diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.tar.gz b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.tar.gz
deleted file mode 100644
index 8ee85039a..000000000
Binary files a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.tar.gz and /dev/null differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_all.deb b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_all.deb
deleted file mode 100644
index 660362dfb..000000000
Binary files a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_all.deb and /dev/null differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.changes b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.changes
deleted file mode 100644
index 6066404d3..000000000
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.changes
+++ /dev/null
@@ -1,66 +0,0 @@
-Format: 1.8
-Date: Fri, 07 Aug 2026 15:30:00 +0200
-Source: linuxmuster-api7
-Binary: linuxmuster-api7
-Built-For-Profiles: noudeb
-Architecture: source all
-Version: 7.4.8
-Distribution: lmn74
-Urgency: medium
-Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
-Changed-By: Arnaud Kientz <arnaud@linuxmuster.net>
-Description:
- linuxmuster-api7 - Api for the linuxmuster.net 7 server.
-Changes:
- linuxmuster-api7 (7.4.8) lmn74; urgency=medium
- .
-   * [linbo] Add a dedicated /linbo/sync router: POST /linbo/sync/run
-     (build and run a linbo-remote command), GET /linbo/sync/sessions
-     (list running tmux sessions), GET /linbo/sync/sessions/{hostname}/log
-     (read a session's log) and GET /linbo/sync/hosts/{hostname}/status
-     (probe a host's boot state). Open to school-administrators, scoped to
-     their own school; global-administrators are unrestricted. Closes #32
-     (thanks @TomlDev).
-   * [linbo] Align GET /linbo/hosts/image-status on the same access model:
-     open to school-administrators, filtered to their own school's hosts.
-   * [linbo] Expose LINBO host state and boot logs over HTTP: POST
-     /linbo/hosts/scan (probe online status), POST /linbo/wol (send
-     Wake-on-LAN), GET /linbo/hosts/image-status (last applied image per
-     host) and GET/DELETE /linbo/boot-logs[/{filename}]. Closes #29
-     (thanks @TomlDev). Hardened afterwards: scan_hosts now probes hosts
-     concurrently via asyncio instead of blocking the event loop, and
-     image uploads await each chunk instead of blocking on it too.
-   * [tests] Add a pytest config and a `make test` target that seeds
-     pytests/credentials.py from credentials.sample.py on a clean
-     checkout, so mock-based tests run without real LDAP access. Closes
-     #28, #30 (thanks @TomlDev).
-   * [sophomorix] Notify a configured webhook when a background
-     sophomorix-check/add/update/kill job completes: HMAC-SHA256-signed
-     POST, timestamp mixed into the signature to stop replay, silent
-     no-op without a configured callback_url, never raises. New
-     `notifications:` section in config.yml.
-   * [sophomorix] sophomorix-check now runs as a background job like
-     sophomorix-apply already did, polled via GET
-     /listmanagement/sophomorix-jobs/status/{pid}. Fixes -jj's JSON output
-     being written to stderr and never captured by the job's own output
-     redirection.
-   * [managementgroups] Add/remove members through
-     linuxmuster-tools' GroupManager (batch, proper errors) instead of
-     LMNMgmtGroup (per-member loop, silently warning instead of failing on
-     an unknown user). Scope group/member changes to a given school via
-     @require_school, like the rest of the API.
-Checksums-Sha1:
- 19286e602361584a072fb939e233eeb709f9a447 567 linuxmuster-api7_7.4.8.dsc
- 4187c04a3108756ac07375d6c236d1aab3f2d8a8 114907 linuxmuster-api7_7.4.8.tar.gz
- 42377a368751ad8eb183cd2d7b79c181412be3ac 86590 linuxmuster-api7_7.4.8_all.deb
- e1003805db6a0e020eecc953d7f3468cf9134003 7722 linuxmuster-api7_7.4.8_amd64.buildinfo
-Checksums-Sha256:
- 6da55aa1a2705157e87fba80221f63c7f328b0489083a224d9c9ace2ea4f9f74 567 linuxmuster-api7_7.4.8.dsc
- 270904d5669149ba14a8ac8fe8fe3ba16595884523989c34dbe40b3f6f4b9246 114907 linuxmuster-api7_7.4.8.tar.gz
- 7a2afba12ff47edba1535d76b0b2ba4959a51a36161a6a1f05e5ac344c7298a6 86590 linuxmuster-api7_7.4.8_all.deb
- 8488154bab99ca0c204a0ac89576bf2af1d53652cf96e1102cf656038ab6c130 7722 linuxmuster-api7_7.4.8_amd64.buildinfo
-Files:
- 40fab9f9274aa4032dd49699336c4f39 567 linuxmuster optional linuxmuster-api7_7.4.8.dsc
- 11e79c303a2d8dc12104a109a14c6852 114907 linuxmuster optional linuxmuster-api7_7.4.8.tar.gz
- e7caec09682c8a0c4b1966c53c4d3f9e 86590 linuxmuster optional linuxmuster-api7_7.4.8_all.deb
- 5311ed5064d81a3e364a7a4593355eed 7722 linuxmuster optional linuxmuster-api7_7.4.8_amd64.buildinfo
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.dsc b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.dsc
similarity index 53%
rename from packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.dsc
rename to packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.dsc
index 61b158eb1..2a726a239 100644
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8.dsc
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.dsc
@@ -2,15 +2,15 @@ Format: 1.0
 Source: linuxmuster-api7
 Binary: linuxmuster-api7
 Architecture: all
-Version: 7.4.8
+Version: 7.4.9
 Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
 Standards-Version: 5.0.0
 Build-Depends: debhelper (>= 5.0.0)
 Package-List:
  linuxmuster-api7 deb linuxmuster optional arch=all
 Checksums-Sha1:
- 4187c04a3108756ac07375d6c236d1aab3f2d8a8 114907 linuxmuster-api7_7.4.8.tar.gz
+ a11346606ffaefbf1eb5de53691cba16629ca753 116997 linuxmuster-api7_7.4.9.tar.gz
 Checksums-Sha256:
- 270904d5669149ba14a8ac8fe8fe3ba16595884523989c34dbe40b3f6f4b9246 114907 linuxmuster-api7_7.4.8.tar.gz
+ ee1a94e56f6ae48fc4b4bef71a0d4ae1fff2eacf9aac236f2dc8eb77bd32324e 116997 linuxmuster-api7_7.4.9.tar.gz
 Files:
- 11e79c303a2d8dc12104a109a14c6852 114907 linuxmuster-api7_7.4.8.tar.gz
+ f1896e39763bee992b9ae20f0fe9dfe0 116997 linuxmuster-api7_7.4.9.tar.gz
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.tar.gz b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.tar.gz
new file mode 100644
index 000000000..0c30e0275
Binary files /dev/null and b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9.tar.gz differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_all.deb b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_all.deb
new file mode 100644
index 000000000..ad153cb7b
Binary files /dev/null and b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_all.deb differ
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.buildinfo b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.buildinfo
similarity index 87%
rename from packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.buildinfo
rename to packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.buildinfo
index 58f3fc7e6..17fe6f4e7 100644
--- a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.8_amd64.buildinfo
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.buildinfo
@@ -2,19 +2,19 @@ Format: 1.0
 Source: linuxmuster-api7
 Binary: linuxmuster-api7
 Architecture: all source
-Version: 7.4.8
+Version: 7.4.9
 Checksums-Md5:
- 40fab9f9274aa4032dd49699336c4f39 567 linuxmuster-api7_7.4.8.dsc
- e7caec09682c8a0c4b1966c53c4d3f9e 86590 linuxmuster-api7_7.4.8_all.deb
+ 33eeb63a48f6c0066fe7c2d3aedda1ce 567 linuxmuster-api7_7.4.9.dsc
+ d30f47384eecf61ea6d89bc395e468b2 87560 linuxmuster-api7_7.4.9_all.deb
 Checksums-Sha1:
- 19286e602361584a072fb939e233eeb709f9a447 567 linuxmuster-api7_7.4.8.dsc
- 42377a368751ad8eb183cd2d7b79c181412be3ac 86590 linuxmuster-api7_7.4.8_all.deb
+ b5cd63a35fdf01a0f727a8769660815d335f1b16 567 linuxmuster-api7_7.4.9.dsc
+ 0acb674500b428d4c8afb634cdfd70b6635f6f65 87560 linuxmuster-api7_7.4.9_all.deb
 Checksums-Sha256:
- 6da55aa1a2705157e87fba80221f63c7f328b0489083a224d9c9ace2ea4f9f74 567 linuxmuster-api7_7.4.8.dsc
- 7a2afba12ff47edba1535d76b0b2ba4959a51a36161a6a1f05e5ac344c7298a6 86590 linuxmuster-api7_7.4.8_all.deb
+ 9102651d761b03207b3a59e808f3c5983ccbb4cfb8b8eb6fdd869a881a89589a 567 linuxmuster-api7_7.4.9.dsc
+ 44699c800319abc614cacbad82a66d146d0a715d28e79436a2280544671ec683 87560 linuxmuster-api7_7.4.9_all.deb
 Build-Origin: Ubuntu
 Build-Architecture: amd64
-Build-Date: Fri, 07 Aug 2026 13:13:27 +0000
+Build-Date: Sat, 08 Aug 2026 14:11:02 +0000
 Build-Tainted-By:
  merged-usr-via-aliased-dirs
  usr-local-has-includes
@@ -63,7 +63,7 @@ Installed-Build-Depends:
  g++-13 (= 13.3.0-6ubuntu2~24.04.1),
  g++-13-x86-64-linux-gnu (= 13.3.0-6ubuntu2~24.04.1),
  g++-x86-64-linux-gnu (= 4:13.2.0-7ubuntu1),
- gawk (= 1:5.2.1-2ubuntu0.1),
+ gawk (= 1:5.2.1-2build3),
  gcc (= 4:13.2.0-7ubuntu1),
  gcc-12 (= 12.4.0-2ubuntu1~24.04.1),
  gcc-12-base (= 12.4.0-2ubuntu1~24.04.1),
@@ -94,10 +94,10 @@ Installed-Build-Depends:
  libblkid1 (= 2.39.3-9ubuntu6.5),
  libbsd0 (= 0.12.1-1build1.1),
  libbz2-1.0 (= 1.0.8-5.1build0.1),
- libc-bin (= 2.39-0ubuntu8.8),
- libc-dev-bin (= 2.39-0ubuntu8.8),
- libc6 (= 2.39-0ubuntu8.8),
- libc6-dev (= 2.39-0ubuntu8.8),
+ libc-bin (= 2.39-0ubuntu8.7),
+ libc-dev-bin (= 2.39-0ubuntu8.7),
+ libc6 (= 2.39-0ubuntu8.7),
+ libc6-dev (= 2.39-0ubuntu8.7),
  libcap-ng0 (= 0.8.4-2build2),
  libcap2 (= 1:2.66-5ubuntu2.4),
  libcc1-0 (= 14.2.0-4ubuntu2~24.04.1),
@@ -154,10 +154,10 @@ Installed-Build-Depends:
  libmpfr6 (= 4.2.1-1build1.1),
  libobjc-13-dev (= 13.3.0-6ubuntu2~24.04.1),
  libobjc4 (= 14.2.0-4ubuntu2~24.04.1),
- libpam-modules (= 1.5.3-5ubuntu5.6),
- libpam-modules-bin (= 1.5.3-5ubuntu5.6),
- libpam-runtime (= 1.5.3-5ubuntu5.6),
- libpam0g (= 1.5.3-5ubuntu5.6),
+ libpam-modules (= 1.5.3-5ubuntu5.5),
+ libpam-modules-bin (= 1.5.3-5ubuntu5.5),
+ libpam-runtime (= 1.5.3-5ubuntu5.5),
+ libpam0g (= 1.5.3-5ubuntu5.5),
  libpcre2-8-0 (= 10.42-4ubuntu2.1),
  libperl5.38t64 (= 5.38.2-3.2ubuntu0.3),
  libpipeline1 (= 1.5.7-2),
@@ -168,7 +168,7 @@ Installed-Build-Depends:
  libsframe1 (= 2.42-4ubuntu2.10),
  libsigsegv2 (= 2.14-1ubuntu2),
  libsmartcols1 (= 2.39.3-9ubuntu6.5),
- libssl3t64 (= 3.0.13-0ubuntu3.12),
+ libssl3t64 (= 3.0.13-0ubuntu3.11),
  libstdc++-13-dev (= 13.3.0-6ubuntu2~24.04.1),
  libstdc++6 (= 14.2.0-4ubuntu2~24.04.1),
  libsub-override-perl (= 0.10-1),
@@ -183,7 +183,7 @@ Installed-Build-Depends:
  libuuid1 (= 2.39.3-9ubuntu6.5),
  libxml2 (= 2.9.14+dfsg-1.3ubuntu3.8),
  libzstd1 (= 1.5.5+dfsg2-2build1.1),
- linux-libc-dev (= 6.8.0-137.137),
+ linux-libc-dev (= 6.8.0-136.136),
  llvm-16-linker-tools (= 1:16.0.6-23ubuntu4),
  llvm-17-linker-tools (= 1:17.0.6-9ubuntu1),
  llvm-18-linker-tools (= 1:18.1.3-1ubuntu1),
@@ -205,7 +205,7 @@ Installed-Build-Depends:
  sed (= 4.9-2ubuntu0.24.04.1),
  sensible-utils (= 0.0.22),
  sysvinit-utils (= 3.08-6ubuntu3),
- tar (= 1.35+dfsg-3ubuntu0.4),
+ tar (= 1.35+dfsg-3ubuntu0.3),
  util-linux (= 2.39.3-9ubuntu6.5),
  xz-utils (= 5.6.1+really5.4.5-1ubuntu0.3),
  zlib1g (= 1:1.3.dfsg-3.1ubuntu2.1)
@@ -214,4 +214,4 @@ Environment:
  DEB_BUILD_PROFILES="noudeb"
  LANG="C.UTF-8"
  MAKEFLAGS=""
- SOURCE_DATE_EPOCH="1786109400"
+ SOURCE_DATE_EPOCH="1786197600"
diff --git a/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.changes b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.changes
new file mode 100644
index 000000000..4c2a27f90
--- /dev/null
+++ b/packages/linuxmuster-api7/lmn74/linuxmuster-api7_7.4.9_amd64.changes
@@ -0,0 +1,39 @@
+Format: 1.8
+Date: Sat, 08 Aug 2026 16:00:00 +0200
+Source: linuxmuster-api7
+Binary: linuxmuster-api7
+Built-For-Profiles: noudeb
+Architecture: source all
+Version: 7.4.9
+Distribution: lmn74
+Urgency: medium
+Maintainer: Arnaud Kientz <arnaud@linuxmuster.net>
+Changed-By: Arnaud Kientz <arnaud@linuxmuster.net>
+Description:
+ linuxmuster-api7 - Api for the linuxmuster.net 7 server.
+Changes:
+ linuxmuster-api7 (7.4.9) lmn74; urgency=medium
+ .
+   * [security] check_user_header(), check_host_header() and
+     BasicAuthChecker (GET /v1/auth/) now catch
+     linuxmusterTools.common.LdapNotProvisionedError and return a 503
+     "linuxmuster is not provisioned yet" instead of a raw 500 (header.py)
+     or a misleading 400 "Malformated username" (basic_auth.py) on a fresh
+     install where Samba hasn't been provisioned yet.
+   * [tests] Add pytests/test_header.py and pytests/test_basic_auth.py,
+     mocking the LDAP layer directly (no TestClient needed).
+Checksums-Sha1:
+ b5cd63a35fdf01a0f727a8769660815d335f1b16 567 linuxmuster-api7_7.4.9.dsc
+ a11346606ffaefbf1eb5de53691cba16629ca753 116997 linuxmuster-api7_7.4.9.tar.gz
+ 0acb674500b428d4c8afb634cdfd70b6635f6f65 87560 linuxmuster-api7_7.4.9_all.deb
+ decc307ab070f59f2e9bc488cce6e9f70e7934ff 7719 linuxmuster-api7_7.4.9_amd64.buildinfo
+Checksums-Sha256:
+ 9102651d761b03207b3a59e808f3c5983ccbb4cfb8b8eb6fdd869a881a89589a 567 linuxmuster-api7_7.4.9.dsc
+ ee1a94e56f6ae48fc4b4bef71a0d4ae1fff2eacf9aac236f2dc8eb77bd32324e 116997 linuxmuster-api7_7.4.9.tar.gz
+ 44699c800319abc614cacbad82a66d146d0a715d28e79436a2280544671ec683 87560 linuxmuster-api7_7.4.9_all.deb
+ 251e4a0506d50564fe278bee1d8a32ffcf2cd6ef2a1db499a45cf26abebf212d 7719 linuxmuster-api7_7.4.9_amd64.buildinfo
+Files:
+ 33eeb63a48f6c0066fe7c2d3aedda1ce 567 linuxmuster optional linuxmuster-api7_7.4.9.dsc
+ f1896e39763bee992b9ae20f0fe9dfe0 116997 linuxmuster optional linuxmuster-api7_7.4.9.tar.gz
+ d30f47384eecf61ea6d89bc395e468b2 87560 linuxmuster optional linuxmuster-api7_7.4.9_all.deb
+ a3b07ea204bee168daac82763be9e710 7719 linuxmuster optional linuxmuster-api7_7.4.9_amd64.buildinfo