What’s new

• Enable the use of email as a username to log in to JumpServer.

• When adding an account using a template, the template is pushed by default, and the sudo permissions are updated. Usage scenarios include creating an account on the account list page and the asset details page, as well as creating an authorization.

• Allows users to customize asset names and descriptions on the My Assets page of the workbench.

• Allows users to create multiple SSH keys in personal settings. Users can use different SSH keys in different clients to improve security. The default maximum is limited to 10.

• The user authentication allows configuration of attribute mapping and default organizations, including LDAP, CAS, OIDC, AML2, OAuth2, WeCom, Dingtalk, Feishu, Lark, Slack, Radius. (JumpServer EE)

• Provides the capability to connect to an Oracle database on the IBM AIX (Advanced Interactive eXecutive) operating system through a database client. (JumpServer EE)

Improvements

• The MongoDB platform supports configuring connection options. For example, retryWrites=false&retryReads=false. Which will take effect when the user connects to the database.

• The user’s phone configuration supports most international country codes.

• When users connect to assets, the remote application publisher matched via asset tags uses a random selection strategy to improve load balancing across publishers.

• Restart each Gunicorn process more gracefully to ensure uninterrupted service.

• Session support records the use of RemoteApp machine, and administrators and auditors can view the session description.

• Asset account user switching supports su and sudo su to maintain the current user environment variables.

• When replaying a session recording online, add the current viewer's watermark.

• The configuration of approvers in the Ticket approval flow supports three policy options, all users, specified users, and specified user attributes. (JumpServer EE)

• Refactored Magnus Oracle connection logic to improve the user's database operation experience. (JumpServer EE)

Bug fixes

• Fixed the issue that the disk size calculation of Linux host hardware information was inaccurate, and it would be calculated repeatedly if mounted multiple times.

• Fixed the issue that the scheduled cleanup task of the audit log was not executed. For example, login log, operation log, etc.

• Resolved the issue where SMS sending would fail when the user logged in.

• No longer notify Kael and Magnus about components being offline.

• Fixed the issue that SSL certificate authentication was not effective when initializing and deploying a RemoteApp machine.

• Fixed the issue that Luna page asset session Tab cannot be renamed.

• Resolved the issue where the callback address lost the port during SAML2 user authentication, causing user login failures. (JumpServer EE)