page: ISL AlwaysOn
Section: ISL AlwaysOn
Subsection: License Usage

Old Name: Max number of ISL AlwaysOn user connections (per user setting)
New Name: Max number of owned connections
Comment: Setting limits the number of AlwaysOn computer connections the user can own. If the user tries to add more than the set number of computers an error message is shown explaining he has reached the maximum number of licensed connections. Computers that are shared with the user do not count towards limit.
Page: ISL AlwaysOn
Section: ISL AlwaysOn
Subsection: License Usage

ISL Conference Proxy - Administration - Add user/computer group details webapis (FEATURE) [ISLCONFPROXY-2457] More

Description
New webapis were added:

domain/admin/group/info/1: returns general information about group (computer or user group)

domain/admin/group/members/list/1: returns list of members of group with their permissions (for computer groups) that match specified filters

domain/admin/group/members/update/1: can be used to add new members or remove existing (update member by adding with new permission)

New permission was also added (for changing computer groups):

Create, edit and delete computer groups (domain admin only)

This setting grants access to the "Computer Groups" tab in the Administration Dashboard. There, the user can view a list of computer groups in their domain, create new groups, change their members and delete existing ones. If you disable this permission, the user will not have access to the "Computer Groups" tab. Please note that the user must be a domain admin to access the Administration Dashboard (see the "Domain Admin" setting).

New permission is also used to disable/enable "Change Owner" option in "Computer Groups" together with webapi domain/admin/computergroup/changeowner/1.

ISL Conference Proxy - Core, Module Storage - ICP /conf UI improvements (FEATURE) [ISLCONFPROXY-2463] More

Description
ISL Conference Proxy/conf UI improvements include:

"Web hits" page now uses longer and clearer texts for "Source server" and "Remote server" columns.

"Logs" page is organized with sections for each subsystem.

Manual mode in "Online update > Edit update list..." is supported in Safari.

"Storage Area" type chooser is fixed in Safari

On successful login after session expires CPSESSID_EXPIRED will no longer be present in the URL

ISL Conference Proxy - Core, Module Postgresql - Remove file / VFS backends from PostgreSQL installation panel (FEATURE) [ISLCONFPROXY-2468] More

Description
Option to revert PostgreSQL direct tables to VFS (Virtual File System) tables database or file database backend has been removed.

ISL Conference Proxy - Core - Start using static web versions v2100 (FEATURE) [ISLCONFPROXY-2470] More

Description
New version "v2100" web pages have been added which are initialised from v440.

ISL Conference Proxy - Administration - Various design fixes (FEATURE) [ISLCONFPROXY-2475] More

Description
Slight design improvements to Administration module dashboard.

ISL Conference Proxy - Core - Dump lb webapicalls in server_lb.xml (FEATURE) [ISLCONFPROXY-2483] More

Description
"Debug > Server LB XML" now shows webapi2 methods, their registered servers and load servers.

ISL Conference Proxy - Core - Do not delete computer group when no more members (FEATURE) [ISLCONFPROXY-2488] More

Description
Computer groups are no longer automatically deleted when last user is removed from the group. Empty groups will now be marked as such in Administration module, where Domain Admin can assign new Group Admin to manage the group.

ISL Conference Proxy - Core - Mark owner in webapi privileges (FEATURE) [ISLCONFPROXY-2490] More

Description
The following webapi2 methods have been added:

utils/group/info/3

utils/group/query/4

utils/group/security/4

utils/group/update/3

The methods have the same functionality as the previous versions, however, now they also include the owner of the group in their response. Owner is marked in "rights -> all" section of group details, with "owner: 1". New webapi is used to correctly show owners of computer groups on ISL AlwaysOn web pages.

ISL Conference Proxy - Module Integrator - System JWT keys editor web page + permission (FEATURE) [ISLCONFPROXY-2491] More

Description
Added dashboard to integrator module where specific users can view, create, update or delete jwt integrations. Additionally, added new permission "User can manage application integrators" ("User Management > Security > System Administration > Application Integrators") which grants access to the new dashboard ("/users/integrations/integrations.html").

ISL Conference Proxy - Core - Activity log for SSO logins (FEATURE) [ISLCONFPROXY-2509] More

Description
Activity log now contains SSO (Single Sign-On) login events. SSO access denied will trigger a webapi2 user error event and will be logged in core_user_login. A new field "LOGIN_USERINPUT_TXT" has been added to all login dialog logs in order to log usernames.

ISL Conference Proxy - Core - Update jQuery 1.12.4 > 3.6 (FEATURE) [ISLCONFPROXY-2511] More

Description
jQuery was updated to version 3.6.

ISL Conference Proxy - Core - Update Bootstrap v3 to v4.6 (FEATURE) [ISLCONFPROXY-2512] More

Description
Update Bootstrap version in main template and styles from v3 to v4.6

ISL Conference Proxy - Module Integrator - Register system/integrator/jwt/list/1 webapi2 (FEATURE) [ISLCONFPROXY-2518] More

Description
Added a new webapi2 method system/integrator/jwt/list/1. This method is used by integration dashboard to list existing integrations. User requires "User can manage application integrators " ("User Management > Security > System Administration > Application Integrators") permission to call webapi otherwise "Insufficient permissions" error is returned.

ISL Conference Proxy - Module Integrator - Register system/integrator/jwt/add/1 webapi2 (FEATURE) [ISLCONFPROXY-2519] More

Description
Added a new webapi2 method system/integrator/jwt/add/1. This method is used by integration dashboard to create new integrations. User requires "User can manage application integrators " ("User Management > Security > System Administration > Application Integrators") permission to call webapi otherwise "Insufficient permissions" error is returned.

ISL Conference Proxy - Module Integrator - Register system/integrator/jwt/update/1 webapi2 (FEATURE) [ISLCONFPROXY-2520] More

Description
Added a new webapi2 method system/integrator/jwt/update/1. This method is used by integration dashboard to update existing integrations. Only rights can be changed for existing integrations. User requires "User can manage application integrators " ("User Management > Security > System Administration > Application Integrators") permission to call webapi otherwise "Insufficient permissions" error is returned.

ISL Conference Proxy - Module Integrator - Register system/integrator/jwt/remove/1 webapi2 (FEATURE) [ISLCONFPROXY-2521] More

Description
Added a new webapi2 method system/integrator/jwt/remove/1. This method is used by integration dashboard to remove existing integrations. User requires "User can manage application integrators " ("User Management > Security > System Administration > Application Integrators") permission to call webapi otherwise "Insufficient permissions" error is returned.

ISL Conference Proxy - Module Integrator - Register and use authorized app table (FEATURE) [ISLCONFPROXY-2522] More

Description
Expanded test_webapi2.html so it's possible to make integrator or authorized app calls from it. Registered integrator_user_jwt_api_access_public_rsa_keys table ("DT Raw Data > integrator_user_jwt_api_access_public_rsa_keys") where authorized apps are stored. Currently the only way to authorize apps is via webapi2 method integrator/authorize/app/1. It serves as a bridge/cross-reference/association table between integrators and users. With an additional column for granted rights. A new setting has been added "Authorized app RSA key size" ("User Management > Security > System Administration > Application Integrators"). This setting defines the key size for the RSA key pair. When user authorizes an integration application (or an integrator via integrator/authorize/app/1) an RSA key pair is generated which serves a role similar to access tokens in OAuth.

[INTERNAL] ISL Conference Proxy - Integrator - Register integrator/authorize/app/jwt/1 webapi2 (FEATURE) [ISLCONFPROXY-2524] More

Description
Added new webapi2 method integrator/authorize/app/1. Webapi authorizes selected integrator on behalf of the user. It returns the private key from the RSA key pair generated during authorization.

ISL Conference Proxy - Module Integrator - Register integrator/user/login/1 webapi2 (FEATURE) [ISLCONFPROXY-2525] More

Description
Moved existing webapi2 method utils/webtoken/debug/1 from "utils" to "internal". Added a new internal webapi2 method internal/ua/throttle/flush/1. This method exposes existing functionality "Flush UA throttle" from conf. Added a new webapi2 method integrator/user/login/1. Integrators can use this method to obtain valid CPSESSIDs which can then be used to login users. Login is performed by making call to internal webapi internal/user/login/1.

The new right required to call this webapi is "user_login".

Secondly user has to authorize the integrator and grant it "read_session_id" app right. (This is done via integrator/authorize/app/1)

Args:

lang: Optionally override users last used lang with supplied one. Set to empty string to force empty value. Skip arg to used users last used>

lang_variant: Optionally override users last used lang variant with supplied one. Set to empty string to force empty value. Skip arg to used users last used>

time_zone: Optionally override users last used with supplied one. Set to empty string to force empty value. Skip arg to used users last used>

ISL Conference Proxy - Core - Add command file setting_lboff_ignore (FEATURE) [ISLCONFPROXY-2527] More

Description
New setting "Ignore disable services in load balanced" has been added to "Flags:dev". If enabled when initializing new GRID server with connection file, "setting_lboff" file will be ignored and load balancer will be kept enabled for new server.

ISL Conference Proxy - Reports - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2532] More

Description
Bootstrap was updated to version 4.6 in ISL Reports module pages.

ISL Light - Module - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2533] More

Description
Bootstrap was updated to version 4.6 in ISL Light module pages.

ISL AlwaysOn - Module - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2534] More

Description
Bootstrap was updated to version 4.6 in ISL AlwaysOn module pages.

ISL Pronto - Module - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2535] More

Description
Bootstrap was updated to version 4.6 in ISL Pronto module pages.

ISL Groop - Module - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2536] More

Description
Bootstrap was updated to version 4.6 in ISL Groop module pages.

ISL Conference Proxy - Module Administration - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2537] More

Description
Bootstrap was updated to version 4.6 in ISL Administration module pages.

ISL Conference Proxy - Administration - Add breadcrumbs (FEATURE) [ISLCONFPROXY-2546] More

Description
Breadcrumbs were added to Administration pages. They represent the path that the user has traversed from top level tabs and can be used to quickly navigate back to previous locations. Breadcrumbs also store URL arguments so they are restored when navigating back to already visited pages. On direct navigation to page that has shown breadcrumbs (navigating directly to user settings), the breadcrumbs will be partially restored, root tab is added ("Users", "User Groups", "Computer Groups").

ISL Conference Proxy - Core - Move bootstrap v4.6 updates from 440 to v2100 (FEATURE) [ISLCONFPROXY-2547] More

Description
Bootstrap was updated to version 4.6 and will be served with new static version v2100.

ISL Conference Proxy - Core - IP view support for internal/utils/grid/servers/get/1 (FEATURE) [ISLCONFPROXY-2548] More

Description
Updated the webapi2 method internal/utils/grid/servers/get/1 which now supports IP views:

return_address: Set to 1 to return address. ip_view or client_address must also be passed. client_address will be used if ip_view is not passed.

client_address: Used with service to get sorted load balanced list of servers. Also used by return_address.

ip_view: IP view for server address, use: -1 (GRID connection), 0 (public), 1 (intranet), 4 (IPv4), 6 (IPv6), or any other numeric IP view ID

ip_view_fallback: If client_address does not match an IP view, use fallbacks: 0 (public), 1 (auto intranet), 4 (IPv4), 6 (IPv6), 46 (auto IPv4/IPv6, default)

ISL Conference Proxy - Administration - Add user/computer group details page (FEATURE) [ISLCONFPROXY-2549] More

Description
New group details page was added, where basic group info is shown (name, type, owner). Name and owner can be changed.

User can navigate to this page from "User Groups" or "Computer Groups" table.

Page lists members of the group, users for user group or users and user groups for computer group. Members can be filtered and sorted. Members of group can be removed or their permission for computer group can be changed. Members from other domains can be removed or permission changed, invalid/broken members can be removed.

Members of the group can be edited in sidebar.

[INTERNAL] ISL Conference Proxy - Module SDK - icpdevmode web resource sync (FEATURE) [ISLCONFPROXY-2551] More

Description
icpdevmode web resource sync enables git repository web pages to be synced into extracted ICP modules. Sync is run on each module start.

ISL Conference Proxy - Core - Register utils/password/forgot/users/list/2 which will also return users full names (FEATURE) [ISLCONFPROXY-2552] More

Description
Added a new webapi2 method utils/password/forgot/users/list/2. This method returns all users along with their "Full name", "Account ID", "Display name" that match the given email.

ISL Conference Proxy - Module Integrator - Register internal/user/authenticate/throttle/1 and internal/user/login/unthrottled/1 webapi2 (FEATURE) [ISLCONFPROXY-2554] More

Description
Added new webapi2 method internal/user/login/1. This method is used by integrator webapi integrator/user/login/1 to retrieve valid CPSESSIDs for users. It works exactly the same as the "Login as user" functionality from conf with the added option of overriding users last used lang, lang variant and time zone.

Some limitations:

It is NOT possible to obtain CPSESSIDs for admin/conf user.

It is NOT possible to obtain CPSESSIDs for disabled user.

User setting must_change_password does not prevent login.

User setting authenticate_allow_missing_2fa does not prevent login.

Supported args:

user_id: DBID of user.

lang: Optionally override users last used lang with supplied one. Set to empy string to force empty value. Skip arg to used users last used val.

lang_variant: Optionally override users last used lang variant with supplied one. Set to empy string to force empty value. Skip arg to used users last used val.

time_zone: Optionally override users last used with supplied one. Set to empy string to force empty value. Skip arg to used users last used val.

Added setting "Max failed login attempts from an application integrator's IP address" ("User Management > Security > System Administration > Application Integrators") (default: 120 which is interpreted as 2 per second when using default 60 second interval) which controls address throttling in internal/user/authenticate/throttle/1 when in integrator address mode.

ISL Conference Proxy - Core Login - Bootstrap update to 4.6 and fix mobile dropdown icon, join page session detail alignment and add glyphicons font (FEATURE) [ISLCONFPROXY-2555] More

Description
Bootstrap was updated to version 4.6 in ISL Core Login module pages.

ISL Conference Proxy - Core - Raise module interface version to 441 (FEATURE) [ISLCONFPROXY-2557] More

Description
ISL Conference Proxy module interface version was raised from 440 to 441. Modules 4.4.2120 will not load anymore on 4.4.2044 or older.

ISL Conference Proxy - Core - Add counters for web ssl version (FEATURE) [ISLCONFPROXY-2562] More

Description
Access to https web pages and mux ssl channels is now recorded in counters and hag logs. The record consists of user's ssl version and potential errors on ssl handshake.

ISL Conference Proxy - Core - Add recaptcha to utils/password/forgot/1 (FEATURE) [ISLCONFPROXY-2564] More

Description
New setting was added "Additional reCAPTCHA protected webapis" where user can list webapis that he would like to protect with recaptcha. Recaptcha was added to "utils/password/forgot/1" webapi by default. Recaptcha check is implemented on "/users/main/forgotpassword.html" page and in Administration pages in Reset Password dialog.

[INTERNAL] ISL Conference Proxy - Core - Increase maximum .module file size (FEATURE) [ISLCONFPROXY-2565] More

Description
Maximum uncompressed size for .module files has now been increased to 0xfffffff (268435455) bytes, which had previously been 0x7ffffff (134217727) bytes.

ISL Conference Proxy - Core - Save only changed settings in /conf and add background color for changed settings (FEATURE) [ISLCONFPROXY-2568] More

Description
In previous versions when clicking "Save" button in /conf, all settings were saved, regardless if they were changed or not. This was now redesigned and only changes are saved. Additionally selected settings are now marked and their background color is changed to light blue. Secure settings such as "Database secret" were updated and now no longer have checkbox next to it as it had no impact.

ISL Conference Proxy - Core - Register utils/webtoken/info/2 and dump missing_2fa status (FEATURE) [ISLCONFPROXY-2570] More

Description
Added a new webapi2 method utils/webtoken/info/2. This method also returns field missing_2fa along with other webtoken data. The newly added field is "true" when user is required to have 2 Factor Authorization but does not have it configured properly.

ISL Conference Proxy - Administration - Use new table for Computer Groups tab (FEATURE) [ISLCONFPROXY-2572] More

Description
Computer groups tab was updated and now uses the new table library with support for ordering columns, resizing columns, hiding/showing columns.

Also checking for invalid/broken members was modified, and now "Group member is not valid." error is no longer marked on group when broken membership belongs to broken owner of this group.

[INTERNAL] ISL Conference Proxy - Module Backup, Module Core Login - Add flag preprocessor to static resources in Backup and Core Login (FEATURE) [ISLCONFPROXY-2581] More

Description
Flag preprocessor is now enabled for static web page resources (js & css) in Backup and Core Login module.

ISL Conference Proxy - Core - Report build time flags to web page resources and module SDK, show unreferenced flag tag overrides (FEATURE) [ISLCONFPROXY-2588] More

Description
Flag preprocessor now supports build time flags which are automatically passed to modules. "Debug > flags.json" now contains both regular and build time flags rendering flags_static.json unnecessary, hence it was removed. Flags without a corresponding registered flag will be visible in flag setting list, optionally ("Flags:dev" > "Show unreferenced flags") followed by "(unreferenced)" text. To view the full list of unreferenced flags head to "Debug > flags_unreferenced.txt". Init and build time flag mismatches are now correctly reported.

ISL Conference Proxy - Backup - Bootstrap update to 4.6 (FEATURE) [ISLCONFPROXY-2599] More

Description
Bootstrap was updated to version 4.6 in ISL Backup module pages.

ISL Conference Proxy - Core - Multiple references per flag (FEATURE) [ISLCONFPROXY-2601] More

Description
"Debug > Flags" internal flag export JSON format now supports multiple references per flag.

ISL Conference Proxy - Core - Add support for Turkish language in ISL Conference Proxy (FEATURE) [ISLCONFPROXY-669] More

Description
ISL Conference Proxy now accepts translated strings for tr (Turkish) language and includes them in generated translation files.

ISL Conference Proxy - Module GeoIP - Update database to 2021-09-20T22:57:44Z (FEATURE) [ISLCONFPROXY-2656] More

Description
Updated GeoIP to use the database GeoLite2-City 2021-09-20T22:57:44Z.

ISL Groop - Module - Session join throttler (FEATURE) [ISLGROOP-1057] More

Description
Failed attempts to join a session with a code are now throttled in ISL Groop. Please see also ISLCONFPROXY-2111.

ISL Groop - Module - Add an option to modify the invitation/notification email templates (FEATURE) [ISLGROOP-989] More

Description
New option to modify the invitation/notification email templates was added. New setting is accessible in /conf pages: ISL Groop -> Other -> Uncategorized -> "Invitation email template".

ISL Light - Module - Session join throttler (FEATURE) [ISLLIGHT-5467] More

Description
Failed attempts to join a session with a code are now throttled in ISL Light. Please see also ISLCONFPROXY-2111.

ISL Pronto - Module - ISL Light custom installation schema support (FEATURE) [ISLPRONTO-1075] More

Description
Setting ISL Light installation schema was added to ISL Pronto settings, which affects ISL Pronto application. If not set, the setting ISL Light installation schema, from default server or account customization is used.

ISL Pronto - Module - Add "Allow send file in chat" and "Allow receive file in chat" settings (FEATURE) [ISLPRONTO-1076] More

Description
Added two settings ("Allow send file in chat" and "Allow receive file in chat") which enable or disable file sending and receiving from ISL Pronto chat.

ISL Groop - Module - Fix broken translations in invitation/notification email templates (DEFECT) [ISLCONFPROXY-2342] More

Description
In previous versions ISL Groop invitation email template strings were not translated. This was redesigned and translations were added.

The defect was fixed.

ISL Pronto - Module - Refresh user_info pointer after applying patch (DEFECT) [ISLCONFPROXY-2401] More

Description
In previous versions Inpage chat would sometimes cause ISL Conference Proxy to crash. This was now redesigned and should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Administration - Hide/Remove "enabled" permission for domain scope (DEFECT) [ISLCONFPROXY-2444] More

Description
In previous versions setting enabled (Account enabled) was present in domain scope. This was redesigned and setting was removed from domain scope.

The defect was fixed.

ISL Conference Proxy - Core - Check scope for encapsulating settings (DEFECT) [ISLCONFPROXY-2472] More

Description
In previous versions encapsulated settings were added to response before checking the scope. This was redesigned and scope is checked before including encapsulated settings.

The defect was fixed.

ISL Light - Module - Execute bytes_task every 1s the first 30 times (DEFECT) [ISLCONFPROXY-2489] More

Description
In previous versions if session lasted less than 10 seconds, recorded data (bytes transferred and session duration) would be invalid. This was redesigned, task is executed every second first 30 times and data for sessions shorter than 10 seconds should now be correct.

The defect was fixed.

ISL Light - Module - Remove html tags in tooltip for transfer session and remove double escaping (DEFECT) [ISLCONFPROXY-2495] More

Description
In previous versions ISL Light transfer session tooltip included HTML tags. This was redesigned and HTML tags are no longer present in the tooltip. Other fixes include:

ISL Light transfer session window is no longer escaped twice.

The defect was fixed.

ISL Groop - Module - Entering valid title after empty title when creating Groop meeting won't proceed further (DEFECT) [ISLCONFPROXY-2500] More

Description
In previous versions in case of an error (empty title) when creating a meeting, create meeting button was disabled and did not work when title was entered. This was redesigned and create meeting button should be reenabled after error.

The defect was fixed.

ISL Light - Module - Optimize active session code reading (DEFECT) [ISLCONFPROXY-2502] More

Description
In previous versions ISL Conference Proxy would sometimes report error "invalid privilege data in db object during load". This was now redesigned, active session code reading was optimized and issue should not happen anymore.

The defect was fixed.

ISL AlwaysOn - Module - Bulk action dialog does not resize properly (DEFECT) [ISLCONFPROXY-2507] More

Description
In previous versions when resizing bulk share dialog in computer list, dialog did not resize correctly. After loading was done, text about loading computers was still shown. This was now redesigned, dialog should resize correctly and loading text should be hidden after loading is done.

The defect was fixed.

ISL Conference Proxy - ISL AlwaysOn, ISL Pronto - Allow slow file transfers (DEFECT) [ISLCONFPROXY-2510] More

Description
In previous versions file downloads in ISL AlwaysOn web interface or ISL Pronto chat failed if download took more than 20 minutes. This was redesigned and slower downloads are supported.

The defect was fixed.

ISL Conference Proxy - Administration - Missing translations (DEFECT) [ISLCONFPROXY-2514] More

Description
In previous versions of Administration Module some of create, update and delete user group strings were not translated. This was redesigned and translations were added.

The defect was fixed.

ISL AlwaysOn - Module - Handle user groups in shared with icon and update icons (DEFECT) [ISLCONFPROXY-2529] More

Description
In previous versions shared with icon was not shown on computers when only shared with user groups. This was redesigned and icon is shown if computer is shared only with user groups. Other fixes include:

Icons were updated to match the ones used in ISL Light desktop.

The defect was fixed.

ISL Always On - Module - Remove redundant calls to utils/groups/query and use latest version (DEFECT) [ISLCONFPROXY-2530] More

Description
In previous versions redundant webapi calls were made when sharing a computer. This was redesigned and cached computer groups are used when sharing a computer.

The defect was fixed.

ISL Conference Proxy - Administration - Computer Groups GUI fixes (DEFECT) [ISLCONFPROXY-2539] More

Description
In previous versions computer groups tab clarity was hindered. This was redesigned and changed to:

column "Computers" was renamed to "# Computers"

"Status" column now shows "Ok" status

"Owner" column is no longer clickable

The defect was fixed

ISL Conference Proxy - Core - DT change notify HTTP call failed (DEFECT) [ISLCONFPROXY-2553] More

Description
In previous versions on startup of ISL Conference Proxy error "DT change notify HTTP call failed" was logged. This was now redesigned and should not happen anymore.

The defect was fixed.

ISL Conference Proxy - Core - Hide download bubble on Edge (DEFECT) [ISLCONFPROXY-2559] More

Description
In previous versions download bubble was shown on browser Edge. This was redesigned and download bubble is not longer shown on browser Edge.

The defect was fixed.

ISL Conference Proxy - ISL Pronto, Core Login - Update user agent parser so it correctly detects new Edge (DEFECT) [ISLCONFPROXY-2567] More

Description
In previous versions Edge browser would be detected as Chrome and wrongly displayed in Login devices pages. This was redesigned and Edge browser is detected correctly.

The defect was fixed.

[INTERNAL] ISL Conference Proxy - Core - Allow module flags.txt to override ICPs flags (DEFECT) [ISLCONFPROXY-2573] More

Description
In previous versions modules couldn't override flags that were already tagged by ICP. This was redesigned and modules can override ICP flags.

The defect was fixed.

ISL Always On - Module - Add missing translations for computer group sharing (DEFECT) [ISLCONFPROXY-2579] More

Description
Missing translations for computer group sharing were added: "Edit"

The defect was fixed.

ISL Groop - Module - Fix alignment in Survey for title and image blocks when aligned right and reset alignment for each subsequent block (DEFECT) [ISLCONFPROXY-2586] More

Description
In previous versions alignment of title and image block in Groop survey editor did not work correctly. This was now redesigned and elements should be correctly aligned.

The defect was fixed.

ISL Groop - Module - Red boxes remain after moving registration/survey elements (DEFECT) [ISLCONFPROXY-2587] More

Description
In previous versions when editing layout of meeting survey or registration form placeholders sometimes remained. This was redesigned and placeholders when dragging elements are now removed.

The defect was fixed.

ISL Conference Proxy - Administration - Read server ID and check local grid_enabled setting (DEFECT) [ISLCONFPROXY-2591] More

Description
In previous versions it was assumed that server ID is -1 if grid is not enabled, so no settings were found and displayed in Administration module pages when ID was different. This was redesigned and correct server ID is used if grid is not enabled.

The defect was fixed.

ISL Conference Proxy - Administration - Report raw before setting value to audit log (DEFECT) [ISLCONFPROXY-2594] More

Description
In previous versions Administration module reported calculated settings values. This was redesigned and raw DB values are reported.

The defect was fixed.

ISL Conference Proxy - Administration - Fail calls on configuration error and use relative path for key (DEFECT) [ISLCONFPROXY-2595] More

Description
In previous versions both Webhook URL and JWT private key (PEM file) needed to be set and valid for JWT Webhooks to be considered enabled. This was redesigned and JWT Webhooks are considered enabled as soon as Webhook URL is set. Other fixes include:

JWT private key (PEM file) now supports absolute paths as well.

The defect was fixed.

ISL Conference Proxy - Core - Remove > typo in join.html androidTemplate (DEFECT) [ISLCONFPROXY-2600] More

Description
In previous versions redundant ">" symbol was shown in join.html page in androidTemplate. This was now redesigned, symbol was removed and should not be shown anymore.

The defect was fixed.

ISL Pronto - Module - Apply transparent border to inputs when not focused (DEFECT) [ISLCONFPROXY-2610] More

Description
In previous versions date input in Pronto page moved few pixels when focused. This was redesigned and input no longer moves on focus.

The defect was fixed.

ISL AlwaysOn - Module - Remove unused onload event from input (DEFECT) [ISLCONFPROXY-2611] More

Description
In previous versions html template had input field with onload event which was not triggered. This was now redesigned and unused event was removed.

The defect was fixed.

ISL AlwaysOn - Module - Incorrect escaping of group name when editing computer group (DEFECT) [ISLCONFPROXY-2612] More

Description
In previous versions computer group name in "Edit group" dialog was not unescaped. When saving such unescaped name, the name of the group was changed although no actual changes were made by user. This was redesigned, name should be unescaped and the current name of computer group should be correctly shown in the input.

The defect was fixed.

ISL AlwaysOn - Module - Rename and reorder computer actions (DEFECT) [ISLCONFPROXY-2617] More

Description
"Change Admin" was changed to "Change Owner" on ISL AlwaysOn web page. Order of computer actions was changed, all actions are now shown and unavailable are disabled.

The defect was fixed.

ISL Conference Proxy - Administration - Add translations lines for expand and collapse strings (DEFECT) [ISLCONFPROXY-2620] More

Description
In previous versions "Expand" and "Collapse" words were not translated in Administration Module. This was redesigned and translations were added.

The defect was fixed

ISL Conference Proxy - Administration - Replace const and let with var (DEFECT) [ISLCONFPROXY-2621] More

Description
In previous versions Internet Explorer browser reported syntax error when opening Administration pages and page was not displayed correctly. This was now redesigned and issue should not happen anymore.

The defect was fixed.

ISL AlwaysOn - Module - Large number of computer groups slows down computer list page load (DEFECT) [ISLCONFPROXY-2627] More

Description
In previous versions rendering large amount of computer groups in computer list was slow. This was redesigned and render should be faster.

The defect was fixed.

ISL Conference Proxy - Administration - Change owner does not work after search (DEFECT) [ISLCONFPROXY-2638] More

Description
In previous versions selecting owner with "enter" key produced "Please select new owner." error. This was fixed and new owner should be selected. Other fixes include

Sidebar is now also positioned in front with z-index to prevent overlap with customizations.

The defect was fixed.

ISL Conference Proxy - Integrator - Register integrator_http_server log subsystem (DEFECT) [ISLCONFPROXY-2644] More

Description
In previous versions Integrator Module HTTP Server log subsystem was not registered, causing logs to fail. This was redesigned and missing log subsystem was added.

The defect was fixed.

Tags: proxy, isl