<?xml version="1.0" encoding="ISO-8859-1" ?>
<!-- RSS Newsfeed for product updates and changes - http://www.puakma.net -->
<rss version="2.0">
  <channel>
	<title><![CDATA[PT0027: Web Booster Enterprise Single Sign On]]></title>
	<description><![CDATA[Bugfixes, enhancements and general updates. Simply the best way to keep up with the latest for Web Booster Enterprise Single Sign On!]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/ChangeLog?OpenPage&amp;PartNumber=PT0027</link>
	<lastBuildDate>Wed, 15 Apr 2026 09:20:22 +1000</lastBuildDate>

	<item>
	<pubDate>Fri, 14 Jan 2022 13:12:26 +1000</pubDate>
	<title><![CDATA[ 3.0.0 - Enhancement: Change ssl client to default to "TLSv1.... ]]></title>
	<description><![CDATA[ Change ssl client to default to "TLSv1.2" rather than "SSL" ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Mon, 28 Feb 2011 09:34:48 +1000</pubDate>
	<title><![CDATA[ 3.0.0 - Enhancement: Now works with NTLMv2, the default used... ]]></title>
	<description><![CDATA[ Now works with NTLMv2, the default used by Windows 7 workstations and Windows 2008 servers ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Fri, 04 Jul 2008 12:42:28 +1000</pubDate>
	<title><![CDATA[ 3.0.0 - Bug: An optimization was added to booster ESSO a whi... ]]></title>
	<description><![CDATA[ An optimization was added to booster ESSO a while back that checked the booster session id:
> _pma_sess_id=2-11AD96187BA-11AD9662D5F;
To determine if authentication should reoccur. If there is a valid bootser esso session, then skip the authentication. IE kills this optimization, because the ltpa token is valid and the booster session is valid BUT it sends Content-length: 0 and and Authorization: headers.

We have removed the booster session checking. This means that every request will require the small overhead of reparsing all the cookies.

see: http://blogs.msdn.com/david.wang/archive/2005/12/01/HTTP-POST-Fails-for-Anonymous-Authentication.aspx ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Fri, 15 Dec 2006 08:45:37 +1000</pubDate>
	<title><![CDATA[ 3.0.0 - Enhancement: Added code to always remove the "Author... ]]></title>
	<description><![CDATA[ Added code to always remove the "Authorization:" http header so no remnants of the NTLM/SPNEGO handshake is passed to the backend server. This was causing a problem for IIS as IIS was attempting to process the handshake itself. This issue only occurred for IE browsers POSTing data as IE would include the last part of the handshake again in the final POST. ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Wed, 13 Dec 2006 10:22:45 +1000</pubDate>
	<title><![CDATA[ 3.0.0 - Bug: Fixed a regression bug introduced during the im... ]]></title>
	<description><![CDATA[ Fixed a regression bug introduced during the implementation of SPNEGO/Kerberos authentication. The issue is internet explorer sends a POST with content length of zero along with a new authentication. The old code was ignoring this re-authentication. For more information on the IE6 behaviour, please see http://www.websina.com/bugzero/kb/browser-ie.html

 ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Thu, 22 Jun 2006 22:59:33 +1000</pubDate>
	<title><![CDATA[ 2.00 - Other: Updated license management to support per user... ]]></title>
	<description><![CDATA[ Updated license management to support per user licensing. Required to allow an ESSO Lite version. ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Fri, 16 Jun 2006 09:42:19 +1000</pubDate>
	<title><![CDATA[ 2.00 - Other: Added protection to display an "Evaluation" pa... ]]></title>
	<description><![CDATA[ Added protection to display an "Evaluation" page at the end of the SSO process if the software is not licensed. This page will only appear periodically as a reminder to license the software. ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Fri, 05 May 2006 20:42:27 +1000</pubDate>
	<title><![CDATA[ 2.00 - Bug: Fixed an issue where a Domino-style token was no... ]]></title>
	<description><![CDATA[ Fixed an issue where a Domino-style token was not being correctly identified. "Invalid or expired Ltpa token" message was being displayed ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 14 Mar 2006 15:48:56 +1000</pubDate>
	<title><![CDATA[ 2.00 - Enhancement: When the Negotiate mechanism is enabled,... ]]></title>
	<description><![CDATA[ When the Negotiate mechanism is enabled, now send Negotiate and NTLM in the http headers. ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 14 Mar 2006 15:50:04 +1000</pubDate>
	<title><![CDATA[ 2.00 - Bug: Fixed issue where if a client replied with NTLM ... ]]></title>
	<description><![CDATA[ Fixed issue where if a client replied with NTLM when Negotiate was enabled, the challenge back to the browser would be sent with a Negotiate instead of NTLM ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 14 Mar 2006 15:50:42 +1000</pubDate>
	<title><![CDATA[ 2.00 - Enhancement: When an Ltpa token is invalid or expired... ]]></title>
	<description><![CDATA[ When an Ltpa token is invalid or expired, do not show a stacktrace. ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 14 Mar 2006 15:53:23 +1000</pubDate>
	<title><![CDATA[ 2.00 - Enhancement: Remove earlier feature where text was se... ]]></title>
	<description><![CDATA[ Remove earlier feature where text was sent to the browser along with the 401 challenge. It appears some browsers do not respond correctly when a 401 response contains content-length greater than zero ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 14 Mar 2006 18:56:23 +1000</pubDate>
	<title><![CDATA[ 2.00 - Enhancement: Add token expiry to cookie so that token... ]]></title>
	<description><![CDATA[ Add token expiry to cookie so that token is not passed back to the server after the internal expiry date is passed ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Mon, 13 Mar 2006 09:40:44 +1000</pubDate>
	<title><![CDATA[ 2.00 - New Feature: Send an HTML message with the 401 challe... ]]></title>
	<description><![CDATA[ Send an HTML message with the 401 challenge that explains that your browser is not configured correctly. This will only be shown by browsers that don't resond to the 401 challenge. Previously those browser got the error "Request has no content" ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 28 Feb 2006 17:04:44 +1000</pubDate>
	<title><![CDATA[ 2.00 - Enhancement: Check for jsessionid on portal server an... ]]></title>
	<description><![CDATA[ Check for jsessionid on portal server and redirect to portal home if the cookie is missing. puakma.config setting:
WEBSSOjsessionidHome=/myportal ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 28 Feb 2006 17:05:19 +1000</pubDate>
	<title><![CDATA[ 2.00 - New Feature: Implement Kerberos as an authentication ... ]]></title>
	<description><![CDATA[ Implement Kerberos as an authentication method via 'Negotiate' http header ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>
<item>
	<pubDate>Tue, 28 Feb 2006 17:07:05 +1000</pubDate>
	<title><![CDATA[ 2.00 - New Feature: Add debugging URL to show what the serve... ]]></title>
	<description><![CDATA[ Add debugging URL to show what the server is using for its configuration. Particularly useful for troubleshooting NTLM configuration. 
WEBSSODebugURI=/testsso ]]></description>
	<link>http://www.puakma.net/wnc/dltk.pma/getLatestSoftware?OpenAction&amp;PartNumber=PT0027</link>
</item>


  </channel>
</rss>
