Release notes
- Add warning for NTLM when using incorrect Java 11, Java 17 runtime configuration
- Reload kerberos config after properties have changed
- Update dependencies
- Remove Test SSO button from SAML admin page
Release notes
Release notes
IOPLEX Jespa library 1.2.11 introduced some incompatible changes. This fix addresses this incompatibility and makes EasySSO support both old and new versions of Jespa.
IOPLEX Jespa library 1.2.11 introduced some incompatible changes. This fix addresses this incompatibility and makes EasySSO support both old and new versions of Jespa.
Bugfixes:
Bugfixes:
Fix for SAML button misalignment
Fix for SAML button misalignment
New Features:
Bugfixes:
New Features:
Bugfixes:
FOR Confluence 7.3+ installations with Java 11 please read: Additional Configuration for Java 11
FOR Confluence 7.3+ installations with Java 11 please read: Additional Configuration for Java 11
second part of the "fail page" fix - if we do arrive to the fail page while already logged in (e.g. from the default login page) we will immediately redirect to the the application root/dashboard.
Changes in shared code due to issues with Jira 7.13 when uploading IOPLEX Jespa license before IOPLEX Jespa library .zip
Changes in shared code due to issues with Jira 7.13 when uploading IOPLEX Jespa license before IOPLEX Jespa library .zip
It is now possible to configure different authentication protocols (NTLM vs SAML, etc) completely independently of one another. You are no longer required to complete parts of the NTLM configuration just to get to SAML. This goes for all supported authentication types: NTLM/Kerberos, SAML, Headers and X.509 certificates.
SAML
Troubleshooting
General
IOPLEX Jespa library 1.2.x introduced some incompatible changes to code and encryption of licenses. This fix addresses this incompatibility and makes EasySSO support both old and new versions of Jespa
This release contains no new features, but it includes some core changes to request filtering.
Addressed an issue that may occur during startup if a big number of other add-ons (including system ones) is present.
This used to result in excessive re-initialization of IOPLEX Jespa library on startup and has been identified as the root cause for "jcifs.smb.SmbException: All pipe instances are busy" exception observed in the logs later during operation.
Fix for state transition on expired EasySSO license Additional excludes supported via "excludes" in additional parameters
As reported by users some hardware loadbalancers react badly to NTLM challenges on certain type of requests (HTTP HEAD). This version lets such requests pass through without doing NTLM challenge to be handled by the core application.
Microsoft patch MS15-027/KB3002657 breaks "localhost.netbios.name" feature of IOPlex Jespa. In EasySSO this was set via instance identifier parameter in UI, which now has been removed.
With this functionality it was previously possible to use the same computer account in different web applications - this is no longer supported, please create distinct computer accounts for your applications.
Please also review the note on the IOPlex website.
When used with other plugins, internal forwards from deep inside web-stack may occur. In these cases previous versions of EasySSO despite working would log a long stacktrace. The new version correctly identifies such forwards and handles them gracefully.
This version fixes issues with the dynamically loaded Jespa library jar being locked under Windows, which prevents updating IOPlex zip distribution and uploading license files.
- Fixed issue on Windows systems when uploading jespa ZIP
- Fixed issue with windows paths in setting log location.