General Information
On 18th of May the following was released:
- ISL Conference Proxy 4.4.1816.25 for Windows 32bit (Platform=win32, Revision=48abda8d127205dc13102cb0f6586e04aa744ce5, release_date=2018-05-17, os_version=0x06000000-0x7fffffff)
- ISL Conference Proxy 4.4.1816.25 for Windows 64bit (Platform=win64, Revision=48abda8d127205dc13102cb0f6586e04aa744ce5, release_date=2018-05-17, os_version=0x06000000-0x7fffffff)
- ISL Conference Proxy 4.4.1816.25 for Linux 32bit (Platform=linux, Revision=48abda8d127205dc13102cb0f6586e04aa744ce5, release_date=2018-05-17)
- ISL Conference Proxy 4.4.1816.25 for Linux 64bit (Platform=linux64, Revision=48abda8d127205dc13102cb0f6586e04aa744ce5, release_date=2018-05-17)
Modules
- Authentication 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- Core Login 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- ISL AlwaysOn 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- ISL Groop 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- ISL Light 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- ISL Pronto 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- NTP 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
- PostgreSQL 4.4.1816.25 (release_date=2018-04-17, revision=48abda8d127205dc13102cb0f6586e04aa744ce5)
Translations
- core_login_20180518_20180518_090300.translation
- isl_alwayson_20180518_20180518_090300.translation
- isl_conference_proxy_20180518_20180518_090300.translation
- isl_groop_20180518_20180518_090300.translation
- isl_light_20180518_20180518_090300.translation
- isl_pronto_20180518_20180518_090300.translation
- reports_20180518_20180518_090300.translation
Update availability
All updates, except translations, have release date set to 2018-05-17. Your ESS will need to be same or higher to be able to update your server. This release is available to all countries except Japan.
Upgrading to new version
This are server side updates so hosted service users do not need to do anything.
Server license users please check Upgrading Server License
Improvements
ISL Conference Proxy - Core - Remove Debug > config.json (SPECIAL) [ISLCONFPROXY-1697] More
Description
ISL Conference Proxy config.json was removed from debug panel.
ISL Conference Proxy - Core - Reduce severity level for invalid object privileges (SPECIAL) [ISLCONFPROXY-1724] More
Description
Severity of invalid object privileges error was reduced from "Critical" to "Warning". The log line for this error was also changed so it includes more information ( when error is triggered - during load or during query ).
ISL Conference Proxy - Module Authentication - ldap.exe logs password bind as plaintext (SECURITY) [ISLCONFPROXY-1727] More
Description
LDAP bind password was exposed in plaintext in log by default. LDAP Bind password is now obscured with "*". Use "DEBUGSECURE;1;" to restore old behaviour.
[PREVIEW] ISL AlwaysOn - Module - Client protocol version 9 - headless and native only auth (FEATURE) [ISLALWAYSON-1285] More
Description
Added back-end support for connecting to a remote computer in "headless" mode ( which allows remote tunneling ). The new protocol also allows native authentication on remote computer ( using Windows credentials ).
Flags for this ticket are disabled by default.
[PREVIEW] ISL AlwaysOn - Module - Change ISL AlwaysOn start options text and order (FEATURE) [ISLALWAYSON-1296] More
Description
Connect options for ISL AlwaysOn computer were redesigned. The order of connect options was changed along with the text, making it more understandable for users.
Flags for this ticket are disabled by default.
ISL AlwasyOn - Module - Allow group id in webapi islalwayson/user/grant/ and islalwayson/user/email (FEATURE) [ISLALWAYSON-1306] More
Description
Some of ISL AlwaysOn webapi2 methods accepts group code, but not group id. Group id is obtained when using webapi2 method "utils/groups/query/1". Group id and code are related - code can be used only for granting ISL AlwaysOn access. Two new webapi2 methods were implemented - "islalwayson/user/grant/3" and "islalwayson/user/email/2" that accepts group id to generate ISL AlwaysOn grant blob or join code. Group id can only be used with authenticated user and the user must be a group member.
In previous version, flags for this ticket were disabled by default, but now, they are enabled by default.
ISL Conference Proxy - Core - Improve SMTP send with STARTTLS connection type and auth login (FEATURE) [ISLCONFPROXY-1287] More
Description
ISL Conference Proxy now supports STARTTLS connection type when setting up E-mail with ISL Conference Proxy.
ISL Conference Proxy - Core - Report AKV error lines in mail (FEATURE) [ISLCONFPROXY-1453] More
Description
Added email log reports to ISL Conference Proxy. Setting Logs / Enable mail log reports controls the feature. Every log subsystem has a new mail severity level. Mails with accumulated log lines are sent every 900 seconds. Maximum log line is 2048 bytes and it is truncated with three dots at the end if it's too long. Maximum mail size is 256KB and it is terminated with three dots in case of overflow.
In previous version, flags for this ticket were disabled by default, but now, they are enabled by default.
[PREVIEW] ISL Conference Proxy - Core - Local non-replicated DT tables (FEATURE) [ISLCONFPROXY-1625] More
Description
ISL Conference Proxy now supports local non-replicated DT tables.
Flags for this ticket are disabled by default.
[PREVIEW] ISL Conference Proxy - Core - Module SDK activity log support (FEATURE) [ISLCONFPROXY-1626] More
Description
Record activity log feature (Logs->Record activity) now supports recording activity events from modules, developed with module SDK.
Flags for this ticket are disabled by default.
ISL Conference Proxy - Core - Add 'domain_id' and 'type' columns to group table (FEATURE) [ISLCONFPROXY-1631] More
Description
Added two additional columns to groups tables ( domain_id and type ).
ISL Conference Proxy - Core - Add logs for invalid group data error and invalid privilege data error (FEATURE) [ISLCONFPROXY-1636] More
Description
Added additional logging to ISL Conference Proxy. The log now includes information when groups have empty rights assigned or invalid group id was specified. The log also includes information when invalid privilege for user/domain is set.
ISL Conference Proxy - Core - Module SDK config.json flags support (FEATURE) [ISLCONFPROXY-1642] More
Description
ISL Conference Proxy now supports flag preprocessor in config.json file. This enables adding description and definition of "flag enable/disable" behaviors for flags, that are used within modules, developed with Module SDK.
[PREVIEW] ISL Conference Proxy - Core - Add support for CP-JSONPARSE header for module SDK (FEATURE) [ISLCONFPROXY-1658] More
Description
Support for header CP-JSONPARSE (jsonparse inside X-Islcp-Header) was added to Module SDK web call responses, which is utilized in WebAPI2 and external dialog authenticators
Flags for this ticket are disabled by default.
ISL Conference Proxy - Core - Custom indexes in module SDK (FEATURE) [ISLCONFPROXY-1659] More
Description
Added support for creating custom index in database when using module SDK.
ISL Conference Proxy - Core - DT replicator write logs (FEATURE) [ISLCONFPROXY-1661] More
Description
Added logs when ISL Conference Proxy is performing DT replicator writes in database.
ISL Conference Proxy - Core / Module PostgreSQL - Unify error reporting with AKV logs (FEATURE)[ISLCONFPROXY-1662] More
Description
All error reports are now routed through AKV logs:
- error report emails (ISL Conference Proxy started, etc.) will be logged in log file
- error lines will be logged in log file and sent accumulated by AKV mailer every 15 minutes, GRID aggregated error line reports were removed
- GRID reconnect messages use AKV instead of error lines
- added or improved AKV logs for startup, restart, module load errors
ISL Conference Proxy - Core Login - Improve login dialog logs with client IP and handled/failed event (FEATURE) [ISLCONFPROXY-1664] More
Description
CoreLogin log now includes client IP for each log in request ( successful login, failed login, .. ).
ISL Conference Proxy - Core - User action, incoming and outgoing logs (FEATURE) [ISLCONFPROXY-1665] More
Description
New logs were added for core subsystems. Log settings with special naming are sorted to the top:
- (user action) - important actions caused directly by user
- (incoming) - transport layers closely related to user actions, ICP receives request
- (outgoing) - transport layers closely related to user actions, ICP sends request to other external server
Log settings with (deprecated) are sorted to the bottom.
HTTP tunnel requests on /webaccess are not logged anymore as regular requests, since they use their own not-fully HTTP compliant logic to traverse firewalls. HTTP tunnels always terminate with MUX channel.
ISL Conference Proxy - Core - Limits web hits stats by time (FEATURE) [ISLCONFPROXY-1666] More
Description
Web hits is now limited by time, default is "14d". New setting: "Max. web hit memory log age (1d 2h 3m 4s)"
ISL Conference Proxy - Core - Activity log time and scope limit (FEATURE) [ISLCONFPROXY-1667] More
Description
Added settings to control activity log scope and time limit. The settings were added under Logs section in ISL Conference Proxy administration:
- Limit activity log files (in days) - number of log files that are kept in history (one file per day)
- Enable system activity log - system events (XMLMSG,...)
- Enable admin activity log - admin events ( /conf usage, ... )
- Enable user activity log - all other user events - might contain sensitive data so either disable this setting or set a short general time limit to achieve GDPR compliance
Note - Time limit is implemented as file count limit to prevent accidental data delete if system clock jumps.
ISL Conference Proxy - Core - Module SDK activity log websid as event group ID (FEATURE) [ISLCONFPROXY-1668] More
Description
Activity logs from Module SDK now hold web:session_instance data in "Event group ID" column, which is derived from CPSESSID.
ISL Conference Proxy - Core - Restrict alternative admin accounts to a whitelist of user_ids (FEATURE) [ISLCONFPROXY-1669] More
Description
Administrator account whitelist (user IDs) setting was added in Security as additional protection for admin (/conf) login. Empty whitelist disables the feature. Entering one or more user IDs will create a whitelist of alternative user accounts, that will be granted administrator rights. The accounts will still need the setting "Administrator account: Yes" to be able to login into /conf.
In previous version, flags for this ticket were disabled by default, but now, they are enabled by default.
ISL Conference Proxy - Core - Time based log rotate (FEATURE) [ISLCONFPROXY-1670] More
Description
Time based log rotate was added to ISL Conference Proxy. The setting "Create new log file interval (1d 2h 3m 4s)" was added to Logs section. The default value is set to 1 day. Default values for log file size and log count was changed to ( 7MB * 14 ), limiting the logs by default to 14 days.
[PREVIEW] ISL Conference Proxy - Add user_edit_users_domain setting for use in core_admin module (FEATURE) [ISLCONFPROXY-1672] More
Description
ISL Conference Proxy Security setting was added, which allows user to edit other user inside the same domain.
Flags for this ticket are disabled by default.
ISL Conference Proxy - Core - Reduce debug log settings, turn off by default (FEATURE) [ISLCONFPROXY-1673] More
Description
Legacy debug logs are now disabled by default, only AKV logs are enabled. To enable legacy debug logs again:
- set "Logs > Disable legacy debug logs" to "No" (previously the settings was named "Log only critical events")
- create empty file "force_legacy_debug_log" in ISL Conference Proxy installation directory, which allows debugging of ISL Conference Proxy initialization
Several settings were removed:
- Always log mail sender events
- Subsystem packet generator debug log
- Subsystem bulk files debug log
- Subsystem license debug log
- Subsystem http event submit debug log
- Subsystem web error debug log
- Subsystem load balancer debug log
- Subsystem webapi2 times log
- Subsystem report debug log
ISL Conference Proxy - Core - Data lifecycle support (FEATURE) [ISLCONFPROXY-1681] More
Description
History data lifecycle support was added. Two actions are types available:
- delete history entry based on time
- delete participant IP and GeoIP for authenticated users and clients based on time
Time based policy requires both enabled tracking and max age setting. Delete actions can be performed manually by opening "History report" ( located on ISL Conference Proxy configuration page under Configuration - Data lifecycle) . Automatic delete requires both global "Allow automatic delete" and per action setting to be enabled. Successful NTP sync is needed for automatic delete by default.
Delete is throttled with two settings, by default 100 entries will be deleted every 10 seconds:
- Delete at once count: 100
- Delete interval in seconds: 10
Users can decide to apply deletion on the following history data:
- Login history
- Login history - participant IP and GeoIP for authenticated users
- Login history - Devices - participant IP and GeoIP for authenticated users
- ISL Groop - Sessions - participant IP and GeoIP for authenticated users
- ISL Light - Session history
- ISL Light - Session history - participant IP and GeoIP for authenticated users
- ISL Light - Session history - participant IP and GeoIP for clients
- ISL Pronto - Chat history
- ISL Pronto - Chat history - participant IP and GeoIP for clients
ISL Conference Proxy - Module Core Login - Data lifecycle support (FEATURE) [ISLCONFPROXY-1691] More
Description
Core Login table meta info is registered in data lifecycle API.
ISL Conference Proxy - Module NTP - Report NTP sync to data lifecycle API (FEATURE) [ISLCONFPROXY-1692] More
Description
NTP module now reports sync status to data lifecycle API. NTP sync failures stop automatic delete.
ISL Conference Proxy - Core - History data lifecycle report (FEATURE) [ISLCONFPROXY-1693] More
Description
History data lifecycle report was added to ISL Conference Proxy configuration page under Configuration - Data lifecycle. History report shows affected data that will be deleted based on history data lifecycle policy ( History settings under data lifecycle ). By clicking Apply policy the data shown in the report will be deleted.
ISL Conference Proxy - Core - GRID static registry (FEATURE) [ISLCONFPROXY-1694] More
Description
GRID static registry API was added. Keys are registered in groups on each server at startup time in server config value "grid_static::". Keys are automatically removed when a module that registered them is uninstalled.
ISL Conference Proxy - Core - Show also group name in isl alwayson join box (FEATURE) [ISLCONFPROXY-1699] More
Description
In case access is granted to a group instead of a user, group name is shown among displayed information, when entering grant code in Join page.
ISL Conference Proxy - Core - Automatic PG index for delete triggers (FEATURE) [ISLCONFPROXY-1717] More
Description
Automatic PostgreSQL indexes are created for tables, that have delete trigger installed. They are used for linking delete user account to delete user account data.
ISL Conference Proxy - Core - Associated data lifecycle (FEATURE) [ISLCONFPROXY-1718] More
Description
Associated data lifecycle support was added. Automatic delete of associated data may be enabled when domain or users account is deleted. Tracking must be enabled for delete to be performed. By default, two types of objects will be deleted:
- User account when domain is deleted
- Group when domain is deleted (was not enabled before)
Delete is throttled with two settings, by default 100 entries will be deleted every 10 seconds:
- Delete at once count: 100
- Delete interval in seconds: 10
Users can decide to enable additional automatic deletion when domain/user is deleted:
- Login history when user account is deleted
- ISL Groop sessions when domain is deleted
- ISL Groop sessions when user account is deleted
- ISL Light session history when domain is deleted
- ISL Light session history when user account is deleted
- ISL Pronto chat history when domain is deleted
- ISL Pronto chat history when user account is deleted
Warning: deprecated unthrottled domain=>user delete trigger is still used in database VFS mode. If the number of users per domain and number of VFS servers in GRID is low, there should be not issues.
ISL Conference Proxy - Core - Associated data lifecycle admin GUI (FEATURE) [ISLCONFPROXY-1719] More
Description
Confirmation screen was added to domain and user delete that indicates a preview count of associated data that will be deleted ( based on associated data lifecycle settings ).
ISL Conference Proxy - Core - Associated data delete list internal webapi (FEATURE) [ISLCONFPROXY-1720] More
Description
Added WebAPI2 call "internal/data_lifecycle/associated_data/delete/list/1" that gets associated data that will be deleted when the object is deleted.
ISL Conference Proxy - Module Authentication - Secure stdin passing of parameters instead of args for ldap executable (FEATURE) [ISLCONFPROXY-1721] More
Description
Ldap authenticator now supports passing arguments to the process via stdin. In order to enable this feature a single argument "-" is passed to ldap. Arguments from stdin are terminated with newline.
Example: ./ldap - < test.txt
[PREVIEW] ISL Conference Proxy - Core - Secure stdin passing of parameters instead of args for external authenticators (FEATURE) [ISLCONFPROXY-1722] More
Description
ISL Conference Proxy External authenticator setting now supports secure passing of arguments over standard input stream. Use "-;" after ldap authenticator path argument.
Support for secure passing of process arguments on stdin was added to external authenticator setting. Use "-;" after exe path argument.
Flags for this ticket are disabled by default.
ISL Conference Proxy - Core - crc32 for queue files (FEATURE) [ISLCONFPROXY-1728] More
Description
CRC32 checksum was added to each entry in associated data queue files. Corrupted data is now detected immediately and does not enter ISL Conference Proxy for further processing.
ISL Groop - Module - Data lifecycle support (FEATURE) [ISLGROOP-988] More
Description
ISL Groop session table meta info is registered in data lifecycle API.
ISL Light - Module - Data lifecycle support (FEATURE) [ISLLIGHT-4969] More
Description
ISL Light session table meta info is registered in data lifecycle API.
[PREVIEW] ISL Light - Module - send END signal when desk and client are not connected for more than 30s (FEATURE) [ISLLIGHT-4994] More
Description
Added HTTP event message (EVENT=END) for ISL Light sessions. This event is triggered when session has ended.
Flag for this ticket is disabled by default.
ISL Pronto - Module - Data lifecycle support (FEATURE) [ISLPRONTO-1123] More
Description
ISL Pronto chat history table meta info is registered in data lifecycle API.
[PREVIEW] ISL Conference Proxy - Core - Profile permissions do not inherit correctly (DEFECT) [ISLCONFPROXY-1649] More
Description
Correct permission inheritance is now used for profile permissions (No - deny override was not effective before). Affected profile permissions are: name, nickname, password, email, time zone, last language.
Flags for this ticket are disabled by default.
ISL Conference Proxy - Core Login - Fallback to "en" language in case of missing template (DEFECT) [ISLCONFPROXY-1663] More
Description
In case of missing language template when performing login users may have received "Unexpected internal error". The behavior was changed, in case of missing language the texts will be shown in English thus enabling user to login.
The defect was fixed.
ISL AlwaysOn - Module - Ignore group error when generating group members info (DEFECT) [ISLCONFPROXY-1698] More
Description
In previous release in case a group member was deleted, sharing to group failed due to the error. In the new version in case a group has members that are deleted, those errors are ignored when generating group members info.
The defect was fixed.
[PREVIEW] ISL Conference Proxy - Core - Reorder permissions to match settings (DEFECT) [ISLCONFPROXY-1716] More
Description
Permissions priority list was changed to match settings priority list: "default, grid, server, domain, user". Several features were found to use incorrect priority list because of the difference between permissions and settings, using only "default, server" levels instead of "default, server, grid".
The defect was fixed.
Flags for this ticket are disabled by default.
[PREVIEW] ISL Groop - Module - Profile permissions do not inherit correctly (DEFECT) [ISLGROOP-985] More
Description
Correct permission inheritance is now used for profile permissions (No - deny override was not effective before). Affected profile permissions are: email history, personal image.
Flags for this ticket are disabled by default.
[PREVIEW] ISL Pronto - Module - Profile permissions do not inherit correctly (DEFECT) [ISLPRONTO-1109] More
Description
Correct permission inheritance is now used for profile permissions ({{No - deny override}} was not effective before). Affected profile permissions are: link to photo.
Flags for this ticket are disabled by default.