• Argond2id support for password hashes (requires PHP 7.3) (#113)
  • 2-factor authentication:
    • Support for Okta
    • WebAuthn devices can be named in Self Service and WebAuthn tool
  • LAM Pro:
    • MIT Kerberos policies support
    • User self registration: added admin approval option and info mail for user after creation



  • PHP 7.4 compatibility
  • Configuration export and import
  • Server profiles support to specify a part of the DN to hide
  • Show password prompt when a user with expired password logs into LAM admin interface (requires PHP 7.2)
  • Better error messages on login when account is expired/deactivated/...
  • Personal/Windows: photo can be uploaded via webcam
  • Windows users: group display format can be configured (cn/dn)
  • Support PBKDF2-SHA512 password hashes
  • LAM Pro:
    • Windows: new cron job to send users a summary of their managed groups
  • Fixed bugs:
    • Unix groups: memberUid was not deleted correctly when forced sync with group of names is active



  • Unix: allow to create group with same name during user creation
  • LAM Pro:
    • EMail sending can be done via SMTP without local mail server
    • License expiration warning can be sent via email or disabled
  • Fixed bugs:
    • Captcha don't show anymore in Self Service login page (213)
    • Unix memberships cannot be changed. This issue can also affect other membership relations.


  • PHP 7 required
  • WebAuthn/FIDO2 support for 2-factor-authentication (requires PHP 7.2)
  • IMAP: changed library to support latest TLS versions
  • Personal: support display name (hidden by default in server profile)
  • Windows users: support allowed workstations, more profile options
  • LAM Pro:
    • PPolicy: support for password check module
    • Windows AD LDS support (users and groups)
    • User self registration: support Active Directory/Samba4


  • Lamdaemon can be configured with directory prefix for homedirs
  • Account list filters match on substrings instead of whole value
  • YubiKey: support to configure multiple verification servers
  • Deactivated non-maintained translations: Catalan, Czech, Hungarian, Polish and Turkish. Contact us if you would like to take over. Translators get LAM Pro for free (commercial use included).
  • Docker updates
  • Fixed bugs:
    • Missing CSS for Duo
    • Editing of DNs with comma on Windows (210)


  • Group account types can show member+owner count in list view
  • 2-factor authentication:
    • Duo support
    • user name attribute for privacyIDEA can be specified
  • LAM Pro:
    • New self service settings for login and main page footer
    • Custom fields: custom labels for LDAP search select list
  • Fixed bugs:
    • Configuration issue with Unix user/host module (206)



  • Parallel editing of multiple entries in different browser tabs supported
  • LAM supports the progressive web app standard which allows to install LAM as an icon on home screen
  • Windows: added home drive and force password change to profile editor
  • Unix: password management can be disabled in module settings
  • LAM Pro:
    • Bind DLZ: entry table can show record data (use special attribute "#records" in server profile)
  • Fixed bugs:
    • No drop-down filter box for account status (200)



  • Added YubiKey as 2-factor authentication provider
  • Support logging to remote syslog server
  • PHP 7.3 support
  • LAM Pro:
    • Allow to mark text and text area fields as required
    • New self service fields:
      • Mail routing
      • Windows proxy addresses + mail alias
      • Shadow account expiration date
      • Unix and group of names memberships
    • Base URL for emails in self service can be configured in self service profile
    • Bind DLZ: support DNAME+XFR records and descriptions in records (requires latest LDAP schema)
    • Cron jobs: added Shadow account expiration notification job
  • Fixed bugs:
    • Allow tree-only configurations without any other tab



  • New import/export in tools menu
  • YubiKey support
  • Windows users:
    • Manage "departmentNumber" (needs to be activated via LAM server profile)
    • Sync group memberships from Unix and group of names
  • LAM Pro:
    • Easy setting of background color in self service profile
    • Cron jobs: added Windows/Qmail/FreeRadius account expiration notification jobs
    • Bind DLZ: usability improvements and small fixes



  • Password change possible via LDAP EXOP operation (set LDAP_EXOP as password hash, requires PHP 7.2)
  • Support Imagick and GD
  • Dropped support for Apache 2.2
  • Upload: allow to overwrite existing accounts
  • Personal: photos can be printed in PDF export
  • Kolab updates
  • LAM Pro:
    • Auto deletion of entries with dynamic directory services support (requires PHP 7.2)
  • Fixed bugs:
    • Issue when changing key case of uid (#197)