LDAP Authentication

Release date 2026/04/07

Feature

• the verify_ldap_host option to validate the LDAP server certificate is now enabled by default.

Bugfix

• Fixed a security issue.

Release date 2025/12/18

Feature

• added support for the tls_certificate_verify global option. When this option is enabled and LDAPS is used, the plugin’s verify_ldap_host or start_tls setting cannot be disabled.

Bugfix

• Fixed an issue where a failed ssl handshake with the ldap server would return 401 instead of 500.

Release date 2025/03/27

Bugfix

• Improved the error message which occurred when an anonymous consumer was configured but did not exist.

Release date 2024/09/11

Bugfix

• Add WWW-Authenticate headers to all 401 responses.

Release date 2023/11/08

Bugfix

• Enhance error responses for authentication failures in the Admin API

Release date 2022/12/06

Feature

• The anonymous field can now be configured as the username of the consumer. This field allows you to configure a string to use as an “anonymous” consumer if authentication fails.

Release date 2022/09/09

Bugfix

• Refactored ASN.1 parser using OpenSSL API through FFI.#8663

Breaking Change

• Updated the priority for some plugins.: ldap-auth changed from 1002 to 1200