Release Notes for Open-AudIT v5.4.0

Released 2024-08-26

Linux md5sum: 02b47717c41900ce7938b9c95469ae6f

Linux sha256sum: 8527b43f3b42acc6dc096b30f0240abbba11a70c75b8bb7c3b88c7add1de28ca

Windows: 810ea924568159c6f1e1ce7a1eba2a6f6f9e8cfba75f00b69f5b6bd563743501

 

UPDATE - Re-released as 5.4.0-2 for both Windows and Linux.

Version 5.4.0 brings new authentication methods - OKTA and Entra (Azure AD). As a result, users upgrading who use either Active Directory or openLDAP for logins will need to logon using an Open-AudIT based local account (ie, not an account in Active Directory or openLDAP) to initially upgrade the database. Once done, you can go back to logging on using Active Directory and/or openLDAP accounts. The reason for this inconvenience is that we have renamed the ‘ldap_servers’ collection and database table to ‘auth’.

Numerous bugs have been squashed - see below for more info.

Version

Type

Collection

Description

Version

Type

Collection

Description

Enterprise

New Feature

auth

Allow authentication methods of OKTA and Entra (Azure Active Directory).

Professional

Improvement

dashboards

Disable the RSS feed as the new cloud based confluence does not support this.

Community

Improvement

all

If we detect Open-AudIT is installed on Windows, but not on Server, show a big red warning banner and link to more information. Open-AudIT is not supported on Windows clients (Win 10/11). You must install Open-AudIT on Windows Server (2016 onwards is fine). Obviously discovering and auditing Windows clients work just fine.

Community

Improvement

all

More Help pages added. More FAQ pages added.

Community

Improvement

fields

On the CreateForm and Read page for fields, prevent non alpha-numeric characters being used as the name. In particular ‘space’ is not compatible in a field name.

Community

Improvement

components

Refactor the componentsCollection template to load the table data directly in JS, rather than render the HTML for the table itself. Big performance improvement. IE - requesting 10,000 lines of software now works in under 2 seconds (as least on my hardware). Previously this would timeout. This same patch will be applied to devicesCollection next release.

Professional

Bug

dashboards, widgets

Fix generated URL for graph data so works on Ubuntu Apache.

Community

Bug

devices

Fix path for importing example devices.

Community

Bug

discoveries

When running on Windows, auditing a windows target was failing after (somehow?) some code for ‘net use’ was removed. Fix this and allow for username with no domain in windows credentials without breaking.