Release 13.04.26 | Radius 2.0

What's new:

• Внесены значительные архитектурные изменения в кодовой базе
• Добавлены новые параметры для более гибкой настройки адаптера
• Увеличена производительность при работе с каталогами
• Полностью переработано взаимодействие с trust domains
• Реализована возможность перечисления LDAP групп при недоступности API в блоке ldapServer

<ldapServer
	...
	bypass-second-factor-when-api-unreachable-groups = "your_group1;your_group2"
/>

• Реализована возможность отключать функцию смены пароля

<appSettings>
	...
	<add key="access-challenge-password" value="false"/>
	...
</appSettings>

• Реализована более гибкая настройка для отправки Calling-station-id

<appSettings>
	...
	<add key="ip-from-udp" value="false"/>
	<add key="calling-station-id-attribute" value="new_attribute"/>
	...
</appSettings>

• Добавлен параметр для ограничения размера логов в одном документе:

<appSettings>
	...
	<add key="log-file-max-size-bytes" value="1073741824"/>
	...
</appSettings>

• Добавлены новые атрибуты ideco
• Добавлены новые атрибуты вендора Cisco

Fixes:

• Исправлены ошибки соединения с AD
• Исправлены ошибки при работе с FreeIPA
• Исправлена работа с параметром Calling-station-id
• Удален неактуальный функционал
• Актуализирована работа с конфигурацией

4.0.1

Release 17.11.2025 | Multifactor-Radius-Adapter #127

What's new:

Fix bug with NAS identifier

Release 06.11.2025 | New Version

**NEW:**

Crossplatform MULTIFACTOR RadiusV2 Adapter for Windows and Linux.
https://multifactor.ru/docs/radius-adapter/radiusv2-server-dlya-windows/
https://multifactor.ru/docs/radius-adapter/radiusv2-server-dlya-linux/

3.0.28

Release 24.09.2025 | AccessReject when API timeout

Fixed

• If the multifactor-api-timeout expires, the warning Multifactor API timeout expired will be written and AccessReject will be returned.

3.0.26

Release 04.08.2025 | Acct-Authentic attribute support for winlogon

New

• Added Acct-Authentic attribute support. If the RADIUS packet contains the Acct-Authentic attribute without a domain value, the adapter will skip loading the profile and checking groups membership. If there is no attribute in the packet, the adapter operates in normal mode.
  The adapter interprets the attribute values as follows:

1 - Domain
2 - Local
3 - Microsoft

3.0.24

Release 30.07.2025 | IP white list

New

• Added access control based on IP address. The setting allows connection to the adapter only from the specified IP\subnets. If the setting is empty or does not exist, all IP addresses are allowed.
  Example:

   <add key="ip-white-list" value="192.168.0.1; 127.0.0.1/16; 199.168.0.1-199.168.0.10"/>
  

• Added a condition for caching the second factor based on user groups. If the user is a member of the specified groups, then his successful second factor will be cached. Setting works only together with setting authentication-cache-lifetime. If the setting is empty or does not exist, caching works for all users as normal.
  Example:

   <add key="authentication-cache-groups" value="Auth1;admins"/>
  

3.0.20

Release 15.05.2025 | Сalling-Station-Id for MF cloud

Bugfixes

• Fixed: If the Calling-Station-Id attribute is empty or contains a hostname instead of an IP address, the RADIUS adapter will send the IP address from the UDP packet in the request to the MF cloud.

3.0.18

Release 16.04.2025 | Nested groups search

Fixed

• Fixed missing search for nested user groups when using RADIUS server as first factor.
• The default value for the MF API timeout in the configuration file was set to 65 seconds.

3.0.15

Release 18.02.2025 | Email attribute in API requests

New

• Now if you use active-directory-domain setting then radius adapter will load user profile and send email attribute value in MF API request. If you don't want to send your email you should set privacy-mode.

3.0.13

Release 29.01.2025 | Message-Authenticator attribute

New

• Added Message-Authenticator attribute to all adapter responses.