LDAP Account Manager (LAM) releases

9.5.2 Bugfix · 2mo

Notable features

• PowerDNS, BindDynDb, and Bind DLZ wildcard DNS record support

Full changelog

• LAM Pro:
  • Support wildcard DNS records for PowerDNS, BindDynDb and Bind DLZ (647)
• Fixed bugs:
  • Windows/Windows LDS users: unable to create account if default profile has no groups selected
  • Custom fields: fixed loading of server profile
  • Dynamic user filtering fails after first character (646)

View release on GitHub

9.5.1 Bugfix · 2mo

Fixed 500 errors loading server and self-service profiles with null values.

Full changelog

• Fixed bugs:
  • Docker Environment variable LAM_DISABLE_TLS_CHECK breaks container start (635)
  • Self-service: password change reports error message
  • Loading server profile and self-service profile with null values results in 500 error page

View release on GitHub

9.5 Breaking risk · 2mo

Breaking changes

• PHP 8.2 or higher required
• Old license key format no longer supported

Security fixes

• CVE-2026-27894: Authenticated Local File Inclusion in PDF export
• CVE-2026-27895: Incorrect regex in PDF export allows file upload

Notable features

• Show failed password policy rules

Full changelog

• PHP 8.2 or higher required (421)
• Show failed password policy rules (526)
• Docker: use Debian 13 as base image (460)
• Docker: run as non-root (544)
• Fixed bugs:
  • Fix CVE-2026-27894: Authenticated Local File Inclusion (LFI) in PDF export (high, GHSA-w7xq-vjr3-p9cf)
  • Fix CVE-2026-27895: Incorrect regular expression in PDF export component allows to upload files of any type (moderate, GHSA-88hf-2cjm-m9g8)
• LAM Pro:
  • Old license key format is no longer supported. You are only affected if your license key section on our website contains a "Old format" entry. (295)
  • Removed deprecated cron.sh and cronGlobal.sh (please use runCronJobs.sh) (519)
  • White pages: removed login button for profiles that allow anonymous access (556)
  • White pages: use first text column or title for default sorting, allow to specify custom sort field (557)
  • email2SMS: allow to specify subject text (465)

View release on GitHub

9.4 Breaking risk · 5mo

Breaking changes

• Main configuration and server profiles require latest file format (introduced in 9.0)

Notable features

• White pages interface for non-technical users
• SMS sending via email2SMS providers

Full changelog

• Main configuration and server profiles require latest file format (introduced in 9.0) (389)
• LAM Pro:
  • White pages: new simplified LAM interface for non-technical users to access e.g. contact and group information
  • SMS sending can be done with email2SMS providers (465)
  • PowerDNS: save auto-PTR entries under reverse domain (478)
• Fixed bugs:
  • Unix: $group wildcard is evaluated too early (480)
  • Custom scripts: error on postModify for CSV file upload (517)
  • Windows: Force password change not applied on password change (511)

View release on GitHub

9.3 Security relevant · 8mo

Security fixes

• XSS in profile editor (CVE-2025-58174)

Notable features

• SMS support for password sending and self-reset
• Tree view comparison feature

Full changelog

• New translation: Greek
• Tree view: added comparison feature (440)
• Windows: added logon hours (457)
• Lamdaemon: run /usr/sbin/userdel.local before (and no longer after) home directory is deleted (443)
• LAM Pro:
  • SMS support for password sending and password self-reset (441)
  • Self-Service: clear PPolicy "pwdReset" on password change if needed (448)
• Fixed bugs:
  • WebAuthn: 2-factor verification failed: Unable to load the data (453)
  • Random password generator does not respect server profile rules (458)
  • XSS in profile editor (low, CVE-2025-58174)

View release on GitHub

9.2 New feature · 0y

Notable features

• TAK support added
• Active Directory deleted entry restore

Full changelog

• PHP 8.4 compatibility
• TAK support added
• Active Directory: allow to restore deleted entries in tree view (415)
• Multi-edit tool: change operations are combined by DN to allow e.g. adding object classes with required attributes (408)
• Windows users: support thumbnail images (needs to be activated in server profile) (431)
• Tree view: better editing of olcAccess (420)
• LAM Pro:
  • Custom scripts: split config by account type (409)
• Fixed bugs:
  • Unix: profile editor for users not working (418)
  • Custom fields: problems with deleting facsimileTelephoneNumber (419)
  • Cannot add user (windowsUser) to group (windowsGroup) (444)

View release on GitHub