Resolved Issues 11.07.100

Citrix

• With CWA 2012, Citrix has revised the client drive mapping, with which we can no longer preset the right of the drives. Since then, the user can assign these rights in the session itself. So that this selection remains also over a
  reboot, we store the necessary file persistently on our system.
• Updated window manager so that the proxy Authentication window comes to the foreground and is focused when the Citrix Brower content redirection with Cef is used.
• Fixed window settings for Citrix Desktop sessions

• Added parameter for Browser Content Redirection with CEF to enable global proxy support.

  More...

  Parameter	Browser content redirection with CEF via proxy
  Registry	ica.module.virtualdriver.webpageredirection.cef_proxy_env
  Value	true / false

• Fixed multimedia support for Citrix when used HWA in Firefox.
• Fixed high CPU load in MS Teams and Citrix Workspace App 2112.

OSC Installer

• Fixed OSC Recovery with enabled "Migrate Old Settings"
• Fixed OSC issue with bogus character in license type field and not shown add-on licenses.
• Fixed returning to installer after closing Factory ID window.

AVD

• Added several performance optimizations.

RDP/IGEL RDP Client 2

• Fixed wrong error message when RDP session was closed by idle timeout.

RD Web Access

• Fixed RD Web Access windows moving out of the screen.
• Fixed downloading published applications.

Parallels Client

• Fixed multi-monitor issues.

X session (Xephyr)

• Fixed segfault with xdmcp sessions to an OpenVMS environment.
• Fixed fullscreen and workarea x sessions that are expanded over 2 or more monitors: The session window opens properly and the single monitors are detected inside the x session.
• Fixed host chooser button events in x sessions with connection type "indirect via localhost".

Firefox

• Fixed usage of Athena IDProtect smartcards.
• Fixed usage of IGEL extensions when private browsing is enabled. These are important to set restricted kiosk mode settings.
• Fixed installed translations for user interface.
• Fixed download prevention with restricted / hidden file system access. Without the fix, the current browser implicitly put the file into the standard Downloads folder - without the possibility to interfere.
• Fixed crash which always occurred during the internal probing of 3D support for WebGL. So WebGL is now available again for the supported display drivers.
• Fixed client certificate management via IGEL TC Setup. Firefox's standard certificate dialog is used now.

Chromium

• Fixed comma-separated strings in custom policies broke some Chromium Browser policies.
• Fixed emojis have not been loaded in Chromium (also affects Chromium Embedded Framework).
• Removed "What's new" tab showing on the first start and after Chromium updates.

Network

• Fixed could not mount issue with some NFS 4.1 and 4.2 servers (QNAP).
• Fixed global no-proxy list getting effective via gconf2. This e.g. can help Citrix Workspace App using the right proxy configuration.

• Removed now unsupported samba security modes (NTLM, NTLMi, and LanMan) as these would cause mount failures. This removes also support for very old SMB v1 servers. Changed the following registry key to:

  More...

  Parameter	Security Mode
  Registry	network.smbmount%.security_mode
  Range	[default] [ntlmv2] [NTLMSSP] [ntlmv2i] [NTLMSSPi]

Wi-Fi

• Added setup registry key to select between wpa_supplicant/iwd as Wireless back-end.

• AVM Fritz!WLAN N v2 USB Stick, only works with iNet Wireless Daemon (iwd) as Wi-Fi back-end.

  More...

  Parameter	Wi-Fi backend
  Registry	network.interfaces.wirelesslan.wireless_backend
  Range	[iNet Wireless Daemon (iwd)]
  Value	Wi-Fi Protected Access client and IEEE 802.1X supplicant (wpa_supplicant)

• Fixed issue with TP-Link AC600 not working on 5GHz (8821au driver).

• Improved reconfiguring regulatory domain settings at runtime

Open VPN

• Added config parameter for extending arguments of VPN command:

  More...

  Registry	sessions.openvpn%.vpnopts.extend_opts
  Value	extend parameter as string

• Enter parameter starting with `--`.
  Example: `--ping 10 --ping-restart 120`
• Parameters that are already set in the GUI must not be used.

Imprivata

• Fixed Imprivata data partition: remove outdated artefacts, keep latest version of the configuration-editor

Smartcard

• Added option to unlock screen lock in case of Kerberos smartcard login by only checking the PIN of the smart card.

  More...

  Parameter	Only check smartcard PIN on unlock
  Registry	auth.login.pkcs11_screenlock_unlock
  Value	false / true

• Fixed: Maximum number of simultaneous smartcard contexts were raised in smartcard resource manager PC/SC lite.

HID

• Changed default of userinterface.touchpad.tapping.TapButton1 registry key to 1 so tapping is active as default again (if set to 0 tapping is disabled).

CUPS Printing

• Fixed handling of more than one printer and printer selection by USB IDs.
  • Fixed classification of some HP printers as scanners only which made printing impossible because of missing access rights.
• Fixed TCP/IP print server functionality with USB printers. Printing was not possible in some cases, e.g. when certain other USB devices were connected.

Base system

• Added driver for several Intel SOC NVME controller. Required for e.g. HP G8 250.

• Added new parameter for custom font path configuration. Add a new instance for each custom font path:

  More...

  Parameter	Enable Custom Font Path
  Registry	x.fontpaths.custom<instance nr>.enabled
  Value	enabled / disabled
  Parameter	Custom Font Path
  Registry	x.fontpaths.custom<instance nr>.path
  Parameter	Font Path Position
  Registry	x.fontpaths.custom<instance nr>.position
  Value	99 (default)

• Fixed display configuration problems caused by wrong access permissions of /wfs/user/graphic folder.
• Fixed battery indicator.
• Fixed Setup Assistant - After acceptance of EULA, Demo License flow was not available.
• Fixed wrongly shown Starter license info in Product ID on fully licensed devices.
• Fixed product id for IGEL UD6.
• Fixed issues with global proxy configuration.
• Fixed sporadic failures while custom partition initialisation.
• Fixed Finish button label in Setup Assistant.
• Fixed missing generation number in Product ID (About and UMS).
• Fixed applications from custom partition get killed when network is up.
• Fixed IGEL system uses far too much RAM inside a VM.

• Added registry key to allow old weak public key algorithms for older SSH servers.

  More...

  Parameter	Disable weak Pubkey algorithms
  Registry	network.ssh_client.disable_weak_pubkey_algos
  Type	bool
  Value	enabled / disabled

• Added registry key to switch between the default (igel) and the unchanged asound2 pulse plugin type:

  More...

  Parameter	Asound2 plugins type
  Registry	multimedia.alsa.asound2_plugin_type
  Range	[default] [igel] [vanilla]

Driver

• Fixed Citrix terminate with Olympus RM4010P connected and hardware button pressed.
• Fixed Olympus FootSwitch being detected as mouse buttons.
• Added driver for MediaTek MT7921.
• Fixed several problems of MediaTek MT7921 driver.

X11 system

• Added new registry keys which can be useful to fix issues with monitors not waking up after DPMS off events.

  More...

  Parameter	Quirk for DPMS Off to On event.
  Registry	x.dpms_quirks.off_on.quirk
  Range	[none] [refresh-change]

  Parameter	Wait time in seconds before executing quirk after DPMS event.
  Registry	x.dpms_quirks.off_on.wait_before
  Type	string
  Value	1
  Parameter	Wait time in seconds between two quirk states.
  Registry	x.dpms_quirks.off_on.wait_between
  Type	string
  Value	3
  Parameter	Wait time in seconds after execution of quirk.
  Registry	x.dpms_quirks.off_on.wait_after
  Type	string
  Value	1
  Parameter	Xrandr connector names where quirk should apply (empty means all)
  Registry	x.dpms_quirks.off_on.connectors_to_quirk
  Type	string
  Value	empty

X server

• Fixed monitor configuration when modesetting graphics driver is enabled.

• Added new registry keys for xorg modesetting options:

  More...

  Parameter	Use linear framebuffer instead of tiling one.
  Registry	x.drivers.modesetting.use_linear_framebuffer
  Range	[Default] [True] [False]

  Parameter	Use variable refresh rate.
  Registry	x.drivers.modesetting.use_variable_refresh
  Range	[Default] [True] [False]

  Parameter	Use async flips for secondary video outputs on multi-display setups.
  Registry	x.drivers.modesetting.use_async_flip_secondaries
  Range	[Default] [True] [False]

  Parameter	Use DRI3 page flipping.).
  Registry	x.drivers.modesetting.use_page_flip
  Range	[Default] [True] [False]

  Parameter	Use shadow framebuffer layer (default on).
  Registry	x.drivers.modesetting.use_shadow_fb
  Range	[Default] [True] [False]

  Parameter	Use double buffer for shadow updates (default depends on hardware).
  Registry	x.drivers.modesetting.use_double_shadow
  Range	[Default] [True] [False]

  Parameter	Use software cursor (default off).
  Registry	x.drivers.modesetting.use_sw_cursor
  Range	[Default] [True] [False]

  Parameter	Use gamma look up table (warning some devices have problems with this).
  Registry	x.drivers.modesetting.use_gamma_lut
  Range	[Default] [True] [False]

Window manager

• Fixed taskbar clock is displaying seconds (again) if enabled in system registry.
• Fixed taskbar was displayed incorrectly in some special configuration cases.

VirtualBox

• Added new registry key to disable initial boot framebuffer

  More...

  Parameter	Disable use of initial boot framebuffer.
  Registry	system.kernel.bootparams.vga_off
  Type	bool
  Value	enabled / disabled

Audio

• Fixed multimedia.disable_audio.pci registry key setting.
• Fixed switch of Speaker / Headsets

Multimedia

• Added new registry key to prefer i965 VAAPI driver over iHD (if usage of iHD cause trouble)

  More...

  Parameter	Prefer i965 over iHD VAAPI driver
  Registry	multimedia.vaapi.prefer_i965
  Range	[Default] [Prefer] [Force]

Remote Management

• Fixed opening communication ports in rmagent - now all network ports use IPv4 only.
• Fixed keepalive mechanism in rmagent. The mechanism must prevent premature closing connection by the UMS if a remote command takes a time period over 30 seconds.
• Fixed removing files in the file transfer mechanism. Files are properly removed from the file system, when files are not assigned anymore to a device in the UMS.
• Fixed UMS file transfer of trusted certificates which have spaces in file names.
• Fixed IP address retrieving of a WLAN interface.
• Fixed losing ICG connection on switching from LAN to WLAN - now a new ICG connection is established.
• Fixed spurious creation of empty directories /wfs/ca-certs?* and /wfs/user?* when using certificates with spaces in filenames for file transfer.
• Changed applying of remote settings received during boot - the settings are synced with the current local settings at the end of the boot process. If these changes require a system interaction to be applied (like restart of some
  services) then the user is asked about applying. The dialog is optional and quits after a timeout. This bugfix solves the problem, that the "Apply changes" dialog is shown on every boot.
• Fixed evaluation of the exit status of a UMS generic job if the corresponding generic command is implemented as a systemd service.

IGEL Cloud Gateway

• Fixed exchange of the ICG certificate chain.

VNC

• Fixed keyboard mapping in shadowing sessions, especially with backslash, euro and at keys in French keyboard layout.