v2.29

✍ Other changes

• Switch test containers to dynamic ports for non integration tests (#153) @jtnord
• JENKINS-69683 - Active directory Test Domain does not take into account changes in the Require TLS checkbox (#145) @fbelzunc
• JENKINS-63303 - Use tokenGroups lookup strategy by default (#146) @fbelzunc
• JENKINS-69115 - fire authenticated event for SecurityListeners (#128) @Dohbedoh
• Forward compatibility with jenkins-buttons (#140) @NotMyFault
• Use HTTPS SCM URL (#139) @basil

v2.28

👻 Maintenance

• Bump jenkins baseline to 2.319.3, parent pom and needed dependencies (#142) @raul-arabaolaza

📦 Dependency updates

• Bump jenkins baseline to 2.319.3, parent pom and needed dependencies (#142) @raul-arabaolaza

v2.27

🐛 Bug fixes

• JENKINS-68947 - Active Directory plugin fails on Java 17 with IllegalAccessError: "module java.naming does not export com.sun.jndi.ldap to unnamed module" (#133) @basil

👻 Maintenance

• Eliminate unnecessary use of reflection (#118) @basil
• EOL JSR 305 (#116) @basil

v2.26

👻 Maintenance

• Setup automatic dependency updates (#114) @alecharp

✍ Other changes

• Remove PowerMock (#112) @basil
• SECURITY-1389 - add missing documentation for new security hardening (#117) @jtnord
• update CI to include jdk11 builds (#113) @mikecirioli

v2.25

• Fix handling of AuthenticationException (#111) @Vlatombe

v2.24

📦 Dependency updates 🚨 Removed

• JENKINS-65444 - remove usage of Guava (#109) @olamy

📝 Documentation updates

• Fix Typo in Readme (#108) @MSIH

v2.23

• Categorization of the plugin under the Status section of the /manage page of the User Interface. (PR-107)

v2.22

• JENKINS-64130
  Tables to divs compatibility (Cf. Table to div layout migration documentation for more explanations)

v2.21

🔥

v2.20

• Important security fixes
• User passwords are no longer stored in memory as part of the authentication cache.
  Instead, BCrypt is used.
  The Java system property hudson.plugins.active_directory.CacheUtil.bcryptLogRounds can be used to configure the cost parameter; the default is 10 (for 1024 rounds).
  Additionally, the caching of successful authentications can be disabled by setting the system property hudson.plugins.active_directory.CacheUtil.noCacheAuth to true.
• When a local fallback security realm is configured, the plugin would sometimes reset the password of the specified user to a fixed value.