JumpServer Files

New Features

• KoKo revamped its TUI terminal experience, restoring plain-text connection mode and introducing an asset tree, search and filtering, mouse controls, multi-session management, and other enhancements for direct KoKo access through SSH clients

• KoKo added support for Windows PowerShell over WinRM and the Dameng Database Web CLI, with WinRM providing command auditing, ACL enforcement, session recording, and AI assistance across Luna Web and desktop clients

• Tinker was redesigned to provide standalone RDP desktops through the Windows authentication plugin, replacing the previous RemoteApp-based approach

• Luna Workspace added support for database connections through DBX, with DBX replacing DBeaver as the default remote database application

• Command filter rules now support AI-assisted drafting and conversational creation through the AI assistant, alongside an improved configuration experience for command filter rules and command groups

• Asset login ACLs now support configurable approval exemption periods, allowing the same user to reconnect to the same asset with the same account without repeated approval during the configured period [JumpServer EE]

• OAuth2 login now supports user group synchronization, configurable user group attribute mapping, and certificate verification modes [JumpServer EE]

• SAML2 remote metadata now supports configurable certificate verification modes [JumpServer EE]

• Zones now support CIDR configuration, enabling assets to be assigned automatically based on their addresses

• Tabs now support persistent grouping that can be restored in future sessions, with drag-and-drop grouping available by dropping one tab onto another

• Added personal credential creation reminders and daily activity summaries, along with recent usage tracking for credentials such as Access Keys, temporary passwords, and connection tokens

• Session recordings now support batch downloads

• Asset authorizations now support configurable expiration reminders

• Work order auditing now supports filtering and exporting by creation time [JumpServer EE]

• JDMC added primary and standby management, system upgrade management, and patch package management

Improvements

• OpenBao now enables HTTPS by default

• Improved MFA configuration so that user settings follow the system configuration by default, with clear prompts for authentication methods that are not enabled at the system level, while MFA is automatically enabled and cannot be disabled when enforced system-wide

• Improved SQL execution plan visualization in Chen Web with a new summary view and quick-access toolbar actions

• Improved work order exports by converting approval workflows, approvers, approval statuses, and related resources into more readable text [JumpServer EE]

• Improved the Lina search experience by allowing users to edit search condition values

• Access control policies now support asset-based selection for connection methods [JumpServer EE]

• LDAP now supports user group mapping through distinguishedName

• Account templates now explicitly identify fields that inherit values from the template

• In-app notifications now support paginated access to all unread messages

• Improved the mobile experience with better connection button adaptation and a more compact layout

• Improved the keyboard and shortcut controls in the lower-right corner of the interface

• Consolidated Celery logs into a single window with separate tabs

• Improved the default Ansible WinRM configuration when HTTPS is enabled

Bug Fixes

• Fixed an issue that could cause KoKo to crash on certain legacy CPUs

• Fixed an issue where node selections were not saved when creating jobs and improved permission, command filter rule, and data masking rule checks when selecting assets through nodes

• Fixed an issue where Redis SSL verification settings did not take effect

• Fixed issues where LDAP connection timeout settings did not take effect, LDAP HA user sources were recorded incorrectly, and the LDAP user list could fail when sorting fields were unavailable

• Improved Jinja2 content handling and username validation in account automation to prevent invalid discovered accounts from entering downstream automation workflows

• Fixed an inconsistency between the authorization scope and detail list after excluding specific accounts from an asset authorization

• Fixed an issue where anonymous users were not supported correctly for web connections

• Fixed an issue where the scheduled LDAP synchronization toggle was not displayed correctly in the Community Edition

• Fixed an issue where the AI dialog could appear behind the web session interface

• Fixed an issue where the AI panel expanded automatically in the desktop client