Skip to content
This repository was archived by the owner on Oct 30, 2026. It is now read-only.

v2.0.0

Choose a tag to compare

View all tags
@MegaManSec MegaManSec released this 30 Oct 17:17
Immutable release. Only release title and notes can be modified.
v2.0.0
0ea506e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Breaking changes

  • LDAPS verifies the server certificate and that it matches the host name or IP address in LDAP_WATCHDOG_SERVER (#2). For a private CA, set LDAP_WATCHDOG_CA_CERTS_FILE, which can also be the server's own self-signed certificate. To connect without verifying, as 1.0.0 did, set LDAP_WATCHDOG_TLS_VERIFY=false (#4).
  • A failed bind or search no longer reports every entry as deleted: it is retried on the next poll, and at startup the process exits (#2).
  • Python 3.10 is required (#3).
  • install.sh installs the clone it is run from, with the dependency versions pinned in requirements.txt, and restarts the service, so rerunning it upgrades an installation (#3).

Fixes

  • All result pages are retrieved, binary and multivalued attributes are kept, and conditional filters no longer change the stored snapshot (#2).
  • Network waits are bounded by LDAP_WATCHDOG_NETWORK_TIMEOUT, Slack failures are reported, and long Slack messages are truncated quickly while keeping the changed entry in the header (#2).
  • Requires pyasn1 0.6.4 (CVE-2026-59884, CVE-2026-59885, CVE-2026-59886) and, for Slack, requests 2.33.0 (GHSA-9hjg-9r4m-mvj7, GHSA-gc5v-m9x4-r6x2) (#3).
  • README images and links work on PyPI (#4).
Assets 3
Loading