%FusionDirectory 1.5 - 2025-02-24

Added

fusiondirectory

• fd#6270 [Snapshot] - Enhancement in order to provide a first concept of revision and source reference
• fd#6301 [CORE] - Tasks Mail must take into account dynGroups
• fd#6302 [CORE][TASKS] - Tasks must be set as repeatable and updatable
• fd#6303 [CORE][MAIL] – Attachments for emails must be created as sub nodes
• fd#6305 [CORE][Task] - type mail should include a BCC field
• fd#6306 [CORE] - Issues of services not triggered by account deactivation via lock icon on user list
• fd#6307 [CORE] - Supann life cycle - automation via Orchestrator
• fd#6309 Support SSHA512 password if overlay pw-sha2 is installed
• fd#6314 [CORE] - Snapshots - review of the current automatic creation logic
• fd#6320 [Tasks] - Mail class can have one method static to be reused outside object call by others
• fd#6323 [Tasks] - LastExec is performed on localTime and should be set in UTC - always
• fd#6340 Add callerMAIL as macro in simplePlugin
• fd#6343 [CORE] - New directory structure numbering
• fd#6350 [Audit] - Account locked is not logged within audit upon clicking on the lock icon
• fd#6346 [Recovery] - Usage of supannMailPrivee within password recovery
• fd#6351 [core] - audit logging - allowing to see attributes => values within audit record. With hiding of values if required.
• fd#6352 [Core] - SimplePlugin - audit section (logging-modify) - must have a way to detect specific changes within a multi evaluated attributes
• fd#6354 [CORE] - Tasks - Allow subtasks to received helper information as form of references
• fd#6357 [core] - new token branch with new objectClass allowing management of specific tokens
• fd#6359 [Core] - Task - main menu allows periodicity of a cyclic setting - one element is empty
• fd#6361 Creat a column for showing a supanEtatDate
• fd#6365 [Core] - Reviewing how the locking mechanism logic work - general lock - supann lock.

fusiondirectory-plugins

• #6055 Add a basic kerberos plugin
• #6203 [Supann-Ex] - Verification of uniqueness, generation of hash based on login ID and time.
• #6241 Private form must not be related to the plugin invitations
• #6258 [NewPlugin] - Notifications, based on automatic snapshots, send email to required personal about attributes changes
• #6259 Proper way to manage supannCivilite
• #6260 Update yaml with the new screenshot and tags
• #6267 [webservice] - Force the usage of the timezone configured within FusionDirectory in order to avoid the default GMT
• #6277 [Mail] - Render mail unique all the time, not only if allowed to be used as authentication
• #6278 [LifeCycle] - Move lifeCycle from Core to Plugins
• #6285 [Audit] - A new task allowing a specific retention date of audit logs with automatic deletion
• #6290 [Notifications] - Allowing awareness on different supann states values
• #6298 [Audit] - Migration - obsolete attribute in backend config must be set - fdAuditRotationDelay
• #6299 [Supann] - supannMailPrivee should contains the following tag : {secours}
• #6300 [UserReminder] - New task allowing to send notification email when supannStatus "sursis" is at 30 and 15 days of ending the account
• #6301 [audit] - New backend allowing to hide certain attributes value recorded in audit logs
• #6305 [Plugins] - fdRPCwebserive - posix force_ids is not taken into consideration correctly
• #6306 [Notifications] - The Attributes list should not be mandatory - only supann resource.
• #6307 [Reminder] - Remove manager boolean as forward-to renders this redundant
• #6318 [Plugins] - supann - Reviewing how the locking mechanism logic work - general lock - supann lock.
• #6319 [Plugins] - Reviewing how the locking mechanism logic work - mail resource lock - zimbraAccountStatus update

Changed

fusiondirectory

• fd#6300 [CORE] - UsersGroupsRolesAttribute attribute must include dyngroup as well
• fd#6321 [Tasks] - Make the generic tasks even more generic, allowing the object type string to be custom in case of added plugins
• fd#6324 [Tasks] - Main tasks create slave objects related to a DN - current definition of attributeAccess is string with lifeCycle description
• fd#6326 [Core] - Add orcid test method
• fd#6330 [new section] - Workflow to integrate sub menu such as mail template and tasks
• fd#6334 [CORE] - New behavior for template, automatic saving if no errors
• fd#6335 [Core] - A new branding and therefore new logo is now available for FusionDirectory
• fd#6364 [Core] - When lock mechanism is trigger - the user should not be editable if not unlock"

fusiondirectory-plugins

• #6249 Import eduPerson schema for orcid
• #6272 rename the certificate icon
• #6280 [Plugins] - update plugins to take into consideration the new directory of CORE structure
• #6302 [Plugins] - Sinaps - deactivate sinaps in backend when installed - allowing remaining system unblocked
• #6311 put the version 1.5 in all yaml for FusionDirectory 1.5 and change php version to 7.4
• #6321 [Plugins] - Unix - trust all report a dn unknown when * is set

Removed

fusiondirectory

• fd#6333 [Core] - PhpSetup removal of the error collector mail to - considered not useful anymore
• fd#6337 [Core] - remove the legacy theme
• fd#6339 [Core] - remove leftover of dashboard in the core
• fd#6341 [LifeCycle] - Removal of lifeCycle within CORE

fusiondirectory-plugins

• #6271 remove the legacy theme
• #6275 remove leftover of dashboard in the core
• #6281 remove ldif from ppolicy plugin

Fixed

fusiondirectory

• fd#6313 [CORE] - Snapshots - review of the current automatic creation logic
• fd#6331 Use replacement icons for the one now in the plugins
• fd#6332 Add an error log when the session is destroyed
• fd#6360 [Mail] - When supann is available - the supannMailPrivee and potentially other are detected with label

fusiondirectory-plugins

• #6081 Do not record empty memberUid within mixedgroups
• #6178 [Posix] - Template - TrustMode %askme% set as a service disables the entire table.
• #6205 [Zimbra] - Lifecycle of Zimbra account - Errors of re-activation and auto-activation not working.
• #6274 there is error in the variables_webauthn.inc are not correct for our packaged version
• #6246 Plugin dyngroups missing icons
• #6255 [Samba] - Samba tab cannot be removed when samba ID mapping is activated
• #6270 [Kerberos] - Issue declaring class invisible without attrs
• #6276 [GID - posix group] - issue with template not allowing to set GID.
• #6322 [Template] - Issue when creating a template with empty password, error message should not be seen
• #6309 there is a oid used twice in user-reminder
• #6312 [Plugins] - Reminder attributes fdTasksReminderRecipientsMembers should not be mandatory within ldap
• #6313 [fd-plugins] - User-reminder issue when supann is subStatus is set to none.
• #6314 [Plugins] - user-reminder force the nextSubState to be checked
• #6316 posix group not apply from user template
• #6323 [Supann] - Supann Civilites is marked as "values" and therefore is badly translated.

Security

fusiondirectory

• fd#6363 [Security] - path traversal vulnerability - limited to png files

%FusionDirectory 1.4 - 2023-06-13

Added

fusiondirectory

• fd#1208 Columns selection
• fd#2895 Add support for paginating ldap result in setup
• fd#3710 Support users with no password
• fd#4736 Ability to use custom LDAP filter in objects lists
• fd#5531 Give ACL based on an LDAP filter
• fd#5533 Columns modification should be saved in LDAP
• fd#5778 Create a security library for fusiondirectory
• fd#5779 Add support for U2F fido standard
• fd#5785 Alphabetically list user groups on the user edit page.
• fd#5804 add users to Posix group : ability to filter posix users in users list
• fd#5859 Exceptions and Errors should be displayed in a better way
• fd#5867 Fields searched for by text filter should be provided by tabs
• fd#5886 Support disabling specific password methods
• fd#5900 Add a class for dialog buttons
• fd#5903 Ease template fields filling from LDAP values
• fd#5905 add a placeholder to have the first letter in upper case and the others in minor case
• fd#5908 Date field should have a start date parameter
• fd#5910 Use more HTML5 input types
• fd#5925 Add option for hooks to know which attributes were modified
• fd#5966 Management configuration system
• fd#5970 Allow plugins to easily take part in the user locking process
• fd#5976 icons missing in filter selections in core
• fd#5979 Samba and FD
• fd#5980 Management should be a bit more flexible
• fd#5986 Add a reinitialisation button for the management configuration
• fd#5999 Allow ObjectsAttribute instances to specify filter elements
• fd#6001 Show a warning when password is about to expire through ppolicy
• fd#6025 Handling of booleans in CSV import
• fd#6036 hooks page not showing the field when we are not clicking on edit
• fd#6039 %askme% is not available in SelectAttribute at template creation
• fd#6042 LDAP trace level should add DEBUG messages for all LDAP operations
• fd#6046 Add a security tab on users
• fd#6049 Add a configuration option for jpegPhoto resizing
• fd#6051 Check locale availability upon configuration save
• fd#6053 Add support for initials LDAP field on users
• fd#6057 Methods for getting current URL and host would be useful
• fd#6059 Enable TOTP second factor
• fd#6060 Add b64 option to objects::ls
• fd#6062 Add an option in fusiondirectory-setup to remove old SupAnn root information
• fd#6065 Possibility to see debug in server logs instead of the interface
• fd#6074 add an option to pause trigger aka keep the configuration but not run it
• fd#6081 HiddenArrayAttribute cause problems when indexes are not contiguous
• fd#6084 Extend the listing possibility
• fd#6089 add an option to migrate the ip and mac adress to the new interface format into fusiondirectory-setup
• fd#6093 Read fdPpolicyDefaultDn option instead of fdPpolicyDefaultCn
• fd#6102 Add a modifier for incremental number
• fd#6105 Add option ldif-wrap=no in class_ldap.inc
• fd#6119 Add core features for Archive plugin
• fd#6124 Rewrite fusiondirectory-setup cli tool in PHP
• fd#6125 add an option to output clear password when we use --encrypt-passwords
• fd#6128 Rewrite fusiondirectory-insert-schema based on ldap-config-manager
• fd#6145 We need a modifier to generate valid uids
• fd#6150 Add a configuration option to enable CAS verbose mode
• fd#6169 Issue a warning if sizelimit or number of entries is higher than max_input_vars PHP ini setting
• fd#6181 GivenName mandatory in FusionDirectory for the user but not mandatory in openldap schema
• fd#6196 Improve contribution by adding a simple way to add / delete plugin
• fd#6202 Creation of new Class - Mail Template Object - Standard
• fd#6207 Creation of new Class - Tasks Object - standard
• fd#6231 [Tasks-Dashboard] - Develop a new dashboard for tasks to allow granular status report on sub-tasks
• fd#6241 [Icons] Proper icons for tasks - task dashboard - mail template
• fd#6281 [PluginManager] - move the plugin tab from dasboard to the left menu under dashboard section
• fd#6282 [Core] - Re-structuration of sections and related menu entries

fusiondirectory-plugins

• #2912 the autofs plugin should be updated to support autofs5
• #3632 DHCP sorting hosts by name or IP or HWaddr
• #5809 Add an option to send a text to the user and manager when the account is effectively locked
• #5838 Create a form plugin
• #5850 Create an invitations plugin
• #5867 Set title in public-forms and invitations external pages
• #5878 Create icons for the new plugins invitations and public forms
• #5879 Add a TOS checkbox feature in forms
• #5880 Templates are needed on Supann structures
• #5906 Support Supann 2018
• #5907 SupAnn 2018 account life cycle
• #5924 Add a REST-like API to webservice
• #5931 create an icon for supann status in the user list
• #5934 Add support for supannRessourceEtatDate in user-reminder
• #5936 icons missing in filter selections
• #5954 Add a helper for user locking handling through REST API
• #5955 Add recovery features to REST API
• #5964 Webservice should check account expiration
• #5998 Create a plugin to store the Intranet Mail Routing
• #6001 Add a captcha system to our public form system
• #6002 Add support for the supannGroupe objectClass and its attributes
• #6010 Improve security audit
• #6013 Add plugin for WebAuthn
• #6014 Server error when requestion jpegPhoto attribute in REST search request
• #6015 Add support for SupAnn CMS (Carte Multi Service)
• #6019 Add recovery code when we add a yubikey
• #6020 Adding OTP codes to the 2FA methods
• #6021 Show the form URL in edit mode
• #6024 SupAnn 2018 second revision new schema, lists and fields
• #6025 Add support for supannConsentement
• #6040 make an ipam plugin
• #6042 move cyrus mail option to a cyrus config tab
• #6043 add supannParrainDN attribute in the supann plugin
• #6049 Add CAA record support in DNS plugin
• #6050 Review interface for SupAnn affectation, role and subscription
• #6052 add rfc2307bis.schema into mixed groups plugin
• #6053 Cloud plugin (OwnCloud/NextCloud)
• #6062 Plugin for groupOfURLs support
• #6069 Add an option to disable wrapping of LDIF export
• #6075 Add an archival plugin to fusiondirectory
• #6083 add template support to the alias plugin
• #6085 Add several social handlers (Personal plugin)
• #6088 Archive action is not available through webservice
• #6089 make a zimbra mail plugin
• #6093 we need a basic plugin for schac attributes
• #6099 Add subscription plugin
• #6109 Allow custom tags for supannMailPrive, supannTelephonePrive, supannAdressePostalePrivee
• #6111 Add support for FranceConnect SupAnn attributes
• #6112 Allow hiding supann tabs
• #6115 Create a plugin to store status of mail protection in mailinblack
• #6150 Create a ldapmanager tab on objects that let export the object easily in LDIF (one and subtree)
• #6174 [supannEx] - Add new field eduPersonUniqueId within supannEx
• #6175 [supannEx] - Add new field supannCodePopulation within supannEx
• #6187 [Enhancement] - User Reference - Add mailAliasDistribution & mailAliasRedirection within reference tab
• #6196 [Partage-Renater] - getAccount method - Proper account updates
• #6197 [Partage-Renater] - Configuration tab for partage - mailbox deletion options
• #6199 [Renater-Partage] - Management of access token received by the API
• #6206 [Plugins] - A tool is required in order to generate a yaml properly with related plugin information.
• #6214 [Subscriptions] - Adds proper icons to the icons folder.
• #6220 [Webauthn] - Create one file named variables_webauthn allowing the load all requirements - helping patching for supported distributions
• #6226 [Public-form] - Updates plugin in order to be fully compatible with securimage library
• #6233 [Supann] - FranceConnect object class to be changed.
• #6234 [Supann] - Class entity - OU name is set to be unique but this is not mandatory
• #6236 [Plugins] - Re-structuration of sections and related menu entries
• #6238 [Plugins] - Add icons to subcritpions plugin

Changed

fusiondirectory

• fd#4866 Could the list displayed by fusiondirectory be sorted
• fd#5039 acl_base management should be refactored
• fd#5135 Management refactor (and filter enhancement)
• fd#5721 Support Unicode in FD fields
• fd#5827 Use the new features from PHP 5.6
• fd#5833 Management tab footer should be in a smarty template
• fd#5852 Convert breezy CSS to LESS code
• fd#5854 Improve stand-alone page support
• fd#5858 Review FD UI for disabled fields
• fd#5866 Template filter should work as any type filter
• fd#5924 Add a parameter in objects::link to return text without link
• fd#5931 Use date HTML5 input type for DateAttribute
• fd#5937 Hooks should be moved to a config tab
• fd#5951 main.inc files should not be needed.
• fd#5954 Unicity should be set explicitely
• fd#5955 Use PHP7 array syntax
• fd#5956 Use strict typing
• fd#5965 Use only selectManagement for selection dialogs
• fd#5971 Reorder tabs in the configuration to be more logical
• fd#5973 Clean attributes var in columns
• fd#5977 Special hook attrs are not available to other tabs
• fd#5989 Do not set charset when content-type is not text/* in HTTP headers
• fd#5996 Recovery system needs to give some access to webservice
• fd#6002 Bump PHP_MIN_VERSION to PHP 7
• fd#6052 Manage password with the webservice
• fd#6018 Use autocomplete="new-password" for PasswordAttribute
• fd#6037 rename hooks into triggers
• fd#6040 Make the --install-plugins more friendly
• fd#6047 Improve invalid value messages
• fd#6068 Triggers should not show the command on script error
• fd#6069 Change the css of the alert box to be more in line with the breezy theme
• fd#6071 Rework the error system
• fd#6072 Review dialog classes
• fd#6077 Split tab list load and render
• fd#6083 Improve ObjectsAttribute
• fd#6106 Adapt core code to ease systems interfaces
• fd#6120 Cleanup lock system
• fd#6166 Refactor multiPlugin
• fd#6170 When showing an internal exception not enough detail is shown
• fd#6172 Improve SI error render
• fd#6191 Bump minimum version to PHP 7.3 for 1.4
• fd#6266 CAS library 1.6 need a new parameter
• fd#6267 [Core] - Update the reference from our old tools naming convention to the new ones.
• fd#6268 change the path in the apache configuration to point to /usr/share/fusiondirectory directly
• fd#6283 [PluginManager] objectType is of tasks and should be changed to its own type
• fd#6286 [Core] - Tasks management class should be set outside dashboard

fusiondirectory-plugins

• #3360 update class_sieve.inc to the latest version 0.1.0
• #5776 Openldap Project update ppolicy schema
• #5795 Using the TXT record for SPF and DKIM is not easy
• #5820 Use the new features from PHP 5.6
• #5826 Adapt the code to core changes
• #5860 DHCP there is no sorting in dropdown about DHCP subnets.
• #5865 Set server optional in mail plugin for groups
• #5871 Adapt code to DateAttribute changes
• #5877 Altered and provided attributes should be editable
• #5914 Migrate plugins to new management class
• #5921 Use strict typing
• #5925 Use PHP array short hand syntax
• #5927 Adapt plugins code to DateAttribute modifications
• #5930 Move complex plugins configurations to their own tab
• #5933 Reorder configuration tabs
• #5937 Move away from simpleSelectManagement and associated attributes
• #5989 Remove dependency on POSIX when using Samba4
• #5946 Show description instead of supannCodeEntite in the entities dropdowns
• #5952 Audit minimum date filter should default to current day
• #5967 Support unicode in fdNickName
• #5975 Adapt plugins code to department cache refactor
• #5977 Adapt plugins code to acl_base refactor
• #5987 Review FD UI for disabled fields
• #5990 supannEtablissement field should be multivaluated
• #6007 Migrate FAI plugin to selectManagement
• #6026 Root establishment is not handled correctly
• #6032 SupAnn diploma SISE select has too many options
• #6036 Webservice does not allow search on own dn with self ACLs
• #6039 update the system plugin
• #6041 sort alphabeticaly the type of object in the developper plugin
• #6044 Error when creating entry if default password policy is not directly in ou=ppolicies,dc=domain,dc=tld
• #6059 $displayHeader should be protected
• #6071 Adapt plugins code to dialog classes refactor
• #6077 Adapt plugins code to Lock refactor
• #6096 SupAnn Status tab should appear as «edit own info»
• #6117 Latest FAI test showed that default "aptitude" install method didn't work
• #6154 Cannot select date before today in supannRessourceEtatDate
• #6217 [Plugins] - Update the reference from our old tools naming convention to the new ones.

Removed

fusiondirectory

• fd#6045 Remove simpleSelectManagement and simpleManagement
• fd#6094 Moving rfc2307bis.schema in mixedgroup
• fd#6101 Remove OLD_TEMPLATES macro and related code
• fd#6153 Remove samba domain caching from core
• fd#6254 [Core] - Remove fusiondirectory-insert-schema written in Perl from the branch.
• fd#6255 [Manpages] - Removes Perl manpages from Core
• fd#6280 Remove dashboard completely from FusionDirectory

fusiondirectory-plugins

• #5980 removing puppert plugin from 1.4-dev
• #5981 remove nagios plugin from 1.4-dev
• #5982 remove pop3 service from basic service in mail plugin
• #5983 remove the fusiondirectory-shell
• #5984 Remove the squid plugin from 1.4-dev
• #6003 some attributes are no longer used in plugin mail and should be marqued obsolete in the mail-fd.schema
• #6005 Remove set_object_info call
• #6060 remove the freeradius schema from our sources

Fixed

fusiondirectory

• fd#5177 dans groupes et role, rajouter une icon de propriétée du groupe
• fd#5349 In select management classes the link should not end selection for multi-selection
• fd#5536 When a SelectAttribute is in a SetAttribute it should hide existing values
• fd#5563 Filter for mail groups only filter with posixGroup
• fd#5715 Snapshots are not typed, and no check is done when restoring
• fd#5751 Add the action to use a template in group and roles section
• fd#5754 No defined variables in hook SnapshotCreateDialog
• fd#5818 Groups of groups dynamic tab support
• fd#5831 Fix sonar problems
• fd#5856 Cannot create departements
• fd#5880 Error after config step in setup
• fd#5881 Apply template action is missing
• fd#5882 Unique value generation in templates is broken
• fd#5899 Hide empty sections from template creation
• fd#5907 Error dialogs do not escape HTML from fields
• fd#5912 simpleManagement filters are not displayed correctly
• fd#5919 PHP errors in setup
• fd#5927 When misusing an action, a fatal error is shown
• fd#5934 Using Apply sends the POST to save_object after reopening
• fd#5949 Using base scope in ACL does not work as expected
• fd#5975 Sonar errors in class_dialogAttributes.inc
• fd#5982 Error if the admin DN is not correct when the setup
• fd#5984 fusiondirectory-setup --update-cache does not support abstract class
• fd#5990 We cannot untick the lock in template
• fd#5992 Support default dates for DateFilterElement
• fd#5993 objects::ls does not handle correctly template searches with no attributes specified
• fd#5994 DateAttribute max dates are buggy
• fd#5998 Error when we configure view to contain only 1 column
• fd#6000 CRSF token error in setup when migrating departements
• fd#6008 Crash when locking a user with no password
• fd#6015 Crash at index.php when we already have a session
• fd#6019 PHP error when we apply a template
• fd#6026 PHP error: count(): Parameter must be an array or an object that implements Countable
• fd#6027 Impossible to use createTimestamp as a column in manager interface
• fd#6028 Order of classes is wrong in ACL role edition dialog
• fd#6032 Typos in template masks should be better handled
• fd#6033 Using enter to submit search filter resets base
• fd#6034 Applying a template to a user removes the mail tab
• fd#6035 Template workflow allow an empty SSHA password
• fd#6043 GenericDialogAttribute::addValue($dn, $entry) should be compatible with DialogOrderedArrayAttribute::addValue($value)
• fd#6044 OrderedArrayAttribute action images should have formnovalidate attribute
• fd#6050 SimplePlugin attempts to read CSN from LDAP on dn "new"
• fd#6054 Sonar code smells
• fd#6055 The calendar must be replaced by classic fields in template so we can use macros
• fd#6056 Supann tab in group templates does not accept text values
• fd#6058 Uncaught Error: Class 'URL' not found
• fd#6064 Using %d macro returns "Array"
• fd#6070 Fix quote situation in class_msgPool.inc
• fd#6073 Error about wrong filename using geticon
• fd#6076 Fatal error when applying template with no asked fields
• fd#6075 ACL detection fails for attributes in dynamic tabs
• fd#6078 Attribute option are not handled correctly by simplePlugin
• fd#6079 SelectAttribute takes the wrong default value when optional
• fd#6080 Template fields do not exactly match php-ldap format
• fd#6085 Exception when an attribute used in a template mask is left empty
• fd#6087 check function in simpleTabs should be public
• fd#6088 Logout in cas mode make a redirection error
• fd#6099 $displayHeader is protected but accessed from outside
• fd#6100 Group removal workflow from usertab is inconsistent
• fd#6104 CopyPaste handler does not respect management tabs
• fd#6107 Search does not work on template
• fd#6108 the link in the public form is wrong
• fd#6115 Warning "Array and string offset access syntax with curly braces is deprecated"
• fd#6116 Warning "Cannot use "parent" when current class scope has no parent"
• fd#6121 CompositeAttribute attributes have no parent
• fd#6138 SelectAttribute should also reset postValue in setChoices
• fd#6141 Error from BytesSizeAttribute when the field is empty
• fd#6143 Locks are kept forever
• fd#6144 Uncaught TypeError: Argument 1 passed to htmlescape() must be of the type string, null given
• fd#6146 PHP errors on failed login
• fd#6147 ACL checks for archive and snapshots are wrong
• fd#6148 labels of subattributes are shown in read-only mode for multivalued CompositeAttributes
• fd#6149 ACL on search field are not working as expected
• fd#6151 Management configuration screen is broken for non-admin users
• fd#6154 Size limit configure screen escapes the new limit field
• fd#6155 Icon themes can trigger PHP errors
• fd#6156 After exporting to CSV, button actions export again
• fd#6157 fix reference to the documentation after moving around fusiondirectory documentationin UPGRADE.md and README.md
• fd#6159 Tab update is only called on current tab
• fd#6162 DateAttribute classes should accept LDAP format when set through webservice
• fd#6163 UserPasswordAttribute does not handle correctly clear method in templates
• fd#6165 Attempting to remove array values from a multivaluated attribute through the webservice removes all values
• fd#6171 Class Attribute conflicts with PHP 8 Attribute class
• fd#6174 The bug report generated email references old demo URL
• fd#6180 Action names with numbers breaks management
• fd#6186 Missing html in encrypt-password informations
• fd#6187 HTML validation errors on user edition page
• fd#6188 Invalid value in 'ou' for an object type creates PHP errors in unexpected places
• fd#6210 Updates of Simple Plugin - Call_Hook - variables are not emptied between call.
• fd#6213 [Objects] - ACL do not take LDAP options into consideration
• fd#6226 [Bug] - SimplePlugin - Foreign Key attribute value is never found within a SetAttribute definition.
• fd#6228 [Bug] - SimplePlugin - Foreign Key attribute values are not (always) being updated or deleted.
• fd#6229 [Core] - ACL cache increases delays upon multiple actions on multiple users.
• fd#6243 [Tasks] - When updating time-interval spam protection, the attribute lastExecTime is reset
• fd#6244 SUPANN_DIR not correctly generated
• fd#6245 Some English language updates and corrections [gitlab #75]
• fd#6263 [Core] - Adapts core-fd schema to use the same OID for tasks, mailTemplate
• fd#6264 [Core] - Removes un-required modules from Mail Template and Tasks, such as the Macro plugin.
• fd#6265 [Core] - Fixes some transifex issues
• fd#6276 Error CAS after saving configuration

fusiondirectory-plugins

• #4013 Ppolicy functions that not work
• #5346 DNS postLdapSave should lock the object modified
• #5797 Cyrus autocreate folders does not work correctly with virtdomains = on
• #5985 Using padlock does not set pwdAccountLockedTime and setting pwdAccountLockedTime removes padlock
• #5875 Submit inputs need formnovalidate attribute
• #5887 Multivalue support in CSV import is broken
• #5919 Unicity missing on some SupAnn attributes
• #5920 Attribute::setUnique should not be called with TRUE
• #5950 Return value of SocialAccountAttribute::check() must be of the type array
• #5951 Fix entite_SUPANN labels
• #5953 Add template handling to REST API
• #5958 We should be able to select today as start date in SupAnn status
• #5959 Dropdown for parent entities is always empty in establishments
• #5960 Adapt servicesManagement to changes in SimpleTab interface
• #5961 Trying to postpone user give an error
• #5965 REST API returns empty array instead of empty object
• #5974 PHP error in invitations plugin
• #5995 Fatal error: Declaration of argonautQueue::getTabFooter() must be compatible with management::getTabFooter()
• #5996 CSV import don't see POSIX GROUP templates so we cannot use the CSV to create groups
• #5999 Activate createTimestamp ACL for SupAnn structures
• #6004 fai code needs to be adapted to core changes
• #6008 Removing dns zone not remove the zone for "slave dns"
• #6011 Find a better way to pass array parameter in REST calls
• #6016 Sinaps have continue calls targetting switches
• #6022 Error when we install FD with GPG plugin installed
• #6030 Copy/pasting FAI partitions with lvm fails
• #6031 Deleting a zone should remove DNS tab on systems which have only this zone
• #6033 supannCodeEntite should allow slashes
• #6034 Handle special values for regimeinsc and sectdisc in supannEtuInscription
• #6037 Cannot fill dynamic tabs at ogroup creation
• #6038 Editing SupAnn Status does not work as expected.
• #6046 SupAnn composite attributes do not remove values when last value is removed
• #6048 Deprecated fallback was used for supannStructureExt::is_this_account
• #6054 Crash in FAI plugin
• #6057 Use BytesSizeAttribute for mail quota
• #6061 Adapt plugins code to changes on error system
• #6067 Some plugins build search filters with empty values
• #6082 Webservice does not seem to check lock on objects
• #6084 CodeSniffer 3 is complaining
• #6090 Error while searching DNS Zone 'ARRAY(0x2e3efa0).' :Bad filter at /usr/share/perl5/Argonaut/Libraries/Ldap2zone.pm line 202
• #6091 Webservice should not return invalid JSON even when hitting a fatal error
• #6092 Uncaught TypeError: Argument 1 passed to htmlescape() must be of the type string, null given
• #6094 PHP error "A non-numeric value encountered" in samba tab on templates
• #6095 Archive ACL is wrong on management action
• #6097 SupAnn subscription section smarty template is outdated
• #6105 fix reference to the documentation after moving around fusiondirectory documentationin UPGRADE.md and README.md
• #6106 import OPSI workstation didn't create the new fdNetwork Object
• #6107 an existing hash for sambaNTPassword is removed and replaced by a default hash when th samba tab is added to an existong account with posix enabled
• #6108 PHP error when using askme in SupannCursusAnneeAttribute
• #6110 Webservice behavior is dependent of tab order in JSON
• #6114 Getting fields through webservice on configuration plugins tab returns no fields
• #6118 Editing a FaiTemplate that contains an entry make errors
• #6121 Adapt code to Attribute class renaming
• #6123 the error message is filled with &nbsp in argonaut error message
• #6124 Cannot refresh DNS zone if argonaut client tab is inherited
• #6126 Some webservice actions only works on simplePlugin classes
• #6127 change the wording of "CN of the certificate" in the argonaut plugin because it confuse people
• #6130 Call to undefined method MacsAttribute::getSelectManagementParameters()
• #6131 Argonaut task can be launched without ACL rights
• #6132 the ping send from the action menu said that the systems are always off
• #6138 uidNumber/gidNumber doesn't work when we use the webservice and a template
• #6140 PHP errors in DHCP plugin
• #6143 Setting interfaces through webservice is misbehaving
• #6155 Force gidNumber in posixgroup doesn't work when create from a template
• #6156 Not possible to set host trustmode to another value of disabled in a template
• #6157 Start & End date - verification required - supannRessourceEtatDate
• #6159 Uniformization required for attributes managed by ldap fdTemplate within Posix Classes
• #6202 the behaviour of the samba plugin is not consistent
• #6218 [Webauthn] - Missing icons for this webauthn plugin
• #6221 [Audit] - It seems the audit plugin does not load the icons properly

%FusionDirectory 1.3.1 - 2022-09-09

Added

fusiondirectory

• fd#5985 We don't have LDAP tab on FusionDirectory configuration
• fd#6152 Add subscription screen

fusiondirectory-plugins

• #5911 supannRefId field is missing for "etablissement"
• #5938 Make %passwordClear% available to sambaAccount hooks
• #5939 create icons for ipmi and weblink
• #5940 We don't have LDAP tab on FusionDirectory configuration
• #5956 add mapping sinaps to Fd mapping for diffusion
• #5957 creating icons for the sinaps plugin

Changed

fusiondirectory

• fd#6024 Cleanup session handling
• fd#6038 Move the "Click the 'Edit' button" message to the left
• fd#6220 [CodeStyle] - 1.3.1 Requires adaptation to align code style with 1.4
• fd#6221 [Enhancement] - Change CI 1.3.1 - CodeStyle to refelect 1.4 rules

fusiondirectory-plugins

• #5897 When a user is removed from Sinaps, we need to send back a deletion acquisition
• #5913 Avoid mass acquistion when editing group gidNumber
• #5948 description of a user should'nt be updated from SINAPS
• #5993 _getTabFooter has been renamed getTabFooter
• #6103 Adapt 1.3-fixes code to subscription core merge
• #6180 [CodeStyle] 1.3.1 Plugin - Requires adaptation to align code style with 1.4

Removed

fusiondirectory-plugins

• #5901 Remove Google+ from personal social accounts tab
• #5992 Email icon should be moved to core

Fixed

fusiondirectory

• fd#5862 filtering and "Unknown element type specified: !"
• fd#5942 PHP >= 7.2 triggering error when count() is called with invalid countable
• fd#5967 Systems dashboard crashes
• fd#5974 Workflow problem when applying a template to an object triggers errors
• fd#5978 when renaming branch aka department roles are not updated correctly
• fd#5983 Write ACL on user/userRoles/groupsMembership not working when not having full user/user read right
• fd#5987 ImagickException are not catched when showing an ImageAttribute
• fd#5995 Audit events DN are too long
• fd#5997 Incorrect error message when the mail cannot be sent by recovery
• fd#6005 Problem with gidNumber in posix group template
• fd#6006 expiration date in dashboard is 02.01.1970
• fd#6017 IntAttribute badly handle empty value when minimum is set
• fd#6023 Email icon missing from core
• fd#6030 correct the get help section in the readme.md
• fd#6097 Smarty path is not set correctly by fusiondirectory-setup --write-vars
• fd#6122 Problems with FD web setup
• fd#6142 The filter for configuration is wrong in fusiondirectory-setup
• fd#6173 PHP error: Array to string conversion in class_fiInventory.inc:199
• fd#6222 [1.3.1] - Fixing LDAP Search filter code style

fusiondirectory-plugins

• #5825 LDAP error in audit plugin
• #5912 Unable to spread a user to FD from sinaps if the user is affected to an etablissement
• #5917 flag_ownmailbox cannot be used with partage mail method
• #5918 SINAPS : acquisition couldn't be sent because primary affectation isn't set
• #5923 cname record appear on another domain when they contain the machine cn
• #5935 Crash when I try to create a server with argonaut plugin and without dns plugin
• #5941 Error when identity is spread from SINAPS "Cannot delete non-existing user {LDAPUUID}"
• #5942 Error for user-reminder about smarty
• #5944 add addvalues/delvalues documentation
• #5945 unable to add SINAPS Structure
• #5949 Systems dashboard crashes
• #5963 error in SINAPS workflow
• #5966 dovecot connection error
• #5976 Problem with gidNumber in posix group template
• #5970 Compatibility error between sudo and mixedgroup plugins
• #5978 GPG key addition crash
• #5991 ORCID last character may be 'X' and not a number
• #6000 correct the get help section in the readme.md
• #6063 Argument 4 passed to DhcpHostsAttribute::postLdapSave() must be of the type array, string given
• #6079 reload dns map from dns interface didn't work , but from server it works
• #6125 PHP error: Array to string conversion in class_fiInventory.inc:199

Security

fusiondirectory

• fd#6021 Failed LDAP operations may appear as Success
• fd#6135 Security problems uncovered by audit
• fd#6086 XSS in login screen
• fd#6136 Weak random generator use in fusiondirectory-setup
• fd#6137 XSS in management filters
• fd#6217 [Security] - Set Cookie settings to TRUE for option "HttpOnly"
• fd#6219 [security] - Cookie session is not renewed or set after authentification

%FusionDirectory 1.3 - 2019-03-04

Added

fusiondirectory

• fd#4567 search box suggestions
• fd#4771 extend the search query to email , bis : member objects
• fd#5535 Owner field is missing on group objects
• fd#5626 Add %askme% support for members in groups and roles
• fd#5685 add how to debug fd in the contributing guide
• fd#5697 Add more attributes for times and dates
• fd#5708 Add a way to sort tables
• fd#5734 No ACLs for dashboard
• fd#5738 oGroup not have the ACL for the deployement time frame
• fd#5743 Give more control over snapshot permission
• fd#5745 Special caller* tags should be available in templates as well
• fd#5750 Add the possibility to have a textbox in template to define the manager
• fd#5762 Add hungarian, indonesian, japanese, korean, latvian, turkish, to the available languages
• fd#5826 Add support for date filters
• fd#5834 We cannot use "askme" in BooleanAttribute and SelectAttribute
• fd#5863 adapt fusiondirectory-setup to migrate the supannTypeEntite attribute to contain {SUPANN} prefix
• fd#5885 Add the language Afrikaans (South Africa) (af_ZA) Chinese (Taiwan) (zh_TW)
• fd#5896 Add a generic ObjectLinkAttribute
• fd#5913 Add option to remove download button from FileTextAreaAttribute
• fd#5914 html tag should have a lang attribute
• fd#5926 From and Reply-To headers may have different value in mail_utf8

fusiondirectory-plugins

• #1311 Show in system list which system are on/off
• #2347 Two or more MAC address for a system
• #3549 the sudo plugin doesnt allow to save the sudoNotBefore and sudoNotAfter
• #4387 Improve the sorting of services
• #4807 Import LDIF by pasting into textfield
• #5001 config-option "Store final dot in domains" does not effect SOA-checks for powerdns
• #5166 Add a webservice method to add a value to multi-valuated attributes
• #5176 List in applications tab of roles should be sorted alphabetically
• #5430 template placeHolder
• #5518 Allow the list of record inside the dns zone to be sorted by column
• #5543 Enable mail tab for entries having mail attribute
• #5566 System - DHCP Tab - Sort the list Alphabetically
• #5596 Allow to setup OPSI product outside of profiles
• #5675 Add an boolean attribute "agreement signed"
• #5681 The opsi plugin needs the department management dropdown
• #5700 We should be able to forbid deployments outside of a given time frame
• #5706 Add mixed-groups support to sudo plugin
• #5731 Add a tab in the opsi plugin on a system to show log for this computer
• #5733 Add support for social network ORCID in personal
• #5737 Add last date of connection of a client inside the opsi client tab
• #5738 Add opsi stat tab to the dashboard
• #5739 Add a new field into weblink to store an inventory url
• #5746 Add ACL support to dashboard tabs
• #5749 Use target dn as base for ACL checking in deployment queue
• #5756 Extend manager email possibilities in user-reminder
• #5761 Add catchall table to postfix plugin
• #5763 Add template selection into opsi import
• #5764 When importing OPSI hosts, have an option to import the packages associated
• #5775 Possibility to add/remove values from an attribute through webservice
• #5787 Add an option to inherit profile from group when OPSI tab is activated
• #5789 Posix plugin should prevent save when automatic group cannot be created
• #5791 Add an option to inherit localboots from group
• #5801 Add other source capabilities for supannTypeEntiteAffectation
• #5816 Audit plugin should have a way to select a range of date to show entries
• #5829 Create a SINAPS plugin
• #5830 Add domain alias table in postfix plugin
• #5831 Create a new plugin for adding more information related to Supann Structure
• #5845 Add support for FAI 5 to argonaut-fuse
• #5846 Add vfat as filesystem for FAI partition
• #5847 Add a workaround for dracut that use FQDN for hostname
• #5857 Add an option for multiple release mode in argonaut-fuse service configuration
• #5892 sinaps plugin tab should contain some text
• #5894 Support for SSH ed25519 keys

Changed

fusiondirectory

• fd#4467 We should be able to select the phone number from list
• fd#5569 How create a plugin documentation make reference to plugin class
• fd#5570 Restrict member removal through ACLs
• fd#5583 When editing a user, groups and roles tabs shows membership to groups stored outside the configured groups DN
• fd#5590 All plugins icons are missing
• fd#5671 Redesign login screen and password recovery
• fd#5695 Number input fields are too wide
• fd#5704 Use proper pattern matching instead of GOSA_LINE_BREAK hack
• fd#5713 Groups now ignore subgroups for type-checking to know which tabs should appear
• fd#5723 move how_to_contribute page from the wiki to developper documentation
• fd#5725 Minimum PHP version should be bumped to 5.6
• fd#5752 Allow to define multiple LDAP servers for one location
• fd#5761 The language list in user is not sorted
• fd#5802 FileAttribute through webservice should base64 encode binary data to avoid crashes
• fd#5809 Small weirdness in foreignKey handling
• fd#5838 Change /location by /Directory in contrib/apache/fusiondirectory-apache.conf
• fd#5883 Update the whole copyright to 2018
• fd#5898 Enhance HTML title handling
• fd#5902 User tabs with plSelfModify=FALSE should not show in user menu
• fd#5909 homePhone is not a PhoneNumberAttribute
• fd#5915 "ou" should be labeled "Unit" in user edition
• fd#5917 Remove useless alt attribute on img
• fd#5935 Fatal error due to CRSF security
• fd#5943 Backport LDAP size limit refactor
• fd#5944 It looks like directory does not work on /fusiondirectory in fusiondirectory-apache.conf
• fd#5946 remove no longer needed if section an the php option from fusiondirectory-apache.conf
• fd#5950 Adapt fusiondirectory-setup --encrypt-passwords output to new recommendations

fusiondirectory-plugins

• #5658 Plugins folder should be reorganized to ease packaging
• #5680 In the argonaut dns plugin we need a dropdow for the zone in the argonaut slave part
• #5696 We should remove the files which moved to dev-tools
• #5702 Making the ip non mandatory in the opsi backend plugin when people don 't manage dns and dhcp with opsi
• #5705 Make mandatory IPs a configuration option in the systems plugins
• #5714 Adapt developers plugin to new plugin convention
• #5722 move how_to_contribute page from the wiki to developper documentation
• #5723 Split posix and ppolicy alert email settings
• #5728 Attribute gotoXdmcpServer is single-value in schema but multi-value in FD
• #5735 Viewing the log from the argonaut queue should not be fai dependent
• #5767 systems-fd.schema classes should allow "description" and "l" fields
• #5772 Adapt code to new snapshots ACL system
• #5811 Missing SUBSTR matching rules for DN foreign keys
• #5814 Adapt code to new Language class
• #5835 add other source capabilities for supannEmpCorp
• #5837 More feature switch should be added to mail methods
• #5848 Matching mail suffix between PARTAGE and FD
• #5849 fusiondirectory-plugin-renater-partage : gosaMailAlternateAddress domain suffix domain must be checked
• #5855 Change the partage icon to be the new one
• #5861 Update the whole copyright to 2018
• #5872 Supann labels and attribute type review
• #5885 supannCodeEntiteParent should allow multiple values
• #5893 sinaps plugin should have a main.inc
• #5908 Double check usages of count()

Removed

fusiondirectory

• fd#5714 Method ldap::get_attribute should be removed

Fixed

fusiondirectory

• fd#5565 prepare_save should be able to return errors as well
• fd#5571 Crash when I apply a template
• fd#5637 Web applications are not visible
• fd#5657 Groups within Groups Disappear from UI
• fd#5690 Lots of code styling errors
• fd#5722 I cannot use workstation template
• fd#5729 PHP error in class_groupManagement.inc
• fd#5739 Links to objects might fail
• fd#5742 ACL handling for start/stop/restart service is broken
• fd#5747 Deletion of objects should not treat ACL on each tab separately
• fd#5787 member_of_group should be set before attribute loading
• fd#5788 Failed lock attempt gives misleading error (password method does not support locking )
• fd#5798 Tabs are not working on ogroup templates
• fd#5799 When we rename a department foreignKeys on subobjects DN are not updated
• fd#5810 Foreign key on IMAP server is failing
• fd#5811 UID can be changed from the API
• fd#5817 Unique DN creation may fail for audit plugin
• fd#5819 2-letter locales cannot be used (ar, id, ja, ko, lv, nb, pt)
• fd#5820 HTTP header says "Content-Language: ar"
• fd#5837 Update the contrib/apache/fusiondirectory-apache.conf
• fd#5853 Add button for SetAttribute does not get disabled when linearRendering is FALSE
• fd#5855 dashboard crash if we have system plugin but not argonaut plugin in FD 1.3
• fd#5857 Template cannot fill SetAttributes
• fd#5861 We cannot do a snapshot from an element in locality
• fd#5888 Plugin configuration options are not available through webservice
• fd#5889 Ldap filter parsing issue
• fd#5897 Support for %askme% in BooleanAttribute is broken
• fd#5921 When having ACL rights on subbranches the tree looks funny
• fd#5938 Setup Fatal Error Uncaught UnknownClassException: setupStepConfig
• fd#5940 Error when we open dashboard

fusiondirectory-plugins

• #5344 We should find a way to translate description of sudo options
• #5638 SSH Plugin - Display bug
• #5655 PHP error in OPSI import
• #5670 Lenteur dans le plugin DNS
• #5691 Lots of styling error in the code
• #5693 update the readme.md with new forge informations
• #5701 Result message displayed when triggerring an action is weird
• #5712 Puppet tab creation should be forbidden if there is no server
• #5721 I cannot use workstation template
• #5727 FusionDirectory display an PHP error when I deactivate "opsi client" tab on a workstation
• #5732 FAI log tab is shown as active even if there is no log
• #5742 OPSI tab shows a failure to fetch logs for templates
• #5743 PHP error in argonaut-queue
• #5748 ACL handling for start/stop/restart service is broken
• #5750 Server copy/paste is broken
• #5752 Renaming a workstation with opsi tab creates another workstation with the new name in OPSI
• #5762 Fatal error: Access level to puppetNode::getDisplayHeaderInfos() must be public (as in class simplePlugin)
• #5765 OPSI tab behaves badly when Mac address is empty
• #5769 DNS fields in record add dialog are greyed out when creating a new system
• #5777 Most POSIX group tabs have no icon set
• #5804 Sympa list alias cn cannot contain '@'
• #5808 Foreign key on mail servers are not working
• #5822 Add a check in the renater partage service class, to check that the class of service is correctly written
• #5825 LDAP error in audit plugin
• #5839 dashboard crash if we have system plugin but not argonaut plugin in FD 1.3
• #5841 Error in etablissement::ldap_remove
• #5842 Invalid call to strpos in debconfProfileGeneric
• #5843 In supann-ext plugin there is no check than startDate comes before endDate
• #5881 Audit event creation fails if there is unicode in the dn
• #5883 Deserialization errors are not showed during CSV import
• #5900 Next ID hook feature is broken
• #5898 Correct the missing explanation on _('Entity assignment'), _('supannEntiteAffectation') in the supann plugin
• #5902 In CSV import, importing a new file should not check fields from right part
• #5903 Acquisition to sinaps is not sent if end contract date is empty

%FusionDirectory 1.2.3 - 2018-11-15

Added

fusiondirectory

• fd#5890 hash_equals is not available in PHP 5.4
• fd#5901 Add the pdf with the oid of fusiondirectory in the contrib dir of the core

Fixed

fusiondirectory

• fd#5797 cancel button has no effect (apply template)

fusiondirectory-plugins

• #5870 Supann should not trigger PHP errors on empty lines in nomenclature files

Security

fusiondirectory

• fd#5918 Password recovery does not escape fields in error messages

%FusionDirectory 1.2.2 - 2018-08-16

Added

fusiondirectory-plugins

• #5821 Add LUKS section to FAI disk entry

Changed

fusiondirectory-plugins

• #5836 random_int should be used instead of mt_rand
• #5840 Duplicated value in affiliation file

Fixed

fusiondirectory

• fd#5730 PHP error when I deactivate "opsi client" tab on a workstation
• fd#5789 LDIF import can trigger PHP errors on empty file
• fd#5816 Blacklist is not reset correctly for UserAttribute
• fd#5824 LDIF generation does not respect STARTTLS setting
• fd#5846 Samba groups are not showing in dashboard
• fd#5850 Config insertion LDAP errors from setup are not shown
• fd#5851 Creating a user from a template with a non-existing group crashes
• fd#5864 Name field for countries should be limited to two characters
• fd#5868 HTML is not escaped in departments descriptions

fusiondirectory-plugins

• #5719 Locale issues in the fai plugin
• #5741 Reference tab on the OPSI profile is not showing objects reference
• #5810 WebService should not return session cookie
• #5827 Fatal error in opsiProfile when OPSI server is not found in the LDAP
• #5828 supannCodeEntite should allow uppercase as well
• #5832 Copy/pasting of Samba groups fails
• #5833 Error in supann tab when we use a template

Security

fusiondirectory

• fd#5840 Security Vulnerability: Cross Site Request Forgery
• fd#5842 Security: Missing Security Headers
• fd#5843 Security: Insecure Generation of Random Tokens