LDAP Account Manager

Argond2id support for password hashes (requires PHP 7.3) (#113)
2-factor authentication:
- Support for Okta
- WebAuthn devices can be named in Self Service and WebAuthn tool
LAM Pro:
- MIT Kerberos policies support
- User self registration: added admin approval option and info mail for user after creation

PHP 7.4 compatibility
Configuration export and import
Server profiles support to specify a part of the DN to hide
Show password prompt when a user with expired password logs into LAM admin interface (requires PHP 7.2)
Better error messages on login when account is expired/deactivated/...
Personal/Windows: photo can be uploaded via webcam
Windows users: group display format can be configured (cn/dn)
Support PBKDF2-SHA512 password hashes
LAM Pro:
- Windows: new cron job to send users a summary of their managed groups
Fixed bugs:
- Unix groups: memberUid was not deleted correctly when forced sync with group of names is active

Unix: allow to create group with same name during user creation
LAM Pro:
- EMail sending can be done via SMTP without local mail server
- License expiration warning can be sent via email or disabled
Fixed bugs:
- Captcha don't show anymore in Self Service login page (213)
- Unix memberships cannot be changed. This issue can also affect other membership relations.

PHP 7 required
WebAuthn/FIDO2 support for 2-factor-authentication (requires PHP 7.2)
IMAP: changed library to support latest TLS versions
Personal: support display name (hidden by default in server profile)
Windows users: support allowed workstations, more profile options
LAM Pro:
- PPolicy: support for password check module
- Windows AD LDS support (users and groups)
- User self registration: support Active Directory/Samba4

Lamdaemon can be configured with directory prefix for homedirs
Account list filters match on substrings instead of whole value
YubiKey: support to configure multiple verification servers
Deactivated non-maintained translations: Catalan, Czech, Hungarian, Polish and Turkish. Contact us if you would like to take over. Translators get LAM Pro for free (commercial use included).
Docker updates
Fixed bugs:
- Missing CSS for Duo
- Editing of DNs with comma on Windows (210)

Group account types can show member+owner count in list view
2-factor authentication:
- Duo support
- user name attribute for privacyIDEA can be specified
LAM Pro:
- New self service settings for login and main page footer
- Custom fields: custom labels for LDAP search select list
Fixed bugs:
- Configuration issue with Unix user/host module (206)

Parallel editing of multiple entries in different browser tabs supported
LAM supports the progressive web app standard which allows to install LAM as an icon on home screen
Windows: added home drive and force password change to profile editor
Unix: password management can be disabled in module settings
LAM Pro:
- Bind DLZ: entry table can show record data (use special attribute "#records" in server profile)
Fixed bugs:
- No drop-down filter box for account status (200)

New import/export in tools menu
YubiKey support
Windows users:
- Manage "departmentNumber" (needs to be activated via LAM server profile)
- Sync group memberships from Unix and group of names
LAM Pro:
- Easy setting of background color in self service profile
- Cron jobs: added Windows/Qmail/FreeRadius account expiration notification jobs
- Bind DLZ: usability improvements and small fixes

Password change possible via LDAP EXOP operation (set LDAP_EXOP as password hash, requires PHP 7.2)
Support Imagick and GD
Dropped support for Apache 2.2
Upload: allow to overwrite existing accounts
Personal: photos can be printed in PDF export
Kolab updates
LAM Pro:
- Auto deletion of entries with dynamic directory services support (requires PHP 7.2)
Fixed bugs:
- Issue when changing key case of uid (#197)

Cart