JumpServer Files

What’s new

• Added the KOTL component to provide visualized operations and maintenance for JumpServer itself
• Consolidated Magnus service ports, with automatic protocol detection based on incoming connection traffic
• Added account policy support for file transfers, with enhanced account selection, permission validation, and anomalous asset confirmation
• Added SMTP support for system CAs, custom CAs, and optional certificate verification
• Introduced clipboard access control for graphical sessions, primarily RDP and VNC connections

Improvements

• Improved resource selection and data-loading performance for many-to-many fields in forms
• Enhanced the search and filtering experience at the top of resource lists
• Refined the interaction design for bulk-edit forms and bulk resource selection
• Improved query performance for ticket-related APIs, reducing the number of SQL statements executed
• Refined the API OPTIONS response structure by returning query metadata such as filters, ordering, and search as dedicated top-level fields
• Simplified the user creation page by removing unique-name validation, allowing duplicate display names
• Upgraded the Chen SQL parser
• Enhanced Chen’s parsing of PostgreSQL column type changes, including ALTER COLUMN TYPE, SET DATA TYPE, COLLATE, and USING
• Added configurable timing parameters for user account and authorization expiration emails
• Enhanced Chen’s support for the Oracle SQL dialect
• Upgraded the Huawei Cloud OBS SDK to 3.26.2 for improved object storage compatibility
• Added FusionCompute user type configuration, supporting local users, domain users, and API integration users
• Added support for creating custom ticket workflows and configuring CC recipients
• Improved automation task logging
• Optimized password-change credential push performance for automation tasks
• Added su_from account support for network switches
• Added global configuration options for user preferences
• Improved the stability of rzsz file transfers in Koko
• Updated password reset emails to display both the user’s name and login username
• Enhanced dependency checks when deleting organizations, including warnings for account template dependencies
• Upgraded the Ansible Executor image to Python 3.14 and added the required AWS SDK dependencies
• Enhanced the NEC VNC Proxy to support connections to macOS assets
• Refined clipboard access control in Koko Web Terminal
• Extended command storage support to Elasticsearch 9

Bug fixes

• OAuth2 client authorization callbacks no longer generate Grant operation logs
• Prevented errors caused by improper null-value handling when unbinding UKey serial numbers
• Corrected an issue where -- line comments in Chen SQL could inadvertently comment out subsequent fields or expressions after formatting
• Added proper handling for Oracle pagination syntax, including FETCH FIRST ... ROW ONLY and OFFSET ... ROW
• Prevented Chen from incorrectly splitting Oracle SQL without semicolon delimiters into multiple statements
• Resolved Chen connection failures affecting certain MySQL databases with Public Key Retrieval restrictions
• Restored compatibility with LDAP services that prohibit anonymous queries
• Addressed configuration test and access failures affecting certain S3-compatible object storage services
• Eliminated collation conflicts when querying resource activity logs in certain database environments
• Ensured database connections are properly released by LDAP worker threads, preventing connection errors
• Guarded against timestamp processing errors caused by empty querysets during audit command cleanup
• Restored authorization node search functionality in Job Center
• Corrected database parameter passing in the PostgreSQL Ping module
• Resolved Koko login failures when accessing Ubuntu assets through su_from accounts