Topics
Release summary for v1.4.1
- debug_ldap_client - handle failures when attempting to get the krb5 context and default CCache rather than fail with a traceback
Prepare for v1.4.0 release
- Make
name
an optional parameter for the AD modules. Eithername
oridentity
needs to be set with their respective behaviours. If creating a new AD user and onlyidentity
is set, that will be the value used for the name of the object. - Set minimum supported Ansible version to 2.14 to align with the versions still supported by Ansible.
- object_info - Add ActiveDirectory module import
release summary for v1.3.0
- AD objects will no longer be moved to the default AD path for their type if no
path
was specified. Use the valuemicrosoft.ad.default_path
to explicitly set the path to the default path if that behaviour is desired. - microsoft.ad.ldap - Added the option
filter_without_computer
to not add the AND clauseobjectClass=computer
to the final filter used - ansible-collections#55
- Added the missing dependency
dpapi-ng
to Ansible Execution Environments requirements file for LAPS decryption support - Ensure renaming and moving an object will be done with the
domain_server
anddomain_username
credentials specified - ansible-collections#54 - Fix up
protect_from_deletion
when creating new AD objects - ansible-collections#47 - Fix up date_time attribute comparisons to be idempotent - ansible-collections#57
- microsoft.ad.user - Ensure the
spn
diff after key isspn
and notkerberos_encryption_types
- microsoft.ad.user - treat an expired account as a password that needs to be changed
Release summary for v1.2.0
- microsoft.ad.debug_ldap_client - Add
dpapi_ng
to list of packages checked - microsoft.ad.ldap - Add support for decrypting LAPS encrypted password
- microsoft.ad.ldap - Allow setting LDAP connection and authentication options through environment variables - ansible-collections#34
- Deprecating support for Server 2012 and Server 2012 R2. These OS versions are reaching End of Life status from Microsoft and support for using them in Ansible are nearing its end.
- group - Fix idempotency check when
scope: domainlocal
is set - ansible-collections#31 - microsoft.ad.group - ensure the
scope
andcategory
values are checked as case insensitive to avoid changes when not needed - ansible-collections#31
This release includes the new microsoft.ad.ldap
inventory plugin which can be used to generate an Ansible
inventory from an LDAP/AD source.
- microsoft.ad.user - Fix setting
password_expired
when creating a new user - ansible-collections#25
- as_datetime - Converts an LDAP value to a datetime string
- as_guid - Converts an LDAP value to a GUID string
- as_sid - Converts an LDAP value to a Security Identifier string
- ldap - Inventory plugin for Active Directory
- debug_ldap_client - Get host information for debugging LDAP connections
This is the first release of the microsoft.ad
Ansible collection which contains modules that can be used to managed a Microsoft Active Directory environment.