Serv-U Release Notes

Serv-U® Release Notes

Serv-U is available for evaluation. The current version can be downloaded for free from RhinoSoft.com.

Serv-U Version 9.4.0.2

Serv-U 9.4.0.2 was released April 1, 2010. A complete list of changes and upgrades follows:

Features:

Added functionality for keyboard arrow keys to toggle focus between buttons for FTP Voyager JV confirmation dialogs.
Changed data socket shutdown to be more forgiving of FTPS clients that do not perform SSL shutdown correctly. Affected clients would appear to "lock up" when performing directory listings or downloading files via FTPS (FTP over SSL). The solution is to add a 5-second timeout after SSL shutdown has begun.
Added right-click context menus to the Events list in the Management Console.

Bug Fixes:

Corrected a bug where Serv-U would truncate very large directory listings when bandwidth limits were in place. In some cases downloaded files could be truncated too.
Corrected a bug in the Management Console where the disable and delete dates displayed in the User list were incorrect on some non-English operating systems.
Corrected a bug when overwriting a zero-byte file, Serv-U was incorrectly requiring append privileges.
Corrected a bug where the "User Disabled" and "User Enabled" events might not fire when changing the account type.
Corrected a bug where admin events were being fired for an administrator's domain not the user's domain.
Corrected upgrade notices from Serv-U versions <= 6.4 where Serv-U 8 and Serv-U 8.0 was referenced.
Corrected a bug in FTP Voyager JV where a file could not be deleted after it was renamed without performing a refresh first.

Serv-U Version 9.4.0.0

Serv-U 9.4.0.0 was released March 23, 2010. A complete list of changes and upgrades follows:

Features:

Added Portuguese (Brazil) Web Client support.
Updated Spanish strings.
Added Spanish Management Console help translation.
Added the ability to disable user accounts at the group level as well as at the user level.
Added new static font properties to the Management Console and Web Client for better visual appearance.
Added dynamic sizing in the Image Preview dialog for better visual appearance when using different screen resolutions.
Changed Domain Administrators so that they can view information about themselves.
Improved hover events for dialogs in the Management Console and Web Client to decrease CPU usage.
Changed the log file lines when listening on "<< Any IP Address >>" so that the "0.0.0.0" IP address is shown and all IP addresses are shown in parentheses.
Added IPv6 addresses to the Serv-U Tray's About dialog Network Information page.
Changed the STOU (store unique) FTP command to accept and return full paths instead of using the current directory only. When a full path is not specified the current working directory is used. This is to remain consistent with Serv-U versions <= 6.4.
Changed the STOU (store unique) FTP command 150 response to include the full path name of the new file. This is to remain consistent with Serv-U versions <= 6.4.
Changed FTP PORT connections back to the client to be more forgiving. RFC 959 (section 3.2, paragraph 1; section 5.2, paragraph 2) requires the socket to bind to the command channel port -1 (L-1). However, in Windows, this may cause the socket error WSAEADDRINUSE (10048). When this specific error occurs on the data channel, Serv-U attempts to connect without binding to the command channel port -1 (L-1).
Added an FTP LIST/NLST command option to list a specific file's full path name as part of the listing when a specific file's listing information is requested.
Added a directory listing setting for server-side sorted listings using natural language comparison like Windows Explorer (i.e., FTP and SSH listings). This setting is available at the server, domain, user, and group levels. The default is enabled.
Added an error message when attempting to use the tray application's menu option to change the Windows service setting fails.
Signed Serv-U.exe and Serv-U-Tray.exe so that Windows recognizes Rhino Software, Inc. as the publisher.
Updated Microsoft DLLs to the latest release.
Updated OpenSSL libraries from 0.9.8k to 0.9.8m.
Updated zlib (compression) library from 1.2.3 to 1.2.4 and built with Developer Studio 2008.
Updated the FTP Voyager JV code certificate, which now expires on March 10, 2013.
Added a timestamp to the signing of FTP Voyager JV's JAR files allowing the Java Runtime to validate FTP Voyager JV's JAR files after their certificate's expiration date.
Changed the FTP Voyager JV "Save Login" dialog controls so they cannot be changed to reflect a different configuration other than the current login information.
Changed the layout of the FTP Voyager JV "Save Login" and "Preferences" dialogs to a standard layout.
Updated the FTP Voyager JV JIDE user interface library to version 2.7.7.
Changed the User Collection Combo box to locale sort its contents upon loading of the user pages in the Management Console.

Bug Fixes:

Corrected a bug where Serv-U could crash with a very large number of concurrent HTTP requests.
Corrected a bug where Serv-U could crash when HTTP command and/or reply screen logging was enabled and the log tab was selected.
Corrected a bug where it was possible to change the local administrator configuration by changing server settings, causing undesired results for tray application administration.
Corrected a bug where requiring reverse DNS to login at the server level, would cause tray configuration to become unavailable.
Corrected an Integration DLL bug where Serv-U would not recognize loaded group names.
Corrected an internal file security check where it was possible for domain read-only administrators to gain access system level files. Other internal checks would have prevented access to unauthorized data. This was a very minor security bug which had no affect on Serv-U's overall security.
Corrected a security bug when importing users, restricted administrators could create user accounts outside their home directory.
Corrected a security bug when exporting users, restricted administrators could see a user's full path for home directory, virtual paths, and directory access rules.
Corrected a security bug where a restricted domain administrator could create a user or group that was not locked in the user's home directory.
Corrected a bug where CIDR IP access rules were not being interpreted correctly for deny rules.
Corrected a bug where Windows Users, granted administrative privileges, and didn't have write permissions to Serv-U's data directory, Serv-U was unable to save its configuration changes.
Corrected an SSL shutdown bug where an open SSL socket was being closed while the server and client were performing an SSL shutdown exchange (SSL_shutdown()). This problem appeared when listing very large directories with certain FTP clients using GnuTLS.
Corrected a bug where toggling FIPS 140-2 mode would not work. Restarting Serv-U would change to the desired FIPS mode.
Corrected a licensing bug where sessions that were not logged in were being counted against the license.
Corrected an FTP bug where Serv-U was not returning an error response to LIST, MLSD, RETR, THMB, STOU, or STOR when a data channel had not been specified with either the PORT or PASV command.
Corrected an FTP LIST/NLST switch processing bug when specifying a directory format (-h:DOS, -h:IIS, -h:UNIX) any following path names would be ignored.
Corrected a logging bug where system administrators were being identified as domain administrators.
Corrected a database problem when using PostgreSQL and adding columns to tables. PostgreSQL's syntax for adding multiple columns to a table is different than other SQL servers requiring the "ADD COMMAND" text before each new column name.
Corrected a bug where the "FileTransferStats_BytesUploaded", "FileTransferStats_BytesDownloaded", "FileTransferStats_FilesUploaded", and "FileTransferStats_FilesDownloaded" columns were not being written to the database with the other runtime statistics for database users. File transfer statistics were being cleared when viewing database user statistics after the last session for a user logged out. This bug was introduced in 9.2.0.1.
Corrected a bug when deleting a database group, user membership in that group was not being deleted.
Corrected several minor database user and group bugs.
Corrected a bug where the user added and deleted events were not being fired for administrator users with these events.
Corrected a tray application service installation / removal problem from the when UAC was enabled, Serv-U was unable to switch from being started as a service to stand-alone and stand-alone to a service.
Corrected two string formatting errors in the Spanish translation.
Corrected one string formatting error in the Swedish translation.
Corrected a Web Client bug where the browse button on the upload dialog was partially hidden when using Firefox on Linux Fedora.
Corrected a Web Client bug where the background for the Image scroll buttons in the Image Preview dialog were not transparent in Internet Explorer 6.
Corrected a Management Console and Web Client bug where dialogs would be placed too high when the page was scrolled down.
Corrected a Management Console bug where clicking repeatedly on the "Add" button in the users' page then pressing the "Cancel" button in the user dialog would cause a script error in Internet Explorer.
Corrected a Management Console bug where combobox lists would pop-up at the wrong position on the page when using a Google Chrome or Safari browser.
Corrected a Management Console bug where the "Member of Groups" list, in the user properties dialog, was not showing all groups when the list reached a certain size.
Corrected a Management Console bug where combobox lists could become too large and span past the viewable display area with no scrolling available.
Corrected an FTP Voyager JV bug where the "Login" dialog would fail to launch if an error occurred during an automatic login operation.
Corrected an FTP Voyager JV bug where the "Save Login" dialog "Is Secure" check box was not checked when connected securely.
Corrected an FTP Voyager JV bug where a file or folder name would not revert back to the original file name if a rename operation failed.
Corrected an FTP Voyager JV bug where the status bar was not showing the correct file path for certain local directories (e.g., Desktop, Computer).
Corrected an FTP Voyager JV bug where the "Select All" and "Invert Selection" operations were causing the focus to move away from the file list.

Serv-U Version 9.3.0.1

Serv-U 9.3.0.1 was released January 12, 2010. A complete list of changes and upgrades follows:

Features:

Added Spanish Management Console and installation.
Added a "Move Group" button to allow moving groups to and from the database collection.
Changed the Web Client to not pause the loading of thumbnails when the slideshow is auto loaded via the slideshow URL flag.
Added a "Copy to Clipboard" button to the Domain and Server Log tabs and to the Spy Log dialog.
Added a new Serv-U logo to the Management Console.
Substantially improved remote FTP Voyager JV directory listing performance.
Changed FTP Voyager JV to use compression when listing directories.

Bug Fixes:

Corrected a bug in the Image Preview dialog where the thumbnail scroll would not scroll to the correct image when in thumbnail view.
Corrected a bug where the failed upload event would fire even for successful uploads.
Corrected a bug, introduced in 9.2.0.1, where database users' expiration was not being loaded within the grid causing expired users to appear in the list. Expired users attempting to login would still be denied.
Corrected a SQL statement problem where customized templates were being changed for the addition of database categories. The change now only changes the "= ?" for the NULL statement request to "IS NULL".
Corrected an upgrade bug from Serv-U versions <= 6.4.0.6 would not upgrade non-ASCII characters such as home directories and user names. This conversion bug was introduced in 9.0.0.1 with Serv-U's support of UNICODE.
Corrected a bug in the SQL template dialog where the "select a value" dialog would not appear when the Edit button was selected.
Corrected a bug in the Management Console where fonts in Korean language browsers would not align properly in text fields and controls.
Corrected a bug in the Management Console where the anti-hammer connection limit, for Connection Settings, was not updated with the save button.
Corrected a bug in the Management Console where an error would occur when trying to edit a user with a "#" symbol in their login ID.
Corrected a bug in the Management Console where an error would occur when using the context menu to toggle the "enable/disable" option for the MKD and XMKD FTP commands.
Corrected a bug in FTP Voyager JV where a crumb button refresh of the current working directory would fail to resort the list view contents.

Serv-U Version 9.2.0.1

Serv-U 9.2.0.1 was released December 17, 2009. A complete list of changes and upgrades follows:

Features:

Added a thumbnail image preview scroller to the Image Preview dialog in the Web Client.
Added Web Client support for Windows mobile phones.
Added Web Client support for Android OS mobile phones.
Added PhotoShop, Adobe Illustrator, and Adobe InDesign extension icons for the Web Client.
Added Spanish Web Client support.
Added the time period User and Group statistics were collected on the User and Groups statistics page.
Added database user categories for better administration organization and better system performance for large numbers of database users.
Improved database user listing for large number of users by 30% or more.
Improved user group lookup when a very large number of groups is used.

Bug Fixes:

Corrected a bug in Microsoft Internet Explorer 8 where IE would make requests of JavaScript instead of files(appears to be a buffer problem in IE). The symptom would present itself in the Management Console as a "Permission Denied" page. This is a work-around for Microsoft Internet Explorer's (version 8) bug.
Corrected a tray bug when using Microsoft Internet Explorer as the default browser. Changing from using Windows' Default Browser to the tray's embedded browser would cause the Management Console to show the "Loading" dialog until being restarted.
Corrected a security issue where it was possible to see directories above a user's root directory.
Corrected an SFTP (via SSH2) bug where certain clients requesting both read and write access to a non-existent file, would not be able to upload or create that file unless the file already existed.
Corrected several Simplified Chinese translation errors.
Corrected a Simplified and Traditional Chinese translation error where the "SSH public key" was translated as "SSH private key".
Corrected a database problem when using Microsoft Access Serv-U to alter tables. Unlike other databases Microsoft Access prevented Serv-U from adding columns to a table while the table was already open.
Corrected a bug in the New User Collection dialog where the enter key did not save the added collection.
Corrected a bug in the Group dialog where focus was not being placed on the Group Name input.
Corrected a bug in the User Group Membership dialog where double click did not remove the selected group from the "Member of Groups" list.
Corrected a bug in the user list where sorting was lost when changing collections.
Corrected a permissions bug, introduced in Serv-U 8.1.0.1, where when denying create directory permission to a parent directory, but allowing it for a sub-directory, Serv-U would not allow directory creation in the sub-directory.
Corrected a bug where Serv-U could crash when using 3 or more local administrators, requires special undocumented parameters to cause, and only occurs locally.
Corrected a bug where renaming a user Category would cause Serv-U to crash if a user in that Category was logged in.
Corrected a bug in the Web Client where resizing the window, in Internet Explorer, when in thumbnail mode would cause an error.

Serv-U Version 9.1.0.4

Serv-U 9.1.0.4 was released November 24, 2009. A complete list of changes and upgrades follows:

Features:

Updated Russian and Swedish strings.

Bug Fixes:

Corrected a bug where the uninstaller would uninstall the data directory (in C:\ProgramData) but then recreate the directory while removing Windows firewall settings.
Corrected a bug in the Management Console where the User Collection and Filter Users group boxes were hidden when using the Internet Explorer 6 browser.
Corrected a bug when login IDs contained trailing or leading spaces, Serv-U would be unable to find these user accounts.
Corrected a bug where disabled user accounts where immediately disconnecting the session, causing IE anonymous login to work "incorrectly".

Serv-U Version 9.1.0.2

Serv-U 9.1.0.2 was released November 19, 2009. A complete list of changes and upgrades follows:

Features:

Fire the user added event when importing users from a CSV file.
Added extra socket level error handling and crash logging.

Bug Fixes:

Corrected a bug, introduced in 9.1.0.0, where Serv-U could crash if transfer rates for the user, group, domain, or server were set and several connections for a single user account were being opened then closed.
Corrected a bug, when using the anti-hammer limits, Serv-U could crash while attempting to fire the SUEVENT_ID_IP_ADDR_AUTO_BLOCKED_TIME (304) event.
Corrected the installer setup status dialog to allow for longer text (i.e., some localized strings would be truncated).
Corrected a bug where uninstallation might not delete the "C:\ProgramData\RhinoSoft.com\Serv-U" directory.
Corrected a tray bug, introduced in 9.1.0.0, where the menus were using the wrong font on Windows 2000, Windows XP, and Windows 2003 Server.

Serv-U Version 9.1.0.0

Serv-U 9.1.0.0 was released November 17, 2009. A complete list of changes and upgrades follows:

Features:

Added Web Client support for BlackBerry mobile phones.
Added the ability to filter user and group lists in the Management Console.
Added support for interpreting (line feed) characters as end-of-line markers when transferring files in ASCII mode. When enabled end-of-line markers are converted to sequences. This transfer limit applies to both FTP uploads and downloads.
Added an option to the Serv-U Tray to start Serv-U as a service or manually.
Changed database user storage to store only required user attributes at login, logout, and user password change. These changes allow database administrators to manage their database much more independently.
Added support for PostgreSQL databases.
Changed transfer speed limits so they are applied to active sessions even when the session previously had no limit. Previous versions did this only if active sessions had a limit already in-place (i.e., a speed limit was changed, not added).
Added additional security checks to ensure Serv-U application integrity.
Added the ability to search drop lists using keyboard presses in the Management Console.
Added the ability to close dialogs using the Escape key in the Management Console and Web Client.
Added support for CIDR notation for IP ranges in addition to Serv-U's wildcard method.
Added the ability to permanently block an IP address using the anti-hammer rule for the domain or server. When triggered an IP address is added to the top of the IP access rules permanently. When added, the server's configuration files are updated so the IP address remains blocked even between Serv-U restarts.
Added the "FTP password type" password limit to the Server, Domain, and Group levels in addition to the user level. A global or group setting may be applied to use MD4/MD5 OTP passwords for FTP.
Added "MaxDomainSessions", "MaxDomainSessionsIP", "MaxDomainUploadRate", and "MaxDomainDownloadRate" to the server limits & settings in addition to the domain limits and settings.
Added the ability to export the users in all collections and database from the user's tab and externally with the Serv-U-Setup.exe program.
Added a drop down list of available IP addresses in the Listener dialog and in the Domain Creation Wizard.
Added the ability to specify %HOME%, %USER%, or %DOMAIN_HOME% as part of the SSH public key path.
Added additional Domain Administrator restrictions so a domain administrator cannot change the following limits: "MaxDomainSessions", "MaxDomainUploadRate, "MaxDomainDownloadRate"
Changed configuration, account configuration, startup log, and data files location to "C:\ProgramData" (ALLUSERSPROFILE environment variable) in Windows Vista and above on new Serv-U installations that are installed in "C:\Program Files" only. This is required on Windows 7+ when UAC is in effect.
Removed some unused HTTP files.
Removed some Server and Domain session management code that was duplicated elsewhere. This change will save a small amount of RAM for servers with many concurrent connections.

Bug Fixes:

Corrected "Cookie Buffer Overflow Vulnerability" (Secunia SA37228).
Corrected a bug where Serv-U could crash after disabling an active user.
Corrected a bug where user accounts whose login ID ended with a period character were not being shown in the users grid.
Corrected a bug where downloading 0-byte files using FTPS could cause the data channel to be disconnected during SSL negotiation causing 0-byte downloads to intermittently fail.
Corrected a bug where the Advanced Directory Access rule password was being saved incorrectly when using a database. When using MS SQL the bug would appear as a lost directory access rule. When using other databases, the password would just be invalid; if using these advanced settings and storing to a database, modification of the user record would cause improper access to the directory access rule. This problem only occurred on MS SQL 2005+ because MS SQL throws an error instead of truncating the value.
Corrected a bug when saving encrypted strings to database or .Archive file, Serv-U would archive values even when the encrypted string was empty.
Corrected a bug in the Web Client where the "Playlist" button would not work when in "Search" mode.
Corrected a bug where user lookups would occur after a session's login ID was cleared. This resulted in unnecessary user and database user lookups.
Corrected a bug where database users' statistics were not being loaded correctly after loading data from the database.
Corrected a bug when FTP Voyager JV, the .jar files were being downloaded every time FTP Voyager JV was started. Now, when unchanged, Java uses its cached copy of the FTP Voyager JV .jar files.
Corrected a bug in FTP Voyager JV, where the Last-Modified timestamp of a file that was uploaded from a non-English operating system would fail.
Corrected a bug in the Web Client where focus was being lost when using the keyboard to navigate the file list.
Corrected a bug when upgrading from Serv-U 6.4 and lower when using a database domain, installation / conversion would cause the installer to crash.
Corrected a bug when upgrading from Serv-U 6.4 and lower when using a database domain, group membership for users would not be imported under certain rare circumstances.
Corrected a bug when upgrading from Serv-U 6.4 and lower when using a database domain, import would not work correctly if the old table names matched the new default table names in Serv-U 7+.
Corrected a database bug when upgrading from Serv-U 6.4 or lower, and using the table names "User" or "Group" would cause the upgrade to fail.
Corrected a database bug where daily session counts were not being written to the database.
Corrected a bug where Tray messages boxes (confirmation, error, warning) would be displayed without text in all languages.
Corrected an SFTP logging bug where the SSH_FXP_REALPATH was not being logged, just the reply.
Corrected an SSH2 problem where Serv-U was not responding to the SSH_MSG_GLOBAL_REQUEST command.
Corrected a user group membership problem when changing group membership for a user that is connected, certain variables applying to limits, were not being properly adjusted. For example limiting access by IP address.
Corrected a bug where passwords that were stored in an unencrypted form (i.e., clear-text) were not checked letter case sensitive.
Corrected a bug where users created with the User Wizard were being stored without encryption.
Corrected a Windows 7 UAC problem where Serv-U was unable to communicate with the tray application to identify Serv-U status and enable tray / engine communication.
Corrected a problem, introduced in Serv-U 7.0, where the STOU FTP command would append a digit to a specified file name even when the specified file name doesn't exist, an inconsistency with Serv-U versions <= 6.4.

Serv-U Version 9.0.0.5

Serv-U 9.0.0.5 was released October 13, 2009. A complete list of changes and upgrades follows:

Features:

Added support for the 64-bit Internet Explorer 8 browser on Windows Vista 64-bit.
Added the ability to disable the Web Browser's login page check for older web browsers. When disabled, the login page no longer suggests upgrading Internet Explorer.
Added the ability to set the "SSH Authentication Method" at the domain and server levels in addition to the user and group levels.
Changed SSH public key authentication to recognize the lack of a public key and require password only.
Improved SSH public key authentication support for Windows Authentication, where a specified public key can be used in addition to password authentication. Password authentication for SSH is always required.
Remember the last selected user when entering the Domain Activity and Server Activity pages.
Added context menus to the user and group lists in the Management Console.
Updated Japanese, Traditional Chinese, and Simplified Chinese Administrator Help text.
Updated Traditional Chinese and Simplified Chinese Management Console strings.

Bug Fixes:

Corrected some text in the License.rtf file.
Corrected a bug, introduced in version 9.0.0.1, where Windows Authentication would fail with SSH2.
Corrected a bug where the incorrect custom logo would be displayed in domain settings when using the inherited default value from the server.
Corrected a bug when using Windows Authentication and a custom logo, Serv-U would not be able to show the custom logo in the Web Client if the user didn't have read permissions in Windows for the custom logo.
Corrected a bug where blowfish and/or cast128-cbc were allowed for SSH2 while running in FIPS 140-2 mode. When used, OpenSSL would fail terminating Serv-U.
Corrected an SSH2 bug where Serv-U would send the client an invalid list of supported ciphers and MAC algorithms while running in FIPS 140-2 mode.

Serv-U Version 9.0.0.3

Serv-U 9.0.0.3 was released October 5, 2009. A complete list of changes and upgrades follows:

Features:

Added the ability to log into the Management Console and Web Client when using the 64 bit Firefox browser.
Changed the group selection dialogs in the Management Console to move focus to the last selected group list in order to avoid confusion over which list has current focus.
Corrected a few Russian Management Console strings.

Bug Fixes:

Corrected a bug where hidden files were being listed for MLST / MLSD FTP operations, when hidden files were configured to be hidden (i.e., not returned in the listing).
Corrected a bug in the web client where the history navigation would lose its current location in the history list.
Corrected a problem where Serv-U could not create private key pair files with passwords when FIPS 140-2 mode was enabled.
Corrected a memory / handle leak when using Windows Authentication, Serv-U was not releasing memory when attempting to retrieve a Windows User's home directory.
Corrected a bug where FTP Voyager JV would not launch from a Macintosh computer running Snow Leopard with the Safari web browser.

Serv-U Version 9.0.0.1

Serv-U 9.0.0.1 was released September 29, 2009. A complete list of changes and upgrades follows:

Features:
Serv-U Engine:

Added FULL UNICODE support. Serv-U is now capable of supporting file paths, user names, and passwords in any language supported by Windows.
Added the ability to install any supported language on any localized version of Windows. For example, installing Japanese, Chinese, or Russian Serv-U is now supported on Windows in English.
Added FIPS 140-2 support for OpenSSL. SSL and SSH (FTPS, HTTPS, and SFTP) encryption is FIPS 140-2 certified through OpenSSL (Certificate #1051). (Serv-U Gold only)
Added support for user and group SSH public key authentication.
Added 4 SSH authentication methods; "password only", "public key only", "public key and password", and "public key or password".
Added the ability to create SSH public key files (SSH RFC 4716 format) for SSH public key authentication.
Added Integration DLL support, allowing DLLs to be written to interface directly to Serv-U for user access, events, and common operations. (Serv-U Gold only)
Added the ability to define custom "SITE" FTP commands via Integration DLL support. (Serv-U Gold only)
Added the ability to define custom FTP commands via Integration DLL support. (Serv-U Gold only)
Added the ability to act as a Windows user for individual directory access rules. A Windows user name, password, and domain may be optionally specified for individual directory access rules. This allows Serv-U to access network resources even while running as a system service using the Windows local system account. (Serv-U Gold only)
Added the ability to send email messages to users with account login ID and password. (Serv-U Gold only)
Added "User Added" event so that custom Events events may be triggered when a user is created. (Serv-U Gold only)
Added "IP Address Auto Added" event, triggered when an IP address has been automatically added to the IP access rules. (Serv-U Gold only)
Added the ability for users to recover or reset their passwords in the HTTP login page. If using one-way password encryption, the password is changed to a randomly generated password based on administrator defined password requirements. (Serv-U Gold and Silver only)
Added new login statistics for the Server, Domain, Group, and User, all individually viewable. These new statistics include: number of logins, number of logouts, current logins, most concurrent logins, last login time, last logout time, average login time, longest login duration, and shortest login duration.
Added options to save Users and Groups statistics to CSV file.
Added support for SFTP (via SSH2) welcome messages. If a welcome message or welcome message file is specified, Serv-U sends the message with the SSH2_MSG_USERAUTH_BANNER message.
Added the ability to limit when a user or group can log in based on the day-of-the-week and/or the time-of-day.
When an IP address is in an approved IP address list that approved IP address is no longer blocked when automatically blocking IP addresses unless the IP address is approved because of *.*.*.* or * in the IP access list.
Added new system variables intended for use by events only; $Password, $LocalHomeDirectory, $LogFilePath (log deletion event only)
Added new system variables: $UserEmailAddress, $FullName, $SpaceFullName, $FullNameSpace, $ComputerName
Added the ability to send email events to multiple recipients. Email recipient lists may be specified by separating email addresses by a comma or space.
Added the ability to enable or disable events.
Added the ability to use $UserEmailAddress for the destination email address in email events.
Added the ability to send email events to groups members.
Added the ability to BCC (blind carbon copy) email addresses for email events.
Changed email messages to retry for a period of time when unable to connect to the specified SMTP server and when the server appears to be using grey listing.
Added the ability to use SSL when connecting to an SMTP server for email messages.
Added two new user events identifying whether or not password recovery was successful.
Added a new domain event identifying when a log file is purged.
Added the ability to add comments to individual IP Access rules.
Added the ability to wait for up to 30 seconds for an executable event to complete before continuing execution in Serv-U. This is useful if an executable needs to move or copy a file before Serv-U deletes it (such as purging a log file).
Added the ability to download the current log file from within the Management Console.
Changed log file format to UTF-8.
Added the ability to purge log files based on the total size or total number of log files in a directory. This feature deletes the oldest log files when either limit is exceeded.
Added the ability to use the PASV IP Address / Domain Name only for FTPS (FTP over SSL) connections to help with certain routers.
Added the ability to use the PASV IP Address / Domain Name for LAN connections (via private IP addresses) as well as WAN / Internet connections.
Added the ability to import and export users from the Users' tabs in CSV (comma separated value) format.
Added a new Connection limit to Users, Groups, Domains, and the Server which can require users to have a reverse DNS name to connect or login to the server.
Added the Advanced Limit to disable renaming files and directories to paths that already exist; applies to users, groups, domains, and the entire server. FTP, FTPS, HTTP, HTTPS, and SFTP (via SSH2) versions 3 & 4 are the affected protocols. SFTP versions 5 and above uses a different mechanism as defined by the protocol, unless the client uses the SSH_FXP_RENAME_NATIVE flag.
Added the ability to disable specific database tables. Disabling unused tables can reduce the number of ODBC calls.
Changed the default User and Group table names from "User" to "SUUsers" and "Group" to "SUGroups" in order to avoid "reserved" Microsoft SQL keywords. Microsoft reference page: http://msdn.microsoft.com/en-us/library/ms189822(SQL.90).aspx
Added new FTP system variables: $CurrentUncompressedTransferBytes and $CurrentCompressedTransferBytes
Reduced the database column sizes for non string columns by default. This is due to some restrictions by some databases on the total row length.
Added "Windows 7" to the $OS system variable.
Changed Serv-U's automatic listener recovery (periodically attempts to listen again when unable to listen) so that this feature is disabled when more than 50 domains are defined. This is done to save CPU cycles on slower computers.
Automatically create log file directory structure if the parent directory of a specified log file doesn't already exist.
Changed the "OPTS UTF8 ON/OFF" command to be available prior to login.

Management Console:

Added a domain navigation tree for one-click access to any configuration page, including any server configuration page.
Changed the group membership dialog in the Management Console to hide the "Add" and "Remove" arrows when nothing is selected in the corresponding list.
A randomly generated password is automatically created when creating new users. The password is fully highlighted so if not desired simply typing a new password over the existing requires no extra work for an administrator.
Changed the Domain wizard to prompt either for one-way or two-way password storage.
Added the ability to set the advanced properties for database user and group limits.
Changed all lists, inside the Management Console, to use "natural sorting" to properly sort items according to the current locale.
Changed the default button from "Yes" to "No" in destructive confirmation dialogs. Pressing enter automatically answers "No" instead of "Yes".
Changed domain administrator operations to include those shown on the "Settings" tab for the domain "Limits and Settings".
Removed the "Windows Authentication" tab for domain administrators.
Added the domain events tab for domain administrators.
Changed the events list to exclude listings of balloon tip and execute events.
Added "Domain" and "System" admin icons to the users list to identify them from normal users.
Added the ability select a private key size (in bits) for SSL certificate creation (1024, 2048, and 4096).
Added a Windows Vista & Windows 7 style "bread crumb" navigation bar to the file and directory browse dialogs for easier navigation.

Web Client:

Added a powerful file search feature to the Web Client that allows users to recursively search for specified files using exact file name matches or wildcard matches.
Added a Windows Vista & Windows 7 style "bread crumb" navigation bar for easier directory navigation.
Added a history navigation menu for faster navigation to previously viewed directories.
Added the ability to auto play video files in the Web Client by setting a URL parameter (playmedia=1).
Changed file and folder list, to use "natural sorting" to properly sort files and folders according to the current locale.
Changed the default theme for Windows 7 to use "Windows Vista".
Added an alert dialog on the login page to inform users to upgrade to IE8 to improve performance.

Tray:

Added a tray option to use the system browser instead of the embedded Internet Explorer. Using the system browser can be faster, depending on the browser, and can reduce the amount of RAM used by the tray application.
Improved accuracy of "XX KB", "XX MB", and "XX GB" displays to round up to the next highest value instead of checking for any amount over the unit (as older versions of Windows did). (Tray Application and FTP Voyager JV)
Added support for saving the tray's Management Console Window coordinates over multiple monitors

FTP Voyager JV:

Added the "Synchronize Folders" feature which allows for easy folder comparison for mirroring either a local or remote folder.
Added the ability to search for files and folders within FTP Voyager JV.
Added the ability to create an automatic login file for FTP Voyager JV.
Added the number of items, number of selected items, and current directory to the status bar of FTP Voyager JV.
Changed FTP Voyager JV's default value of "Remove files from Transfer Pane after completion" to "false".
Changed FTP Voyager JV's file sorting to use "natural sorting" to properly sort file names according to the current locale.
Changed the FTP Voyager JV File Properties dialog to show the "Date Created" and the "Date Last-Accessed" fields when launched from a selected remote file.
Changed the formatting of FTP Voyager JV's file sizes and transfer stats to include one or two digits past a decimal character.
Changed the FTP Voyager JV startup page to recognize when FTP Voyager JV logs out. The page queries the server every 10 seconds, if logged out, the page automatically redirects to the logged out page.

Bug Fixes:
Serv-U Engine:

Corrected a bug where the "SITE SET TRANSFERPROGRESS ON" FTP command could cause Serv-U to crash.
Corrected a bug where the "SITE SET TRANSFERPROGRESS ON" FTP command was using the wrong system variable ($NoFormatTransferBytes). $CurrentUncompressedTransferBytes is now used.
Corrected a bug where database column mapping would not work.
Corrected an attribute availability bug when specifying the start time "after" the end time, Serv-U would not properly handle this condition.
Corrected a security bug where Serv-U was showing all drives and virtual paths to drives for "\" when a user may not have had permission to list all drives or virtual paths to drives.
Corrected a directory listing / change directory bug where Serv-U was not allowing access to a parent directory, in some cases, if permissions for the parent directory were not explicitly set.
Corrected a bug in the MFF FTP command where Serv-U was not ignoring the space between the "fact" and the "path name", causing MFF to fail with an incorrect path response.
Corrected a bug where the UNIX directory mask would not work correctly if "r" (read) and "w" characters were not being used in the same locations as the default. This was changed to remain consistant with Serv-U version <= 6.4.

Management Console:

Corrected a bug where the user was unable to close a combo box when clicking on the combo box drop down arrow.
Corrected a bug in the Domain Wizard dialog where the pages where not all the same height.
Corrected a bug where the User & Groups Statistics would hang when changing the Collection.
Corrected a bug where the domain log would not properly clear out the log contents after resetting the filtering.
Corrected a bug where the RhinoSoft.com logo located in the footer had an incorrect background.
Corrected a bug where "Transfer Ratios" were not being saved correctly causing the wrong information to appear in the dialog.
Corrected a bug where the UNIX directory mask could not be saved.

Web Client:

Corrected a Web Client upload bug, where uploading a small file, locally or on a very fast connection, the Web Client could think the file did not upload, even when it did. This problem occurred mostly in Firefox browsers.
Corrected a Web Client upload bug, where uploading a file that would overwrite a file with the same name, and had encoded characters, would fail to prompt the user for accepting the overwrite.
Corrected a bug where when logging in using an Opera browser on Japanese Windows would fail to read cookies needed to set the language and cause the page to reload continuously.
Corrected a bug where the wrong string was used for the alt tag in the Web Client header image.

Tray:

Corrected a bug in some dialog boxes that caused the font to shrink and adjusted the sizing on some images. This bug was only noticeable on Japanese Windows.

FTP Voyager JV:

Corrected a bug in FTP Voyager JV that displayed the Change Password option to users who are not allowed to change their password.
Corrected a bug in FTP Voyager JV's tree control that allowed the user to try to rename the root folder of the particular file system.
Corrected a bug in FTP Voyager JV where the Main Toolbar's right-click menus did not represent all the buttons of the toolbar.
Corrected a bug in FTP Voyager JV where the preview pane was not handling error states for failed preview images.
Corrected a bug in FTP Voyager JV where the preview pane could enter an invalid state by rapidly switching the selected file of a directory listing.
Corrected a bug in FTP Voyager JV where the preview pane was not refreshing its image after a file was transferred.
Corrected a bug in FTP Voyager JV where the about box's Build Date would sometimes show the timestamp of a previous build.
Corrected a bug in FTP Voyager JV where the File Properties fields for formatting dates were not taking into account the Preferences option "Automatically adjust timestamps for Daylight Saving Time".
Corrected a bug in FTP Voyager JV where the Remote Pane's tree was not correctly inserting the child tree nodes for remote drives.
Corrected a bug in FTP Voyager JV where the right-click menu of the dockable frame's tab was not refreshing its check mark status for the right-click menu options.
Corrected a bug in FTP Voyager JV where the Tree and Preview titles were not using the translated strings.
Corrected a bug in FTP Voyager JV where the application location and size between sessions was failing to load for dual-monitor setups.
Corrected a bug in FTP Voyager JV where the active frame would move from the local frame to the remote frame after a "New Folder" operation was completed.
Corrected a bug in FTP Voyager JV, introduced in version 8.2.0.1, where uploading files with non-ASCII characters would fail in many cases.
Corrected a bug in FTP Voyager JV that failed to change the password for users that had non-ASCII characters in their "User Name" and/or "Password" fields.
Corrected a bug in FTP Voyager JV that failed to overwrite and move a remote file between two remote directories that had the same file name.
Corrected a bug in FTP Voyager JV where the overwrite dialog would show the resume button even if copying or moving files across the same file system.

Version 9 Serv-U Release Notes