Changes Report

Release 3.5 – 2020-11-25

Type	Changes	By
	Introduce a poor man's directory server connection pooling	michael-o
	Upgrade to Tomcat 8.5.60	michael-o
	Update parent to 14	michael-o

Release 3.4 – 2019-12-20

Type	Changes	By
	Align ActiveDirectoryRealm#hasRole(String) with GenericPrincipal	michael-o
	Complete removal of CombinedActiveDirectoryRealm	michael-o
	GSSRealm functionally moved to ActiveDirectoryRealmBase	michael-o
	Complete removal of GSSRealm interface	michael-o
	Complete removal of GSSUserDatabaseRealm	michael-o
	Remove duplicate code already present in Tomcat	michael-o
	Upgrade to Tomcat 8.5.50	michael-o

Release 3.3 – 2019-09-23

Type	Changes	By
	Remove duplicate code already present in Tomcat	michael-o
	Upgrade to Tomcat 8.5.46	michael-o

Release 3.2 – 2019-03-09

Type	Changes	By
	Update documentation	michael-o
	Update parent to 11	michael-o
	Upgrade to DirContextSource 2.2	michael-o
	Upgrade to Tomcat 8.5.38	michael-o

Release 3.1 – 2017-04-21

Type	Changes	By
	Complete removal of uploads to SourceForge	michael-o
	Upgrade to DirContextSource 2.1	michael-o
	Upgrade to Tomcat 8.5.12	michael-o

Release 3.0 – 2017-03-05

Type	Changes	By
	Introduce GSSRealm interface for third-party implementations	michael-o
	ActiveDirectoryPrincipal now implements TomcatPrincipal	michael-o
	Add proper warning if referrals are expected to handle, but Oracle JDNI provider not able to do so	michael-o
	Renamed attribute resourceName to dirContextSourceName in ActiveDirectoryRealm	michael-o
	Remove code portions already implemented in Tomcat 8.5	michael-o
	Attribute storeDelegatedCredential has been moved to GSSAuthenticatorBase	michael-o
	Remove custom classes already present in Tomcat 8.5	michael-o
	Full code update to Tomcat 8.5	michael-o

Release 2.1 – 2016-06-09

Type	Changes	By
	A CombinedActiveDirectoryRealm which iterates over multiple ActiveDirectoryRealms	michael-o
	Don't return principal with NULL_SID if not found in Active Directory	michael-o
	Have ActiveDirectoryPrincipal expose roles as SID strings via #getRoles()	michael-o
	Upgrade to DirContextSource 1.3	michael-o
	Don't log that referral throw is not handled	michael-o
	Make #getRelativeName() comparison case-insensitive as per RFC 2253	michael-o
	Avoid number overflows while parsing a SID from bytes	michael-o

Release 2.0 – 2016-03-16

Type	Changes	By
	ActiveDirectoryRealm will properly inform about referral handling and log when not possible/failed	michael-o
	Return anonymous principal (ANONYMOUS_SID) if GSS context is anonymous	michael-o
	Realms return now principals with NULL_SID if not found instead of null because users are fully authenticated anyway	michael-o
	Add equals and hashCode to Sid	michael-o
	User search in ActiveDirectoryRealm will ignore users which are disabled	michael-o
	Change in signatures of GSSRealmBase	michael-o
	Authenticator and realm prefix 'GssAware' has been shortened to 'GSS' only	michael-o
	Authenticators do not analyze X-Requested-With header anymore	michael-o
	NTLM type 1 message is properly detected now	michael-o
	Authenticators will fail with Internal Server Error if security context requires continuation	michael-o
	Property strippableRoleNamePrefixes on realms has been removed	michael-o
	HTTP connections aren't closed on successful authentiction anymore	michael-o
	Improved logging messages	michael-o
	Improved overall documentation	michael-o
	Created VisualBasic scripts to mimic the UsernameSearchMapper implementations	michael-o
	Added an immutable SID (security identifier) implementation	michael-o
	Make roles by default stored as SID strings derived from objectSid and sIDHistory	michael-o
	Retrieve security-enabled roles only	michael-o
	Search in Active Directory for user and machine accounts only	michael-o
	ActiveDirectoryPrincipal does not contain the mech OID and DN anymore	michael-o
	ActiveDirectoryRealm queries role mappings from Context	michael-o
	Retrieve additional attributes from AD and store in the ActiveDirectoryPrincipal	michael-o
	Added documentation for Spring Security	michael-o