From e25d11278703e96f91cc8a9852c78535a898402f Mon Sep 17 00:00:00 2001 From: William Mantly Date: Thu, 30 Jul 2026 09:53:39 -0400 Subject: [PATCH] Release 1.19.0: bump submodules, add ldap-test-host fixture sso-manager-node -> v1.9.0, proxy -> v1.8.0, jump-host -> v1.10.2, ldap-client -> v1.0.0 (new) --- CHANGELOG.md | 47 +++++++++++++++++++++++++++++++++++++++++++++++ jump-host | 2 +- proxy | 2 +- sso-manager-node | 2 +- 4 files changed, 50 insertions(+), 3 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 9040f02..74d7061 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -10,6 +10,53 @@ for what changed inside the apps it composes. ## [Unreleased] +## [1.19.0] - 2026-07-30 + +### Added +- **New `ldap-client` submodule + `ldap-test-host` service** (`jump-host` compose profile): a real SSSD + AuthorizedKeysCommand LDAP-joined downstream host for testing jump-host's actual key-injection -> upstream-connect flow end-to-end against this stack's own local LDAP, instead of a container with a manually-dropped public key in `authorized_keys`. Verified live (SSH CLI and WinSCP) through jump-host's `uid_-_target` grammar. + +#### ldap-client — [v1.0.0](https://github.com/theta42/ldap-client/releases/tag/v1.0.0) (first tagged release) + +##### Added +- Docker test fixture (`Dockerfile` + `entrypoint.sh`): Ubuntu 22.04 + sssd + sshd, no systemd required. + +##### Fixed +Building that fixture surfaced three real bugs that would break login on any deployment, not just the test fixture: +- `sssd.conf.mo` used `ldap_bind_dn`/`ldap_bind_pw`, which aren't real SSSD options — corrected to `ldap_default_bind_dn` / `ldap_default_authtok(_type)`. +- `sssd.conf.mo` had no explicit `services =` list, so SSSD started only its backend, never the nss/pam responders — `getent passwd ` silently failed even with the domain reachable. +- `ldap-ssh-key.sh`'s `memberof` filter was missing the `cn=` prefix on the group name, so the AuthorizedKeysCommand script always returned zero keys for a correctly-provisioned user — no error, just silently nothing. + +#### sso-manager-node — [v1.9.0](https://github.com/theta42/sso-manager-node/releases/tag/v1.9.0) + +##### Added +- Directory modal's Associated LDAP Groups tab now supports full membership management: view, add, and remove members/owners of each associated group directly from the tab. +- `app.util.revealItem()` (shared `app-base.js`): scrolls a just-added/-edited element into view and flashes its background. + +##### Changed +- Groups page's search/sort bar is now sticky while scrolling. +- Directory table: Kind/Name/Env/Host merged into a single "Resource" column. + +#### proxy — [v1.8.0](https://github.com/theta42/proxy/releases/tag/v1.8.0) + +##### Added +- Users backed by SSO/OIDC login are now marked "External (SSO)" and read-only (password-change hidden client-side, `PUT /password/:username` rejects with 403 server-side). Redis user-backend only. + +##### Changed +- All pages now wrap their content in a standard-width container, matching sso-manager-node instead of rendering full-bleed. +- Users and Permissions pages converted from bare ``s to the card-grid convention already used on the Groups page. + +#### jump-host — [v1.10.2](https://github.com/theta42/jump-host/releases/tag/v1.10.2) + +##### Changed +- Dashboard, Sessions, and Audit pages now match sso-manager-node/proxy's page width. +- Audit's nav entry is now admin-gated (`groups: ['admin']`). + +### Bumped +- sso-manager-node -> [v1.9.0](https://github.com/theta42/sso-manager-node/releases/tag/v1.9.0) +- proxy -> [v1.8.0](https://github.com/theta42/proxy/releases/tag/v1.8.0) +- jump-host -> [v1.10.2](https://github.com/theta42/jump-host/releases/tag/v1.10.2) +- ldap-client -> [v1.0.0](https://github.com/theta42/ldap-client/releases/tag/v1.0.0) (new submodule) + ## [1.18.0] - 2026-07-28 ### Changed diff --git a/jump-host b/jump-host index 6771904..bd4464e 160000 --- a/jump-host +++ b/jump-host @@ -1 +1 @@ -Subproject commit 6771904932340d027336760abc1c244f085bb224 +Subproject commit bd4464ed19d4c897968baa40e4e899d2572142cd diff --git a/proxy b/proxy index 3f2ef57..2bfba93 160000 --- a/proxy +++ b/proxy @@ -1 +1 @@ -Subproject commit 3f2ef57c781a93b3596c16fb8bb44a4fa926b13f +Subproject commit 2bfba93e0064dbc0272b05d5d4f6c4cf254cf9f1 diff --git a/sso-manager-node b/sso-manager-node index 724f5d8..6c71c91 160000 --- a/sso-manager-node +++ b/sso-manager-node @@ -1 +1 @@ -Subproject commit 724f5d8496140b4216366359624c635e5aa77047 +Subproject commit 6c71c91ff6c2819d9f5ef9e775711d3269f42d9a