CVS log for loncom/lonnet/perl/lonnet.pm

Up to [LON-CAPA] / loncom / lonnet / perl

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

- For 2.11.4 (modified)
  Include changes in 1.1525, 1.1529

- Domain default for available editors for course HTML files and assessment
  items in course authoring space has no dependency on course type.

- For 2.11.4 (modified)
  Include changes in 1.1526

- For 2.11.4 (modified)
  Include changes in 1.1521, 1.1522, 1.1527

- For 2.11.4 (modified)
  Include changes in 1.1517 (part) omitted in 1.1172.2.146.2.18

- For 2.11.4 (modified)
  Include changes in 1.1507

- For 2.11
  Backport 1.1501

- For 2.11
  Backport 1.1485, 1.1487, 1.1488

- For 2.11
  Backport 1.1491

- For 2.11
  Backport 1.1507

- Changes from loncnew rev. 1.108 when creating a new connection between
  LON-CAPA nodes to (a) support verification of common name when creating
  SSL tunnel between 2.12 nodes, while (b) supporting continued queuing of
  any delayed transactions when reconnecting (both 2.12 and pre-2.12).

- Bug 6990. Ability to download tarball of Authoring Space's files/directories.
  - Support use of domain default and also override for individual author(s).
  - Check if there is sufficient disk space to create archive file
  - Each author may only have one archive request in process at a time
  - Remove archive file after download
  - Log archive creation and deletion actions in nohist_archivelog.db in
    author's data directory.

- Reverse one change in rev. 1.1517 so webDAV can be used again.

- Available editors in Course Authoring Space, or when editing an html file
  created in a course folder using the Course Editor is a domain default,
  which can be overridden in specific course(s) by a Domain Coordinator.

- For 2.11.4 (modified)
  Include changes in 1.1524

- Allowed editors for co-author access to Authpring Space:
  - For coauthor roles, if authoreditors is absent in environment.db for the
    Authoring Space's author, use domain default, or if not yet set, default
    to edit,xml.

- For 2.11.4 (modified)
  Include changes in 1.1296, 1.1297

- For 2.11.4 (modified)
  Include changes in 1.1517 (part), 1.1518, 1.1519

- For 2.11.4 (modified)
  Include changes in 1.1523

- Bug 6907
 - In-course definition of applications which can use LTI-mediated deep
   linking to launch a LON-CAPA session.
    - Domain Coordinator can list recommendations for  specific launcher
     application(s), to be shown in Course Settings > Link Protection panel.

- Internal name for conditional portfolio sharing for specific IP addresses
  ranges when set by a user is now userip, to distinguish from those set
  for externalresponse (inrenal name: ip).
- Portfolio shareability setting in domain defaults (by affiliation), with
  possible override for an individual user will apply to portfolio file
  requests to a LON-CAPA node running 2.11, when the file owner's homeserver
  is 2.12 (or later).

- Portfolio shareability setting in domain defaults (by affiliation), with
  possible override for an individual user taken into account.

- Availability of "Course Authoring Space" set in Course Community defaults
  in domain (by container type), can be overridden for specific course(s).
- Add some help files for Course Editor and View/modify a course/community
- Add icons for use of Course Authoring Space.

- Available editors in Authoring Space: value set for specific author to
  override domain default applies to co-author use of that Authoring Space.

- Available editors in Authoring Space: value set for specific author can
  override domain default.

- Authoring Space defaults defaults which domain coordinator can override.
  - Available Editors, WebDAV access, Disk Quota for Authoring Space
    can be set for specific users by DC via "Add/modify user"
- Bug 5273 Co-authors in "group authoring" accounts can manage co-authors
  - Existing co-author(s) can be assigned rights to add/revoke co-author
    roles. Can be set by DC via "Add/modify user" or by author via "People"
- Co-authors and Assistant co-authors can view a list of co-authors for
  the Authoring Space. Availability set by Author or Co-author "manager".
  Listing can be set to "opt-in".

- For 2.11.4 (modified)
  Include changes in 1.1515, 1.1516

- Bug 6979
  Fix typos in rev. 1.1515
  Remove some trailing whitespace

- Bug 6979.
  "View As" form in Functions menu includes domain dropdown list if users in
  course are from more than one domain. Use course's environment.db to store
  comma separated list of unique domains to which course users belong.

- For 2.11.4 (modified)
  Include changes in 1.1513

- For 2.11.4 (modified)
  Include changes in 1.1514

- Domain configuration for default cumulative quota for all group portfolio
  spaces in course can be overridden for a specific course by a Domain
  Coordinator.

- &get_ltitools_id() moved from courseprefs.pm to lonnet.pm to facilitate
  reuse.

- For 2.11.4 (modified)
  Include changes in 1.1361, 1.1362, 1.1366, 1.1368, 1.1375, 1.1377, 1.1411,
  1.1462, 1.1504, 1.1508, 1.1509, 1.1510, 1.1511

- Support case where assignment of roles in a different domain is queued
  pending acceptance of the role by the role recipient.
  - A user can also choose to decline the role.
  - Domain configuration can be set for domain roles, co-author roles,
    course roles and community roles.

- Bugs 6754 and 6907
  - Return of grades to launcher CMS supported for resources or folders
    accessed via LTI-mediated deep link.
  - Support option: "Encrypt stored consumer secrets defined in domain"
  - Signing of LTI payloads for roster retrieval, passback of grades,
    and callback to logput launcher CMS session all now occur on
    primary library server for course's domain.

- Bug 6754
  - Can select from tool definitions set in course's domain or in course
    itself when using External > "External Tool" in Course Editor.
  - DC's configuration for allowed use of esternal tools within course types
    (can be overridden for specific course(s)) determines which External Tool
    types (if any) may be added to a course.
  - Signing of LTI payload used to launch an external tool now carried out
    on course's home server.

- Typo in comment

- Bug 6754
  - Domain configuration to set defaults for which course types can use:
    (a) External Tools defined/configured in domain, and (b) External Tools
    defined/configured in course.
  - Domain defaults can be overridden by DC for specific course(s) via:
    Main Menu > "View or modify a course or community".

- Bug 2832
  Display Edit button in Functions menu for published resource in a course,
  where role is instructor.

- "In course" authoring.
  Domain Coordinator's 'eco' priv which provides ad hoc co-author access to
  Authoring Spaces in a domain does not apply to a course's "autor" space.

- "In course" authoring.
  Improved handling of case where no suitable resources authored in course
  exist when (a) using "Import from Course Resources" in Course Editor, and
  (b) using Choose File >  "Use a course file" to select published file as src
  in img tag in colorful editor.

- Bug 6754
  - Support encryption of secrets set for External Tools in a domain.
  - Requires perl-Crypt-CBC
  - External Tools can be configured in a course via Course Settings by a user
    with 'opa' privilege in the course.

- For 2.11.4 (modified)
  Include changes in 1.1492

- For 2.11.4 (modified)
  Include changes in 1.1493

- For 2.11.4 (modified)
  Include change in 1.1501

- For 2.11.4 (modified)
  Include changes in 1.1496, 1.1497, 1.1498, 1.1499, 1.1500

- For 2.11.4 (modified)
  Include changes in 1.1488

- Use ajax to dynamically update drop-down lists of directories and files
  available in course author space.

- Take into account domain configuration in user's domain for whether approval
  (from user's DC or user) is needed to complete assignment of a role in a
  domain, authoring space, or course that does not belog to the user's domain.
  Work in progress.

- In cases where course codes have been assigned to course(s) in a domain,
  but instcode_format() routine in localenroll.pm has not been customized,
  totcodes item (value is number of courses with codes) must be present
  in the instcats hash ref.
- Without this the text: "No official courses to display" will be shown above
  a listing of official courses, and clicking the "Show more details" link
  for a course will do nothing.

- Bug 6975
  - &get_supplemental() routine moved from lonnet.pm to loncommon.pm
  - use LONCAPA::map() moved out of conditional block in loncommon.pm
  - $keeporder arg for update_content_constraints() no longer needed

- Bug 6975. Prevent overwriting of package arrays in LONCAPA::map already
  populated by caller (e.g., londocs.pm) when lonnet::get_supplemental
  calls loncommon::recurse_supplemental().

- Typo in rev. 1.1497

- Bug 6975
  Code to trigger updates of cached Supplemental Content information for a
  course moved from londocs.pm to lonnet.pm to facilitate reuse, and called
  after uploading file and/or extracting archive file using Course Editor.

- Bug 6975
  Folders and Resources in Supplemental Content area can be hidden using
  Course Editor.

- Fix typo in rev. 1.1494

- Remove &Apache::lonnet:: from some calls to subroutines within lonnet.pm

- Remove two duplicated statements added in rev. 1.1479

- For 2.11.4 (modified)
  Include changes in 1.1485 and 1.1487

- For 2.11.4 (modified)
  Include changes in 1.1489, 1.1490, 1.1491

- URLs in direct links to LON-CAPA messages in notification email, and to
  publicly accessible syllabus or portfolio files can be set to use hostname
  of portal server instead of user's homeserver as first part of URL.

- In course context, switch server to resource's home server opens new tab
  when editing published resource, and ca role is loaded,  when user's domain
  (by default) disallows session hosting of domain's users in resource's domain.
- New arg (skip_enc_check) in redirect args , used by loncommon::headtag()
  it true, omit application of check_encrypt().
- New seventh item ($shownsymb) in args for lonhtmlcommon::jump_to_editres()

- Whitespace changes only.  Standard indent is 4 spaces.

- Bug 6971 Individual user preference for Time Zone.

- Always remove line feeds from lines returned by get_scantronformat_file()
  so chomp() no longer needs to be included when using the output.

- Reverse changes in rev. 1.687. declutter() already removed any leading
  adm/wrapper/.

- Domain's trust settings are checked when determining if course requests
  are permitted in a domain belonging to another institution, in case they
  changed since reqcrsotherdom.* was last updated in user's environment.db

- Reverse a change in rev. 1.481.
  URLs for PDFs uploaded to a course do not have /adm/wrapper prepended in
  the keys in the *_symb.db cache. The opposite is true for the ids_ keys
  and the values for src_N.M in the bighash *.db file.

- For 2.11.4 (modified)
  Include changes in 1.1292, 1.1308

- For 2.11.4 (modified)
  Include changes in 1.1484

- For 2.11
  Backport 1.1484

- Domain configuration to allow authentication of an alternate username, if
  username entered differs from real username in a predictable way,
  e.g., username entered in log-in page was email address (userid@example.tld)
  instead of just userid.

- For 2.11.4 (modified)
  Include changes in 1.1481, 1.1482, 1.1483

- Bug 6907
  - Link Protectors for deep-linking from launch from LTI Consumer can be
    configured at both a domain level and a course level.
  - Support encryption of link protection secrets set in a domain.
  - Requires perl-Crypt-CBC

- Bug 6907
  - Support encryption of link protection secrets set in a course.
  - Requires perl-Crypt-CBC

- Bug 6907
  - Rename "LTI Provider" domain config item.
  - Add three additional sections: "Encryption of shared secrets",
    "Rules for shared secrets" and Link Protectors (domain).
  - Keys used in domain for a particular library server may only be set in
    a session on that server (and use Lond.pm and not lonc/lond).
  - Min and max length and character requirements can be set for secrets used
    for LTI-based link protection for deep-links.

- For 2.11.4 (modified)
  Include changes in 1.1478, 1.1479, 1.1480

- Bug 6907
  - Domain default to determine whether LTI launch of deep-linked URL requires
    student to authenticate; can be overridden for specific course(s).
  - If domain config permits it, link protection setting in a course can
    specify whether to accept username included in LTI payload, and action
    to take if username is not for an enrolled student.
  - Second arg passed to ltiauth::invalid_request() is text string stating why
    LTI launch was invalid.

- Bug 6907
  - Extraction of LTI itemID based on consumer key in signed LTI payload, and
    verification with available secret moved from ltiauth.pm to Lond.pm.
  - Verification will now occur on course's home server or domain's primary
    library server, for course-defined LTI ID, and domain-defined LTI ID
    respectively.
  - Setting and modifying link protection key and secret now requires user
    session on course's home server.
  - Display of existing LTI key only available of course's home server.
  - Display of stored LTI secret eliminated so a Course Coordinator will
    need to record it offline or commit it to memory.

- Update comment.

- For 2.11.4 (modified)
  Fix typo in rev. 1.1172.2.146.2.1 backport of 1.1302 (part)

- For 2.11.4 (modified)
  Include changes in 1.1298, 1.1308, 1.1311, 1.1343 (part), 1.1344, 1.1360,
  1.1402, 1.1423, 1.1458, 1.1459, 1.1461 (part), 1.1463

- For 2.11
  Backport 1.1477 and on change in 1.1434 omitted in 1.1172.2.142 changes.

- Extend "zero enrollment failsafe" mechanism so it can also (optionally)
  protect against unwanted drops if partial data retrieved from institutional
  source for specific institutional section.

- For 2.11
  Backport additional part of 1.1447, omitted from changes in 1.1172.2.142.

- For 2.11
  Backport 1.1476

- Add option to choose inline preview (new) or pop-up (old) for Chemical
  Reaction response items.  Default is inline preview. Domain setting can
  be overridden in a course.

- For 2.11
  Backport 1.1475

- Preserve trailing empty fields in uploaded bubblesheet csv data.

- For 2.11
  Backport 1.1437, 1.1438, 1.1447, 1.1448, 1.1449, 1.1450, 1.1451, 1.1452,
           1.1453, 1.1454, 1.1455, 1.1456, 1.1457, 1.1464, 1.1465, 1.1466,
           1.1467, 1.1468, 1.1469, 1.1470, 1.1471, 1.1472, 1.1473, 1.1474

- Dual SSO and non-SSO login from /adm/login for use with additional SSO
  mechanisms besides Shibboleth.
  - Default is to use /adm/sso for "authentication" URL.
  - Different authentication URL can be set with lonOtherAuthenUrl perlvar.
  - Update documentation for lonshibauth.pm and lonshibacc.pm
  - Wording change for WAF/Proxy domain configuration
  - If Apache config contains lonSSOEmailOK set to 1, default removal
    of @ "internet domain" from username for SSO authenticated users in
    lonshibacc.pm is skipped.
  - &alias_shibboleth() routine in lonnet.pm renamed alias_sso().

- Bug 6955 IP-based blocking. Pass user'sIP address as third arg to
  loncommon::blockcheck() and second to loncommon::blocking_status().

- Add a comment about stuff flushcourselogs() can end up storing (and where).

- For 2.11.3 (modified)
  Include changes in rev. 1.1471

- For 2.11.3 (modified)
  Include changes in rev. 1.1470

- Improve efficiency in &get_commblock_resources() in course with folder
  level time-limits triggered by starting timer.
  - Only look for answerable problems in folders with activated blocks
    which are still pre time-limit.

- Use correct format for 'user.priv...' key in %env in check for 'evb' priv

- Remove trailing whitespace.

- If /adm/login is in use as a landing page to support dual SSO and non-SSO
  login, optional image for SSO button is in /res/$dom/$domconfiguser/login.

- Bug 6914
  Domain configuration for WAF/Proxy includes Y/N option for use of alias in
  redirection to /adm/sso for server(s) supporting Shibboleth Single Sign On.

- Sanity checking

- For SAML authentication (Shibboleth) config for each of domain's nodes
  to set /adm/log-in as landing page for user toggle between SSO or non-SSO.

- Remove unnecessary line, added in rev. 1.1434

- Bug 6907 Content in a course can be set to be deep-link only.

- New arg ($encrypt) for &get_dom, &put_dom, &dump, and &put calls in
  lonnet.pm, so request encrypted, and response (&get_dom and &dump)
  also encrypted, unless requests will go to current server.

- Bug 6907 Content in a course can be set to be deep-link only.
  If initial access is via a deep-link (/tiny/$domain/$uniqueid), and
  target folder/resource is deep-link only, access to resources, menus,
  and items listed in Course Contents controlled by deeplink parameter value.

- For 2.11.3 (modified)
  Include changes in 1.1452, 1.1453, 1.1454, 1.1455

- For 2.11.3 (modified)
  Include changes in rev. 1.1444, 1.1445, 1.1446, 1.1460

- For 2.11
  Backport 1.1444, 1.1445, 1.1446, 1.1460

- Support customization in localenroll.pm to eliminate ambiguity in extraction
  of institutional section from institutional course section for automated
  enrollment.

- Bug 6907
  - &deeplink_check() supports cases where deeplink parameter for item which
    provided initial login has range of resources available after initial
    access via deep-link set to map or rec.

- Bug 6907. Content in a course can be set to be deep-link only.

- Typo.

- Read from the filesystem instead of using LWP request when current server
  is an "authoritative" server in hosts.tab, to prevent delays on Apache
  reload for standalone machines.

- Most likely what was intended in lonnet.pm rev. 1.52 (10/28/2000).

- Speed-up &allowed() when checking for course.*.lock.sections in %env,
  by ignoring privs except bre,pch,plc,pac,sma and for bre only checking in
  current course for course-specific URLs (including /res/lib/templates/*).

- Speed-up &allowed() by ignoring expired or future student or ta roles
  (unless current role) when checking for course.*.lock.sections in %env.

- Fix logic

- Bug 6914.
  Replace hostname with alias when creating absolute URLs, if alias in use.

- Bug 6914
 - Check whether WAF proxy alias should be used when using switchserver.
 - Requests for /adm/dns/hosts and /adm/dns/domain from other nodes in the
   network do not require redirecting to an alias (if in use).

- Bug 6914
  Update domain config UI to support settings documented in
  Domain_Configuration_WAF_Proxy.tex

- Bug 6914
  Session migration for switch to/from VPN and non-VPN access can preserve
  currently active role.

- Bug 6914
 - Update domain config UI to support settings documented in
   Domain_Configuration_WAF_Proxy.tex
 - Use /adm/migrateuser to handle redirects when user with a LON-CAPA session
   switches between access via VPN and not via VPN (and vice versa).

- Remove extra closing brace added in rev. 1.1444

- Fix typo in rev. 1.1444

- Support institutional policies which allow a Course Coordinator affiliated
  with a cross-listed course to be automatically listed as a co-owner in a
  course.

- For 2.11.3 (modified)
  Include changes in 1.1292, 1.1308

- For 2.11.3 (modified)
  Include changes in 1.1443

- For 2.11
  Backport 1.1443

- Sanity checking

- For 2.11.3 (modified)
  Include changes in 1.1442

- For 2.11.3 (modified)
  Include changes in 1.1172.2.138

- For 2.11
  Backport 1.1442 (part)

- Bug 6585
  get_domain_handler() and encrypted_get_domain_handler() in lond now use
  get_dom() routine in Lond.pm

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()

- For 2.11
  Changes from 1.1434 omitted in 1.1172.2.134 backport

- For 2.11.3 (modified)
  Include changes in 1.1440

- For 2.11
  Backport 1.1440

- Fix typos in 1.1439

- For 2.11.3 (modified)
  Include changes in 1.1439

- For 2.11
  Backport 1.1439

- Switching user sessions for users from other institutions on next access
  - Check if domain config for offload of users from other institutions
    is in effect when finding a server to which to offload a user session.
  - If current server's offload targets all set to switch on next access
    set the offload target to the least loaded server in the user's domain.

- Typo

- Bug 6914. Consistent naming of domain configuration key: wafproxy.
  Rename exempt key in inner hash as 'vpnint', and add vpnext key to inner
  hash (required where VPN users will not use WAF, but other users will).

- For 2.11.3 (modified)
  Include changes in 1.1172.2.134, 1.1172.2.135.

- For 2.11
  Change from 1.1434 omitted in 1.1172.2.134 backport

- For 2.11
  Backport 1.1434 (part), 1.1435 (part)

- For 2.11.3 (modified)
  Included changes in rev. 1.1436

- For 2.11
  Backport 1.1436

- Bug 6518. Content blocking check for wrapped uploaded files (e.g., PDFs),
  uploaded files with mime types that require /adm/coursedocs/showdoc/, and
  /adm/viewclasslist.

- Bug 6914

- Retrieval of requestor's IP address centralized in lonnet::get_requestor_ip()
- Domain configuration to allow domain's LON-CAPA nodes to operate behind a
  WAF/Reverse Proxy using aliased hostname (CNAME).
- Web requests from other nodes bypass the WAF as their requests are made
  directly to the server hostname (A record); same for internal LON-CAPA
  connections for lonc -> lond.

- For 2.11.3 (modified)
  Include changes in 1.1432, 1.1433

- For 2.11
  Backport 1.1433

- Bug 6945

- For 2.11
  Backport 1.1432

- Bug 6945

- For 2.11.3 (modified)
  Include changes in 1.1428, 1.1429, 1.1430, 1.1431

- For 2.11.3 (modified)
  Include changes in 1.1360

- For 2.11
  Backport 1.1430, 1.1431

- If $env{'request.balancercookie'} set for user's session, and switch made
  to a different node, update hostID in cookie on balancer node once migrated.

- For non-SSO login on a balancer node, check for balancer cookie in lonauth.pm
  after login credentials validated. (Same as lonacc::sso_login for SSO login).
- Not all calls to check_loadbalancing() require determination of a server
  to which to offload, even when $is_balancer is true.

- For 2.11
  Backport 1.1428, 1.1429

- Sanity checking

- Make &get_commblock_resources() faster by replacing retrieveResources()
  with an iterator that looks for the first answerable resource in the map.

- For 2.11.3 (modified)
  Include changes in 1.1427

- For 2.11
  Backport 1.1427

- Bug 6518.
  More comprehensive access to symb for a requested URL to determine when
  access should be blocked and why, if content blocking in use.

- For 2.11.3 (modified)
  Include changes in 1.1424, 1.1425, 1.1426

- For 2.11
  Backport 1.1426

- Bug 6518 Content blocking during quiz/exam.
  - For resources not in a course directly, but instead referenced by resources
    which are, symb to check to determine whether access should be blocked and
    why is symb of resource containing the dependency.
  - No $env{'request.enc'} in effect for dependent files.

- For 2.11
  Backport 1.1424, 1.1425

- Untie hash and set $env{$cache_str} on early return from symbread subroutine.

- Bug 6518.
  More comprehensive access to symb for a requested URL to determine when
  access should be blocked and why, if content blocking in use.

- For 2.11.3 (modified)
  Reverse part of changes in 1.1172.2.118.2.5 -- will_trust() is in 2.12.

- For 2.11
  Reverse part of 1.1172.2.124 changes -- will_trust() is in 2.12.

- For 2.11.3 (modified)
  Include changes in 1.1423

- For 2.11.3 (modified)
  Include changes in 1.1419, 1.1420, 1.1421, 1.1422

- For 2.11.2 modified
  Include changes in 1.1423

- Bug 6400
  Options for transfer or creation of tiny URLs when cloning.

- For 2.11
  Backport 1.1421, 1.1422

- Add &unsubscribe() subroutine, and use in place of lonnet::reply() in
  unsubresources.pl and in &remove_stale_resfile() in lonnet.pm

- In &remove_stale_resfile()
  - check if unlink was successful, before sending unsub request.
  - also unlink the corresponding metadata file, if present.

- For 2.11
  Backport 1.1420

- For 2.11.2 (modified)
  Include changes in 1.1360

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- Last activity data for course users from server's in course's domain on
  "What's New" page.

- For 2.11
  Backport 1.1419

- URL for external resources in uploaded .page ("Composite page") changed
  to begin /ext/ (but are not wrapped).
- Printouts of external resources include title of item in course, and link
  unless encrypturl is set to yes for the resource.

- For 2.11.3 (modified)
  Use LWP::UserAgent instead of LONCAPA::LWPReq (which is not in 2.11)

- For 2.11 modified
  Use LWP::UserAgent instead of LONCAPA::LWPReq (which is not in 2.11)

- For 2.11.3 (modified)
  Backport 1.1397, 1.1398

- For 2.11
  Backport 1.1397, 1.1398

- For 2.11
  Fix typo in rev. 1.1172.2.116

- For 2.11
  Fix typo in rev. 1.1172.2.116

- For 2.11.3 (modified)
  Include changes in 1.1298, 1.1311, 1.1308, 1.1343, 1.1344

- For 2.11
  Backport 1.1418

- Fix indents in lines added in rev. 1.1199

- For 2.11
  Backport 1.1417

- Include known domain as first arg in calls to &get_server_loncaparev().

- For 2.11
  Backport 1.1357 (modified).

- For 2.11
  Backport 1.1409, 1.1410

- For 2.11
  Backport 1.1416

- Domain Configuration for passwords for internally-authenticated users.
  - Default minimum password length of 7 set in a single location.
  - Value for min length set in domain's configuration may not be less than
    the default.
  - javascript function:  warnIntPass() warns aboit invalid values for
    min and max length, expiration time, and number saved for domain
    config for passwords.

- For 2.11
  Backport 1.1407, 1.1408

- Call &EXT('client.remote_addr'} to retrieve user's IP address.

- For 2.11
  Backport 1.1390

- For 2.11
  Backport 1.1396

- For 2.11
  Backport 1.1406

- For 2.11
  Backport 1.1401, 1.1403, 1.1404

- For 2.11
  Backport 1.1337, 1.1378, 1.1400.

- For 2.11
  Backport 1.1389, 1.1392, 1.1394

- For 2.11
  Backport 1.1412, 1.1413, 1.1414.

- Devalidate cache for self-cataloging of courses based on institutional
  code for institution's nodes, if creating/modifying an "official" course.

- Self-cataloging of courses based on institutional code is cached for 1 hour.

- Course categories defined in a domain are cached for 1 hour.
- Devalidate cats cache for domain if categories changed by DC.

- Bug 6754. LON-CAPA as LTI Provider.
  Domain configuration to support session expiration in LON-CAPA,
  after user logs out of LTI Consumer which originally launched session,
  (if Consumer supports logoutServiceUrl; e.g. custom_logout_url in Canvas).

- Domain configuration which allows Course Owner to change a student's
  password (with conditions):
  - Restrict to specified institutional status types for (a) course owner
    and (b) student.

- Support domain configuration which allows a Course Owner to change a
  student's password, if:
 (a) same domain is used by owner, course, and student
 (b) student has no active or future roles besides student role in courses
     owned by the course owner making the change
 (c) course container is not Community or Placement Test
 (d) owner is course cordinator in the course
 (e) setting to disable this action has not been set for the specific course

- Domain Configuration for Passwords for internally authenticated users.
  - Rules for LON-CAPA passwords can include: number of user's previous
    passwords to save (with reuser by that user disallowed).

- Forgot Password utility
  - Support configurable: link lifetime, case sensitivity (for username and
    e-mail address), information required, e-mail types, and custom text.
  - Bug 6648: captcha can be enabled for public-facing web form.

- Bug 6792
  - Replace a non-ascii character in the filename of uploaded file with an
    appropriate ascii character (if available).
  - If lonnet::clean_filename() reduces filename to .extension, prepend
    timestamp_milliseconds.

- For 2.11
- Backport 1.1379 (part) omitted from changes in rev. 1.1172.2.96

- For 2.11
  Backport 1.1405

- Default renderer for unconfigured domains set in a single location.

- For 2.11
  Backport 1.1356

- For 2.11.2 (modified)
  Include changes in 1.1401, 1.1403, 1.1404.

- Uploaded bubblesheet data can consist of comma separated values.
  - Domain configuration for conversion of csv file to txt file:
    (a) Delete first line (column titles) Y/N
    (b) Remove leading white space except question responses Y/N
    (c) Pad PaperID with leading zeroes, up to PaperIDlength Y/N

- Uploaded bubblesheet data can consist of comma separated values.
  - Set each value in each question field to correct length, and appropriate
    value, either letter A-J, or number 1-9 then 0, or '    1      ', as
    determined by selected data format.

- Bug 6400
  - Enforce access restrictions for content which is deeplink-only (users
    with "advanced priv for current role are exempt).
  - Support "key" link type in deeplink parameter (requested link must either
    be sent with linkkey as element in POSTed data, or with linkkey in query
    string).  Corresponding value must match key set in deeplink parameter.

- Uploaded bubblesheet data can consist of comma separated values.
  - Data will be converted to one of formats specified in bubblesheet
    format file, prior to saving in scantron_orig_* file.
  - Domain configuration for bubblesheet data format allows order of
     columns in csv data to be specified.
  - &get_scantronformat_file and &get_scantron_config moved from grades.pm
    to lonnet.pm to facilitate re-use.

- For servers using Apache/SSL the user's session cookie with a 'secure'
  attribute set is used for requests to https, other than for 'public' user.

- Include verification of CN when creating SSL tunnel unless connecting
  to/from pre-2.12 node.

- For servers using Apache/SSL where External Resource points at http:// URL
  or syllabus is configured to use an external http:// URL, query string for
  links contains usehttp=1, unless server has Strict-Transport-Security set
  for Apache with max-age > 0.

- Call Apache::lonnet::hostname($lonhost) before accessing
  $Apache::lonnet::protocol{$lonhost) so %Apache::lonnet::protocol is populated.

- Similar to bug 4128

- Trust settings

- Untie tied hashes.

- Remove duplicate line
- Remove trailing whitespace

- Avoid repeated redirects back and forth between balancer and target node
  in corner case.
  - Remove file on balancer with record of node in use when browser lacks
    cookie for the active session on (balanced) node, when log-in page on
    that node is set to redirect.
  - If removal fails, remove the user's session file on the node itself.

- Bug 6876
  If node switched to from balancer can't connect to lond on user's
  homeserver, then session is switched to another node in the original list
  of usable nodes sent by the balancer.

- Eliminate double count when computing userload for servers with SSL.

- Domain config for load balancer to use cookie to record offload target.
  Subsequent requests by same user/browser will send requests to same target
  if remote session still active, and remote node not overloaded.

- For 2.11
  - Backport 1.1386

- Typo.

- Display key and certificate status when running ./UPDATE.

- Log (to lonnet.log) if storage of firstaccess times is not needed or fails.

- For 2.11
  Backport 1.1385 (part)

- For 2.11
  Backport 1.1385 (modified).

- Slot status ignored when rendering content in grading interface for
    "View of the problem for user" and "Correct answer for user" boxes.

- Slot status ignored when rendering content in grading interface for
  "View of the problem for user" and "Correct answer for user" boxes.

- For 2.11
  Backport 1.1369, 1.1370.

- For 2.11
  Backport 1.1352, 1.1353, 1.1354.

- For 2.11
  Backport 1.1365

- For 2.11
  Backport 1.1343 (part), 1.1350, 1.1351, 1.1355, 1.1358, 1.1359, 1.1376,
  1.1379 (part)

- For 2.11
  Backport 1.1381, 1.1382.

- LON-CAPA SSL certificate verification
  - Detect revoked or expired certs, or certs with incorrect Common Name.
  - If host cert or hostname cert are not OK, check if a valid CSR exists,
    and if so, report status of that.
  - perl-Crypt-PKCS10 needs to be added to LONCAPA-prerequisites.

- Correct path for is_course() routine in Lond.pm

- Fewer calls to courseiddump() to check if something is a course.

- Support Certificate Revocation List checking when using SSL channel
  for key exchange during negotiation of connection to remote lond.

- Add nightly update of Certificate Revocation List (from CA) to loncron.

- Use 'secure' attribute for session cookie on servers using Apache/SSL.

- Bug 6754 LON-CAPA as LTI Provider
  - Support LTI Extension: Context Memberships Service, whereby launch of
    Consumer can trigger Provider to request course roster.
  - Code moved from ltiauth.pm to routines in ltiutils.pm:
    &get_lc_roles(), &create_user() and &enrolluser(); &create_passwd() routine
    also moved.
  - Code moved from &parse_roster() to &get_roster() in ltiutils.pm.
  - New routines: &batchaddroster(), &datechange_check(), &store_passbackurl()
    added to support roster updates, (including saving user-specific values
    for: lis_result_sourcedid, used for passback of grades to Consumer.

- For 2.11.2 (modified)
  Include changes in 1.1376

- Sanity checking

- For 2.11.2 (modified)
  - Include changes in 1.1172.2.94

- For 2.11
  - Backport 1.1367

- Bug 6754 LON-CAPA as LTI Provider
  - Original LTI launch of LON-CAPA is for a resource, a map, or an entire
    course, and display is for iframe, tab or window; retain this in %env.

- For 2.11.2 (modified)
  - Include changes in 1.1370

- reconstructing partorder when importing a library file or problem
  which contains parts, for importmodes besides "part".

responseorder metadata-field for problem with imported library/problem
  - prepending import id to response id to create responseorder item for
    each import tag now occurs sooner in &metadata().

- <partorder> tag for a library file will include ids of any part tags.
- library file is only loaded and inspected to check for parts if <partorder>
  is absent.

- No &do_cache_new() when &metadata was called with $liburi defined.

- Stop retrieval of metadata for library file(s) -- rev. 1.1369 -- overwriting
  %metaentry hash contents for resource containing them.

- For 2.11.2 (modified)
  - Include changes in 1.1369

- "Student Submission Reports" nneds to include submissions for imported responses.
  - Include <responseorder> in metadata for library file.
  - Rebuild responseorder metadata-field for problem with imported library
    file containing response items.

- Bug 6754 LON-CAPA as LTI Provider
  - Creation of new LON-CAPA user account available from an LTI Consumer.
  - Creation of new LON-CAPA course available from an LTI Consumer.
  - Self-enrollment in a LON-CAPA course available from an LTI Consumer.

- Checking if enrollment data can be accessed for a course uses a single
  call to localenroll::check_instclasses(), mediated via lonnet/lond.

- Bug 6754 LON-CAPA as LTI Consumer
 - If a course has an External Tool (LTI) in Supplemental Content, then
   LON-CAPA 2.12 is needed.

- Updated shortlived cached firstaccess immediately after setting the value.

- Populate the metadata cache correctly for an instance of an External Tool
  on course initialization.

- Fix logic.

- Bug 6754 LON-CAPA as LTI Consumer
  Parameters available for instance of an external tool will differ,
  depending on whether the tool has been set to be "gradable".

- Bug 6754 LTI Integration: LON-CAPA as LTI Provider
  - Work in progress

- Bug 6754 LTI Integration.
  Rename get_domain_ltitools() routine in lonnet.pm as get_domain_lti(),
  and require second argument -- $context -- either: consumer or provider).

- For 2.11.2 (modified)
  - Include changes in 1.1358, 1.1359.

- Untaint system() calls by forcing list processing mode.
- Use three-argument open() to separate file mode from the filename.

- Fix typo introduced in rev. 1.1117.

- For 2.11.2 (modified)
  Typo in 1.1172.2.93.4.4.

- For 2.11.2 (modified)
  - Include changes in rev. 1.1350.

- For 2.11.2 (modified)
  - Include changes in rev. 1.1357 (modified).

- User search by e-mail address requires 2.12 for search in both LON-CAPA
  alluser MySQL table, and in institutional directory.

- For 2.11.2 (modified).
  Include changes in rev, 1.1351 and 1.1355.

- Bug 6867
  - Domain configuration to set default math renderer for <m> tag content.
  - Default renderer for unconfigured domains changed from tth to MathJax.

- When browser sends a LON-CAPA cookie for an expired session, redirect user
  to portal URL for user's domain for re-authentication.

- If resource is outdated, trigger a connection from resource's homeserver
  to flush the delayed queue.

- Fix logic.

- "Verify Content" in Course Editor includes option to check files
  replicated from elsewhere are outdated because "update" transaction has
  yet to propagate.

- Where there is a discrepancy in the hostname for a lonHostID between
  the record retrieved from get_dns() and the record from hosts.tab, the
  latter takes precedence.
- Eliminate duplicates in array returned by &current_machine_ids()
  since a record for current server's lonHostID is expected to be in both
  dns_hosts.tab and hosts.tab.

- Sanity checking

- Trust Settings
  - lonnet::trusted_domains() returns array or array refs, for passing to
    loncommon::select_dom_form() or lonnet::will_trust().

- Trust settings.
 - Use more versatile lonnet::will_trust() to determine if session-hosting
   server has catalalog access, according to domain's trust settings.
 - Eliminate lonnet::notcallable() -- no longer used.

- Trust Settings
  Check if action is permissible based on trust settings for:
  catalog, domroles, enroll, reqcrs, msg, othcoau, or coaurem for current context.

- For 2.11.2 (modified).
  Use 2.12 feature (LTI) pre-release, in modified 2.11.2. Domain's
  configuration must be set to prohibit hosting of sessions for
  domain's users outside own domain, and modification must be in
  place on all nodes in domain.

- For 2.11.2 (modified).
    Use 2.12 feature ("done" button for timed exms) pre-release, in modified
    2.11.2. Domain's configuration must be set to prohibit hosting of sessions
    for domain's users outside own domain, and modification must be in place
    on all nodes in domain.

- For 2.11.2 (modified).
  Use 2.12 feature ("done" button for timed exms) pre-release, in modified
  2.11.2. Domain's configuration must be set to prohibit hosting of sessions
  for user's domains outside own domain, and modification must be in place
  on all nodes in domain.

- For SLES11, call LONCAPA::Lond::server_certs() from lond instead of
  lonnet to prevent segfault.

- Replace use of LWP::UserAgent with LONCAPA::LWPReq so replication of
  content from /raw/ can include verification of the requesting server's
  client certificate (Apache/SSL used).

- For 2.11
  - Fix typo in 1.1172.2.79 backport of 1.1317.

- Key and Secret for LTI Tools are stored in a separate GDBM file
  (encconfig.db) on primary library server in domain so more specific domain
  trust settings can apply than is the case for regular domain configuration
  (in configuration.db).
- Storage and retrieval of data from GDBM files for domain, with namespaces
  beginning 'enc' use encryption when data are transferred.

- Bug 6754. Make LON-CAPA an LTI Tool Consumer (LTI 1.1).
  - Name as ext.tool (instead of exttool), so that parameters can be specified
    in packages.tab, based on extension.

- For 2.11
  - Backport 1.1342

- Fix typo in log message
- Include role extent in user's activity log when logging use of an ad hoc
  co-author role by a Domain Coordinator.

- For 2.11
  - Backport 1.1340, 1.1341

- lonnet::rolesinit() adds 'user.rar' to %env when user logs in.
  $env{'user.rar'} is 1 if user has rar priv (can receive ad hoc roles),
  i.e., Domain Helpdesk or Domain Helpdesk Assistant, 0 otherwise.

- Domain configuration for internally authenticated users.
  - (a) Option to switch from crypt to bcrypt automatically when user is authenticated.
  - (b) Option to set bcrypt cost.
  - (c) Option to compare bcrypt cost for user with current domain config
        when user is authenticated.
  Defaults are: (a) No, (b) 10; (c) No

- Use of LON-CAPA SSL certificates to create secure channel for exchange of
  encryption key between LON-CAPA nodes can be set to: "no", "yes", "req"
  (i.e., required) separately for outbound (i.e., lonc) and inbound connections
  (i.e., lond) in domain config (default domain only on a multi-domain server).
- Can differentiate between connections between nodes in same domain, nodes
  in same "internet" domain. and nodes in neither.
- Supercedes use of loncAllowInsecure and londAllowInsecure from loncapa.conf
  on each node.
- Run /home/httpd/perl/loncron --justreload (as www) after changing domain config

LON-CAPA Network (SSL) domain configuration.
- Options for SSL usage can be set separately for outbound connections (lonc)
  and inbound connections (lond).

- Use 'secure' attribute for session cookie on servers using Apache/SSL.

- For 2.11
  - Backport 1.1334, 1.1335, 1.1336.

- Fix quotes.
- Use shorter identifiers for ad hoc role restrictions (dh and da) for
  Domain Helpdesk (dh role) and Domain Helpdesk Assistant (da role).

- Access options for ad hoc roles for helpdesk personnel set at domain level
  (with override within a course), expanded to differentiate availability to
  Domain Helpdesk or Domain Helpdesk Assistant.

- Domain Helpdesk Assistant role for use by domain helpdesk student employees
  - browse access to shared repository (including own domain) is excluded.

- For 2.11
  - Backport 1.1332, 1.1333.

- For 2.11
  - Backport 1.1331

- Ad hoc roles for helpdesk personnel
 - &get_all_adhocroles() provides information about all ad hoc roles defined
   for use by domain helpdesk personnel.
 - &get_my_adhocroles() provides information about just those ad hoc roles
   which are available in a specific course for the current user.
 - all custom ad hoc roles for helpdesk personnel are unavailable in "official"
   courses in which user is a registered student (automated enrollment in use).

- Ad hoc roles for helpdesk personnel.
  - Domain configuration for:
    - which user(s) with dh role in domain may use each ad hoc role.
      - set by institutional status, or by include specific people, or by
        exclude specific people.
    - assign role description (displayed on Roles page, and at top left of
      page, when role active).
    - assign role order (numerical).
  - Course configuration (available for editing by course owner, and viewing
    by co-owner(s).
    - can override domain defaults for which dh role users can use ad hoc role(s)
      in course.
    - can override domain defaults set for course-level privileges for ad hoc
      role(s).

- Domain Configuration for dedicated load balancer includes option to
  permit "Hosting on balancer itself".
- If balancer has lowest load, it will host the user session for a user
  logging in.

- For 2.11
  - Backport 1.1330

- Ad hoc role in a course for Domain Helpdesk can be for a specific section.

- For 2.11
  - Backport 1.1329

- Ad hoc role in a course for Domain Helpdesk can be for a specific section.

- For 2.11
  - Backport 1.1328

- Exclude errors from hash returned by &lonnet::tmpget(),
  - replaces change in rev. 1.951
[Note: lond::tmp_get_handler() returns error: 2IO::File->new Failed
instead of error: 2 IO::File->new Failed in case of error,
so usual regexp used in lonnet.pm -- /^error: 2 / will not match].

- For 2.11
  - Backport 1.1326, 1.1327

- Include assignment of Domain Helpdesk role in domain's
  nohist_domainroles.db and nohist_rolelog.db files.

- Support use of custom course role(s) defined in domain for domain helpdesk
  staff as ad hoc role(s) selected via "View a course or community" in main
  menu.

- For 2.11
  - Backport 1.1325

- Eliminate "unauthorized" when author/co-author views top level of Authoring
  Space without trailing /.

- For 2.11
  - Backport 1.1324

- Store domain roles information on primary library server to limit number
  of calls needed to remote servers when a domain has more than one library
  server.

- If information about the distro is unavailable, assume it's one that will
  segfault unless lond is used.

- Remove trailing white space.

- On a multi-domain server, course's homeserver may be different from the
  lonHostID.

- For 2.11
  - Backport 1.1319

- For 2.11
  - Backport 1.1318

- Domain Trust Settings

perf optimization: avoiding make_key, it is slow because of LONCAPA::escape

Return appropriate error code when retrieving author directories.

- For 2.11
  - Backport 1.1288, 1.1289, 1.1317

- Add two new optional args to &get_query_reply()
 - $sleep and $loopmax (defaults if not specified are: 0.2 and 100).
 - A larger value for $sleep is used when waiting for the response to a
   "fetchenrollment" query sent to lonsql by Autoenroll.pl.

- For 2.11
  - Backport 1.1309

- For 2.11
  - Backport 1.1270

- For 2.11
  - Backport 1.1314

- For 2.11
  - Backport 1.1307

- For 2.11
  - Backport 1.1306

- For 2.11
  - Backport 1.1299

- For 2.11
  - Backport 1.1295

- For 2.11
  - Backport 1.1294

- For 2.11
  - Backport 1.1293

- For 2.11
  - Backport 1.1290, 1.1291.

- Fix logic used to check whether to use Lond.pm to retrieve SSL cert status.

- Use Server Name Indication (SNI) and SSL when replicating content from
  /raw/.
- Domain status screen has link to show status of LON-CAPA SSL certificates.
- "SSL" domain config for (a) "internal" LON-CAPA SSL connection to servers/VMs
  in other domain, (b) Replication of domain's resources to other domains.
- Replication can use name-based virtual hosts with SSL, with verification of
  client certificate (cert: /home/httpd/lonCerts/lonhostnamecert.pem, signed
  by LON-CAPA CA, with Common Name of internal-<server hostname>, same IP address
  as server hostname).

- Bug 5464
  Can set failsafe value in domain (or override in Auto-enollment course
  configuration to avoid unwanted dropping of students when no data are
  retrieved for a particular inststitutional section.

- Course "Authoring" Space
  "Import a File" and "Image" blocks in Colorful Editor include a "Choose File"
  link which allows selection of published files from "Course Authoring" Space,
  or upload of a new file (with auto-publication).

- Course Editor has "Standard Problem" item (Grading tab) for creation
  of new problem in user's Authoring Space, or in a Course "Authoring" Space.
- Course Editor has "Import from Course Resources" item (Import tab) to
  import published content from Course "Authoring" Space.
- Course "Authoring" Space
  - default.rights -- course-only access
  - quota is shared with content uploaded directly to course
  - content only browsable in course context
  - metadata not included in searchable meatdata MySQL table
CVs: ----------------------------------------------------------------------

- &course_portal_url() routine moved to facilitate re-use.

- Fix typo in rev. 1.1309.

- Bug 6808. New course container -- "Placement" for Placement Tests.
  - Student's score on a placement test can be exported by customizing
    localenroll.pm in /home/httpd/lib/perl on domain's library server.
  - When a placement test is completed by the student, the chain:
    lonnet::auto_export_grades() > lond::auto_export_grades_handler()
    > localenroll::export_grades() is used to export grades (e.g. to
    a CMS).

- Bug 6763. "Done" button.
  String saved for the Time-Limit (interval) parameter will no longer be a
  pure integer if use of the "done" button has been enabled.

- Cache load-balancer status for unconfigured domains.

- false if directory.

- Bug 6808. New course container -- "Placement" for Placement Tests.
  Work in progress.

- Bug 5917. Course preference to disable anonymous posts to discussion.
  - uses 'pac' priv.