Apache Syncope Changelog

What's new in Apache Syncope 2.1.1

Aug 20, 2018
  • Bug:
  • [SYNCOPE-1331] - ExternalResourcePropagationAction is too long name for a table in Oracle DB
  • [SYNCOPE-1333] - Missing virtual attribute value in case of type extension
  • [SYNCOPE-1334] - Maven install problem with Apache Syncope 2.1.0
  • [SYNCOPE-1335] - Missing SQL statements when upgrading from 2.0 Jazz
  • [SYNCOPE-1337] - Password history policy is not enforced on salted passwords
  • [SYNCOPE-1338] - Double type conversion applied during pull leads to errors
  • [SYNCOPE-1339] - Enduser spinner does not apply to the whole page
  • [SYNCOPE-1340] - Cannot update membership attribute
  • [SYNCOPE-1342] - console UI login form ignores Domain selection
  • [SYNCOPE-1343] - Attributes are not reset after pull of null values
  • [SYNCOPE-1344] - CORE_SCHEME not being updated in enduser.properties
  • [SYNCOPE-1346] - Adding a new task while re-executing a propagation task
  • [SYNCOPE-1347] - Invocation Problem calling org.apache.syncope.installer.processes.ArchetypeProcess
  • [SYNCOPE-1350] - Date values not formatted according to the conversion pattern
  • [SYNCOPE-1352] - Group wizard doesn't update the plain attributes
  • [SYNCOPE-1353] - DBPasswordPropagationActions link in the reference guide is wrong
  • [SYNCOPE-1354] - Push Tasks do not send status onto External Resources
  • [SYNCOPE-1356] - LDAPMembershipPullActions does not remove memberships
  • [SYNCOPE-1357] - MemoryVirAttrCache not working
  • [SYNCOPE-1358] - Search by boolean value does not work from Admin Console
  • New Feature:
  • [SYNCOPE-1348] - REST: replace bulk operations with batch requests
  • Improvement:
  • [SYNCOPE-1336] - Add pagination for approvals forms
  • [SYNCOPE-1341] - Domain should be configurable parameter for syncope-enduser docker image

New in Apache Syncope 1.2.3 (Mar 24, 2015)

  • Bug:
  • [SYNCOPE-638] - MAttrTemplate and RAttrTemplate sequence values are not managed in content.xml
  • [SYNCOPE-639] - Notification 'recipientAttrType' and 'recipientAttrName' are not required
  • [SYNCOPE-641] - Concurrency issues with multiple client threads
  • [SYNCOPE-643] - WorkflowResult provides unmodifiable collection for performed tasks
  • [SYNCOPE-644] - Error during synchronization of roles when using a RoleSchema as accountId
  • [SYNCOPE-647] - Problem during propagation of an updated membership on a resource
  • [SYNCOPE-649] - Paged lists not working properly
  • Improvement:
  • [SYNCOPE-634] - performance optimization for content loading
  • [SYNCOPE-640] - Allow MariaDB to be chosen with installer
  • [SYNCOPE-645] - Provide validation error message when add a role attribute in a user mapping as accountId
  • [SYNCOPE-646] - Do not propagate password if not explicitely requested
  • [SYNCOPE-648] - Notification Configuration: missing some labels in events
  • [SYNCOPE-651] - SyncopeUser:checkToken() should fail if token is not set on user
  • Task:
  • [SYNCOPE-633] - Add support for MariaDB
  • [SYNCOPE-635] - Upgrade CSVDir connector bundle dependency version

New in Apache Syncope 1.2.0 M1 (Sep 15, 2014)

  • What's new:
  • GUI installer:
  • Apache Syncope finally provides a simple way to create and maintain a custom project, configure some properties - like as the RDBMS for internal storage - and deploy to one of supported Java EE containers.
  • DEB packages :
  • .deb packages are available for easy deployment on Debian GNU / Linux and Ubuntu.
  • Workflow:
  • Besides the XML editor available since previous versions, a new graphical editor based on Activiti Modeler is now provided, allowing easier workflow management from within the Syncope web admin console.
  • Activiti is also supported to its latest version 5.16.2.
  • REST:
  • After making the non-standard Spring-MVC interface deprecated in 1.1.0, the RESTful interface has been extensively improved:
  • JAX-RS 2.0 via Apache CXF 3.0
  • JAX-RS search via Feed Item Query Language
  • Support for Prefer header
  • Support for ETag header
  • Returning error information via X-Application-Error-Code and X-Application-Error-Info
  • Live documentation, dynamically generated from WADL
  • Java client library
  • External resource management:
  • Fine-grain control over the relationship among internal entities (say users) and external accounts: (un)link, (un)associate, (de)provision
  • Pass-through authentication: flexible authentication of Syncope REST services and admin console against internal storage or one of connected resources
  • Support for synchronizing and propagating non-cleartext values - allowing to manage encrypted passwords from external resources
  • ConnId 1.4.0.0
  • Other:
  • Various notification improvements
  • Support for binary and encrypted values - either for users, roles and memberships
  • Logback replaced by Apache Log4j 2 with its insane performance
  • Improvement:
  • [SYNCOPE-15] - Manage creator, lastmodifier and approvers information about each SyncopeUser bean
  • [SYNCOPE-131] - Assign membership and role schemas to either all memberships / roles or only some memberships / roles
  • [SYNCOPE-132] - Don't expose some REST list methods for anonymous
  • [SYNCOPE-133] - Add UserRequestController.execute() that will execute the provided UserRequest and remove it on success
  • [SYNCOPE-145] - Configurable user request approval
  • [SYNCOPE-149] - Easier and cleaner way to override REST methods
  • [SYNCOPE-151] - Document RESTful services
  • [SYNCOPE-153] - Use logback-audit
  • [SYNCOPE-290] - Typed SyncopeConf
  • [SYNCOPE-298] - Persistence beans: change AUTO Id generation strategy to TABLE
  • [SYNCOPE-300] - Supporting Feed Item Query Language (FIQL)
  • [SYNCOPE-303] - Mapping to SyncopeClientCompositeException on client side
  • [SYNCOPE-304] - Mapping low level exceptions in core
  • [SYNCOPE-313] - Support synchronizing non-cleartext passwords from external resources
  • [SYNCOPE-359] - Ignore propagation if no schema mapping is provided
  • [SYNCOPE-362] - Disable mapping tab when the underlying connector does not support correspondent ObjectClass
  • [SYNCOPE-374] - SyncopeUser tokens do not use secure random strings
  • [SYNCOPE-390] - Default Reportlets improvements
  • [SYNCOPE-391] - Make password management optional
  • [SYNCOPE-392] - Full reconciliation from syncope to resource
  • [SYNCOPE-393] - Resource unlink
  • [SYNCOPE-395] - Role Reportlet
  • [SYNCOPE-402] - Inconsistent status of user edit form after exception returned by bad propagation on primary resource
  • [SYNCOPE-403] - Enrich PropagationStatusTO to report possible propagation exception message
  • [SYNCOPE-405] - Replace logback with log4j 2
  • [SYNCOPE-406] - Invoke bean validation via JPA entity listener
  • [SYNCOPE-407] - Add claim for user requests and trace user request history into SyncopeUser bean
  • [SYNCOPE-408] - Add index on task.executed
  • [SYNCOPE-409] - Allow notifications with empty about field
  • [SYNCOPE-410] - Make username pattern configurable via account policy
  • [SYNCOPE-411] - Perform retries on failed notifications
  • [SYNCOPE-413] - Clean activiti history for unused variables
  • [SYNCOPE-415] - Reduce log level of bean validation errors
  • [SYNCOPE-416] - AttributableSearchDAOImpl / Avoid query construction with string concatenation
  • [SYNCOPE-420] - Provide user / role pre-processing mechanism
  • [SYNCOPE-421] - Provide an attribute value pre-processing mechanism
  • [SYNCOPE-422] - Improve audit info
  • [SYNCOPE-424] - Resolve OpenJPA dependency overlap
  • [SYNCOPE-425] - Further REST refactoring
  • [SYNCOPE-427] - Add CSV report format
  • [SYNCOPE-428] - Provide resource link, associate and provision independent features
  • [SYNCOPE-429] - Support ETag-based conditional requests for users and roles
  • [SYNCOPE-430] - Support returning no content after create / update
  • [SYNCOPE-431] - Provide debug logging for controller methods' input and output
  • [SYNCOPE-432] - Replace role action labels with icons
  • [SYNCOPE-438] - Provide values for ConnId's APIConfiguration via ConnInstance entities
  • [SYNCOPE-439] - Embed Activiti modeler for graphical workflow editing
  • [SYNCOPE-441] - Index on Activiti table boosts overall performance
  • [SYNCOPE-442] - Use cached virtual attribute values with offline resources
  • [SYNCOPE-443] - Use WebJars to avoid including 3rd party JS and CSS files
  • [SYNCOPE-444] - Notification: improve 'selfAsRecipient' management
  • [SYNCOPE-445] - Provide a text field to specify whatever notification recipient
  • [SYNCOPE-446] - Notification: let admins specify "About" for roles
  • [SYNCOPE-447] - Provide the ability to have a single (cumulative) notification for task execution
  • [SYNCOPE-450] - Support JAX-RS 2.0
  • [SYNCOPE-460] - Default datasource uses BasicDataSource
  • [SYNCOPE-461] - Use BeanValidation 1.1 with JAX-RS services
  • [SYNCOPE-464] - Report error information in HTTP body
  • [SYNCOPE-468] - Add information to what components refer to a certain policy
  • [SYNCOPE-469] - Group policies and logs under configuration
  • [SYNCOPE-479] - Use X-Application-Error-Code Response header instead of ExceptionType
  • [SYNCOPE-480] - Change feedback panel into a smart animated notification panel
  • [SYNCOPE-485] - Upgrade to Activiti 5.15.1
  • [SYNCOPE-486] - Update Selenium test configuration
  • [SYNCOPE-487] - make Velocity tools available in templates for notifications
  • [SYNCOPE-488] - Use CXF Maven WADL plugin
  • [SYNCOPE-491] - Use consistent icon set
  • [SYNCOPE-492] - Provide possibility to activate/deactivate notifications
  • [SYNCOPE-493] - Provide new user and role mapping purpose "NONE"
  • [SYNCOPE-502] - Allow list of PropagationActions for Resource, SyncActions for SyncTask and PushActions for PushTask
  • [SYNCOPE-505] - Support propagating non-cleartext passwords to external resources
  • [SYNCOPE-507] - User login date conditional logging
  • [SYNCOPE-511] - Enhance synchronization report information
  • [SYNCOPE-513] - Make value encryption parametric
  • [SYNCOPE-516] - Binary Schema UI enhancements
  • [SYNCOPE-517] - Empower ETag from console
  • [SYNCOPE-519] - Report default values for connector properties
  • [SYNCOPE-520] - Move reset sync token to resource actions
  • [SYNCOPE-524] - Use JSON for serialized POJOs in the internal storage
  • [SYNCOPE-536] - Upgrade to Activiti 5.16
  • [SYNCOPE-538] - Externalize all WAR configuration
  • New Feature:
  • [SYNCOPE-123] - Binary schema
  • [SYNCOPE-150] - Rich client library
  • [SYNCOPE-164] - Passthrough authentication
  • [SYNCOPE-270] - Encrypted schema

New in Apache Syncope 1.1.8 (Jul 12, 2014)

  • Contains a security fix for CVE-2014-3503, upgrade from previous 1.1.X versions is strongly suggested.
  • Bug:
  • [SYNCOPE-499] - Deletion of role set as parent role in template generates exception
  • [SYNCOPE-500] - Wrong (unwanted) derived attribute insertion addition in membership modal page
  • [SYNCOPE-501] - Virtual attribute propagation not working when updating only virtual attributes
  • [SYNCOPE-504] - Sync/Push actions shouldn't be executed in dryrun
  • [SYNCOPE-509] - In Task page after change of number of rows (to display) is erroneously added a column to tasks table
  • [SYNCOPE-512] - If there are no roles in edit user modal page is possible to create membership between root (fake) role and user
  • [SYNCOPE-515] - Bad integration test causes role ownership conflicts
  • Improvement:
  • [SYNCOPE-485] - Upgrade to Activiti 5.15.1
  • [SYNCOPE-486] - Update Selenium test configuration
  • [SYNCOPE-507] - User login date conditional logging
  • [SYNCOPE-511] - Enhance synchronization report information
  • [SYNCOPE-519] - Report default values for connector properties
  • [SYNCOPE-520] - Move reset sync token to resource actions

New in Apache Syncope 1.1.7 (Jun 20, 2014)

  • Bug:
  • [SYNCOPE-484] - Reports and Content export fails over HTTPS connection
  • Improvement:
  • [SYNCOPE-487] - make Velocity tools available in templates for notifications

New in Apache Syncope 1.1.6 (Jun 20, 2014)

  • Bug:
  • [SYNCOPE-452] - Generated project not starting in embedded mode
  • [SYNCOPE-453] - Propagation problem with role virtual attribute mapped in user mapping
  • [SYNCOPE-454] - Update user without password specification involving resource with "Generate password if missing" enabled, sends password out anyway
  • [SYNCOPE-455] - Role child implicit delete won't be propagated during parent delete
  • [SYNCOPE-459] - Read-only virtual attribute cannot be added for a user by admin console
  • [SYNCOPE-462] - Upgrade Spring to 3.2.7
  • [SYNCOPE-465] - Selected items lost browsing paged results
  • [SYNCOPE-466] - Server error when updating an existing policy to its global counterpart
  • [SYNCOPE-474] - forbidden error when tried to change password
  • [SYNCOPE-475] - After session expired, console shows split screen
  • [SYNCOPE-476] - NPE opening Roles tab
  • [SYNCOPE-477] - Alert popup appears through page navigation after modal window closing
  • Improvement:
  • [SYNCOPE-460] - Default datasource uses BasicDataSource
  • [SYNCOPE-468] - Add information to what components refer to a certain policy
  • [SYNCOPE-469] - Group policies and logs under configuration

New in Apache Syncope 1.1.5 (Dec 4, 2013)

  • Bug:
  • Meaningless error message when attempting to delete user owning role
  • Improve notifications
  • UserService#update and RoleService#update require entity id to be specified twice
  • Counting search results fails with MySQL when OR condition is used
  • Users can log in the admin console despite of their status
  • Password not mandatory when subscribing external resource
  • Read-only virtual attribute values not retrieved from external resource
  • Wrong ID generation for new Notification instances
  • Timestamp based synchronization miss events
  • Improvement:
  • Provide user / role pre-processing mechanism
  • Improve audit info
  • Resolve OpenJPA dependency overlap
  • Add CSV report format
  • Provide debug logging for controller methods' input and output
  • Replace role action labels with icons
  • Index on Activiti table boosts overall performance
  • Use cached virtual attribute values with offline resources

New in Apache Syncope 1.1.4 (Oct 2, 2013)

  • Bug:
  • LDAP Roles lose entitlement upon LDAP synchronization
  • Audit tables are reset after restart
  • Users are made active when updating in NoOpWorkflowAdapter
  • Special chars break REST URLs
  • Improvement:
  • Inconsistent status of user edit form after exception returned by bad propagation on primary resource
  • Enrich PropagationStatusTO to report possible propagation exception message
  • Add index on task.executed
  • Allow notifications with empty about field
  • Make username pattern configurable via account policy
  • Perform retries on failed notifications
  • Clean activiti history for unused variables
  • Reduce log level of bean validation errors
  • AttributableSearchDAOImpl / Avoid query construction with string concatenation

New in Apache Syncope 1.1.3 (Jul 15, 2013)

  • Bug:
  • [SYNCOPE-370] - HTTP Status 404 adding a role to a user with IE8
  • [SYNCOPE-394] - Scheduled tasks are executed without transaction support
  • [SYNCOPE-396] - removeAll and retainAll in PropagationByResource dont evaluate correctly boolean expression
  • [SYNCOPE-397] - Double update propagation with virtual attributes on already associated resource when changing password and adding new resource
  • [SYNCOPE-398] - secretKey does not get resolved during archetype:generate
  • [SYNCOPE-399] - Role attribute mapping for user mapping item doesn't result in a multivalue property
  • [SYNCOPE-400] - Poor search performance on MySQL
  • [SYNCOPE-401] - Deploying syncope.war with MSSQL server settings to Tomcat on Windows results in Error listenerStart
  • Improvement:
  • [SYNCOPE-395] - Role Reportlet

New in Apache Syncope 1.1.2 (Jun 22, 2013)

  • Bug:
  • [SYNCOPE-369] - Wrong error message on failed login
  • [SYNCOPE-371] - Console RuntimeException with multiple sessions for the same user
  • [SYNCOPE-372] - Connector error before save
  • [SYNCOPE-373] - 500 when self reading admin user
  • [SYNCOPE-375] - QUARTZ tables are not written into an innodb mysql DB for an mvn generated and created project
  • [SYNCOPE-376] - Console webapp does not start on Glassfish
  • [SYNCOPE-377] - Exporting configuration via console causes exceptions to be thrown
  • [SYNCOPE-380] - Deleting a role from admin console throws an exception
  • [SYNCOPE-381] - Adding and saving roles with resources during save
  • [SYNCOPE-382] - Core hangs for a very long time (1h+ and then resumes) after a CLI role create and list
  • [SYNCOPE-383] - Failure assigning resource to an existing user
  • [SYNCOPE-384] - Issues with CXF and Glassfish
  • [SYNCOPE-385] - NPE when reading user assigned to resource with no mapping
  • [SYNCOPE-386] - Database sync (no full reconciliation) fails with "Unsupported object class"
  • [SYNCOPE-387] - Unable to synchronize deleted objects from OpenDJ
  • Improvement:
  • [SYNCOPE-374] - SyncopeUser tokens do not use secure random strings
  • [SYNCOPE-390] - Default Reportlets improvements

New in Apache Syncope 1.1.1 (May 3, 2013)

  • Bug:
  • [SYNCOPE-351] - Errors when editing role membership assignment in notifications (About and Recipients)
  • [SYNCOPE-352] - No connectors available on clean install
  • [SYNCOPE-353] - UserTemplate evaluation generates unjustified attributes to be removed
  • [SYNCOPE-354] - LDAP Membership propagation does not remove memberships
  • [SYNCOPE-356] - Unable to set resource for role via the console
  • [SYNCOPE-357] - When deleting role on external resource, also remove from there users with resource assigned only via that role
  • [SYNCOPE-358] - ConnectorService#list invocation with null parameter actually calls ConnectorService#readByResource
  • [SYNCOPE-360] - Removing Role mapping from External Resource fails
  • [SYNCOPE-361] - When creating new report, the modal window does not close and an exception is logged
  • [SYNCOPE-363] - ApacheDS not available since second run of the standalone distribution
  • [SYNCOPE-364] - Rejected users are anyway propagate to associated resources
  • [SYNCOPE-365] - External attribute disabled in case of schema info not available
  • [SYNCOPE-366] - Uniform constraint violation building
  • [SYNCOPE-367] - ConfigurationTestITCase#browseAccountPolicy Selenium test fails
  • [SYNCOPE-368] - Cannot add 'RoleOwnerSchema' mapping item via console
  • Improvement:
  • [SYNCOPE-359] - Ignore propagation if no schema mapping is provided
  • [SYNCOPE-362] - Disable mapping tab when the underlying connector does not support correspondent ObjectClass
  • Task:
  • [SYNCOPE-126] - Database import / export and related tasks
  • Wish:
  • [SYNCOPE-340] - Translate items of Syncope UI and config files labels for Portuguese language

New in Apache Syncope 1.1.0 (Apr 23, 2013)

  • New JAX-RS, Apache CXF based, REST interface is available. (SYNCOPE-231 and related)
  • In order to maintain compatibility with 1.0.X, the Spring MVC REST services stay in place in this version and the CXF based services are added using a different base URI: this allows users of the API to already start migrating to the new service layout. For more details see REST API upgrade. In Apache Syncope 1.2.0 the Spring MVC REST services will be dropped.
  • Role provisioning. (SYNCOPE-171 and related)
  • Apache Syncope is now able to manage users (e.g. accounts) and roles (e.g. groups) on external resources. Many user-related concepts are now also available for roles: schema mapping, propagation, synchronization, workflow, and so on.
  • New standalone distribution is provided. (SYNCOPE-206).
  • For helping evaluating Apache Syncope, a new standalone distribution is linked from the downloads page; instructions on how to work with it are also available.