Taranac 1.2.1

Added

• Wider vendor coverage for device administration. RADIUS admin-auth
  templates go from 8 to 15 and TACACS+ from 12 to 16, adding MikroTik RouterOS,
  Arista EOS, Aruba CX, Nokia SR OS, H3C/Comware, Ruckus/Brocade ICX and Extreme
  EXOS. The NAC vendor dictionary gains Extreme EXOS and Ruckus ICX as 802.1X
  authenticators (both with CoA port bounce), and the mislabelled "Aruba" entry
  is split into Aruba AOS-CX / Controllers and a distinct HP ProCurve. New
  built-in vendors now also reach an existing install on upgrade, without
  overwriting anything you edited.
• Readable FortiGate command accounting. FortiGate reports only a category
  word (Config, Show, Diagnose, Execute) in the command field and puts the actual
  command elsewhere, so command accounting from a FortiGate was near-useless.
  Records from a FortiGate now show the real command, in both the log views and
  the syslog export.
• Oversized device configurations are tracked instead of failing. A text
  configuration larger than a configurable threshold is now recorded as a
  version — its change is still detected and dated — without storing the body.
  The configuration page and the version timeline say so plainly, rather than
  showing an empty diff. Large binary artefacts and very large text captures
  also no longer fail the whole collection.
• Capture limits are now settings. Three system settings replace hard-coded
  ceilings — the size past which text is stored by hash only, the largest text a
  capture will buffer, and the largest binary it will download — so an install
  that legitimately needs more can raise them.
• Word wrap in the full configuration view. The diff had a word-wrap control
  and the full-text view did not; it now has the same one, and the preference
  carries across both views.
• Taranac Push MFA is available again. The provider card is configurable and
  enrollable once more, marked "Soon" while the mobile app rolls out.
• LDAP configurations show up under an RBAC model's "Used By". A model
  referenced by an LDAP configuration's default role or a group override was
  invisible to the where-used view and could be deleted, leaving a dangling
  reference. It is now listed and deletion is blocked until the reference is
  removed, matching how groups already behave.

Changed

• Large configurations open instantly. Viewing the full text of a
  configuration with tens of thousands of lines used to freeze the tab; the view
  is now windowed and opens immediately at any size.
• Much lighter page loads across the UI. Forms and detail pages no longer
  pull whole catalogues just to show the name of something you already selected —
  users, groups, TACACS+ and RADIUS profiles, NCM credentials, sources, recipes
  and configurations, LDAP RBAC assignments and the report builder all read those
  names from the payload and pick through a server-searched drawer instead.
  Opening an NCM configuration drops from about 27 requests and 37 MB to about 5
  requests and 2.5 MB. This also removes a silent limit: those catalogue fetches
  capped out at 100 entries, so past that the picker quietly hid the rest.
• A too-large capture is reported as such, not retried. It used to be
  classified as a transient error, which spent the full retry budget — three
  extra device logins per configuration, every sweep — and told the operator a
  size problem was a network problem. It now fails immediately and names the
  setting to raise.

Fixed

• Daemon configuration is re-checked against the current version at startup.
  The reload skip-gate added in 1.2.0 watches for data changes, so after an
  upgrade that changed how a configuration is generated the new configuration was
  not deployed until some unrelated data change or a manual Reload. Each daemon
  now reconciles its on-disk configuration once per boot.
• "Sources" is highlighted in the NCM sidebar. It was the one NCM settings
  page routed outside /ncm/settings, so the section never expanded for it on a
  page refresh. Old bookmarks redirect to the new path.
• The PKI certificates page no longer loads twice. Selecting a CA fired two
  identical requests for the certificate list.