Configuration improvements
The following configuration improvements have been made.
Unneeded Wicket warnings removed (#632735)
During the normal use of the Web Client, warning messages from Wicket about not rendered components were written to the log files. These warning messages were removed because they are not needed and cluttered the logs unnecessarily.
Truststore path logged on startup (#661809)
When starting the application server running ConSol CM, the path to the truststore is now written to the log files, so that it is directly visible which truststore is being utilized, aiding in troubleshooting related to certificate integration processes.
Configurable SameSite attribute for session cookies (#662096)
The SameSite attribute for session cookies can now be configured in the cm6-config.properties and the cm6-domain-config.properties files. The files have been modified to define the default value Lax. Other possible values are Strict and None. The XML configuration files cm6-<DB>.xml have been updated accordingly.
If you run extensions in standalone mode, e.g. CM/Track V3 or the authentication applications, you need to add the following setting to the startup command to set the attribute:
server.servlet.session.cookie.same-site=Lax
New translation cleanup script added (#663330)
When updating to ConSol CM version 6.18.0.0, a task script with the name translationsCleanupV2.groovy is added to the Scripts page of the *Web Admin Suite.
You can execute the task script to remove unneeded historical values of localized properties, which are not used in the Web Client, from the system. This reduces the size of the scene export and the scene import duration. The script only needs to be executed once, as such unneeded translations are not created anymore. Please be aware that the execution of the script might take some time.
Option to move processed emails via IMAP to a subfolder (#663446)
When using IMAP or IMAPS for fetching incoming emails, it is now possible to move the processed emails to a designated subfolder instead of marking them as SEEN or deleting them. This allows to retain the emails for future reference without cluttering the inbox.
The Settings tab of the Email configuration page of the Web Admin Suite has been adjusted for this new setting:
- The checkbox Delete read messages has been removed.
- The selector Handling of read messages has been added with three available values:
- None: Mark processed emails as SEEN and leave them in the inbox.
- Move: Move the processed emails to the folder, which is specified in the Folder for read messages setting below. The system will attempt to create the specified subfolder during email processing if it does not already exist. In case of an error during the move operation, the email will remain marked as SEEN in the inbox, and a warning will be logged.
- Delete: Remove the processed emails.
The settings are saved to new system properties from the module cmas-nimh. mailbox.*.task.process.read.messages holds the value of the setting, and mailbox.*.task.move.read.messages.folder the folder name. The existing property mailbox.*.task.delete.read.messages is removed on update. Its value is mapped to mailbox.*.task.process.read.messages so that the defined behavior remains after update.
The settings can be overridden for specific email accounts in the account details in the Accounts tab.
The setting is ignored for the POP3 protocol, where emails are always deleted after processing.
Database settings optimized (#663715)
The XML configuration files cm6-mysql-8.xml, cm6-dwh-mysql-8.xml, cm6-postgresql.xml and cm6-dwh-postgresql.xml have been adjusted by setting sharing of prepared statements to false in order to avoid seldomly occurring import problems.
<share-prepared-statements>false</share-prepared-statements>
Example proxy configuration updated (#663882)
The example configuration for running ConSol CM behind a proxy has been updated. The setting ProxyPreserveHost has been set to Off in the files cm.http.apache.conf and cm.https.apache.conf (Linux), and http-vhosts.conf and https-vhosts.conf (Windows).
Proxy configuration without AJP (#664168)
ConSol CM has transitioned to an AJP-free proxy configuration, enhancing compatibility with a broader range of proxy solutions and simplifying the proxy setup by relying on plain HTTP instead of the Apache-specific AJP protocol.
The example proxy configuration has been updated by replacing the AJP paths by HTTP ones in the files envvars, cm.http.apache.conf and cm.https.apache.conf (Linux), and httpd, http-vhosts.conf and https-vhosts.conf (Windows).
The XML configuration files cm6-<DB>.xml and cm6-dwh-<DB>.xml have been modified by commenting out the lines referring to the AJP listeners.
With the removal of AJP, an additional issuer parameter is required for the authentication applications. The issuer can either be provided in the start script of the authentication application or via system property:
- User authentication
- Scope: Web Client and Web Admin Suite
- Property:
cmas-core-security | cmas.auth.user.issuer - Start script parameter:
-Dcmas.auth.user.issuer
- Contact authentication
- Scope: CM/Track V3
- Property:
cmas-core-security | cmas.auth.portal.user.issuer - Start script parameter:
-Dcmas.auth.portal.user.issuer
The value must match the value of the OIDC authority of the respective application. The properties are automatically set to the correct values on startup. You only need to modify them if you encounter OIDC authentication issues related to reverse proxies. Always consult the ConSol CM support first.
Global sender address for system notifications (#664798)
The configuration of the From address used for server-generated email notifications has been streamlined by introducing a global system property which is used for all notifications. This simplifies the administration of email notifications as the email address needs to be specified only once.
The system property system.mail.notification.from has been added to the module cmas.core.server for this purpose. Its value is used for all server-generated email notifications, including error alerts, password resets and two-factor authentication message. It can be overridden by definitions of From in the used template or more specific properties. As a last fallback, the property cmas-core-server | admin.email is used. On update, it is filled automatically with the value of cmweb-server-adapter | mail.from.
The new property has been added to the Addresses tab of the Email configuration page of the Web Admin Suite.
The system property cmweb-server-adapter | mail.from is not used anymore for server-generated notifications. It is used only for emails sent from the Web Client.
Scene for CM/Ticketing updated (#665249)
The scene for the CM/Ticketing product, which can be selected when setting up a new ConSol CM system, has been updated to use several new features introduced in this version.