v0.216.0-beta
LarisVMS 0.216.0
➕ Added
- Active Directory sign-in and group sync. Domain users can now sign in with their AD username
and password: just the username, without the domain or an @. Local email accounts keep working
alongside AD, and can be turned off once AD sign-in is set up.
- Groups → roles: link AD security groups to LarisVMS roles under Settings → Active Directory. Nested group membership counts. Start typing a group name and pick from the list; Tab takes the first match.
- Automatic accounts: members of linked groups get an account right away, without provisioning anyone by hand. Their roles follow their AD groups.
- Sync: runs every 30 minutes by default (5 minutes to 24 hours) and on Sync now. Groups and users are matched by SID, so renames in AD carry over.
- Removing access: anyone disabled or expired in AD, or no longer in a linked group, is disabled in LarisVMS and signed out. If AD can't be reached, sync changes nothing and tries again shortly.
- Connection: LDAPS (port 636) is the default. Plain LDAP (389) is available but flagged as insecure. Lookups use the server's own account (integrated security) or a service account.
🛠️ Fixed
- Disabling a user didn't end their sessions. A disabled user stayed signed in, and their live video kept playing, until their session expired. They're now signed out on their next request, and live streams relayed through the server close immediately.
Upgrading
- Database changes apply automatically when the Web service starts.
- Active Directory is off until you turn it on, and local sign-in stays on, so nothing changes for existing users.
- The login box is now labelled Email or username. Local accounts still sign in with their email address.
- Before turning off local sign-in, keep the Super Admin account created during setup, and its
password, somewhere safe. If AD becomes unavailable, run
UPDATE ActiveDirectorySettings SET LocalLoginsEnabled = 1on the LarisVMS database and sign in with that account.
See Help → Users & access → Active Directory for setup details.
Full changelog: CHANGELOG.md