Bitvise SSH Server

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
b416613c3ef56a72.jpg


Bitvise SSH Server


b2d8844701bc2794.png


Serwer SSH umożliwia bezpieczne zdalne logowanie do stacji roboczych i serwerów Windows. Bezpieczeństwo to kluczowa cecha serwera SSH: w przeciwieństwie do serwerów Telnet i FTP, Bitvise SSH Server szyfruje dane podczas transmisji. Dzięki temu nikt nie może poznać Twojego hasła ani zobaczyć, jakie pliki przesyłasz, gdy masz dostęp do komputera przez SSH.

Bitvise SSH Server w wersji Personal może być używany tylko przez rzeczywistych, niekomercyjnych użytkowników osobistych, którzy nie używają serwera SSH jako części przedsięwzięcia komercyjnego i nie używają go w organizacji, komercyjnej lub innej. Wszelkie zastosowania komercyjne lub organizacyjne wymagają zakupionej licencji.

Testuję ten serwer od kilku dni i muszę stwierdzić, że to kawał bardzo dobrego programu :)
Do użytku domowego (za darmo) jest nawet więcej niż potrzeba, no chyba że ktoś ma familię większą i potrzeba więcej niż 10 kont.


Ograniczenia wersji Personal Edition
  • On domain member computers, can use only local Windows accounts. On a domain controller, can use domain accounts of that domain controller.
  • Can configure only one Windows group (Everyone).
  • Can configure only one virtual group.
  • Has a limit of 10 Windows account entries.
  • Has a limit of 10 virtual account entries.
  • GSSAPI authentication is disabled (Kerberos and NTLM).

Changes in Bitvise SSH Server 8.49: [ 14 September 2021 ]

  • Version information:
    • The SSH Server's upgrade access amnesty continues, so that all users of previous 8.xx version can update to the latest version with accumulated fixes. The minimum upgrade access to use this version is October 23, 2018.
      We are at this point highly confident in the security, stability and compatibility of our latest 8.xx versions. We are aware of users still relying on versions 7.xx and 6.xx, and sometimes even older. The SSH Server is security-sensitive, network-facing software, and updating is the only way to receive the latest security and reliability fixes. We suggest all users update.
  • Control Panel and settings:
    • In Easy settings, when a mount point type was set to Blind drop, it could not subsequently be changed back to Limit to root directory. It was instead necessary to use Advanced settings to reset mount point permissions.
      It is now possible to change a Blind drop mount point back to Limit to root directory in Easy settings.
    • The Log Folder Viewer interface would perform poorly if the SSH Server was generating a large number of log files, for example due to intense server activity combined with a small log file rollover threshold. The Log Folder Viewer now improves this by limiting the frequency of visual list updates.
  • UPnP NAT forwarding:
    • When UPnP NAT forwarding is enabled on a computer with multiple network adapters, the SSH Server was likely to try configuring the wrong gateway. For example, if the first IP address returned by Windows belonged to a Hyper-V virtual switch, this would prevent UPnP NAT forwarding from working.
      The SSH Server will now enumerate network adapters to find gateways, and will try to configure those that are suitable.
    • UPnP gateway forwarding is now disabled for IPv6 addresses. In previous versions, the SSH Server would attempt to perform the same UPnP actions for IPv6 as it does for IPv4 addresses. This is not effective for IPv6, and would only generate errors.
      In 9.xx versions, we will be adding experimental support for UPnP IPv6 pinholes. However, we were unable to find any devices with which to test this for 8.xx versions. Therefore, the SSH Server will currently not attempt any UPnP actions for IPv6 addresses.
  • General:
    • When multiple SSH Server instances are being installed, instance name conflicts are intended to be detected during installation. However, the check is also performed after installation. The after-installation check did not function on 64-bit systems and would not detect conflicts. Fixed.


Zaloguj lub Zarejestruj się aby zobaczyć!


Zaloguj lub Zarejestruj się aby zobaczyć!
 
Ostatnia edycja:

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.12 [ 1 January 2022 ]

  • Windows session cache: Multiple connections for the same user, either concurrent or consecutive, can now use the same Windows session. This can greatly improve reliability for clients that make frequent connections that access network shares.
  • Network share control: Settings now provide additional control over how network share connections are established where such connections could time out or occasionally fail.
  • Encrypted volumes: Clients can now access files which are encrypted at rest by the SSH Server. Concurrent users can access virtual filesystem mount points backed by one or more encrypted volumes. A volume is encrypted with a key configured in SSH Server settings.
  • SFTP jump server: Users can now access virtual filesystem mount points backed by a remote SFTP server to which the SSH Server connects on the user's behalf.
  • Tasks: The SSH Server can now run commands periodically, or triggered by configurable conditions based on recorded log events.
  • Email notifications: The SSH Server can now send email notifications triggered by configurable conditions based on recorded log events.
  • Log file maintenance: Automatic log file archival or deletion can now be configured as a scheduled task, without resorting to the Windows Task Scheduler.
  • Cryptography: New cryptographic algorithms include chacha20-poly1305 and encrypt-then-MAC hashing.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.14 [ 23 January 2022 ]

  • Upgrade:
    • When upgrading from versions before 9.xx, the automatic log archival task is now disabled. This is to avoid interfering with any log maintenance the administrator has already set up.
    • If settings before 9.xx configured no limit to the number of simultaneous connections, such settings would be upgraded incorrectly to apply a lower limit. Fixed.
  • FTPS:
    • If the FTPS protocol is enabled, the SSH Server now supports TLS 1.3 on Windows versions where it is available. Currently, this requires Windows 11 or Windows Server 2022.
  • Tasks:
    • Log maintenance and command execution tasks now log an Info-level log event when they start.
    • Task triggers now support endsWith and contains as operators that work on strings. The contains operator also continues to work on structures, as it did previously.
  • Control Panel and Settings:
    • When configuring an encrypted volume in Advanced settings, the setting Full path to data file would have a misleading browse interface which did not allow selecting a filename which does not yet exist. Instead, a full path to a nonexistent file had to be entered manually. The browse interface now supports configuring a file which does not yet exist.
    • The Log Folder Viewer was not showing file icons in version 9.12. Fixed.
    • In the Statistics CSV export dialog, suggested filenames could include invalid characters. Fixed.
    • In account and group lists, reduced the number of columns for improved clarity and performance.
  • Command-line utilities:
    • The log utility did not work at all in version 9.12. Fixed.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.17 [ 12 March 2022 ]

  • Installation and update:
  • Due to a bug in the log utility included with SSH Server version 9.12, using built-in update functionality to update from version 9.12 to versions 9.14 and 9.16 would fail. Now, when updating from version 9.12, the first attempt will still fail, but will replace the log utility so that a second attempt succeeds.
    Running the new version installer directly to update manually works for all versions and does not trigger this issue.
  • When an SSH Server update was started automatically, but uninstallation of the existing version failed, the SSH Server would not automatically restart. When updating to future versions from version 9.17 or higher, if uninstallation fails but rollback succeeds, the main SSH Server service will now be restarted.
  • Settings:
    • When pasting from clipboard, password fields would accept ASCII control characters, including newline characters that are included by Excel when copy & pasting a selected cell. Password fields will now filter out control characters when pasting, including the Tab character.
  • SSH:
    • Improved detection of misconfigured obfuscation settings.
  • File transfer:
    • In previous versions including 8.xx, if an SCP client interrupted a download – such as by disconnecting – the SSH Server's SCP subsystem would still completely read the file and record a complete download in the I_SFS_TRANSFER_FILE event. Interrupted SCP downloads are now correctly logged as incomplete.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.18 [ 5 May 2022 ]

  • Installation and update:
    • Improved reliability of creating temporary directories which could previously cause installation to fail.
  • Control Panel:
    • Fixed behavior of the pop-up menu when clicking the notification area icon.
    • Added support for Ctrl+A and Ctrl+Backspace key combinations in a variety of user interface elements that did not previously support them.
    • Addressed support for Esc and Tab keys in the Manage certificates dialog.
    • Fixed issue when deleting log files in the Log folder viewer.
    • In Easy settings, the Back and Next buttons were incorrectly swapped. Fixed.
  • Connections:
    • In previous 9.xx versions, the Connection timeout feature did not work. Fixed.
  • Tasks:
    • Configuring an On-logon command for an Execute command task would result in an error when running the task. Fixed.
    • Improved elevation handling for Windows sessions created for tasks.
  • SFTP jump server mount points:
    • Greatly improved diagnostic logging for connection issues when configuring Another SFTP server mount points.
    • Fixed an issue which would cause the SSH Server to emit an invalid SFTP packet when using Another SFTP server mount points. This would cause repeated connects and disconnects.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.19 [ 28 May 2022 ]

  • Health monitoring:
    • On some systems, the Windows function GetSystemTimes can return inconsistent values. In this case, previous SSH Server 9.xx versions would stop due to an unexpected condition if the setting Health monitoring > Monitor CPU usage was enabled. Fixed.
    • In general, the SSH Server will no longer stop if one of the health monitoring features encounters an error, but will instead only log the error.
  • Control Panel and Settings:
    • Double-clicking the system tray icon for the SSH Server Control Panel would put the window into the foreground if it was hidden, but not if it was minimized, or behind other applications' windows. Fixed.
    • In the Custom events interface under Advanced settings > Logging, events are now sorted by default according to name, rather than number. Events can still easily be sorted by any column.
  • Email notifications:
    • In previous 9.xx versions, DKIM signing did not work. Fixed.
  • File transfer:
    • When the Real root path for a mount point did not exist, and the setting Create root path was disabled, the SSH Server would still create the directory if the client sent a "create directory" request. The SSH Server will no longer create the mount point root path in this circumstance.
    • For newly created mount points, the default value of the setting File sharing for uploads is now Delete instead of the previous value, Read, Delete. This is to prevent files from being read or copied in an inconsistent state by another application or connection while they are being uploaded.
  • Logging:
    • Further improvements to diagnostic logging for SFTP jump server mount points.
    • When logging the flags attribute for an auto-execute command, the Windows job object setting would be logged incorrectly. Fixed.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.23 [ 5 June 2022 ]

  • Authentication:
    • On installations where all of the following is true:
      • Windows accounts can log in using password authentication.
      • Virtual accounts are in use and are backed by the automatically managed Windows account.
      • An account lockout policy is configured in Windows.
      • In such configurations, it was possible for a remote attacker to lock out the automatically managed Windows account (usually BvSsh_VirtualUsers) by attempting password authentication against it. This would cause connections from virtual accounts to fail. If the SSH Server's automatic IP blocking is stricter than the Windows account lockout policy, the attacker could connect from multiple IP addresses to successfully lock the account.
      The automatically managed Windows account could also get locked out accidentally if its password expired, followed by many simultaneous connections from one or more virtual accounts. For example, this could occur with password expiry followed by 100 login attempts in the same second.
      The SSH Server now unlocks the automatically managed Windows account if it is locked out. If the password expires, the SSH Server now also takes steps to prevent a lockout due to other simultaneous logins.
    • Version 9.19 introduced the issue where passwordless authentication required a Windows restart in order to fully function after updating from a previous SSH Server version. Version 9.21 fixed this for updates from previous 9.xx versions, but this was not effective after updating from versions 8.xx. Fixed.
      Updating from versions older than 7.21 still always requires a Windows restart for passwordless authentication to fully function.
  • Email notifications:
    • When sending email through an outgoing SMTP server, the SSH Server now supports the SMTP authentication method AUTH LOGIN. This allows compatibility with servers such as smtp.office365.com.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.24 [ 9 October 2022 ]

  • General:
    • Previous SSH Server 9.xx versions did not run on older Windows versions, such as Windows Server 2008 R2, unless
      Zaloguj lub Zarejestruj się aby zobaczyć!
      was installed. This version implements a workaround for this dependency, so that KB 2533623 is again not required.
  • Email:
    • The maximum length of the local part of an email address is now raised from 64 bytes to 128.
  • BvShell:
    • Improved inconsistent Tab auto-complete behavior.
    • The cd command now displays a warning when more than one parameter is passed. (In most shells, supplying more than one parameter to cd is invalid.)
  • Master/follower synchronization:
    • Fixed multiple issues associated with activation code synchronization.
    • The user interface in the follower now displays more clearly when the activation code could not be synchronized because master settings do not permit it.
  • Control Panel and Settings:
    • Settings entries, such as virtual groups and connect profiles, whose names are referenced by other settings entries, can now be renamed, so that references are automatically updated.
    • When editing an account settings entry in Easy settings, mount point settings (including permissions) would be reset on mount points, even if the mount points were not changed. Fixed.
    • Mount point permissions can now be configured in Easy settings.
    • CSV import for settings entries that contain nested lists would incorrectly fail to clear these lists when importing. Most significantly, importing a Windows account from CSV would fail to clear or overwrite a default "/" mount point inherited from the Everyone Windows group in Advanced settings. Fixed.
    • When starting a CSV import on a list that already contains entries, the interface now asks whether to clear existing entries before importing.
    • The Custom events interface can now display events filtered by name or description.
    • In SSH Server settings, a single press of the Alt key would block Alt+Tab and the Windows Key from working until the user switched windows using the mouse. Fixed.
    • Additional improvements to the behavior of the pop-up menu for the SSH Server Control Panel icon in the system notification area.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.25 [ 30 October 2022 ]

  • Version information:
    • This version contains an upgrade access amnesty so it can be used with any license that is valid for a previous SSH Server 9.xx version. The minimum upgrade access expiry date to activate this version is January 1, 2022.
    • You can
      Zaloguj lub Zarejestruj się aby zobaczyć!
      . (
      Zaloguj lub Zarejestruj się aby zobaczyć!
      )
  • Security:
    • SSH Server versions 9.16 - 9.24 contain a flaw where, if settings are imported or upgraded from SSH Server versions 7.xx or 8.xx, some mount point types are not imported correctly. The incorrect import causes those mount points to grant unlimited filesystem access.
      The usual way to configure a mount point in SSH Server 7.xx/8.xx versions is to use the provider type FlowSfsWin. This is the default setting. Those mount points are upgraded correctly.
      However, it is possible to set mount point Provider type to Custom and configure Provider DLL to "FlowSfsWin". Users could configure this manually, or such a configuration could result after settings were imported from even older SSH Server versions, such as 6.xx.
      When SSH Server versions 9.16 - 9.24 import mount points of type Custom:FlowSfsWin from SSH Server versions 7.xx/8.xx, the setting Real root path is incorrectly ignored. This causes those mount points to grant unlimited filesystem access, where the mount point should be limited to a root directory.
      This version addresses this issue as follows:
      • Mount points with Provider type set to Custom now preserve the configured root path when upgraded or imported from SSH Server 7.xx/8.xx settings.
      • If settings were upgraded and saved by SSH Server versions 9.16 - 9.24, it is not possible to know if mount points of type Custom:FlowSfsWin that have an empty Custom root path were configured with unlimited access on purpose, or were upgraded incorrectly. Therefore, mount points of type Custom:FlowSfsWin with an empty Custom root path will now fail to initialize.
      • We provide a
        Zaloguj lub Zarejestruj się aby zobaczyć!
        which you can run to identify mount points which require administrator attention.
        The script searches group and account settings entries in SSH Server settings. It displays mount points of type Custom:FlowSfsWin that have an empty Custom root path. If such mount points are found, then if you want the mount point to grant unlimited access, change Mount type to Unlimited access. Otherwise, change Mount type to Specific directory and configure a Real root path.
        This script can be run with any SSH Server 9.xx version. It does not require updating to 9.25. If affected mount points are found, you can fix them without updating. This will address the issue, unless you import settings containing such mount points from 7.xx/8.xx versions again. Updating to 9.25 will ensure any future import works correctly.
  • Control Panel and Settings:
    • The Statistics tab now shows filtered text with a highlight.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.26 [ 16 January 2023 ]
  • EULA:
    • We updated our EULAs to formalize our existing practices regarding the nature and behavior of our software (it is a product, not a service; the data it handles is not sent to Bitvise; risk tradeoffs with updates) and the way we provide support (via email and our case management system, in written form).
  • Installation:
    • In previous versions, an automatic update would fail if the installer encounters an unexpected minor error. The SSH Server installation could be left inoperable, requiring the administrator to perform the update manually, if the installer e.g. could not create a shortcut.
      The SSH Server installer now treats specific conditions as warnings and continues if those non-critical conditions occur during an automatic update. Currently, these conditions include exit codes 105 (could not create shortcut) and 115 (could not configure authentication package). These now result in a warning exit code.
  • Cryptography:
    • OpenSSL version updated to 1.1.1s. Bitvise software primarily uses Windows CNG for cryptography. We use OpenSSL for specific cryptographic algorithms not supported by Windows. Currently, these are chacha20-poly1305 and on older Windows versions, the elliptic curve secp256k1.
  • General:
    • The SSH Server now runs auto-execute commands, such as the On-upload command, without creating a console window for each command. This dramatically increases the number of auto-execute commands that can run simultaneously. In previous versions, auto-execute commands would fail to start if approximately 100 were already running in the same Windows logon session.
    • If the SSH Server defines the environment variable USERPRINCIPALNAME, it now also adds environment variables USERPN_USERPART and USERPN_DOMAINPART. These contain the separate user and domain parts of USERPRINCIPALNAME.
  • File transfer:
    • The SSH Server's file transfer subsystem would exit with an exception, aborting the file transfer session, if the client tries to set a negative file time. If the SSH Server receives such file times, it will now continue the file transfer session, but will treat negative file times as invalid.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.27 [ 14 February 2023 ]

  • General:
    • Previous SSH Server 9.xx versions would incorrectly and unnecessarily allocate some thread-local storage indices for each connection, instead of at startup. This would effectively prevent the SSH Server from handling more than about 500 concurrent connections. Fixed.
  • Cryptography:
    • OpenSSL version updated to 1.1.1t. Bitvise software primarily uses Windows CNG for cryptography. We use OpenSSL for specific cryptographic algorithms not supported by Windows. Currently, these are chacha20-poly1305 and on older Windows versions, the elliptic curve secp256k1. Our software does not use OpenSSL features affected by recent OpenSSL security advisories.
  • Tasks and email notifications:
    • If more than one task was triggered by the same event, tasks could be removed from the execution queue which should not be removed, and the task that should have been removed would stay in the queue. Fixed.
    • The SSH Server would log an error when sending an email notification to multiple addresses that were duplicates of each other. Fixed.
  • File transfer:
    • When previous 9.xx versions upgraded settings from versions before 9.xx, the virtual filesystem mount point setting File sharing behavior was upgraded incorrectly. The correct behavior is to map the old Default value to Free, and the old Force value to Force. Instead, upgrading to 9.xx would change the old Default value to Force, and the old Force value to Use global defaults.
      This does not affect most users in a significant way since Free and Force behave the same for most clients. However, for users who previously changed mount point settings to force a specific file sharing mode, this oversight reset their custom file sharing settings to the new global defaults.
      This version fixes the issue for users who newly upgrade from a version before 9.xx. Users who already upgraded to a previous 9.xx version, and used the Force setting before upgrading, should check the new global file sharing settings in Advanced settings > File transfer to ensure these settings meet their requirements.
  • Control Panel and Settings:
    • When using the Log folder viewer to select and delete all log files, the SSH Server Control Panel would crash. Fixed.
    • Improved validation behavior for a number of field types in settings.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.28 [ 1 July 2023 ]
  • General:
    • The SSH Server would stop if the Stats subdirectory did not yet exist and could not be created. The SSH Server will no longer stop in this circumstance.
  • SSH:
    • When the no-flow-control extension is enabled, the SSH connection permits only one SSH channel at a time. In this circumstance, the SSH Server would refuse to open a subsequent SSH channel for a short time after the previous channel was closed. This prevented a client from opening a new channel immediately after closing the previous one. Fixed.
  • Scriptable settings:
    • When using BssCfg to generate a new host keypair, the -kpSize parameter did not take effect. Fixed.
    • When dumping settings in textual format, disabled settings could previously be included. Fixed.
    • In previous 9.xx versions, settings that accept strings could not be set to an empty string using PowerShell. Fixed.
  • File transfer:
    • If the feature to Move completed uploads did not succeed on the first attempt because the file already existed, environment variables were not expanded on subsequent attempts. Fixed.
  • Email notifications:
    • Improved diagnostic information when sending a test message.

Zaloguj lub Zarejestruj się aby zobaczyć!
 

helium

Bardzo aktywny
Ekspert
Dołączył
16 Czerwiec 2010
Posty
2204
Reakcje/Polubienia
2578
Miasto
Kraków
Bitvise SSH Server 9.31 [ 24 September 2023 ]

  • Version information:
    • This is not a new feature release, but a successor to 9.29 with continued maintenance updates.
      We skip versions containing zeros to avoid misunderstandings. For example, 9.03 and 9.30 might both be called "9.3".
    • This version continues the upgrade access amnesty introduced in version 9.25, so it can be used with any license that is valid for a previous SSH Server 9.xx version. The minimum upgrade access expiry date to activate this version is January 1, 2022.
    • You can
      Zaloguj lub Zarejestruj się aby zobaczyć!
      . (
      Zaloguj lub Zarejestruj się aby zobaczyć!
      )
  • Settings:
    • If you last saved settings using SSH Server version 6.31 or older; and then updated to, or imported such settings into, an SSH Server version from 9.12 to 9.29; then these SSH Server 9.xx versions would upgrade terminal shell settings incorrectly. Other settings would be preserved, but terminal shell settings for accounts and groups would be reset to default 6.xx values.
      Version 9.31 again correctly imports terminal shell settings last saved by versions 6.31 and older.
      If you never used SSH Server version 6.31 or older, you are not affected by this issue.
      If you used SSH Server version 6.31 or older; then updated to any version from 6.41 to 8.49, and caused settings to be saved by this version; and then updated to a 9.xx version; you are not affected by this issue.
      You are affected by this issue if you previously used SSH Server version 6.31 or older, so that your settings were last saved by this version; then updated to, or imported settings into, any version from 9.12 to 9.29. In this case, the issue would trigger when settings were first saved by the 9.xx version. Once the settings were first saved:
      • Shell access type for Windows groups would be reset to Command Prompt.
      • Shell access type for virtual groups would be reset to No shell access.
      • Shell access type for Windows and virtual accounts would be reset to Use group default.
      • This is a security issue if you have Windows accounts which should not have terminal shell access. It is a functional issue if you have accounts which should be able to access the terminal shell, but this issue caused the terminal shell settings to be changed or disabled.
      If you are affected by this issue, you should either:
      • Use Advanced settings to manually review your Windows group, Windows account, virtual group, and virtual account settings, and ensure that terminal shell access is configured as you intend, for all accounts and groups.
      • Alternately, you can update to SSH Server version 9.31 or later, and import or restore settings from a previous automatic or manually-saved backup where the terminal shell settings were correct.
    • Names and strings containing the & character were not properly displayed in lists. Fixed.
    • Improved display of list entry numbers when editing list settings entries.
    • The setting Undefined group mount points has been renamed to Excluded group mount points.
  • Tasks and actions:
    • When a configured task cannot be run because a Windows logon session could not be obtained, this is now more properly logged as a warning instead of an information event.
    • Execute command tasks which capture command output now more properly use the OEM code page instead of the ANSI code page. The OEM code page is generally used by Windows command-line programs.
  • Windows file shares:
    • For new installations, the default setting for Max total share wait time has been reduced from 20 seconds to 11 seconds. This reduces issues with common client software which times out if the server does not respond to a login attempt within 15 seconds.
  • File transfer:
    • If the administrator does not define any mount points for a user, the log message I_CHANNEL_SESSION_SFTP_REJECTED now contains more useful help.
  • IP blocking:
    • When using automatic permanent IP blocking, the automatically added Client IP address rule would be incorrectly added after other entries, including after any geographic IP rules. This could make the permanent block ineffective. Automatically added rules are now inserted more correctly at the start.

Zaloguj lub Zarejestruj się aby zobaczyć!
 
Do góry