Skip to content

CHANGELOG.md

Latest commit

 

History

History
203 lines (160 loc) · 7.04 KB

CHANGELOG.md

File metadata and controls

203 lines (160 loc) · 7.04 KB

LDAP Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

[v2.6.10-4] - 2026-03-27

Changed

  • [#77] Use ldap as component name
    • This removes duplications in the name of the umbrella lop-idp component
  • [#77] Make PVC resizes possible

[v2.6.10-3] - 2026-03-26

Added

  • [#69] Release LDAP additionally as a Helm-based component for usage in LOP-IdP.
    • Add component chart resources (Chart.yaml, values.yaml, StatefulSet, Service, ConfigMap, component patch template).
    • Add configurable service-account Secret support for cas (RW), usermgt (RW), and ldapMapper (RO), including startup reconciliation.
  • [#71] Add migration of ldap-data from dogu to component

Changed

  • [#69] Consolidate build and development workflow into one central Makefile with dedicated dogu and component targets.
  • [#69] Extend Jenkins pipeline with component build, test, k3d smoke test, and release publishing stages (component image and chart).
  • [#69] Replace crond with supercronic for password-change notification scheduling to support non-root runtime.
  • [#69] Send password-change notification mails without mailuser/revaliases; sender is configured directly via config values.

[v2.6.10-2] - 2026-03-13

Changed

  • [#73] Upgrade base-image to 3.23.3-5

Security

[v2.6.10-1] - 2026-03-03

Changed

  • [#59] Upgrade OpenLDAP to v2.6.10-r0

[v2.6.8-7] - 2026-02-18

Fixed

  • [#65] Upgrade base-image to 3.23.3-4
    • This fixes a bug in doguctl, to not check the local config if volume is not mounted.

[v2.6.8-6] - 2026-02-13

Security

[v2.6.8-5] - 2026-01-29

Security

  • [#61] CVE fixed: cve-2025-15467
  • [#61] update base image to v3.23.2-2

[v2.6.8-4] - 2025-04-23

Changed

  • [#55] Set sensible resource requests and limits

[v2.6.8-3] - 2025-02-12

Added

  • [#53] Added missing config keys to dogu descriptor. This is to distinguish dogu config from local config during the migration to multinode.
  • Volume for local config

Changed

  • Consistently use doguctl to retrieve openldap_suffix instead of hardcoding it in some cases.

[v2.6.8-2] - 2025-01-07

Added

  • [#51] Added config to adjust the maximum size of the database

Changed

  • Upgrade base-image to v3.21.0-1

[v2.6.8-1] - 2024-12-19

Changed

  • Upgrade base-image to v3.20.3-3
  • openldap is updated to v2.6.8
  • Upgrade Makefile Version to v9.3.2
  • Upgrade dogu-build-lib to v3.0.0
  • Upgrade ces-build-lib to v3.1.0

[v2.6.7-4] - 2024-09-19

Changed

  • Relicense to AGPL-3.0-only

[v2.6.7-3] - 2024-08-07

Changed

  • [#45] Upgrade base-image to v3.20.2-1

Security

  • this release closes CVE-2024-41110

[v2.6.7-2] - 2024-06-27

Changed

  • [#42] Update Base Image to v3.20.1-2

Security

  • this release closes the following CVEs
    • CVE-2024-24788
    • CVE-2024-24789
    • CVE-2024-24790

[v2.6.7-1] - 2024-06-26

Changed

  • update base image to 3.20.1-1 to update doguctl to 0.11.0 (#42)
    • openldap is updated to 2.6.7 due to alpine base image upgrade

[v2.6.2-7] - 2024-02-28

Changed

  • Add "openldap-overlay-sssvlv" for server-side-sorting and virtual-list-views

[v2.6.2-6] - 2023-10-13

Added

  • Added a configuration key to change how many users a single search operation can retrieve at once (#34)

[v2.6.2-5] - 2023-07-20

Added

  • cesperson objectClass which allows an entry to have an external attribute (#35)

Changed

  • Update makefiles to 7.10.0
  • Update dogu-build-lib to 2.2.0
  • Update ces-build-lib to 1.64.0

[v2.6.2-4] - 2023-05-26

Changed

  • Upgrade base image to 3.15.8-1 to fix curl CVEs (#33)

[v2.6.2-3] - 2022-11-08

Fixed

  • Prevent ldapsearch results from being cut after 79 characters (#31)

[v2.6.2-2] - 2022-09-08

Changed

  • Make sure socket path exists and use default socket path for ldap connections at dogu startup as it was before 2.6.2-1
  • Move migration logic from startup script to post-upgrade.sh

Fixed

  • Fixed hard to repair state of ldap dogu when upgrading from 2.4.48-3 => 2.4.58-3 => 2.6.2-x (#29)
  • Make sure that all parts of the password policy are installed correctly at each startup (#29)

[v2.6.2-1] - 2022-08-23

THIS VERSION HAS BEEN REMOVED FROM REGISTRY. IT MAY CAUSES ERRORS THAT ARE HARD TO FIX

Changed

  • Upgrade base image to 3.15.3-1
  • Upgrade OpenLDAP to v2.6.2.-r0
  • Added conversion database format from old hdb to mdb format
  • Removed ppolicy schema due to deprecated status
  • slapd socket connections corrected

[v2.4.58-4] - 2022-07-25

Fixed

  • After updating from version 2.4.48-3, the Dogu ran into an error the first time it was started and then restarted (#26)
  • After updating from version 2.4.48-3, the password policy was not available (#26)

[v2.4.58-3] - 2022-06-14

Added

  • an e-mail notification whenever a users password has been changed by anyone (#21)

[v2.4.58-2] - 2022-04-13

Added

  • a default password policy (#14)
    • This password policy is kept minimalistic. Only the setting of a flag for a mandatory resetting of the password is configured.
    • By setting the attribute PwdReset to true for a user, he/she must change his/her password when logging in.
    • For detailed information on the password policy, see password policy documentation

Fixed

  • During the first installation or during an installation after a purge, the Dogu did not start if no value is stored for the admin user in the etcd (key /config/ldap/admin_mail/). (#19)

[v2.4.58-1] - 2022-04-06

Fixed

  • fix service account creation and deletion with the generation of ldap and slapd config at every dogu start #17

Changed

  • Upgrade to ldap 2.4.58
  • Upgrade base image to 3.14.3-1
  • Upgrade zlib to fix CVE-2018-25032; #15

[v2.4.48-4] - 2022-03-02

Added

  • volume /etc/openldap/slapd.d to store slapd configuration data (#4)

[v2.4.48-3] - 2020-12-18

Fixed

  • missing template information for the remove service accounts command

[v2.4.48-2] - 2020-12-16

Added

  • command to remove service accounts

[v2.4.48-1] - 2020-10-06

Changed

  • upgrade to OpenLDAP 2.4.48
  • change user's e-mail address to be unique in the LDAP directory (#8)
    • existing user data are kept without change, even those with non-unique e-mail addresses
    • updating a person's directory entry will lead to an error some attributes not unique if the (non-unique) e-mail address is supposed to be kept
  • Added more dogu build safety via CI/CD
    • Added modular makefiles
    • Added automated release
    • Added upgrade dogu step in Jenkinsfile