Hi everyone,This stable update finally brings you the promised LDAP+TOTP authentication, but also renewed language translations and several third party software updates for software such as OpenSSL, OpenSSH and Sudo. A reboot is not required, but recommended.Here are the full patch notes:o system: show the actual validation messages for NextCloud backup constraintso system: LDAP import button primary colour and prevent default page submito system: add LDAP+TOTP authentication variant (2FA)o system: avoid silent fatal error when LDAP OUs could not be retrievedo system: avoid duplicated cookies on login page by not closing sessiono system: allow to fully disable misc. reboot failsafe backupso system: switch default argument for return_gateways_status()o system: add "Synchronize config to backup" button to HA status pageo system: disable help text expand when backup fields have no help texto system: sort user and group lists alphabeticallyo interfaces: add CARP info to legacy_interfaces_details()o interfaces: removal of find_interface_subnet() and find_interface_subnetv6()o interfaces: introduce find_interface_network() and find_interface_networkv6()o interfaces: refactor find_interface_ip() and find_interface_ipv6()o interfaces: fix and use ipaddr6_ll return value in find_interface_ipv6_ll()o firewall: extend outbound NAT address source and destination with networkso firewall: fix save error when alias name contains an underscoreo firewall: do not set days or hours when update frequency is emptyo firewall: increase resolve() performance for aliaseso firmware: change packaging to be able to place files in the root directoryo reporting: fix possible division by zero in NetFlow aggregatoro dhcp: reorder arguments of function services_dhcpd_configure()o dhcp: consolidate service probe of IPv6 and router advertisement daemonso dhcp: fix clear hook on log file deleteo importer: make clear that /conf/config.xml is required for any import to take placeo monit: add quotes and timeout to custom program path (contributed by Frank Brendel)o monit: add SSL options to mail server connection (contributed by Frank Brendel)o network time: improve GPS status parsingo openvpn: add remote address as route when set during linkupo shell: interface banner now only shows enabled interfaceso unbound: do not clear statistics when querying themo lang: updates for Chinese, Czech, French, German, Japanese, Portuguese and Russiano mvc: fix toggleBase returning 'failed' result when using $enabledo mvc: fix PortField validation and make well-known ports optionalo mvc: fix checking empty string in grid view (contributed by Smart-Soft)o rc: make it more obvious in /boot/loader.conf that system tunables work as wello ui: sidebar performance optimisation (contributed by Team Rebellion)o ui: vertically center current menu item on visible screen when height is too smallo plugins: os-haproxy 2.10[1][2][3] (contributed by Frank Wall)o plugins: os-igmp-proxy forces reinstall due to missing core functiono plugins: os-ntopng 1.1 adds HTTPS support (contributed by Michael Muenz)o plugins: os-nut fix for config file generation (contributed by Michael Muenz)o plugins: os-postfix fixes typo (contributed by Michael Muenz)o plugins: os-telegraf 1.7.2 adds validation messages to tags (contributed by Michael Muenz)o plugins: os-theme-cicada 1.9 (contributed by Team Rebellion)o plugins: os-theme-tukan 1.8 (contributed by Team Rebellion)o plugins: os-upnp removes unused functiono plugins: os-zabbix-agent 1.4[4] (contributed by Frank Wall)o ports: cyrus-sasl 2.1.27[5]o ports: lighttpd 1.4.51[6]o ports: openssh 7.9p1[7]o ports: openssl 1.0.2q[8]o ports: php 7.1.24[9]o ports: pkg minor upstream fixeso ports: sudo 1.8.26[10]Stay safe,Your OPNsense team--[1] https://github.com/opnsense/plugins/pull/960 [2] https://github.com/opnsense/plugins/pull/970 [3] https://github.com/opnsense/plugins/pull/1003 [4] https://github.com/opnsense/plugins/pull/998 [5] https://www.cyrusimap.org/sasl/sasl/release-notes/2.1/index.html [6] https://www.lighttpd.net/2018/10/14/1.4.51/ [7] https://www.openssh.com/txt/release-7.9 [8] https://www.openssl.org/news/cl102.txt [9] http://php.net/ChangeLog-7.php#7.1.24 [10] https://www.sudo.ws/stable.html#1.8.26