You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@guacamole.apache.org by mj...@apache.org on 2017/01/23 07:29:13 UTC
incubator-guacamole-website git commit: Deploy draft release notes
for 0.9.11-incubating (RC1).
Repository: incubator-guacamole-website
Updated Branches:
refs/heads/asf-site 43af1d755 -> d769e2564
Deploy draft release notes for 0.9.11-incubating (RC1).
Project: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-website/repo
Commit: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-website/commit/d769e256
Tree: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-website/tree/d769e256
Diff: http://git-wip-us.apache.org/repos/asf/incubator-guacamole-website/diff/d769e256
Branch: refs/heads/asf-site
Commit: d769e2564092501b80d42645b901e4bf92023e88
Parents: 43af1d7
Author: Michael Jumper <mj...@apache.org>
Authored: Sun Jan 22 23:28:42 2017 -0800
Committer: Michael Jumper <mj...@apache.org>
Committed: Sun Jan 22 23:28:42 2017 -0800
----------------------------------------------------------------------
content/releases/0.9.11-incubating/index.html | 466 +++++++++++++++++++++
1 file changed, 466 insertions(+)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/incubator-guacamole-website/blob/d769e256/content/releases/0.9.11-incubating/index.html
----------------------------------------------------------------------
diff --git a/content/releases/0.9.11-incubating/index.html b/content/releases/0.9.11-incubating/index.html
new file mode 100644
index 0000000..1b1d360
--- /dev/null
+++ b/content/releases/0.9.11-incubating/index.html
@@ -0,0 +1,466 @@
+<!DOCTYPE html>
+<html xmlns="http://www.w3.org/1999/xhtml">
+
+ <head>
+ <link rel="stylesheet" href="/styles/main.css">
+ <link rel="icon" type="image/png" href="/images/guacamole-logo-64.png"/>
+ <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no, target-densitydpi=device-dpi"/>
+ <meta charset="UTF-8"/>
+ <title>Apache Guacamole (incubating): 0.9.11-incubating</title>
+</head>
+
+
+ <body>
+
+ <!-- Header -->
+<div id="header">
+ <h1><a href="/">Apache Guacamole (incubating)</a></h1>
+ <ul id="navigation" class="menu">
+
+
+
+
+
+
+
+
+
+ <li><a
+
+ href="/releases/"
+
+
+ class="download"
+ >Downloads</a></li>
+
+
+
+ <li><a
+
+ href="https://github.com/search?utf8=%E2%9C%93&q=repo%3Aapache%2Fincubator-guacamole-server+repo%3Aapache%2Fincubator-guacamole-client+repo%3Aapache%2Fincubator-guacamole-website&type=Repositories&ref=searchresults"
+
+
+ class="github"
+ >GitHub</a></li>
+
+
+
+ <li><a
+
+ href="/api-documentation/"
+
+ >API</a></li>
+
+
+
+ <li><a
+
+ href="https://issues.apache.org/jira/browse/GUACAMOLE/"
+
+ >JIRA</a></li>
+
+
+
+ <li><a
+
+ href="/doc/gug/"
+
+ >Manual</a></li>
+
+
+
+ <li><a
+
+ href="/open-source/"
+
+ >Contributing</a></li>
+
+
+
+ <li><a
+
+ href="/support/"
+
+ >Help / Support</a></li>
+
+
+ </ul>
+</div>
+
+
+ <!-- Content -->
+ <div id="page">
+ <div id="content">
+
+ <div class="draft-disclaimer">
+ <p><strong>Apache Guacamole 0.9.11-incubating has not yet been
+ released!</strong> The artifacts and release notes below are drafts for
+ a proposed release of Apache Guacamole which has not yet occurred.</p>
+ </div>
+
+
+<h1>Apache Guacamole 0.9.11-incubating</h1>
+
+<div id="links">
+
+
+
+ <h2>Release documentation</h2>
+
+ <ul>
+
+ <li><a href="/doc/0.9.11-incubating/gug">Manual</a></li>
+
+ <li><a href="/doc/0.9.10-incubating/guacamole-common">guacamole-common</a></li>
+
+ <li><a href="/doc/0.9.10-incubating/guacamole-common-js">guacamole-common-js</a></li>
+
+ <li><a href="/doc/0.9.11-incubating/guacamole-ext">guacamole-ext</a></li>
+
+ <li><a href="/doc/0.9.11-incubating/libguac">libguac</a></li>
+
+ </ul>
+
+
+
+</div>
+
+<p>Apache Guacamole is split into two subprojects: "guacamole-client", the
+HTML5 web application which serves the Guacamole client to users, and
+"guacamole-server", the remote desktop proxy which the web application
+communicates with. The source code for each of these may be downloaded
+below.</p>
+
+<!-- Source archives -->
+<div class="release-downloads">
+
+ <table>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-client-0.9.11-incubating.tar.gz"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-client-0.9.11-incubating.tar.gz'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-client-0.9.11-incubating.tar.gz'
+ )">guacamole-client-0.9.11-incubating.tar.gz</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-client-0.9.11-incubating.tar.gz.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-client-0.9.11-incubating.tar.gz.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-client-0.9.11-incubating.tar.gz.asc">PGP</a> ]</td>
+ </tr>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-server-0.9.11-incubating.tar.gz"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-server-0.9.11-incubating.tar.gz'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-server-0.9.11-incubating.tar.gz'
+ )">guacamole-server-0.9.11-incubating.tar.gz</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-server-0.9.11-incubating.tar.gz.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-server-0.9.11-incubating.tar.gz.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/source/guacamole-server-0.9.11-incubating.tar.gz.asc">PGP</a> ]</td>
+ </tr>
+
+ </table>
+
+
+</div>
+
+<p>If you do not wish to build Apache Guacamole entirely from source, pre-built
+versions of the web application (.war) and all extensions are provided here in
+binary form for convenience. <strong>Please note that guacamole-server must
+still be built and installed from source.</strong></p>
+
+<!-- All binaries -->
+<div class="release-downloads">
+
+ <table>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-0.9.11-incubating.war"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-0.9.11-incubating.war'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-0.9.11-incubating.war'
+ )">guacamole-0.9.11-incubating.war</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-0.9.11-incubating.war.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-0.9.11-incubating.war.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-0.9.11-incubating.war.asc">PGP</a> ]</td>
+ </tr>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-jdbc-0.9.11-incubating.tar.gz"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-auth-jdbc-0.9.11-incubating.tar.gz'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-auth-jdbc-0.9.11-incubating.tar.gz'
+ )">guacamole-auth-jdbc-0.9.11-incubating.tar.gz</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-jdbc-0.9.11-incubating.tar.gz.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-jdbc-0.9.11-incubating.tar.gz.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-jdbc-0.9.11-incubating.tar.gz.asc">PGP</a> ]</td>
+ </tr>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-ldap-0.9.11-incubating.tar.gz"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-auth-ldap-0.9.11-incubating.tar.gz'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-auth-ldap-0.9.11-incubating.tar.gz'
+ )">guacamole-auth-ldap-0.9.11-incubating.tar.gz</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-ldap-0.9.11-incubating.tar.gz.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-ldap-0.9.11-incubating.tar.gz.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-ldap-0.9.11-incubating.tar.gz.asc">PGP</a> ]</td>
+ </tr>
+
+ <tr>
+
+
+
+ <td><a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-noauth-0.9.11-incubating.tar.gz"
+ onclick="trackDownload(
+ 'click',
+ 'guacamole-auth-noauth-0.9.11-incubating.tar.gz'
+ )"
+ oncontextmenu="trackDownload(
+ 'menu',
+ 'guacamole-auth-noauth-0.9.11-incubating.tar.gz'
+ )">guacamole-auth-noauth-0.9.11-incubating.tar.gz</a></td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-noauth-0.9.11-incubating.tar.gz.md5">MD5</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-noauth-0.9.11-incubating.tar.gz.sha">SHA</a> ]</td>
+ <td>[ <a href="https://dist.apache.org/repos/dist/dev/incubator/guacamole/0.9.11-incubating-RC1/binary/guacamole-auth-noauth-0.9.11-incubating.tar.gz.asc">PGP</a> ]</td>
+ </tr>
+
+ </table>
+
+
+</div>
+
+<!-- Release notes -->
+<div id="release-notes">
+ <h1>Release notes</h1>
+ <p>The 0.9.11-incubating release features support for two-factor authentication,
+password policies (complexity rules, preventing password reuse, etc.), and
+the ability to use the Docker images with arbitrary Guacamole extensions, not
+just MySQL, PostgreSQL, and LDAP. If using both a database and LDAP, new
+settings allow you to restrict access to only those users which exist in the
+database, rather than allowing any LDAP user access.</p>
+
+<p><strong>This release contains changes which break compatibility with past releases.</strong>
+Please see the <a href="#deprecation--compatibility-notes">deprecation / compatibility
+notes</a> section for more information.</p>
+
+<h2 id="two-factor-authentication">Two-factor authentication</h2>
+
+<p>Guacamole now provides support for two-factor authentication, and includes
+a new extension which integrates with Duo using their \u201cAuth API\u201d. Users who use
+the Duo authentication service can add Guacamole to their list of applications.
+Once configured, Guacamole will then require confirmation from Duo before
+allowing an otherwise successful authentication attempt to proceed.</p>
+
+<p>With this first implementation of two-factor authentication completed, support
+for other two-factor authentication services is expected to follow.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-136">GUACAMOLE-136</a> - Add support for TFA - initially Duo</li>
+</ul>
+
+<h2 id="password-policies">Password policies</h2>
+
+<p>The database authentication extensions can now be configured to enforce
+password complexity rules, including requiring specific classes of characters,
+disallowing passwords containing the user\u2019s username, and preventing previous
+passwords from being reused. Users can also now be required to change their
+password regularly, or prevented from changing their password too frequently.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-36">GUACAMOLE-36</a> - Add support for password policies</li>
+</ul>
+
+<h2 id="docker-improvements">Docker improvements</h2>
+
+<p>The Guacamole Docker image previously only supported the official MySQL,
+PostgreSQL, and LDAP extensions, with configuration automatically generated
+based on environment variables. No support for deploying other extensions was
+provided. As of 0.9.11-incubating, arbitrary extensions and their configuration
+files can be deployed through providing a template <code class="highlighter-rouge">GUACAMOLE_HOME</code> directory.</p>
+
+<p>The requirement that the Guacamole Docker image be linked to the guacd Docker
+image has also been lifted. Though Guacamole still requires a connection to
+guacd, that connection can now be described using the <code class="highlighter-rouge">GUACD_HOSTNAME</code> and
+<code class="highlighter-rouge">GUACD_PORT</code> environment variables.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-99">GUACAMOLE-99</a> - Do not require Docker link for guacd</li>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-100">GUACAMOLE-100</a> - Support arbitrary extensions within Guacamole Docker image</li>
+</ul>
+
+<h2 id="ldap-improvements">LDAP improvements</h2>
+
+<p>For the common case where Guacamole\u2019s LDAP support is used purely for
+authentication, with an MySQL or PostgreSQL database used to house connection
+data, it is now possible to configure the database authentication extensions
+to reject authentication attempts for users which are not defined in the
+database. For those whose LDAP directories contain many users that will never
+be granted access to Guacamole, these new settings mean that such users can
+be denied access immediately, rather than presenting them with an empty and
+useless Guacamole home screen.</p>
+
+<p>In addition, if your LDAP directory was so extensive that it exceeded the
+default query size limit of 1000 records, the query size limit can now be
+manually increased within <code class="highlighter-rouge">guacamole.properties</code>.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-70">GUACAMOLE-70</a> - Add option to restrict access to users within database</li>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-79">GUACAMOLE-79</a> - Add an option to allow the default LDAP result size limit (1000) to be overridden</li>
+</ul>
+
+<h2 id="capacity-regression-from-0910-incubating">Capacity regression from 0.9.10-incubating</h2>
+
+<p>The new screen sharing support added in 0.9.10-incubating lead to a regression
+which could cause connections to fail when the maximum number of file
+descriptors supported by <code class="highlighter-rouge">select()</code> was exceeded. This effectively limited the
+maximum number of connections a Guacamole server could support, regardless of
+how powerful the server might otherwise be. This has been fixed, and Guacamole
+has been refactored to use <code class="highlighter-rouge">poll()</code> instead of <code class="highlighter-rouge">select()</code>.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-118">GUACAMOLE-118</a> - Migrate from select() to poll()</li>
+</ul>
+
+<h2 id="miscellaneous-fixes--improvements">Miscellaneous fixes / improvements</h2>
+
+<p>This latest release of Guacamole also addresses potential resource leaks in the
+use of SSL/TLS by guacd, segfaults in the built-in terminal emulator and VNC
+client, and adds a Norwegian translation for the Guacamole interface.</p>
+
+<ul>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-86">GUACAMOLE-86</a> - Connection closed when printing large content in SSH</li>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-117">GUACAMOLE-117</a> - File descriptor leak if SSL/TLS negotiation fails</li>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-130">GUACAMOLE-130</a> - Merge contributed Norwegian translation</li>
+ <li><a href="https://issues.apache.org/jira/browse/GUACAMOLE-157">GUACAMOLE-157</a> - Connecting to unavailable VNC endpoint causes SIGSEGV in SSH SSL lock free</li>
+</ul>
+
+<h1 id="deprecation--compatibility-notes">Deprecation / Compatibility notes</h1>
+
+<p>As of 0.9.11-incubating, the following changes have been made which affect
+compatibility with past releases:</p>
+
+<h2 id="database-schema-changes">Database schema changes</h2>
+
+<p>The MySQL and PostgreSQL schemas have changed to facilitate support for
+password policies. Users of the database authentication will need to run the
+<code class="highlighter-rouge">upgrade-pre-0.9.11.sql</code> script specific to their chosen database.</p>
+
+
+</div>
+
+
+ </div>
+ </div>
+
+ <!-- Footer -->
+<div id="footer">
+
+ <!-- Copyrights -->
+ <p class="copyright">
+ Copyright © 2016 <a href="http://www.apache.org/">The Apache
+ Software Foundation</a>, Licensed under the <a
+ href="http://www.apache.org/licenses/LICENSE-2.0">Apache License,
+ Version 2.0</a>. The HTML5 shield logo has been modified from the
+ original work of the <a
+ href="http://www.w3.org/">World Wide Web Constortium (W3C)</a>,
+ which is licensed under the <a
+ href="http://creativecommons.org/licenses/by/3.0/">Creative
+ Commons Attribution 3.0</a> license.
+ </p>
+
+ <!-- Trademarks -->
+ <p class="trademarks">
+ Apache and the Apache feather logo are trademarks of The Apache
+ Software Foundation.
+ </p>
+
+ <!-- Incubation disclaimer -->
+ <p class="disclaimer">
+ Apache Guacamole is an effort undergoing Incubation at The Apache
+ Software Foundation (ASF), sponsored by the Incubator. Incubation is
+ required of all newly accepted projects until a further review
+ indicates that the infrastructure, communications, and decision making
+ process have stabilized in a manner consistent with other successful
+ ASF projects. While incubation status is not necessarily a reflection
+ of the completeness or stability of the code, it does indicate that the
+ project has yet to be fully endorsed by the ASF.
+ </p>
+
+</div>
+
+
+ <!-- Google Analytics -->
+ <script type="text/javascript">
+ (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
+ (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
+ m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
+ })(window,document,'script','//www.google-analytics.com/analytics.js','ga');
+
+ ga('create', 'UA-75289145-1', 'auto');
+ ga('send', 'pageview');
+ </script>
+
+ <!-- Download tracking helper function -->
+ <script type="text/javascript">
+
+ /**
+ * Signals Google Analytics that a file is being downloaded (or, at
+ * least, we expect that it is). Note that it is not possible to
+ * determine this with 100% certainty without grepping server logs,
+ * but this should still at least help gauge interest/usage.
+ *
+ * @param {String} action
+ * A human-readable string describing the user event which
+ * occurred to initiate the download.
+ *
+ * @param {String} filename
+ * The filename of the file being downloaded.
+ */
+ function trackDownload(action, filename) {
+ ga('send', 'event', {
+ eventCategory : 'Download',
+ eventAction : action,
+ eventLabel : filename,
+ transport : 'beacon'
+ });
+ }
+
+ </script>
+
+ </body>
+</html>