Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Section


5897cab3-f6a0-3e40-b549-209e22c2da93

Image ModifiedPFS-4348 - Disable mails on quota overuse of folder owner
  • Image RemovedPFS-4330 - A1.3 Security fix
    • Release Date: May 2024
    • Build Number: 21.0.100
    • Type: Service Pack Release

    Changelog

    Column
    width65%
    • Release Date: May 2024
    • Build Number: 21.0.100101
    • Type: Service Pack Major Software Release


    Info

    This release contains major security fixes, please upgrade your server as soon as possible. 

    Upgrade Information

    • Please read this complete Release Notes and instructions before upgrading.
    • Please follow the regular upgrade documentation for Windows or Linux
    • Upgrading any previous version higher or equal to version 16.0.100
    • Cluster: Running different versions on the servers in the cluster is supported but limited to version >= 16.0.100(info) Please renew the D2D certificate manually in the server preferences under "Network"
      Image Removed
    • Mandatory configuration changes:

    nginx configuration changes

    Please update the

    NGINX

    nginx site configuration

    due to security fixes from server version 21 FINAL, no changes are requires in the Apache2:

    :

    Code Block
    titlenginx
    location /rpc {
                ...
                

    proxy_set_header X-Forwarded-Host $host;
                proxy_set_header X-Forwarded-For $remote_addr;
    }
    
    ...
    
    location / {
                ...  

    
                proxy_set_header X-Forwarded-Host $host;
    
    

                proxy_set_header X-Forwarded-For $remote_addr;
    

    }For more infos
    }
    
    ...
    
    location /websocket_client {
                proxy_http_version 1.1;
                proxy_pass http://cluster/websocket_client;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
    			proxy_set_header Upgrade $http_upgrade;
    			proxy_set_header Connection "Upgrade";
    }

    Notes:

    SAML: Transfer of security Information

    Change SAML/Shibboleth attribute prefix to "SAML" (from "HTTP_") in shibboleth2.xml and Apache config.

    This change is not backward compatible due to security reasons! These changes have to be done to support SAML logins

    For more Information, please visit our guide: Apache configuration



    Downgrade Information (optional)

    • In case a downgrade to a previous version is necessary:
      • For a downgrade, you have to review our downgrade documentation.
      • Simply replace the PowerFolder-Server.jar file with that from the previous version you would like to run.
    • Log messages due to the higher schema version of database can be ignored:
      • [DatabaseMigrator]: Database layout version is newer than expected.



    HTTPS Server-Client-Tunnel using Web Sockets

     

    (optional)

    The clients can also use the encrypted web sockets same as our iOS app, please use the following web proxy guide to enable the web sockets: WebSockets for iOS and Desktop Client#EnablingWebSocketsforClient

     Enabling Clients to use the Web Sockets

     Add the following config. to the Default.config (server) or PowerFolder.config (client) when the clients should use the web sockets. Precondition is,  precondition that the web sockets should be enabled on your server:are configured on the server/load balancer.

    Code Block
    connections.websocket=true
    Transfer of Security Information of SAML

    Change SAML/Shibboleth attribute prefix to SAML (from HTTP_) in shibboleth2.xml and Apache config.

    This change is not backward compatible due to security reasons! There changes have to be done to correctly support SAML logins

    TODO: Adopt Apache config. use prefix “SAML”, instead of “HTTP_”: Apache configuration

    Document Editing using WebDAV

    After MS security updates 2023 the editing of documents using WebDAV is not possible, please use the following file to update the settings:

    View file
    namePowerFolder_webDAV_fix_for _MSoffice.reg
    height250

    More infos Information under: WebDAV known issues in Windows

    API Call to restore folder from BACKUP_REMOVE

    You can now use the API call to restore one or all folders from system recycle bin:

    Changelog

    Jira Legacy
    serverSystem Jira
    serverId
    keyPFS-4349


    Column


    Panel
    titleOverview:

    Table of Contents
    maxLevel3



    ...