Active Directory (JNDI implementation) release notes

1.3.9 (August 18th, 2022)

Improvement

AD-73 Enable the possibility to specify a different sync strategy based on uSNChanged attribute

1.3.7 (May 2nd, 2022)

Bug

AD-70 Authenticate succeeds also with unauthenticated bind

AD-65 "pwdLastSet" field can not be updated properly

Improvement

AD-69 Give the opportunity to authenticate by userPrincipalName

New feature

AD-67 New configuration parameter that allows to disable the modification of the attributes

1.3.6 (January 25th, 2019)

This is maintenance release, mainly to include the LDAP connector bundle 1.5.3.

1.3.5 (September 3rd, 2018)

Bug

  • [AD-60] - Flags do not work fine if UserAcountControl is given explicitly
  • [AD-61] - Provide the possibility to specify "password never expire" flag
  • [AD-64] - Remove the 'Null token is the latest' configuration parameter

1.3.4 (September 6th, 2017)

Bug

  • [AD-59] - Group base contexts are used for custom object classes

1.3.3 (September 4th, 2017)

Bug

  • [AD-56] - The uidAttribute parameter value is incorrectly used for users and groups.
  • [AD-57] - Give the possibility to specify a default id attribute
  • [AD-58] - sAMAccountName not propagated if set as remote key

1.3.2 (June 1st, 2016)

Bug

  • [AD-55] - Include actual SyncToken per SyncDelta

1.2.6 (June 1st, 2016)

Bug

  • [AD-55] - Include actual SyncToken per SyncDelta

1.3.1 (April 1st, 2016)

Bug

  • [AD-53] - Buffer overflow during synchronization
  • [AD-54] - Messages not included in the bundle

1.2.5 (April 1st, 2016)

Bug

  • [AD-45] - Incremental Synchronization with 2k12
  • [AD-50] - Missing ADDefaultSearchStrategy reading groups
  • [AD-51] - If cn attribute is provided the rename operation occurs although not ruquired
  • [AD-52] - Error retrieveing large membership set
  • [AD-53] - Buffer overflow during synchronization
  • [AD-54] - Messages not included in the bundle

1.3.0 (December 15th, 2015)

Bug

  • [AD-45] - Incremental Synchronization with 2k12
  • [AD-50] - Missing ADDefaultSearchStrategy reading groups
  • [AD-51] - If cn attribute is provided the rename operation occurs although not ruquired
  • [AD-52] - Error retrieveing large membership set

New Feature

  • [AD-47] - Support pagination API

Improvement

  • [AD-49] - Upgrade to LDAP connector 1.5.0

1.2.4 (October 19th, 2015)

Bug

  • [AD-48] - AccountId update fails

Improvement

  • [AD-46] - Provide the possibility to configure a conservative membership policy management

1.2.3 (April 30th, 2015)

Bug

  • [AD-40] - Group DN resolution fails

Improvement

  • [AD-39] - Improve membership validity check before to include it into the configuration
  • [AD-41] - Case insensitive set of membership attribute
  • [AD-42] - Add support for ADDS 2012
  • [AD-43] - Provide functionalities to update primaryGroupID

Task

  • [AD-44] - Remove BerEncoder internal proprietary API

1.2.2 (February 4th, 2015)

Bug

  • [AD-29] - Error updating user primary groups
  • [AD-34] - Remove "Initial loading" configuration parameter

Improvement

  • [AD-23] - Manage "user cannot change password"

Task

  • [AD-33] - Improve objectGUID utilization
  • [AD-38] - Change license to AL 2.0

1.1.6 (February 4th, 2015)

Bug

  • [AD-29] - Error updating user primary groups
  • [AD-34] - Remove "Initial loading" configuration parameter

Improvement

  • [AD-23] - Manage "user cannot change password"

Task

  • [AD-38] - Change license to AL 2.0

1.1.5 (November 12th, 2014)

Bug

  • [AD-37] - Version 1.1.4 not compatible with Apache Syncope 1.1.X

1.2.1 (November 11th, 2014)

Bug

  • [AD-35] - During full reconciliation the membership search filter is not considered

Improvement

  • [AD-36] - Improve connector object info about deleted objects

1.1.4 (November 11th, 2014)

Bug

  • [AD-35] - During full reconciliation the membership search filter is not considered

Improvement

  • [AD-36] - Improve connector object info about deleted objects

New Feature

  • [AD-32] - Serializing objectGUID attribute

1.2.0 (October 23rd, 2014)

New Feature

  • [AD-32] - Serializing objectGUID attribute

Task

  • [AD-31] - Upgrade to ConnId 1.4.0.0

1.1.3 (August 28th, 2014)

Improvement

  • [AD-30] - Provide mechanisms to support password update only

1.0.6 (August 28th, 2014)

Improvement

  • [AD-30] - Provide mechanisms to support password update only

1.0.5 (June 16th, 2014)

Bug

  • [AD-28] - All the groups removed in case of ldapGroups property value not provided

1.1.2 (November 28th, 2013)

Bug

  • [AD-17] - Membership search fails in case of different search contexts
  • [AD-18] - Schema doesn't return GROUP info
  • [AD-19] - Search seems to be case-sensitive
  • [AD-21] - Perform rename changing DN or CN
  • [AD-25] - Make possible to change uidAttribute value
  • [AD-26] - ADConnector#getLatestSyncToken() not working as expected

Improvement

  • [AD-20] - Give the possibility to change uidAttribute mapping
  • [AD-22] - Retrieve userAccountControl attribute

1.0.4 (July 3rd, 2013)

Bug

  • [AD-19] - Search seems to be case-sensitive
  • [AD-21] - Perform rename changing DN or CN

Improvement

  • [AD-20] - Give the possibility to change uidAttribute mapping

1.1.1 (April 5th, 2013)

With great pleasure we announce the availability of the new Active Directory connector's 1.1.1 release (JNDI implementation).

Bug

  • [AD-11] - Users that are part of a group configured in a search filter are not synced in certain cases
  • [AD-12] - Missing translations
  • [AD-13] - Group-related properties are mandatory
  • [AD-16] - Error comparing request ObjectClass

Improvement

  • [AD-14] - Document an example configuration to help first time users
  • [AD-15] - Support plain LDAP (port 389) for synchronization purposes

1.1.0 (March 25th, 2013)

With great pleasure we announce the availability of the new Active Directory connector's 1.1.0 release (JNDI implementation).

Bug

  • [AD-9] - Missed groupMemberAttribute value
  • [AD-10] - Extend attributes to get by a new configuration parameter

Improvement

  • [AD-2] - Change bundle name
  • [AD-3] - Provide the possibility to set null token to the latest valid synchronization token
  • [AD-5] - Handle lockoutTime
  • [AD-6] - Add handling for pwdLastSet

New Feature

  • [AD-1] - Provide GROUP objectclass operation support

Task

  • [AD-4] - DELETE type in case of entry doesn't match the custom filter
  • [AD-7] - Fix mandatory and default values information
  • [AD-8] - Evaluate memberOf attribute in order to create memberships

1.0.3 (March 25th, 2013)

With great pleasure we announce the availability of the new Active Directory connector's 1.0.3 release (JNDI implementation).

Improvement

  • [AD-5] - Handle lockoutTime
  • [AD-6] - Add handling for pwdLastSet

1.0.2 (December 3rd, 2012)

With great pleasure we announce the availability of the new Active Directory connector's 1.0.2 release (JNDI implementation).

The most relevant new feature is:

  1. Fake object creation and return for each deleted entry. 

1.0.1 (April 16th, 2012)

With great pleasure we announce the availability of the new Active Directory connector's 1.0.1 release (JNDI implementation).

The most relevant new feature is:

  1. Possibility to create a new user entry by specifying the sAMAccountName but by providing the complete DN (a default people container will be used).

1.0 (December 22nd, 2011)

With great pleasure we announce the availability of the new Active Directory connector's 1.0 release (JNDI implementation).

The most important new features are:

  1. Possibility to verify membership using OR/AND logical operator
  2. Possibility to perform an initial loading based on sync operation
  3. DirSync search extended to all the existent groups (#25) in order to catch all memberOf attribute updates

0.9 (December 7th, 2011)

With great pleasure we announce the availability of the new Active Directory connector's 0.9 release (JNDI implementation).

The most important new features are:

  1. User create/update/delete
  2. User change password
  3. User Enable/Disable
  4. User search/read
  5. User authentication
  6. Schema retrieving based on configured entry object classes (#17)
  7. Hide obvious configuration from users (#16)
  8. Possibility to trust all server certificates without any specified certification authority

Alongside with these new features, a documentation wiki page has been provided (Active Directory connector (JNDI implementation)).