LDAP Account Manager (LAM)
Secrets & CredentialsWeb frontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory.
Features
- Web frontend for managing LDAP directory entries
- Simplifies LDAP management for non‑technical users
- Provides an integrated LDAP browser for advanced editing
Recent releases
View all 7 releases →
9.5.2
Bugfix
Notable features
- PowerDNS, BindDynDb, and Bind DLZ wildcard DNS record support
Full changelog
- LAM Pro:
- Support wildcard DNS records for PowerDNS, BindDynDb and Bind DLZ (647)
- Fixed bugs:
- Windows/Windows LDS users: unable to create account if default profile has no groups selected
- Custom fields: fixed loading of server profile
- Dynamic user filtering fails after first character (646)
9.5.1
Bugfix
Fixed 500 errors loading server and self-service profiles with null values.
Full changelog
- Fixed bugs:
- Docker Environment variable LAM_DISABLE_TLS_CHECK breaks container start (635)
- Self-service: password change reports error message
- Loading server profile and self-service profile with null values results in 500 error page
9.5
Breaking risk
Breaking changes
- PHP 8.2 or higher required
- Old license key format no longer supported
Security fixes
- CVE-2026-27894: Authenticated Local File Inclusion in PDF export
- CVE-2026-27895: Incorrect regex in PDF export allows file upload
Notable features
- Show failed password policy rules
Full changelog
- PHP 8.2 or higher required (421)
- Show failed password policy rules (526)
- Docker: use Debian 13 as base image (460)
- Docker: run as non-root (544)
- Fixed bugs:
- Fix CVE-2026-27894: Authenticated Local File Inclusion (LFI) in PDF export (high, GHSA-w7xq-vjr3-p9cf)
- Fix CVE-2026-27895: Incorrect regular expression in PDF export component allows to upload files of any type (moderate, GHSA-88hf-2cjm-m9g8)
- LAM Pro:
- Old license key format is no longer supported. You are only affected if your license key section on our website contains a "Old format" entry. (295)
- Removed deprecated cron.sh and cronGlobal.sh (please use runCronJobs.sh) (519)
- White pages: removed login button for profiles that allow anonymous access (556)
- White pages: use first text column or title for default sorting, allow to specify custom sort field (557)
- email2SMS: allow to specify subject text (465)
9.4
Breaking risk
Breaking changes
- Main configuration and server profiles require latest file format (introduced in 9.0)
Notable features
- White pages interface for non-technical users
- SMS sending via email2SMS providers
Full changelog
- Main configuration and server profiles require latest file format (introduced in 9.0) (389)
- LAM Pro:
- White pages: new simplified LAM interface for non-technical users to access e.g. contact and group information
- SMS sending can be done with email2SMS providers (465)
- PowerDNS: save auto-PTR entries under reverse domain (478)
- Fixed bugs:
- Unix: $group wildcard is evaluated too early (480)
- Custom scripts: error on postModify for CSV file upload (517)
- Windows: Force password change not applied on password change (511)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
