Crowd 5.3 Release Notes
19 April, 2024
The Crowd team is proud to bring you Crowd 5.3.
Starting from 5.3, new releases of Crowd will be available only to Data Center customers. Learn what this means for you
Highlights
- LDAP synchronization improvements
- Introducing Software Bill of Materials (SBOMs) in Crowd
- CrowdID removal
- Migration to REST v2
- Non-Marketplace apps upload disabled
More
Read the upgrade notes for important info about this release and see the full list of issues resolved.
LDAP synchronization improvements
Crowd 5.3 brings improvements to the synchronization process which will affect both full and incremental synchronization.
Synchronization is now much faster
We’ve improved the speed of full and incremental synchronization. The exact results will depend on the server performance and the performance/latency of the active directory.Synchronization is now using less memory
Crowd will now avoid duplicating objects that represent a group name or username from the active directory.Synchronization issue with fallback on Microsoft Active Directory is now fixed
We’ve fixed the issue of adding a group to an active directory while full synchronization was running that would cause the next incremental synchronization to fail and fall back to a full synchronization. This would log warnings"Failed to fetch groups by objectGUID"and"Problems while looking up groups by objectGUID in ActiveDirectory detected, falling back to a full sync".
The feature is turned on by default and will be automatically enabled after updating to Crowd 5.3.
Introducing Software Bill of Materials (SBOMs) in Crowd
Continuing our commitment to providing the most secure products for our customers, we’re introducing Software Bill of Materials (SBOMs) for Crowd.
CrowdID removal
The end of support of the OpenID server and client was announced in August 2023 and they’re now completely removed from Crowd 5.3. This means that the Crowd distribution will no longer include openid-server-webapp and openid-client-webapp as these contain dependencies with vulnerabilities.
If you’re using these components, you can still use them from old Crowd distributions as a short-term solution. Longterm, we recommend to switch to another OpenID provider.
Migration to REST v2
Crowd 5.3 upgrades to Platform 6.5.5, which requires migration to REST v2. This feature meant substantial changes due to the migration of Crowd classes participating in REST API from Jackson/Jersey v1 to v2. The new implementation works in the same way as the original one.
Non-Marketplace apps upload disabled
Added on 22 April 2024
Starting from Crowd 5.3.0, manual uploads of non-Marketplace apps are disabled by default. Understand how to re-enable manual uploads
Complete list of changes and improvements
Here's a full list of issues resolved in this release:
Crowd 5.3.0 - 10 April 2024
Crowd 5.3.1 - 17 May 2024
Crowd 5.3.2 - 10 July 2024
Crowd 5.3.3 - 14 August 2024
This release doesn't include any resolved issues from our public instance, only small fixes and improvements.