Released on September 1, 2023
Gateway Configuration with an AWS EC2 Instance
An IAM Role Policy can be created and assigned to an EC2 Instance in order to provide the Keeper Gateway service with the required permissions to retrieve the necessary configuration from the AWS Key Management Service (KMS). This method eliminates the need for storing a configuration file on the disk, and instead, stores the configuration file in your AWS KMS.
Updates to handle Non-UTF8 Encoding
Added functionality to ignore bad characters during decoding, addressing potential encoding mismatches, especially with Windows.
Removed the AD Organizational Unit (OU) Check
Removed the OU check feature as it was not performing as expected.
Handle Nologin User Shell
Implemented measures to detect and handle instances with a /sbin/nologin shell or false, searching for a supported shell instead.
Enforced the overriding of the SHELL variable in the spawned shell to prevent inconsistencies.
Clean Up Rotation Action Processes, Use Environment Variable Options
Moved log configuration to process initializer for better control.
Excluded process information in job debug messages temporarily.
Added the ability to obtain command-line parameters from environment variables, providing more flexible configuration options.
Created constants to guide the retrieval of parameters from environment variables.
Prioritized command-line parameters over environment variables to ensure consistency in configurations.
Add MAC_CONFIG_PATH Variable and Permissions Settings
Introduced a MAC_CONFIG_PATH variable pointing to the configuration file for enhanced readability.
Added explicit permission settings for directories and configuration files to bolster security.
Improved Reconnection Strategy
Modified the system to continue reconnection attempts if the WebSocket response code is 500 or greater. Reused reconnection code for HTTP status codes less than 500.
Websocket Client Updates
Modified the 'create_dispatcher' method to choose the correct dispatcher based on SSL configuration, addressing issues when connecting to routers without SSL.
Logging Improvements
Improve Error Messages
Continued refinement of error messages to enhance the user experience and enable more effective troubleshoot
Logging Configuration: Restricted the allowance of multiple configurations for logging to prevent conflicts and potential errors.