Component: user

7.23.6 Long-term 2026-Sep-14 (1 week ago)

• improve failed login delay logic (CVE-2026-16347);

7.24.3 Stable 2026-Sep-14 (1 week ago)

• improve failed login delay logic (CVE-2026-16347);

7.25beta3 Development 2026-Sep-02 (3 weeks ago)

• fix removal of inactive REST API sessions (introduced in 7.21);

7.21.4 Long-term 2026-Apr-21 (5 months ago)

• properly apply login delay (introduced in v7.20);

7.22 Stable 2026-Mar-09 (6 months ago)

• properly apply login delay (introduced in v7.20);

7.22rc3 Testing 2026-Feb-26 (6 months ago)

• properly apply login delay (introduced in v7.20);

7.20.5 Stable 2025-Nov-27 (9 months ago)

• improved login service stability on busy system;

7.21beta9 Testing 2025-Nov-25 (9 months ago)

• improved login service stability on busy system;

7.20 Stable 2025-Sep-29 (11 months ago)

• added tiny delay on any user login attempt to limit login attempts;
• change /user/active/request-logout to /user/active/remove;

7.20beta9 Testing 2025-Aug-21 (1 year ago)

• added tiny delay on any user login attempt to limit login attempts;

7.20beta2 Testing 2025-May-27 (1 year ago)

• change /user/active/request-logout to /user/active/remove;

6.49.18 Stable 2025-Feb-27 (1 year ago)

• improved authentication procedure when RADIUS is not used;

7.18 Stable 2025-Feb-24 (1 year ago)

• improved authentication procedure when RADIUS is not used;

7.18beta2 Testing 2025-Jan-21 (1 year ago)

• improved authentication procedure when RADIUS is not used;

7.16 Stable 2024-Sep-20 (2 years ago)

• added inactivity timeout for non-GUI sessions;

7.16beta7 Testing 2024-Jul-25 (2 years ago)

• added inactivity timeout for non-GUI sessions (additional fixes);

7.16beta4 Testing 2024-Jul-02 (2 years ago)

• added inactivity timeout for non-GUI sessions (additional fixes);

7.16beta3 Testing 2024-Jun-27 (2 years ago)

• added inactivity timeout for non-GUI sessions;

7.16beta1 Testing 2024-Jun-05 (2 years ago)

• added inactivity timeout for non-GUI sessions (CLI only);

7.11 Stable 2023-Aug-15 (3 years ago)

• added "sensitive" policy requirement for SSH key and certificate export;

7.11beta7 Testing 2023-Jul-24 (3 years ago)

• added "sensitive" policy requirement for SSH key and certificate export;

7.6 Stable 2022-Oct-17 (3 years ago)

• removed unused "dude" policy;

7.6beta4 Testing 2022-Sep-01 (4 years ago)

• removed unused "dude" policy;

7.2 Stable 2022-Mar-31 (4 years ago)

• removed obsolete "tikapp" policy;
• send "Class" attribute in "Accounting Request" when provided by RADIUS;

7.2rc1 Testing 2021-Dec-17 (4 years ago)

• removed obsolete "tikapp" policy;
• send "Class" attribute in "Accounting Request" when provided by RADIUS;