·
13 commits
to master
since this release
General fixes and issue cleanup
- #541 - Fixes several reported issues after the daloRADIUS 2.2 beta baseline.
- #545 - Fixes Expiration, session handling, layout, and language-related issues.
- #554 - Adds another round of targeted application fixes.
- #566 - Updates validation handling.
- #592 - Fixes CSRF token validation when deleting NAS records.
- #602 - Fixes row IDs in SQL dump data.
- #603 - Updates the online users report page.
- #606 - Filters ACL fields to avoid invalid
operators_aclentries. - #615 - Adds a collection of smaller fixes across the application.
Installation, Docker, and platform documentation
- #575 - Fixes ownership of the daloRADIUS configuration file in Docker deployments.
- #580 - Updates the installation script.
- #591 - Disables MySQL TLS defaults where they break connectivity.
- #637 - Improves FreeRADIUS Docker initialization on container restart.
- #658 - Fixes a loopback IP typo in
setup/install.sh. - #659 - Improves background process error detection in
setup/install.sh. - #680 - Modernizes the Docker development stack.
- #681 - Creates the
radhuntgrouptable during Docker initialization. - #682 - Configures FreeRADIUS
noresetcounterforMax-All-Sessionsupport. - #690 - Documents Debian 13 installation support.
- #691 - Adds an AlmaLinux installation guide.
Accounting, billing, plans, and proxy/realm management
- #578 - Fixes accounting maintenance deletion for records from a specific day.
- #627 - Improves numeric handling for plan costs and tax values in billing operations.
- #670 - Enables MAC-based search in accounting and login-attempt pages.
- #671 - Fixes plan profile assignment from User Management -> Edit.
- #677 - Fixes proxy and realm management bugs.
Email and notifications
- #579 - Adds support for emailing login credentials.
- #594 - Updates Liran Tal's contact address.
- #642 - Adds configurable email encoding options.
User import and export
- #648 - Fixes MAC/PIN import so it sets the
Auth-Typeattribute correctly. - #649 - Extends CSV import with additional optional fields.
- #662 - Allows all printable characters in passwords during CSV import.
- #685 - Adds a CSV export format compatible with import.
Security hardening
- #652 - Fixes SQL injection, XSS, and ACL bypass vulnerabilities.
- #654 - Fixes disabled-user bypass by setting the disabled group priority to
-1. - #660 - Fixes an SQL injection issue.
- #683 - Updates the vendored HTMLPurifier library.
- #684 - Hardens operator security controls.
- #686 - Enforces group NAS restrictions in FreeRADIUS.
- #689 - Locks disabled-user group priority handling.
Language, portal, and PHP compatibility
- #620 - Updates the MariaDB daloRADIUS schema.
- #632 - Updates the MariaDB schema.
- #655 - Adds German translations for operator and user portals.
- #656 - Aligns user portal language files to the
TotalPayedtranslation key. - #657 - Fixes PHP 8 invoice downloads in the users portal.
- #665 - Fixes a PHP 8 TypeError in the Romanian language file.
Attributes, NAS, huntgroups, and dictionary management
- #663 - Fixes huntgroup list column-name ordering.
- #666 - Allows attributes to be fetched even when no UI helper exists in the dictionary.
- #674 - Refactors NAS management with stricter validation and updated NAS types.
- #678 - Fixes extension dictionary UI errors and adds dynamic attribute values.
Performance and usability
- #604 - Formats expiration dates in New Quick Management.
- #631 - Makes the administrator UI work from a sub-directory.
- #673 - Reduces database CPU spikes from user listing and dashboard loads.
- #687 - Shows a FreeRADIUS restart notice after NAS changes.