ISL Conference Proxy 4.4.2424.78 for Windows and Linux (2024-11-18)

On 18th of November the following was released:

ISL Conference Proxy 4.4.2424.78 for for Windows 64bit (Platform=win64, Revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14, req_os_version=0x0a000000-0x7fffffff)
ISL Conference Proxy 4.4.2424.78 for for Linux 64bit (Platform=linux64, Revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14, req_os_version=0x0206200000-0xffffffffff)

IMPORTANT: The minimum system requirements for ISL Confproxy Server version 4.4.2424.78 have been updated to Windows 10 or Windows Server 2016 (NT 10.0). Systems running older versions of Windows will not be able to upgrade to the latest version of ISL Conference Proxy (4.4.2424.78).

Modules

Administration 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Audit 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Authentication 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Backup 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Core Login 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
DNS 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
GeoIP 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Integrator 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
ISL AlwaysOn 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
ISL Groop 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
ISL Light 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
ISL Pronto 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Locale 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
NTP 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
PostgreSQL 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Reports 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
SSL 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
Storage 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)
System Monitor 4.4.2424.78 (revision=017dafc796974a76240ffc3156e3454f71b0b7ce, release_date=2024-11-14)

Translations

administration_20241114_20241114_144722.translation
backup_20241114_20241114_144722.translation
core_login_20241114_20241114_144722.translation
integrator_20241114_20241114_144722.translation
isl_alwayson_20241114_20241114_144722.translation
isl_conference_proxy_20241114_20241114_144722.translation
isl_groop_20241114_20241114_144722.translation
isl_light_20241114_20241114_144722.translation
isl_pronto_20241114_20241114_144722.translation
reports_20241114_20241114_144722.translation
ssl_20241114_20241114_144722.translation

Update availability

All updates have release date set to 2024-11-14. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.

Upgrading to new version

This are server side updates so hosted service users do not need to do anything.

Server license users please check Upgrading Server License

Improvements

ISL Conference Proxy - Core - Upgrade OpenSSL to 3.0.15 (SECURITY) [ISLCONFPROXY-3338] More

Description
OpenSSL was updated to 3.0.15, osslsigncode tool was updated to version 2.8.

[INTERNAL] ISL Conference Proxy - Core - Remove special treatment of "enabled" for default domain (FEATURE) [ISLCONFPROXY-2023] More

Description
In previous versions "enabled" key was set on default domain on each restart of ISL Conference Proxy. This was redesigned and special treatment of "enabled" was removed.

ISL Pronto - Module - InPage chat client registration in load balancer (FEATURE) [ISLCONFPROXY-2923] More

Description
ISL Pronto in-page chat is now registered in load balancer.

ISL Conference Proxy - Backup - SDK and Backup module use GJRPC proxy_init_complete+grid_time in scheduler (FEATURE) [ISLCONFPROXY-3017] More

Description
Scheduler was changed to use gjrpc grid_time for querying time. This is now called every hour to ensure accurate time.

ISL Conference Proxy - Core - Notify user about email or password change (FEATURE) [ISLCONFPROXY-3021] More

Description
ISL Conference Proxy now supports sending email notifications to the user when user's email or password is changed (by user himself, domain admin or server administrator).
New server and domain level settings were added to /conf -> Configuration -> General -> Mail -> Templates, that can be used to provide templates for emails:

Account name: With this setting, you can personalize the name of the service that appears in the email subject and body. For instance, the email subject could display "[Account Name]: Reset Your Password". If you don't specify a name, the installation name or server name will be used in the emails, in that order of priority.

Customer service URL: This setting allows you to define the link [www.support.company.com] or email address [mailto:support@email.com] that you want to use as the [customer_service_url] parameter in system emails. By default, [customer_service_url] parameter is only included in the "Email Change Notification" template, but you can add it to other system emails. If you do not want to include customer service URL in system emails, leave this field empty.

Password change notification: When this setting is enabled, users receive email notifications when their account password is changed, ensuring that users are aware of any unauthorized changes to their account password. These notifications DO NOT include the new password for security reasons. Disabling this setting stops these notifications, and users won't receive any email notifications when their account password is changed. Setting is enabled by default.

Email change notification: When this setting is enabled, users receive email notifications when their account email is changed. These notifications provide users with information about their new account email and help them stay aware of any unauthorized changes. Disabling this setting stops these notifications, and users won't receive any email notifications when their account email is changed. Setting is enabled by default.

Mail template for password change notification

Mail template for email change notification

Existing mail settings were also reorganized into new settings groups, renamed and with new descriptions added.
New log subsystem was added: "Change user email (user action)". It is used to log user email change (by user himself, domain admin or server administrator).

ISL Conference Proxy - Core - Go HTTPS client (FEATURE) [ISLCONFPROXY-3046] More

Description
HTTP and HTTPS requests will go through islcp_core process. HTTPS method will correctly check public certificate chain using the system trusted certificate store. The most important new features:

Online update URL is now https://www.islonline.com/system/updates/ (instead of http://), thus adding encryption (privacy) on top of existing end-to-end file signatures

Settings "Global HTTP events use SSL" and "Per-domain HTTP events use SSL" were added to enable HTTPS on port 443, but these settings stay off by default for backward compatibility reasons
ISLCONFPROXY-3266 will enable warnings logs for unencrypted http:// so it is recommended to enable all "HTTP events use SSL"

External authentication methods HTTP-POST and HTTP-POST-WEBAPP with https:// URL parameter will check certificates

Google reCAPTCHA and Cloudflare TURN client will check certificates of https:// endpoints

ISL Conference Proxy - Core - Configurable password history (FEATURE) [ISLCONFPROXY-3048] More

Description
Password history feature was added that prevents a user from changing their password to the same value as already used recently, with a default of 24 and a maximum of 100 remembered passwords. Password history updates only when a user changes their own password, administrative changes do not affect the password history. When new passwords are added to the history, older entries are removed if there is more than N (controlled with a setting) entries present for the user, meaning that a user's history is always limited.

The following settings were added to /conf -> Security -> Password and can be used to control the password history behavior:

Password history size: number of recent user's passwords that will be stored in history (when new passwords are added older entries are removed); default value is "24"

Maximum password history size this is the upper limit for "Password history size"; default value is "100"

Minimum password age (1w 2d 3h 4m 5s) sets the minimum interval between consecutive user password changes (if not set then no limit is used); default is not set

Password expiration interval (1w 2d 3h 4m 5s) => Maximum password age (1w 2d 3h 4m 5s) (renamed setting), sets the maximum interval between password changes -- after this time, the user is forced to change their password; default is not set

ISL Conference Proxy - Core - Use consistent subjects in ICP system mail (FEATURE) [ISLCONFPROXY-3167] More

Description
"ISL CP" in email subjects sent by ISL Conference Proxy was replaced with "ISL Conference Proxy". Subsystem emails will also have "ISL Conference Proxy: " prefix, which should improve consistency of emails.

ISL Light, ISL AlwaysOn - Module - Add icon for mobile platforms in computer and sessions list (FEATURE) [ISLCONFPROXY-3179] More

Description
Support for mobile platform status icon for computer was added. When platform is "android", mobile icon is used for connection status. Icon for connected clients now also changes based on platforms of clients, if all connected clients are mobile then mobile icon is shown, otherwise computer icon is shown. Icon for number of connected clients to computer was also replaced.

ISL AlwaysOn - ISL Light integration was also modified so ISL Light also reports operator's platform.

Sessions page also has modified icons:

icons are adjusted based on client/operator platform

Sessions in Waiting for client state now have operators icon (mobile/desk)

Sessions in Waiting for operator now have active icon (before grey icon)

[INTERNAL] ISL Conference Proxy - Core - Use svar expected (FEATURE) [ISLCONFPROXY-3207] More

Description
Handling of exceptions was redesigned. No visible changes in behavior of software.

ISL Conference Proxy - Core - Responsive container on select pages (FEATURE) [ISLCONFPROXY-3214] More

Description
Limited the size of the top-level container on some pages for devices with very small screens.

ISL Conference Proxy - Core Login - XSLT only for plaintext templates (FEATURE) [ISLCONFPROXY-3218] More

Description
Previously, the Core Login module used separate templates for various login-related emails in plain text format. This was redesigned, and a singular HTML template is now used and then transformed for different formats.

ISL Conference Proxy - Backup - Unify "access forbidden" for Backup module to be consistent with other modules (FEATURE) [ISLCONFPROXY-3224] More

Description
Design of "access forbidden" page for Backup module was unified with other modules. New webapi "system/backup/permission/check/1" was registered, which is called to check if user has permission to access "/users/backup" pages on ICP.

ISL Conference Proxy - Core - ICP Go execute process (FEATURE) [ISLCONFPROXY-3229] More

Description
Processes to generate executable programs and external authenticators are now run as subprocesses of islcp_core instead of the main process confproxy_server:

osslsigncode

image_tool

dmg tools

ldap

ISL AlwaysOn - Feature - Check if file type is allowed when uploading/downloading file to remote computer on web (FEATURE) [ISLCONFPROXY-3233] More

Description
Check for file type was added to ISL AlwaysOn remote computer file upload and download on web. If file type is not allowed on ICP, upload fails or download is denied. Blocked and allowed file extensions are provided by existing settings: "Blocked file extensions for user upload" and "Allowed file extensions for user upload".

ISL Conference Proxy - Core - Upgrade to Go 1.22.1 (FEATURE) [ISLCONFPROXY-3242] More

Description
Go was upgraded to 1.22.1.

ISL Conference Proxy - Core - Require Windows 10 / Windows Server 2016 (FEATURE) [ISLCONFPROXY-3243] More

Description
Minimum required version for running ISL Conference Proxy on Windows was raised to NT 10.0: Windows 10 or Windows Server 2016.

ISL Conference Proxy - Core - ICP Go TLS client (FEATURE) [ISLCONFPROXY-3253] More

Description
TLS client with public certificate checking using trusted system certificate store is now supported. Two features were added:

SMTP connection type with a new type "SSL/TLS"
existing types were renamed to "STARTTLS without certificate check" and "SSL/TLS without certificate check"

"Map path to HTTP backend" has a new option "ssl=1" to enable https, for example
{path=/test123&remote=www.google.com&ssl=1}

ISL Conference Proxy - Core - Throttle and combine ISL Light reconnect http events and improve http event logs (FEATURE) [ISLCONFPROXY-3263] More

Description
Pairs of consecutive HTTP events for ISL Light reconnect events (STOP/RECONNECT) are now combined into one pair of event (STOP/RECONNECT). All other events are still sent immediately and also any existing queue is flushed at that point. Periodic flushing interval can be controlled with new setting "Send combined HTTP events interval (in seconds)" (/conf -> ISL Light -> Basic). When set to 0 all events are sent immediately (same as before, no squashing is used). New setting was also added to "Integration" -> "Excluded HTTP event fields" that can be used to remove some not needed fields from HTTP events. Fields are filtered per module (MODULE=field1,field2,field3).

Logs for HTTP event sender were also redesigned so data is no longer combined into one field but common fields are extracted from data and logged in separate fields.
Common fields in logs (all are not always set):

EVENT

EVENTCOUNT - in case of combined events this is the number of squashed events into one

MODULE

TIMESTAMP

SERVER_ID

DOMAIN_ID

USER_ID

OWNER_ID - in case of Groop session only

SCOPE - can be used for better distinguishing of events (it is not always available)

OBJECT_ID - effected object id (session, user, domain)

ISL Conference Proxy - Core - Log insecure connection addresses (FEATURE) [ISLCONFPROXY-3266] More

Description
Insecure connections are now logged as warnings in log subsystem "[Core] Insecure connections" with a message "insecure connection". Currently unencrypted (http) connections are logged. Each outgoing connection address INSC_HOSTNAME will be logged at maximum once per 5 minutes.

Setting Exclude specific insecure connection addresses from logs was added to Server Administration (/conf -> Security) to disable the warning logs. Enter a list of DNS names or IP match expressions to disable logs based on connection hostname, for example: "www.example.com, 192.0.2.1, 192.0.2.0/24"

The default configuration of Global HTTP events and Per-domain HTTP events will report warnings. To fix the configuration:

enable "Global HTTP events use SSL" and "Per-domain HTTP events use SSL" (preferred), or

add "Global HTTP events server" and "Per-domain HTTP events server" to "Do not log insecure connect addresses"

ISL Conference Proxy - Core - Limit GRID file transfers file size (FEATURE) [ISLCONFPROXY-3270] More

Description
Fie storage upload is now limited to max 256 MB. Transferring already uploaded files larger than this limit will also fail.

ISL Conference Proxy - Core - Always use cache to determine if program or action is compatible with GRID (FEATURE) [ISLCONFPROXY-3271] More

Description
Cache for programs and actions that are compatible with the entire GRID will be used in all cases, which should improve the speed of public /users/programs list and internal actions query.

ISL AlwaysOn - Module - Add separate Max number of owned connections limit for Android devices (FEATURE) [ISLCONFPROXY-3273] More

Description
New setting Maximum number of owned remote access Android devices within domain (/conf -> ISL AlwaysOn -> Owned Remote Access Devices Limit) was added (to server and domain level). This setting limits the number of owned remote access Android devices for all the users within the domain. Attempting to add additional Android devices beyond this limit will trigger an error message indicating that the maximum number of owned devices has been reached. Android devices that are shared with the user do not count towards the limit.
Note: This setting is limited (upper bound) by the "Maximum number of owned remote access devices within domain (hard limit)".

Section "License Usage" was renamed to "Owned Remote Access Devices Limit". Existing settings for maximum devices now have new descriptions and names.

ISL Conference Proxy - Core - Update Bootstrap library from v4.6 to v5.3 (FEATURE) [ISLCONFPROXY-3277] More

Description
Bootstrap library version for v2400 web version was raised from v4.6 to v5.3.

ISL Conference Proxy - Core - Introduce new web version v2400 and switch default to v2400 (FEATURE) [ISLCONFPROXY-3279] More

Description
New web version "v2400" was added and is now set as default. Web pages were copied from v2200 to v2400.

ISL Conference Proxy - Core - Add support for Cloudflare Calls and Google STUN (FEATURE) [ISLCONFPROXY-3285] More

Description
ICE functionality was updated on ISL Conference Proxy. Support for Cloudflare Calls and Google STUN was added.

Setting "List of ICE servers for RPC" in /conf -> ICE Configuration now defaults to:
google, cloudflare, turn_servers
"Use Cloudflare Calls STUN address" is now enabled by default, resulting direct connections will use the Cloudflare Calls STUN address when the setting "List of ICE servers for RPC" includes {{cloudflare}}.
"Use Google STUN addresses" is disabled by default. With this setting enabled, direct connections will use the Google STUN addresses when the setting "List of ICE servers for RPC" includes {{google}}.

With all settings left to default, direct connections will use the Cloudflare Calls STUN address.

DB settings section was renamed "Cloudflare API settings" to "Cloudflare Spectrum API settings".
Error level when Spectrum query credentials are not set was reduced and faster queries for Spectrum credentials are performed.

[INTERNAL] ISL Conference Proxy - Core - Expose HTTP endpoint for uploading program crash reports (FEATURE) [ISLCONFPROXY-3286] More

Description
New web handler "/users/main/report_program_crash" was added, that can be used to upload crash report on server.

ISL Conference Proxy - ISL Pronto - Minimum window size (FEATURE) [ISLCONFPROXY-3287] More

Description
Added new settings for ISL Pronto, that allow enforcing a minimum size for the browser chat window. The new settings are:

Minimum chat window width: This settings specifies the minimum chat window width. Specifically, the interior width of the window in pixels (that is, the width of the viewport), including the width of the vertical scroll bar, if present. This excludes any toolbar, window chrome, and window-resizing borders/handles. The chat window will automatically resize to the minimum width, if resized below the minimum.

Minimum chat window height: This settings specifies the minimum chat window height. Specifically, the interior height of the window in pixels (that is, the height of the viewport), including the height of the horizontal scroll bar, if present. This excludes any toolbar, window chrome, and window-resizing borders/handles. The chat window will automatically resize to the minimum height, if resized below the minimum.

ISL Conference Proxy - Core - Delete flags for ICP 4.4.2120 branch (FEATURE) [ISLCONFPROXY-3288] More

Description

All flags from 4.4.2120 branch were deleted. These flags are now considered as enabled and can not be disabled by user anymore. Deleted flags:

    2021-03-03 ISLCONFPROXY-2483 dump webapi2 method location
    2021-02-22 ISLCONFPROXY-2472 check scope for encapsulating settings
    2021-02-10 ISLCONFPROXY-2463 online updater onchange
    2021-02-11 ISLCONFPROXY-2463 log subsystem settings
    2021-02-11 ISLCONFPROXY-2463 remove session expired
    2021-02-11 ISLCONFPROXY-2463 storage area onchange (storage)
    2020-12-04 ISLCONFPROXY-1815 integrator/webtoken/secure_redirect/encode/1
    2021-01-11 ISLCONFPROXY-2422 404 critical for users and static only
    2021-03-11 ISLCONFPROXY-2488 do not delete group with no members
    2020-09-08 ISLCONFPROXY-2160 program download safe args
    2020-09-08 ISLCONFPROXY-2160 program download safe args (light)
    2020-09-08 ISLCONFPROXY-2160 program download safe args log by default
    2020-09-22 ISLCONFPROXY-2160 cmdline_X arg
    2020-09-23 ISLCONFPROXY-2160 program download safe args (aon)
    2020-09-30 ISLCONFPROXY-2160 program download safe args (pronto)
    2020-10-02 ISLCONFPROXY-2160 program download safe args mux check (pronto)
    2020-10-05 ISLCONFPROXY-2160 program download safe args (core)
    2020-10-05 ISLCONFPROXY-2160 program download safe args (groop)
    2020-10-05 ISLCONFPROXY-2160 remove dangerous args from webapi (groop)
    2020-10-05 ISLCONFPROXY-2160 remove dangerous args from webapi help (groop)
    2020-10-12 ISLCONFPROXY-2160 ISLALWAYSON-1565 program download safe args aon custom link wizard
    2020-10-15 ISLCONFPROXY-2160 use scope_web flag on MUX netstart
    2020-10-16 ISLCONFPROXY-2160 remove setting serve_programs_directly
    2021-03-12 ISLCONFPROXY-2490 register utils/group/info/3
    2021-03-12 ISLCONFPROXY-2490 register utils/group/query/4
    2021-03-12 ISLCONFPROXY-2490 register utils/group/security/4
    2021-03-12 ISLCONFPROXY-2490 register utils/group/update/3
    2021-03-12 ISLCONFPROXY-2490 use and show group owners
    2021-04-06 ISLCONFPROXY-2510 api update received
    2021-04-06 ISLCONFPROXY-2510 update received in aon
    2021-04-06 ISLCONFPROXY-2510 update received in pronto
    2021-03-25 ISLCONFPROXY-2502 merge session db queries
    2021-03-25 ISLCONFPROXY-2502 notify live sessions
    2021-03-25 ISLCONFPROXY-2500 enable create meeting button in case of error
    2018-02-16 ISLCONFPROXY-1654 keep wildcard entries option
    2018-02-16 ISLCONFPROXY-1654 use keep wildcard entries option
    2020-03-20 ISLCONFPROXY-2161 cached list lboff
    2020-03-20 ISLCONFPROXY-2161 conf list lboff
    2020-03-20 ISLCONFPROXY-2161 dt gc new server
    2020-03-20 ISLCONFPROXY-2161 grid connection load off
    2020-03-20 ISLCONFPROXY-2161 grid prestart
    2020-03-20 ISLCONFPROXY-2161 init new server
    2020-03-20 ISLCONFPROXY-2161 offline
    2020-03-20 ISLCONFPROXY-2161 password blacklist
    2020-03-17 ISLCONFPROXY-1489 pg_tool grid clone
    2020-03-19 ISLCONFPROXY-1489 pg_tool analyze
    2020-03-20 ISLCONFPROXY-1489 conf remote_local_state
    2020-03-20 ISLCONFPROXY-1489 dt async set_remote_local_state
    2020-03-20 ISLCONFPROXY-1489 dt pg set_remote_local_state
    2020-03-25 ISLCONFPROXY-1489 pg_tool repeatable read
    2020-04-14 ISLCONFPROXY-1489 pg_tool bulk files
    2021-05-18 ISLCONFPROXY-2548 ip view internal/utils/grid/servers/get/1
    2020-10-13 ISLCONFPROXY-2342 groop module fix translations in invitation/notification email template
    2020-09-22 ISLCONFPROXY-2160 generate cmdline_X arg
    2018-05-29 ISLGROOP-989 add setting for modifying invite email template
    2018-05-29 ISLGROOP-989 register webapi2 method islgroop/sessions/email/preview/2
    2018-05-29 ISLGROOP-989 use custom template for invitation
    2020-12-08 ISLCONFPROXY-2401 refresh user_info pointer after patch apply
    2021-01-26 ISLCONFPROXY-2442 do not check for nil rows (administration)
    2021-01-26 ISLCONFPROXY-2442 do not check for nil rows (core_login)
    2021-05-26 ISLCONFPROXY-2553 dt notify wait for module apps start
    2021-03-25 ISLCONFPROXY-2495 ISL Light session tooltip includes HTML tags and other issues
    2021-03-11 ISLCONFPROXY-2489 flush bytes every second first 30 times
    2021-02-12 ISLCONFPROXY-2468 remove deprecated backend options (core)
    2021-02-12 ISLCONFPROXY-2468 remove deprecated backend options (pg)
    2021-03-31 ISLCONFPROXY-2507 resize bulk share dialog content
    2021-02-18 ISLCONFPROXY-2427 register internal/grid/reconnect/1
    2021-06-14 ISLCONFPROXY-2562 mux ssl counters
    2021-06-14 ISLCONFPROXY-2562 web ssl counters
    2021-04-06 ISLCONFPROXY-2509 activity log for sso login
    2021-04-06 ISLCONFPROXY-2509 login dialog log username input
    2021-05-24 ISLCONFPROXY-2552 register utils/password/forgot/users/list/2
    2021-03-18 ISLCONFPROXY-2493 fix javascript injection in transfer session window
    2021-04-26 ISLCONFPROXY-2529 handle user groups in shared with icon
    2021-06-09 ISLCONFPROXY-2559 do not show download bubble on Edge
    2021-07-07 ISLCONFPROXY-2577 clear table before adding new rows
    2021-02-25 ISLCONFPROXY-2475 remove permissions from domain/admin/domain/setting/page/section/list/1 response
    2021-02-25 ISLCONFPROXY-2475 static setting group order
    2021-02-25 ISLCONFPROXY-2475 style fixes
    2021-05-10 ISLCONFPROXY-2539 computer groups GUI fixes
    2021-04-26 ISLCONFPROXY-2530 remove redundant groups queries
    2021-06-23 ISLCONFPROXY-2570 register utils/webtoken/info/2 with missing_2fa
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (aon)
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (core)
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (groop)
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (light)
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (pronto)
    2021-07-08 ISLCONFPROXY-2578 fix js tmpl single quote (reports)
    2021-07-20 ISLCONFPROXY-2578 fix special chars
    2021-07-21 ISLCONFPROXY-2578 groop toggle survey
    2021-06-22 ISLCONFPROXY-2567 correctly detect new edge
    2021-07-15 ISLCONFPROXY-2590 do not cut registered users action dropdowns
    2017-10-30 ISLPRONTO-1076 add 'Allow send file in chat' and 'Allow receive file in chat' settings
    2017-10-30 ISLPRONTO-1076 use 'Allow send file in chat' and 'Allow receive file in chat' settings
    2020-10-14 ISLCONFPROXY-2341 register webapi2 method integrator/utils/filter/validate/1
    2021-07-19 ISLCONFPROXY-2598 show mouse pointer on file upload input
    2021-07-20 ISLCONFPROXY-2599 backup module tables add tbody
    2021-07-13 ISLCONFPROXY-2587 remove placeholder after dragging form element
    2021-07-08 ISLCONFPROXY-2582 escape username utils login
    2021-07-15 ISLCONFPROXY-2582 escape username login dialog
    2021-02-04 ISLCONFPROXY-2453 implement read-only tag
    2020-12-28 ISLCONFPROXY-2417 call internal/signal/setting/update/1 from administration
    2020-12-28 ISLCONFPROXY-2417 recount setting on setting update
    2020-12-28 ISLCONFPROXY-2417 register internal/signal/user/setting/update/1
    2020-12-28 ISLCONFPROXY-2417 register settings columns
    2020-12-28 ISLCONFPROXY-2417 set setting_count to zero on user create in administration
    2021-01-18 ISLCONFPROXY-2425 accept main user as domain admin
    2021-01-18 ISLCONFPROXY-2425 register main user setting
    2021-01-20 ISLCONFPROXY-2431 query and use user setting columns
    2021-01-20 ISLCONFPROXY-2431 register webapi2 domain/admin/user/list/2
    2021-01-28 ISLCONFPROXY-2444 hide enabled on domain
    2021-02-23 ISLCONFPROXY-2454 release setting batch 6 to core admin
    2021-07-29 ISLCONFPROXY-2611 remove unused onload event from input
    2021-06-10 ISLCONFPROXY-2546 add breadcrumbs to Administration
    2021-08-12 ISLCONFPROXY-2622 fix checkbox select/deselect
    2021-07-15 ISLCONFPROXY-2591 check if grid enabled and use my id
    2021-07-16 ISLCONFPROXY-2594 report raw before setting value to audit log
    2021-07-16 ISLCONFPROXY-2593 apply read-only tag check before setting type check
    2021-05-18 ISLCONFPROXY-2457 register user_domain_admin_edit_computer_groups permission
    2021-05-18 ISLCONFPROXY-2457 register webapi2 method domain/admin/group/info/1
    2021-05-18 ISLCONFPROXY-2457 register webapi2 method domain/admin/group/members/list/1
    2021-05-18 ISLCONFPROXY-2457 register webapi2 method domain/admin/group/members/update/1
    2021-06-01 ISLCONFPROXY-2549 enable group details page
    2021-06-01 ISLCONFPROXY-2549 register webapi2 method domain/admin/group/update/1
    2021-06-29 ISLCONFPROXY-2572 add numeric range to Filter Builder
    2021-06-29 ISLCONFPROXY-2572 do not mark broken member if only broken owner membership
    2021-06-29 ISLCONFPROXY-2572 register webapi2 method domain/admin/computergroup/list/3
    2021-06-29 ISLCONFPROXY-2572 update computer groups table
    2021-07-29 ISLCONFPROXY-2572 remove duplicate values at filter parsing
    2021-06-16 ISLCONFPROXY-2564 add recaptcha to utils/password/forgot/1
    2021-06-16 ISLCONFPROXY-2564 add setting for additional recaptcha protected webapis
    2021-07-07 ISLCONFPROXY-2564 export recaptcha language code
    2021-07-23 ISLCONFPROXY-2602 Fix date picker in Pronto and Administration module
    2021-07-29 ISLCONFPROXY-2612 unescape computer group name when editing
    2021-07-16 ISLCONFPROXY-2595 fail on configuration error and use relative path for key
    2021-08-19 ISLCONFPROXY-2627 optimize computer groups render
    2021-02-15 ISLCONFPROXY-2518 register system/integrator/jwt/list/1
    2021-02-15 ISLCONFPROXY-2519 register system/integrator/jwt/add/1
    2021-02-15 ISLCONFPROXY-2520 register system/integrator/jwt/update/1
    2021-02-15 ISLCONFPROXY-2521 register system/integrator/jwt/remove/1
    2021-02-15 ISLCONFPROXY-2491 register integrations management permission
    2021-02-15 ISLCONFPROXY-2491 register integrations webapp handler
    2021-04-22 ISLCONFPROXY-2522 jwt integrator calls from test webapi page
    2021-04-22 ISLCONFPROXY-2522 register integrator_user_jwt_api_access_public_rsa_keys
    2021-04-22 ISLCONFPROXY-2522 register user integration key size setting
    2021-04-22 ISLCONFPROXY-2524 register integrator/authorize/app/jwt/1
    2021-05-26 ISLCONFPROXY-2554 register internal/user/authenticate/throttle/1
    2021-05-26 ISLCONFPROXY-2554 register internal/user/login/unthrottled/1
    2021-07-09 ISLCONFPROXY-2554 integrator address ua throttle
    2021-04-22 ISLCONFPROXY-2525 register integrator/user/login/1
    2021-04-22 ISLCONFPROXY-2525 register internal/user/authenticate/throttle/flush/1
    2021-04-22 ISLCONFPROXY-2525 register internal/utils/webtoken/debug/1
    2021-08-12 ISLCONFPROXY-2621 const to var
    2021-08-09 ISLCONFPROXY-2616 replace for_of with for
    2021-06-30 ISLCONFPROXY-2568 fix icp save button
    2021-08-19 ISLCONFPROXY-2568 fix multiple
    2021-08-19 ISLCONFPROXY-2568 fix setting inherit
    2021-08-19 ISLCONFPROXY-2568 fix table background color
    2017-10-30 ISLPRONTO-1075 isllight installation schema from customization
    2017-10-30 ISLPRONTO-1075 isllight installation schema setting
    2021-08-27 ISLCONFPROXY-2638 remove change event from owner input
    2021-08-10 ISLCONFPROXY-2617 rename and reorder computer actions on web
    2020-01-24 ISLCONFPROXY-2111 session throttle init
    2020-02-13 ISLCONFPROXY-2111 session throttle
    2020-03-06 ISLCONFPROXY-2111 15 minutes aggregate logs
    2020-02-14 ISLGROOP-1057 session throttle
    2020-02-14 ISLLIGHT-5467 session throttle
    2020-02-17 ISLALWAYSON-1535 session throttle
    2021-09-24 ISLCONFPROXY-2662 fix join button to be valid HTML
    2021-09-16 ISLCONFPROXY-2653 position sidebar on top
    2021-08-31 ISLCONFPROXY-2641 add missing indexes to login_attempts
    2021-08-24 ISLCONFPROXY-2632 HTTP request body close nop
    2021-08-24 ISLCONFPROXY-2632 copyFromDBTOTPDevice error
    2021-08-24 ISLCONFPROXY-2632 handle HTTP protocol errors
    2020-08-21 ISLCONFPROXY-2299 module debug files
    2020-08-21 ISLCONFPROXY-2300 add grid send message filter
    2020-08-21 ISLCONFPROXY-2302 implement ISL AlwaysOn integration
    2021-09-23 ISLCONFPROXY-2661 sanitize connect message in grid handler
    2021-09-23 ISLCONFPROXY-2661 sanitize connect message in rpc
    2021-09-23 ISLCONFPROXY-2661 sanitize connect message in webapi
    2021-10-05 ISLCONFPROXY-2666 improve dump of crashlogs to HAG
    2020-08-25 ISLCONFPROXY-2303 link computers to ISL Light
    2020-08-25 ISLCONFPROXY-2303 register webapi islalwayson/computer/search/3
    2020-08-05 ISLCONFPROXY-2286 add lock student screen permission
    2021-03-29 ISLCONFPROXY-2504 add request desktop stream permission
    2020-12-03 ISLCONFPROXY-2393 add support for session delete rpc
    2021-03-23 ISLCONFPROXY-2499 add support for requesting desktop stream quality
    2021-09-14 ISLCONFPROXY-2647 add setting to enable classroom
    2021-09-14 ISLCONFPROXY-2647 check if classroom type of meeting is allowed
    2021-09-06 ISLCONFPROXY-2645 register utils/recaptcha/info/1
    2021-11-05 ISLCONFPROXY-2645 use utils/recaptcha/info/1 to init recaptcha
    2021-09-23 ISLCONFPROXY-2657 handle multiline errors in web admin
    2021-03-26 ISLCONFPROXY-2503 radix sort classroom registered users
    2021-04-08 ISLCONFPROXY-2503 sanitize student number at register for Classroom
    2020-08-20 ISLCONFPROXY-2293 add classroom required fields
    2021-09-23 ISLCONFPROXY-2659 check classroom mandatory fields
    2021-07-19 ISLCONFPROXY-2597 register webapi2 method islgroop/default/get/permissions/1
    2021-10-25 ISLCONFPROXY-2597 add option to disable specific classroom features on web interface
    2021-10-25 ISLCONFPROXY-2597 classroom add session permissions
    2021-05-10 ISLCONFPROXY-2540 classroom use short session code
    2020-05-07 ISLGROOP-1063 add Classroom option to web interface
    2020-08-25 ISLCONFPROXY-2303 use islalwayson/computer/search/3 webapi
    2021-11-08 ISLCONFPROXY-2681 computer session indicator update
    2021-10-29 ISLCONFPROXY-2675 sanitize response message in webapi
    2020-10-12 ISLCONFPROXY-2340 add session limit setting
    2020-10-12 ISLCONFPROXY-2340 check session limit on connect
    2020-10-12 ISLCONFPROXY-2340 check session limit on connect webapi
    2020-10-12 ISLCONFPROXY-2340 return computer session limit
    2021-07-09 ISLCONFPROXY-2585 update audit logs table
    2021-07-14 ISLCONFPROXY-2585 register webapi2 domain/admin/audit/event/list/3
    2021-08-04 ISLCONFPROXY-2615 update users table
    2021-08-05 ISLCONFPROXY-2615 register webapi2 domain/admin/user/list/3
    2021-09-01 ISLCONFPROXY-2615 register webapi2 domain/admin/user/info/1
    2021-08-13 ISLCONFPROXY-2618 update user groups table
    2021-08-17 ISLCONFPROXY-2618 register webapi2 domain/admin/usergroup/list/2
    2021-07-19 ISLCONFPROXY-2589 Administration UX fixes
    2021-10-25 ISLCONFPROXY-2669 add filter for empty values
    2021-10-25 ISLCONFPROXY-2669 fix mark more members
    2021-10-25 ISLCONFPROXY-2669 register webapi2 domain/admin/user/list/4
    2021-10-25 ISLCONFPROXY-2669 register webapi2 method domain/admin/group/members/list/2
    2021-06-02 ISLCONFPROXY-2545 add setting for scheduling availability
    2021-06-09 ISLCONFPROXY-2545 check users schedule on connect
    2021-11-18 ISLCONFPROXY-2700 move session ping to db notify
    2021-11-18 ISLCONFPROXY-2700 use faster dt read
    2021-11-19 ISLCONFPROXY-2702 improve session link procedure
    2021-08-20 ISLCONFPROXY-2629 check for null values in reports
    2021-09-01 ISLCONFPROXY-2642 fix tab while autocomplete is open
    2021-09-03 ISLCONFPROXY-2643 disable sortable on empty data
    2021-11-23 ISLCONFPROXY-2706 return number of sessions per user
    2021-11-30 ISLCONFPROXY-2716 change icon
    2021-11-18 ISLCONFPROXY-2699 reset pagination on count change
    2021-11-19 ISLCONFPROXY-2703 append column selector dropdown to body
    2021-11-19 ISLCONFPROXY-2703 append filter builder modal to body
    2021-11-19 ISLCONFPROXY-2703 position sidebar below modal
    2021-11-12 ISLCONFPROXY-2691 periodically flush recording file
    2021-09-15 ISLCONFPROXY-2648 use best effort ntp sync
    2021-09-23 ISLCONFPROXY-2660 pass actx to mux
    2021-09-23 ISLCONFPROXY-2660 pass mux actx to wa2
    2021-11-24 ISLCONFPROXY-2708 add comment for scheduling setting
    2021-11-23 ISLCONFPROXY-2693 fix capitalization in pronto datepicker
    2021-11-29 ISLCONFPROXY-2711 log missing schedule api and allow connection
    2021-11-30 ISLCONFPROXY-2713 add multicolumn index for last used
    2021-11-30 ISLCONFPROXY-2714 hide classroom functionality on all web pages
    2021-12-03 ISLCONFPROXY-2719 allow zero limit and do not send emails
    2021-10-05 ISLCONFPROXY-2664 add GRID health checks
    2021-10-05 ISLCONFPROXY-2664 add and use services cache
    2021-10-05 ISLCONFPROXY-2664 add server tags setting
    2021-12-06 ISLCONFPROXY-2720 add setting for health logs severity escalation
    2021-12-06 ISLCONFPROXY-2720 escalate health logs severity
    2021-12-06 ISLCONFPROXY-2717 adjust grid server connection logs severity
    2021-12-22 ISLCONFPROXY-2733 hide show more link in create sidebar
    2021-12-22 ISLCONFPROXY-2733 position tooltip above sidebar
    2021-11-11 ISLCONFPROXY-2690 admin title background color staticjs
    2018-04-20 ISLLIGHT-4994 send end signal on session ended
    2019-12-10 ISLCONFPROXY-2080 remove CDN settings
    2019-12-10 ISLCONFPROXY-2080 stop using CDN alternate settings
    2019-12-10 ISLCONFPROXY-2080 stop using CDN xfwd setting
    2019-12-10 ISLCONFPROXY-2080 stop using public web service address setting
    2019-12-10 ISLCONFPROXY-2080 stop using server_address_web_deprecated
    2020-02-17 ISLCONFPROXY-2080 remove expand download backward compat
    2019-12-10 ISLCONFPROXY-2081 enforce ssl webapi use proxied
    2019-12-10 ISLCONFPROXY-2081 enforce ssl websockets use proxied
    2019-12-10 ISLCONFPROXY-2081 http webapi2 use proxied
    2019-12-10 ISLCONFPROXY-2081 mux webapi2 use proxied
    2019-12-10 ISLCONFPROXY-2081 static web filter use proxied
    2019-12-10 ISLCONFPROXY-2081 webapi2 api help use proxied
    2019-12-10 ISLCONFPROXY-2081 ws webapi2 use proxied
    2020-01-22 ISLCONFPROXY-2081 enforce ssl websockets use correct address
    2020-01-23 ISLCONFPROXY-2081 remove /conf from web access filter check
    2020-01-23 ISLCONFPROXY-2081 wrap ioctl_raw
    2020-02-21 ISLCONFPROXY-2081 tcp close web socket reject
    2021-10-05 ISLCONFPROXY-2558 add support for breakout rooms
    2021-10-18 ISLCONFPROXY-2670 add breakout rooms screen sharing permission
    2021-10-18 ISLCONFPROXY-2670 add breakout rooms screen sharing permission to web interface
    2021-10-27 ISLCONFPROXY-2576 add support for breakout room chat
    2021-12-08 ISLCONFPROXY-2722 apply existing values when permissions are set
    2021-12-21 ISLCONFPROXY-2731 add support for custom breakout room labels
    2021-12-21 ISLCONFPROXY-2732 db flush update clean old data
    2021-12-21 ISLCONFPROXY-2732 db flush update quota
    2020-12-15 ISLCONFPROXY-2404 add Groop session history tables
    2020-12-15 ISLCONFPROXY-2404 add Groop session history tracking
    2020-12-29 ISLCONFPROXY-2416 expose Groop session history
    2020-12-29 ISLCONFPROXY-2416 add single session query to reports api
    2021-01-26 ISLCONFPROXY-2424 add Groop reports page
    2021-04-06 ISLCONFPROXY-2440 add Groop session details report
    2022-02-17 ISLCONFPROXY-2768 fix argument access
    2022-02-03 ISLCONFPROXY-2756 add onClick listeners for computer actions
    2022-01-12 ISLCONFPROXY-2739 only count servers with service enabled when performing health checks
    2021-04-01 ISLCONFPROXY-2508 expose computer alias in ISL Light reports
    2021-04-01 ISLCONFPROXY-2508 store computer alias to ISL Light session
    2017-12-27 ISLCONFPROXY-1625 local flag support
    2022-02-15 ISLCONFPROXY-2766 register missing translation strings
    2022-02-28 ISLCONFPROXY-2766 register language code on forgotpassword page
    2021-05-28 ISLCONFPROXY-2511 remove test logs
    2021-07-08 ISLCONFPROXY-2578 remove test logs

ISL Conference Proxy - Integrator - WebAPI2 to set user/domain raw keys (FEATURE) [ISLCONFPROXY-3290] More

Description
Added two new integrator WebAPI2 methods to support setting raw keys for user and domain. The "password" key for user also supports the optional "user_password" encoding, which will encode a plaintext password with the specified user's settings. The new WebAPI2 methods are:

integrator/user/key/raw/set/1

integrator/domain/key/raw/set/1

[INTERNAL] ISL Conference Proxy - Core - Add islcp_core GJRPC handler (FEATURE) [ISLCONFPROXY-3291] More

Description
islcp_core GJRPC handler API was added.

ISL Conference Proxy - Core - Prepare migration for selected UI/UX flags from older web pages before v2400 (FEATURE) [ISLCONFPROXY-3293] More

Description
Selected flags that make UI/UX changes on v2200 web pages were replaced by backport flags that can be enabled if feature is requested to be backported. On v2400 new flag was used in such case to replace the old one.

ISL Conference Proxy - Core - Add watchdog for repeated tasks to detect if task stops executing (FEATURE) [ISLCONFPROXY-3296] More

Description
New setting Watchdog for periodic tasks on error was added to /conf -> Performance. This setting determines the server's response when a periodic task fails to execute or is no longer scheduled. The available options are:

Ignore: No action is taken; the error is ignored.

Report in log: An entry is created in the log for each failed periodic task.

Restart: The server automatically restarts.

Set to "Report in log" by default.

ISL Light - Module - Add logs for number of transferred bytes per specific transfer type: direct, mux (FEATURE) [ISLCONFPROXY-3299] More

Description
New setting Aggregated session statistics interval (in seconds) was added to /conf -> ISL Light, that can be used to control the interval (600 seconds by default) between combined/aggregated logs with ISL Light session connection statistics.
New log subsystem was added for session statistics: "[ISL Light] Session connection stats".
Statistics logs contain following info:

ISLLIGHT_SESSION_ID - ID of session

STA_DESKTOTALRECON_L - total amount of operator reconnects for this session (this value is not incremental)

STA_CLIENTTOTALRECON_L - total amount of client reconnects for this session (this value is not incremental)

STA_MUXTIME_L - number of seconds that mux connection was used

STA_MUXRECV_L - number of bytes that were received through mux connection

STA_MUXSEND_L - number of bytes that were sent through mux connection

STA_ICESTUNTIME_L - number of seconds that STUN connection was used

STA_ICESTUNRECV_L - number of bytes that were received through STUN connection

STA_ICESTUNSEND_L - number of bytes that were sent through STUN connection

STA_ICETURNTIME_L - number of seconds that TURN connection was used

STA_ICETURNRECV_L - number of bytes that were received through TURN connection

STA_ICETURNSEND_L - number of bytes that were sent through TURN connection

ISL Light - Module - Increase ICE Credentials timeout and cache the credentials within session (FEATURE) [ISLCONFPROXY-3301] More

Description
ICE credentials expiry timeout was increased. The credentials are also cached for the same validity period. The list of cached credentials can be obtained in ISL Light ICE credentials cache XML (/conf -> Debug).
New setting ICE credentials cache interval (in seconds) added in /conf -> ISL Light -> ICE Management (direct connection). With this setting you can set the interval for caching of ICE credentials. The minimum value is 30 seconds. Set to 86400 by default.

ISL Conference Proxy - Core - Improve error reporting in loginsso web handler (FEATURE) [ISLCONFPROXY-3303] More

Description
Web handler "loginsso" will now report more detailed information about decoding session cookie CPSSOID:

empty session cookie

invalid session ID

invalid POST token

missing user ID

ISL Light - Module - Add handler for session connection error count reports from clients (FEATURE) [ISLCONFPROXY-3304] More

Description
New handler "err_stats" for ISL Light messages was added that can be used by the clients to report any connection errors (classification and type) that occurred on their side. Predefined error classifications with counts are reported in "session connection stats" logs. Currently there are 3 types of predefined errors:

Unsorted

TURN authentication error

MTU error

ISL Conference Proxy - Core - SSO domain username remap case insensitive (FEATURE) [ISLCONFPROXY-3305] More

Description
User setting field "Security > SSO domain username remap" is now case insensitive. Subject Name ID from SSO SAML IdP will now match even if the letter case differs.

ISL Conference Proxy - Core - Customization .zip upload support (FEATURE) [ISLCONFPROXY-3306] More

Description

Support for uploading different customizations as zip files was added. The format is a zip file with a manifest.json and customization files (files listed in the manifest).
The manifest.json file should be in the following format:

    {
        "type": "customization", // Should always be "customization" 

        "name": "my_customization", // Name of this customization
        "default": "1", // Set to "1" to apply as default server-wide
        "spec": [ // Array of key/value objects
            {
                "key": "program_setting::ISL+Light::grid_nice_name::system", // Setting key
                "value": "Example ICP Grid", // Setting value
                "description": "This is the server grid name", // This is ignored
            },
            {
                "key": "program_setting::ISL+Light::icon", // File setting key
                "value": "icon.png", // File setting value
                "description": "This is an icon file", // This is ignored
            }
        ]
    }

ISL Pronto - Module - Operator end chat permission (FEATURE) [ISLCONFPROXY-3311] More

Description
Added a new setting to allow or disallow ISL Pronto operators to end chats. The new setting is: Allow operator to end chat.

ISL Light - Module - Add transferred bytes log for clients that do not report stats and add client/desk country (FEATURE) [ISLCONFPROXY-3312] More

Description
Session connection statistics now include additional info:

ISLLIGHT_SERVERTAGS: value of "GRID server tags" for the server that reported stats

STA_(DESK|CLIENT)RECON_L: number of reconnects for desk (this value is now incremental (old field was "STA_(DESK|CLIENT)TOTALRECON_L"))

STA_MUXSRVTRANS_L: number of bytes that were transferred over mux and tracked by server (same value as in"totaltransferredbytes" table), value is only set when desk does not report statistics (old client)

ISLLIGHT_(DESK|CLIENT)CCODE: country code as resolved from IP address

ISLLIGHT_(DESK|CLIENT)COUNTRY: country as resolved from IP address

ISLLIGHT_(DESK|CLIENT)CITY: city code as resolved from IP address

ISL Conference Proxy - Core - Remove exceptions from exe generator hot path (FEATURE) [ISLCONFPROXY-3319] More

Description
Handling of exceptions in exe generator was redesigned to improve performance.

ISL Conference Proxy - Core - Emphasize join session warning (FEATURE) [ISLCONFPROXY-3320] More

Description
The "Only join sessions with people you recognize and trust!" warning was emphasized for all types of sessions (ISL Light, ISL AlwaysOn, ISL Groop). This includes older versions of pages and the mobile join page.

ISL Conference Proxy - Core - Upgrade to libxml2 2.12.9 (FEATURE) [ISLCONFPROXY-3322] More

Description
Libxml2 was upgraded to version 2.12.9. Libxslt was upgraded to version 1.1.40.

ISL Conference Proxy - Core Login - Improve 2FA login logs (FEATURE) [ISLCONFPROXY-3324] More

Description
Two factor authentication logs were improved.
Username and password checks during WebAPI2 login dialog log messages now include "step" in the message to indicate that the result is not final:

login step succeeded

login step failed

The other deprecated 1FA system user logins stay unchanged with "login succeeded" and "login failed".

Log message "login succeeded" with result "use single sign-on for domain" will now use the log message "requested login with single sign-on" instead.

Log messages "login ok with missing 2FA" and "login ok with logout of old sessions" are renamed to "login succeeded with logout of old sessions" and "login succeeded with logout of old sessions" to be more consistent with the base message "login succeeded".

Log message "log challenge" on info level is now split into two messages:

"log failed" on notice level (all login dialog challenges are now marked with error flag to indicate that there was wrong user input or there is some other system error)

"log challenge" on debug level (challenges without error - just asking the user to enter credentials)

Log lines "login succeeded" and "log challenge" (and the new "log failed") are now always logged without exceptions.

Username and password checks during WebAPI2 login dialog CSV audit log messages now include "step" in the message to indicate that the result is not final:

user login step

user change password step

user change email step

Additionally, CSV audit log login status "user login success" is renamed to "correct password" when done during WebAPI2 login dialog to indicate that the result is not final.

Three new key value pairs were added to core_user_login logs:

LOGIN_CHALTYPE (challenge type that is presented to user during the login, for example "system; user login; password" or "Core Login: enter authenticator app verification code")

LOGIN_CHALTYPES_TXT (a sorted set of all "LOGIN_CHALTYPE" (converted to PascalCase for easier searching) that occurred during the login so far, delimited by ",", every type occurs only once)

LOGIN_CHALTRACE_TXT (ordered vector of all "LOGIN_CHALTYPE" that occurred during the login so far, delimited by "=>", can be much longer than "LOGIN_CHALTYPES_TXT")

ISL Conference Proxy - Core - Customization .zip download support (FEATURE) [ISLCONFPROXY-3326] More

Description
Support for downloading different customizations as zip files was added. The format is the same as used for uploading customizations (zip with a manifest and customization files).

ISL Conference Proxy - Core - Add retries for Cloudflare ICE queries (FEATURE) [ISLCONFPROXY-3333] More

Description
Cloudflare ICE credentials queries now use retries in case query fails. Each credentials request has 2 retries (10s and 30s delay). Severity of logs in case of failed attempts is lower but critical/error is used if last retry fails.

[INTERNAL] ISL AlwaysOn - Module - Add webapi2 endpoint for flushing AON search cache (FEATURE) [ISLCONFPROXY-3342] More

Description
New webapi2 method "islalwayson/cache/search/flush/1" was registered. It is only available when "Integration test APIs" dev flag is enabled and is intended to be used by test systems for flushing search cache.

ISL Conference Proxy - Core - Added Authorization header to HTTP event sender (FEATURE) [ISLCONFPROXY-3352] More

Description
New setting Global HTTP events Authorization Bearer token was added to /conf -> Integration.
New setting Per-domain HTTP events Authorization Bearer token was added to Integration in domain settings.

When set, the Authorization header is added to HTTP event sender with value Bearer VAL, where VAL is the value of setting.

ISL Conference Proxy - Core - Go HTTP client use non-deadline timeouts (FEATURE) [ISLCONFPROXY-3363] More

Description
Go HTTP client was fixed to use non-deadline timeouts for larger file transfers in Online updater, the timeout will be reset with each received packet to 40s by default. Deadline timeouts of REST APIs were increased to 20s.

ISL Conference Proxy - Module GeoIP - Update database to GeoLite2-City 2024-11-01T16:05:45Z (FEATURE) [ISLCONFPROXY-3375] More

Description
Updated GeoIP to use the database GeoLite2-City 2024-11-01T16:05:45Z.

ISL Conference Proxy - Core - Handle image_tool empty inputs (FEATURE) [ISLCONFPROXY-3376] More

Description
Packet generator was fixed to handle missing or empty inputs in image_tool. If the input is missing, image_tool is skipped without logging critical errors. Log improvements:

new critical logs for image_tool when input is not missing

subprocess log lines use static messages "subprocess started" and "subprocess failed", the tool name is in SUBPROC_TOOL

ISL Conference Proxy - Core - Use retries when downloading files in online update (FEATURE) [ISLCONFPROXY-3380] More

Description
Online update now uses retires when making http requests (downloading assets). Retries are made with delays, 3 retries (10, 20, 30 second delay). New logsubsystem was added: "[Core] Online update".

ISL Conference Proxy - Administration - Use FixPublicCodeAPI (DEFECT) [ISLCONFPROXY-2824] More

Description
In previous versions, when creating external groups, the public code would not be set, which would cause the group to be invisible in the Administration pages. This was redesigned and public code should now always be set.

The defect was fixed.

ISL Conference Proxy - Core - Store SSL protocol and cipher for module SSL managed certificates (DEFECT) [ISLCONFPROXY-3051] More

Description
In previous versions change of HTTP SSL settings (protocol and cipher) in /conf was not respected when "HTTPT use SSL" was set to "Managed by SSL module", because value from cache was used. This was now redesigned, missing notify was added and cache should be correctly updated.

The defect was fixed.

ISL Light - Module - Show actual reason for killed session instead of generic concurrent error (DEFECT) [ISLCONFPROXY-3151] More

Description
In previous versions when ISL Light session was terminated before being started, generic message that concurrent limit was reached was shown in client. This was now redesigned and appropriate message that session was terminated by user or by server should be shown.

The defect was fixed.

ISL Conference Proxy - Core - Use _TC instead of _T for tags with translatable content (DEFECT) [ISLCONFPROXY-3210] More

Description
In previous versions, notification templates for email and password change contained tags that would cause some elements of the template to be incorrectly translated. This was redesigned and the templates should now contain the correct tags.

The defect was fixed.

ISL Conference Proxy - Core - Log subsys and severity new log file (DEFECT) [ISLCONFPROXY-3221] More

Description
Previously, the LOG_SUBSYSTEM and LOG_SEVERITY key-value pairs were missing from the "new log file" log line. This was redesigned and now they should be present.

The defect was fixed.

ISL Conference Proxy - Core - Truncate ACTLOG_URL (DEFECT) [ISLCONFPROXY-3226] More

Description
In previous versions, URL length in audit logs was not limited. This was redesigned and URL length in audit logs should now be limited to a maximum of 1024 characters including the asterisk (*) character. If a URL is truncated, the asterisk is appended to the end.

The defect was fixed.

ISL AlwaysOn - Module - Do not show computer or computer group owner in the list of shared users/user groups (DEFECT) [ISLCONFPROXY-3245] More

Description
In previous versions computer owner was shown in "Share Computer" modal in "Selected" tab. This was redesigned, computer owner is not shown anymore in Selected tab and is also disabled in Users tab. Selected table has "No results" shown when not shared with user or user groups.

The defect was fixed.

ISL AlwaysOn - Module - Bulk delete of computers in computer group is not allowed (DEFECT) [ISLCONFPROXY-3249] More

Description
In previous versions bulk delete of computers was not allowed if some of the computers were shared. This was now redesigned and delete for each computer is performed in loop and failed attempts are tracked. If any of the computers could not be removed because of insufficient permissions its name is shown in error message at the end. If all succeed, then success message is shown.

The defect was fixed.

ISL Conference Proxy - Core - HTTP event queue can be out of order in case of lots of events (DEFECT) [ISLCONFPROXY-3268] More

Description
In previous versions when multiple HTTP events happened at the same time, the order of events in queue file could be different than the order in which the events were created. This was now redesigned and HTTP event queue now enforces same order as the events were created in.

The defect was fixed.

ISL Conference Proxy - Core - Wait for server to startup before sending http events for terminated sessions (DEFECT) [ISLCONFPROXY-3278] More

Description
In previous version HTTP event submit failed, because check was executed during init stage and settings cache was not initialized yet. This was now redesigned and HTTP events are submitted when init is done.

The defect was fixed.

ISL Pronto - Module - Notifications for legacy browsers (DEFECT) [ISLCONFPROXY-3281] More

Description
Previously, ISL Pronto chat notifications were not supported on legacy browsers using older/deprecated implementations of the Notifications and Web Audio APIs. This was redesigned, and chat notification support should now include legacy browsers.

The defect was fixed.

ISL AlwaysOn - Module - Fix untranslated "Set unattended access" modal title (DEFECT) [ISLCONFPROXY-3284] More

Description
In previous versions modal title "Set Unattended Access" in Computers pages was untranslated. This was redesigned and string should be translated.

The defect was fixed.

ISL Pronto - Module - New ISL Pronto web UI fixes (DEFECT) [ISLCONFPROXY-3289] More

Description
In previous versions, the ISL Pronto web chat UI contained some elements that were overlapping or positioned incorrectly. This was redesigned, and the UI was updated with the following changes:

Logo is centered in all languages, then moves to right or left depending on LTR/RTL language.

Operator nick moved under photo, allows for longer name.

Operator offline message moved under photo.

"Send", "End Chat", "Show Original"/x, "Start ISL Light" buttons typography and sizing unified, text centered.

"Send", "End Chat" edge-to-edge x-axis padding, fixes line breaks in button text.

Notifications settings action buttons "Apply", "Cancel" margins fixed for RTL languages.

"Powered by ISL Pronto" removed.

The defect was fixed.

ISL AlwaysOn - Module - Copy to clipboard action fails if user is not in secure context (DEFECT) [ISLCONFPROXY-3292] More

Description
In previous versions copying link/code action failed if not on secure context (HTTPS). This was redesigned and should now work also on HTTP.

The defect was fixed.

ISL Conference Proxy - Core Login - Use linux platform icons as default for device used during login (DEFECT) [ISLCONFPROXY-3298] More

Description
In previous versions when checking Used devices in Device Activity, Ubuntu and iOS icons were not shown. This was now redesigned and correct icons should be shown.

The defect was fixed.

ISL Conference Proxy - Administration - Do not use redundant data in member added success message template (DEFECT) [ISLCONFPROXY-3302] More

Description
In previous versions adding members to user/computer group used redundant data, which triggered JS errors in browser console. This was redesigned, not used data was removed and errors should not be present anymore.

The defect was fixed.

ISL AlwaysOn - Module - Fix double escape of computer description when changing password on v440 (DEFECT) [ISLCONFPROXY-3308] More

Description
In previous version computer description in the modal title was additionally escaped when using webversion v440. This was now redesigned and should be correctly displayed.

The defect was fixed.

ISL Conference Proxy - Administration - Fix double escape of username in existing user error on v440 (DEFECT) [ISLCONFPROXY-3309] More

Description
In previous versions username was double escaped in Administration pages on v440 webversion. This was now redesigned and username should be correctly shown.

The defect was fixed.

ISL Light - Module - Set session heartbeat for terminated sessions on server restart (DEFECT) [ISLCONFPROXY-3310] More

Description
In previous versions ISL Light session heartbeat was not set on server restart, which resulted in clients being unable to reconnect into the same session after server restart. This was redesigned and approximated heartbeat for session is set, based on list of terminated sessions.

The defect was fixed.

ISL Conference Proxy - Administration - Disabled actions tooltips are not shown on Chrome (DEFECT) [ISLCONFPROXY-3315] More

Description
In previous versions disabled action tooltips were not shown on Chrome on webversion v2100. This was redesigned and tooltips should be correctly shown.

The defect was fixed.

ISL Conference Proxy - Administration - Editing of newly added group member fails (DEFECT) [ISLCONFPROXY-3316] More

Description
In previous versions editing of permissions for computer group member that was just added did not work. This was redesigned and editing should work correctly.

The defect was fixed.

ISL AlwaysOn - Module - Computer group name is not correctly escaped (DEFECT) [ISLCONFPROXY-3325] More

Description
In previous versions computer group name was incorrectly inserted into HTML as javascript callback argument and because of this delete action failed with JS error. This was now redesigned and delete action should work as expected.

The defect was fixed.

ISL Conference Proxy - Administration - Audit log data is double escaped (DEFECT) [ISLCONFPROXY-3330] More

Description
In previous versions data in Audit log tab was double escaped. This was redesigned and data should now be correctly displayed.

The defect was fixed.

ISL AlwaysOn - Module - Users and user groups lists does not load additional items when bottom of list is reached (DEFECT) [ISLCONFPROXY-3331] More

Description
In previous versions when sharing group, users list sometimes didn't load all users. This was redesigned and additional items should always be loaded when bottom of list is reached.

The defect was fixed.

ISL Groop - Module - Fix double escape of web conference invite subject (DEFECT) [ISLCONFPROXY-3332] More

Description
In previous versions email for meeting invite showed double escaped characters in subject. This was redesigned and subject should be correctly displayed.

The defect was fixed.

ISL Conference Proxy - Administration - Computer Groups list is not refreshed when tab is reloaded (DEFECT) [ISLCONFPROXY-3334] More

Description
In previous versions computer group list was not refreshed when tab is reloaded, which sometimes resulted in obsolete data shown. This was redesigned and results are always reloaded when reloading tabs.

The defect was fixed.

ISL Conference Proxy - Core - Exe generator do not use unpackcache files in global cache (DEFECT) [ISLCONFPROXY-3337] More

Description
In previous versions generation of executable file could fail, when two program files had same static files and one of programs was deleted, as it could select the deleted one. This was redesigned and generation of executable should be successful.

The defect was fixed.

ISL Conference Proxy - Reports - Show "Reset" button (DEFECT) [ISLCONFPROXY-3361] More

Description
In previous version button "Reset" to reset selected columns in Reports pages was not displayed, because it matched CSS selector to hide elements. This was redesigned and button should be correctly displayed.

The defect was fixed.

ISL AlwaysOn - Module - Add "hide_gui" and "_md5" to safe arguments (DEFECT) [ISLCONFPROXY-3371] More

Description
Following cmdline arguments were added to allowed arguments for ISL AlwaysOn:

__ISL Network Start__hide_gui

password_md5

grant_password_md5

They should no longer be reported in "allowed unsafe program args".