LDAP Account Manager

PHP 7 required
WebAuthn/FIDO2 support for 2-factor-authentication (requires PHP 7.2)
IMAP: changed library to support latest TLS versions
Personal: support display name (hidden by default in server profile)
Windows users: support allowed workstations, more profile options
LAM Pro:
- PPolicy: support for password check module
- Windows AD LDS support (users and groups)
- User self registration: support Active Directory/Samba4

Lamdaemon can be configured with directory prefix for homedirs
Account list filters match on substrings instead of whole value
YubiKey: support to configure multiple verification servers
Deactivated non-maintained translations: Catalan, Czech, Hungarian, Polish and Turkish. Contact us if you would like to take over. Translators get LAM Pro for free (commercial use included).
Docker updates
Fixed bugs:
- Missing CSS for Duo
- Editing of DNs with comma on Windows (210)

Group account types can show member+owner count in list view
2-factor authentication:
- Duo support
- user name attribute for privacyIDEA can be specified
LAM Pro:
- New self service settings for login and main page footer
- Custom fields: custom labels for LDAP search select list
Fixed bugs:
- Configuration issue with Unix user/host module (206)

Parallel editing of multiple entries in different browser tabs supported
LAM supports the progressive web app standard which allows to install LAM as an icon on home screen
Windows: added home drive and force password change to profile editor
Unix: password management can be disabled in module settings
LAM Pro:
- Bind DLZ: entry table can show record data (use special attribute "#records" in server profile)
Fixed bugs:
- No drop-down filter box for account status (200)

New import/export in tools menu
YubiKey support
Windows users:
- Manage "departmentNumber" (needs to be activated via LAM server profile)
- Sync group memberships from Unix and group of names
LAM Pro:
- Easy setting of background color in self service profile
- Cron jobs: added Windows/Qmail/FreeRadius account expiration notification jobs
- Bind DLZ: usability improvements and small fixes

Password change possible via LDAP EXOP operation (set LDAP_EXOP as password hash, requires PHP 7.2)
Support Imagick and GD
Dropped support for Apache 2.2
Upload: allow to overwrite existing accounts
Personal: photos can be printed in PDF export
Kolab updates
LAM Pro:
- Auto deletion of entries with dynamic directory services support (requires PHP 7.2)
Fixed bugs:
- Issue when changing key case of uid (#197)

Imagick PHP extension required
Passwords can be checked against external service (e.g. https://haveibeenpwned.com/API/v2#SearchingPwnedPasswordsByRange)
Personal/Windows: image cropping support
Better filtering of account lists
Unix: Unix and group of names memberships can be synced in group selection
IMAP: create mailbox via file upload
PHP 7.2 support
Support for "," in DN
LAM Pro:
- Better support for 389ds password expiration
Fixed bugs:
- Error on password reset page when custom fields is used (194)

Server profile: added option if referential integrity overlay is active to skip cleanup actions
Unix: several options are now specific to subaccount types (reconfiguration required!)
Fixed bugs:
- Security fixes (XSS vulnerabilities CVE-2018-8763 and CSRF token in URL CVE-2018-8764)
- Quota for Windows groups did not work
LAM Pro:
- Support custom structural object classes with new custom type
- Support dynamic lists
- Self service login and password self reset can be secured with captcha

Fixed bugs:
- Login page not working when no server profile exists (44)
- LAM Pro: Password Self Reset has issues when both security question and confirmation mail are activated.
- LAM main configuration: certificate buttons do not work

Cart