multiOTP open source

NEW IN THIS RELEASE

• FIX: Hardware token import was not always working correctly for 013 appliances
• FIX: PHP 8.x incompatibility issue in SMTP library (Thanks to @dexkuz)
• ENH: PHP 8.x deprecated code cleaned
• ENH: Yubikey import now also accept "Yubico CSV" format
• ENH: New 2FA opt-in option, to migrate smoothly from Without2FA accounts to 2FA
• ENH: Better rights handling in the Docker version
• ENH: Embedded Windows PHP edition updated to version 8.5.4 x64
• ENH: Embedded Windows nginx edition updated to version 1.29.7
• ENH: Documentation enhancement

Contributors

• @dexkuz

multiOTP open source

NEW IN THIS RELEASE

• FIX: Changing notification options (SMTP server and SysLog options) was not always possible
• FIX: SMSEagle v2 implementation was not always able to send to international countries
• FIX: websocketCore.php was missing in the sources
• ENH: Template updated to propose the free "multiOTP token app" by default for Android and iOS
• ENH: Embedded Windows PHP edition updated to version 8.4.16 x64 (from 8.4.14 x86)
• ENH: Embedded Windows nginx edition updated to version 1.29.6
• ENH: Updated environment detection, like docker detection
• ENH: Updated Linux helper, for the future new web interface
• ENH: For Windows, WMIC dependencies has been removed and replaced by Powershell commands

multiOTP open source

NEW IN THIS RELEASE

• FIX: Locked and delayed status handled before push status
• FIX: PostgreSQL fix for the fields in the log table
• FIX: Warning issue when using the docker version (old temp folder removed)
• ENH: New SendEmail implementation with internal smtp stack (using smtp parameters)
• ENH: Better Docker integration
• ENH: New options: "don't auto disable" and "don't auto enable" LDAP accounts
• ENH: New SMS library integration and new SMSEagle v2 API support
• ENH: New API functions for the forthcoming VueJS 3.x interface (Q1 2026)
• ENH: New QRcode enrollment for mOTP, compatible with the free multiOTP token App
• ENH: Updated log functions to enhance the log information in the next releases
• ENH: Cleaned logs for unnecessary information
• ENH: New download page for the multiOTP family
• ENH: New multiOTP token App
• ENH: Additional constants in the library
• ENH: Option to disable automatic activation/deactivation of user during LDAP synchronisation

multiOTP open source

NEW IN THIS RELEASE

• FIX: MultiotpXmlParser class adapted to be 100% compatible with the legacy version
• ENH: Embedded Windows PHP edition updated to version 8.4.14
• ENH: The default radius secret is now set to myfirstpass for every device (0.0.0.0/0)

multiOTP open source

NEW IN THIS RELEASE

• FIX: Docker issue

multiOTP open source

NEW IN THIS RELEASE

• FIX: Warning was displayed in some cases when using GetSysLogServer() method
• FIX: Notice was displayed in some cases when using the sms library (MultiotpSms)
• FIX: Implementation check URI no more enabled by default in Windows source
• FIX: Syslog server handling was sometimes generating warnings
• FIX: Better initialization of the config_data array for FreeBSD
• ENH: New Proxmox, OVA and Hyper-V appliances available (version 013, based on Debian 13)
• ENH: Initial Push support with the multiOTP token App, needs multiOTP-gateway-service
• ENH: multiOTP Credential Provider enhanced support
• ENH: URI only reacting on / to avoid intensive hits
• ENH: Embedded Windows PHP edition updated to version 8.4.13
• ENH: Embedded Windows nginx edition updated to version 1.29.2

multiOTP open source

NEW IN THIS RELEASE

• FIX: Windows backup temp folder is now the default system temp folder
• FIX: Adding -sync-delete-retention-days parameter doesn't return missing parameters error
• FIX: Case sensitive issue has been fixed with MSCHAPv2 authentication (thanks Alexey)
• FIX: Case sensitive issue has been fixed during FastCreateUser process
• FIX: {MultiotpUserDisplayName} tag usage in templates (was not replaced in the QRcode)
• ENH: Created users are trimmed to avoid bad space prefix/suffix during copy/paste
• ENH: multiOTP Credential Provider enhanced support
• ENH: New default-2fa-digits command line option to set the default amount of OTP digits
• ENH: PHP 8.4.x deprecated code cleaned (xml_set_object removed)
• ENH: New Message-Authenticator requirement support for FortiGate v7.2.10+, v7.4.5+ and v7.6.1+
• ENH: New SetCurrentUserSid function for new Credential Provider -usersid option
• ENH: Embedded Windows PHP edition updated to version 8.3.15
• ENH: Embedded Windows nginx edition updated to version 1.27.3

multiOTP open source

NEW IN THIS RELEASE

• FIX: Database backend setup and initialization was not working well with some PHP version
• ENH: New option to force writing logs only in file (even if the backend is a database)
• ENH: Spryng SMS provider support
• ENH: PHP 8.2.x deprecated code cleaned (null for string parameters)
• FIX: without2fa token can be now correctly converted to TOTP with default 30 seconds time interval
• FIX: Without2fa tokens with prefix pin where not working with CHAP/MSCHAP/MSCHAPv2
• FIX: Windows: radiusd.conf and clients.conf files removed from the distribution
  (they are created automatically when installing the services using radius_install.cmd)
• ENH: Windows: -debug option removed from the radius module launcher
• ENH: By design, Credential Provider check request don't wait any prefix. This behavior can now be overwrited.

multiOTP open source

NEW IN THIS RELEASE

• FIX: Command line number of parameters detection corrected
• ENH: It's now possible to define the number of digits for new created PIN (multiotp -config default-pin-digits=n)
• ENH: It's now possible to generate the HTML provisioning file by command line (multiotp -htmlinfo username /full/path/to/username.html or multiotp -htmlinfo /full/path/to/folder/ to generate files for all users)
• ENH: Embedded Windows nginx edition updated to version 1.25.3
• ENH: Embedded Windows internal tools updated (wget 1.21.4 and fart 1.99d)
• ENH: Embedded Windows freeradius is now launched using NSSM (instead of SRVANY)

multiOTP open source

NEW IN THIS RELEASE

• FIX: Better Windows nginx configuration support (path backslashes replaced by slashes)
• ENH: Embedded Windows nginx edition updated to version 1.24.0
• ENH: Embedded Windows PHP edition updated to version 8.2.13
• ENH: Better hardware/model detection
• ENH: Documentation enhanced with instructions for RDWeb on Windows
• ENH: Upgrade of some internal tools
• ENH: Better internal configuration organization