Keeper-Security/Commander v18.0.1

Release 18.0.1

on GitHub

Keeper Commander 18.0.1

Breaking changes

• Dropped Python 3.7 support. Minimum supported Python is now 3.8

New commands & features

SSO / Identity

• New sso-cloud command suite for managing Keeper SSO Connect Cloud configurations.

Cloud Secrets

• New cloud secrets import commands for importing secrets from external cloud providers.

KeeperPAM

• New pam connection jit command for managing Just-In-Time (JIT) settings on PAM resource records.
• New --proxy flag for pam tunnel start to enable KeeperDB Proxy mode.
• New saas profile option for pam rotation edit.
• pam launch now available from SuperShell.
• pam tunnel diagnose gains TURN/STUN end-to-end probes and per-test flags; log noise reduced.
• pam project import / extend now supports defining workflows.

Enterprise policy

• Implemented enforcement of Record Password and Record Types policies.
• shared-manager role label renamed to share-manager.

Other

• Password strength now graded via zxcvbn.
• PAM Workflow improvements and workflow-window session hard close.
• Rotation skip feature added (cp-rotation-skip-feat).
• KeeperDrive search command updated.

Fixes & Improvements

• Tunnel: SO_REUSEADDR disabled on tunnel start (prevents binding conflicts).
• PAM record update: added validations on update path.
• KeeperDrive: fixed role labels, kd-shortcut titles, removed kd-rndir inherit flags.
• Service mode: legacy service-config record titles handled gracefully on startup.
• Login UX: correct login --server hint shown for batch vs. shell mode.