Skip to content

Latest commit

 

History

History
127 lines (83 loc) · 4.08 KB

CHANGELOG.rst

File metadata and controls

127 lines (83 loc) · 4.08 KB

Ansible Microsoft Active Directory Release Notes

Release summary for v1.4.1

  • debug_ldap_client - handle failures when attempting to get the krb5 context and default CCache rather than fail with a traceback

Prepare for v1.4.0 release

  • Make name an optional parameter for the AD modules. Either name or identity needs to be set with their respective behaviours. If creating a new AD user and only identity is set, that will be the value used for the name of the object.
  • Set minimum supported Ansible version to 2.14 to align with the versions still supported by Ansible.
  • object_info - Add ActiveDirectory module import

release summary for v1.3.0

  • AD objects will no longer be moved to the default AD path for their type if no path was specified. Use the value microsoft.ad.default_path to explicitly set the path to the default path if that behaviour is desired.
  • microsoft.ad.ldap - Added the option filter_without_computer to not add the AND clause objectClass=computer to the final filter used - ansible-collections#55
  • Added the missing dependency dpapi-ng to Ansible Execution Environments requirements file for LAPS decryption support
  • Ensure renaming and moving an object will be done with the domain_server and domain_username credentials specified - ansible-collections#54
  • Fix up protect_from_deletion when creating new AD objects - ansible-collections#47
  • Fix up date_time attribute comparisons to be idempotent - ansible-collections#57
  • microsoft.ad.user - Ensure the spn diff after key is spn and not kerberos_encryption_types
  • microsoft.ad.user - treat an expired account as a password that needs to be changed

Release summary for v1.2.0

  • microsoft.ad.debug_ldap_client - Add dpapi_ng to list of packages checked
  • microsoft.ad.ldap - Add support for decrypting LAPS encrypted password
  • microsoft.ad.ldap - Allow setting LDAP connection and authentication options through environment variables - ansible-collections#34
  • Deprecating support for Server 2012 and Server 2012 R2. These OS versions are reaching End of Life status from Microsoft and support for using them in Ansible are nearing its end.
  • group - Fix idempotency check when scope: domainlocal is set - ansible-collections#31
  • microsoft.ad.group - ensure the scope and category values are checked as case insensitive to avoid changes when not needed - ansible-collections#31

This release includes the new microsoft.ad.ldap inventory plugin which can be used to generate an Ansible inventory from an LDAP/AD source.

  • as_datetime - Converts an LDAP value to a datetime string
  • as_guid - Converts an LDAP value to a GUID string
  • as_sid - Converts an LDAP value to a Security Identifier string
  • ldap - Inventory plugin for Active Directory
  • debug_ldap_client - Get host information for debugging LDAP connections

This is the first release of the microsoft.ad Ansible collection which contains modules that can be used to managed a Microsoft Active Directory environment.