0.6.14

What's Changed

• postinst should not fail on patch or apparmor update by @dmulder in #258

Full Changelog: 0.6.13...0.6.14

0.6.13

What's Changed

• Don't use sudo in postinst/postrm scripts for deb by @dmulder in #254

Full Changelog: 0.6.12...0.6.13

0.6.12

What's Changed

• Stable 0.6.x backports by @dmulder in #250
  • Match the object ID of the fake user and group
  • PAM should be placed first in the stack

Full Changelog: 0.6.11...0.6.12

0.6.11

What's Changed

• Move sshd config into it's own debian package by @dmulder in #244

Full Changelog: 0.6.10...0.6.11

0.6.10

What's Changed

• Add a sshd soft depends for the deb package by @dmulder in #232
• Rework the poll logic by @dmulder in #234
• Ensure local users are ignored when CN mapping by @dmulder in #236
• Stable 0.6.x fail on bad password by @dmulder in #239
• Hello PIN length and offline fixes by @dmulder in #242

Full Changelog: 0.6.5...0.6.10

0.6.5

What's Changed

• Stable 0.6.x CN Name mapping by @dmulder in #231

Full Changelog: 0.6.4...0.6.5

0.6.4

2024-08-10 - Himmelblau 0.6.4 Patch (Security)

• Newer versions of Rust/LLVM would optimise-out a call to pam_get_user due to a library using const incorrectly on a pointer. This could result in a username not being set with an invalid fall through condition. In some cases this COULD CAUSE UNAUTHENTICATED system access.
  • Affected versions: 0.5.3 through 0.6.1.

What's Changed

• Bug in pam which needs defended against by @dmulder in #221
• Stable 0.6.x Debian packaging fixes by @dmulder in #222

Full Changelog: 0.6.2...0.6.4

0.6.2

What's Changed

• Debian build requires libdbus-1-dev by @dmulder in #198
• libdbus-1-dev deb build dep by @dmulder in #200
• Makefile typo fixes by @dmulder in #202
• Correct installation directory of the deb pam module by @dmulder in #207
• Never return the Pam result from get_user() by @dmulder in #215

Full Changelog: 0.6.0...0.6.2

0.6.0

What's Changed

Added

• Pam option for OpenSSH 2876 workaround: Added a new PAM configuration option to work around OpenSSH issue #2876.
• Debug option: Introduced a new debug option to the configuration.

Fixed

• PAM failure to register Pin following MFA poll: Resolved an issue causing PAM to fail during Pin registration after multi-factor authentication polling.
• PAM echo not displayed via SSH: Fixed an issue where the PAM echo was not properly displayed in SSH sessions.

Changed

• Authorization behavior: Now authorizing all users when pam_allow_groups is left empty.
• Libhimmelblau update: Updated the project to use the latest version of libhimmelblau.

Miscellaneous

• Fork from Kanidm: This version marks the fork from the original Kanidm project.
• README update: Updated the README.md file with new instructions and details.

Full Changelog: 0.5.3...0.6.0

0.5.3

What's Changed

• Stable 0.5.x make install by @dmulder in #193

Full Changelog: 0.5.2...0.5.3

What's Changed

• Add Debian packaging to stable 0.5.x by @dmulder in #187
• Version 0.5.1 by @dmulder in #188
• Add a version check script by @dmulder in #189
• Fix tag push permissions for github tag-version workflow by @dmulder in #190
• Stable 0.5.x make install by @dmulder in #193

Full Changelog: 0.5.0...0.5.3