❌

Normale weergave

Ontvangen — 17 Augustus 2025 ⏭ Legacy

take two (fix cfg vols)

✇Copyparty
Door: 9001
23 Augustus 2025 om 19:56

this release is a hotfix for #624; v1.19.2 broke volumes defined in config files

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

recent important news

ℹ️ this upgrade is a one-way ticket

  • your up2k database (.hist/up2k.db), used by the e2d filesystem indexing feature, will be upgraded to a new format which older copyparty versions cannot read. A backup of each database will be created automatically, named up2k.db.bak.SOMETHING.v5. If you need to downgrade to a previous version: Shutdown copyparty, delete these files: up2k.db up2k.db-shm up2k.db-wal and then copy up2k.db.bak.*.v5 to up2k.db

🧪 new features

  • new translations:
  • #581 new theme: phi95 (thx @varphi-online!) d8662ae
  • #567 .raw image thumbnails (thx @ar-nelson!) 0177a9b
    • available in docker-images iv and dj
  • #561 epub thumbnails (thx @Scotsguy!) 9435e6b
  • #252 music thumbnails use embdded coverart if available 98d117b
    • thumbnails folder .hist/th must be deleted to take effect
  • #530 show username of uploaders in file listings; requires a (admin) permission 4df033e
  • #604 a new group @acct which automatically contains all known usernames 68907ea
  • controlpanel has a dedicated "logout all sessions" button, similar to the logout-link in the browser f4a3fba
  • #397 accounts can be restricted to certian IPs 62e072a
  • #504 automatic login through tailscale auth a4649d1
  • #533 sticky qr-code with --qr-pin 1 1ebe06f
  • #572 button to abort copy/move 715d374
  • #618 "download selected files" didn't work on firefox 52 (winxp) dcc6b1b
  • max number of cookies to allow can be configured 6303eff
    • good if you have too many selfhosted services on one domain (but will beware of the spec-mandataed max length of the cookie field!)

🩹 bugfixes

  • fix xvol/xdev edgecases:
  • #573 ftp: attempting an upload into read-only folder no longer kills the connection 3aa8b7a
  • #306 adjust navpane for --rp-loc (location-based proxying)
  • #556 more sensible config expansion order f4727f8
  • the video player now stays fullscreen between videos 782e2f1
  • heif thumbnailing with libvips

🔧 other changes

  • #253 build nix-packages from source (thx @toast003, @chinponya!) 187cae2
  • #616 logfiles will have a plaintext severity column if --no-ansi d4cf42e
  • #598 separate option --ac-convt for audio transcoding timeout d562305
  • #596 users with a blank password gets a strong random-generated one 7f44875
  • copyparty.exe: upgrade to python 3.13.7

⚠️ not the latest version!

  •  
  • ↗️
Ontvangen — 16 Augustus 2025 ⏭ Legacy

archlinux fix

✇Copyparty
Door: 9001
18 Augustus 2025 om 01:25

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

recent important news

🧪 new features

🩹 bugfixes

  • #539 FTP glitches when running on windows 8ba9887
  • #555 global-config didn't load through PRTY_CONFIG (thx @icxes!) 074e106
  • macos: could take a while to establish webdav connection from finder a01870b
  • ux:
    • dropdown colors 347cf6a
    • case-sensitivity in filters e5e8229
    • iOS being too enthusiastic about using saved passwords 03acd65

⚠️ not the latest version!

  •  
  • ↗️

usernames

✇Copyparty
Door: 9001
10 Augustus 2025 om 15:47

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

recent important news

🧪 new features

  • #511 login with username and password (not just password) can now optionally be enabled with --usernames 346515c
    • if you have enabled password hashing (ah-alg: argon2 or similar) then you will need to hash your passwords again after enabling usernames, hashing them as username:password:
  • #468 add Greek translation (thx @chamdim!) 50f4618 392abd0
  • #471 add Czech translation (thx @kubakubakuba!) c955658
  • #515 support systemd socket acivation (thx @mati1210!) 9b9d2a9
  • #523 add QR-code to the connectpage bcc3b15
  • #513 optional EOL-conversion for texteditor 8b31ed8
  • controlpanel refresh-button now toggles automatic refresh 7ae84de

🩹 bugfixes

  • fix stuck uploads when the up2k database (e2d) is not enabled 4a04356
    • if more than 60'000 files were uploaded and there were several dupes of some files, they could get stuck and never upload
    • upload performance is improved remarkably by enabling e2d so such huge uploads non-e2d had not been tested in a long time
  • #467 #470 fix ui-crash when exporting links of all uploaded files to clipboard (thx @geekalaa!) 0df1901
  • #487 fix ui-crash when the location url-part is // 0f55a1a
  • fix viewing .MD files (8a0746c)

🔧 other changes

  • when a reverse-proxy is detected, force explicit configuration of --rproxy to obtain correct client IP 3f8cb7e
    • a bit inconvenient, but helps prevent potentially-dangerous misconfiguration
    • the necessary configuration changes are explained in the serverlog (you can't miss it)
    • thanks to @person4268 for pointing out that there was room for improvements!
  • failed login attempts now only log a sha512 hash of the provided password
    • to see login-attempts with incorrect passwords as plaintext like before, log-badpwd: 1
  • #502 add systemd user services and templated services (thx @icxes!) 34d98e9
  • #475 improve helptext for multivalue global-options c2ac57a
  • #475 add chungus.conf, massive extensive nonsensical demo config b664ebb
  • try to detect proxies with incorrect caching behavior 9e980bb
  • recent-uploads now support ie9 a57f7cc
  • languages and themes are now dropdowns a9ee4f2
  • copyparty.exe: upgrade python to 3.13.6 a98360f
  • introduce copyparty-en.py, english-only edition of copyparty-sfx.py to save space 33497e6

🗿 known issues

  • the copyparty.pyz in this release is english-only, and does not include the translations -- they got lost in transit while adjusting the buildscripts to make copyparty-en.py

⚠️ not the latest version!

  •  
  • ↗️

idp speedboost

✇Copyparty
Door: 9001
8 Augustus 2025 om 14:16

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

recent important news

🧪 new features

🩹 bugfixes

  • #412 fix PUT-uploads into volumes with nosub volflag 47fa4a9
  • #435 ignore spurious exceptions from browser extensions 39e5582
  • #449 IPv6 QR-Code didn't include port 66a5bf3
  • #295 do not force d2d in blank vfs (introduced in v1.18.3) 848315c

🔧 other changes

⚠️ not the latest version!

  •  
  • ↗️

fix Denial-of-Service

✇Copyparty
Door: 9001
8 Augustus 2025 om 14:16

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

⚠️ ATTN: this release fixes a Denial-of-Service vuln

CVE-2025-54796: an unauthenticated user could make the server grind to a halt by accessing a particular URL

recent important news

🧪 new features

🩹 bugfixes

🔧 other changes

  • ack was changed to continue 4fa7be2

🌠 fun facts

  • the translations have made the sfx size balloon from 766 to 845 KiB in under a week... nice! keep em coming 🎉

⚠️ not the latest version!

  •  
  • ↗️

sfx hotfix

✇Copyparty
Door: 9001
8 Augustus 2025 om 14:15

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-28)

recent important news

  • v1.18.7 (2025-07-30) (PREVIOUS RELEASE) fixed XSS in the recent-uploads page
  • v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
  • v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🩹 bugfixes

  • #354 fix copyparty-sfx.py failing to start on certain versions of python c17ce48

⚠️ not the latest version!

  •  
  • ↗️

SECURITY: fix another XSS

✇Copyparty
Door: 9001
31 Juli 2025 om 11:20

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)

⚠️ ATTN: this release fixes an XSS vulnerability

GHSA-8mx2-rjh8-q3jq, could let an attacker execute arbitrary JS by tricking you into clicking a malicious URL

Soon there won't be many of these left, surely. Huge thanks to @Ju0x for finding and reporting this.

recent important news

🧪 new features

🩹 bugfixes

🔧 other changes

  • shares: the config POST-target is now always the webroot (for ease of IdP configuration) fb7cbc4
  • unlist: now applies to the navpane too fbf17be
  • windows: show disk-usage as well, not just disk-free 5c6341e
  • #228 nix-pkg improvements (thx @dtomvan!) 4915b14
  • docker-compose: ensure logs appear in realtime 3cde1f3
  • mention that IdP-volumes and users can now be persisted 6069bc9
  • #316 explain a scary-looking thing in the code 053de61

⚠️ not the latest version!

  •  
  • ↗️

reflink-dedup

✇Copyparty
Door: 9001
31 Juli 2025 om 11:19

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-28)

recent important news

  • v1.18.5 (2025-07-28) (PREVIOUS RELEASE) fixed XSS in display of media tags
  • v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
  • v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

  • #201 add support for reflink-based dedup on cow filesystems df9feab
    • combine --dedup with --reflink to enable, or volflags with same name
    • a better and safer alternative to the other dedup approaches (symlink/hardlink), but only possible to use in some cases:
      • needs linux 5.3 or newer, python 3.14 or newer, btrfs/xfs/zfs
      • not available in the docker images yet; needs a new version of python, so maybe next alpine release (november/december 2025)
  • ratelimit password changes to impede bruteforcing a2601fd
    • limit is set by --ban-pwc (default is 5 changes in 60min)

🩹 bugfixes

🔧 other changes

⚠️ not the latest version!

  •  
  • ↗️

SECURITY: fix XSS in media tags

✇Copyparty
Door: 9001
31 Juli 2025 om 11:19

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-28)

⚠️ ATTN: this release fixes an XSS vulnerability

GHSA-9q4r-x2hj-jmvr, exploitable in two different ways, could let an attacker execute arbitrary javascript on other users:

  • either: tricking someone into clicking a malicious URL to load and execute javascript
  • or: uploading a malicious audio file to the server, affecting any successive visitors

so, with new and curious eyes on the project, we are starting off with a bang. Huge thanks to @altperfect for finding and reporting this earlier today.

recent important news

🧪 new features

  • #214 option to stop playback after one song, and/or at end of folder 6bb27e6

🩹 bugfixes

🔧 other changes

  • #189 the SameSite cookie parameter now defaults to Strict, increasing CSRF protection ca6d0b8
    • new option --cookie-lax reverts to previous value Lax
  • docker: add FTPS support b419984

⚠️ not the latest version!

  •  
  • ↗️

Landmarks

✇Copyparty
Door: 9001
28 Juli 2025 om 01:57

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)

recent important news

  • v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
  • v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
  • v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

  • #182 Landmarks edba7ff
    • detects that a storage backend is glitching out and disengage the up2k-database as a precaution
  • #183 quickdelete 21a96bc
    • new togglebutton qdel in the UI which reduces the number of deletion confirmations by one
    • global-option --qdel=0 which can bring it all the way to zero (good luck)

🩹 bugfixes

  • fix unpost in recently created shares 2d322dd
  • fix filekeys on windows df6d4df

⚠️ not the latest version!

  •  
  • ↗️

drop the umask

✇Copyparty
Door: 9001
25 Juli 2025 om 21:07

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-02-25)

recent important news

  • v1.16.15 (2025-02-25) fixed low-severity xss when uploading maliciously-named files
  • v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
  • v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

  • #181 the default chmod (unix-permissions) of new files and folders can now be changed 9921c43
    • --chmod-d or volflag chmod_d sets directory permissions; default is 755
    • --chmod-f or volflag chmod_f sets file permissions; default is usually 644 (OS-defined)
    • see --help-chmod which explains the numbers

🩹 bugfixes

  • #179 couldn't combine --shr (shares) and --xvol (symlink-guard) 0f0f8d9
  • #180 gallery buttons could still be clicked when faded-out 8c32b0e
  • rss-feeds were slightly busted when combined with rp-loc (location-based proxying) 56d3bcf
  • music-playback within search-results no longer jumps into the next folder at end-of-list 9bc4c5d
  • video-playback on iOS now behaves like on all other platforms 78605d9
    • (it would force-switch into fullscreen because that's their default)

⚠️ not the latest version!

  •  
  • ↗️
Ontvangen — 23 November 2024 ⏭ Legacy

v0.6.1

✇lldap
Door: nitnelave
22 November 2024 om 22:59

Small release, mainly to fix a migration issue with Sqlite and Postgresql.

Added

  • Added a link to a community terraform provider (#1035)

Changed

  • The opaque dependency now points to the official crate rather than a fork (#1040)

Fixed

  • Migration of the DB schema from 7 to 8 is now automatic for sqlite, and fixed for postgres (#1045)
  • The startup warning about key_seed applying instead of key_file now has instructions on how to silence it (#1032)

New services

  • OneDev

New Contributors

Full Changelog: v0.6.0...v0.6.1

  •  
  • ↗️
Ontvangen — 9 November 2024 ⏭ Legacy

v0.6.0

✇lldap
Door: nitnelave
9 November 2024 om 22:09

Long-awaited release, with the flagship feature of custom attributes! This unlock many integrations, notably Linux user management through PAM.

Thanks to all the contributors who sent some code, some configuration guide, reported a bug or otherwise helped the project!

Breaking

  • The endpoint /auth/reset/step1 is now POST instead of GET (#704)

Added

  • Custom attributes are now supported (#67) ! You can add new fields (string, integers, JPEG or dates) to users and query them. That unlocks many integrations with other services, and allows for a deeper/more customized integration. Special thanks to @pixelrazor and @bojidar-bg for their help with the UI.
  • Custom object classes (for all users/groups) can now be added (#833)
  • Barebones support for Paged Results Control (no paging, no respect for windows, but a correct response with all the results) (#698)
  • A daily docker image is tagged and released. (#613)
  • A bootstrap script allows reading the list of users/groups from a file and making sure the server contains exactly the same thing. (#654)
  • Make it possible to serve lldap behind a sub-path in (#752)
  • LLDAP can now be found on a custom package repository for opensuse, fedora, ubuntu, debian and centos (Repository link). Thanks @Masgalor for setting it up and maintaining it.
  • There's now an option to force reset the admin password (#748) optionally on every restart (#959)
  • There's a rootless docker container (#755)
  • entryDN is now supported (#780)
  • Unknown LDAP controls are now detected and ignored (#787, #799)
  • A community-developed CLI for scripting (#793)
  • Added a way to print raw logs to debug long-running sessions (#992)

Changed

  • The official docker repository is now lldap/lldap
  • Removed password length limitation in lldap_set_password tool
  • Group names and emails are now case insensitive, but keep their casing (#666)
  • Better error messages (and exit code (#745)) when changing the private key (#778, #1008), using the wrong SMTP port (#970), using the wrong env variables (#972)
  • Allow member= filters with plain user names (not full DNs) (#949)
  • Correctly detect and refuse anonymous binds (#974)
  • Clearer logging (#971, #981, #982)

Fixed

  • Logging out applies globally, not just in the local browser. (#721)
  • It's no longer possible to create the same user twice (#745)
  • Fix wide substring filters (#738)
  • Don't log the database password if provided in the connection URL (#735)
  • Fix a panic when postgres uses a different collation (#821)
  • The UI now defaults to the user ID for users with no display names (#843)
  • Fix searching for users with more than one memberOf filter (#872)
  • Fix compilation on Windows (#932) and Illumos (#964)
  • The UI now correctly detects whether password resets are enabled. (#753)
  • Fix a missing lowercasing of username when changing passwords through LDAP (#1012)
  • Fix SQLite writers erroring when racing (#1021)
  • LDAP sessions no longer buffer their logs until unbind, causing memory leaks (#1025)

Performance

  • Only expand attributes once per query, not per result (#687)

Security

  • When asked to send a password reset to an unknown email, sleep for 3 seconds and don't print the email in the error (#887)

New services

Linux user accounts can now be managed by LLDAP, using PAM and nslcd.

  • Apereo CAS server
  • Carpal
  • Gitlab
  • Grocy
  • Harbor
  • Home Assistant
  • Jenkins
  • Kasm
  • Maddy
  • Mastodon
  • Metabase
  • MegaRAC-BMC
  • Netbox
  • OCIS
  • Prosody
  • Radicale
  • SonarQube
  • Traccar
  • Zitadel

  •  
  • ↗️
Ontvangen — 3 Oktober 2024 ⏭ Legacy

v0.5.0

✇lldap
Door: nitnelave
14 September 2023 om 21:09

What's changed

Breaking

  • Emails and UUIDs are now enforced to be unique.
    • If you have several users with the same email, you'll have to disambiguate
      them. You can do that by either issuing SQL commands directly
      (UPDATE users SET email = 'x@x' WHERE user_id = 'bob';), or by reverting
      to a 0.4.x version of LLDAP and editing the user through the web UI.
      An error will prevent LLDAP 0.5+ from starting otherwise.
    • This was done to prevent account takeover for systems that allow to
      login via email.

Added

  • The server private key can be set as a seed from an env variable (#504).
    • This is especially useful when you have multiple containers, they don't
      need to share a writeable folder.
  • Added support for changing the password through a plain LDAP Modify
    operation (as opposed to an extended operation), to allow Jellyfin
    to change password (#620).
  • Allow creating a user with multiple objectClass (#612).
  • Emails now have a message ID (#608).
  • Added a warning for browsers that have WASM/JS disabled (#639).
  • Added support for querying OUs in LDAP (#669).
  • Added a button to clear the avatar in the UI (#358).

Changed

  • Groups are now sorted by name in the web UI (#623).
  • ARM build now uses musl (#584).
  • Improved logging.
  • Default admin user is only created if there are no admins (#563).
    • That allows you to remove the default admin, making it harder to
      bruteforce.

Fixed

  • Fixed URL parsing with a trailing slash in the password setting utility
    (#597).

New services

  • Ejabberd
  • Ergo
  • LibreNMS
  • Mealie
  • MinIO
  • OpnSense
  • PfSense
  • PowerDnsAdmin
  • Proxmox
  • Squid
  • Tandoor recipes
  • TheLounge
  • Zabbix-web
  • Zulip

In addition to all that, there was significant progress towards #67,
user-defined attributes. That complex feature will unblock integration with many
systems, including PAM authentication.

New Contributors

Full Changelog: v0.4.3...v0.5.0

  •  
  • ↗️

v0.4.3

✇lldap
Door: nitnelave
11 April 2023 om 15:30

The repository has changed from nitnelave/lldap to lldap/lldap, both on GitHub
and on DockerHub (although we will keep publishing the images to
nitnelave/lldap for the foreseeable future). All data on GitHub has been
migrated, and the new docker images are available both on DockerHub and on the
GHCR under lldap/lldap.

Added

  • EC private keys are not supported for LDAPS.

Changed

  • SMTP user no longer has a default value (and instead defaults to unauthenticated).

Fixed

  • WASM payload is now delivered uncompressed to Safari due to a Safari bug.
  • Password reset no longer redirects to login page.
  • NextCloud config should add the "mail" attribute.
  • GraphQL parameters are now urldecoded, to support special characters in usernames.
  • Healthcheck correctly checks the server certificate.

New services

  • Home Assistant
  • Shaarli

  •  
  • ↗️

v0.4.2

✇lldap
Door: nitnelave
27 Maart 2023 om 13:25

Added

  • Add support for MySQL/MariaDB/PostgreSQL, in addition to SQLite.
  • Healthcheck command for docker setups.
  • User creation through LDAP.
  • IPv6 support.
  • Dev container for VsCode.
  • Add support for DN LDAP filters.
  • Add support for SubString LDAP filters.
  • Add support for LdapCompare operation.
  • Add support for unencrypted/unauthenticated SMTP connection.
  • Add a command to setup the database schema.
  • Add a tool to set a user's password from the command line.
  • Added consistent release artifacts.

Changed

  • Payload is now compressed, reducing the size to 700kb.
  • entryUUID is returned in the default LDAP fields.
  • Slightly improved support for LDAP browsing tools.
  • Password reset can be identified by email (instead of just username).
  • Various front-end improvements, and support for dark mode.
  • Add content-type header to the password reset email, fixing rendering issues in some clients.
  • Identify groups with "cn" instead of "uid" in memberOf field.

Removed

  • Removed dependency on nodejs/rollup.

Fixed

  • Email is now using the async API.
  • Fix handling of empty/null names (display, first, last).
  • Obscured old password field when changing password.
  • Respect user setting to disable password resets.
  • Fix handling of "present" filters with unknown attributes.
  • Fix handling of filters that could lead to an ambiguous SQL query.

New services

  • Authentik
  • Dell iDRAC
  • Dex
  • Kanboard
  • NextCloud + OIDC or Authelia
  • Nexus
  • SUSE Rancher
  • VaultWarden
  • WeKan
  • WikiJS
  • ZendTo

Dependencies (highlights)

  • Upgraded Yew to 0.19
  • Upgraded actix to 0.13
  • Upgraded clap to 4
  • Switched from sea-query to sea-orm 0.11

New Contributors

A special shout-out to @pixelrazor and @martadinata666 for their help with this release!

Full Changelog: v0.4.1...v0.4.2

  •  
  • ↗️

v0.4.1

✇lldap
Door: nitnelave
12 Oktober 2022 om 11:20

[0.4.1] - 2022-10-10

Added

  • Added support for STARTTLS for SMTP.
  • Added support for user profile pictures, including importing them from OpenLDAP.
  • Added support for every config value to be specified in a file.
  • Added support for PKCS1 keys.

Changed

  • The dn attribute is no longer returned as an attribute (it's still part of the response).
  • Empty attributes are no longer returned.
  • The docker image now uses the locally-downloaded assets.

  •  
  • ↗️

v0.4.0

✇lldap
Door: nitnelave
8 Juli 2022 om 19:06

v0.4.0

Quick update to replace lldap_readonly with 2 groups lldap_password_manager and lldap_strict_readonly.

Breaking

The lldap_readonly group has been renamed lldap_password_manager (migration happens automatically) and a new lldap_strict_readonly group was introduced.

Added

  • A new lldap_strict_readonly group allows granting readonly rights to users (not able to change other's passwords, in particular).

Changed

  • The lldap_readonly group is renamed lldap_password_manager since it still allows users to change (non-admin) passwords.

Removed

  • The lldap_readonly group was removed.

  •  
  • ↗️

v0.3.0

✇lldap
Door: nitnelave
8 Juli 2022 om 14:54

v0.3.0

This new release brings LLDAP to a stable point where it should be compatible with most services and can be safely used as main source of truth for managing users!

Thanks to all the new contributors who helped make this release and continue to improve LLDAP 🎆

Breaking

As part of the update, the database will do a one-time automatic migration to
add UUIDs and group creation times.

Added

  • Added support and documentation for many services:
    • Apache Guacamole
    • Bookstack
    • Calibre
    • Dolibarr
    • Emby
    • Gitea
    • Grafana
    • Jellyfin
    • Matrix Synapse
    • NextCloud
    • Organizr
    • Portainer
    • Seafile
    • Syncthing
    • WG Portal
  • New migration tool from OpenLDAP.
  • New docker images for alternate architectures (arm64, arm/v7).
  • Added support for LDAPS.
  • New readonly group.
  • Added UUID attribute for users and groups.
  • Frontend now uses the refresh tokens to reduce the number of logins needed.

Changed

  • Much improved logging format.
  • Simplified API login.
  • Allowed non-admins to run search queries on the content they can see.
  • "cn" attribute now returns the Full Name, not Username.
  • Unknown attributes now warn instead of erroring.
    • Introduced a list of attributes to silence those warnings.

Deprecated

  • Deprecated "cn" as LDAP username, "uid" is the correct attribute.

Fixed

  • Usernames, objectclass and attribute names are now case insensitive.
  • Handle "1.1" and other wildcard LDAP attributes.
  • Handle "memberOf" attribute.
  • Handle fully-specified scope.

Security

  • Prevent SQL injections due to interaction between two libraries.

New Contributors

Thanks to all contributors, old and new. A special welcome to these new contributors:

  •  
  • ↗️

v0.2.0

✇lldap
Door: nitnelave
29 November 2021 om 10:15

This release implements many of the missing nice-to-haves from the MVP:

  • Password changing through LDAP, for password reset through other services (e.g. Authelia, KeyCloak).
  • Password reset through the Web UI.
  • LDAP protocol improvements to add support for various services (Authelia, KeyCloak, Jitsi Meet and more)
  • Cross-compilation support for ARM (Raspberry Pi) and more.

But also:

  • Better test code coverage.
  • Refactoring for future app and config improvements.
  • Small UI changes (disabled buttons while requests are loading).
  • Better documentation.

Thank you to those who contributed to this release:

  •  
  • ↗️

v0.0.1

✇lldap
Door: nitnelave
20 Oktober 2021 om 08:58

server: Improve startup error messages and fail fast

  •  
  • ↗️
❌