Myrtille v1.9.0 Release Notes
Release Date: 2018-05-24 // almost 6 years ago-
- resynced FreeRDP (version 2.0-RC2-dev3), now using the openssl 1.1.x architecture. Should fix any previously reported FQDN and NLA issues
- ➕ added a pdf virtual printer; any document printed with the "Myrtille PDF" printer is downloaded to the browser and can be opened/saved/printed from there
- pdf content is now downloaded into an hidden iframe, instead of a new tab, to prevent popup blockers to block it
- ➕ added a client ip tracking option to prevent unauthorized accesses. configurable into web.config (thanks bigpjo)
- 🚚 cookieless sessions are now disabled by default. This lowers the risk of session stealing (by simply copying the url) but also removes the ability to have multiple connections/tabs. can still be enabled into web.config, but use at your own risk! (thanks bigpjo)
- 🔒 strengthened security to prevent session fixation attack or spoofing if cookieless sessions are enabled
- 🌐 the remote session can now be shared with a new toolbar button that generates a one time usage url. can be disabled into web.config. (thanks bigpjo)
- a shared session now can't be disconnected by a guest. (thanks bigpjo)
- 🔒 security fixes with enterprise mode to ensure that shared sessions do not give access to owner hosts. (thanks bigpjo)
- ➕ added an option to enterprise mode to allow hosts to be restricted to specific users (by username). (thanks bigpjo)
- 👍 enterprise mode now have a better reporting of login failures and includes a change password dialog if the user is required to change it. (thanks bigpjo)
- 🛠 fixed issue with enterprise host create session including invalid /popup/ path in sessionURL. (thanks bigpjo)
- 🔧 the remote session is now disconnected after the browser window/tab is closed, or connection is lost, to prevent it from being left open server side. configurable into web.config (thanks bigpjo)
- 🔧 the database connection string (into bin/Myrtille.Services.exe.config) can now be configured to specify the SQLCE file location or use a standard SQL server (useful for a centralized database, with myrtille clustered). (thanks bigpjo)
- ➕ added MFA and enterprise mode configuration steps into the installer
- 🔊 installer logs are now created into the install log folder (log/Myrtille.Setup.log)