New official update is just released. Here is a brief report of what's new.
Improved processing buffer
We improved network data processing buffer to be more performant, less memory demanding and more robust. New buffer engine should increase data processing by 2-3 times faster.
MS AD integration improvement
SSO integration with MS AD / Kerberos is improved. We changed some SSO mechanism internals making it more reliable.
Multiple KDC support
When multiple Kerberos servers are defined through the DNS, previous version might have problems validating tickets if the first (prioritized) Kerberos server is down. New update fix this issue, now it will automatically switch to a new - first available Kerberos service.
Kerberos test page improvements
Green Screens Server contain a test page used for testing and troubleshooting SSO/Kerberos issues during setup. Updated version will give more information on the page including User Groups (new feature) and many more.
Kerberos/ MS AD user roles support
We added full Kerberos Ticket user group extraction and available user group retrieval from KDC. This allows us more control. Now, there are 2 default user groups "GS User" and "GS Admin" defined. If enabled, will block Kerberos Tickets for users not belonging to mentioned user groups to sign-on.
Web Admin Console SSO
Adding Kerberos User Group feature allowed us to enable SSO web admin access based solely on OS logged in user within domain network without requiring login credentials.
Other updates
Latest update can't work with previous runtime version as we updated JVM to the latest version, server runtime is updated and common libraries were updated. Some of libraries have parts of the API's changed because of which we had to update our code. This is the reason why along the product update, runtime update is also required.