Releases: ltb-project/self-service-password
Version 1.7.3
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- #1038: Missing token after form fail
- #1039: fix missing token after form fail (#1038)
- #1049: Conf bug/change for Version 1.7 +
- #1055: Captcha Scripts not included in el9 rpm
- #1056: Documenting fix for multi-tenant configuration
- #1057: Adding smsovh and captcha lib folders
- #1058: Background image jagged in CSS?
- #1059: Fix CSS background
- #1061: Updated norwegian language
Full Changelog: v1.7.2...v1.7.3
👥 Main Team
🤝 Contributors
@hsilva-keep
@Bioflash257
@erichweiler
@abpai94 (@Worteks)
@thnilsen
Version 1.7.2
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- localize friendly captcha by @davidcoutadeur in #1006
- SMS Truncate option doesn't appear to be working by @abpai94 in #1005
- Invalid token after captcha fail by @davidcoutadeur in #1018
- PHP Fatal error: Uncaught Error: Call to undefined function Ltb\ldap_sasl_bind() by @davidcoutadeur in #1008
- Container - config.inc.php.orig Permission Issues by @davidcoutadeur in #1022
- Use ltb-common 0.5.0 by @davidcoutadeur in #1032
- Fix the border-radius of login input box on mail reset screen by @ludovi-com #1036
Full Changelog: v1.7.1...v1.7.2
👥 Main Team
Version 1.7.1
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
Full Changelog: v1.7.0...v1.7.1
👥 Main Team
Version 1.7.0
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- add documentation for entropy feature (#903, #830) by @davidcoutadeur in #907
- fix: hide php notices from the end user in the web ui by @maichouni-mitek in #913
- Update ar.inc.php by @toky0 in #916
- remove smarty messages in error logs unless $smarty_debug is set to true (#909) by @davidcoutadeur in #919
- fix warning: userdn variable uninitialized when using sendsms (#920) by @davidcoutadeur in #930
- remove utf8_decode function (#931) by @davidcoutadeur in #933
- 894 refactor captcha system by @davidcoutadeur in #923
- 895 friendly captcha by @davidcoutadeur in #924
- 343 recaptcha v3 by @davidcoutadeur in #936
- update ltb-ldap library name to ltb-common (#944) by @davidcoutadeur in #945
- 946 improve docker image by @davidcoutadeur in #947
- add a $ldap_scope parameter (#921) by @davidcoutadeur in #939
- lang: update cn and zh-CN by @findlayfeng in #934
- 951 fix csp errors by @davidcoutadeur in #953
- Making it possible to docker build both on M1/M2/M3 Mac and in an x86 VM by @maglub in #950
- fix resending mail requests (#401) by @davidcoutadeur in #949
- Create ko.inc.php by @jungwooksong in #959
- clarify password confirmation field by @davidcoutadeur in #965
- fix vulnerabilities in docker images (#946) by @davidcoutadeur in #966
- Only call ldap_get_dn on an entry by @coudot in #971
- Override all parameters with values from $secondaries_ldap by @coudot in #974
- use symfony cache for managing session-side storage (#954) by @davidcoutadeur in #967
- prevent sending sms twice + share cache functions in dedicated lib/cache.php (#763) by @davidcoutadeur in #978
- use cache functions from ltb-common (#979) by @davidcoutadeur in #980
- improve cache modularity (#982) by @davidcoutadeur in #983
- 968 use ppolicy from ltb common by @davidcoutadeur in #981
- Arabic language support in documentation by @coudot in #989
- Use page size parameter from ltb-common (#985) by @davidcoutadeur in #988
- update ltb-common library to v0.3.0 (#948) by @davidcoutadeur in #990
- #943: Removed duplicated detect language code. by @davidcoutadeur in #992
Full Changelog: v1.6.1...v1.7.0
👥 Main Team
🤝 Other contributors
- @maichouni-mitek made their first contribution in #913
- @toky0 made their first contribution in #916
- @findlayfeng made their first contribution in #934
- @maglub made their first contribution in #950
- @jungwooksong made their first contribution in #959
Version 1.6.1
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- #904: Unable to install on RockyLinux 8
- #907: add documentation for entropy feature (#903, #830)
- #919: remove smarty messages in error logs unless $smarty_debug is set to true (#909)
- #930: fix warning: userdn variable uninitialized when using sendsms (#920)
- #933: remove utf8_decode function (#931)
Full Changelog: v1.6...v1.6.1
👥 Main Team
🤝 Other contributors
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password
Version 1.6.0
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- Update tr.inc.php by @berkaycagir in #775
- Audit log by @coudot in #781
- Use login_hint to prefill user login by @coudot in #795
- Update phpunit by @coudot in #799
- translated the line $messages['tokensent_ifexists'] into german by @piang0 in #804
- First implementation of a page to set mail and phone attributes by @coudot in #808
- Use LTB LDAP common PHP lib by @coudot in #797
- Update tr.inc.php by @berkaycagir in #812
- Complete and fix pt-BR translation by @natanjunges in #815
- Filter allowed languages by @coudot in #829
- Error handling when using the signal-cli api for sms by @armfem in #833
- Update it.inc.php by @iotaka in #839
- Upgrade Bootstrap to 5.3 by @coudot in #837
- Fix pt-BR translation for pwned password policy by @campolargo in #841
- prevent multiple form submits (#844) by @davidcoutadeur in #845
- 830 entropy by @davidcoutadeur in #843
- remove useless show_policy function, now rendered by smarty template by @davidcoutadeur in #842
- Remove criteria depending on old password when unavailable (#855) by @davidcoutadeur in #856
- add docker image labels (#778) + update base image to php:8.2 + smarty to v4.4.1 by @davidcoutadeur in #866
- update bundled dependencies + mv them as composer managed dep (#849) by @davidcoutadeur in #859
- Spec cleanup (#846) by @davidcoutadeur in #847
- deb cleanup (#852) by @davidcoutadeur in #858
- Avoid host header poisoning by @coudot in #857
- Use a dedicated CSS class for ppolicy div by @coudot in #873
- Test crypt_tokens parameter if SMS feature is enabled by @coudot in #874
- Securisation of reset by SMS token feature by @armfem in #851
- use new ltb-ldap v0.2 and adapt method signatures (#878) by @davidcoutadeur in #879
- 878 use ltb ldap functions by @davidcoutadeur in #882
- Use POST instead of GET in check entropy module (#884) by @davidcoutadeur in #885
- compute pwd_diff_last_min_chars the same way than at backend side (#868) by @davidcoutadeur in #869
- reinject default configuration file into conf directory (#831) by @davidcoutadeur in #870
- fix warnings for uninitialized variables (#887) by @davidcoutadeur in #888
- ability to change custom password fields, developped by @markus-96 (#864) by @davidcoutadeur in #865
- Correction of max number of attempts for token sent by sms bug by @armfem in #890
- remove global variables in sendsms.php (#889) by @davidcoutadeur in #891
- Corrected error introduced when adding obscure notifications by @armfem in #892
- 674 notify by mail code factorization by @davidcoutadeur in #893
- Remove obscure_failure_messages option by @coudot in #899
Full Changelog: v1.5.4...v1.6.0
👥 Main Team
🤝 New Contributors
- @piang0 made their first contribution in #804
- @natanjunges made their first contribution in #815
- @armfem made their first contribution in #833
- @iotaka made their first contribution in #839
- @campolargo made their first contribution in #841
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password
Version 1.5.4
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- Typo in config_tokens.rst by @maxxer in #777
- Updated italian localization by @xBounceIT in #793
- Dockerfile fails to build #813 by @pljeff in #814
- Do not trust SMS number from crypted token, search it again in LDAP Directory by @coudot in #818
- Announce that the smarty3 package needs to be installed manually by @paulignari in #774
Full Changelog: v1.5.3...v1.5.4
👥 Main Team
🤝 New Contributors
- @xBounceIT made their first contribution in #793
- @pljeff made their first contribution in #814
- @paulignari made their first contribution in #774
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password
Version 1.5.3
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- Update gpg install command by @wwuck in #723
- Add support for Arabic locale by @bondif in #741
- Update Dutch lang file by @zidesm in #744
- Added comment/note over $custom_css by @stevleibelt in #754
- Bump guzzlehttp/psr7 from 2.4.0 to 2.5.0 in /lib by @dependabot in #767
- Restrict languages to php files by @coudot in #771
- Prevent account disclosure in password reset by mail token page by @coudot in #749
Full Changelog: v1.5.2...v1.5.3
👥 Main Team
🤝 New Contributors
- @wwuck made their first contribution in #723
- @zidesm made their first contribution in #744
- @stevleibelt made their first contribution in #754
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password
Version 1.5.2
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- Update config_nginx.rst by @souhaib22 in #717
- Update config_apache.rst by @souhaib22 in #718
- Use gpg instead of apt-key during for deb install by @ZephOne in #722
- captcha in sendsms check when needed only by @artlog in #721
Full Changelog: v1.5.1...v1.5.2
👥 Main Team
🤝 New Contributors
- @souhaib22 made their first contribution in #717
- @ZephOne made their first contribution in #722
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password
Version 1.5.1
ℹ️ Self Service Password
LDAP Tool Box Self Service Password is a web application for end users. It allows them to change or reset their password if they lost it.
It works with any LDAP directory, including Active Directory.
📄 What's Changed
- Catch user not found error by @coudot in #712
- Explicit libldap-common dependency for docker by @VeselaHouba in #715
🤝 New Contributors
- @VeselaHouba made their first contribution in #715
Full Changelog: v1.5.0...v1.5.1
⬇️ Download
Get tarball and packages on https://ltb-project.org/download.html
Use our apt and yum repositories to ease the installation:
- https://self-service-password.readthedocs.io/en/latest/installation.html#debian-ubuntu
- https://self-service-password.readthedocs.io/en/latest/installation.html#centos-redhat
You can also use our Docker image: https://hub.docker.com/r/ltbproject/self-service-password