PHP web based Password Manager for business and personal use.

RubénD

Last update: Dec 26, 2022

Comments

Upgrade 1.2 -> 2.0

Hello,

When the keyupgrade is asked, I write it and I confirm it but there is nothing. The key is asked to me again, while I correctly wrote it. The database is not updated. I use syspass in hosting mode.
kind/bug triage/fixed

opened by Toka69 82
Active Directory Auth not working

The ldap test works fine but when trying to log into syspass with AD creds I get the error below. Thanks for the help.

My config.php

'ldap_ads' => true, 'ldap_base' => 'OU=something,DC=example,DC=net', 'ldap_bindpass' => 'somepassword', 'ldap_binduser' => 'ldapuser', 'ldap_defaultgroup' => 2, 'ldap_defaultprofile' => 2, 'ldap_enabled' => true, 'ldap_group' => 'admins', 'ldap_server' => 'ldaps://usingIPhere',

Error Im seeing "Error while searching user DN"
kind/bug triage/need-test

opened by eth0h4ckr 73
Upgrading to 2.1
Hello,

because some major improvements that have been done on sysPass, there is a new minor revision. Please post the upgrading issues in this thread.

It's very advisable to read the doc on: https://doc.syspass.org

You can also join to a chat room to discuss the upgrading issues

How to test sysPass 2.1 avoiding upgrade the current installation

Perform a full backup. You can use either the sysPass built-in backup or MySQL workbench tool or mysqldump tool

Create a new database (eg. syspass21)

Create a new directory and unpack the new version in it.

Copy all the files located in the config directory to the new config directory and check for the proper permissions.

Import the old database into the new one. You could use the tools above mentioned.

Create the sysPass user (usually sp_admin) in MySQL and grant permissions over the syspass21 database.

Modify config.xml file to change the database name to syspass21 within the tag <dbName></dbName>. Also check that the dbHostis correctly set.

Point your browser to the new URL and follow the upgrading steps

If you have more than 500 accounts a progress bar would be displayed.
Notices
opened by nuxsmin 70

Error updating database (from 1.2 to 2.0)

I get the following error log while attempting to upgrade sysPass and its database, following the instructions exactly at the update page:

[Tue Feb 14 15:10:47.718689 2017] [:error] [pid 20861] [client 192.168.1.xxx:56052] Action: Actualizar Configuraci\xc3\xb3n -- Description:  -- Details: Par\xc3\xa1metro : account_count\nPar\xc3\xa1metro : account_link\nPar\xc3\xa1metro : checkupdates\nPar\xc3\xa1metro : checknotices\nPar\xc3\xa1metro : dbhost\nPar\xc3\xa1metro : dbname\nPar\xc3\xa1metro : dbpass\nPar\xc3\xa1metro : dbuser\nPar\xc3\xa1metro : debug\nPar\xc3\xa1metro : demo_enabled\nPar\xc3\xa1metro : globalsearch\nPar\xc3\xa1metro : installed\nPar\xc3\xa1metro : maintenance\nPar\xc3\xa1metro : passwordsalt\nPar\xc3\xa1metro : session_timeout\nPar\xc3\xa1metro : sitelang\nPar\xc3\xa1metro : version\nPar\xc3\xa1metro : config_hash\nPar\xc3\xa1metro : proxy_enabled\nPar\xc3\xa1metro : proxy_pass\nPar\xc3\xa1metro : proxy_port\nPar\xc3\xa1metro : proxy_server\nPar\xc3\xa1metro : proxy_user\nPar\xc3\xa1metro : resultsascards\nPar\xc3\xa1metro : sitetheme\nPar\xc3\xa1metro : account_passtoimage\nPar\xc3\xa1metro : files_allowed_exts\nPar\xc3\xa1metro : files_allowed_size\nPar\xc3\xa1metro : files_enabled\nPar\xc3\xa1metro : ldap_base\nPar\xc3\xa1metro : ldap_enabled\nPar\xc3\xa1metro : ldap_group\nPar\xc3\xa1metro : ldap_server\nPar\xc3\xa1metro : log_enabled\nPar\xc3\xa1metro : mail_enabled\nPar\xc3\xa1metro : mail_from\nPar\xc3\xa1metro : mail_server\nPar\xc3\xa1metro : wiki_enabled\nPar\xc3\xa1metro : wiki_filter\nPar\xc3\xa1metro : wiki_searchurl\nVersi\xc3\xb3n : 20017021302, referer: https://xxxxxxxxxxxx.net/
[Tue Feb 14 15:10:47.718984 2017] [:error] [pid 20861] [client 192.168.1.xxx:56052] Action: Actualizaci\xc3\xb3n -- Description: Actualizaci\xc3\xb3n de versi\xc3\xb3n realizada. -- Details: Versi\xc3\xb3n : 20017021302\nTipo : config, referer: https://xxxxxxxxxxxx.net/
[Tue Feb 14 15:10:47.726295 2017] [:error] [pid 20861] [client 192.168.1.xxx:56052] initError, referer: https://xxxxxxxxxxxx.net/
[Tue Feb 14 15:10:47.726311 2017] [:error] [pid 20861] [client 192.168.1.xxx:56052] The application needs to be updated, referer: https://xxxxxxxxxxxx.net/
[Tue Feb 14 15:10:47.726322 2017] [:error] [pid 20861] [client 192.168.1.xxx:56052] If you are an administrator, click on the link: <a href="index.php?upgrade=1&a=upgrade">Update</a>, referer: https://xxxxxxxxxxxx.net/
[Tue Feb 14 15:10:47.804479 2017] [:error] [pid 20863] [client 192.168.1.xxx:56064] initError
[Tue Feb 14 15:10:47.804506 2017] [:error] [pid 20863] [client 192.168.1.xxx:56064] Application in maintenance
[Tue Feb 14 15:10:47.804519 2017] [:error] [pid 20863] [client 192.168.1.xxx:56064] It will be running shortly
[Tue Feb 14 15:10:50.321780 2017] [:error] [pid 20861] [client 192.168.1.xxx:56146] initError
[Tue Feb 14 15:10:50.321823 2017] [:error] [pid 20861] [client 192.168.1.xxx:56146] Application in maintenance
[Tue Feb 14 15:10:50.321832 2017] [:error] [pid 20861] [client 192.168.1.xxx:56146] It will be running shortly
[Tue Feb 14 15:11:20.778624 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Exception: SQLSTATE[42S01]: Base table or view already exists: 1050 Table 'publicLinks' already exists, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.780168 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] #0  SP\\Storage\\DB->prepareQueryData() called at [/var/www/html/inc/SP/Storage/DB.class.php:150]\n#1  SP\\Storage\\DB->doQuery() called at [/var/www/html/inc/SP/Storage/DB.class.php:347]\n#2  SP\\Storage\\DB::getQuery() called at [/var/www/html/inc/SP/Core/Upgrade.class.php:109]\n#3  SP\\Core\\Upgrade::upgradeDB() called at [/var/www/html/inc/SP/Core/Upgrade.class.php:64]\n#4  SP\\Core\\Upgrade::doUpgrade() called at [/var/www/html/inc/SP/Core/Init.class.php:647]\n#5  SP\\Core\\Init::checkDbVersion() called at [/var/www/html/inc/SP/Core/Init.class.php:166]\n#6  SP\\Core\\Init::start() called at [/var/www/html/inc/Base.php:107]\n#7  require(/var/www/html/inc/Base.php) called at [/var/www/html/index.php:31]\n, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781507 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Error en la consulta\nSQLSTATE[42S01]: Base table or view already exists: 1050 Table 'publicLinks' already exists (42), referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781524 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 1: SP\\Storage\\DB\\logDBException, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781530 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 2: SP\\Storage\\DB\\getQuery, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781582 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 3: SP\\Core\\Upgrade\\upgradeDB, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781592 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 4: SP\\Core\\Upgrade\\doUpgrade, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781660 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 5: SP\\Core\\Init\\checkDbVersion, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781666 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 6: SP\\Core\\Init\\start, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781672 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Caller 7: \\require, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.781741 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] SQL : 'CREATE TABLE `publicLinks` (  publicLink_id       INT UNSIGNED PRIMARY KEY NOT NULL AUTO_INCREMENT,  publicLink_itemId   INT UNSIGNED,  publicLink_hash     VARBINARY(100)           NOT NULL,  publicLink_linkData LONGBLOB)', referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.789106 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] initError, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.789207 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Error al aplicar la actualizaci\xc3\xb3n de la Base de Datos, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.789215 2017] [:error] [pid 20864] [client 192.168.1.xxx:57128] Compruebe el registro de eventos para m\xc3\xa1s detalles<p class="center"><a href="index.php?nodbupgrade=1">Sign in</a></p>, referer: https://xxxxxxxxxxxx.net/index.php?upgrade=1&a=upgrade
[Tue Feb 14 15:11:20.854715 2017] [:error] [pid 20863] [client 192.168.1.xxx:57164] initError
[Tue Feb 14 15:11:20.854755 2017] [:error] [pid 20863] [client 192.168.1.xxx:57164] Application in maintenance
[Tue Feb 14 15:11:20.854763 2017] [:error] [pid 20863] [client 192.168.1.xxx:57164] It will be running shortly

After telling me (in spanish) the database failed to update, and to check the event log, it asks me to sign in. After signing in, it simply logs right back out and tells me Session finished, then the application goes into maintenance mode.

Running Ubuntu 16.04.1, apache2, MySQL on a different host.

kind/bug triage/need-test triage/need-fix triage/fixed

opened by piknik 66

Syspass don't load for me.

I have installed the syspass plataform and I haven't had any problem but when I put my access login the index.php file don't load fine for me and it shows several errors in my inspector code of chrome. It only loads the search button and some css3 styles.

Anybody can help me?

Thanks. Sorry for my english i'm spanish :D
kind/question

opened by tejadon 62
LDAP config doesnt save password

Dear @nuxsmin Just short note that I've installed 3.0 from devel-3.0 branch. Software is masterpiece 🥇 , but there is an issue with LDAP connector ( I've use last version of FreeIPA server) : When I preconfigure it and run in test all ok.

but when I've try to login with domain password I've receive this error: Unexpected token in JSON In command line : Unable to connect to the LDAP server, referer /var/www/html/lib/SP/Providers/Auth/Ldap/LdapStd.php(139): SP\Providers\Auth\Ldap\LdapBase->connect()\n#1 /var/www/html/lib/SP/Providers/Auth/Ldap/LdapBase.php(136): SP\Providers\Auth\Ldap\LdapStd->connect()\n#2 /var/www/html/lib/SP/Providers/Auth/Ldap/LdapBase.php(301): SP\Providers\Auth\Ldap\LdapBase->connectAndBind()\n#3 /var/www/html/lib/SP/Providers/Auth/AuthProvider.php(110): SP\Providers\Auth\Ldap\LdapBase->authenticate(Object(SP\DataModel\UserLoginData))\n#4 /var/www/html/lib/SP/Providers/Auth/AuthProvider.php(78): SP\Providers\Auth\AuthProvider->authLdap()\n#5 /var/www/html/lib/SP/Services/Auth/LoginService.php(154): SP\Providers\Auth\AuthProvider->doAuth(Object(SP\DataModel\UserLoginData))\n#6 /var/www/html/app/modules/web/Controllers/LoginController.php(63): SP\Services\Auth\LoginService->doLogin()\n#7 [internal function]: SP\Modules\Web\Controllers\LoginController->loginAction()\n#8 /var/www/html/lib/SP/Bootstrap.php(239): call_user_func_array(Array, Array)\n#9 [internal function]: SP\Bootstrap->SP\{closure}(Object(Klein\Request), Object(Klein\Response), Object(Klein\ServiceProvider), Object(Klein\App), Object(Klein\Klein), Object(Klein\DataCollection\RouteCollection), Array)\n#10 /var/www/html/vendor/klein/klein/src/Klein/Klein.php(886): call_user_func(Object(Closure), Object(Klein\Request), Object(Klein\Response), Object(Klein\ServiceProvider), Object(Klein\App), Object(Klein\Klein), Object(Klein\DataCollection\RouteCollection), Array)\n#11 /var/www/html/vendor/klein/klein/src/Klein/Klein.php(588): Klein\Klein->handleRouteCallback(Object(Klein\Route), Object(Klein\DataCollection\RouteCollection), Array)\n#12 /var/www/html/lib/SP/Bootstrap.php(446): Klein\Klein->dispatch()\n#13 /var/www/html/lib/Base.php(74): SP\Bootstrap::run(Object(DI\Container))\n#14 /var/www/html/index.php(28): require('/var/www/html/l...')\n#15 {main}, referer:

Then I found that saved password for this LDAP connection when I push "copy to clipboard is" *** and not my password. ( IN xml file password stored correctly).

I look forward to hearing from you,
triage/need-test

opened by nikitashestakovs 60
Enable Edit for Secondary Groups

Hello,

We've been using syspass at my company and it has been working great so far. We have run into an issue regarding the edit capabilities of users belonging to secondary groups on accounts.

I'm not sure if this is a feature that was disabled in the upgrade but the "enable edit" option doesn't allow users belonging to a secondary group on an account to edit anything on the account. Example: "Test Group" is selected as a secondary group and "Admins" is the main group. I am a member of "Test Group" and the option "Enable Edit" is clicked for this group. However, when I am logged in and trying to update the password for this account, I do not have the ability to edit anything in the account.

Is there a way around this? I understand that the main group is able to edit accounts but we have clients who use our system and we would like for them to have the ability to edit certain accounts . For a lot of these accounts, we would like to allow multiple groups the ability to edit them without giving them account admin status.

Here is the account I would like to give Test User the ability to edit

Here are the permissions I see for this account when logged in as Test User

Thanks for all of your work with sysPass - so far it has been great!
kind/bug kind/fr triage/need-test

opened by johnnyhotpants 59
Updatin from 1.2 to 2.0
Hello,

i am not able to update from 1.2 to 2.0.

i've renamed the webfolder syspass to syspass_old

i've created an new webfolder syspass with the new syspass 2.0 contents

set the correct permissions with chown to the new folders

copied the config files to the new config folder

now every time i call the page in my browser, syspass presents the install page??

How can i update?

regards Sascha
kind/bug triage/fixed
opened by madcoda9000 59
Copy to clipboard not working in IE 11 and SysPass 1.2.0.13

Here's another (small) issue I've found with SysPass 1.2.0.13: there are these great buttons when looking at a password to instantly copy either username or password to the clipboard. It works very well in Google Chrome (which I always use) but I tried the copy-to-clipboard function in IE 11 and it asked for clipboard permissions (which I granted) but nothing was copied. The clipboard still contained the content that I copied previously.

Can you please have a look at it? One of my colleagues always uses IE (for whatever reason...) and he sure would love to copy the password with just a button click. Maybe have a look at https://clipboardjs.com regarding the implementation - on this website it works for Chrome and IE.

Thank you!
kind/bug triage/need-test triage/proposed-fix

opened by davidpsc 50
Call for Translations
Hi, for the upcoming sysPass 1.2 release, we need some help to maintain the translations to the following languages:

German

French

Russian

Hungarian

Any help would be appreciated and if you are able to translate to another language, would be great ;)

Big thanks!!
Notices
opened by nuxsmin 50
Passwords inaccessible "integrity check failed"

Hi,

unfortunately, upgrade did not work as expected.

Starting from 1.2, I upgraded to 2.1.2 which went without errors, so I thought, it was okay. I could add new accounts and everything seemed fine. But is it not.

When I try to show or copy a password which was already present in 1.2, I get eighter the error "integrity check failed" or "Ungültige Option".

My Upgrade is 14 days ago. If I have to switch back to this time point, a couple of new accounts will be lost.

Today, I tried upgrading again to the current release 2.1.3 but the problem is still there.
kind/bug triage/proposed-fix

opened by derStephan 49
Get a password compatible between all keyboards

Is your feature request related to a problem? Please describe. I waste time typing syspass generated passwords on a QWERTY keyboard. I’m on an AZERTY keyboard.

Describe the solution you'd like Have a new button in the password generation options to get a compatible password for QUERTY, AZERTY and MAC keyboards. This button would use the remaining keys in priority on the same location between the all keyboards.

Additional context I use syspass to generate passwords for user sessions and on my servers. when I also use the server console, I take a lot of time to enter my passwords.

opened by mathiaslegrand1 0
Permissions Tool for sysPass

Hi

Few weeks ago i had a task - Import ~2000 accounts and set permissions for each. Current sysPass implementation doesn't provide methods to set permissions via XML \ CSV or even public API.

So i've created a tool to solve this problem :)

Permissions Tool for sysPass

P. S: i hope future version of sysPass will support account permissions :)

opened by lebe-dev 0
Unable to check the sysPass user

Syspass 3.1 Mariadb 10.5

Unable to check the sysPass user (sp_639ca08360cb3) Please, check the DB connection user rights

In the first setup page. All the rights is good in maria db.

(When I try with an user with no rights) Unable to connect to DB Error 1698: SQLSTATE[HY000] [1698] Access denied for user 'glpi'@'localhost'

Database working correctly

opened by Max-ime07 0
Access to custom fields using API

sysPass Version 3.2

Describe the question I believe there's a bit of confusion regarding access to customFields using API.

It has been mentioned by the owner that passing a param: customFields to the request will reveal mentioned fields in a response: https://github.com/nuxsmin/sysPass/issues/1817

There was an implementation of that feature in 2020: https://github.com/nuxsmin/sysPass/commit/3bcf2e0b4d4406fe9a51cba940df01010dd18fe3

But in the current state of code I cannot find any reference to customFields that are related with API not with web part of Syspass.

My question is: is there any possibility of accessing customFields using api in version 3.1 or 3.2. If yes, what's the exact steps to achieve that.

Thanks!

opened by tomaszharazin 0
Migrating from normal installation to docker container

sysPass Version 3.2.11

Describe the question I'm migrating all my services from legacy virtual machines to docker containers. I'm facing issues with syspass as I'm not able to connect to the external database (which I want to keep in a VM at least as for now) with the installer.

I saw there is no environment variable to specify an external MySQL database on the Dockerfile, so I just removed all the db settings on that Dockerfile and tried to run the container just without it, and specify my external database on the installation wizard.

As I was afraid to break something, I'd created a second blank database syspass2 with the very same credentials and granted permissions, but I don't know why, I wasn't able to complete the installation wizard, yet I could reach the database host and port, and double-checked the credentials.

What I'd tried first was to copy the config.xml file from production syspass to the docker version, but it gave a blank screen saying Template does not contain files. My bet was because my production syspass instance has a path with all lower case while docker has the directory syspass as "sysPass" (instead of "syspass"), I did a grep, and it was shown on so many places I desisted to follow that way.

So I did a mysqldump from syspass database and restored into syspass2 database, modified config.xml to point to that database, and also changed the "Installed" parameter on config.xml so now the login screen appears, but I'm not able to login.

I also have LDAP (AD) configured, so I also copied the settings from the syspass VM instance to the docker instance config.xml and I tried with an LDAP user, entered the credentials and it says Your previous password is needed and a screen like this appears

So, I'm really having a bad time migrating syspass, I would appreciate any advice

opened by adocampo 0

Releases(3.2.11)

3.2.11(Jul 2, 2022)
What's Changed

Fix URL encoding by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1856

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.10...3.2.11
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.10(Jul 1, 2022)
What's Changed

Fix URL parser by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1853

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.9...3.2.10
Source code(tar.gz)
Source code(zip)
3.2.9(Jun 25, 2022)
What's Changed

Prevent ClickJacking and update dependencies. by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1846

Activating Open Collective by @monkeywithacupcake in https://github.com/nuxsmin/sysPass/pull/1363

doc: SECURITY.md file by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1847

Merge pull request #1588 by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1848

New Contributors

@monkeywithacupcake made their first contribution in https://github.com/nuxsmin/sysPass/pull/1363

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.8...3.2.9
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.8(Jun 18, 2022)
What's Changed

Add missing tables to tables list. by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1843

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.7...3.2.8
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.7(Jun 18, 2022)
What's Changed

Fix/url regex by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1842

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.6...3.2.7
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.6(Jun 16, 2022)
What's Changed

Bump guzzlehttp/guzzle from 6.5.6 to 6.5.7 by @dependabot in https://github.com/nuxsmin/sysPass/pull/1834

fix: Return safe url for accounts. by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1839

New Contributors

@dependabot made their first contribution in https://github.com/nuxsmin/sysPass/pull/1834

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.5...3.2.6
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.5(Jun 4, 2022)
What's Changed

Fix XSS on some URLs by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1832

Feat/dependencies by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1833

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.4...3.2.5
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.4(May 26, 2022)
Fix syntax error.

Minor code tweaks.

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.3...3.2.4
Source code(tar.gz)
Source code(zip)
3.2.3(May 25, 2022)
Special thanks to @JamieSlome for the XSS notice.

What's Changed

Log which locale failed to load by @sur5r in https://github.com/nuxsmin/sysPass/pull/1585

Fix/xss by @nuxsmin in https://github.com/nuxsmin/sysPass/pull/1826

V3.2- Multiple account editing by group/client/tag by @Fury420 in https://github.com/nuxsmin/sysPass/pull/1810

New Contributors

@sur5r made their first contribution in https://github.com/nuxsmin/sysPass/pull/1585

@Fury420 made their first contribution in https://github.com/nuxsmin/sysPass/pull/1810

Full Changelog: https://github.com/nuxsmin/sysPass/compare/3.2.2...3.2.3
Source code(tar.gz)
Source code(zip)
3.2.2(Mar 13, 2021)
[FIX] Prevent random password generator to crash when chars are skipped. Thanks to @blabllavita . Closes #1641

[FIX] HTTP_X_FORWARDED_FOR header wasn't parsed. Thanks to @jlegido for the feedback. Closes #1653

[FIX] Fix ADS search behavior by unsseting ACCOUNTDISABLE flag for UserAccountControl property, since it prevents to throw the proper status code when authenticating against LDAP. Thanks to @t0l0 for testing. Closes #1574

[MOD] Update dependencies

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.1(Jan 16, 2021)
[FIX] Fix ADS search behavior by unsseting ACCOUNTDISABLE flag for UserAccountControl property, since it prevents to throw the proper status code when authenticating against LDAP. Thanks to @t0l0 for testing. Closes #1574

[MOD] Update dependencies

[MOD] Bump version number

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.2.0(Dec 20, 2020)
Important: PHP < 7.3 support dropped because dependency constraints

This minor version should be a feature release roll out, but due to major dependency issues regarding the PHP version, I decided to move current development to be rolled out in v3.3. Sorry for the inconvenience.

[MOD] Improve backup regex

[FIX] Set coverage mode through env var

[FIX] Set minimum required PHP version to 7.3 because dependency constraints

[MOD] Update dependencies

[FIX] Fix displaying install page when the app is already installed. Thanks to @kmmndr for the notice. Closes #1629

[FIX] Fix issue when dropping DB user after an errored installation.

[ADD] Translation to Japanese. Thanks to @magcho

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.1.2.20030701(Mar 7, 2020)
[FIX] Wrong version constraint for doctrine packages

[MOD] Enforce LDAP schema in ldap_connect function. Skip ldap_connect signature using port because it's deprecated

[ADD] LDAP params tests

[FIX] Do not allow deleting Plugins from the UI. Thanks to @yawnbros for the feedback.

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.1.1.19121601(Dec 16, 2019)
[FIX] Wrong behavior when viewing PDF files. Thanks to @m-shirokov for the notice. Closes #1501

[MOD] Minor code tweaks

[FIX] Wrong behavior when displaying account notes tooltip with multiple lines. Thanks to @MagikEh for the feedback. Closes #1432

[FIX] Wrong behavior when upgrading from v3.0. Thanks to @Envikia for the feedback. Related #1401

[MOD] Improved error code when an unknown API token is used. Thanks to @matejzero for the feedback. Closes #1429

[FIX] Wrong behavior when changing master password and there aren't any accounts for processing. Thanks to @matejzero for the feedback. Closes #1430

[MOD] Skip ext-xdebug from composer required extensions

[MOD] Added PHP 7.3 to composer version matrix

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.22 MB)
3.1.0.19081801(Aug 18, 2019)
Yes, 8 months later a new sysPass version is being released...

This release focuses on solving many issues and implementing an improved plugins data management, by splitting plugin's data into a separate storage (within a database table) and adding encryption at rest.

Note: If you're using sysPass-Authenticator plugin, it needs to be updated to v2.1

Changelog

Fixed

[FIX] Wrong URL when application URL setting is set. Thanks to @kalxasus for the notice. Closes #1395

[FIX] LDAP group filter wasn't applied when importing. Thanks to @twindscheif for the notice. Closes #1390

[FIX] Client custom fields were not created/saved. Thanks to @ZUNbado and @sf32738 for the notice. Closes #1375

[FIX] Skip over initialization when upgrade is needed. Thanks to @Envikia and @alexseys for the notice. Closes #1355

[FIX] Wrong URL handling when downloading files. Thanks to @fprina for the feedback and testing. Closes #1354

[FIX] Wrong field definition on PluginData table. Thanks to @drewlsvern for the feedback. Closes #1326

[FIX] Fix custom fields migration issue. Thanks to @VexedSyd for the feedback. Closes #1273

[FIX] Wrong limit for maximum file size. Thanks to @javierlm for the feedback. Closes #1313

[FIX] Wrong behavior when disabling remote syslog

[FIX] Wrong behavior when saving LDAP server. Thanks to @lreiher for the feedback. Closes #1277

[FIX] Wrong behavior when setting user's email from LDAP when several email addresses are set. Thanks to @ cRaZy-bisCuiT for the feedback. Closes #1283

[FIX] Wrong behavior when updating user's password. Thanks to @vrdominguez for the feedback. Closes #1293

[FIX] Wrong behavior when no mail recipients are set

[FIX] Wrong encoding in text area. Thanks to @pierrehenrymuller for the feedback. Closes #1296

[FIX] Fixed wrong behavior when search operator was set

[FIX] No debug messages when debug mode is activated

[FIX] Fixed wrong behavior when setting password complexity length. . Thanks to @andrucha97 for the feedback. Closes #1280

[FIX] Fixed wrong behavior when searching for accounts on accounts manager. Thanks to @Weptun for the feedback. Closes #1271

[FIX] Fixed Polski language option. Thanks to @pitrov24 for the notice. Closes 1288

[FIX] Added missing Italian language option. Thanks to @Matwolf08 for the notice. Closes #1302

[FIX] Wrong encoding when displaying account's password. Thanks to @DDH112 for the feedback. Closes #1257

[FIX] Wrong behavior when copying account's tags. Thanks to @leBasti91 for the feedback. Closes #1256

[FIX] Wrong behavior when selecting template's view

Improved

[MOD] Improved stacktrace by anonymizing function's arguments data. Thanks to @cRaZy-bisCuiT for the feedback. Closes #1339

[MOD] Bump version & build

[MOD] Improved behavior when searching for user permission on accounts. Thanks to @anth69 for the feedback. Closes #1338

[MOD] Updated translations. Thanks to all contributors.

[MOD] Update Authenticator version in composer.json

[MOD] Minor code tweaks

[MOD] Typo in translation. Related #1313

[MOD] Increase account's name length up to 100 characters long. Related #1071

[MOD] Unlocked PHP 7.3

[MOD] Improved logging messages

[MOD] Code cleanup

[MOD] Minor CSS tweaks

[MOD] Update translations

[MOD] Avoid to import blank client or category name when importing CSV files.

[MOD] Enforce password complexity checking. Thanks to @DDH112 for the feedback. Closes #1226

[MOD] Improved plugins availability detection and skip weird event log entries

Added

[ADD] Added search for accounts name by regular expression. Closes #1311

[ADD] Added missing tests

[ADD] Added client IP address in syslog messages. Thanks to @sebagarayco for the feedback. Closes #1302

[ADD] Allow to change the account's owner and main group when the user is the account's owner. Related #705

[ADD] Allow to set account's owner when creating or copying the account. Related #1264

[ADD] Application URL for handling requests through reverse proxy. Thanks to @rob42 for the feedback. Closes #1218

[ADD] Allow to enable email notifications only for account access requests. Thanks to @jorgemfm for the feedback. Closes #1157

[ADD] Improved plugins data handling by encrypting the plugin's data

Docker tags

https://hub.docker.com/r/syspass/syspass/tags

syspass/syspass:latest syspass/syspass:3.1.0-php7.1 syspass/syspass:3.1.0-php7.2 syspass/syspass:3.1.0-php7.3

With development stuff:

syspass/syspass:3.1.0-dev

Thanks

Big thanks to all contributors who made this work possible by submitting issues, pull requests, translations and donations. Keep pushing! ;)
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.21 MB)
3.1.0.19072001-rc5(Jul 20, 2019)
[FIX] Wrong URL when application URL setting is set. Thanks to @kalxasus for the notice. Closes #1395

[MOD] Update Authenticator version in composer.json

[FIX] LDAP group filter wasn't applied when importing. Thanks to @twindscheif for the notice. Closes #1390

[FIX] Client custom fields were not created/saved. Thanks to @ZUNbado and @sf32738 for the notice. Closes #1375

[MOD] Minor code tweaks

[FIX] Skip over initialization when upgrade is needed. Thanks to @Envikia and @alexseys for the notice. Closes #1355

Source code(tar.gz)
Source code(zip)
3.1.0.19052503-rc4(May 25, 2019)
[FIX] Wrong URL handling when downloading files. Thanks to @fprina for the feedback and testing. Closes #1354

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.21 MB)
3.1.0.19052502-rc3(May 25, 2019)
[MOD] Improved stacktrace by anonymizing function's arguments data. Thanks to @cRaZy-bisCuiT for the feedback. Closes #1339

[MOD] Bump version & build

[MOD] Improved behavior when searching for user permission on accounts. Thanks to @anth69 for the feedback. Closes #1338

[MOD] Updated translations. Thanks to all contributors.

Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.21 MB)
3.1.0.19043001-rc2(Apr 30, 2019)
[FIX] Wrong field definition on PluginData table. Thanks to @drewlsvern for the feedback. Closes #1326

Source code(tar.gz)
Source code(zip)
3.1.0.19042801-rc1(Apr 28, 2019)
This release focuses on solving many issues and implementing an improved plugins data management, by splitting plugin's data into a separate storage (within a database table) and adding encryption at rest.

Note: If you're using sysPass-Authenticator plugin, it needs to be updated

Changelog

Fixed

[FIX] Fix custom fields migration issue. Thanks to @VexedSyd for the feedback. Closes #1273

[FIX] Wrong limit for maximum file size. Thanks to @javierlm for the feedback. Closes #1313

[FIX] Wrong behavior when disabling remote syslog

[FIX] Wrong behavior when saving LDAP server. Thanks to @lreiher for the feedback. Closes #1277

[FIX] Wrong behavior when setting user's email from LDAP when several email addresses are set. Thanks to @ cRaZy-bisCuiT for the feedback. Closes #1283

[FIX] Wrong behavior when updating user's password. Thanks to @vrdominguez for the feedback. Closes #1293

[FIX] Wrong behavior when no mail recipients are set

[FIX] Wrong encoding in text area. Thanks to @pierrehenrymuller for the feedback. Closes #1296

[FIX] Fixed wrong behavior when search operator was set

[FIX] No debug messages when debug mode is activated

[FIX] Fixed wrong behavior when setting password complexity length. . Thanks to @andrucha97 for the feedback. Closes #1280

[FIX] Fixed wrong behavior when searching for accounts on accounts manager. Thanks to @Weptun for the feedback. Closes #1271

[FIX] Fixed Polski language option. Thanks to @pitrov24 for the notice. Closes 1288

[FIX] Added missing Italian language option. Thanks to @Matwolf08 for the notice. Closes #1302

[FIX] Wrong encoding when displaying account's password. Thanks to @DDH112 for the feedback. Closes #1257

[FIX] Wrong behavior when copying account's tags. Thanks to @leBasti91 for the feedback. Closes #1256

[FIX] Wrong behavior when selecting template's view

Improved

[MOD] Typo in translation. Related #1313

[MOD] Increase account's name length up to 100 characters long. Related #1071

[MOD] Unlocked PHP 7.3

[MOD] Improved logging messages

[MOD] Code cleanup

[MOD] Minor CSS tweaks

[MOD] Update translations

[MOD] Avoid to import blank client or category name when importing CSV files.

[MOD] Enforce password complexity checking. Thanks to @DDH112 for the feedback. Closes #1226

[MOD] Improved plugins availability detection and skip weird event log entries

Added

[ADD] Added search for accounts name by regular expression. Closes #1311

[ADD] Added missing tests

[ADD] Added client IP address in syslog messages. Thanks to @sebagarayco for the feedback. Closes #1302

[ADD] Allow to change the account's owner and main group when the user is the account's owner. Related #705

[ADD] Allow to set account's owner when creating or copying the account. Related #1264

[ADD] Application URL for handling requests through reverse proxy. Thanks to @rob42 for the feedback. Closes #1218

[ADD] Allow to enable email notifications only for account access requests. Thanks to @jorgemfm for the feedback. Closes #1157

[ADD] Improved plugins data handling by encrypting the plugin's data

Docker tags

https://hub.docker.com/r/syspass/syspass/tags

syspass/syspass:3.1.0-rc1 syspass/syspass:3.1.0-rc1-php7.1 syspass/syspass:3.1.0-rc1-php7.2 syspass/syspass:3.1.0-rc1-php7.3

With development stuff:

syspass/syspass:3.1.0-rc1-dev
Source code(tar.gz)
Source code(zip)
3.0.5.19020701(Feb 7, 2019)
[FIX] Wrong behavior when creating new users from LDAP during login. Thanks to @javierlm for the feedback. Closes #1187

[FIX] Wrong behavior when displaying profiles on item presets. Thanks to @DDH112 for the feedback. Closes #1223

[FIX] Wrong behavior when copying password to clipboard. Thanks to @Yotouille for the feedback. Closes #1231

[FIX] Import CSV. Thanks to @denibrain for the contribution. Closes #1220

[MOD] Improved URL detection when displaying account search results. Thanks to @nblount for the feedback. Closes #1239

Docker tags

https://hub.docker.com/r/syspass/syspass/tags

syspass/syspass:latest syspass/syspass:3.0.5

With development stuff:

syspass/syspass:3.0.5-dev syspass/syspass:3.0.5-php7.1 syspass/syspass:3.0.5-php7.2

Do you want to download sysPass dependencies manually?

You might want to use this script: https://gist.github.com/nuxsmin/0b564e2bfd6b360538dfb2cf3240ffbb
Source code(tar.gz)
Source code(zip)
vendor.tar.gz(1.21 MB)
3.0.4.19012601(Jan 26, 2019)
[FIX] Wrong behavior when importing CSV. Thanks to @hoboristi for the feedback. Closes #1211

[FIX] Wrong behavior when displaying passwords with special characters. Thanks to @opeshm for the feedback. Closes #1207

[FIX] Fixed wrong behavior when session is timed out

Source code(tar.gz)
Source code(zip)
3.0.3.19012402(Jan 24, 2019)
[FIX] Upgrade not needed when updating between v3 releases. Thanks to @vmario89 for the feedback. Closes #1210

Source code(tar.gz)
Source code(zip)
3.0.2.19012401(Jan 24, 2019)
[FIX] Wrong behavior when upgrading custom fields, public links and API tokens from v2

[FIX] Wrong behavior when clicking on sysPass top-left logo. Thanks to @pierrehenrymuller for the feedback. Related #1209

[MOD] Login method switched over POST in order to avoid max URL length limitation. Related #1184

[MOD] Enable CI for vX.X git refs

[MOD] Display additional information about internal versions

Source code(tar.gz)
Source code(zip)
3.0.1.19012002(Jan 20, 2019)
[FIX] Wrong behavior when logging in using Authenticator plugin. Redirection was wrong when using URI sub-path

[FIX] Wrong behavior when checking saved search filters in context. Thanks to @fprina for the feedback. Related #1178

[FIX] Forced string type juggling for custom fields data. Thanks to @sem174 for the feedback. Closes #1195

[FIX] Missing mapping between v2 and v3 custom fields type. Thanks to @Yotouille for the feedback. Closes #1196

[FIX] Wrong URL used for retrieving fonts resources. Thanks to @yycengbers for the feedback. Closes #1200

[FIX] Wrong behavior when setting security token on log/audit module. Thanks to @schleyk for the feedback. Closes #1182

[MOD] Minor UI tweaks

Source code(tar.gz)
Source code(zip)
3.0.0.18126201(Jan 5, 2019)
Is it a cool naming?: NO, Is it a marketing campaign?: NO, Why did you bump to 3.0 version?:

Because semantic versioning matters. https://semver.org/

Because implements a DDD (https://en.wikipedia.org/wiki/Domain-driven_design) approach-like

Because the very, very, very much changes in base code

Because it will break any existing integration (eg. you will need to tweak API calls)

Because the database structure has changed

I think they are the key reasons to perform such bump, but don't be concerned because they will be good changes, since the code re-usability has been improved a lot and the adoption of Composer (https://getcomposer.org/) as the package manager will give more security and seamless integration using external modules.

More info on: https://syspass.org/en/blog/syspass_v3

Hope you test it!!

https://demo.syspass.org

Installation

Traditional

As said before, this version uses Composer to manage its dependencies so it requires some additional steps (from https://doc.syspass.org/en/installing/index.html) to get it running:

Download or clone sysPass repository

cd to sysPass directory

Download and install Composer: https://getcomposer.org/download/

Install dependencies $ php composer.phar instal --no-dev

Set the correct permissions on directories. Please note that config and backup directories are now within /app

Point your browser to sysPass web server URL

Docker

Please note that these commands won't allocate any persistent storage, so when the containers were removed data will too.

$ docker run -d --name syspass-db -h syspass-db -e MYSQL_ROOT_PASSWORD=syspass mariadb:10.2 $ docker run -d --name syspass-app -h syspass-app --link syspass-db nuxsmin/docker-syspass:3.0-beta # Follow sysPass' container logs. It will display the container's IP address when finished $ docker logs -f syspass-app

Latest documentation (work in progress) on: https://doc.syspass.org
Source code(tar.gz)
Source code(zip)
3.0.0.18110503-beta(Mar 22, 2018)
Is it a cool naming?: NO, Is it a marketing campaign?: NO, Why did you bump to 3.0 version?:

Because semantic versioning matters. https://semver.org/

Because implements a DDD (https://en.wikipedia.org/wiki/Domain-driven_design) approach-like

Because the very, very, very much changes in base code

Because it will break any existing integration (eg. you will need to tweak API calls)

Because the database structure has changed

I think they are the key reasons to perform such bump, but don't be concerned because they will be good changes, since the code re-usability has been improved a lot and the adoption of Composer (https://getcomposer.org/) as the package manager will give more security and seamless integration using external modules.

Hope you test it!!

You can test some PHP flavours on:

PHP 7.0 - http://demo-beta.syspass.org:10080

PHP 7.1 - http://demo-beta.syspass.org:10081

PHP 7.2 - http://demo-beta.syspass.org:10082

Installation

Traditional

As said before, this version uses Composer to manage its dependencies so it requires some additional steps (from https://doc.syspass.org/en/installing/index.html) to get it running:

Download or clone sysPass repository

cd to sysPass directory

Download and install Composer: https://getcomposer.org/download/

Install dependencies $ php composer.phar instal --no-dev

Set the correct permissions on directories. Please note that config and backup directories are now within /app

Point your browser to sysPass web server URL

Docker

Please note that these commands won't allocate any persistent storage, so when the containers were removed data will too.

$ docker run -d --name syspass-db -h syspass-db -e MYSQL_ROOT_PASSWORD=syspass mariadb:10.2 $ docker run -d --name syspass-app -h syspass-app --link syspass-db nuxsmin/docker-syspass:3.0-beta # Follow sysPass' container logs. It will display the container's IP address when finished $ docker logs -f syspass-app
Source code(tar.gz)
Source code(zip)
2.1.16.18061901(Jun 19, 2018)
Hello, I'm back on stable release again!

There have been many bugfixes since the latest release, and they have been delayed because I'm working hard on 3.0 version. Sorry for the delay ;)

[FIX] Fixed annoying issue when installing sysPass for the first time. It shouldn't require any upgrade.

[FIX] Fixed issue when rendering password option on installation page. Thanks to @vmario89 for the feedback. Closes #829

[FIX] Fixed issue with timezone conversion to UNIX time. Thanks to @dvdfabian for the feedback. Closes #858 #871

[FIX] Fixed issue with LDAP email address when it returns more than one result. Thanks to @dvdfabian and @mymasse for the feedback. Closes #967 #855

[FIX] Fixed issue when setting language environment variable on some OS. Thanks to @willw-carallon for the feedback. Closes #900

[FIX] Fixed issue when performing LDAP group lookup. Thank to @dvdfabian for the feedback. Closes #853

[FIX] Fixed wrong field definition for accHistory.notes. Thanks to @katstei for the feedback. Closes #764

[FIX] Typo in regex for detecting a proxy forwarded connection. Thanks to @VitosX for the feedback. Fixes #771

[MOD] Improved behaviour on input of type multiple. Thanks to @vmario89 for the feedback. Closes #839

[MOD] Deleted unused variable in css.php file. Thanks to @cney for the feedback. Closes #801

[MOD] Filter disabled user accounts in ads LDAP

[MOD] Exclude LDAP accounts that don't need passwords

[MOD] Updated German translation. Thanks to @vmario89

Please take a look to 3.0-beta version: http://demo-beta.syspass.org:10080

Your feedback is welcome!
Source code(tar.gz)
Source code(zip)
2.1.15.17101701(Oct 17, 2017)
[FIX] Fixes #762. Wrong port replacement when https protocol is forced. Thanks to @lroellin for the feedback.

[FIX] Closes #751. Fixed Polish language files. Thanks to @osiu97 for the feedback.

[FIX] FIxes #733. Wrong password length when using password generator. Thanks to @nsi-test for the feedback.

[MOD] Improved regex for retrieving ip addresses through reverse proxy.

[MOD] Improved client info data retrieving through reverse proxy.

[MOD] Detect hostname and protocol when accesing through reverse proxy. Thanks to @aeimer for contribution.

Source code(tar.gz)
Source code(zip)
2.1.14.17090101(Sep 1, 2017)
[FIX] Fixed plugins directory listing

[FIX] Added plugins directory (empty by default). Thanks to @ortizleo for noticing

[MOD] Make textareas resizable on height

IMPORTANT, see Plugins notice #702
Source code(tar.gz)
Source code(zip)