See below on this page for v4 release notes (v4 build info). 

** Grouper v4 is the stable no-enhancement version of v2.6. **

 

v4 builds

These will be marked as stable once they are out for a while without issue and/or as people start using these in production.  This is a judgment call by the Grouper team.  If you are using a new release please inform us so we can provide better advice.

Date

Container tag (version)

Status

Upgrade instructions
and notes

Versions

Enhancements and bugs fixed in this version, known issues with this version

2025/03/02

i2incommon/grouper:4.17.5

sha256:b2adfbf3b84b342e4
813abd52959b52085e6ea08
5b956dceec4fc4d30afed219

RELEASED

NoneOS: Rocky 9.5
Shib: 3.5.0
Apache: 2.4.62
Tomcat: 9.0.98
Java Corretto: 17.0.14.7.1
Grouper API: 4.17.5
27 Jiras
Oauth WS improvements
Filter groups from okta for group type OKTA_GROUP
Scim provisioning membership strategies
Batch scim insert memberships and retry each if batch fails
Provisioner with canRetrieveAllData query returns duplicate entities from other provisioners

2025/01/22

i2incommon/grouper:4.17.4

sha256:9447f5f1a85b4e7ba
99400e076f216ef2bfc51f0a7
504ca38814a8bdbbb92798

LATEST STABLE

NoneOS: Rocky 9.5
Shib: 3.5.0
Apache: 2.4.62
Tomcat: 9.0.98
Java Corretto: 17.0.14.7.1
Grouper API: 4.17.4
4 Jiras
Scim provisioner cannot select all memberships
Recursion error with getAttributeDelegate
Provisioning error handling types should show code on label
NPE in provisioner from GrouperProvisioningCompare.shouldSkipMembershipAttributeInsertDueToUnresolvableSubject

2025/01/06

i2incommon/grouper:4.17.3

sha256:62792fba4a9081b98
32925984036165b5287882e
b0b901ead3250d4155f774b5

STABLE

GRP-5956

GRP-5619

NoneOS: Rocky 9.5
Shib: 3.5.0
Apache: 2.4.62
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 4.17.3
12 Jiras
Incremental provisioners have poor performance
Adobe provisioner cannot create user
Box retrieve by id sometimes throws error
If release has gaps in upgrade steps, should not warn
Do not set grouper loader log subjobs to error
Performance issues with incremental provisioning
Okta provisioner should be able to search and filter by arbitrary okta user attributes

2025/01/06

i2incommon/grouper:4.17.1

sha256:8648d5b9c5cd42c6a
93dd9df89e7017560d24ae95
ce03ec964dd4c22c7aa94a3

NOT STABLE

NoneOS: Rocky 9.5
Shib: 3.5.0
Apache: 2.4.62
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 4.17.1

4 Jiras
Add ability to not fail startup if upgrade tasks fail
Error about http client: Caused by: java.lang.NoClassDefFoundError: org/apache/commons/httpclient/HttpMethod

2025/01/04

i2incommon/grouper:4.17.0

sha256:90fede3121d074918
afe605ca79519d5f11d56aad
7d5f6d4c15364a05d837a96

NOT STABLE

GRP-5909

5 from v4.15.8

OS: Rocky 9.5
Shib: 3.5.0
Apache: 2.4.62
Tomcat: 9.0.98
Java Corretto: 17.0.13.11.1
Grouper API: 4.17.0

51 Jiras
Upgrade tomcat, ldaptive, many 3rd party libraries with security vulnerabilities
Okta provisioner
Scim memberships retrieved by user or group
Improve upgrade tasks in grouper
Google provisioner - add option for whoCanModerateMembers
Allow Azure provisioner to manage the SubscribeMembersToCalendarEventsDisabled attribute
Grouper WS should find groups by attribute framework value
Adobe provisioning improvements
Long query loaders do not work with diagnostics
Allow config for default page size of daemon screen
GrouperHttpClient should handle UTF bodies
Adjust content type and accept for scim provisioner
Add option for qualified and unqualified name in scim
Only query policy groups in provisioning if needed and directly, performance improvement

2024/11/4

i2incommon/grouper:4.16.0

sha256:b4c15eb626c443212
497895f0e53aacb2476da93
861b67ad6169b7cd2425e31d

STABLE

1 from v4.15.8OS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.13.11.1
Grouper API: 4.16.0
11 Jiras
Adobe provisioner
Incremental object log can throw errors for object being null
GrouperHttpClient should handle UTF bodies
Notification job fail
Duo update user name is not working
Only query policy groups in provisioning if needed and directly, performance improvement
There are two classes CompositeSave in different packages in Grouper

2024/10/21

i2incommon/grouper:4.15.8

sha256:4b81f7fdc535b0d9c
e7665dfb79d6bc5f6d6bb6a
2e19451fd269c40f711fb627

STABLE

GRP-5799

NoneOS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.8
16 Jiras
Scim is not updating name properties correctly
Provisioning metadata of type "set" does not translate correctly
Azure provisioning error when dealing with owners
Add a way to see what the provisioner will do exactly in readonly mode
Add setting and global default to not run logic in full or incremental daemon
Global provisioning readonly setting to default all provisioners to readonly
Provisioning object log improvements

2024/10/17

i2incommon/grouper:4.15.7

sha256:4217f947e47688d30
11be672a95afae244b1a5780
d9cd8a3a6a660a336cf0574

RELEASED

NoneOS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.7
3 Jiras
Refactor entity attributes provisioning
Entity attribute provisioner with new provisionable group does not create member and membership sync objects in incremental run for existing memberships

2024/10/15

i2incommon/grouper:4.15.6

sha256:51a786e34abace9ae
d5c8627f74a4a15c3bba60a
1916f0878f0fe3b267cf2abe

NOT STABLE

GRP-5753

NoneOS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.6

1 Jira
Entity attribute provisioner full run will delete and add memberships flapping back and forth

2024/10/14

i2incommon/grouper:4.15.5

sha256:8693ed37ab5f997c2
d318db2a8e375a2b537522a
a5a519873cd73a0a57a28708

RELEASED

GRP-5751

NoneOS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.5
6 Jiras
Entity attributes deleteValueIfManagedByGrouper does not delete if attribute not assigned to anything in grouper (empty group)
Date picker format is mm/dd/yyyy which is rejected
Notification job fails when subject source is set

2024/10/6

i2incommon/grouper:4.15.4

sha256:764669a227fa3a73
4208da74f7af4573911ae6ab
c1dd55c5f9d8a4bcb2656446

STABLE

GRP-5726

NoneOS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.4

20 Jiras
GRP-5719: full provisioner will insert recent memberships which shouldnt be there
Remove unecessary provisioning errors
OIDC improvements
Add duo as option for custom UI
Allow custom ui to redirect to a url, without clicking a button
MidPoint provisioner incremental fails on entity attribute validation

2024/09/13

i2incommon/grouper:4.15.3

sha256:ef63d71dc3c7f2b9cb
ceac6538c905776097a19cb
2e964c185118cbabad6d8de

RELEASED

GRP-5719

2 from v4.15.0OS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.57
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.3

16 Jiras
Playwright enhancements
Fix Swagger in WS
NPE trying to view "Unresolvable subjects" in the UI.


2024/08/26

i2incommon/grouper:4.15.0

sha256:ccc09f28da0876257
fa882386125627dc7dee552
37289cbb620e351ae51f48f6

RELEASED

GRP-5719

2 from v4.14.2OS: Rocky 9.4
Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.15.0

34 Jiras
Upgrade Grouper from OS Rocky version 8 to Rocky version 9
Recent memberships not working (for new installs?)
Daemon screen improvements
LDAP to SQL sync improvements
Manage azure owners from provisioner
Load azure users from provisioner to table
In loaders, allow sql query to be > 4000 char
Prevent composite circular references
Custom UI improvements

2024/07/31

i2incommon/grouper:4.14.2

sha256:aba808bec01f29435
9988ec45078e68a8a771595
d552bca35054b85f34ca5824

EXPIRED

Rocky 8 unsupported

None from v4.14.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.12.7.1
Grouper API: 4.14.2

26 Jiras
Date Picker for start/end dates for memberships (when editing memberships)
Sql/midpoint provisioner fixes including: has problems finding data will use the wrong datatype
Custom UI fixes
Provisioning - deleteGroupsIfUnmarkedProvisionable=false doesn't handle deleted groups in Grouper
Scim should put paging on lookup queries
Pac4j SAML xxxResource properties not working for "file:..." urls
"Add or remove members" page: Change "Replace existing members" and "Remove members" from checkbox to radio selection.

2024/07/16

i2incommon/grouper:4.14.1

sha256:17bfa13e5d18819ce
69cad6f7d56165c3d9f3fcd
c00c1617be908a1923f8af58

EXPIRED

Rocky 8 unsupported

1 from v4.14.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 4.14.1

21 Jiras
Allow scim to read memberships from target
Grouper provisionable fixes
Google provisioner option to map privileges to manager/owner roles
Add "Provision now" buttons to groups, entities, and memberships
Add externalId to groups in scim provisioning

2024/06/27

i2incommon/grouper:4.14.0

sha256:dff15fd2639ee30722
10c35d090ded9176438485
2db9ee2191c18448f49828b7

EXPIRED

Rocky 8 unsupported

3 from v4.13.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 4.14.0

47 Jiras
Improve memory usage for provisioning
Add id token to grouper ui oidc authn
Scim loader to load entities back to grouper for reporting or provisioning
Allow custom scim attributes in provisioning
Github manage multiple organizations at once
Various scim fixes: command logging, enabled attribute, schemas, etc
GrouperHttpClient doesn't release resources when doing an HTTP DELETE
Add rules for invalid permission definition or minimum group members
Use the container version and not the maven version in various places in grouper

2024/06/25

i2incommon/grouper:4.13.1

sha256:40f5e925569d96ca0
b01c0e2a6dc19b2ca872c459
213a774bed7051342b8b9fd

EXPIRED

Rocky 8 unsupported

1 from v4.13.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 4.13.0

1 Jira

Web Services LDAP authentication security vulnerability


2024/05/26

i2incommon/grouper:4.13.0

sha256:c7f9b45d2585bdac6
0fd52787ed117ec1b9700ed5f
8a8a1b3949d5987b294cee

EXPIRED

GRP-5515

Rocky 8 unsupported

1 from v4.12.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 9.0.87
Java Corretto: 17.0.11.9.1
Grouper API: 4.13.0

13 Jiras


Upgrade tomcat to 9.0.87 since 8.5 is EOL
AttestationGroupSave.assignMarkAsAttested() does not work
Cannot edit metadata in provisioning
Add expiration time to ldap pool config in external system
Remove wssec from soap web services
Create swagger docs for ws
Gsh template logged in and act as user should audit correctly
Provisioning entities not filtering objectClass when Select All Entities is false (and occasionally when it's true)
Provisioner retrieve AD objectSid and objectGuid as string instead of binary

2024/03/19

i2incommon/grouper:4.12.0

sha256:d0075066b090d218c
845e165d49beb921bc75e0a8
6cb3096c06f5b7dd2325a88

EXPIRED

GRP-5338

Rocky 8 unsupported


1 from v4.11.2Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.99
Java Corretto: 17.0.10.8.1
Grouper API: 4.12.0

8 Jiras

Tomcat security advisory CVE-2024-23672
Cannot stop and start container due to pipe problem
Grouper session gets lost if not assigned to a variable
Add option in container to GROUPER_LOG_TO_STDERR and all logs to go stderr (running tomcat single process)

2024/03/10

i2incommon/grouper:4.11.2

sha256:f7ca7abacb0a45b8b
34c972c468cec6387a6c9e5
1a9f3918c46a29151c565d53

EXPIRED

GRP-5382
Tomcat security advisory

Rocky 8 unsupported

1 from v4.11.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 4.11.2

5 Jiras

Memberships created in target without Grouper will not get deleted
No open grouper session right after creating one
GrouperLoader.runOnceByJobName should run long running jobs once only if running without daemon

2024/03/03

i2incommon/grouper:4.11.1

sha256:a4b09b56cf020329
024781c1ffd48ef3bc062bfb
6320acfe216888a1a73da90d

EXPIRED

GRP-5350
GRP-5347
Tomcat security advisory

Rocky 8 unsupported

2 from v4.11.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 4.11.1

5 Jiras

Clean logs on 4.11.0 is not working
Cannot delete groups (or maybe other things) as a wheel group member
Creating log pipes twice can fail
Validate rules periodically manually
Stop chmoding cacerts when not able to (openshift)

2024/02/27

i2incommon/grouper:4.11.0

sha256:c4afafd0a0492a89d4
33b445166827146a4c4b67e
49d8da2d429d502c833131c

NOT STABLE

GRP-5337
GRP-5335

Rocky 8 unsupported

2 from v4.10.3Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.10.8.1
Grouper API: 4.11.0

22 Jiras

Fix memory issue with provisioner
Composite changes - move membership inserts and deletes to daemon
SCIM fixes (can manage "active" status instead of delete, adjust scim emails, allow group updates)
Can provision group roles and user roles in real time and incremental

2024/01/09

i2incommon/grouper:4.10.3

sha256:e94ae7cd3955b3acd
dd6571742641828c607e8b2
d4fb76298ef50e6876c0e8c5

EXPIRED

Tomcat security advisory

Rocky 8 unsupported

None from v4.10.2Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.10.3

19 Jiras

TeamDynamix provisioner fixes
GSH template dynamic forms enhancements
Add progress bar on visualization (with no timeouts)
Json recursion error on memory bean
Subjob error in scheduler check daemon cant find log map

2024/01/01

i2incommon/grouper:4.10.2

sha256:294a06c17575111e1
7435610703c2be726f82354
2ebea3791a0053811f407a38

EXPIRED

GRP-5249
GRP-5240
Tomcat security advisory

Rocky 8 unsupported

1 from v4.10.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.10.2

11 Jiras

TeamDynamix provisioner
Add rewrite valve for tomcat so / redirects to /grouper (or whatever the UI context is)
Add tomcat remote IP valve env vars for running v5 behind a load balancer
Add https ssl tls for tomcat when running without apache

2023/12/27

i2incommon/grouper:4.10.1

sha256:18ed306dd324070d1
c2dde6847b868598bddbe48
4a90173cdc082458afd5333f

EXPIRED

GRP-5249
GRP-5240
Tomcat security advisory

Rocky 8 unsupported

None from v4.10.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.10.1

1 Jira

gsh does not start

2023/12/27

i2incommon/grouper:4.10.0

sha256:1f73328c0bb6e6f32
285f9504a1e19c7ac4eedbca
ac2dabb3135ce16059e4c53

NOT STABLE

gsh does not start

3 from v4.9.3Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.10.0

30 Jiras

Daemon jobs will log ad error out if JVM dies (and other daemon enhancements)
Fixed JSON marshaling issues
GSH template dynamic inputs
GSH template WS enhancements
GSH templates report error line number
Daemon status threshold automatically adjusts based on schedule

2023/12/05

i2incommon/grouper:4.9.3

sha256:3bf5e7f91aeb546cb64
cb88e88f18bb802e63e60213e
0cff0b5e0717a8158041

EXPIRED

json has issues with visualization,etc
Tomcat security advisory

Rocky 8 unsupported

None from v4.9.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.9.3

12 Jiras

v1 templates do not run
Duo throttling logic should always throttle if http response code is 429...
Http client network keep alive connection cleanup
Box provisioner enhancements

2023/11/26

i2incommon/grouper:4.9.1

sha256:bf65bed450c890e9
a32d67022d03c3236ad61f8
ec2f90251db11ce6e43aabfda

EXPIRED

v1 templates do not run

json has issues with visualization,etc
Tomcat security advisory
Rocky 8 unsupported

None from v4.9.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.9.0

10 Jiras

Add trust anchors to java cacerts
Add option to run tomcat as another user

2023/11/20

i2incommon/grouper:4.9.0

sha256:51c21b2801aaee6d5
f5816b216f5237f1ed19b91a7
534c2ec34d2f3660337839

EXPIRED

v1 templates do not run

json has issues with visualization,etc
Tomcat security advisory

Rocky 8 unsupported

6 from v4.8.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.9.0

25 Jiras

Add basic auth to scim provisioning framework
Add active flag as attribute for scim users
Attributes in group view/edit only handles all value types
Group updaters should be able to only attest/clear attestation on groups
UI: webpage titles for back button and browser tab
Ldap loader LDAP_GROUPS_FROM_ATTRIBUTES should allow specifying parent stem
Upgrade various libraries for security and performance

2023/11/04

i2incommon/grouper:4.8.0

sha256:0ce7e7b6385511553
3232264c6ed1a24502105c6
331d34c148ecaf96d0c1a171

EXPIRED

1 from v4.7.2Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.9.8.1
Grouper API: 4.8.0

16 Jiras

Authentication bypass security issue
Provisioner External entity attributes not working for incrementals
Instrumentation cleanup
SFTP improvements
Provisioning improvements

2023/10/13

i2incommon/grouper:4.7.2

sha256:3c03d9c0a7955b74
577b4533b8f433df05a4ee4c
702d8f7ce40c6e5817270297

EXPIRED

None from 4.7.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.7.2

6 Jiras

Simplified UI for GSH templates
Default run group or folder does not show for gsh templates
Sql/ldap syncs to mysql do not work
Exceptions in provisioning should replace null characters before storing to the database

2023/10/09

i2incommon/grouper:4.7.1

sha256:15ca1e909943aafd3
afa6355c8a36ea3fec7327e4
0f4eda5554931abdcd1ca7e

EXPIRED

None from 4.7.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.7.1

5 Jiras

In provisioning, if changing entities, if a group is deleted (or recalc'ed), entities could be deprovisioned during incremental
In provisioning, if not retrieving all groups at once in full sync, group attribute updates not happening (e.g. description)

2023/10/04

i2incommon/grouper:4.7.0

sha256:7aa24f33361ed5e89
ed87d74d4d66f22c9efd1ce7
fa37c690b571502f69b4907


EXPIRED

2 from v4.6.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.7.0

30 Jiras

Add option to mark provisioning attributes in values as "not provisionable if null"
Add option to leave a group in target if not provisionable but not deleted in grouper
Executable grouperClient jar fails trying to connect using Hibernate
Resolving subject from source should update member deleted/resolvable flags
Duo administrative role provisioner improvements
Old log files not deleted when logging files to host
Sql/midpoint provisioner has problems with inserting data that was recently deleted

2023/09/08

i2incommon/grouper:4.6.0

sha256:2aa7b0e8fde2e4209
d6824165697af5559451405
3cd5e0c2e12aecb726125be4


EXPIRED

Client jar standalone does not work

1 from v4.5.4Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.6.0

6 Jiras

Trusted client certs added to Corretto keystore, tomcat still uses /etc/pki/java/cacerts
Ldap provisioner wants to update dn based on case
Subject source intermittently disappears when there are database connection issues
Google provisioner not retrieving memberships
If a provisioner can retrieve all memberships, but isnt retrieving all groups, then it doesnt work

2023/08/28

i2incommon/grouper:4.5.5

sha256:34f0c77def32dd0118
3b34b7609d4d17628639745
c75c2601ab7d7f428202e6b

EXPIRED

None from 4.5.4Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.5.5

7 Jiras

In some cases users cannot see folders on UI they have access to (inherited privileges on folders causes this)
AWS SCIM provisioning is broken
Cannot create group if inherited privileges are not configured correctly
Can't provision root stem due to infinite loop
Allow change log consumers to specify number of records to process (default 1000) in daemon edit screen

2023/08/24

i2incommon/grouper:4.5.4

sha256:c816c7b5a0a62dbf3e
9c4bb0b43355006c2d69d96
da4b620ff8e0fa747244b4b

NOT STABLE

AWS SCIM provisioning is broken


None from 4.5.3Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.5.4

5 Jiras

Fix issues with SCIM provisioning paging

2023/08/24

i2incommon/grouper:4.5.3

sha256:a2d07fe2ea13dc7a9
5c3f813a2e51a62dd50aedc
0f98157de1f4acc1818e082b

EXPIRED

None from 4.5.2Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.8.1
Grouper API: 4.5.3

12 Jiras

Security issue upgrade shib to i2incommon/shibboleth_sp:3.4.1_06122023_rocky8_multiarch
Group attributes should be available for provisioning
Delete value if managed by grouper doesnt work in certain circumstances
UI accessibility improvements (customer pull request)

2023/08/04

i2incommon/grouper:4.5.2

sha256:547b6061dd1f7afc3
0d90049cd6a0f9ef7b5a4fb
c87ff4c29425c0562590675c

EXPIREDNone from 4.5.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8.7.1
Grouper API: 4.5.2

6 Jiras

Add a strategy in provisioning to be authoritative for value for memberships
Allow second email for SCIM 2 provisioning
Configure missing caches
All provisioners were shown in list (on folder or group) when only some should be shown based on security

2023/07/25

i2incommon/grouper:4.5.0

sha256:91f8a6a8c25f15f7b
916bf8f0e877f07522a5fe3f
24bc04a7e3d9e588b75f30f

EXPIRED1 from v4.4.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.8
Grouper API: 4.5.0

17 Jiras

Add progress screen for "edit stem" and "edit composite"
Add hook and daemon to ensure unique group extension in folder
Add edit button on provisionable screen for groups or folders
Add run button on GSH template screen
Upgrade bouncycastle for vulnerability
Add alias1-4 to duo user provisioning

2023/06/28

i2incommon/grouper:4.4.0

sha256:af610ba539659582a
27138df8d8f5cda023bce117
729336950f18502ec2d66ee

EXPIRED2 from v4.3.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.7
Grouper API: 4.4.0

8 Jiras

Allow micros in timestamps for SCIM for Atlassian provisioning
SQL sync bug fixes
Allow source IP address filtering on tomcat ports
Add built in hook to restrict non sysadmins from using EveryEntity

2023/06/28

i2incommon/grouper:4.3.1

sha256:d7d67875d6ac5f559f
dde0783617620c12f5089b01
54055535639913766ba9c4

EXPIREDNone from 4.3.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.7
Grouper API: 4.3.0

2 Jiras

tomcat 8.5.90 does not listen on 0.0.0.0 for ajp
revert new tomcat default for max parameter count back to 10k

2023/06/27

i2incommon/grouper:4.3.0

sha256:4066ed05f045bde4
dd1d19cfd864e19df4c78860
992fe04e8882423bf4d5e962


EXPIRED

AJP listens on 127.0.0.1

2 from v4.2.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.90
Java Corretto: 17.0.7

9 Jiras

upgrade tomcat to 8.5.90 (security updates)
speed up miscellaneous -> provisioning screen
minor provisioning improvements

2023/06/14

i2incommon/grouper:4.2.1

sha256:2d0c9c59a57f9088e
7ff57db9ba52860b68730c14
f9749486fd8816fae8e44d8

EXPIREDNone from v4.2.0Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.7

6 Jiras

Bug in provisioner when Select all groups at once during full sync is false
Provisioning logs should be able to focus on particular users/groups
For duo provisioning commands, if adding a membership that exists, dont fail

2023/06/06

i2incommon/grouper:4.2.0

sha256:df86a0ef0e0e5a6ca
99a159e6abdc48a49a4cc22
220541c5ebefda7060f310a3

EXPIRED1 from v4.1.7Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.7

18 Jiras

Improve Google provisioner documentation
Movie on Google external system
Movie on Google provisioner
Oauth2 for zoom authentication
Memberships from pspng do not delete in incremental
Increase default database pool size

2023/05/24

i2incommon/grouper:4.1.7

sha256:452799f54b54accd
7e15c6fe3b5efa28ab03a5f4
57a4a384a089f737c64a62fe

EXPIREDNone from 4.1.6Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.7

10 Jiras

Add new entities in provisioning in certain CRUD configs
Handle gracefully provisioning memberships when there are group or entity issues
Provisioning - validation before saving doesnt account for properties being removed
Add a screen to show provisionable groups
Add a screen to see where provisioning assignment are

2023/05/05

i2incommon/grouper:4.1.6

sha256:3d2243dfdd39660c1
45263ff72d46f16c7f8d20111
dd5d5130e49e332a3ba8c1

EXPIRED1 from v4.1.4Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.7

18 Jiras

Reports are fixed (not working in 4.1.4)
GSH changelog consumer
Fix provisioning translation continue expression

2023/04/19

i2incommon/grouper:4.1.4

sha256:ac1e9de4bbdddcff96
e024d4bed3fa165b8d167a76
5d57dfc982c05990ee609e

NOT STABLE

Issue with reports

1 from v4.1.3Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.7

1 Jira

Provisioning issue with start with due to bad build

2023/04/18

i2incommon/grouper:4.1.3

sha256:270d29519a40ab8fa
873fc480b6bc765c4276442
d44fc6443a5e86905261ac3b

NOT STABLENone from 4.1.2Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.6.10.1

11 Jiras

Improve provisioning "start withs" and diagnostics
Provisioning - ldap - bug with moving groups with Active Directory
Provisioning - show entity attributes if select is false for hasMember (no entity link)

2023/04/03

i2incommon/grouper:4.1.2

sha256:447f8bc1a408a7f37
7c16738d9cfe079352d1aeb0
85d710b27202aa03c3f98c4

EXPIRED

1 from v4.1.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.6

12 Jiras

Security issue: upgrade commons fileupload to 1.5
Security issue: upgrade jettison to 1.5.4
Security issue: fix ipv6 UI configuration source addresses
Provisioner fails when group or entity is there for translation purposes only
Duo provisioner start with

2023/03/26

i2incommon/grouper:4.1.1

sha256:998d0826fa6c3b27
7daeb86c15ae7481fd8604af
7f5c24fadd9f566f08528845

EXPIRED

Has issue with
entity attributes
and some security issues

3 from v4.0.3Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.87
Java Corretto: 17.0.6

35 Jiras

Do not have default etc EveryEntity privs
Add screen that shows provisioning errors
Provisioning - bug with membership count for default value check
Auto ddl 4.*.* should work
Allow owners for teams groups in azure provisioning (on create only)
Entity static attribute provisioning
Improve LDAP and Azure provisioning 'start with' and diagnostics
Add a provisioning setting with a group of members NOT to provision
In provisioning, if an entity is not eligible, the memberships should be removed
Ldap provisioning search filter fails when ldap_dn is the search attribute
Ldap provisioner fails when there are multiple search attributes

2023/03/13

i2incommon/grouper:4.0.3

sha256: c7afe275783d815fa7
5661f300745eedae135e4eb9
100d4d9dff029a813847da

EXPIREDNone from 4.0.1Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.84
Java Corretto: 17.0.6

GRP-4618: JEXL script editor supported files were not included in build

2023/03/10

i2incommon/grouper:4.0.1

sha256:ffb15e5290b10ec79
4671f4089226da09ce1a4da
a546ba9b7bb7e4cf2b3dc6d6


EXPIRED

JEXL script
editor issue

4 from v2.6.19

Shib: 3.4.1
Apache: 2.4.37
Tomcat: 8.5.84
Java Corretto: 17.0.6

30 jiras

GRP-4567: Replace Tomee with Tomcat and remove PSU SCIM
Change to Rocky Linux
Upgrade Java to 17
Rewrite provisioning framework internals to make more solid
JEXL editor
Library upgrades for security

For more information about upcoming plans, see the Grouper Product Roadmap .


See Also

Grouper Release Announcements

  • No labels