Pritunl 1.24 Release Announcement
Version 1.24 of Pritunl has been released. This release adds support for user groups, includes several single sign-on improvements, IPv6 changes and improved support for single sign-on with Active Directory.
User groups offer an additional way to control access to VPN servers. User can belong to multiple groups allowing for use cases where user organizations would have overlapping server access requirements. More information on groups can be found in the documentation. The plugin system has also been improved to provide support for settings user groups. More information on the plugin system can be found in the documentation.
Single Sign-On Improvements
Single sign-on with Duo will now automatically use a phone call authorization if the users does not respond to the push authentication within 15 seconds. Push authentication methods will also be cached allowing a user to reconnect to a VPN server from the computer without doing an additional push authentication.
Radius Single Sign-On with Duo
Radius single sign-on can now use Duo to provide push authentication for Radius users.
IPv6 Enabled By Default
Servers will now accept IPv6 connections by default. This will allow IPv6 only clients to connect to VPN servers. The VPN server virtual network will still continue to use only IPv4 unless IPv6 is enabled in the VPN server settings.
Active Directory Support
The Radius single sign-on system has been improved to read the attributes sent by an Active Directory Radius server. This will allow the Active Directory Radius server to delegate which organization and groups users will belong to using custom Radius attributes. Active Directory can set user organization and groups based on network policies such as Active Directory group membership or any other supported conditions. More information on Active Directory support can be found in the Active Directory Single Sign-On tutorial and Active Directory Single Sign-On with Organizations tutorial.