CVS log for loncom/interface/domainprefs.pm

Up to [LON-CAPA] / loncom / interface

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- Remove domain config unused beginning with 2.11.0 (2014)
  Headers on main page had used rolecolors->{role}->{'img'}, [role is one of
  student, coordinator,author or admin], when Remote Control was in use, prior
  to rev. 1.949 (main branch) and rev 1.1075.2.21 (2.11 branch).

- prepend # before storing font color default for domain.
- lower case font color choice.
- only save font color to domain's configuration.db if different to default.

- For 2.11.4 (modified)
  Include changes in 1.443

- Bug 5273.
  Which user infromatio fields may be modified for co-authors bu a co-author
  manager is a domain configuration.

- For 2.11.4 (modified)
  Fix typo in 1.160.6.118.2.22

- For 2.11.4 (modified)
  Include a small number of changes from the many in 1.430.

- For 2.11.4 (modified)
  Include changes in 1.438. 1.439, 1.440, 1.441, 1.442

- For 2.11
  Backport 1.442

- Add some missing closing tags.

- For 2.11
  Backport 1.411, 1.420 (part), 1.433

- Bug 6990. Ability to download tarball of Authoring Space's files/directories.
  - Support use of domain default and also override for individual author(s).
  - Check if there is sufficient disk space to create archive file
  - Each author may only have one archive request in process at a time
  - Remove archive file after download
  - Log archive creation and deletion actions in nohist_archivelog.db in
    author's data directory.

- Bug 6990: Ability to download tarball of Authoring Space's files/directories.
  Add option to domain's Authoring Space defaults, and capability to override
  for individual author(s).

- Fix typo. Display changes to Available Editors in case where domain defaults
  for Authoring Space have not previously been set.

- Available editors in Course Authoring Space, or when editing an html file
  created in a course folder using the Course Editor is a domain default,
  which can be overridden in specific course(s) by a Domain Coordinator.

- For 2.11.4 (modified)
  Include changes in 1.437

- Starting state of standard LON-CAPA menus (collapsed or expanded) when
  using Daxe Editor is one of domain's Authoring Space defaults which can
  be overridden by Author (or coauthor).
- "Authoring Space Configuration" in User Preferences (also accessed via:
  Settings > Editing Options when author or co-author role is selected)
  provides user with override when Daxe editor is a permitted editor.

- For 2.11.4 (modified)
  Include changes in 1.429, 1.431, 1.435, 1.436

- Remove trailing white space.

- Typo

- For 2.11.4 (modified)
  - Fix typo in 1.160.6.118.2.18

- For 2.11.4 (modified)
  Include changes in 1.434

- Bug 6907
 - In-course definition of applications which can use LTI-mediated deep
   linking to launch a LON-CAPA session.
    - Domain Coordinator can list recommendations for  specific launcher
     application(s), to be shown in Course Settings > Link Protection panel.

- For 2.11.4 (modified)
  Include changes in 1.433

- In display of host(s) for WAF, do not split hostname across lines.

- In display of host(s) for WAF, do not split hostname across lines.

- Availability of "Course Authoring Space" set in Course Community defaults
  in domain (by container type), can be overridden for specific course(s).
- Add some help files for Course Editor and View/modify a course/community
- Add icons for use of Course Authoring Space.

- Update domdefaults in memcache if authordefaults changes in domain config

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- Add "Authoring Space defaults" domain configuration
  - Two types: defaults which author or co-author can override; defaults
    which domain coordinator can override.
  - Setting of existing domain defaults for Authoring Space disk quota
    and availability of webDAV moved from Blogs, ... , webDAV/quotas, ...
    panel to new panel.

- For 2.11.4 (modified)
  Include changes in 1.428

- Domain configuration for default cumulative quota for all group portfolio
  spaces in course can be overridden for a specific course by a Domain
  Coordinator.

- For 2.11.4 (modified)
  Include changes in 1.267 (part), 1.320, 1.321, 1.325, 1.326, 1.337, 1.351,
  1.363, 1.384, 1.390, 1.391, 1.392, 1.405, 1.419, 1.420, 1.421, 1.422, 1.423,
  1.424, 1.425, 1.426 (part)

- Support case where assignment of roles in a different domain is queued
  pending acceptance of the role by the role recipient.
  - A user can also choose to decline the role.
  - Domain configuration can be set for domain roles, co-author roles,
    course roles and community roles.

- Remove duplicate check_switchserver() subroutine added in rev. 1.405.
- Remove declaration of unused hash -- %current -- added in rev 1.325.

- Remove trailing white space
- Remove some lines containing only a line feed
- Fix some indents
  No code changes.

- Bug 6754
  Support option: "Encrypt stored consumer secrets defined in domain"

- Bug 6754
  - Can select from tool definitions set in course's domain or in course
    itself when using External > "External Tool" in Course Editor.
  - DC's configuration for allowed use of esternal tools within course types
    (can be overridden for specific course(s)) determines which External Tool
    types (if any) may be added to a course.
  - Signing of LTI payload used to launch an external tool now carried out
    on course's home server.

- Bug 6754
  - Domain configuration to set defaults for which course types can use:
    (a) External Tools defined/configured in domain, and (b) External Tools
    defined/configured in course.
  - Domain defaults can be overridden by DC for specific course(s) via:
    Main Menu > "View or modify a course or community".

- Bug 6754
  - Support encryption of secrets set for External Tools in a domain.
  - Requires perl-Crypt-CBC
  - External Tools can be configured in a course via Course Settings by a user
    with 'opa' privilege in the course.

- Add missing closing unordered list tags for display of changes made to
  domain config for WAF/Reverse Proxy and Availability of User Information.

- Eliminate javascript error when configuring link protection in a domain
  with no existing LTI configuration.

- For 2.11.4 (modified)
  Include changes in 1.415

- For 2.11.4 (modified)
  Include changes in 1.414

- For 2.11.4 (modified)
  Include changes in 1.411

- Use shorter description

- Domin config for which DCs should be notified of role requests for users in
  domain for whom roles assigned in other domains require DC authorization.

- Wording change and fix typo in rev. 1.357

- Hint to browsers to not autofill password fields.

- For 2.11.4 (modified)
  Include changes in 1.413

- URLs in direct links to LON-CAPA messages in notification email, and to
  publicly accessible syllabus or portfolio files can be set to use hostname
  of portal server instead of user's homeserver as first part of URL.

- Bug 6971 Individual user preference for Time Zone.

- For 2.11.4 (modified)
  Include changes in 1.412

- Dual SSO and non-SSO login from /adm/login
  - Display of domain configuration for each server split into two tables
    so input textboxes can be longer.
  - "Pop-up if iframe" (Y/N) item added.  If Y, when login page is in an
    iframe, SSO log-in dialog will be displayed in a new window, i.e.,
    not within the iframe, e.g., to satisfy sameorigin requirement in
    x-frame-options in header sent by SSO server.

- Prevent ISE in unconfigured domain.

- After changing trust settings update trust:domain item in memcache on
  current server, and devalidate cached entry on institutions servers.

- For 2.11.4 (modified)
  Include changes in 1.409

- For 2.11
  Backport 1.409

- Domain configuration to allow authentication of an alternate username, if
  username entered differs from real username in a predictable way,
  e.g., username entered in log-in page was email address (userid@example.tld)
  instead of just userid.

- For 2.11.4 (modified)
  Fix typo in rev. 1.160.6.118.2.5

- For 2.11.4 (modified)
  - Add some scope changes and a line omitted in changes in 1.160.6.118.2.5

- For 2.11.4 (modified)
  Include changes in 1.320 (part), 1.405, 1.406, 1.407, 1.408 (all with
  modifications: no password expiration setting, no LTI Consumers settable.

- Coding style. No functionality change.
  Curly brace around variable name in place of escaping trailing underscore.

- Bug 6907.
  - Devalidate domain defaults when changes made to ltisec config in domain.

- Bug 6907
  Link Protectors for deep-linking from launch from LTI Consumer can be
  configured at both a domain level and a course level.

- Bug 6907
  - Rename "LTI Provider" domain config item.
  - Add three additional sections: "Encryption of shared secrets",
    "Rules for shared secrets" and Link Protectors (domain).
  - Keys used in domain for a particular library server may only be set in
    a session on that server (and use Lond.pm and not lonc/lond).
  - Min and max length and character requirements can be set for secrets used
    for LTI-based link protection for deep-links.

- For 2.11.4 (modified)
  Include changes in 1.404

- Bug 6907
  - Domain default to determine whether LTI launch of deep-linked URL requires
    student to authenticate; can be overridden for specific course(s).
  - If domain config permits it, link protection setting in a course can
    specify whether to accept username included in LTI payload, and action
    to take if username is not for an enrolled student.
  - Second arg passed to ltiauth::invalid_request() is text string stating why
    LTI launch was invalid.

- For 2.11
  - Fix typo in 1.160.6.119 backport of 1.402

- For 2.11.4 (modified)
  Include changes in 1.403

- For 2.11
  Backport 1.403

- Fix typo in rev. 1.402

- For 2.11.4 (modified)
  Include changes in 1.402

- For 2.11
  Backport 1.402

- Domain config for alt attributes for banner, main logo, and domain logo
  used on log-in page.
- Add id attributes to img tags.

- For 2.11.4 (modified)
  Include changes in 1.267, 1.273, 1.296, 1.297, 1.298, 1.307, 1.308,
                     1.318, 1.319 (modified), 1.322, 1.323, 1.324.

- For 2.11
  Backport 1.401

- Bug 6914. Change needed in rev. 1.388

- For 2.11
  Backport part of 1.389 omitted from changes included in rev. 1.160.6.113.

- For 2.11
  Backport 1.399, 1.400

- Autoenroll failsafe mechanism configuration
  - Format changes for radio buttons to set failsafe condition
  - Missing double quotes in rev. 1.399 changes
  - Remove trailing white space

- Extend "zero enrollment failsafe" mechanism so it can also (optionally)
  protect against unwanted drops if partial data retrieved from institutional
  source for specific institutional section.

- For 2.11
  Backport 1.397, 1.398.

- Add option to choose inline preview (new) or pop-up (old) for Chemical
  Reaction response items.  Default is inline preview. Domain setting can
  be overridden in a course.

- Bug 6955 IP-based blocking.
  - Course search, Stored links, and Resource Annotations added to functions
    which can be blocked by client IP. (User with evb priv in course exempt).

- For 2.11
  Add lines omitted in 1.160.6.113 backport of 1.381 changes.

- For 2.11
  Backport 1.373, 1.374, 1.376, 1.381, 1.382, 1.383, 1.385, 1.386, 1.387,
           1.388, 1.389, 1.393, 1.394, 1.395, 1.396

- Dual SSO and non-SSO login from /adm/login for use with additional SSO
  mechanisms besides Shibboleth.
  - Default is to use /adm/sso for "authentication" URL.
  - Different authentication URL can be set with lonOtherAuthenUrl perlvar.
  - Update documentation for lonshibauth.pm and lonshibacc.pm
  - Wording change for WAF/Proxy domain configuration
  - If Apache config contains lonSSOEmailOK set to 1, default removal
    of @ "internet domain" from username for SSO authenticated users in
    lonshibacc.pm is skipped.
  - &alias_shibboleth() routine in lonnet.pm renamed alias_sso().

- Bug 6955. Add some closing tags omitted in rev. 1.394.

- Bug 6955. Domain configuration to limit selection of course role based on
  user's IP address.

- Bug 6914
  - Sanity checking for IP address(es) and IP ranges, and store as
    IP netblock(s) in CIDR notation.

- Bug 6754
  - Storing mapping of Consumer course identifier to LON-CAPA courseID
    honors rules for allowable course types, and also general Y/N option for
    any type.
  - When a course is created due to launch from LTI Consumer, course's
    environment.db contains internal.lti set to 1, and extended course type
    is identified as "lti".

- Bug 6754
  Basic LTI authentication option for launch from Consumer for which user
  information but no course information are provided on launch.

- Sanity checking in LTI Provider configuration, and retrieve correct form
  item to update ordering of available providers.

- Discontinuation of dual SSO and non-SSO login for a server shown as a change.
- Correct output when use of balancer cookie changed from "Yes" to "No".

- Bug 6914
  Domain configuration for WAF/Proxy includes Y/N option for use of alias in
  redirection to /adm/sso for server(s) supporting Shibboleth Single Sign On.

- Use fully qualified subroutine name.

- For SAML authentication (Shibboleth) config for each of domain's nodes
  to set /adm/log-in as landing page for user toggle between SSO or non-SSO.

- Bug 6959 Automated update can be configured to skip checking for changes
  in user information for users deemed inactive.

- New arg ($encrypt) for &get_dom, &put_dom, &dump, and &put calls in
  lonnet.pm, so request encrypted, and response (&get_dom and &dump)
  also encrypted, unless requests will go to current server.

- Bug 6914
  Update domain config UI for WAF/Proxy for an institution with more than one
  LON-CAPA domain, in the case where different nodes belong to different
  domains.

- Bug 6914
  Update domain config UI to support settings documented in
  Domain_Configuration_WAF_Proxy.tex

- Bug 6914
 - Update domain config UI to support settings documented in
   Domain_Configuration_WAF_Proxy.tex
 - Use /adm/migrateuser to handle redirects when user with a LON-CAPA session
   switches between access via VPN and not via VPN (and vice versa).

- For 2.11
  Backport part of 1.380 missed in 1.160.6.111 backport.

- For 2.11.3 (modified)
  Include changes in rev. 1.380

- For 2.11
  Backport 1.380

- Punctuation change to facilitate reuse of localized phrase. Some missing
  localization calls added.

- For 2.11.3 (modified)
  Include changes in 1.379

- For 2.11
  Backport 1.379

- Wording change

- For 2.11.3 (modified)
  Fix typo in 1.160.6.102.2.8

- For 2.11.3 (modified)
  Include changes in 1.378

- For 2.11
  Backport 1.378

- Move rows in configuration for "Nightly status check e-mail" for thresholds
  for e-mail to admin(s) and e-mail to developers next to each other.
- Wording change

- For 2.11.3 (modified)
  Include changes in 1.340, 1.341, 1.377

- For 2.11
  Missing paren and fix indents in 1.160.6.107 backport of 1.340

- For 2.11
  Backport 1.340, 1.341, 1.377

- Save dom config for weight for unsend count (before adding to warnings).

- Bug 6914. Consistent naming of domain configuration key: wafproxy.
  Rename exempt key in inner hash as 'vpnint', and add vpnext key to inner
  hash (required where VPN users will not use WAF, but other users will).

- For 2.11.3 (modified)
  Include changes in 1.375

- For 2.11
  Backport 1.375

- Need to devalidate loadbalancing item in memcache when only change is
  deletion of an existing loadbalancer.

- Bug 6914. Add missing call to &wafproxy_titles(), and some readability
  changes to web form used to configure WAF/reverse proxy settings.

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- For 2.11.3 (modified)
  Include changes in 1.318, 1.319 (modified), 1.322, 1.323, 1.324

- Bug 6935

- For 2.11.3 (modified)
  Include changes in 1.371

- For 2.11.2 (modified)
  Required for changes in rev. 1.160.6.84.6.2

- For 2.11
  Backport 1.371

- For 2.11.2 (modified)
  Include changes in 1.318, 1.319 (modified), 1.322, 1.323, 1.324

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- Add domain configuration to offload users from other institutions, on next
  access (after recording any submission to a problem).
- Switching user session to a different server can jump to the same resource
  currently being viewed when encrypturl is in effect.

- For 2.11.3 (modified)
  Include changes in 1.160.6.104

- For 2.11
  Backport 1.369, 1.370.

- Configuring internally authenticated passwords.
 - Fix logic in: warnIntPass() so max length and number to save cab be set.
 - Display requirements for characters when changes made to domain config.

- Fix display of changes to domain configuration for passwords.
- Improve readability of "Resetting Forgotten Password" and
  "Course Owner Changing Student Passwords" sections, where a domain has
  more than a couple of institutional types.

- For 2.11.3 (modified)
  Include changes in 1.160.6.103

- For 2.11
  Typo in 1.160.6.87 backport of 1.327.

- For 2.11.3 (modified)
  Include changes in 1.267, 1.273, 1.296, 1.297, 1.298, 1.307, 1.308

- For 2.11
  Backport 1.368

- Display changes to domain configuration for passwords in case where no
  config previously set and/or changes made to Captcha settings.

- For 2.11
  Backport 1.315

- For 2.11
  Fix typos in 1.160.6.98 and 1.160.6.99 backports of 1.354 and 1.365.

- For 2.11
  Backport 1.365, 1.366, 1.367 (except password expiration parts).

- javascript function:  warnIntPass() warns about invalid value for
  number of previous passwords saved in domain config for passwords

- Minimum password length is an integer.

- Domain Configuration for passwords for internally-authenticated users.
  - Default minimum password length of 7 set in a single location.
  - Value for min length set in domain's configuration may not be less than
    the default.
  - javascript function:  warnIntPass() warns aboit invalid values for
    min and max length, expiration time, and number saved for domain
    config for passwords.

- For 2.11
  Backport 1.354, 1.355, 1.356, 1.358, 1.359, 1.361
  (except password expiration parts).

- For 2.11
  Backport 1.346, 1.347, 1.348

- For 2.11
  Typo in 1.160.6.93 backport of 1.305

- For 2.11
  Typo in 1.160.6.91 backport of 1.350.

- For 2.11
  Backport 1.342

- For 2.11
  Backport 1.303, 1.304, 1.305

- For 2.11
  Backport 1.364.

- Course categories defined in a domain are cached for 1 hour.
- Devalidate cats cache for domain if categories changed by DC.

- Bug 6754. LON-CAPA as LTI Provider.
  Domain configuration to support session expiration in LON-CAPA,
  after user logs out of LTI Consumer which originally launched session,
  (if Consumer supports logoutServiceUrl; e.g. custom_logout_url in Canvas).

- For 2.11
  - Backport 1.350

- Instance missed for name change from $type to $status (in rev. 1.305).

- Rules for length and/or characters in a LON-CAPA password (internal auth)
  in effect for passwords created by &create_password() in Enrollment.pm

- Domain configuration for availability of ("directory" and "non-directory"
  user information) when a user from one domain is assigned role in another.

- Domain configuration which allows Course Owner to change a student's
  password (with conditions):
  - Restrict to specified institutional status types for (a) course owner
    and (b) student.

- Fix typos.

- Domain configuration for availability of ("directory" and "non-directory"
  user information) when a user from one domain is assigned role in another.

- Domain Configuration for Passwords for internally authenticated users.
  - Rules for LON-CAPA passwords can include: number of user's previous
    passwords to save (with reuser by that user disallowed).

- Update cached passwdconf if DC changes domain configuration for passwords.

- Domain Configuration for Passwords for internally authenticated users.
  - Options for "Forgot Password" utility: link lifetime, case sensitivity,
    information required, e-mail types, custom text.
  - Options for encryption of Stored Passwords (moved from "Defaults" menu).
  - Rules for LON-CAPA Passwords (length, characters, expiration).
  - Option to allow Course Owner to change student's password (with conditions).

- Display errors when saving bubblesheet format file in separate paragraph.

- Remove trailing white space.

- Fix name for Y/N LTI passback radio buttons in toggleLTI() javascript.

- loncron will check for changes in IP addresses of LON-CAPA hosts in network.
  Domain configuration for recipient of e-mail if changes occur. Also logged
  permanently in /home/httpd/perl/logs/hostip.log

- For 2.11
  Backport 1.314, 1.349

- Default renderer for unconfigured domains set in a single location.

- For 2.11.2 (modified)
  Include changes in 1.346, 1.347, 1.348.

- Uploaded bubblesheet data can consist of comma separated values.
  Wording changes and display style for bubbletype div ste to "block".

- Uploaded bubblesheet data can consist of comma separated values.
  - Domain configuration for conversion of csv file to txt file:
    (a) Delete first line (column titles) Y/N
    (b) Remove leading white space except question responses Y/N
    (c) Pad PaperID with leading zeroes, up to PaperIDlength Y/N

- Uploaded bubblesheet data can consist of comma separated values.
  - Data will be converted to one of formats specified in bubblesheet
    format file, prior to saving in scantron_orig_* file.
  - Domain configuration for bubblesheet data format allows order of
     columns in csv data to be specified.
  - &get_scantronformat_file and &get_scantron_config moved from grades.pm
    to lonnet.pm to facilitate re-use.

- Bug 6400 Deep-linking
  - URLs like /adm/lti/tiny/domain/uniqueID can be used to restrict use of
    deep links to access from another LTI-enabled application (no user data
    passed in this context).

- Appropriate feedback when ssl, trust or session hosting configuration is
  changed to "not in use".

- Typo

- Domain config for load balancer to use cookie to record offload target.

- Scanning of lonnet.perm.log by loncron
  - Information about which nodes have unsent update transactions is logged.
  - Specific nodes can be excluded from unsend count (for delayed updates)
    via domain configuration.
  - Weight for unsend count (before adding to "warnings") is configurable.

- Nightly loncron: threshold for sending mail, and weighting for notices,
  warnings and errors in "totalcount" are configurable in node's default domain.
- Whether to copy status mail to core dev. group (and threshold) configurable.

- Typo

- For 2.11
  Backport 1.302 (with same modification as 1.160.6.84.2.8).

- For 2.11
  Backport 1.312, 1.313, 1.316

- For 2.11
  Backport 1.327, 1.329, 1.330, 1.331, 1.332, 1.333, 1.334 (part)

- Use correct identifier.

- Bug 6754 LON-CAPA as LTI Provider
  - Support requests to /adm/service/passback and /adm/service/roster in
    which OAuth data in request header.
  - Support LTI Basic Outcomes Service (1.1) in which grade (a decimal) is
    included in XML in the request body (with oauth_body_hash in the header).
  - LTI Provider domain configuration to set grade passback using either
    Outcomes Service (1.1) -- the default -- or Outcomes extension (1.0).

- For display of changes to SSL settings in domain configuration,
  eliminate keys from outer changes hash, if inner hash is empty.

- Need to check if the existing domain config for ssl action points at hash
  to avoid ISE when saving SSL config for the first time.

- Satisfy w3c validation.

- Satisfy w3c validation (balance tags).

- Typo.

- Satisfy w3c validation.

- Fix type attribute for input tags.

- Satisfy w3c validation: id attributes and balance span tags.

- Selected positions for default categories modified for additional category
  (Placement tests).

- satisfy w3c validation.

- Bug 6754 LON-CAPA as LTI Provider
  - Domain defaults for each Consumer
    - display standard LON-CAPA menus? (top line and/or second line)
    - menu include: fullname, role, context, logout, and/or grades?
  - Course Coordinator can override in course via "Course Settings".

- Bug 6754 LON-CAPA as LTI Provider
  - Creation of new LON-CAPA user account available from an LTI Consumer.
  - Creation of new LON-CAPA course available from an LTI Consumer.
  - Self-enrollment in a LON-CAPA course available from an LTI Consumer.

- Bug 6754 LON-CAPA as LTI Consumer
  Domain configuration for information sent to Tool Provider on launch
  includes choice of: username, or username:domain in LON-CAPA,
  when "User" is included in the data to be sent (as lis_person_sourcedid).

- Bug 6754 LON-CAPA as LTI Consumer
  - Signature method can be HMAC-SHA1 (default), or HMAC-SHA256, if LTI
    Provider supports it.

- Bug 6754 LTI Integration
  - Default nonce lifetime for LON-CAPA as LTI Provider is 300s.
  - Domain configuration to set nonce lifetime for each Tool Provider
    when LON-CAPA is LTI Consumer (used to validate requests from
    Tool Provider for a roster or to store a grade (default is 300s).

- Bug 6754 LON-CAPA as LTI Provider
  Correct name for form items to indicate whether roster will be accepted
  from specific Consumer, and whether grades can be sent back to Consumer.

- Bug 6754 LTI Integration: LON-CAPA as LTI Provider
  - Work in progress

- LON-CAPA as LTI Consumer.
  - Unique lis_result_sourcedid item created on tool launch for passback
    of grades from tool provider to LTI Consumer.
  - Unique 'ext_ims_lis_memberships_id created on tool launch for tool
    provider to use to obtain course roster from LTI Consumer.
  - Domain configuration to specify how long after launch the two items can
    be used -- days for passback of grades; seconds for retrieval of roster.
- LONCAPA-prerequistes requires perl-UUID-Tiny to be added.

- LON-CAPA as LTI Consumer.
  - Value in custom field passed to Tool Provider on launch can be the value
    of an item in %env. (Include LONCAPA::env{<var name>} when adding the
    custom field in the domain configuration, where <var name> is the
    env var for which the value is to be sent).
  - Course Coordinator can set a path to append to the standard URL to
    which the signed POSTed data are sent. (Path can be different for
    each tool instance).

- Remove unused scalar.
- Add a space before list of custom LTI fields for an external tool.
- Replace erroneous display="" attribute with correct style="" attribute
  in a div tag.

- For 2.11.2 (modified)
  - Include changes in 1.316.

- Untaint system() calls by forcing list processing mode.
- Use three-argument open() to separate file mode from the filename.

- For 2.11.2 (modified)
  - Improvement to modification in 1.160.6.84.2.5 (changes in rev. 1.302).

- For 2.11.2 (modified).
  - Include changes in rev. 1.308, 1.312, 1.313.

- For 2.11.2 (modified).
  - Include changes in rev. 1.160.6.86

- For 2.11
  - Typo in rev. 1.160.6.79 backport of changes in rev. 1.290.

- For 2.11.2 (modified).
  Include changes in rev. 1.302

- For 2.11.2 (modified).
  - Include changes in 1.315, and 1.160.6.85.

- For 2.11
  - Backport one change from rev. 1.305 to correct name of key in
    usercreation hash in domain's configuration.db

- Domain configuration to override domain's helpdesk settings for e-mail
  recipients, and optionally added text, based on requester's affiliation
  (e.g., faculty, staff or student).

- Bug 6867
  - Domain configuration to set default math renderer for <m> tag content.
  - Default renderer for unconfigured domains changed from tth to MathJax.

- For 2.11.2 (modified).
  Include change in 1.307

- Sanity checking.

- Domain used in subdirectory for storage of textbook cover image
  set to textbook course's domain.

- Add missing space.

- Typo

- Use 2.12 feature pre-release, in modified 2.11.2.
  Self-creation of user accounts using e-mail verification with settings
  dependent on requester's (self-reported) institutional status.
  Changes in rev. 1.302, 1.303, 1.304, 1.305.

- Display affiliation description instead of interval identifier.

- White space changes only.

- Sanity checking.

- Use unique identifier when creating path for icon for new LTI tool
  added to domain.

- Replace valign and align attributes for <th> and <td> with CSS.

- Self-creation of user accounts using e-mail verification.
  - Options set by domain coordinator for account requests verified by e-mail
    for: processing, restrictions on permitted e-mail addresses, and choice
    of username can be set to different values, depending on requester's
    (self-reported) institutional status.
  - Setting which status types can be self-reported by requesters using
    e-mail verification moved from
    "Default authentication/language/timezone/portal/types" panel to
    "Users self-creating accounts" panel.
  - Web form used to request account prompts user for appropriate responses
    depending on self-reported status, and e-mail and username constraints.

- Fix typos.

- Self-creation of user accounts using e-mail verification.
  - User can be prompted to choose affiliation (e.g., instructor, student,
    other etc.).
  - User can be given option to choose a username, while e-mail address
    still used for verification. A required e-mail domain can be set.
  - Domain Coordinator can display user-selected status and user's e-mail
    address when choosing to approve queued account requests.

- Bug 6854.
  Addition of 'default' to status types, and (All Users or Other Users)
  to usertypes in print_selfcreation() needs to be made to copies of
  $types array ref and $usertypes hash ref to avoid affecting other routines
  using loncommon::sorted_inst_types(() in the same request.

- Revert temporary testing change.

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- For 2.11
  - Backport 1.301

- Sanity checking.

- For 2.11
  - Backport 1.300

typo

- For 2.11
  - Backport 1.299

- Facilitate localization.

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1).
  - Display options are now: iframe, tab and window.

- Key and Secret for LTI Tools are stored in a separate GDBM file
  (encconfig.db) on primary library server in domain so more specific domain
  trust settings can apply than is the case for regular domain configuration
  (in configuration.db).
- Storage and retrieval of data from GDBM files for domain, with namespaces
  beginning 'enc' use encryption when data are transferred.

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1).
  When LTI Tool set to be accessed via link to open new tab,
  domain configuration for each Tool includes:
  (a) default link text
  (b) default text block
  (c) whether link text and/or text block content configurable in course.

- For 2.11
  - Backport 1.295

- If LON-CAPA Directory searches are disabled for other domains, enforce
  that on the lond side, in case user session is hosted on a 2.11.1 (or earlier)
- Expire 60 minutes caches of 'usersessions' and 'directorysrch' settings
  (used by lond) on domain's servers when domain configuration changes.

- For 2.11
  - Backport 1.294

- Domain configuration for internally authenticated users.
  - (a) Option to switch from crypt to bcrypt automatically when user is authenticated.
  - (b) Option to set bcrypt cost.
  - (c) Option to compare bcrypt cost for user with current domain config
        when user is authenticated.
  Defaults are: (a) No, (b) 10; (c) No

LON-CAPA Network (SSL) domain configuration.
- Options for SSL usage can be set separately for outbound connections (lonc)
  and inbound connections (lond).

- For 2.11
  - Backport 1.290, 1.291, 1.292.

- Fix quotes.
- Use shorter identifiers for ad hoc role restrictions (dh and da) for
  Domain Helpdesk (dh role) and Domain Helpdesk Assistant (da role).

- Access options for ad hoc roles for helpdesk personnel set at domain level
  (with override within a course), expanded to differentiate availability to
  Domain Helpdesk or Domain Helpdesk Assistant.

- Domain Helpdesk Assistant role for use by domain helpdesk student employees
  - browse access to shared repository (including own domain) is excluded.

- For 2.11
  - Backport  1.286, 1.288, 1.289

- Remove trailing white space.  No code changes.

- Delay looping over @mailings array until populated.
- Wording change in message displayed when no changes made to e-mail contacts
  or helpdesk form settings.

- For 2.11
  - Backport 1.285, 1.287.

- &get_active_dcs() moved to lonnet.pm and renamed: get_active_domroles(),
  with sencond arg -- ref to array of domain roles.

- For 2.11
  - Backport 1.284

- Helpdesk web form
  - Domain configuration to specify which form fields besides E-mail address,
    Subject, and Description should be shown (some can be required fields).
  - Domain configuration to send submitted form to specified e-mail address(es)
    for user from other domains -- if no recipient set in user's domain for help).
  - Domain configuration to automatically include a specified string in the e-mail
    sent -- either prepended to the subject, or to the body.
  - If form is visited by a logged-in user with a role selected in an official
    course, the user can change the course code in the linked select boxes,
    in order to ask about a different course.

- Ad hoc roles for helpdesk personnel.
  - Domain configuration for:
    - which user(s) with dh role in domain may use each ad hoc role.
      - set by institutional status, or by include specific people, or by
        exclude specific people.
    - assign role description (displayed on Roles page, and at top left of
      page, when role active).
    - assign role order (numerical).
  - Course configuration (available for editing by course owner, and viewing
    by co-owner(s).
    - can override domain defaults for which dh role users can use ad hoc role(s)
      in course.
    - can override domain defaults set for course-level privileges for ad hoc
      role(s).

- Domain Configuration for dedicated load balancer includes option to
  permit "Hosting on balancer itself".
- If balancer has lowest load, it will host the user session for a user
  logging in.

- For 2.11
  - Backport 1.283

- lonnet::definerole() used to store custom roles.

- For 2.11
  - Fix typo in 1.160.6.73

- For 2.11
  Include "Support Settings" configuration.
  - Reverse part of 1.160.6.1; backport 1.282.

- Domain configuration (Support Settings) allows custom course role(s) to be
  defined which will be available for domain helpdesk staff to select as
  ad hoc role(s) via "View a course or community" in main menu.

- Display of status of LON-CAPA SSL certificates in Domain Configuration
  for "LON-CAPA Network (SSL)" item restricted to an institution's own
  LON-CAPA nodes.

- For 2.11
  - Backport 1.277, 1.278

- For 2.11
  - Typo in 1.160.6.70 backport of 1.276

- For 2.11
  - Backport 1.276, 1.280.

- Remove duplicate declaration.

- Domain Trust Settings

- Remove debug line.

- Domain Configuration for LON-CAPA Directory searches for user information
  for users in a domain.
  - Can disable for all, or can disable only for other domains.
  - Default: enabled for all domains.

- Lifetime of temporary md5_* tables (used to speed up access to student
  performance data, e.g., for Chart or Statistics), can be set as domain
  default (based on course type), and be overridden by a DC in a course.

- For 2.11
  - Backport 1.269, 1.270

- For 2.11
  - Backport 1.274

- For 2.11
  - Backport 1.268

- For 2.11
  - Backport 1.265

- Use Server Name Indication (SNI) and SSL when replicating content from
  /raw/.
- Domain status screen has link to show status of LON-CAPA SSL certificates.
- "SSL" domain config for (a) "internal" LON-CAPA SSL connection to servers/VMs
  in other domain, (b) Replication of domain's resources to other domains.
- Replication can use name-based virtual hosts with SSL, with verification of
  client certificate (cert: /home/httpd/lonCerts/lonhostnamecert.pem, signed
  by LON-CAPA CA, with Common Name of internal-<server hostname>, same IP address
  as server hostname).

- Bug 5464
  Can set failsafe value in domain (or override in Auto-enollment course
  configuration to avoid unwanted dropping of students when no data are
  retrieved for a particular inststitutional section.

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1).
  - Domain cofiguration to determine whether context_label, context_title,
    and launch_presentation_document_target LTI parameters can be configured
    for each instance of use of LTI Tool in a course.

- Bug 6808. New course container -- "Placement" for Placement Tests.

- Bug 6808. New course container -- "Placement" for Placement Tests.
  Work in progress.

- Support version 2 of Google reCAPTCHA.

- Support version 2 of Google reCAPTCHA.

- Fix typo.

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1). Work in progress.

- For 2.11
  Backport 1.266.

- Need to check if the requestcourses domain config does point at a hash,
  because if has yet to be configured, then it will not (and there will be
  an ISE.

fixed bug 6782, and escaped most localized messages used in Javascript blocks to make sure bugs like that do not happen again

- For 2.11
  - Backport rev. 1.264

- Course default (applies to all courses), which can be overridden
  by course settings in a specific course, for who, besides owner
  and coordinator(s) may clone a course.
  options - none, any requester in domain, or, for official courses,
  where localenroll::instcode_defaults() has been customized, categories
  which must match in cloner and cloned (e.g., department and number).

- For 2.11
  Backport 1.263.

- Use loncommon::select_language() for dropdown list for default language
  in domain.
- Remove unwanted </span>.

- For 2.11
  Backport 1.262.

- Display of Course/Community Catalog with enrollment data added to "server
  status" pages for which access can be IP-based or available to specified
  authenticated users (DC role not required).

- For 2.11
  - Backport 1.260, 1.261

- Bug 6771
  Domain configuration to switch active users from a server in the domain.
  - When the page has loaded on the session hosting server, javascript will
    cause display of an alert and will switch user's session to another server
    in the domain, after 5s. Submit buttons for homewrk problems disabled for
    those 5s.

- Support expiration of cached domain config on a (remote) library server for
  another domain managed by the same institution as manages the server hosting
  the current session.

- For 2.11
  Reverse changes in rev. 1.160.6.49 because of availability in 2.11.1 of
  "Defaults which can be overridden in each course by a CC".

- For 2.11
  - Backport 1.259

- Add some documentation.

- For 2.11
  Backport 1.258

- Default timeout for disabling Submit button post-submit if no course
  defaults set yet in domain config.

- For 2.11
  Backport 1.257 and remove canuse_pdfforms option (not supported in 2.11).

- For 2.11
 Backport 1.256 and one additional change from 1.254, missed in earlier
 backport (rev. 1.160.6.55).

- Additional Course/Community defaults for JSME Molecule Editor and Math
  Previewer (can be overridden in a course by CC), and for disabling submit
  button after student submission, with/without timeout, setby course container
  type (can be overriden for specific course by a DC).

- Domain configuration to accommodate inclusion of custom HTML mark-up in
  head block of log-in page (e.g., javascript for analytics) for each server
  in a domain.

- For 2.11
  - Backport 1.253, 1.254, 1.255.

- Domain configuration - load balancing.
 - When "specific server" selected check that proposed server is valid.

Bug 6675 (IP change detected in session migration).
- Additional option for both SSO user and non-SSO users
  - Session hosted (after re-authentication) on a specified server selected
    from servers belonging to domain's "internet domain".

Bug 6675
- Add domain configuration setting on balancer server for non-SSO users
  with IP mismatch during offload for case where balancer server's default
  domain is not domain being configured.
- If loadbalancing configuration change affects behavior of servers
  which host offloaded sessions (e.g., ip change detected in migration)
  expire cached loadbalancing config on load balancer, and servers which
  might be set as "specific" offloaded session recipient.

- For 2.11
  - Backport 1.252.

- Bug 6675
  - If loadbalancing configuration change affects behavior of servers
    which host offloaded sessions (e.g., ip change detected in migration)
    expire cached loadbalancing config on those other servers.

- For 2.11
  - Backport 1.251.

- Bug 6732.

- For 2.11
  - Backport 1.250

reCAPTCHA
- Keys from https://www.google.com/recaptcha/admin#createsite may contain '-'.

- For 2.11
  - Backport 1.248, 1.249

- Removed unused scalar.

- A few more instances where a check is needed that $settings is a reference
  to a hash, in cases where a domain configuration has never been set for
  course requests etc.

- For 2.11
  - Backport 1.245, 1.246, 1.247.

- Alternating background colors for rows in domain configuration tables.
- Include a row for cases where Domain Coordinator is selected to receive
  messages, in cases where domain has only one DC.

- Cached domain defaults need to be updated when catalog type is changed.

- Show appropriate changes message when user information fiields for
  email as username all set to be omitted.

- For 2.11
  - No "Defaults which can be overridden in each course by a CC" available in
    2.11

- For 2.11
  - Backport 1.244

- Fix check for "E-mail address as username" radio button in "Users
  self-creating accounts" screen.

- For 2.11
  - Backport 1.243.

- Add "publisher" field to display of available "textbooks" whicn may bea
  selected for cloning when requesting a textbook course.

- For 2.11
  - Backport 1.242.

- "Textbook" course requests can specify cloning from one of two types of
  prefabricated courses: either (a) "textbooks" or (b) "templates".

- For 2.11
  - Backport 1.241.

- Wording change.

- For 2.11
  - Backport 1.240

- Domain configuration for self-creation of accounts by users authenticated
  via Shibboleth SSO.
  - Set which environment variables provided by Shibboleth map to which
    user information fields.

- For 2.11
  - Backport 1.239

- Catalog type set for domain (authenticated and unauthenticated) included
  in domain defaults (cached).
- Display of prompts on roles/courses screen for users without any active
  roles depend on catalog type set for user's domain (or default domain,
  if unauthenticated).

- For 2.11
  - Backport 1.237, 1.238.

- Domain configuration to determine course catalog style
  - Type of catalog can be different for authenticated and unauthenticated
    contexts.
  - Options are: No catalog, Look-up of six character code, Standard catalog
                 (with/without domain selector to switch to different domain
                 in cluster).
  - Default is standard course catalog with domain domain selector.

Improved internationalization:
- Properly compile translation phrases
- Updated related translation file entries

- Fix typo in 1.160.6.40 backport.

- For 2.11
  - Backport 1.236

- Institutional ststus types can now be defined via domain configuration
  web interface by Domain Coordinator -- will supercede use of customized
  localenroll::inst_usertypes().

- Self-creation of account with e-mail address as username:
  - Domain configuration to set which status types (faculty, staff , student
    etc.) can apply to "non-institutional" usernames.
  - Processing of username requests can be either automatic or queued for
    approval depending on status type (self-reported).

- For 2.11
  - Backport 1.235.

- Course requests for unofficial courses, textbook courses and communities
  can now include validation.
- Code used to generate validation items for self-enrollment configuration
  moved to &print_validation_rows() to facilitate re-use in course requests
  configuration.

- prepend # before storing text and background color defaults for domain.
- lower case text and background color choices.

- Fix typo in rev. 1.160.6.37 (backport of 1.231).

- For 2.11
  - Backport 1.230, 1.231, 1.232, 1.233.

- &selfenroll_validation_types() moved to lonuserutils.pm

- Move &selfenroll_validation_types(), &selfenroll_default_descs(),
  &get_selfenroll_titles() from domainprefs.pm to lonuserutils.pm
  to facilitate re-use.
- Add self-enrollment related defaults to cached domain defaults:
  (a) Self-enrollment settings controlled by DC, by default:
     - <type>selfenrolladmdc (where <type> is: course type (official,
       unofficial, community or textbook).
  (b) Self-enrollment default values:
     - <type>selfenroll<setting> where type is course type, and <setting>
       is default self-enrollment setting: types, registered, approval,
       limit, or cap.
- New routine in lonuserutils.pm -- &selfenrollment_administration()
  provides array refs for self-enrollment items (a) managed by course
  personnel; (b) managed by DC.

- Add domain configuration for self-enrollment in Course/Community.
  - Can set who (i.e., DC or CC) may set self-enrollment configuration
    settings based on course type (official, unofficial, community or
    textbook).
  - Can set defaults for certain self-enrollment settings (may vary by
    course type).
  - Can set option "validation", e.g., for e-commerce.
    - specify url, items to send as POSTed values, text of "submit" button,
      HTML description of validation requirement.
    - will apply if processing of self-enrollment set to:
      "Queued, pending validation".

- Eliminate some duplicated HTML, by grouping together calls to subroutines
  which require the same args, and including required subroutines in dispatch
  list keys in %prefs ('print' and 'modify' keys).
- Modify some itemcount increments used to support alternating background
  colors in table rows.

- For 2.11
  - Backport 1.229

- Add quotacheck.pl
  - CGI script for use on a library server to display disk usage and quota
    for course content uploaded directly to course/communities in the domain.

- For 2.11
  - Backport 1.227, 1.228.

- Bug 6646
  - Status types (e.g., faculty, staff, student etc.) can apply to users
    creating their own accounts with an e-mail address as username.
  - Different user information can be required depending on self-reported
     status type.
  - User information to be provided when requesting an account can be
    designated as 'required' or 'optional', with client-side javascript
    prompt for missing required fields.

Fix wording typos

- For 2.11
  - Backport 1.223, 1.224, 1.225.

- remove obsolete comment.

- Remove print to STDERR statements used for debugging.

- Bug 6646
  - Domain Configuration for self-creation of accounts moved to its own
    separate panel (keep storage of settings in existing locations in
    configuration.db , i.e., usercreation and usermodification.
  - Additional option for self-created accounts which use an e-mail address
    as username -- queue for approval by Domain Coordinator.
  - Can specify which DC(s) should be notified if user account requests are
    added to the queue.
  - Can specify what information the user needs to provide in addition to
    an e-mail address when requesting creation of an account.

Consistent spelling (upper case): Authoring Space

- For 2.11
  - Backport 1.222
  - Remove trailing whitespace in one line changed in rev. 1.160.6.31

- Efficiency: skip call to &devalidate_remote_domconfs() if the $result
  hashref is empty.