You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@guacamole.apache.org by mike-jumper <gi...@git.apache.org> on 2019/01/04 20:16:58 UTC
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
GitHub user mike-jumper opened a pull request:
https://github.com/apache/guacamole-website/pull/64
Add draft release notes for first RC of 1.0.0.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/mike-jumper/guacamole-website draft-1.0.0-RC1
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/guacamole-website/pull/64.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #64
----
commit 04444fc74a5a7e661ca34caa88087eedb32e8717
Author: Michael Jumper <mj...@...>
Date: 2018-12-10T07:08:05Z
Add draft release notes for first RC of 1.0.0.
commit b06f4f88ca18525a7d86057d1cf147f0a2d020f5
Author: Nick Couchman <ni...@...>
Date: 2019-01-01T19:32:33Z
Update draft release notes for 1.0.0-RC1
commit 6f785e121b845dc9482e67f6bc8e0d9894c4bccc
Author: Michael Jumper <mj...@...>
Date: 2019-01-02T09:02:50Z
Clarify wording of draft 1.0.0 release notes, fix typos.
commit 26d79b03a48b321079ae196d6de9a82413528b22
Author: Michael Jumper <mj...@...>
Date: 2019-01-04T18:42:20Z
Add links to documentation where applicable.
commit c165e3c23f2448f4897f1ad089ba742125df4c0a
Author: Michael Jumper <mj...@...>
Date: 2019-01-04T19:51:18Z
Add remaining descriptions of changes in 1.0.0.
commit de832ea8f8c28619b01ca3c2023f525d75be31b4
Author: Michael Jumper <mj...@...>
Date: 2019-01-04T20:02:57Z
The "known_hosts" file is called "ssh_known_hosts" within GUACAMOLE_HOME.
commit 72a711c945172ed118d0c908dcbd8a2e8504d021
Author: Michael Jumper <mj...@...>
Date: 2019-01-04T20:16:17Z
Add additional links to documentation where relevant to 1.0.0 changes.
----
---
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
Posted by necouchman <gi...@git.apache.org>.
Github user necouchman commented on a diff in the pull request:
https://github.com/apache/guacamole-website/pull/64#discussion_r245422397
--- Diff: _releases/1.0.0.md ---
@@ -0,0 +1,805 @@
+---
+
+released: false
+title: 1.0.0
+date: 2018-12-20 22:00:00 -0800
+summary: >
+ User groups, improved clipboard integration, TOTP (Google Authenticator),
+ RADIUS, dead keys.
+
+artifact-root: "https://dist.apache.org/repos/dist/dev/"
+checksum-root: "https://dist.apache.org/repos/dist/dev/"
+download-path: "guacamole/1.0.0-RC1/"
+
+source-dist:
+ - "source/guacamole-client-1.0.0.tar.gz"
+ - "source/guacamole-server-1.0.0.tar.gz"
+
+binary-dist:
+ - "binary/guacamole-1.0.0.war"
+ - "binary/guacamole-auth-cas-1.0.0.tar.gz"
+ - "binary/guacamole-auth-duo-1.0.0.tar.gz"
+ - "binary/guacamole-auth-header-1.0.0.tar.gz"
+ - "binary/guacamole-auth-jdbc-1.0.0.tar.gz"
+ - "binary/guacamole-auth-ldap-1.0.0.tar.gz"
+ - "binary/guacamole-auth-openid-1.0.0.tar.gz"
+ - "binary/guacamole-auth-quickconnect-1.0.0.tar.gz"
+ - "binary/guacamole-auth-totp-1.0.0.tar.gz"
+
+documentation:
+ "Manual" : "/doc/1.0.0/gug"
+ "guacamole-common" : "/doc/1.0.0/guacamole-common"
+ "guacamole-common-js" : "/doc/1.0.0/guacamole-common-js"
+ "guacamole-ext" : "/doc/1.0.0/guacamole-ext"
+ "libguac" : "/doc/1.0.0/libguac"
+
+---
+
+The 1.0.0 release features support for user groups, improved clipboard
+integration leveraging the Asynchronous Clipboard API, as well as support for
+TOTP (Google Authenticator), RADIUS, and dead keys.
+
+**This release contains changes which break compatibility with past releases.**
+Please see the [deprecation / compatibility
+notes](#deprecation--compatibility-notes) section for more information.
+
+
+New features and improvements
+-----------------------------
+
+### Support for user groups
+
+Guacamole now supports [granting permissions based on group
+membership](/doc/1.0.0/gug/administration.html#user-group-management). While
+this has been supported to a degree for some time via LDAP and the `seeAlso`
+attribute, groups can now be defined and used within a database, with LDAP and
+a database combined, or within other extensions using Guacamole's extension
+API.
+
+ * [GUACAMOLE-220](https://issues.apache.org/jira/browse/GUACAMOLE-220) - Implement user groups
+
+### Clipboard integration with the Asynchronous Clipboard API
+
+For browsers which implement the [Asynchronous Clipboard
+API](https://www.w3.org/TR/clipboard-apis/#async-clipboard-api), Guacamole will
+now automatically synchronize the local and remote clipboards. Users will be
+prompted to grant clipboard access upon opening Guacamole, and Guacamole will
+synchronize the clipboard if access is granted.
+
+This API [has been implemented in Google Chrome since version
+66](https://developers.google.com/web/updates/2018/03/clipboardapi), and other
+browsers will likely follow suit. The legacy synchronous clipboard API will
+continue to be used as a fallback for browsers that support clipboard access
+but lack support for the newer API (Internet Explorer).
+
+ * [GUACAMOLE-559](https://issues.apache.org/jira/browse/GUACAMOLE-559) - Add support for the new Asynchronous Clipboard API
+
+### Multi-factor authentication with Google Authenticator / TOTP
+
+Guacamole now has support for TOTP as an additional authentication factor.
+TOTP ([Time-based One-Time Password](https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm))
+is a [standardized algorithm](https://tools.ietf.org/html/rfc6238) used for
+multi-factor authentication. With this new support, Guacamole may be used with
+any application or authentication device which supports the TOTP standard,
+including the popular Google Authenticator.
+
+ * [GUACAMOLE-96](https://issues.apache.org/jira/browse/GUACAMOLE-96) - Two factor authentication with Google Authenticator
+
+### Support for RADIUS authentication
+
+RADIUS support has been added, allowing Guacamole to delegate authentication to
+a RADIUS service like FreeRADIUS for validating credentials, enforcing multiple
+authentication factors, etc.
+
+Because the RADIUS library used by this support is licensed under the LGPL, a
+convenience binary for this extension is not provided. If you wish to use the
+RADIUS support, you will need to [build guacamole-client from
+source](/doc/1.0.0/gug/installing-guacamole.html) and explicitly enable that
+part of the build with `-P`:
+
+ mvn package -Plgpl-extensions
+
+Instructions for building this support are [provided in the
+manual](/doc/1.0.0/gug/radius-auth.html).
+
+ * [GUACAMOLE-197](https://issues.apache.org/jira/browse/GUACAMOLE-197) - Implement Support for RADIUS Authentication
+
+### Support for creating ad-hoc connections
+
+An extension is now provided which allows users to create arbitrary, temporary
+connections through entering a URL. This ability can be quite convenient, as
+users need not create new connections through the administrative interface in
+order to quickly access a particular machine.
+
+Be sure you understand the [security implications of providing this level of
+access](/doc/1.0.0/gug/adhoc-connections.html). A Guacamole connection
+implicitly has network and filesystem access to the Guacamole server, thus
+providing this ability is equivalent to granting your users those privileges.
+
+ * [GUACAMOLE-38](https://issues.apache.org/jira/browse/GUACAMOLE-38) - On-Demand connection
+
+### Improved keyboard handling / Support for dead keys
+
+Multiple improvements have been made to keyboard handling, including bug fixes
+for Mac and iOS and support for dead keys.
+
+ * [GUACAMOLE-161](https://issues.apache.org/jira/browse/GUACAMOLE-161) - Handle CapsLock events properly on Mac OS
+ * [GUACAMOLE-232](https://issues.apache.org/jira/browse/GUACAMOLE-232) - Stuck keys iPad/Bluetooth keyboard (Return/Backspace/Space)
+ * [GUACAMOLE-352](https://issues.apache.org/jira/browse/GUACAMOLE-352) - Add support for dead keys
+ * [GUACAMOLE-447](https://issues.apache.org/jira/browse/GUACAMOLE-447) - Certain keys fail for external keyboards on iOS Safari
+
+### Automatic connection behavior
+
+Guacamole will automatically connect upon login for users that have access to
+only a single connection, skipping the home screen. This feature has been
+tweaked slightly so that it applies only to non-administrative users. Users
+with access to Guacamole's administrative interface will now see the home
+screen and not automatically connected.
--- End diff --
Suggest tweaking this language slightly:
...screen and will not be automatically connected.
---
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
Posted by mike-jumper <gi...@git.apache.org>.
Github user mike-jumper commented on a diff in the pull request:
https://github.com/apache/guacamole-website/pull/64#discussion_r245442909
--- Diff: _releases/1.0.0.md ---
@@ -0,0 +1,805 @@
+---
+
+released: false
+title: 1.0.0
+date: 2018-12-20 22:00:00 -0800
+summary: >
+ User groups, improved clipboard integration, TOTP (Google Authenticator),
+ RADIUS, dead keys.
+
+artifact-root: "https://dist.apache.org/repos/dist/dev/"
+checksum-root: "https://dist.apache.org/repos/dist/dev/"
+download-path: "guacamole/1.0.0-RC1/"
+
+source-dist:
+ - "source/guacamole-client-1.0.0.tar.gz"
+ - "source/guacamole-server-1.0.0.tar.gz"
+
+binary-dist:
+ - "binary/guacamole-1.0.0.war"
+ - "binary/guacamole-auth-cas-1.0.0.tar.gz"
+ - "binary/guacamole-auth-duo-1.0.0.tar.gz"
+ - "binary/guacamole-auth-header-1.0.0.tar.gz"
+ - "binary/guacamole-auth-jdbc-1.0.0.tar.gz"
+ - "binary/guacamole-auth-ldap-1.0.0.tar.gz"
+ - "binary/guacamole-auth-openid-1.0.0.tar.gz"
+ - "binary/guacamole-auth-quickconnect-1.0.0.tar.gz"
+ - "binary/guacamole-auth-totp-1.0.0.tar.gz"
+
+documentation:
+ "Manual" : "/doc/1.0.0/gug"
+ "guacamole-common" : "/doc/1.0.0/guacamole-common"
+ "guacamole-common-js" : "/doc/1.0.0/guacamole-common-js"
+ "guacamole-ext" : "/doc/1.0.0/guacamole-ext"
+ "libguac" : "/doc/1.0.0/libguac"
+
+---
+
+The 1.0.0 release features support for user groups, improved clipboard
+integration leveraging the Asynchronous Clipboard API, as well as support for
+TOTP (Google Authenticator), RADIUS, and dead keys.
+
+**This release contains changes which break compatibility with past releases.**
+Please see the [deprecation / compatibility
+notes](#deprecation--compatibility-notes) section for more information.
+
+
+New features and improvements
+-----------------------------
+
+### Support for user groups
+
+Guacamole now supports [granting permissions based on group
+membership](/doc/1.0.0/gug/administration.html#user-group-management). While
+this has been supported to a degree for some time via LDAP and the `seeAlso`
+attribute, groups can now be defined and used within a database, with LDAP and
+a database combined, or within other extensions using Guacamole's extension
+API.
+
+ * [GUACAMOLE-220](https://issues.apache.org/jira/browse/GUACAMOLE-220) - Implement user groups
+
+### Clipboard integration with the Asynchronous Clipboard API
+
+For browsers which implement the [Asynchronous Clipboard
+API](https://www.w3.org/TR/clipboard-apis/#async-clipboard-api), Guacamole will
+now automatically synchronize the local and remote clipboards. Users will be
+prompted to grant clipboard access upon opening Guacamole, and Guacamole will
+synchronize the clipboard if access is granted.
+
+This API [has been implemented in Google Chrome since version
+66](https://developers.google.com/web/updates/2018/03/clipboardapi), and other
+browsers will likely follow suit. The legacy synchronous clipboard API will
+continue to be used as a fallback for browsers that support clipboard access
+but lack support for the newer API (Internet Explorer).
+
+ * [GUACAMOLE-559](https://issues.apache.org/jira/browse/GUACAMOLE-559) - Add support for the new Asynchronous Clipboard API
+
+### Multi-factor authentication with Google Authenticator / TOTP
+
+Guacamole now has support for TOTP as an additional authentication factor.
+TOTP ([Time-based One-Time Password](https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm))
+is a [standardized algorithm](https://tools.ietf.org/html/rfc6238) used for
+multi-factor authentication. With this new support, Guacamole may be used with
+any application or authentication device which supports the TOTP standard,
+including the popular Google Authenticator.
+
+ * [GUACAMOLE-96](https://issues.apache.org/jira/browse/GUACAMOLE-96) - Two factor authentication with Google Authenticator
+
+### Support for RADIUS authentication
+
+RADIUS support has been added, allowing Guacamole to delegate authentication to
+a RADIUS service like FreeRADIUS for validating credentials, enforcing multiple
+authentication factors, etc.
+
+Because the RADIUS library used by this support is licensed under the LGPL, a
+convenience binary for this extension is not provided. If you wish to use the
+RADIUS support, you will need to [build guacamole-client from
+source](/doc/1.0.0/gug/installing-guacamole.html) and explicitly enable that
+part of the build with `-P`:
+
+ mvn package -Plgpl-extensions
+
+Instructions for building this support are [provided in the
+manual](/doc/1.0.0/gug/radius-auth.html).
+
+ * [GUACAMOLE-197](https://issues.apache.org/jira/browse/GUACAMOLE-197) - Implement Support for RADIUS Authentication
+
+### Support for creating ad-hoc connections
+
+An extension is now provided which allows users to create arbitrary, temporary
+connections through entering a URL. This ability can be quite convenient, as
+users need not create new connections through the administrative interface in
+order to quickly access a particular machine.
+
+Be sure you understand the [security implications of providing this level of
+access](/doc/1.0.0/gug/adhoc-connections.html). A Guacamole connection
+implicitly has network and filesystem access to the Guacamole server, thus
+providing this ability is equivalent to granting your users those privileges.
+
+ * [GUACAMOLE-38](https://issues.apache.org/jira/browse/GUACAMOLE-38) - On-Demand connection
+
+### Improved keyboard handling / Support for dead keys
+
+Multiple improvements have been made to keyboard handling, including bug fixes
+for Mac and iOS and support for dead keys.
+
+ * [GUACAMOLE-161](https://issues.apache.org/jira/browse/GUACAMOLE-161) - Handle CapsLock events properly on Mac OS
+ * [GUACAMOLE-232](https://issues.apache.org/jira/browse/GUACAMOLE-232) - Stuck keys iPad/Bluetooth keyboard (Return/Backspace/Space)
+ * [GUACAMOLE-352](https://issues.apache.org/jira/browse/GUACAMOLE-352) - Add support for dead keys
+ * [GUACAMOLE-447](https://issues.apache.org/jira/browse/GUACAMOLE-447) - Certain keys fail for external keyboards on iOS Safari
+
+### Automatic connection behavior
+
+Guacamole will automatically connect upon login for users that have access to
+only a single connection, skipping the home screen. This feature has been
+tweaked slightly so that it applies only to non-administrative users. Users
+with access to Guacamole's administrative interface will now see the home
+screen and not automatically connected.
+
+ * [GUACAMOLE-508](https://issues.apache.org/jira/browse/GUACAMOLE-508) - Automatically connect only if user lacks access to settings
+
+### Support for renaming RDP drive and printer
+
+By default, the filesystem and printer made available within RDP connections
+are named "Guacamole Filesystem" and "Guacamole Printer" respectively. Support
+has been added to override these names with [the `drive-name` and
+`printer-name`
+parameters](/doc/1.0.0/gug/configuring-guacamole.html#rdp-device-redirection)
+respectively.
+
+ * [GUACAMOLE-445](https://issues.apache.org/jira/browse/GUACAMOLE-445) - Allow RDP printer name to be configured
+ * [GUACAMOLE-446](https://issues.apache.org/jira/browse/GUACAMOLE-446) - Allow RDP drive name to be configured
+ * [GUACAMOLE-523](https://issues.apache.org/jira/browse/GUACAMOLE-523) - Use client_name for redirected devices
+
+### Configurable terminal color schemes
+
+The Guacamole terminal now allows for finer control of terminal color
+schemes by allowing for the individual colors of a scheme to be customized
+through [the existing `color-scheme`
+parameter](/doc/1.0.0/gug/configuring-guacamole.html#ssh-display-settings). The
+behavior of this parameter is the same for both SSH and telnet.
+
+ * [GUACAMOLE-470](https://issues.apache.org/jira/browse/GUACAMOLE-470) - Make individual terminal colors configurable through "color-scheme" parameter
+
+### Optional recording of input events
+
+Guacamole has supported session recording for quite some time, but did not
+record input events (mouse movement/clicks, keyboard input, etc.). This meant
+that the mouse cursor could not be rendered in recording playback (as the mouse
+position information from mouse events was not included) and session recording
+could not be used for some auditing purposes that required logging of key
+events.
+
+Options are now available for capturing input events during session
+recording. For security and privacy reasons, only mouse events are captured
+within session recordings by default. Capture of keyboard events can be
+manually enabled, and capture of mouse events can be manually disabled.
+
+ * [GUACAMOLE-313](https://issues.apache.org/jira/browse/GUACAMOLE-313) - Allow input events within session recording
+
+### SSH host key verification
+
+SSH host key verification is now implemented and can be enabled and configured
+within Guacamole. In the past, Guacamole has not performed any SSH host key
+checking, and version 1.0.0 introduces this capability.
+
+For compatibility with past releases, this functionality is still disabled by
+default. If known host keys are not provided, Guacamole will continue to behave
+as it has in the past and will allow the connection to succeed, though a
+warning will be logged.
+
+If host keys *are* provided (either in [an `ssh_known_hosts` file within the
+`GUACAMOLE_HOME` directory](/doc/1.0.0/gug/configuring-guacamole.html#ssh-host-verification)
+on the server running guacd, or by passing [the `host-key`
+parameter](/doc/1.0.0/gug/configuring-guacamole.html#ssh-network-parameters) to
+the connection with the key of the specific server), host checking will be
+strictly enforced and the connection will only succeed if the host matches.
--- End diff --
Alrighty. Correction made.
---
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
Posted by necouchman <gi...@git.apache.org>.
Github user necouchman commented on a diff in the pull request:
https://github.com/apache/guacamole-website/pull/64#discussion_r245422999
--- Diff: _releases/1.0.0.md ---
@@ -0,0 +1,805 @@
+---
+
+released: false
+title: 1.0.0
+date: 2018-12-20 22:00:00 -0800
+summary: >
+ User groups, improved clipboard integration, TOTP (Google Authenticator),
+ RADIUS, dead keys.
+
+artifact-root: "https://dist.apache.org/repos/dist/dev/"
+checksum-root: "https://dist.apache.org/repos/dist/dev/"
+download-path: "guacamole/1.0.0-RC1/"
+
+source-dist:
+ - "source/guacamole-client-1.0.0.tar.gz"
+ - "source/guacamole-server-1.0.0.tar.gz"
+
+binary-dist:
+ - "binary/guacamole-1.0.0.war"
+ - "binary/guacamole-auth-cas-1.0.0.tar.gz"
+ - "binary/guacamole-auth-duo-1.0.0.tar.gz"
+ - "binary/guacamole-auth-header-1.0.0.tar.gz"
+ - "binary/guacamole-auth-jdbc-1.0.0.tar.gz"
+ - "binary/guacamole-auth-ldap-1.0.0.tar.gz"
+ - "binary/guacamole-auth-openid-1.0.0.tar.gz"
+ - "binary/guacamole-auth-quickconnect-1.0.0.tar.gz"
+ - "binary/guacamole-auth-totp-1.0.0.tar.gz"
+
+documentation:
+ "Manual" : "/doc/1.0.0/gug"
+ "guacamole-common" : "/doc/1.0.0/guacamole-common"
+ "guacamole-common-js" : "/doc/1.0.0/guacamole-common-js"
+ "guacamole-ext" : "/doc/1.0.0/guacamole-ext"
+ "libguac" : "/doc/1.0.0/libguac"
+
+---
+
+The 1.0.0 release features support for user groups, improved clipboard
+integration leveraging the Asynchronous Clipboard API, as well as support for
+TOTP (Google Authenticator), RADIUS, and dead keys.
+
+**This release contains changes which break compatibility with past releases.**
+Please see the [deprecation / compatibility
+notes](#deprecation--compatibility-notes) section for more information.
+
+
+New features and improvements
+-----------------------------
+
+### Support for user groups
+
+Guacamole now supports [granting permissions based on group
+membership](/doc/1.0.0/gug/administration.html#user-group-management). While
+this has been supported to a degree for some time via LDAP and the `seeAlso`
+attribute, groups can now be defined and used within a database, with LDAP and
+a database combined, or within other extensions using Guacamole's extension
+API.
+
+ * [GUACAMOLE-220](https://issues.apache.org/jira/browse/GUACAMOLE-220) - Implement user groups
+
+### Clipboard integration with the Asynchronous Clipboard API
+
+For browsers which implement the [Asynchronous Clipboard
+API](https://www.w3.org/TR/clipboard-apis/#async-clipboard-api), Guacamole will
+now automatically synchronize the local and remote clipboards. Users will be
+prompted to grant clipboard access upon opening Guacamole, and Guacamole will
+synchronize the clipboard if access is granted.
+
+This API [has been implemented in Google Chrome since version
+66](https://developers.google.com/web/updates/2018/03/clipboardapi), and other
+browsers will likely follow suit. The legacy synchronous clipboard API will
+continue to be used as a fallback for browsers that support clipboard access
+but lack support for the newer API (Internet Explorer).
+
+ * [GUACAMOLE-559](https://issues.apache.org/jira/browse/GUACAMOLE-559) - Add support for the new Asynchronous Clipboard API
+
+### Multi-factor authentication with Google Authenticator / TOTP
+
+Guacamole now has support for TOTP as an additional authentication factor.
+TOTP ([Time-based One-Time Password](https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm))
+is a [standardized algorithm](https://tools.ietf.org/html/rfc6238) used for
+multi-factor authentication. With this new support, Guacamole may be used with
+any application or authentication device which supports the TOTP standard,
+including the popular Google Authenticator.
+
+ * [GUACAMOLE-96](https://issues.apache.org/jira/browse/GUACAMOLE-96) - Two factor authentication with Google Authenticator
+
+### Support for RADIUS authentication
+
+RADIUS support has been added, allowing Guacamole to delegate authentication to
+a RADIUS service like FreeRADIUS for validating credentials, enforcing multiple
+authentication factors, etc.
+
+Because the RADIUS library used by this support is licensed under the LGPL, a
+convenience binary for this extension is not provided. If you wish to use the
+RADIUS support, you will need to [build guacamole-client from
+source](/doc/1.0.0/gug/installing-guacamole.html) and explicitly enable that
+part of the build with `-P`:
+
+ mvn package -Plgpl-extensions
+
+Instructions for building this support are [provided in the
+manual](/doc/1.0.0/gug/radius-auth.html).
+
+ * [GUACAMOLE-197](https://issues.apache.org/jira/browse/GUACAMOLE-197) - Implement Support for RADIUS Authentication
+
+### Support for creating ad-hoc connections
+
+An extension is now provided which allows users to create arbitrary, temporary
+connections through entering a URL. This ability can be quite convenient, as
+users need not create new connections through the administrative interface in
+order to quickly access a particular machine.
+
+Be sure you understand the [security implications of providing this level of
+access](/doc/1.0.0/gug/adhoc-connections.html). A Guacamole connection
+implicitly has network and filesystem access to the Guacamole server, thus
+providing this ability is equivalent to granting your users those privileges.
+
+ * [GUACAMOLE-38](https://issues.apache.org/jira/browse/GUACAMOLE-38) - On-Demand connection
+
+### Improved keyboard handling / Support for dead keys
+
+Multiple improvements have been made to keyboard handling, including bug fixes
+for Mac and iOS and support for dead keys.
+
+ * [GUACAMOLE-161](https://issues.apache.org/jira/browse/GUACAMOLE-161) - Handle CapsLock events properly on Mac OS
+ * [GUACAMOLE-232](https://issues.apache.org/jira/browse/GUACAMOLE-232) - Stuck keys iPad/Bluetooth keyboard (Return/Backspace/Space)
+ * [GUACAMOLE-352](https://issues.apache.org/jira/browse/GUACAMOLE-352) - Add support for dead keys
+ * [GUACAMOLE-447](https://issues.apache.org/jira/browse/GUACAMOLE-447) - Certain keys fail for external keyboards on iOS Safari
+
+### Automatic connection behavior
+
+Guacamole will automatically connect upon login for users that have access to
+only a single connection, skipping the home screen. This feature has been
+tweaked slightly so that it applies only to non-administrative users. Users
+with access to Guacamole's administrative interface will now see the home
+screen and not automatically connected.
+
+ * [GUACAMOLE-508](https://issues.apache.org/jira/browse/GUACAMOLE-508) - Automatically connect only if user lacks access to settings
+
+### Support for renaming RDP drive and printer
+
+By default, the filesystem and printer made available within RDP connections
+are named "Guacamole Filesystem" and "Guacamole Printer" respectively. Support
+has been added to override these names with [the `drive-name` and
+`printer-name`
+parameters](/doc/1.0.0/gug/configuring-guacamole.html#rdp-device-redirection)
+respectively.
+
+ * [GUACAMOLE-445](https://issues.apache.org/jira/browse/GUACAMOLE-445) - Allow RDP printer name to be configured
+ * [GUACAMOLE-446](https://issues.apache.org/jira/browse/GUACAMOLE-446) - Allow RDP drive name to be configured
+ * [GUACAMOLE-523](https://issues.apache.org/jira/browse/GUACAMOLE-523) - Use client_name for redirected devices
+
+### Configurable terminal color schemes
+
+The Guacamole terminal now allows for finer control of terminal color
+schemes by allowing for the individual colors of a scheme to be customized
+through [the existing `color-scheme`
+parameter](/doc/1.0.0/gug/configuring-guacamole.html#ssh-display-settings). The
+behavior of this parameter is the same for both SSH and telnet.
+
+ * [GUACAMOLE-470](https://issues.apache.org/jira/browse/GUACAMOLE-470) - Make individual terminal colors configurable through "color-scheme" parameter
+
+### Optional recording of input events
+
+Guacamole has supported session recording for quite some time, but did not
+record input events (mouse movement/clicks, keyboard input, etc.). This meant
+that the mouse cursor could not be rendered in recording playback (as the mouse
+position information from mouse events was not included) and session recording
+could not be used for some auditing purposes that required logging of key
+events.
+
+Options are now available for capturing input events during session
+recording. For security and privacy reasons, only mouse events are captured
+within session recordings by default. Capture of keyboard events can be
+manually enabled, and capture of mouse events can be manually disabled.
+
+ * [GUACAMOLE-313](https://issues.apache.org/jira/browse/GUACAMOLE-313) - Allow input events within session recording
+
+### SSH host key verification
+
+SSH host key verification is now implemented and can be enabled and configured
+within Guacamole. In the past, Guacamole has not performed any SSH host key
+checking, and version 1.0.0 introduces this capability.
+
+For compatibility with past releases, this functionality is still disabled by
+default. If known host keys are not provided, Guacamole will continue to behave
+as it has in the past and will allow the connection to succeed, though a
+warning will be logged.
+
+If host keys *are* provided (either in [an `ssh_known_hosts` file within the
+`GUACAMOLE_HOME` directory](/doc/1.0.0/gug/configuring-guacamole.html#ssh-host-verification)
+on the server running guacd, or by passing [the `host-key`
+parameter](/doc/1.0.0/gug/configuring-guacamole.html#ssh-network-parameters) to
+the connection with the key of the specific server), host checking will be
+strictly enforced and the connection will only succeed if the host matches.
--- End diff --
Suggested tweak:
...if the host key matches.
---
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
Posted by asfgit <gi...@git.apache.org>.
Github user asfgit closed the pull request at:
https://github.com/apache/guacamole-website/pull/64
---
[GitHub] guacamole-website pull request #64: Add draft release notes for first RC of ...
Posted by mike-jumper <gi...@git.apache.org>.
Github user mike-jumper commented on a diff in the pull request:
https://github.com/apache/guacamole-website/pull/64#discussion_r245442866
--- Diff: _releases/1.0.0.md ---
@@ -0,0 +1,805 @@
+---
+
+released: false
+title: 1.0.0
+date: 2018-12-20 22:00:00 -0800
+summary: >
+ User groups, improved clipboard integration, TOTP (Google Authenticator),
+ RADIUS, dead keys.
+
+artifact-root: "https://dist.apache.org/repos/dist/dev/"
+checksum-root: "https://dist.apache.org/repos/dist/dev/"
+download-path: "guacamole/1.0.0-RC1/"
+
+source-dist:
+ - "source/guacamole-client-1.0.0.tar.gz"
+ - "source/guacamole-server-1.0.0.tar.gz"
+
+binary-dist:
+ - "binary/guacamole-1.0.0.war"
+ - "binary/guacamole-auth-cas-1.0.0.tar.gz"
+ - "binary/guacamole-auth-duo-1.0.0.tar.gz"
+ - "binary/guacamole-auth-header-1.0.0.tar.gz"
+ - "binary/guacamole-auth-jdbc-1.0.0.tar.gz"
+ - "binary/guacamole-auth-ldap-1.0.0.tar.gz"
+ - "binary/guacamole-auth-openid-1.0.0.tar.gz"
+ - "binary/guacamole-auth-quickconnect-1.0.0.tar.gz"
+ - "binary/guacamole-auth-totp-1.0.0.tar.gz"
+
+documentation:
+ "Manual" : "/doc/1.0.0/gug"
+ "guacamole-common" : "/doc/1.0.0/guacamole-common"
+ "guacamole-common-js" : "/doc/1.0.0/guacamole-common-js"
+ "guacamole-ext" : "/doc/1.0.0/guacamole-ext"
+ "libguac" : "/doc/1.0.0/libguac"
+
+---
+
+The 1.0.0 release features support for user groups, improved clipboard
+integration leveraging the Asynchronous Clipboard API, as well as support for
+TOTP (Google Authenticator), RADIUS, and dead keys.
+
+**This release contains changes which break compatibility with past releases.**
+Please see the [deprecation / compatibility
+notes](#deprecation--compatibility-notes) section for more information.
+
+
+New features and improvements
+-----------------------------
+
+### Support for user groups
+
+Guacamole now supports [granting permissions based on group
+membership](/doc/1.0.0/gug/administration.html#user-group-management). While
+this has been supported to a degree for some time via LDAP and the `seeAlso`
+attribute, groups can now be defined and used within a database, with LDAP and
+a database combined, or within other extensions using Guacamole's extension
+API.
+
+ * [GUACAMOLE-220](https://issues.apache.org/jira/browse/GUACAMOLE-220) - Implement user groups
+
+### Clipboard integration with the Asynchronous Clipboard API
+
+For browsers which implement the [Asynchronous Clipboard
+API](https://www.w3.org/TR/clipboard-apis/#async-clipboard-api), Guacamole will
+now automatically synchronize the local and remote clipboards. Users will be
+prompted to grant clipboard access upon opening Guacamole, and Guacamole will
+synchronize the clipboard if access is granted.
+
+This API [has been implemented in Google Chrome since version
+66](https://developers.google.com/web/updates/2018/03/clipboardapi), and other
+browsers will likely follow suit. The legacy synchronous clipboard API will
+continue to be used as a fallback for browsers that support clipboard access
+but lack support for the newer API (Internet Explorer).
+
+ * [GUACAMOLE-559](https://issues.apache.org/jira/browse/GUACAMOLE-559) - Add support for the new Asynchronous Clipboard API
+
+### Multi-factor authentication with Google Authenticator / TOTP
+
+Guacamole now has support for TOTP as an additional authentication factor.
+TOTP ([Time-based One-Time Password](https://en.wikipedia.org/wiki/Time-based_One-time_Password_algorithm))
+is a [standardized algorithm](https://tools.ietf.org/html/rfc6238) used for
+multi-factor authentication. With this new support, Guacamole may be used with
+any application or authentication device which supports the TOTP standard,
+including the popular Google Authenticator.
+
+ * [GUACAMOLE-96](https://issues.apache.org/jira/browse/GUACAMOLE-96) - Two factor authentication with Google Authenticator
+
+### Support for RADIUS authentication
+
+RADIUS support has been added, allowing Guacamole to delegate authentication to
+a RADIUS service like FreeRADIUS for validating credentials, enforcing multiple
+authentication factors, etc.
+
+Because the RADIUS library used by this support is licensed under the LGPL, a
+convenience binary for this extension is not provided. If you wish to use the
+RADIUS support, you will need to [build guacamole-client from
+source](/doc/1.0.0/gug/installing-guacamole.html) and explicitly enable that
+part of the build with `-P`:
+
+ mvn package -Plgpl-extensions
+
+Instructions for building this support are [provided in the
+manual](/doc/1.0.0/gug/radius-auth.html).
+
+ * [GUACAMOLE-197](https://issues.apache.org/jira/browse/GUACAMOLE-197) - Implement Support for RADIUS Authentication
+
+### Support for creating ad-hoc connections
+
+An extension is now provided which allows users to create arbitrary, temporary
+connections through entering a URL. This ability can be quite convenient, as
+users need not create new connections through the administrative interface in
+order to quickly access a particular machine.
+
+Be sure you understand the [security implications of providing this level of
+access](/doc/1.0.0/gug/adhoc-connections.html). A Guacamole connection
+implicitly has network and filesystem access to the Guacamole server, thus
+providing this ability is equivalent to granting your users those privileges.
+
+ * [GUACAMOLE-38](https://issues.apache.org/jira/browse/GUACAMOLE-38) - On-Demand connection
+
+### Improved keyboard handling / Support for dead keys
+
+Multiple improvements have been made to keyboard handling, including bug fixes
+for Mac and iOS and support for dead keys.
+
+ * [GUACAMOLE-161](https://issues.apache.org/jira/browse/GUACAMOLE-161) - Handle CapsLock events properly on Mac OS
+ * [GUACAMOLE-232](https://issues.apache.org/jira/browse/GUACAMOLE-232) - Stuck keys iPad/Bluetooth keyboard (Return/Backspace/Space)
+ * [GUACAMOLE-352](https://issues.apache.org/jira/browse/GUACAMOLE-352) - Add support for dead keys
+ * [GUACAMOLE-447](https://issues.apache.org/jira/browse/GUACAMOLE-447) - Certain keys fail for external keyboards on iOS Safari
+
+### Automatic connection behavior
+
+Guacamole will automatically connect upon login for users that have access to
+only a single connection, skipping the home screen. This feature has been
+tweaked slightly so that it applies only to non-administrative users. Users
+with access to Guacamole's administrative interface will now see the home
+screen and not automatically connected.
--- End diff --
Good catch. Fixed.
---