x
PSInd.com - mod_psldap - Release Notes
Last Stable Release: 0.90 (17 February 2009)
Version 0.91 (unreleased)
Integrated access from smartphones directly
Mapping to contact locations using your preferred mapping provider
Implementation of registration page shells, and registrant management / classification
Version 0.90 (released 17 February 2009)
More visible and legible status responses
Ability to dial contacts direct with skype, chat via yahoo
Classify and manage vendor contacts
Move contacts across nodes
Fixes to the contact photo presentation
Segregated browser side configuration
Version 0.89 (unreleased)
Fixed lack of recognition of URI search scope in ldap scope execution
Implemented AJAX framework for Mozilla and IE Browsers and integrated with tree based transforms on alt_index.html page.
Creation and integration of a vcard stylesheet - writes text in vcard format to new browser window.
Updated apache module to send XML without specifying stylesheets
Altered existing stylesheets for tree based rendering to allow for node directed processing through JS calls to transform xml nodes.
Update of license terms under the GPL within the distribution.
Version 0.88 (released 12 June 2005)
Fixed load of editable forms for dn's containing an '&'
Addressed minor defect in authorization when psldap authentication is not used.
Addition of scope to URI based search to improve edit form link performance
Addition of links to yahoo, aim, and skype when using the PSInd LDAP objects defined in psldap.schema
Version 0.87 (released 02 May 2005)
Addition of management based tree for person records
Version 0.86 (released 30 April 2005)
Fixed cache access error in Apache 2.0 related code to resolve core dump
Version 0.85 (released 18 April 2005)
Addition of tree based browsing interface with edit frame.
Version 0.84 (released 27 March 2005)
Addition of PsLDAPAuthFilter to allow user to add filters to acquisition of the user record during authentication.
Separation of the disablement of authentication from authorization through the introduction of the PsLDAPEnableAuthz parameter.
Updated user documentation
Version 0.83 (released 24 December 2004)
Changed the main page to be more interactive and have fewer popups
Changed the tabular query response template to show names on org units and orgs as well as their addresses.
Fixed compilation error on Apache 2.X
Addition of switch to connect to LDAP server using V3 protocol through the introduction of the PsLDAPConnectVersion parameter.
Altered UI for creation of new records to pull the default LDAP server from the new index screen.
Fixed menubar styling in the UI
Version 0.82
Implemented handling of multipart/form-data in post responses.
Implemented updates to LDAP backing store with binary data, allowing for the setting of the jpegPhoto field in the inetOrgPerson schema.
Fixed defect in delete handler for ldap records.
XSL/HTML Updates
Updates to sample XSL to add links for editing visible records in table and card view.
Fixed issue with password field in the new user XSL.
Also added field to insert jpegPhoto when editing inetOrgPerson records.
Allowed printing of name in table view XSL when CN is protected by accessing first and last name
Implemented new look and feel for edit form buttons
Set print css for the table view to style for printing
Modified index page for XSL sample interface to create new from an input select. Tweaked the layout of the index as well to make a little more user friendly.
Version 0.81
Changed auth form internal redirect to send 302 response - fixes pages with relative references to other resources and authenticated directory requests.
Version 0.80
Resolved defect with cookie processing on authentication when the server is misconfigured
Fixed minor syntax error in JS example files.
Updated user documentation.
Version 0.79
Improve visual appeal of user interface for web access / updates to LDAP server.
Version 0.78
Adjust DSML_psldap.js to address IE failure to implement importNode - fixes updates to records through DSML_editform.xsl
Version 0.77
Enable processing of parameters sent through both GET and POST to module.
Created mechanism to handle LDAP search, add, modify, and delete operations.
Created DSML generation mechanism to expose new LDAP interface.
Created XSL templates to apply to DSML to facilitate interactions through the new interfaces.
Version 0.76
Fixed directory and server initialization routines - feedback accounted for.
Version 0.75
Fixed directory and server initialization routines - untested.
Version 0.74
Recognized failure to provide credentials as an auth failure, allowing denial after three attempts to authenticate without credentials.
Changed authorization handler to check for existence of user key definition and to decline authorization handling if the key is not defined. Authentication had already been checking this condition. This fixes a crash in the module.
Addition of configuration parameter, PsLDAPEnableAuth to control whether or not A&A is enabled. Set to 'on' by default.
Changed require group parsing to recognize group names with spaces when they are quoted with either single or double quotes. The type of quote used to delineate the group may not be used in the group name.
Version 0.73
Implemented caching array in shared memory leveraging the apache ap_mm APIs.
Addition of caching, controlled by the PsLDAPAuthUseCache parameter, set to off by default
Reuse of existing LDAP connections implemented in acquiring authorization data to improve overall performance in authorization phase.
Addition of PsLDAPAuthCookieDomain. The default is to let the cookie domain default to the server domain
Initialization code has been added for Apache 2.0 (Courtesy Gunter Knauf)
Reorganized code to improve readability of mixed Apache 2.0 and Apache 1.3 compatible implementation
Version 0.72
Addition of cookie based authentication against LDAP server using forms to collect the authentication data.
Made form data accessible to all subrequests by adding it to the subprocess_env table immediately after acquisition.
Addition of ability to recurse up request_rec chain to acquire authentication data
Created mechanism to identify pending changes to current record when ldap records are updated through forms (experimental - not exposed).
Version 0.7
Initial public release, containing the following functionality:
Functions against a secure LDAP server
Does not require administrative access to the LDAP server
LDAP connection configurations can be set within a base URL
Multiple LDAP servers can be utilized for authentication
Management of search scope for identifying user to authenticate
Configurable user, group, and password attribute selection
Allows password comparison in the module or in the LDAP server
Kerberos authentication to the LDAP server
Identifies group membership based on an attribute value in the LDAP record