Keeper Commander release version v17.2.8
New Features
- Added --aging flag to compliance report with record aging data (created, last_modified, last_rotation, last_pw_change)
- Added --username and --team filters to all compliance subcommands
- Added --resolve-teams flag to sfr and team-report for expanding team filter to individual team members
- Added pam project extend command
- Added --keeper-db-proxy (-kdbp) flag to pam tunnel edit for pamDatabase records
- Added --launch-user (-lu) flag to pam connection edit for setting launch credentials
- Updated SaaS commands to use new saasConfiguration record type
- Added Enforcement and Managed Node Details to enterprise-info Roles output
Improvements
- Incremental compliance data sync with per-user staleness tracking to avoid full re-fetches on warm cache
- Per-user cache invalidation for filtered compliance reports — only stale users are fetched from the API
- Dynamic chunking with probe timeouts for preliminary compliance data fetching
- Client-side request timeouts to prevent indefinite hangs during compliance sync
- Enterprise and MSP command improvements
Bug Fixes
- Fixed trickle ICE handling for pam launch command
- Fixed lsf returning "No shared folders found" when no search string was provided
- Fixed cc and ls commands to restore regex search behavior
- Fixed invalid base64 handling
- Fixed ACL lookup skipping for configuration records (which have no parent)
- Prevented PAM records from being used in One-Time Shares
- Filtered false-positive record_password_change events in compliance report (first-set events discarded)
Full Changelog: v17.2.7...v17.2.8