Resolved Issues 10.06.100
Citrix
- Now ica.pnlogin.syncpasswordwithxscrnsvr is removed, ica.pnlogin.syncpasswordwithxlock should be used, this provides the same functionality.
- Fixed online meeting in VDI: An enabled webcam will not cut the audio streaming anymore.
- Citrix Workspace App 19.03: Improved USB redirection handling.
- Custom icons now are visible after StoreFront logon using Citrix authentication method.
- Appropriate icons arise with IGEL and Citrix authentication.
- Fixed stability issues with Citrix Browser Content Redirection.
- Updated the Nuance virtual channel for ICA up to version B301.
RDP/IGEL RDP Client 2
- Added Negotiate:Kerberos as fallback if NTLM is disabled. This only works if Active Directory/Kerberos Logon is enabled.
Added registry key to use rdpglobal window settings for remote apps.
Fixed empty warning window being shown when closing RDP Web Applications started from browser.
Fixed smartcard redirection in RDP: SCardGetAttrib was failing if pbAttr was NULL. The fix should help running Dutch Zorg-ID applications.
RD Web Access
- Fixed RD Web Access not woking with special characters in name or password. This only works if Active Directory/Kerberos Logon is enabled.
- Fixed empty warning dialogs appearing when opening RD Web Application in the browser.
- Fixed not starting RDP Remote Applications.
VMware Horizon
- Fixed Optimization for Skype for Business.
- Fixed the configuration choice to use the relative mouse feature.
Parallels Client
- Updated Parallels Client to version 16.5.3 (64-Bit).
- Fixed: Maximized windows for published applications can be displayed incorrectly.
- Fixed: Incorrect user credentials can be picked up during connection if the same farm is registered in the client multiple times and with different user credentials.
- Fixed: Client did not accept universal printing policies set from the server.
- Fixed: Module opened in the background and blocked the launcher in some cases.
- Fixed: Redirected smartcard did not work in a remote session.
- Fixed: Printers would not redirect to a remote session when redirection is enforced via policies.
PowerTerm
- Fixed editing of parameter sessions.powerterm\<INST>.logindialog.loginscript in Setup Registry: now multiple lines are possible.
- PowerTerm Terminal Emulation: remove obsolete SSH type SSH1 and obsolete SSH cipher DES from parameter ranges.
Firefox
- Fixed an issue where Firefox does not accept proxy credentials from setup.
- Fixed the print hotkey disable option with Firefox 60+.
- Fixed browserglobal.app.local_subdirs_whitelist not working.
- Fixed Adobe Flash Player download possibility.
Network
- Improved SCEP client robustness:
- The cert_agent script doesn't terminate anymore when a problem occurs (e.g. the SCEP server is unreachable) but tries again after the expiry check interval.
- When the client certificate has expired, there is still one attempt at renewing it. However, when that fails, a new one is requested. That obviously will fail if the client presents a challenge password that is not valid anymore. - Restoring WLAN/WWAN Modem state after wakeup from standby or reboot.
- Improved expire time of Ethernet no-link notification.
- Added all Ethernet network drivers from OS to LX version.
- Changed e1000e driver to out of tree version 3.4.2.3 directly from Intel.
- Changed igb driver to out of tree version 5.3.5.22 directly from Intel.
- Fixed bug: Failure to reach SCEP server in the client certificate renewal phase resulted in loss of SCEP server and client certificates.
- SCEP: A change of the CA fingerprint setting does not result in discarding all SCEP data anymore if the fingerprint matches that of the current CA certificate. Firmware versions before 10.05.100 allowed an empty fingerprint. So, this is meant for users who must belatedly configure the fingerprint in order for client certificate renewal to work.
A change of the CAIdentifier setting is not detected immediately and does not result in discarding all current data anymore. The new CAIdentifier will, however, be used in future SCEP operations. - Fixed instability with netmounts with static ip configuration.
- Fixed problems with windows share mounts.
- Fixed MBB router configuration (broken since 10.05.500).
Added a possibility to switch between third-party and kernel Intel IGB network driver.
A new registry key:Added a possibility to switch between thirdparty and kernel Intel E1000E network driver.
A new registry key:Added a possibility to switch between thirdparty r8168 and kernel r8169 realtek network driver.
A new registry key:Added a possibilty to choose the variant of the realtek r8168 driver.
A new registry key:Fixed bug: Second Ethernet interface did not get configured when the first one was disabled.
- Fixed 802.1X Ethernet configuration with user interaction.
WiFi
- Fixed bug: WiFi connection to hidden SSID did not work anymore after reediting with the Wireless Manager.
- Fixed not working Broadcom SDIO WLAN cards as present in Advantech AIM8IAC device for example.
Smartcard
- Fixed Dell KB813 Smartcard Keyboard in combination with certain smart cards driven by OpenSC PKCS#11 module. Before this fix, authentication to Citrix StoreFront and VMWare Horizon failed.
- Improved handling of PIV/CAC smart cards in OpenSC.
- Updated cryptovision sc/interface PKCS#11 smart card library to version 7.1.20.
Changes in this revision:
- Fixed a possible deadlock in the PKCS#11 module on Linux if C_Finalize is called during a PCSC event, for example C_WaitForSlotEvent.
- ROCA check in the Smartcard Manager, based on the "ROCA detection tool", see https://github.com/crocs-muni/roca.
- Renaming container label in Smartcard Manager with F2 now possible. - Fixed OpenSC setting max_send_size for reader driver pcsc in /etc/opensc/opensc.conf.
Application Launcher
- Fixed confusion in nameserver list caused by comments in /etc/resolv.conf.
Base system
- Fixed issues with gen4/5 Intel graphic driver in kernel 4.18.20.
- Fixed Screensaver and Screenlock timeouts to be independent. This means, if both timeouts are set, the start of Screenlock will not reset the Screensaver timeout any more.
- Fixed retrieving of serial number of a display.
- Fixed playback of AAC coded audio streams on IGEL Zero products.
- Added possibility to set intel_idle.max_cstate kernel cmdline parameter with registry keys to work against Intel CPU freezes.
- Ensure that the Unit ID for IGEL devices is the MAC address of the onboard network card.
- Enhanced handling of Unit ID. On IGEL hardware the Unit ID isn't stored persistently any more by default. The persistent Unit ID can be removed with command
get_unit_id -r. The persistent Unit ID storage can be forced withget_unit_id -i -f -por withget_unit_id -mto manually choose a Unit ID from several network interfaces found on the device. Handle with extreme care since the Unit ID is the key for handling the endpoint in UMS. - Replaced MIT Kerberos clients by Heimdal Kerberos clients.
- Improved the buddy update server performance for multiple simultaneous update clients.
- Fixed handling of an "update on shutdown" during suspend/resume.
- Fixed shutdown while IGEL Setup Assistant is shown.
- Fixed delay in logon as local user when logon with IGEL Smartcard is also active.
- Fixed sporadic bootsplash issue.
- Fixed suspend/resume hangs when logged into Citrix sessions.
- Fixed CPU scaler and volume control applet suspend/resume issue.
- Added AppArmor rule to allow tcpdump to write to /debuglog.
- Fixed random 90 seconds shutdown delay (systemd).
- Fixed Custom Bootsplash installation.
- Bugfix: Create shortcuts for terminal shutdown, terminal restart and icon sort directly after reconfiguration. A reboot is not needed anymore.
- Fixed: System logoff waits for Citrix logoff now.
- Fixed broken custom bootsplash when doing a reset to factory defaults via UMS.
- Bugfix: hotkey setting needs restart.
- IGEL Setup Assistant will persistently activate WiFi when a connection is enabled instead of after finishing it, to preserve settings when UMS sends license and stops it.
- Fixed AD/Kerberos logon in case parameter auth.login.krb5_enterprise is set to 'false'.
Added a new registry key to set USB quirks:
Fixed: Migration tool did not start with Spanish language setting.
Disabled martian packet logging.
Driver
Updated deviceTRUST Client to version 19.1.200.
Bug Fixes:- Fixed an issue reading the DEVICE_IGEL_ICG_SERVER property.
- Fixed an issue where the NETWORK and LOCATION property providers could cause the client to freeze if a disconnection occurred while these property providers were checking for changes.
- Fixed an open file handle leak which lead to the client process reaching its file handle limits when left running for a long period of time.
- Fixed not working WACOM device DTU-1141B.
Custom Partition
- Fixed ownership of extracted data: Do not preserve owner information while extracting data into custom partition.
Storage Devices
- Fixed auto mounting of storage devices inside of Olympus DS-9500 Digital Voice Recorder.
Appliance Mode
- Fixed bug: In-session control bar could not be deactivated in Citrix SelfService appliance mode.
X11 system
- Fixed Microsoft Surface Pro 4 screen resolution issue.
- Fixed the missing volume control in the panel when the panel is configured to disappear while the login/lock screen is shown.
There is now a registry key to ignore a 3Dconnexion SpaceMouse for IGEL graphical use (X11). If activated, the SpaceMouse is only passed through to the desktop session. If false, it acts also as the standard mouse.
The following SpaceMouse products are included:
- USB device reset via USB powercycle is now available on UD6/UD7.
Fixed screen flicker in some cases if Force NumLock On (x.global.forcenumlock) is active.
Fixed not working x.xserver0.screen1.flipscreens registry key.
Use Index and Mode from Advanced mode in Simple Mode for Display Switch.
Fixed display hotplug failing on initial lock screen with Active Directory logon.
The in-session control bar now scales with the current DPI setting.
Fixed Display Switch utility not starting with some translations.
Fixed an issue with the noDDC mode not always working as expected.
Fixed a bug with thin clients reporting the wrong monitor serial number.
Window manager
- Fixed the option to disable the local window manager.
Audio
- Fixed bad quality sound over DisplayPort in a Citrix ICA session or other applications using ALSA API.
- Fixed configuration of default audio output and input.
Media Player (Parole)
- Fixed a problem where parole media player would hang instead of playing audio while audio-visualization is enabled.
- Fixed parole media player not handling audio hotkeys in fullscreen mode.
Multimedia
- Updated multimedia codecs to fix freeze when audio visualization is used.
Misc
- Monitoring Agent uses now only the half size of the debuglog partition.
When the setup option log_max_size with the option log_rotation creates an overall consumption that is bigger than 50% of the debuglog partition size, the size for each log automatically will be decreased to a value that allows a full rotation which occupies exactly 50% of the partition size.
Hardware
- Fixed problems with mouse cursor on Intel cherryview devices.
Added a possibility to change some DRM settings and limit the DisplayPort lane bandwidth on Intel devices.
Added new registry keys:
Remote Management / IGEL Cloud Gateway
- Fixed wallpaper configuration when ICG protocol is used.
- Fixed UMS synchronization of configuration when changes were made in "Emergency mode".
- Fixed sporadic failures while sending data over ICG.
- Fixed removal from UMS when the device was offline.
- Added: IGEL UMS agent sends monitor information for maximum eight monitors now.
Caradigm
- Fixed Horizon session crash.
IGEL Linux 10 Recovery
- Fixed problem with forced no EFI installation.