mirror of
https://github.com/nitnelave/lldap.git
synced 2023-04-12 14:25:13 +00:00
5cb07b9780
This is a breaking change: it changes the way the password data is serialized in the DB, so any saved password is no longer readable (all passwords have to get reset).
2.8 KiB
2.8 KiB
Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
[Unreleased]
Breaking
- The password storage mechanism has changed, the passwords cannot be ported over from the old version. All passwords have to be reset.
[0.4.1] - 2022-10-10
Added
- Added support for STARTTLS for SMTP.
- Added support for user profile pictures, including importing them from OpenLDAP.
- Added support for every config value to be specified in a file.
- Added support for PKCS1 keys.
Changed
- The
dn
attribute is no longer returned as an attribute (it's still part of the response). - Empty attributes are no longer returned.
- The docker image now uses the locally-downloaded assets.
[0.4.0] - 2022-07-08
Breaking
The lldap_readonly
group has been renamed lldap_password_manager
(migration happens automatically) and a new lldap_strict_readonly
group was introduced.
Added
- A new
lldap_strict_readonly
group allows granting readonly rights to users (not able to change other's passwords, in particular).
Changed
- The
lldap_readonly
group is renamedlldap_password_manager
since it still allows users to change (non-admin) passwords.
Removed
- The
lldap_readonly
group was removed.
[0.3.0] - 2022-07-08
Breaking
As part of the update, the database will do a one-time automatic migration to add UUIDs and group creation times.
Added
- Added support and documentation for many services:
- Apache Guacamole
- Bookstack
- Calibre
- Dolibarr
- Emby
- Gitea
- Grafana
- Jellyfin
- Matrix Synapse
- NextCloud
- Organizr
- Portainer
- Seafile
- Syncthing
- WG Portal
- New migration tool from OpenLDAP.
- New docker images for alternate architectures (arm64, arm/v7).
- Added support for LDAPS.
- New readonly group.
- Added UUID attribute for users and groups.
- Frontend now uses the refresh tokens to reduce the number of logins needed.
Changed
- Much improved logging format.
- Simplified API login.
- Allowed non-admins to run search queries on the content they can see.
- "cn" attribute now returns the Full Name, not Username.
- Unknown attributes now warn instead of erroring.
- Introduced a list of attributes to silence those warnings.
Deprecated
- Deprecated "cn" as LDAP username, "uid" is the correct attribute.
Fixed
- Usernames, objectclass and attribute names are now case insensitive.
- Handle "1.1" and other wildcard LDAP attributes.
- Handle "memberOf" attribute.
- Handle fully-specified scope.
Security
- Prevent SQL injections due to interaction between two libraries.