kanidm

Commits

• a315d8d: Himmelblau requires the machine key for unix_user_get (#2523) (David Mulder) #2523

Commits

• c892cd0: List of supported features (#2499) (Firstyear) #2499

Commits

• 7567514: Release 1.1.0-rc.16 (#2483) (Firstyear) #2483

2024-02-07 - Kanidm 1.1.0-rc.16

This is the sixteenth pre-release of the Kanidm Identity Management project. Pre-releases are to
help get feedback and ideas from the community on how we can continue to make this project better.

This is the final release candidate before we publish a release version. We believe that the API and
server interfaces are stable and reliable enough for people to depend on, and to develop external
tools to interact with Kanidm.

1.1.0-rc.16 Release Highlights

• Replication for two node environments is now supported
• Account policy supports password minimum length
• Improve performance of webui
• Add transitional compatability with SSSD
• Improve TPM interfaces in unix clients
• Allow importing more weak password schemes from FreeIPA
• Support Attestation of Passkeys/Webauthn - this makes us the first IDM to support this!
• Add entry-managed-by and hierarchial access control profiles
• Rework and improve default access controls to further restrict default privileges
• New replicated domain migration framework for distributed updates
• Start to add PIV/Smartcard authentication groundwork
• Allow changes to OAuth2 RS origin
• Support RFC8414 OAuth2 metadata
• Improve TLS error dialogs to assist administrators
• Support RFC6749 Client Credentials Grant
• Support custom claim maps in OIDC

Commits

• ddea9c6: Support SPN in groups claim (#2474) (Firstyear) #2474

Commits

• 23cc2e7: Fix RUV trim (#2466) (Firstyear) #2466

Chores

• deps: bump aiohttp from 3.9.1 to 3.9.2 in /pykanidm (#2461) #2461 (dependabot[bot])

Commits

• c8bd173: PyKanidm updates and testing (#2301) (James Hodgkinson) #2301

Commits

• 005ca17: 1222 what rights does anonymous have (#2436) (Firstyear) #2436

Commits

• 6c1950a: Clarify role of WebUI in README.md (#2431) (krumelmonster) #2431

Commits

• e02e050: Adding max_ber_size option in config for ldap sync (#2416) (James Hodgkinson) #2416

Commits

• cf87993: Debian build fixes (also the book) (#2400) (James Hodgkinson) #2400

Chores

• deps-dev: bump the all group in /pykanidm with 2 updates (#2430) #2430 (dependabot[bot])

Commits

• 8dc884f: 2390 1980 allow native applications (#2428) (Firstyear) #2428

Commits

• 3b0b350: cookies (#2426) (Firstyear) #2426

Chores

• deps-dev: bump jinja2 from 3.1.2 to 3.1.3 in /pykanidm (#2425) #2425 (dependabot[bot])

Commits

• a1fa59b: Clean RUV (#2424) (Firstyear) #2424

Commits

• 666448f: Upgrade replication to use anchors (#2423) (Firstyear) #2423

Commits

• d56691f: Change OAuth2 RS Origin from the CLI (#2418) (Matthew Wilks) #2418

Commits

• cc79b2a: 20231222 piv authentication (#2398) (Firstyear) #2398
• cbf9a49: Fix deb release flow to find the matrix split artifacts (#2406) (Jinna Kiisuo) #2406

Commits

• 307a66e: Update docs, closes SQLite Write-Ahead Logging might make page size immutable #2404 (#2405) (James Hodgkinson) #2405

Commits

• 7f27a6f: Force apply idm migrations to apply access controls (#2401) (Firstyear) #2401

Chores

• deps: bump the all group with 2 updates (#2372) #2372 (dependabot[bot])
• deps: bump the all group in /pykanidm with 6 updates (#2375) #2375 (dependabot[bot])
• deps: bump the all group with 2 updates (#2395) #2395 (dependabot[bot])
• deps: bump the all group in /pykanidm with 8 updates (#2396) #2396 (dependabot[bot])

Commits

• 5c445a4: 20231218 ipa sync unix password (#2374) (Firstyear) #2374
• a4c44bc: fixing default for oauth2 request_parameter_supported metadata (#2378) (James Hodgkinson) #2378
• 3408816: Add DN as a virtual ldap attr (#2379) (Firstyear) #2379
• 77b01e3: Trim and lowecase usernames (#2380) (Firstyear) #2380
• fd71a74: Add improved domain migration framework and default MFA (#2382) (Firstyear) #2382
• Fix inverted logic on cache dir check (#2388) #2388 (David Mulder)
• Fix insert_tagged_hsm_key doesn't cache the hsm key (#2389) #2389 (David Mulder)
• Provide the keystore during auth (#2385) #2385 (David Mulder)
• a16525d: fix backup filename and regexp pattern for cleanup (#2386) (cuberoot74088) #2386
• 0e50451: fixing up the integration script (#2392) (James Hodgkinson) #2392