mike-jumper commented on code in PR #110: URL: https://github.com/apache/guacamole-website/pull/110#discussion_r1105053586
########## _releases/1.5.0.md: ########## @@ -0,0 +1,249 @@ +--- + +released: false +title: 1.5.0 +date: 2023-02-02 08:42:19 -0800 +summary: > + In-app playback of recordings, key vaults, ECC keys, multiple LDAP/AD + servers, shared connection join/leave notifications, bug fixes. + +artifact-url: "https://dist.apache.org/repos/dist/dev/{}"; +checksum-url: "https://dist.apache.org/repos/dist/dev/{}"; +download-path: "guacamole/1.5.0-RC1/" +checksum-suffixes: + "PGP" : ".asc" + "SHA-256" : ".sha256" + +source-dist: + - "source/guacamole-client-1.5.0.tar.gz" + - "source/guacamole-server-1.5.0.tar.gz" + +binary-dist: + - "binary/guacamole-1.5.0.war" + - "binary/guacamole-auth-duo-1.5.0.tar.gz" + - "binary/guacamole-auth-header-1.5.0.tar.gz" + - "binary/guacamole-auth-jdbc-1.5.0.tar.gz" + - "binary/guacamole-auth-json-1.5.0.tar.gz" + - "binary/guacamole-auth-ldap-1.5.0.tar.gz" + - "binary/guacamole-auth-quickconnect-1.5.0.tar.gz" + - "binary/guacamole-auth-sso-1.5.0.tar.gz" + - "binary/guacamole-auth-totp-1.5.0.tar.gz" + - "binary/guacamole-auth-vault-1.5.0.tar.gz" + - "binary/guacamole-history-recording-storage-1.5.0.tar.gz" + +documentation: + "Manual" : "/doc/1.5.0/gug" + "guacamole-common" : "/doc/1.5.0/guacamole-common" + "guacamole-common-js" : "/doc/1.5.0/guacamole-common-js" + "guacamole-ext" : "/doc/1.5.0/guacamole-ext" + "libguac" : "/doc/1.5.0/libguac" + "libguac-terminal" : "/doc/1.5.0/libguac-terminal" + +--- + +The 1.5.0 release features support for in-browser playback of session +recordings, retrieving secrets from key vaults, SSH support for elliptic-curve +cryptography (ECC) keys, and support for authenticating against multiple LDAP +or Active Directory servers. Users also will now automatically receive +notification of users joining a shared connection, including when +administrators join an active connection via the "Active Sessions" screen. + +For a full list of all changes in this release, please see the +[changelog](#changelog). + +**The 1.5.0 release is compatible with older 1.x components.** You should +upgrade older components to 1.5.0 when possible, however things should continue +to work correctly in the interim: + +* Extensions written for older 1.x releases can be used by 1.5.0. +* Components written for the version of the Guacamole protocol used by older + 1.x releases can be used with components of the 1.5.0 release. + +Regardless of inter-component compatibility, **there are changes in 1.5.0 which +may affect downstream users of Guacamole's APIs**. Please see the [deprecation +/ compatibility notes](#deprecation--compatibility-notes) section for more +information. + + +In-application playback of recordings +------------------------------------- +{:#recording-playback} + +Guacamole now supports [playback of session recordings directly within the web +application](/doc/1.5.0/gug/recording-playback.html). An extension is provided +that, if installed, defines a standard location and naming convention for +session recordings that allows those recordings to be associated with +connection history entries: + + + +Any user with sufficient permissions to see those +history entries will then be able to directly open the recording in an +in-browser player by clicking a link next to the history entry in the "History" +screen of the administration interface: + + + +Support for retrieving secrets from key vaults +---------------------------------------------- +{:#key-vaults} + +Secrets for both connection parameters and properties within +`guacamole.properties` can now be [retrieved from key vaults](/doc/1.5.0/gug/vault.html), +with initial support for [Keeper Secrets Manager (KSM)](https://www.keepersecurity.com/secrets-manager.html){:rel="nofollow"}. +Leveraging parameter tokens, the administrator can [configure connections to +automatically pull secrets like passwords or private keys from the vault](/doc/1.5.0/gug/vault.html#automatic-injection-of-secrets-based-on-connection-parameters) +based on the connection's username, the hostname, or other criteria. Custom +tokens can also be defined for arbitrary secrets in the vault. + +Notification when users join a session +-------------------------------------- +{:#share-notification} + +As of 1.5.0, users of a connection that is shared with other users will receive +a notification when those users join the connection, and will see a counter of +the number of other users currently present in the upper-right corner of the +display: + + + +This notification and counter displays both users that have joined due to a +share link and administrators that have joined by clicking on the connection +within the "Active Sessions" screen. Users can at any time hover the mouse over +the counter to see which users are currently present: + + + +SSH support for ECC keys +------------------------ +{:#ecc-keys} + +As long as libssh2 1.9.0 or later is installed, Guacamole supports using +elliptic curve cryptography (ECC) private keys for SSH and SFTP connections, +including keys in OpenSSH format. This support relies on libssh2's support for +the same capability, so the libssh2 version must be at least 1.9.0. If your +distribution does not provide a libssh2 package that is recent enough, you will +need to either [build libssh2 from source](https://www.libssh2.org/) or [use +the `guacamole/guacd` Docker image](/doc/1.5.0/gug/guacamole-docker.html#running-the-guacd-docker-image). + +Multiple LDAP servers +--------------------- +{:#multi-ldap} + +Guacamole can now consider [multiple LDAP or Active Directory servers for +authentication](/doc/1.5.0/gug/ldap-auth.html#using-multiple-ldap-servers), +attempting to authenticate the user against each defined LDAP server until +authentication is successful or no servers remain. + +The specific LDAP server that applies can also be narrowed before trying any +servers at all by using username patterns, if part of the username can +reasonably be used to determine this. An example where this might be the case +would be usernames of the form `DOMAIN\user` or `user@DOMAIN`. + + +Changelog +========= + +### User interface / platform + + * See recordings by clicking on history record ([GUACAMOLE-462](https://issues.apache.org/jira/browse/GUACAMOLE-462)) + * {:.bug} web browser could not play large size of session recording file as 1G size. ([GUACAMOLE-896](https://issues.apache.org/jira/browse/GUACAMOLE-896)) + * {:.bug} Additional permissions from groups do not affect user home screen ([GUACAMOLE-1275](https://issues.apache.org/jira/browse/GUACAMOLE-1275)) + * Alert users when admins connect to their session ([GUACAMOLE-1293](https://issues.apache.org/jira/browse/GUACAMOLE-1293)) + * Allow bundling of library .jar files within extensions ([GUACAMOLE-1508](https://issues.apache.org/jira/browse/GUACAMOLE-1508)) + * Provide better CSS/structural context for branding and theming extensions ([GUACAMOLE-1509](https://issues.apache.org/jira/browse/GUACAMOLE-1509)) + * Automatically trim trailing whitespace from guacamole.properties values ([GUACAMOLE-1511](https://issues.apache.org/jira/browse/GUACAMOLE-1511)) + * {:.bug} Cannot copy/paste into admin fields if local clipboard integration is unavailable ([GUACAMOLE-1523](https://issues.apache.org/jira/browse/GUACAMOLE-1523)) + * {:.bug} SessionRecording "onload" event fires twice ([GUACAMOLE-1545](https://issues.apache.org/jira/browse/GUACAMOLE-1545)) + +### Docker images + + * Docker: Allow configuring Tomcat's RemoteIPValve ([GUACAMOLE-1005](https://issues.apache.org/jira/browse/GUACAMOLE-1005)) + * SAML environment variables ([GUACAMOLE-1322](https://issues.apache.org/jira/browse/GUACAMOLE-1322)) + * Support setting "openid-groups-claim-type" property via Docker environment variable ([GUACAMOLE-1394](https://issues.apache.org/jira/browse/GUACAMOLE-1394)) + * Add support of SQL Server JDBC plugin in Docker Image ([GUACAMOLE-1418](https://issues.apache.org/jira/browse/GUACAMOLE-1418)) + * {:.bug} Docker implementation, The authentication type 10 is not supported. ([GUACAMOLE-1433](https://issues.apache.org/jira/browse/GUACAMOLE-1433)) + * Make api-session-timeout adaptable in Docker([GUACAMOLE-1475](https://issues.apache.org/jira/browse/GUACAMOLE-1475)) + * {:.bug} Fix environment name of GUACD_PORT ([GUACAMOLE-1491](https://issues.apache.org/jira/browse/GUACAMOLE-1491)) + * Enable configuration of of the 'extension-priority' parameter via environment variable ([GUACAMOLE-1507](https://issues.apache.org/jira/browse/GUACAMOLE-1507)) + * "FATAL: No authentication configured" when using the auth-json extension ([GUACAMOLE-1539](https://issues.apache.org/jira/browse/GUACAMOLE-1539)) + * Update libssh2 version within guacd Docker image to fix SSH key extraction problems ([GUACAMOLE-1540](https://issues.apache.org/jira/browse/GUACAMOLE-1540)) + +### Authentication, integration, and storage + + * Support storage of sensitive data within key vaults ([GUACAMOLE-641](https://issues.apache.org/jira/browse/GUACAMOLE-641)) + * Add support for querying multiple LDAP servers ([GUACAMOLE-957](https://issues.apache.org/jira/browse/GUACAMOLE-957)) + * {:.bug} SSL communication by mariadb connector/J is not possible ([GUACAMOLE-1453](https://issues.apache.org/jira/browse/GUACAMOLE-1453)) + +### Protocol support / guacd + + * Add support for OpenSSH private key format ([GUACAMOLE-745](https://issues.apache.org/jira/browse/GUACAMOLE-745)) + * Add support for ED25519 SSH keys ([GUACAMOLE-746](https://issues.apache.org/jira/browse/GUACAMOLE-746)) + * {:.bug} RDP "reconnect" resizing breaks RDPDR ([GUACAMOLE-876](https://issues.apache.org/jira/browse/GUACAMOLE-876)) + * {:.bug} RDP print process may hang ([GUACAMOLE-1115](https://issues.apache.org/jira/browse/GUACAMOLE-1115)) + * {:.bug} An improper locking bug(e.g., resource leak) due to unreleased lock ([GUACAMOLE-1416](https://issues.apache.org/jira/browse/GUACAMOLE-1416)) Review Comment: True - I'll fix that. These were just automatically scraped from JIRA. ;) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
