1108 lines
42 KiB
Plaintext
1108 lines
42 KiB
Plaintext
September 2020
|
|
- PHP 7.4 compatibility
|
|
- Configuration export and import
|
|
- Show password prompt when a user with expired password logs into LAM admin interface (requires PHP 7.2)
|
|
- Better error messages on login when account is expired/deactivated/...
|
|
- Windows users: group display format can be configured (cn/dn)
|
|
- LAM Pro:
|
|
-> Windows: new cron job to send users a summary of their managed groups
|
|
- Fixed bugs:
|
|
-> Unix groups: memberUid was not deleted correctly when forced sync with group of names is active
|
|
|
|
01.05.2020 7.2
|
|
- Unix: allow to create group with same name during user creation
|
|
- LAM Pro:
|
|
-> EMail sending can be done via SMTP without local mail server
|
|
-> License expiration warning can be sent via email or disabled
|
|
- Fixed bugs:
|
|
-> Captcha don't show anymore in Self Service login page (213)
|
|
-> Unix memberships cannot be changed. This issue can also affect other membership relations.
|
|
-> Missing locales on Docker image
|
|
|
|
|
|
17.03.2020 7.1
|
|
- PHP 7 required
|
|
- WebAuthn/FIDO2 support for 2-factor-authentication (requires PHP 7.2)
|
|
- IMAP: changed library to support latest TLS versions
|
|
- Personal: support display name (hidden by default in server profile)
|
|
- Windows users: support allowed workstations, more profile options
|
|
- Reactivated Polish translation
|
|
- LAM Pro:
|
|
-> PPolicy: support for password check module
|
|
-> Windows AD LDS support (users and groups)
|
|
-> User self registration: support Active Directory/Samba4
|
|
|
|
|
|
21.12.2019 7.0
|
|
- Lamdaemon can be configured with directory prefix for homedirs
|
|
- Account list filters match on substrings instead of whole value
|
|
- YubiKey: support to configure multiple verification servers
|
|
- Windows hosts: added last password change and last login
|
|
- Deactivated non-maintained translations: Catalan, Czech, Hungarian, Polish and Turkish
|
|
Contact us if you would like to take over. Translators get LAM Pro for free (commercial use included).
|
|
- Docker updates
|
|
- Fixed bugs:
|
|
-> Missing CSS for Duo
|
|
-> Editing of DNs with comma on Windows (210)
|
|
|
|
|
|
29.09.2019 6.9
|
|
- Group account types can show member+owner count in list view
|
|
- 2-factor authentication:
|
|
-> Duo support
|
|
-> user name attribute for privacyIDEA can be specified
|
|
- LAM Pro:
|
|
-> New self service settings for login and main page footer
|
|
-> Custom fields: custom labels for LDAP search select list
|
|
- Fixed bugs:
|
|
-> Configuration issue with Unix user/host module (206)
|
|
|
|
|
|
02.07.2019 6.8
|
|
- Parallel editing of multiple entries in different browser tabs supported
|
|
- LAM supports the progressive web app standard which allows to install LAM as an icon on home screen
|
|
- Windows: added home drive and force password change to profile editor
|
|
- Unix: password management can be disabled in module settings
|
|
- LAM Pro:
|
|
-> Bind DLZ: entry table can show record data (use special attribute "#records" in server profile)
|
|
-> Self service: support legacy attribute "email" for password self reset and user self registration
|
|
- Fixed bugs:
|
|
-> Users: No drop-down filter box for account status (200)
|
|
-> Custom fields: Account type "Groups" not saving/deleting fields (66)
|
|
|
|
|
|
25.03.2019 6.7
|
|
- Added YubiKey as 2-factor authentication provider
|
|
- Support logging to remote syslog server
|
|
- PHP 7.3 support
|
|
- LAM Pro:
|
|
-> Allow to mark text and text area fields as required
|
|
-> New self service fields:
|
|
-> Mail routing
|
|
-> Windows proxy addresses + mail alias
|
|
-> Shadow account expiration date
|
|
-> Unix and group of names memberships
|
|
-> Base URL for emails in self service can be configured in self service profile
|
|
-> Bind DLZ: support DNAME+XFR records and descriptions in records (requires latest LDAP schema)
|
|
-> Cron jobs: added Shadow account expiration notification job
|
|
- Fixed bugs:
|
|
-> Allow tree-only configurations without any other tab
|
|
|
|
|
|
28.12.2018 6.6
|
|
- New import/export in tools menu
|
|
- YubiKey support
|
|
- Windows users:
|
|
-> Manage "departmentNumber" (needs to be activated via LAM server profile)
|
|
-> Sync group memberships from Unix and group of names
|
|
- LAM Pro:
|
|
-> Easy setting of background color in self service profile
|
|
-> Cron jobs: added Windows/Qmail/FreeRadius account expiration notification jobs
|
|
-> Bind DLZ: usability improvements and small fixes
|
|
|
|
|
|
25.09.2018 6.5
|
|
- Password change possible via LDAP EXOP operation (set LDAP_EXOP as password hash, requires PHP 7.2)
|
|
- Support Imagick and GD
|
|
- Dropped support for Apache 2.2
|
|
- Upload: allow to overwrite existing accounts
|
|
- Personal: photos can be printed in PDF export
|
|
- Kolab updates
|
|
- LAM Pro:
|
|
-> Auto deletion of entries with dynamic directory services support (requires PHP 7.2)
|
|
- Fixed bugs:
|
|
-> Issue when changing key case of uid (#197)
|
|
|
|
|
|
20.06.2018 6.4
|
|
- Imagick PHP extension required
|
|
- Passwords can be checked against external service (e.g. https://api.pwnedpasswords.com/range)
|
|
- Personal/Windows: image cropping support
|
|
- Better filtering of account lists
|
|
- Unix: Unix, Windows and group of names memberships can be synced in group selection
|
|
- IMAP: create mailbox via file upload
|
|
- PHP 7.2 support
|
|
- Support for "," in DN
|
|
- LAM Pro:
|
|
-> Better support for 389ds password expiration
|
|
- Fixed bugs:
|
|
-> Error on password reset page when custom fields is used (194)
|
|
|
|
|
|
19.03.2018 6.3
|
|
- Server profile: added option if referential integrity overlay is active to skip cleanup actions
|
|
- Unix: several options are now specific to subaccount types (reconfiguration required!)
|
|
- Fixed bugs:
|
|
-> Security fixes (XSS vulnerabilities CVE-2018-8763 and CSRF token in URL CVE-2018-8764)
|
|
-> Quota for Windows groups did not work
|
|
- LAM Pro:
|
|
-> Support custom structural object classes with new custom type
|
|
-> Support dynamic lists
|
|
-> Self service login and password self reset can be secured with captcha
|
|
|
|
|
|
04.02.2018 6.2.1
|
|
- Fixed bugs:
|
|
-> Login page not working when no server profile exists (44)
|
|
-> LAM Pro: Password Self Reset has issues when both security question and confirmation mail are activated.
|
|
-> LAM main configuration: certificate buttons do not work
|
|
|
|
|
|
13.12.2017 6.2
|
|
- License changed from GPL v2 to GPL v3
|
|
- PHP 5.6 and Internet Explorer 11 or later required
|
|
- PDF export supports Chinese, Japan and Korean
|
|
- Account status also shows expired accounts
|
|
- Quota: support k/m/g/t/K/M/G/T to specify values in e.g. kB
|
|
- LAM Pro:
|
|
-> Cron jobs include better logging and support dry-run
|
|
|
|
|
|
19.09.2017 6.1
|
|
- Automatically trim input fields to avoid trailing/leading spaces
|
|
- LAM Pro:
|
|
-> Custom fields: support wildcards in text fields such as $firstname
|
|
-> Custom fields: specify minimum/maximum count for multi-value entries
|
|
-> Custom fields: new type for constant values
|
|
- Fixed bugs:
|
|
-> Password modify page reports error on password change when posixAccount is present for users
|
|
-> Nginx configuration files did not include "fastcgi_param SCRIPT_FILENAME $request_filename;" (193)
|
|
|
|
|
|
20.07.2017 6.0.1
|
|
- Fixed bugs:
|
|
-> Configuration file fills up with empty values
|
|
-> Tool visibility settings
|
|
|
|
|
|
26.06.2017 6.0
|
|
- Support multiple configurations for same account type
|
|
- PHP 7.1 compatibility
|
|
- Courier users and mail aliases
|
|
- Windows: Support unlocking of users with too many failed login attempts
|
|
- Samba 3: added account expiration date to PDF fields
|
|
- LAM Pro:
|
|
-> Custom fields: can be used for file upload
|
|
-> Custom fields: new selection list type that gets options from LDAP search
|
|
-> Kopano support
|
|
|
|
|
|
15.03.2017 5.7
|
|
- 2-factor authentication for admin login and self service with privacyIDEA
|
|
- PDF files use DejaVu serif font for better readability and more supported characters (e.g. Cyrillic)
|
|
- Windows users: the department option now uses attribute "department" instead of "departmentNumber"
|
|
- Updated Debian dependencies
|
|
- Fixed bugs:
|
|
-> Comparison issue prevents saving of values (185)
|
|
|
|
|
|
18.12.2016 5.6
|
|
- New mechanism to replace wildcards in user edit screen. Personal/Unix support more wildcards like "$firstname".
|
|
- Windows: added support for pager, otherPager, mobile, otherMobile, company and proxyAddresses (disabled by default in server profile)
|
|
- Mail routing: enable for groups and allow to add/remove the extension
|
|
- LAM Pro:
|
|
-> Password self reset: support for up to 3 security questions
|
|
-> 389ds: new wildcards for custom scripts: $INFO.389lockingStatusChange$ and $INFO.389deactivationStatusChange$
|
|
-> Custom scripts: custom button label supported for manual scripts
|
|
|
|
|
|
10.09.2016 5.5
|
|
- Windows: allow to show effective members of a group
|
|
- Lamdaemon: support SSH key authentication
|
|
- LAM Pro:
|
|
-> Group of names/members + roles: allow to show effective members of a group
|
|
-> Cron jobs:
|
|
* Move or delete expired accounts (Shadow, Windows, qmail, FreeRadius)
|
|
* 389ds: added job to notify before password expires
|
|
-> 389ds: manage password expiration time with module "Account locking"
|
|
- Fixed bugs:
|
|
-> PHP 7 issues on edit page
|
|
|
|
|
|
21.06.2016 5.4
|
|
- Unix: support magic numbers for UIDs/GIDs (e.g. 389 server DNA plugin)
|
|
- Samba 3: support for Samba password history (RFE 133)
|
|
- LAM Pro:
|
|
-> New module for 389ds unlocking and account (de)activation
|
|
-> Self registration: support for Google reCAPTCHA
|
|
-> Password notification jobs support CC and BCC
|
|
-> Self Service: Samba 3 supports password history and minimum age check
|
|
|
|
|
|
21.03.2016 5.3
|
|
- Requires PHP 5.4.0 or higher
|
|
- PHP 7 support
|
|
- Windows: support management of fax number
|
|
- Login can show display name instead of server URL
|
|
- Personal/Unix: support K5KEY hash type for smbk5pwd
|
|
- New NIS netgroup module for hosts
|
|
- Puppet: autocompletion for classes and variables, allow to enforce list of possible classes
|
|
- Fixed bugs:
|
|
-> Autoload errors in tree view
|
|
-> Set correct content type on JSON requests (174)
|
|
- LAM Pro:
|
|
-> Support for LDAP views based on nsview object class
|
|
-> Password notification jobs support to print expiration date in email
|
|
-> PPolicy password notification job takes pwdExpireWarning into account
|
|
-> Custom fields: support calendar fields
|
|
-> Zarafa contacts: allow to create contacts without Unix extension
|
|
-> Added options for password rest page to server profile
|
|
|
|
|
|
15.12.2015 5.2
|
|
- Windows: support for additional attributes (jpegPhoto, title, carLicense,
|
|
employeeNumber, employeeType, businessCategory, departmentNumber, ou, o, manager)
|
|
- SSH public key: added possibility to add/remove SSH extension
|
|
- MIT Kerberos: set krbExtraData for new accounts
|
|
- IMAP: allow to specify initial folders to create
|
|
- LAM Pro:
|
|
-> Users: allow to manage IP addresses with ipHost module
|
|
-> Self Service: added time zone setting in self service profile
|
|
-> Shadow: added job to notify before Shadow password expires
|
|
-> Windows: added job to notify before Windows password expires
|
|
|
|
|
|
31.08.2015 5.1
|
|
- IMAP: support Windows users
|
|
- SSH public key: check uploaded files if in right format
|
|
- LAM Pro:
|
|
-> Self Service optimized also for mobile devices
|
|
-> MySQL support for cron jobs
|
|
-> Self registration: support auto-numbering for attributes (e.g. to create Unix accounts)
|
|
|
|
|
|
30.06.2015 5.0
|
|
- Microsoft IE 8 no longer supported
|
|
- Security: added CSRF protection
|
|
- NIS net groups: user module to manage NIS net groups on user page
|
|
- Zarafa users: allow to change display format of "Send As"
|
|
- User list: support to filter by account status
|
|
- Lamdaemon: update group of home directory if user's primary group changes
|
|
- Personal: allow to add ou=addressbook subentry for users (RFE 117)
|
|
- Unix: support auto-UID/GID with msSFU30DomainInfo
|
|
- Windows groups: support editing of member of
|
|
- Central time zone setting in server profile
|
|
- LAM Pro:
|
|
-> Cron job to notify users before password expires (PPolicy)
|
|
-> Password Self Reset: added 389 Directory Server schema file
|
|
-> Support for groupOfMembers (RFE 121)
|
|
-> Rfc2307bis Unix groups: added option to force syncing with group of names
|
|
|
|
|
|
31.03.2015 4.9
|
|
- Requires PHP 5.3.2 or higher
|
|
- Templates for server profiles
|
|
- Unix/Personal: support SASL as password hash type
|
|
- PDF export: added option to print primary group members
|
|
- Use HTTP_X_REAL_IP/HTTP_X_FORWARDED_FOR to log IP addresses (RFE 120)
|
|
- LAM Pro:
|
|
-> Personal: support image file size limit and cropping (requires php-imagick) in self service
|
|
-> Password self reset: allow to enter custom security questions (RFE 115)
|
|
-> Unix groups (rfc2307bis): allow to sync members from group of (unique) names (RFE 116)
|
|
-> Self Service: support password change with old password (requires PHP >= 5.4.26)
|
|
- Fixed bugs:
|
|
-> Self Service shows password reuse error after password change was required
|
|
|
|
|
|
16.12.2014 4.8
|
|
- Active Directory: support paged result as workaround for size limit exceeded
|
|
- FreeRadius: support dialupAccess and radiusProfileDn
|
|
- Usability improvements
|
|
- LAM Pro:
|
|
-> Self service: added option if referrals should be followed
|
|
- fixed bugs:
|
|
-> missing LDAP_DEREF_NEVER in some cases (169)
|
|
|
|
|
|
07.10.2014 4.7.1
|
|
- fixed bugs:
|
|
-> Blank page and "User tried to access entry of type ..." log message when DN suffix does not exactly match case in LDAP
|
|
|
|
|
|
28.09.2014 4.7
|
|
- Nginx webserver support
|
|
- DHCP: support pooling of IP ranges (RFE 107)
|
|
- Personal: support pager attribute (hidden by default)
|
|
- Renamed config/lam.conf_sample to lam.conf.sample and config.cfg_sample to config.cfg.sample
|
|
- LAM Pro:
|
|
-> Password dialog: preset alternate email address with backup email address (RFE 111)
|
|
|
|
|
|
12.06.2014 4.6
|
|
- Unix groups: allow to disable membership management
|
|
- Extended LAM's internal password policies
|
|
- Lamdaemon: move home directory on server if changed
|
|
- Password policy check during typing
|
|
- LAM Pro:
|
|
-> Password self reset and user self registration support to set a header text
|
|
-> Sudo roles: support latest schema
|
|
-> Bind DLZ: automatic PTR management (disabled by default) and better formatting of e.g. TTL values
|
|
|
|
|
|
18.03.2014 4.5
|
|
- IMAP: allow dynamic admin user names by replacing wildcards with LDAP attributes
|
|
- Personal: allow to set fields read-only
|
|
- NIS mail aliases can be managed on user page
|
|
- Added option to server profile if referrals should be followed (fixes problems with Samba 4 and AD)
|
|
- Windows user/group: NIS support (msSFU30NisDomain, msSFU30Name)
|
|
- LAM Pro:
|
|
-> Allow to set single account types read-only
|
|
-> Support for organizationalRole entries
|
|
-> Separate IP restriction list for self service
|
|
-> Bind DLZ: support TXT/SRV records
|
|
-> Self Service: added language selection
|
|
-> Password self reset: support backup email address
|
|
-> Custom fields: support help texts
|
|
-> Support for Oracle databases (orclNetService) (RFE 104)
|
|
- fixed bugs:
|
|
-> PDF export for multiple entries does not work (163)
|
|
-> Personal: fixed photo upload if Imagick is not installed (161)
|
|
-> Use account filters for Unix membership management (165)
|
|
|
|
|
|
18.12.2013 4.4
|
|
- PyKota support: users, groups, printers, billing codes
|
|
- Kolab shared folder support
|
|
- New tool "Multi edit" allows LDAP operations on a large number of entries (e.g. adding attributes)
|
|
- Allow to set a custom label for each account type
|
|
- Unix: switch also additional membership if primary group is changed (RFE 108)
|
|
- Windows: fixed user name handling, sAMAccountName now optional
|
|
- Apache 2.4 support (requires Apache "version" module)
|
|
- Added Turkish, Ukrainian and US English translation
|
|
- LAM Pro:
|
|
-> Bind DLZ support
|
|
-> Samba/Shadow: display password change date in self service
|
|
-> Custom fields: support custom label and icon, auto-completion
|
|
-> User self registration: support constant attribute values
|
|
-> Self service: allow to set custom field labels
|
|
- Fixed bugs:
|
|
-> Format of photo in Personal tab (158)
|
|
|
|
|
|
25.09.2013 4.3
|
|
- Custom SSL CA certificates can be setup in LAM main configuration
|
|
- Unix user and group support for Samba 4
|
|
- Samba 3 groups: support local members
|
|
- Kolab: support group accounts and allowed senders/receivers for users
|
|
- SSH public key: support file upload and self service enhancements (RFE 101)
|
|
- DHCP: support more options (RFE 99)
|
|
- LAM Pro:
|
|
-> PPolicy: check password history for password reuse
|
|
-> Custom fields: read-only fields for admin interface and file upload for binary data
|
|
-> Custom scripts: support user self registration
|
|
-> Password self reset: Samba 3 sync, identification with login attribute, Samba 4 support
|
|
- Fixed bugs:
|
|
-> Custom fields: auto-adding object classes via profile editor fixed
|
|
-> PHP 5.5 compatibility
|
|
-> Lamdaemon: do not show message if home directory to delete was not found (154)
|
|
|
|
|
|
18.06.2013 4.2.1
|
|
- Fixed bugs:
|
|
-> Unix: suggested user name must be lower case
|
|
-> Quota: profile editor does not work in some cases
|
|
|
|
|
|
04.06.2013 4.2
|
|
- Samba 4 support: users, groups, hosts
|
|
- Unix: allow to change format for suggested user name
|
|
- LAM Pro:
|
|
-> Zarafa support for Samba 4
|
|
-> allow to hide buttons to create/delete entries for each account type
|
|
-> Password self reset: support new identification methods: user, email, user or email, employee number
|
|
-> Custom fields: support PDF, profiles and multi-value text fields
|
|
-> Personal: support password mail sending in file upload
|
|
|
|
|
|
19.03.2013 4.1
|
|
- Updated EDU person module (RFE 3599128)
|
|
- Personal: allow management of user certificates (RFE 1753030)
|
|
- Unix: Support Samba Unix Id pool for automatic UID/GID generation
|
|
- DHCP: support separated dhcpServer and dhcpService entries
|
|
- LAM Pro:
|
|
-> Support Qmail groups
|
|
- Fixed bugs:
|
|
-> changed user and group size limits (3601649)
|
|
|
|
|
|
06.01.2013 4.0.1
|
|
- support additional LDAP filters for account types
|
|
- allow to hide account types (that are required by other account types)
|
|
- fixed bugs:
|
|
-> missing directories config/pdf and config/profiles on fresh installations
|
|
|
|
|
|
17.12.2012 4.0
|
|
- account profiles and PDF structures are now bound to server profile
|
|
- IMAP: support "/" as path separator (RFE 3575692)
|
|
- show server profile name on config pages (RFE 3579768)
|
|
- LAM Pro:
|
|
-> Custom fields for admin interface
|
|
-> MIT Kerberos support
|
|
-> Qmail user support
|
|
|
|
|
|
25.09.2012 3.9
|
|
- Kolab 2.4 support
|
|
- Puppet support
|
|
- LAM Pro
|
|
-> support RFC2307bis automount entries
|
|
-> read-only fields in self service
|
|
- fixed bugs
|
|
-> Hidden tools are still shown on the "Tools" page (3546092)
|
|
|
|
|
|
19.07.2012 3.8
|
|
- quick (un)lock for users
|
|
- allow to disable tools
|
|
- LAM Pro:
|
|
-> Custom fields module allows to manage custom LDAP attributes in Self Service
|
|
-> Self service now supports user self registration
|
|
-> Separate group of names module for users allows to manage memberships if Unix module is not used (RFE 3504429)
|
|
-> Named object module for groups (used for rfc2307bis schema)
|
|
-> Password change page allows account (un)locking
|
|
-> Allow to send password mails on user edit page
|
|
-> Custom scripts: supports manual scripts that can be run from account edit pages
|
|
-> Zarafa 7.1 support (proxy URL for servers)
|
|
- fixed bugs
|
|
-> Asterisk extensions with same name (3528288)
|
|
|
|
|
|
25.03.2012 3.7
|
|
- Login: support bind user for login search
|
|
- Personal: added labeledURI and cosmetic changes, description is now multi-valued (RFE 3446363)
|
|
- Asterisk extensions: group extension entries by name and context
|
|
- File upload:
|
|
-> support custom scripts postCreate (LAM Pro)
|
|
-> PDF export
|
|
- New translation: Slovakian
|
|
- removed phpGroupWare support (project no longer exists)
|
|
- Use new password after self password change (RFE 3446350)
|
|
- LAM Pro:
|
|
-> Password self reset can send password confirmation and notification mails
|
|
-> Zarafa archiver support
|
|
-> Heimdal Kerberos support
|
|
- Fixed bugs:
|
|
-> DHCP: error message not displayed properly (3441975)
|
|
-> Profile loading not possible if required fields are not filled (3444948)
|
|
-> Tree view: unable to add object class (3446037)
|
|
-> Edit page: unable to move accounts to different OU
|
|
-> Self Service: support forced password changes (PPolicy) (3483907)
|
|
-> XSS security patch (3496624)
|
|
|
|
|
|
23.11.2011 3.6.1
|
|
- LAM Pro: fixed password reset function
|
|
|
|
|
|
22.11.2011 3.6
|
|
- support HTTP authentication for admin pages and self service
|
|
- new modules
|
|
-> authorizedServiceObject
|
|
-> FreeRadius
|
|
- LAM Pro
|
|
-> added password self reset feature
|
|
-> Zarafa 7 support
|
|
-> Zarafa support for dynamic groups, address lists and contacts
|
|
-> Unix: group of names can be managed on user edit page
|
|
- Fixed bugs:
|
|
-> Unix: check for upper-case characters in user name (3416180)
|
|
|
|
|
|
09.08.2011 3.5.0
|
|
- New modules:
|
|
-> "General information": shows internal data about accounts (e.g. creation time)
|
|
-> "Quota": manage filesystem quota inside LDAP (Linux DiskQuota) (RFE 1811449)
|
|
- Personal: New attributes o, employeeNumber, initials
|
|
- Unix: Support to create home directories on multiple servers and also for existing users
|
|
- Server information shows data from cn=monitor
|
|
- Lots of small improvements
|
|
- LAM Pro:
|
|
-> Automount: allow to create automount maps
|
|
-> Password policy: allow to (un)lock accounts
|
|
- Fixed bugs:
|
|
-> Owner attribute is multi-valued (3300727)
|
|
|
|
2011-04-25 3.4.0
|
|
- IMAP mailboxes:
|
|
-> support to read user name from uid attribute
|
|
-> added quota management
|
|
- Personal: added additional options for account profiles
|
|
- Mail aliases: sort recipients (RFE 3170336)
|
|
- Asterisk: support all attributes (can be disabled in configuration)
|
|
- Samba 3/Shadow: allow to sync expiration date (RFE 3147751)
|
|
- LAM Pro:
|
|
-> support automount entries
|
|
-> Zarafa groups: allow combination with group of names
|
|
-> enhanced wildcards for custom scripts
|
|
-> Group of (unique) names: allow members to be optional
|
|
- Fixed bugs:
|
|
-> Renaming of default profile (3183920)
|
|
-> Profile editor: fixed problems with multi select
|
|
|
|
|
|
12.02.2011 3.3.0
|
|
- additional usability enhancements
|
|
- new IMAP module ("Mailbox (imapAccess)") allows to create/delete user mailboxes
|
|
- LAM Pro: enhanced Zarafa to support users and groups for "Send as" (new configuration option)
|
|
- PDF export: higher resolution for logos
|
|
- reduced number of LDAP queries
|
|
- lamdaemon: support journaled quotas
|
|
- Fixed bugs:
|
|
-> ignore comment lines in shells file (3107124)
|
|
-> home directory creation on file upload
|
|
|
|
|
|
28.10.2010 3.2.0
|
|
- large usability enhancements
|
|
- Shadow: allow to force password change when maximum password age is set
|
|
- DHCP: renamed module "Fixed IPs" to "Hosts", IP is now optional (3038797)
|
|
- PHP version 5.2.4 or higher required
|
|
- LAM Pro:
|
|
-> Zarafa support (user, group, server)
|
|
-> Password policy: allow to force password change (RFE 3026940)
|
|
-> Password reset page: mail subject, text and from address can be set in server profile
|
|
-> Self service: Asterisk (voicemail) password synchronisation
|
|
- Fixed bugs:
|
|
-> Email check did not include "+" (3033605)
|
|
-> Tab index on login page (3042622)
|
|
|
|
|
|
04.07.2010 3.1.1
|
|
- LAM Pro: fix for user self service
|
|
|
|
|
|
25.06.2010 3.1.0
|
|
- usability improvements
|
|
- Asterisk voicemail support
|
|
- new hosts module for user accounts to define valid login workstations (replaces inetOrgPerson schema hack) (2951116)
|
|
- PDF editor: descriptive fields
|
|
- lamdaemon:
|
|
-> sudo entry needs to be changed to ".../lamdaemon.pl *"
|
|
-> replaced PHP SSH2 with phpseclib
|
|
- LAM Pro
|
|
-> custom scripts: new options to hide executed commands and define if output is HTML or plain text
|
|
-> support sudo entry management (object class sudoRole)
|
|
- fixed bugs:
|
|
-> Asterisk password handling (patch 2979728)
|
|
-> Samba domain SID check (2994528)
|
|
-> language selection at login (2996335)
|
|
|
|
|
|
24.03.2010 3.0.0
|
|
- support to remove extension from an existing account: shadowAccount, sambaSamAccount, eduPerson
|
|
- file upload: allow to select account modules for upload
|
|
- removed frames
|
|
- Unix: automatic user name generation from first and last name (2492675)
|
|
- LAM Pro:
|
|
-> support OpenLDAP password policies (ppolicy)
|
|
-> manage host IP addresses (ipHost)
|
|
- fixed bugs:
|
|
-> Multi-delete not working (2931458)
|
|
-> Samba: can/must change password needs to be read from domain policy (2919236)
|
|
-> DNs which include "#" are not editable/deletable (2931461)
|
|
-> fixed configure/Makefile
|
|
-> Asterisk input fields and authentication realm (patch 2971792)
|
|
|
|
|
|
16.12.2009 2.9.0
|
|
- Asterisk support
|
|
- new tool: server information
|
|
- consolidated LAM documentation in new manual (docs/manual/index.html)
|
|
- DHCP: add host name to fixed IPs (RFE 2898948)
|
|
- LAM Pro:
|
|
-> enabled custom scripts for self service
|
|
-> support for nisObject object class
|
|
- fixed bugs:
|
|
-> unable to edit accounts with DNs that contain spaces next to a comma (2889473)
|
|
-> login method "LDAP search" has problems if LDAP server is down (2889414)
|
|
-> filter in account lists did not support non-ASCII letters
|
|
-> alias handling (2901248)
|
|
-> DHCP range check (2903267)
|
|
|
|
|
|
28.10.2009 2.8.0
|
|
- ability to hide fields: inetOrgPerson, sambaSamAccount
|
|
- compatibility with PHP 5.3
|
|
- one central button to change passwords on account pages
|
|
- removed support for Samba 2 accounts
|
|
- removed lamdaemonOld script
|
|
|
|
|
|
05.08.2009 2.7.0
|
|
- LAM Pro: allow to execute custom scripts
|
|
- log client IP at login attempt
|
|
- added separate configuration option to enable/disable TLS encryption
|
|
- Samba 3: allow to disable LM hashes (on by default) (RFE 2657140)
|
|
- DHCP: added description field and reordered fixed IP input fields
|
|
- fixed bugs:
|
|
* added additional check for creating home directories (2798489)
|
|
* support memcache for session storage (2811505)
|
|
|
|
|
|
08.04.2009 2.6.0
|
|
- support NIS netgroups
|
|
- support EDU person accounts (RFE 1413731)
|
|
- Personal: support departmentNumber attribute
|
|
- DHCP: allow file upload
|
|
- added config option to search LAM login users in LDAP (RFE 2494249)
|
|
- help messages are displayed as tooltips
|
|
- LAM Pro:
|
|
-> add businessCategory to self service (RFE 2494246)
|
|
-> allow to customize page headers and use custom CSS styles
|
|
|
|
|
|
21.01.2009 2.5.0
|
|
- LAM Pro:
|
|
-> supports rfc2307bis schema for Unix groups (RFE 2111694)
|
|
-> added alias management (object classes alias + uidObject) (RFE 1912779)
|
|
- Shadow: module is now optional when creating new accounts
|
|
- Kolab:
|
|
-> account extension is now optional
|
|
-> can be used without Unix module
|
|
-> self service uses no extra LDAP suffix but uses global setting
|
|
- DHCP:
|
|
-> several bugfixes
|
|
-> added PDF support
|
|
-> support multiple Netbios name servers (RFE 2180179)
|
|
- Samba 3:
|
|
-> self service sets attribute "sambaPwdLastSet" on password change (LAM Pro)
|
|
-> password timestamps can be updated on password reset page (LAM Pro)
|
|
-> option to force password change on next login
|
|
-> profile options for time when the user can/must change the password
|
|
|
|
|
|
15.10.2008 2.4.0
|
|
- added DHCP management (donated by Siedl networks GmbH)
|
|
- requires PHP 5.1.2
|
|
- MHash dependendy replaced by Hash
|
|
- save last selected server profile from login page
|
|
- lamdaemon: allow to specify SSH port
|
|
- lamdaemon: added Syslog logging
|
|
- Unix: added profile options for lamdaemon
|
|
- LAM Pro: password reset page is able to unlock Samba accounts and sets shadowLastChange
|
|
- fixed bugs:
|
|
* problems with DN containing ( and ) (2059740)
|
|
* problem with gecos field in file upload (2103936)
|
|
|
|
|
|
30.04.2008 2.3.0
|
|
- added Polish translation
|
|
- support phpGroupWare accounts
|
|
- password policies
|
|
- redesigned PDF editor
|
|
- show mail addresses as link in account list
|
|
- Unix: allow primary group members to be added as memberUid
|
|
- Kolab: support LAM Pro self service
|
|
- LAM Pro: new account type for groupOf(Unique)Names
|
|
- fixed bugs:
|
|
-> XHTML headers should be removed (1912736)
|
|
|
|
|
|
23.01.2008 2.2.0
|
|
- account lists:
|
|
-> allow to switch sorting
|
|
-> added separate configuration page and store settings in cookies
|
|
-> list size can now be set individually for each account type on the list configuration page
|
|
-> new PDF buttons
|
|
- use suffix from account list as default for new accounts (patch 1823583)
|
|
- Security: passwords in configuration files are now saved as hash values
|
|
- improved design
|
|
- style fixes for Internet Explorer users
|
|
- Unix: allow to set host passwords (RFE 1754069)
|
|
- Unix: allow to generate random passwords for users
|
|
- Samba 3 groups: Samba part is now optional
|
|
- Personal: add object classes person and organizationalPerson for new accounts (RFE 1830033)
|
|
- new LDAP schema check on tests page
|
|
- LAM Pro:
|
|
-> added possibility for deskside support to reset passwords at account list page
|
|
-> access levels (read only, change passwords, write access) for server profiles
|
|
|
|
|
|
07.11.2007 2.1.0
|
|
- tabular design for account pages
|
|
- show DN on account pages
|
|
- Samba 3: made Samba account optional
|
|
- Samba 3: manages now terminal server settings
|
|
- fixed bugs:
|
|
-> LAM Pro: UTF-8 characters are invalid displayed on configuration page (1788752)
|
|
-> LAM works again on PHP 5.1.x (1792447)
|
|
-> Quota: managing group quotas does not work (1811728)
|
|
-> Samba 3 domains: lockout users after bad logon attempts must allow 0 - 999 (1814578)
|
|
|
|
|
|
08.08.2007 2.0.0
|
|
- new translations: Chinese (Simplified), Czech and Portuguese
|
|
- usability improvements
|
|
- LDAP accounts including child entries can now be moved
|
|
- group list can show primary members (RFE 1517679 and patch 1722460)
|
|
- more translated example texts (RFE 1702140)
|
|
- inetOrgPerson: now manages homePhone, roomNumber, businessCategory
|
|
- posixAccount: allow to create home directories in file upload (RFE 1665034)
|
|
- account lists: display buttons on top and bottom (RFE 1702136)
|
|
- fixed bugs:
|
|
-> OU editor: help images (1702132)
|
|
-> config editor: extra space (1702269)
|
|
-> fixed some inconsistent help entries (1694863)
|
|
-> user list: refreshing GID translation did not work (1719168)
|
|
-> allow uid as RDN attribute for inetOrgPerson (1740499)
|
|
-> PHP Warning: mcrypt_decrypt(): The IV parameter must be ... (1742543)
|
|
-> uid attribute no longer required for InetOrgPerson (1757215)
|
|
|
|
|
|
28.03.2007 1.3.0
|
|
- improved design
|
|
- user list can now display jpegPhoto attributes
|
|
- lamdaemon: support for multiple servers
|
|
- LAM Pro: users may change their photos (jpegPhoto)
|
|
- fixed bugs:
|
|
-> ShadowAccount: PDF entry for expire date was wrong (1658868)
|
|
-> Samba groups: fixed help entry (patch 1664542)
|
|
-> Debian package did not include lamdaemonOld.pl (1660493)
|
|
-> NIS mail aliases: allow more characters in alias name (1674198)
|
|
-> fixed syntax errors in some .htaccess files
|
|
-> security fix: HTML special characters in LDAP data were not escaped
|
|
|
|
Developers:
|
|
API changes:
|
|
- added listPrintTableCellContent() to class lamList
|
|
- added listPrintAdditionalOptions() to class lamList
|
|
- added preModifyActions() to class baseModule
|
|
- added postModifyActions() to class baseModule
|
|
- added preDeleteActions() to class baseModule
|
|
- added postDeleteActions() to class baseModule
|
|
|
|
|
|
24.01.2007 1.2.0
|
|
- Samba 3: better handling of date values
|
|
- Samba 3: Handling of locked accounts (RFE 1609076)
|
|
- LAM Pro: modules can define configuration settings (Unix: password hashing)
|
|
- LAM Pro: management of groupOfNames and groupOfUniqueNames entries (RFE 875482)
|
|
- fixed bugs:
|
|
-> Lamdaemon test did not work on PHP 4
|
|
-> InetOrgPerson: Problems with error messages (1628799)
|
|
|
|
Developers:
|
|
API changes:
|
|
- removed get_configDescription() from module interface
|
|
- added functions to handle configuration settings for LAM Pro
|
|
|
|
|
|
01.11.2006 1.1.1
|
|
- Lamdaemon: added test page (Tools -> Tests -> Lamdaemon test)
|
|
- LAM Pro: Samba passwords can now be synchronized with Unix password
|
|
- Shadow account: better management of expiration date
|
|
- fixed bugs:
|
|
-> Unix: password hashing problem (1562426)
|
|
-> Unix: No error message for wrong UID numbers in file upload
|
|
-> Filters in account lists get lost when sorting the table
|
|
|
|
|
|
20.09.2006 1.1.0
|
|
- Lamdaemon now uses the SSH implementation from PECL which is much more stable
|
|
- Samba 2/3: "Use Unix password" now on by default (1517678)
|
|
|
|
Developers:
|
|
API changes:
|
|
- removed $post parameters from module functions (delete_attributes(),
|
|
process_...(), display_html_...()). Use $_POST instead.
|
|
- process_...() functions: returned messages are no longer grouped
|
|
(e.g. return: array(array('INFO', 'headline', 'text'), array('INFO', 'headline2', 'text2')))
|
|
|
|
|
|
10.08.2006 1.0.4
|
|
- added Russian translation
|
|
- Samba 3: added policies for domain objects
|
|
- inetLocalMailRecipient: print warning if local address is already in use
|
|
|
|
|
|
05.07.2006 1.0.3
|
|
- fixed bugs:
|
|
-> Kolab: fixed problem with message about missing password
|
|
-> Unix groups: fixed auto GID
|
|
-> Unix users/groups: fixed silent unlocking of passwords
|
|
-> Unix users/groups: removed invalid password option
|
|
-> Shadow: account expiration date was incorrect in some time zones
|
|
-> User list: fixed problems when deleting users and translated GIDs are activated (1503367)
|
|
|
|
|
|
24.05.2006 1.0.2
|
|
- security enhancements: session timeout, logging, host restrictions
|
|
- handle LDAP attribute aliases correctly
|
|
- fixed bugs:
|
|
-> PDF creation bug when GID translation is activated (1477111)
|
|
-> allow "@" in passwords (1477878)
|
|
-> Samba 2/3: fixed NT hashes
|
|
-> fixed handling of multi-value attributes (e.g. in inetLocalMailRecipient)
|
|
|
|
|
|
12.04.2006 1.0.1
|
|
- LAM can now be installed with "configure" and "make install"
|
|
- added workaround for misspelled object classes (e.g. sambaSAMAccount by smbldap-tools)
|
|
- Unix: merged password hash settings for Unix users and groups
|
|
- Samba 3: added Windows group to profile options
|
|
- security: LAM checks the session id and client IP
|
|
- fixed bugs:
|
|
-> Samba 3: hash values were wrong in some rare cases (1440021)
|
|
-> Samba 3: re-added time zone selection for logon hours (1407761)
|
|
-> Unix: call of unknown function (1450464)
|
|
|
|
|
|
01.03.2006 1.0.0
|
|
- new architecture with support for more account types
|
|
- new translations: Traditional Chinese, Dutch
|
|
- fixed bugs:
|
|
-> Samba groups: editing of special groups fixed
|
|
-> changed check for mail addresses (patch 1403922)
|
|
-> fixed JPG upload when MCrypt is enabled
|
|
-> fixed login problems for AD servers
|
|
-> improved sorting of account lists
|
|
-> fixed language setting in default configuration profile
|
|
-> fixed PHP5 warnings (getdate() and mktime())
|
|
-> error messages in Samba domain module (1437425)
|
|
-> fixed expired passwords with shadowAccount module
|
|
-> added lamdaemon.pl compatibility and security patches by Tim Rice
|
|
|
|
|
|
08.02.2006 1.0.rc2
|
|
- new translation: Dutch
|
|
- fixed bugs:
|
|
-> changed check for mail addresses (patch 1403922)
|
|
-> fixed JPG upload when MCrypt is enabled
|
|
-> fixed login problems for AD servers
|
|
|
|
|
|
09.01.2006 1.0.rc1
|
|
- new architecture with support for more account types
|
|
- new translation: Traditional Chinese
|
|
- fixed bugs:
|
|
-> Samba groups: editing of special groups fixed
|
|
|
|
|
|
14.12.2005 0.5.3
|
|
- accounts are now deleted with subentries
|
|
- big update for Italian translation
|
|
- inetOrgPerson: support jpegPhoto images
|
|
- less restrictive input checks
|
|
- fixed bugs:
|
|
-> fixed problems with case-insensitive DNs
|
|
-> file upload did not work when max_execution_time=0 (1367957)
|
|
-> posixGroup: fixed help entries
|
|
|
|
|
|
16.11.2005 0.5.2
|
|
- New module for SSH public keys
|
|
- check file permissions on login page
|
|
- fixed bugs:
|
|
-> creation of home directories did not work
|
|
-> allow spaces in profile names (1333058)
|
|
-> fixed problem with magic_quotes_gpc in profile editor (1333069)
|
|
-> inetOrgPerson: deletion of postal address and fax number now works
|
|
|
|
|
|
19.10.2005 0.5.1
|
|
- Samba 3: added support for account expiration
|
|
- fixed bugs:
|
|
-> automatic UID/GID assignment did not fully work
|
|
-> PDF: additional groups for Unix users
|
|
-> inetOrgPerson: fixed mobile number
|
|
-> Samba 2/3: passwords fixed for file uploads (1311561)
|
|
-> Samba 3: fixed logon hours (patch 1311915)
|
|
-> Samba 3: loading of domain setting from profile did not work
|
|
-> Quota: profile settings fixed
|
|
-> reduced memory usage
|
|
|
|
|
|
28.09.2005 0.5.0
|
|
- Samba 2/3: added display name in account pages
|
|
- fixed bugs:
|
|
-> fixed error message when creating new accounts with shadowAccount
|
|
-> added missing help entries on main account page
|
|
-> Samba 2/3: fixed settings for password expiration, no password and deactivated account
|
|
-> changing of RDN caused problems in some cases
|
|
|
|
|
|
08.09.2005 0.5.rc3
|
|
- INFO messages no longer prevent changing to subpages of a module
|
|
- fixed bugs:
|
|
-> buttons on account page are better sorted
|
|
-> account module: some problems solved when used for user accounts
|
|
-> nisMailAlias: fixed missing RDN possibility
|
|
-> fixed conflicts when accounts were built with other base modules
|
|
-> Samba 2/3: setting allowed workstations failed
|
|
-> magic_quotes_gpc = Off prevented editing of accounts
|
|
-> fixed help links on Samba and Unix pages
|
|
|
|
|
|
18.08.2005 0.5.rc2
|
|
- allow user accounts based only on "account" module
|
|
- inetOrgPerson: allow setting a password if posixAccount is not active
|
|
- fixed bugs:
|
|
-> removed Blowfish encryption (bad performance)
|
|
-> Kolab now complains if no user password is set
|
|
|
|
|
|
08.08.2005 0.5.rc1
|
|
- Kolab 2 support
|
|
- added manager and post office box for inetOrgPerson
|
|
- Samba 3: added support for logon hours
|
|
- Samba 3: added sambaSID as possible RDN attribute
|
|
- improved error handling in profile editor
|
|
- now quotas can be set on CSV upload
|
|
- new logo
|
|
- fixed bugs:
|
|
-> several fixes for PHP5
|
|
-> fixes for PDF editor and output
|
|
-> password changing in tree view did not work
|
|
-> fixed changing of group memberships for users
|
|
|
|
|
|
28.07.2005 0.4.10
|
|
- PHP5 compatibility added
|
|
|
|
|
|
30.06.2005 0.5.alpha2
|
|
- added documentation about schemas
|
|
- PDF now uses UTF-8 fonts
|
|
- added possibility to create plain inetOrgPerson accounts
|
|
- fixed bugs:
|
|
-> set DN suffix and RDN on profile loading
|
|
-> several fixes for PDF editor
|
|
-> creating Samba hosts now works
|
|
|
|
|
|
11.05.2005 0.5.alpha1
|
|
- new modular architecture
|
|
-> possibility to create Unix-only accounts
|
|
-> plugins for more objectClasses planned
|
|
-> enhanced PDF output
|
|
-> enhanced file upload
|
|
-> enhanced editor for account profiles
|
|
-> dynamic configuration options (based on modules)
|
|
- all pages in UTF-8
|
|
- added developer documentation
|
|
- PHPDoc formatted comments
|
|
- new plugin for managing MAC addresses (RFE 926017)
|
|
- new plugin for managing NIS mail aliases (RFE 1050036)
|
|
- new plugin for managing mail routing with inetLocalMailRecipient (RFE 1092137)
|
|
- schema browser
|
|
- tree view
|
|
|
|
|
|
09.03.2005 0.4.9
|
|
- fixed bugs:
|
|
fixed error messages when moving an user account
|
|
fixed problem with special group SIDs
|
|
lamdaemon.pl security fix
|
|
|
|
|
|
26.01.2005 0.4.8
|
|
- allow "%" at the beginning of Samba home/profile path (1107998)
|
|
- fixed bugs:
|
|
fixed IE fix ;-)
|
|
no more warnings for profiles with no additional groups set
|
|
|
|
|
|
19.12.2004 0.4.7
|
|
- added "*.exe" to Samba logon script regex (1081715)
|
|
- fixed bugs:
|
|
fixed doctype of main frame
|
|
removed syntax check for LDAP suffixes
|
|
fixed IE bug at login
|
|
fixed encoding in HTTP header
|
|
passwords with "'" are now handled correctly at login (1081460)
|
|
fixed Samba flags if multiple hosts were created
|
|
updated .htaccess files to be compatible with newer Apache versions
|
|
|
|
|
|
26.05.2004 0.4.6
|
|
- fixed bugs:
|
|
password hashes were not disabled correctly
|
|
street was copied to postal code on modify (938502)
|
|
underscore was not allowed for host names (934445)
|
|
deleting postal address or facsimile number failed (948616)
|
|
TLS error handling (958497)
|
|
smaller fixes on personal settings page
|
|
|
|
|
|
21.03.2004 0.4.5
|
|
- added French translation
|
|
- fixed bugs:
|
|
StatusMessages with additional variables did not work
|
|
Samba hosts had unnecessary objectClass shadowAccount (910084)
|
|
Samba host passwords were still wrong
|
|
LAM had problems with non-standard spelled object classes (907636)
|
|
Perl scripts did not work if Perl is not installed in /usr/bin/perl (913554)
|
|
problems when cn!=uid (915041)
|
|
home directories were not deleted by lamdaemon.pl (913552)
|
|
|
|
|
|
29.02.2004 0.4.4 (stable)
|
|
- fixed bugs:
|
|
plain posix groups could not be used as Samba 3 primary group
|
|
if magic_quotes_gpc in php.ini is was set to "Off", several pages did not work
|
|
some smaller bugs in mass upload
|
|
Samba hash values for hosts were not correct
|
|
Unix passwords could be disabled but not re-enabled
|
|
fixed problem with eval() in status.inc (894433)
|
|
|
|
|
|
08.02.2004 0.4.3
|
|
- new login layout
|
|
- added Hungarian and Japanese translations
|
|
- fixed bugs:
|
|
Samba paswords were sometimes empty for new users (892272)
|
|
links in list views may not work with web servers other than Apache
|
|
|
|
|
|
21.01.2004 0.4.2
|
|
- added config wizard
|
|
- MHash is only needed for PHP < 4.3
|
|
- use Blowfish for encryption instead of MCrypt
|
|
|
|
|
|
29.12.2003 0.4.1
|
|
|
|
- better error handling at login
|
|
- support spaces in DNs
|
|
- PDF text for users
|
|
- create missing OUs recursively
|
|
- fixed bugs:
|
|
SMD5 passwords were wrong
|
|
primaryGroupSID wrong if SID has no relation to Algorithmic RID Base
|
|
Samba 2 accounts could not be created
|
|
|
|
|
|
29.10.2003 0.4 (Beta1)
|
|
|
|
- improved design
|
|
- improved documentation
|
|
- Fixed possible error which could delete entries if objectclass didn't fit
|
|
- Fixed many samba 3.0 related bugs, most related to SIDs
|
|
- edit group members directly
|
|
- support for several password hashes (CRYPT/SHA/SSHA/MD5/SMD5/PLAIN)
|
|
- PDF output for groups and hosts
|
|
|
|
|
|
31.08.2003 0.3 (Alpha 3)
|
|
|
|
- Samba 3 support
|
|
- manage Samba 3 domains
|
|
- multiple configuration files
|
|
- PDF output
|
|
- better mass creation
|
|
|
|
|
|
04.07.2003 0.2 (Alpha 2)
|
|
|
|
- support for multiple OUs + OU-Editor
|
|
- account creation via file upload
|
|
- profile editor
|
|
- experimental Samba 3 support
|
|
- fixed a lot of bugs
|
|
|
|
|
|
23.05.2003 0.1 (Alpha 1)
|
|
|
|
Initial release
|