Lam Versions Save

LDAP Account Manager

2 months ago

PHP 8.3 compatibility
Mail attributes can be configured centrally in LAM's main configuration (273)
LAM Pro:
- Cron job to deactivate inactive accounts based on lastBind overlay data (265)
- Request access: support Windows groups (266)
- Request access: usability improvements (278, 279)
- Self service: passwordless SSO login supported for Okta and OpenID
Fixed bugs:
- Security fix: Log file handling (GHSA-fm9w-7m7v-wxqv)
- User self registration creates accounts only with SSHA hash (287)
- PHP error when no FreeRadius profiles were found (302)
- PHP notices (303)
- Self service reports "Password is too young to change" (305)
- Self service password reset does not set "shadowLastChange" when not set before (306)

3 months ago

PHP 8.3 compatibility
Mail attributes can be configured centrally in LAM's main configuration (273)
LAM Pro:
- Cron job to deactivate inactive accounts based on lastBind overlay data (265)
- Request access: support Windows groups (266)
- Request access: usability improvements (278, 279)
- Self service: passwordless SSO login supported for Okta and OpenID
Fixed bugs:
- User self registration creates accounts only with SSHA hash (287)

5 months ago

LAM requires PHP 8.0.2 or later
Docker: upgrade to Debian 12
LAM Pro:
- Request access: new module to allow users to request group memberships via self service
- Custom scripts: support to specify the subtype of an account
- Custom fields: Display groups in server profile as accordion (236)
- PPolicy and Shadow cron jobs for password expiration notification: added option to ignore expiration warning time
Fixed bugs:
- Docker image contains Apache with vulnerabilities (2)

5 months ago

LAM requires PHP 8.0.2 or later
Docker: upgrade to Debian 12
LAM Pro:
- Request access: new module to allow users to request group memberships via self service
- Custom scripts: support to specify the subtype of an account
- Custom fields: Display groups in server profile as accordion (236)
- PPolicy and Shadow cron jobs for password expiration notification: added option to ignore expiration warning time

8 months ago

Multi edit tool: allow attribute placeholders in values
Accessibility improvements
LAM Pro:
- Custom fields: support "" in date regex for text fields
- MIT Kerberos: replaced realm setting in profile editor with user name (e.g. to be able set "$[email protected]")
Fixed bugs:
- Custom fields: issues when same field name is used in multiple groups, field names are now generated by LAM (235)
- Custom scripts: preDelete script causes error message for return code 0 (246)

8 months ago

Multi edit tool: allow attribute placeholders in values
Accessibility improvements
LAM Pro:
- Custom fields: support "" in date regex for text fields
- MIT Kerberos: replaced realm setting in profile editor with user name (e.g. to be able set "$[email protected]")
Fixed bugs:
- Custom fields: issues when same field name is used in multiple groups, field names are now generated by LAM (235)

11 months ago

Duo 2FA: switch to frameless login and support for universal prompt
Docker: support for linux/arm64 (Apple Silicon)
Account lists: support account status in table for any account type that supports it (e.g. groups with PPolicy attributes)
Windows: allow to set no password expiration via account profile
Accessibility improvements
LAM Pro:
- PPolicy: support to edit existing policies that are not based on "device" (but e.g. on "person")
- SMTP server settings: settings can be tested before saving
Fixed bugs:
- Selecting entries from a filtered list selection did not work (223)
- Lamdaemon: support to delete home directories if "rm" command is aliased to "rm -i"
- Windows: "Managed by" was not changeable, account list rendering of manager/member/managedBy
- Tree view: allow to add entries of attribute olcModuleLoad

1 year ago

Duo 2FA: switch to frameless login and support for universal prompt
Docker: support for linux/arm64 (Apple Silicon)
Account lists: support account status in table for any account type that supports it (e.g. groups with PPolicy attributes)
Windows: allow to set no password expiration via account profile
LAM Pro:
- PPolicy: support to edit existing policies that are not based on "device" (but e.g. on "person")
- SMTP server settings: settings can be tested before saving
Fixed bugs:
- Selecting entries from a filtered list selection did not work (223)
- Lamdaemon: support to delete home directories if "rm" command is aliased to "rm -i"
- Windows: "Managed by" was not changeable, account list rendering of manager/member/managedBy
- Tree view: allow to add entries of attribute olcModuleLoad

1 year ago

PHP 8.2 compatibility
Windows users: display name can be hidden in server profile
LDAP export: sort entries by DN
Security: you can hide login error details in LAM's main configuration
2 factor authentication: allow to remember device (must be activated in server/self service profile)
RPM package cleanup
LAM Pro:
- Custom scripts: new wildcard INFO.lamLoginDn for current user
- PPolicy: allow password policy for groups and hosts
- Simple security object: allow for hosts
- Apache Guacamole: added ssh, telnet and kubernetes protocols
Fixed bugs:
- SameSite value for cookies changed to Lax to not break Okta/OpenID
- Unix users: file upload did not always set memberUid in group (218)

1 year ago

PHP 8.2 compatibility
Windows users: display name can be hidden in server profile
LDAP export: sort entries by DN
Security: you can hide login error details in LAM's main configuration
2 factor authentication: allow to remember device (must be activated in server/self service profile)
RPM package cleanup
LAM Pro:
- Custom scripts: new wildcard INFO.lamLoginDn for current user
- PPolicy: allow password policy for groups and hosts
- Simple security object: allow for hosts
- Apache Guacamole: added ssh, telnet and kubernetes protocols
Fixed bugs:
- SameSite value for cookies changed to Lax to not break Okta/OpenID