You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: enterprise/all-enteprise-features/ldap-and-active-directory-integration/two-way-ldap-and-active-directory-synchronization.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -39,7 +39,7 @@ First, you will need to configure your LDAP connection. Refer to [configuration.
Make sure you selected "Enable LDAP integration" as without it, the two way synchronization won't work. After you fill out all the fields, test your configuration using the "Test" button. 
42
+
Make sure you selected "Enable LDAP integration" as without it, the two way synchronization won't work. After you fill out all the fields, test your configuration using the <imgsrc="../../../.gitbook/assets/image (81).png"alt=""data-size="line"> button. 
43
43
44
44
The LDAP two way synchronization has the following options available:
Copy file name to clipboardExpand all lines: features/setting-up-your-instance/upgrading.md
+12-5Lines changed: 12 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
icon: chevrons-up
3
2
description: Notes on upgrading Defguard and its components
3
+
icon: chevrons-up
4
4
---
5
5
6
6
# Upgrading
@@ -9,6 +9,13 @@ description: Notes on upgrading Defguard and its components
9
9
Before doing any updates please remember to **backup your database.**
10
10
{% endhint %}
11
11
12
+
## 1.3.0 (alpha)
13
+
14
+
* If you used the LDAP integration previously, it will be off by default after upgrading. You will have to manually enable it in the settings in the LDAP tab:\
@@ -53,7 +60,7 @@ You will need to change a duplicate email address before the upgrade by hand via
53
60
54
61
### Desktop Client Real Time Sync
55
62
56
-
From 1.0.0 we have introduced [Enterprise features](../../enterprise/all-enteprise-features/), and one of them is [automatic and real-time desktop client configuration synchronisation](../../enterprise/all-enteprise-features/automatic-real-time-desktop-client-configuration.md).
63
+
From 1.0.0 we have introduced [Enterprise features](../../enterprise/all-enteprise-features/), and one of them is [automatic and real-time desktop client configuration synchronisation](../../enterprise/all-enteprise-features/automatic-real-time-desktop-client-configuration.md).
57
64
58
65
To enable this on an **already configured desktop client** one must perform one time instance update, which will generate necessary tokens on the client to perform from now on automatic updates. In details:
59
66
@@ -74,11 +81,11 @@ This change requires a few changes if you are upgrading:
74
81
75
82
#### Proxy deployment configuration
76
83
77
-
1. Remove `DEFGUARD_PROXY_UPSTREAM_GRPC_URL` variable - since Proxy does not connect to defguard Core any more.
84
+
1. Remove `DEFGUARD_PROXY_UPSTREAM_GRPC_URL` variable - since Proxy does not connect to defguard Core any more.
78
85
2. Proxy is now the server to which defguard Core connects, so you may want to:
79
86
1. Optional: configure non-default Proxy gRPC port with `DEFGUARD_PROXY_GRPC_PORT -` default value is **50051**
80
87
2. If you have a Proxy in a different network segment - eg. have a custom installation (not with one-line install/docker compose all on one server) - you may also consider exposing the gRPC port and reverse-proxy (nginx/treafik/...) the port with SSL/TLS.
81
-
1. (Optional) If you want to use SSL with Proxy gRPC server without revers-proxy (nginx/etc) configure `DEFGUARD_PROXY_GRPC_CERT` and `DEFGUARD_PROXY_GRPC_KEY` following the [SSL setup guide](docker-compose.md#grpc-ssl-setup).
88
+
1. (Optional) If you want to use SSL with Proxy gRPC server without revers-proxy (nginx/etc) configure `DEFGUARD_PROXY_GRPC_CERT` and `DEFGUARD_PROXY_GRPC_KEY` following the [SSL setup guide](docker-compose.md#grpc-ssl-setup).
82
89
3. Also adjust your firewall config to open new Docker port mapping etc. Make sure Proxy gRPC server **can be reached from Core**.
With this release we have added Multi-Factor Authentication to the desktop client. Unfortunately desktop client database has change significantly as well as business logic (for example endpoints to proxy for MFA handshake). We have not stored them previously in the database - thus they cannot be recovered/updated automatically.
123
+
With this release we have added Multi-Factor Authentication to the desktop client. Unfortunately desktop client database has change significantly as well as business logic (for example endpoints to proxy for MFA handshake). We have not stored them previously in the database - thus they cannot be recovered/updated automatically.
117
124
118
125
{% hint style="warning" %}
119
126
That unfortunately means you have to remove all your instances before upgrading (or just remove any desktop client configuration files, including the database) and start the enrollment (adding new instance) again after upgrading - just by adding a new device (you can remove the old one).
0 commit comments