Added the Affects Version '4.2.NEXT'
Added the Affects Version '4.0'
Added the Affects Version '4.1'
Added the Fix Version '4.2.NEXT'
------------------------------------------------------------
4.2: merged,
34e56609d88650a46dff54c3919949a615eaeb07 (10 hours ago) laszlo.attila.toth@balabit.com widgets: button: properly warning spans, needed for multiple warnings
7e243b0131c1f1b82d578115312a884e7625e609 (10 hours ago) laszlo.attila.toth@balabit.com basic system control: Starting/stopping all traffic ignores disabled protos
e8ac0f76f0fea7aac1b29867b1fe8974d21f65b1 (10 hours ago) laszlo.attila.toth@balabit.com templates: basic-system-control: add warning to disabled services
ba9ecac00fe6d0cae93279e3f9ec9e34d90233dc (10 hours ago) laszlo.attila.toth@balabit.com widgets: button: may have warning icon
dcca3105eb7151eb1d2466f79c34c60fd2d1028e (10 hours ago) laszlo.attila.toth@balabit.com js_scb/basic-system.js: warning: refer Global Options page
7f3c2194eeaf9bbc42df2fb7a8846218ea25d978 (10 hours ago) laszlo.attila.toth@balabit.com js_scb/basic-system.js: only Stop action is temporary
59df088fa7edf8e2688cce7af8973b785f40c3e0 (10 hours ago) laszlo.attila.toth@balabit.com Zorp,Traffic Control box: handle disabled services as non-controllable
------------------------------------------------------------
------------------------------------------------------------
Tested whith zorp,
should be tested with scb.
------------------------------------------------------------
Todo: Unit test for inband destination selection mode.
------------------------------------------------------------
Username with ticket id does not work yet.
------------------------------------------------------------
Somehow password must be given in xfreerdp argument.
Does not work with password given on prompt.
------------------------------------------------------------
Find the general story description in the epic's description.
Improve RDP's inband target selection feature, eliminate limitations (like 9 character long username string).
Feature: Autologin without gateway authentication in RDP
It will be examined that RDP server mode of zorp-core is able to be extended to process inband destination data from username field of client info pdu and NTLM authenticate with the proper username to the server.
The result of the Poc can be replace the current very limited implementation of the indband destination selection.
The restriction rejecting empty password in server mode should be eliminated, because in inband destination selection mode without nla the password is not needed for the proxy.
No rejecting is done, but it is logged:
"Client did not send authentication data,..."
------------------------------------------------------------
Logged '3 days'
Changed the Remaining Estimate to '0 minutes'
------------------------------------------------------------
Document IPv6 support
Alapvetoen az atmeno forgalomhoz van IPv6 support, magan az SCB-n nincs, (pl. local service nem lehet IPv6-on, DNS szerver es hasonlok sem)
Pl. Connection policy: To/From, Fix target, inband destination selection is megy
kliens/szerver oldal lehet mas tipusu networkben, pl. kliens es a To IPv6, a policyben a Fix target meg IPv4
Active connections oldal: IPv6 cimek bracketben vannak [], utana kettospont:szam a port
Ha valahol IPV6-os cimet irunk be a konfigba, akkor az SCB kanonizalja, es ugy menti el
Search oldalon ha valami IPs mezo filterebe IPv6-ot irunk, a kereses elott kanonizalja az SCB, es ugy keres
Ezek is tudnak IPv6-ot: Permission query oldal, SSH Host keys
SCB network interfaceknek lehet IPv6-os cimet is felvenni, akar vegyesen is (egy if-nek lehet IPv4 es v6 cime is)
Channel policykban is megy IPv6: https://jira.balabit/browse/SCB-4982
Plusz mg:
RPC API: a search megy, de csak a canonical form j, nem tud talaktani
------------------------------------------------------------