| 1 |
SME Server 7.2 Release Notes |
SME Server 7.4 Release Announcement |
| 2 |
============================ |
=================================== |
| 3 |
|
|
| 4 |
June 17 2007 |
November 21 2008 |
| 5 |
|
|
| 6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
| 7 |
SME Server 7.2. This release is based on CentOS 4.5 and all packages |
SME Server 7.4. This release is based on CentOS 4.7. Other major changes |
| 8 |
have been updated to the latest releases. |
in this release are the use dar for backups and the change to UTF-8 |
| 9 |
|
along with translation into 6 additional languages. |
| 10 |
This release contains many new features, all released updates for |
|
| 11 |
SME Server 7.1 and fixes for many reported problems. Upgrades |
|
| 12 |
will be available by CD, the Software Installer and command line. |
All SME Server users should upgrade to this release. |
| 13 |
|
|
| 14 |
All users should upgrade to this release. |
The release should be obtained from your closest mirror, see |
| 15 |
|
http://wiki.contribs.org/SME_Server:Download |
| 16 |
Please report any issues with the SME Server to the bug tracker, |
|
| 17 |
and only there: |
Bug reports and reports of potential bugs should be raised |
| 18 |
|
in the bug tracker (and only there, please); |
| 19 |
http://www.contribs.org/bugzilla/ |
|
| 20 |
|
http://bugs.contribs.org/ |
| 21 |
|
|
| 22 |
Thanks |
|
| 23 |
------ |
Please Note |
| 24 |
The development team would like to thank all of those involved in |
=========== |
| 25 |
this release. However, this distribution cannot continue with the |
It may take up to 48 hours for mirrors to finish syncing, |
| 26 |
current level of support. |
during this time you may experience problems. |
| 27 |
|
|
| 28 |
|
|
| 29 |
Changes in this release |
About SME Server |
| 30 |
======================= |
================ |
| 31 |
|
|
| 32 |
Virus/Spam Scanning |
SME Server is the leading Linux distribution for small and medium |
| 33 |
------------------- |
enterprises. |
| 34 |
- The FuzzyOCR spamassassin plugin has been enabled to detect image spam |
|
| 35 |
- An X-Virus-Checked header is now added to mail when it is virus scanned |
SME Server is freely available under the GNU General Public License |
| 36 |
- sa-update is now run daily to download the latest SpamAssassin rules |
and is only possible through the efforts of the SME Server community. |
| 37 |
- The "freshclam: Update failed" mail now shows the recent history of |
However, the availability and quality of SME Server is dependent on |
| 38 |
the freshclam update process |
meeting our expenses, such as hosting costs, server hardware, etc. |
| 39 |
- The mail server now defers delivery if clamd is unavailable |
|
| 40 |
- Clamd and spamassassin have been updated to the latest releases |
|
| 41 |
|
Thanks |
| 42 |
Other mail system changes |
====== |
| 43 |
------------------------- |
The development team would like to thank all of those involved in |
| 44 |
- Attempts to mail to invalid users now show "Relaying denied" |
this release. However, this distribution cannot continue with the |
| 45 |
instead of "Invalid recipient" |
current level of support. More people are required to help with |
| 46 |
- The qpsmtpd "terse" log plugin is now used, which results in a single |
bug triage and verification testing. |
| 47 |
line summarising each mail |
|
| 48 |
- The qplogsumm.pl tool has been added, which generates mail system |
|
| 49 |
plugin statistics in /var/log/qpsmtpd/state |
This release contains many new features, all released updates for |
| 50 |
- The DNS blacklist plugin would occasionally return "False positive" |
SME Server 7.3 and fixes for many reported problems. Upgrades |
| 51 |
results for multiple overlapping requests. This has been corrected. |
will be available by CD, the Software Installer and command line. |
| 52 |
- It is now possible to tune the memory limit for qpsmtpd |
|
| 53 |
|
|
| 54 |
Disk redundancy |
Upgrades |
| 55 |
--------------- |
======== |
| 56 |
- The default disk layout has changed. A hot spare drive is |
- Always perform a backup prior to major system upgrades |
| 57 |
automatically created if the system has more than three drives. |
- An upgrade will preserve the existing data |
| 58 |
A new boot option "nospare" has been added if you are certain that |
|
| 59 |
you do not want to create the spare. You should only use this option |
|
| 60 |
if you are aware of the consequences of running without a hot spare. |
Changes in this release |
| 61 |
- Errors from add_drive_to_raid are now displayed in the console |
======================= |
| 62 |
- Adding drives with invalid partition tables now works without a reboot |
|
| 63 |
- Attempts to manually add RAID devices to systems without RAID shows an error |
Installer |
| 64 |
|
--------- |
| 65 |
Remote Access |
- Fix grub label to keep consistent with the SME Server brand. |
| 66 |
------------- |
|
| 67 |
- It is now possible to set the TCP port for SSH sessions from the |
Mail system changes |
| 68 |
Remote Access panel. Note: Changing this port affects SSH, SFTP and SCP |
------------------- |
| 69 |
- Issues with SFTP remote access have been corrected |
- Introduce a web interface to configure the pseudonym "visible" property |
| 70 |
- Users can be assigned fixed IP addresses with PPTP |
(internal|external) |
| 71 |
db accounts setprop fredfrog PPTPIP 192.168.1.5 |
- New feature now allows a "catch all" situation where you have the ability |
| 72 |
signal-event remoteaccess-update |
to redirect "@virtualdomain1.com" to user "joe". |
| 73 |
- The PPTP link timeout has been increased to better handle unreliable links |
- Fix the "Ugly" log messages (Use of uninitialized value) when spam checking |
| 74 |
- PPTP has been upgraded to the latest release |
results in 0 hits. |
| 75 |
|
- Emails sent to a null address like ""@domain without the username part |
| 76 |
Backups |
are now rejected. |
| 77 |
------- |
- qplogsumm is a optional feature that should be disabled by default. |
| 78 |
- USB backup and restore has been added to the console |
- A request that the log information is reduced with the default loglevel |
| 79 |
- The tape reminder mail can now be sent to a user other than admin |
setting of 6 in qpsmtpd. |
| 80 |
config setprop backup reminderEmail fredfrog |
- Support for sending mail to ISP via Secure SMTP |
| 81 |
- Backup to desktop no longer affects the BackupType set for tape backups |
- Enable the auth plugin for local lan connections |
| 82 |
- Restores of MySQL databases with binary 'blobs' up to 16MB are now |
- Migrate (remove) "ordb.net" from the RBL lists to prevent mail bouncing. |
| 83 |
supported by default (previous was 1MB). To change the setting: |
- Remove blackhole.securitysage.com as service no longer in use. |
| 84 |
config setprop mysqld MaxAllowedPacket 20MB |
- Remove sbl-xbl.spamhaus.org from default lists and use a more improved |
| 85 |
|
list in zen.spamhaus.org. |
| 86 |
Localisation |
|
| 87 |
------------ |
Console |
| 88 |
- Swedish translations have been added |
------- |
| 89 |
- The Spanish translations have been updated |
- Improved validation will check password on first enter password screen |
| 90 |
- The online manual link now points to the manual in the chosen browser |
before verifying if too simple then asking to verify and proceed to |
| 91 |
language, if such a manual exists |
configuration of server. |
| 92 |
- The en-au and en-nz browser languages are now supported |
- Passwords should be validated for strength on first entry rather than |
| 93 |
|
waiting for the second confirmation entry. |
| 94 |
Software Installer |
- The console should validate passwords using the common method, |
| 95 |
------------------ |
using esmith::util::validatePassword |
| 96 |
- The pacific.net.au mirror has been added as a mirror location. Many |
- The last item in the server console, "Exit from server console", is removed |
| 97 |
thanks to all of our mirrors. |
as it is redundant. |
| 98 |
- It is possible to limit visibility of updates to specific patterns or |
- Display frames in console server-manager. |
| 99 |
repositories (see http://bugs.contribs.org/show_bug.cgi?id=2416 for details) |
When browsing server-manager through console pressing 'H' goes to |
| 100 |
|
http://localhost/server-manager |
| 101 |
Webmail |
|
| 102 |
------- |
Backups |
| 103 |
- Horde, imp, turbo and ingo have been updated to the latest versions |
------- |
| 104 |
|
- Backups now use dar which enables a backup to consist of more than 2GB |
| 105 |
Console |
of data to a workstation in any of the following supported methods: |
| 106 |
------- |
cifs, nfs or local usb disk. It also gives the option to set how many |
| 107 |
- Further validation has been added for the Gateway IP to ensure that |
rotating backups are required and allows to split size of backup |
| 108 |
it is on the same network as the External IP address |
to DVD size. |
| 109 |
|
- Removed 'restore from desktop' functionality |
| 110 |
Server manager |
- The error codes from tar are now logged, in line with flexbackup, and do not |
| 111 |
-------------- |
cause a backup to fail. |
| 112 |
- The new session-based login to the server-manager now works correctly |
- A Iomeage USB REV-drive was by default mounted in /media as a cdrom device. |
| 113 |
on servers where port 80 is blocked |
It is now automagically mounted as an usbdisk so it can be used as a backup |
| 114 |
- The user-password panel now correctly enforces the user password policy |
device without manual intervention. |
| 115 |
- I-bay assignment when a name appears in Domains and Hostnames and Addresses |
- Set dar compression to default to gzip |
| 116 |
now gives preference to the domain setting |
- dar backup to be less verbose in panel |
| 117 |
|
- Correct mounting for usb disks |
| 118 |
UPS |
- no compression for ogg media files |
| 119 |
--- |
- Make dar use defined list of directories to backup |
| 120 |
- More template options are available to support more UPS models |
- Remove obsolete smbfs backup method |
| 121 |
(see http://bugs.contribs.org/show_bug.cgi?id=2791 for details) |
|
| 122 |
|
|
| 123 |
Other fixes and updates |
Localisation |
| 124 |
----------------------- |
------------ |
| 125 |
- Many changes have been made in preparation for migration to CentOS5 |
As part of a major update with translations we have added six new |
| 126 |
- We are now using the CentOS 4 php-pear modules instead of our own builds |
languages and made it much easier to add other languages in the |
| 127 |
- runit was upgraded to the latest release |
future. |
| 128 |
- The runsvctrl command has been replaced by the much simpler 'sv' command |
|
| 129 |
- The server-only firewall code now respects UDPPort configuration settings |
We now support the following languages in the server-manager: Danish, |
| 130 |
- The "use client driver" setting in smb.conf was corrected |
Dutch, English, French, Greek, German, Hungarian, Indonesian, Italian, |
| 131 |
- An apostrophe in the last name caused aliases to be undeletable |
Portuguese, Slovenian, Spanish and Swedish. |
| 132 |
- The hostnames description on the Hostnames and Addresses page was corrected |
|
| 133 |
- Some log warnings from FormMagick were removed |
We have made major strides to assist the non-English community by |
| 134 |
- Unused openldap PID files are no longer created |
using a tool called pootle. This is a web based translation tool that |
| 135 |
- Various minor text corrections to the console |
will allow new languages to be added and existing languages to be more |
| 136 |
- The version number has been removed from the installer splash screen |
easily maintained. |
| 137 |
- It is no longer possible to quit form the initial configuration wizard |
|
| 138 |
before configuring the system |
We have cleaned up a lot of the packages as a part of getting them to |
| 139 |
- The radius templates have been reorganised to simplify extension |
work with pootle. Another big change as part of this upgrade is the |
| 140 |
- The templates.metadata settings can now be provided by a directory of files |
switch from ISO-8859-1 (Latin) charset to UTF-8 (Universal) charset, |
| 141 |
- templates.metadata now provides an option to delete unwanted expansions |
this will allow us to support languages that don't use latin |
| 142 |
- The /etc/pam.d/login fragments have been corrected |
characters (like Greek). |
| 143 |
- The gauge console widget now allows the --clear action to be optional |
|
| 144 |
- The e-smith-service wrapper initscript filename match has been tightened |
Other fixes include updated translations for the existing languages. |
| 145 |
- Empty dnscache forwarder entries are ignored |
|
| 146 |
- The CD no longer says "DVD" in the media check screen |
Software Installer |
| 147 |
- Many old dungog contribs were incompatible, untested or replaced with |
------------------ |
| 148 |
SME Server 7.x features. These packages are now automatically removed |
- smeextras repository added, it is used for building the installer and ISO |
| 149 |
on upgrades |
- The yum-update event now includes the yum-import-keys action to allow |
| 150 |
|
users to update yum packages and configuration without rebooting, |
| 151 |
$Id: README.txt,v 1.16 2006/12/26 22:53:34 gordonr Exp $ |
which enables updating when there is a compatibility problem. |
| 152 |
|
- Correct yum-update-dbs action to adjust yum service properly. |
| 153 |
|
- The BaseURL property has been removed for repos with mirrorlists. |
| 154 |
|
- The message "This system is up to date." is displayed if no updates are |
| 155 |
|
available. |
| 156 |
|
|
| 157 |
|
Webmail |
| 158 |
|
------- |
| 159 |
|
- Horde, imp, turbo and ingo have been updated to the latest versions |
| 160 |
|
- Support the ability to save user kronolith free/busy information to the LDAP |
| 161 |
|
database. |
| 162 |
|
- Servers with a custom template for 110AppRegistryHorde found webmail no |
| 163 |
|
longer worked. |
| 164 |
|
- The name of the webmail installation is now configurable. |
| 165 |
|
To use - config setprop horde Name xxxx ; signal-event email-update. |
| 166 |
|
|
| 167 |
|
Server manager |
| 168 |
|
-------------- |
| 169 |
|
- The name of the log file being viewed via the Server Manager 'View log |
| 170 |
|
files' is now displayed as the first line. |
| 171 |
|
- Disabling the daily update check in the server-manager did not stop the |
| 172 |
|
check4updates task sending mail to the server administrator. |
| 173 |
|
- Server-manager > printers > add printer - now advises users to avoid |
| 174 |
|
certain names and descriptions as this causes printer state to be incorrect. |
| 175 |
|
- Fix the Unknown heading in server-manager after an update. |
| 176 |
|
- Fix inconsistency within the navigation.xx files which no longer adds extra |
| 177 |
|
spaces and newlines in panel headers. |
| 178 |
|
- The Anti-virus (ClamAV) panel text was updated to remove the word 'entire' |
| 179 |
|
as this could be misleading. |
| 180 |
|
- Allow server-manager to successfully create a one character user account. |
| 181 |
|
- After adding a user and trying to set password via server-manager or |
| 182 |
|
user-password using the ";" sign you encountered a "white screen of |
| 183 |
|
death". This was due to the version of perl-Object-Persistence being used. |
| 184 |
|
- Remove the last 'pleasewait' message as it is no longer needed. |
| 185 |
|
- The button to add a new user in the server-manager was missing due to a |
| 186 |
|
problem with the free/busy code in usermanager causing the panel to exit. |
| 187 |
|
|
| 188 |
|
Other fixes and updates |
| 189 |
|
----------------------- |
| 190 |
|
- Updated Samba resolves various file sharing problems |
| 191 |
|
- The length of an Ibay name is now configurable via maxIbayNameLength |
| 192 |
|
- The Samba "unix extensions" are turned off for Mac compatibility |
| 193 |
|
- radiusd.conf allows support for additional authentication methods |
| 194 |
|
- Ability to modify pseudonyms with special characters |
| 195 |
|
- Prevent NameServer being set to current IP of SME Server |
| 196 |
|
- Allow support for server side includes for ibays when a directory is |
| 197 |
|
browsed. |
| 198 |
|
- Made mtu/mru settings configurable. |
| 199 |
|
- Increased the templating in php.ini |
| 200 |
|
- Fixed timezone detection issues for certain timezones during certificate |
| 201 |
|
generation |
| 202 |
|
- Added support for cciss RAID controller |
| 203 |
|
- Enable a new feature to allow admin to have own password not shared with |
| 204 |
|
root. |
| 205 |
|
- nut is now started after the network to avoid mails to the admin mailbox |
| 206 |
|
about lost communication. |
| 207 |
|
- e-smith-openssh contained unused template fragments were removed. |
| 208 |
|
- ibays can now be set as non-browsable (hidden), but accessible via their |
| 209 |
|
UNC. An ibay can be hidden by setting the Browsable property to disabled. |
| 210 |
|
- Suspicious string scanning (supscan) has been disabled due |
| 211 |
|
to being CPU and I/O intensive and prone to producing false positives.. |
| 212 |
|
- The audittool script has been updated to also identify modified events. |
| 213 |
|
- If a custom motd was used this could have been sent with the smolt data, now |
| 214 |
|
only the version from e-smith-release is sent. |
| 215 |
|
- The wrong URL was shown for the smolt profile, it has been updated to |
| 216 |
|
http://smolt.contribs.org/ |
| 217 |
|
- Patch djbdns around TCP bug: http://alkemio.org/dns_transmit-bug.html |
| 218 |
|
- Change license of djbdns to "Public Domain' - |
| 219 |
|
http://cr.yp.to/distributors.html |
| 220 |
|
- Do not display symlinks via ftp. |
| 221 |
|
- New LPRng where both inbuilt filters as well as smbprint filters work. |
| 222 |
|
- Resolved false positives that were being reported by rkhunter. |
| 223 |
|
- Move the clamav scan schedule to the correct crontab file for ease of use. |
| 224 |
|
- Use yum installonlyn plugin to keep only the last 5 kernels. |
| 225 |
|
- Change Wpad URL to match system domain to enable the Wpad feature. |
| 226 |
|
- dnscache will now ignore referrals when in forwardonly mode. |
| 227 |
|
- On servers with no ibays and less than two users the shadow-copy-rotate |
| 228 |
|
script would fail. |
| 229 |
|
- Correct the step-ticker to pool.ntp.org hosts. |
| 230 |
|
- Hide normally hidden files from view when using roaming profiles. |
| 231 |
|
- The dungog yum repository has been obsoleted as the packages are in |
| 232 |
|
smecontribs. |
| 233 |
|
- When a user is deleted from the server-manager his/her pseudonyms should not |
| 234 |
|
appear in any configuration file. |
| 235 |
|
|
| 236 |
|
|
| 237 |
|
General features |
| 238 |
|
================ |
| 239 |
|
- Based on CentOS 4.7 and all available updates |
| 240 |
|
|
| 241 |
|
|
| 242 |
|
There are a few differences from previous releases <=7.2 |
| 243 |
|
======================================================= |
| 244 |
|
|
| 245 |
|
After installing for the very first time: |
| 246 |
|
----------------------------------------- |
| 247 |
|
- First night you may receive an email from cron about sa_updates. |
| 248 |
|
- First night you should receive a large email saying a bunch of |
| 249 |
|
groups/users were removed/added (rkhunter email notification). |
| 250 |
|
- Any time you change users/groups you will receive an email the next day |
| 251 |
|
about those changes (rkhunter email notification). |
| 252 |
|
|
| 253 |
|
$Id: README.txt,v 1.25 2008/10/28 22:57:58 wellsi Exp $ |
Parent Directory
| 
Revision Log
| 
Revision Graph
| 
Patch
