/[smeserver]/cdrom.image/sme10/README.txt

Diff of /cdrom.image/sme10/README.txt

Parent Directory | Revision Log | View Revision Graph Revision Graph | View Patch Patch

-Revision 1.2 by unnilennium,
Wed May 31 17:36:06 2017 UTC
+Revision 1.11 by terryfage,
Sun Jun  6 09:21:29 2021 UTC
 Line 1
- Koozali SME Server 10 Alpha 2 Release
+ Koozali SME Server 10 Final Release Notes "Justine"
- =====================================
+ ============================================
-May 2017
+June 2021
- The Koozali SME Server development team is pleased to announce the release of
+ The Koozali SME Server development team is pleased to announce the
- SME Server 10 Alpha 3 which will be the next major release of SME Server.
+ release of SME Server 10 Final which will be the next major release of
+ SME Server. Code named "Justine"
- This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.
+ This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.
- ***************************
- Koozali SME Server users should not upgrade production servers to this release
+ **********************************************************
- but those who can are encouraged to load the alpha to a dedicated test machine
+ Koozali SME Server users should not upgrade production servers to this.
- and take part in the testing phase.
+ Those with test servers are encouraged to load the release to a
- ***************************
+ dedicated test machine and take part in the testing phase.
+ **********************************************************
- Some notes on Koozali SME Server 10 can be found at
- https://wiki.contribs.org/SME_Server_10.0_Development
+ Some notes on Koozali SME Server 10 can be found at
+ https://wiki.contribs.org/SME_Server_10.0_Development
- Bug reports and reports of potential bugs should be raised in the bug
- tracker (and only there, please);
+ SME10 Roadmap -
+ https://wiki.contribs.org/SME10_Roadmap#SME_10_Final
-     https://bugs.koozali.org/
+ Bug reports and reports of potential bugs should be raised in the bug
- Download
+ tracker (and only there, please);
- ========
- You can download SME Server 10 from
+      https://bugs.koozali.org/
- https://mirror.koozali.org/smeserver/releases/testing/10/
- or for other methods see https://wiki.koozali.org/SME_Server:Download
+ Copy of releaase notes may be found here:
+ https://lists.contribs.org/pipermail/updatesannounce/
- Please note it may take up to 48 hours for mirrors to finish syncing,
- during this time you may experience problems.
+ Download
+ ========
- About SME Server
+ You can download SME Server 10 from
- ================
+ https://mirror.koozali.org/smeserver/releases/testing/10/
- SME Server is the leading Linux distribution for small and medium
+ or for other methods see:
- enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
+ https://wiki.koozali.org/SME_Server:Download
- a non-profit corporation that exists to provide marketing and legal support
- for SME Server.
+ Please note it may take up to 48 hours for mirrors to finish syncing,
+ during this time you may experience problems.
- SME Server is freely available under the GNU General Public License and
- is only possible through the efforts of the SME Server community.
+ About SME Server
+ ================
- However, the availability and quality of SME Server is dependent on
+ SME Server is the leading Linux distribution for small and medium
- meeting our expenses, such as hosting costs, server hardware, etc.
+ enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
+ a non-profit corporation that exists to provide marketing and legal support
- As such, we ask for a donation to offset costs and fund further development.
+ for SME Server.
- a) If you are a school, a church, a non-profit organisation or an individual
+ SME Server is freely available under the GNU General Public License and
- using SME Server for private purposes, we would appreciate you to contribute
+ is only possible through the efforts of the SME Server community.
- within your means toward the costs associated with hosting, maintenance and
- development.
+ However, the availability and quality of SME Server is dependent on
+ meeting our expenses, such as hosting costs, server hardware, etc.
- b) If you are a company or an integrator and you are deploying SME Server in
- the course of your work to generate revenue, we expect you to make a donation
+ As such, we ask for a donation to offset costs and fund further development.
- commensurate with the level of revenue you generate and the number of servers
- your have in the field. Please, help the project
+ a) If you are a school, a church, a non-profit organisation or an
+ individual using SME Server for private purposes, we would appreciate
- Please visit https://wiki.koozali.org/Donate to donate.
+ you to contribute within your means toward the costs associated with
+ hosting, maintenance and development.
- Koozali Inc is happy to supply an invoice for any donations received,
- simply email treasurer@koozali.org
+ b) If you are a company or an integrator and you are deploying SME
+ Server in the course of your work to generate revenue, we expect you to
- Notes
+ make a donation commensurate with the level of revenue you generate and
- =====
+ the number of servers your have in the field. Please, help the project
- In-place upgrades are not supported. It is necessary to backup and then restore.
- (Remember, testing purpose only)
+ Please visit https://wiki.koozali.org/Donate to donate.
- The spare handling for RAID arrays is not implemented.
+ Koozali Inc is happy to supply an invoice for any donations received,
+ simply email treasurer at koozali.org
- USB installs are now supported, see: https://wiki.koozali.org/Install_From_USB
+ Notes
- Current installer is still branded CentOS. A kickstart script allows you to go through the graphical installation process. If your disk is not empty, you will need to use the Anaconda interface to format it and partition it. If it is empty all is automatic. You will have to set your root password twice: once during Anaconda installation (you could use a lame password), a second time in the Koozali SME server configuration process.
+ =====
+ In-place upgrades are not supported. It is necessary to backup and then
- Major changes in this release
+ restore.
- =============================
- This release is based on CentOS 7
+ Restore of a sme9 console or workstation backup is now fully supported, there
+ are cautions to be aware of and followed.
- Changes in this release
- =======================
+ Single disk install no longer creates a degraded Raid1 array, Two or more disks
- see above
+ will be created as a Raid1-6 array, see wiki https://wiki.contribs.org/Raid
- General features
+ The spare handling for RAID arrays is now implemented.
- ================
- - Based on CentOS 7.2.1511 and all available updates
+ Support for further Raid configuration on install is now implemented - see wiki
- Detailed changes in this release
+ New Server-Manager Framework, Mojolicious, is now well on the way to full implementation
- =======================
- Only the changes since SME Server 10 Alpha2 are listed, mainly
+ USB installs are once again fully supported,
- autogenerated from the changelogs.
+ Note: it is important to use recommended apps to create the boot media
+ See: https://wiki.koozali.org/Install_From_USB
- Packages altered by Centos, Redhat, and Fedora-associated developers are
- not included.
+ Netinstall is once again fully supported, additional repos easily added
- General features - Based on CentOS 7.2.1511 and all available updates
+ Install to a system supporting a UEFI BIOS is also now fully supported
- Backups
+ Console backup, and workstation backup to removable storages is now fully supported.
- e-smith-backup
+ Koozali templating is now fully inegrated with systemd
- - added lock during backup to avoid multiple instance running [SME: 9127]
- - code from Stefano Zamboni <zamboni@mind-at-work.it>
+ An enormouse number other under the hood changes, far to numerous to list here
- - added support back to ext2 and ext3 [SME: 9299]
- - fix removable device detection [SME: 9299]
+ The work that has gone into getting SME 10 to this stage has been enormous, an attempt to list
- - console restoration can be launched again from console [SME: 9550]
+ and detail the work that has been done in recent months would not do justice to the effort
- - fixed bug on the dar catalog when backups are not added in it [SME: 9563]
+ contributed by the following,
- - Added e-smith-backup-2.6.0.bz9563.UpdateDarCatalogFollowingBackups.patch
- - Remove the dar exclusion message in the email if there is no exclusion.
+ thank you one and all:
- - Modified e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
- - Added two commented files backup.{include,exclude} in /etc/backup-data.d
+ Jean Phillipe Pialasse
- - Modified e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]
+ Michel Begue
- - Add or remove path in your backup by a file *.include and *.exclude
+ Brian Read
- - Added e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]
+ Catton Durbrow
- - Test if the remote host (cifs/nfs) is up, else save and display a warning.
+ Chris Sansom-Ninnes
- - Added e-smith-backup-2.6.0.bz9090.Testing_the_remote_host_parameters.patch [SME: 9090]
+ Jean-pierre Odion
- - The 'tar backup to desktop' of the backup panel takes consideration of exclusion
+ Zsolt Vasarhelyi
- - Added e-smith-backup-2.6.0.Do_Tar_Exclusion_In_Panel.patch [SME: 9635]
+ John Crisp
- - The 'dar workstation backup' of the backup panel takes consideration of exclusion
+ Terry Fage
- - Added e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
- - The 'tar backup' of the console takes consideration of exclusion and display a page with the exclusion content
+ there have also been many others who have done what they can, thank you:
- - e-smith-backup-2.6.0.Do_Tar_Exclusion_In_the_console.patch [SME: 9635]
+ The changes that have been implemented to ensure the Koozali Sme Server way is fully implemented
- File Server
+ have been far reaching, far to many to try and list, suffice to say long live "Justine".
- e-smith-proftpd
+ Major changes in this release
- - fix typos [SME: 6804]
+ =============================
- - set default as required
+ This release is based on CentOS 7.#
- - NB: client must be set as active connection, not passive
- - updated patch for certificate chain
+ Changes in this release
- - Thanks to Daniel Berteaud
+ =======================
- - Adding TLS support to proftp configuration [SME: 6804]
+ see above and below, too much to list
- - default is enabled but not required, only TLSv1.1 and v1.2
- e-smith-samba
+ General features
- - fix outlook error code 0x8004011c [SME: 10169]
+ ================
- - when setting up and email account on a win10 computer joined to a domain (with roaming profiles)
+ - Based on CentOS 7.9.2009 and all available updates
- - add systemd skip redirect [SME: 9688]
- - Fix deprecated syntax '~' in rsyslog [SME: 9398]
+ Detailed changes in this release
- - added e-smith-samba-2.6.0.bz9398.DeprecatedRsyslogSyntaxSamba.patch
+ =======================
- proftpd
+ Only the changes since SME Server 10 RC1 are listed, mainly autogenerated from the changelogs.
- - AllowChrootSymlinks off could cause login failures depending on filesystem
- permissions: use the IDs of the logging-in user to perform the directory
+ Packages altered by Centos, Redhat, and Fedora-associated developers are not included.
- walk, looking for symlinks, to be more consistent with similar checks done
- during login (#1443507, upstream bug 4306)
+ The changelogs are written per package
- - Crypt::CrackLib always available now
- - Update to 1.3.5e
+ SME built or modified packages - ChangeLogs
- - SFTP clients using umac-64@openssh.com digest failed to connect
- (upstream bug 4287)
+June 2021
- - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer
- dereference (upstream bug 4288)
+ Backups
- - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks
+ flexbackup
- (CVE-2017-7418, upstream bug 4295)
+ - fix package version and release 1.2.1-6.4
- - Change shellbangs in shipped perl scripts to use system perl
+ - new source from debian packages repos 1.2.1-6.4
- - Drop EL-5 support
+ - convert initial release
- - Drop BuildRoot: and Group: tags
+ - remove /usr/share/lintian directory
- - Drop explicit buildroot cleaning in %install section
+ - add convert script to doc directory
- - Drop explicit %clean section
+ - add debian changelog to doc directory
- - /etc/pam.d/password-auth always available now
- - pcre 7.0 or later always available now
+ File Server
- - Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp
+ e-smith-proftpd
- (#1420365, upstream bug 4287)
+ - restart proftpd on ssl-update [SME: 11603]
- - Update to 1.3.5d
+ - cleanup in /etc/rc.d [SME: 9692]
- - Support OpenSSL 1.1.x API (upstream bug 4275)
+ - redirect log away from message [SME: 11384]
- Bug fixes:
+ - fix circular Conflict with proftpd [SME: 11357]
- - SSH rekey during authentication can cause issues with clients
+ - improve protect from proftpd.service running [SME: 11106]
- (upstream bug 4254)
+ - protect from proftpd.service running in place of ftp.service [SME: 11106]
- - Recursive SCP uploads of multiple directories not handled properly
+ - remove system-preset file from usr [SME: 10958]
- (upstream bug 4257)
+ - SSL crt and key to self signed if path does not exist [SME: 11316]
- - LIST returns different results for file, depending on path syntax
+ - add Requires=runit.service [SME: 11245]
- (upstream bug 4259)
+ - execute systemd-reload before service adjust in events [SME: 11228]
- - "AuthAliasOnly on" in server config breaks anonymous logins
+ - remove S95reset-unsavedflag [SME: 11229]
- (upstream bug 4255)
+ - Remove ftp from 'init.d/supervise' [SME: 11106] [SME: 11150]
- - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections
+ - Move ftp service to systemd [SME: 11106]
- (upstream bug 4272)
+ - Create e-smith-proftpd-update event [SME: 11150]
- - Memory leak when mod_facl is used (upstream bug 4278)
- - All FTP logins treated as anonymous logins again (upstream bug 4283,
+ e-smith-samba
- regression in 1.3.5c of upstream bug 3307)
+ - netlogon.bat +x [SME: 11566]
- - Handle client/server version skew in mod_sql_mysql
+ - add possibility to reenable allow execute always on ibays homes or everywhere [SME: 11555]
- (https://forums.proftpd.org/smf/index.php?topic=11887.0)
+ - fix double entries for min protocol [SME: 11558]
- - Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203)
+ - clean rsyslog syntax for smbd and nmbd [SME: 11422]
- - See if we can fix crash in mod_lang
+ - fix noise in message log from nmbd and smbd redirected to dedicated logs [SME: 11349]
- - BR: perl-generators for correct dependencies in utils sub-package
+ - allow using user-create-profiledir action with temp or package-update events [SME: 11348]
- - Prefer %global over %define
+ - fix log noise for smb.service [SME: 11157]
+ - add Restart=always [SME: 11118]
- LDAP
+ - add Restart=always [SME: 11117]
+ - migrate nmbd to systemd [SME: 11118]
- e-smith-ldap
+ - migrate smbd to systemd [SME: 11117]
- - Disable SSLv3, but keep the possibility to enable it again [SME: 10108]
+   create generik smb.service service
- - Better default cipher suite, and honor global suite [SME: 10108]
+ - create e-smith-samba-update event [SME: 11157]
- - systemd skip redirect [SME: 9688]
+ - Fix mutex locking [SME: 11199]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - Fix pid directory [SME: 11198]
+ - Add /etc/krb5.conf as template using templates from smeserver-samba [SME: 11093]
- Localisation
+ - remove win98pwdcache.reg from server-resources [SME: 9060]
+ - set min server and client protocol SMB2 [SME: 10576]
- smeserver-locale
+   add check so max always greater than min
- - apply 2017-04-26 translation patch [SME: 10252]
+ - add port 445 if min server protocol is SMB2 or SMB3 [SME: 10963]
- - updated donate patch to correct location https://wiki.koozali.org/Donate [SME: 9595]
- - applied smeserver-locale-2.6.0-locale-2017-03-03
+ LDAP
- - Added translations smeserver-locale-2.6.0-locale-2016-07-17.patch
+ e-smith-ldap
- - fix wrongly converted http to https in
+ - fix wrong path for templates.metadata [SME: 11595]
- - URL starting with http:// or ftp://
+ - use template for ssl pem [SME: 11595]
- - fix path to documentations (wiki) [SME: 9595]
+ - fix ldap failing to start on initial boot [SME: 11480]
- - convert all koozali url to https
+ - fix wrong alias to ldap.init [SME: 11301]
- - change http://www.smeserver.org\donate to https://wiki.koozali.org/donate [SME: 9595]
+ - add -update event [SME: 11140]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - move ldap to systemd [SME: 11099]
- - change contribs.org to koozali.org [SME: 9595]
+ - move ldap.init to systemd [SME: 11096]
+ - New protocol default as TLSv1.2 [SME: 10936]
- Mail Server
+   New property TLSProtocolMin
+   Ciphers are now ordered with stronger first
- e-smith-email
- - fix webmail status not displaying correctly in manager [SME: 9594]
+ Localisation
- - More change from smtpd to qpsmtpd in masq templates [SME: 9561]
+ smeserver-locale
- - Replace smtpd with qpsmtpd in smtp-auth-proxy [SME: 9554]
+ - apply local 2021-05-12.patch [SME: 11593]
- e-smith-pop3
+ - apply local 2021-01-09.patch [SME: 11310]
- - Honor ConcurrencyLimit and ConcurrencyLimitPerIP prop for pop3 and pop3s
+ - apply local 2019-12-07.patch
- [SME: 10271]
- e-smith-qmail
+ Mail Server
- - Add possibility to exclude users or members of other groups from group
+ djbdns
- email address [SME: 9523]
+ - import modification from SME9 [SME: 11548]
- qmail
+ - improve short ttl cname resolution and glueless answer from akadns [SME: 8362]
- - added documentation [SME: 9705]
+ - 500-cutom-dnscache-maxloop.patch: set QUERY_MAXLEVEL 5 QUERY_MAXLOOP 500 QUERY_MAXNS 16 [SME: 10300]
- - added binaries ipmetest et ipmeprint to help configuration
- - add moreip to avoid loop [SME: 9705]
+ e-smith-email
- - patch from Scott Gifford
+ - add new RAR file signatures to default mailpatterns database [SME: 11265]
- - remove qmail-0.0.0.0.patch as it is included
+ - webmail is only SSL [SME: 11443]
- - Consider literal <> as null sender [SME: 9884]
+ - create -update event [SME: 11133]
- qpsmtpd
+ - move smtp-auth-proxy to systemd [SME: 11102]
- - Removed Message-Id validation, as it rejects MS account validation email [SME: 10139]
+ - allow creation of pseudonyms with setting of local only [SME: 3802]
- - fix whitelist plugin to support helo with naughty rejecting at mail stage [SME: 10112]
- - Validate domains found in uribl with Data::Validate::Domain [SME: 9467]
+ qmail
- - Use eval to fetch dkim policies, prevent fatal errors in case of DNS
+ - add remote tls transport for qmail-remote [SME: 9349]
- timeout [SME: 9480]
+ - updated release number higher than SME9
- - Remove karma rcpt handling (buggy and doesn't make a lot of sense)
+ - now TLS and EHLO are defined to allow proper compilation
- [SME: 9462]
+ - add DEBUG flag for the moment to help configuring -DDEBUG=1
- qpsmtpd-plugins
- - remove whitelit_soft [SME: 10126]
+ smeserver-clamav
- smeserver-dovecot
+ - fix typo and missing +x [SME: 11520]
- - Better default cipher suite, and honor global suite [SME: 10110]
+ - fix issues with non epel standard scan.conf [SME: 11520]
- smeserver-qpsmtpd
+   move clamd.conf to scan.conf
- - Turn DMARC reporting off by default [SME: 10303]
+   remove alias for clamtop
- - update patch smeserver-qpsmtpd-2.6.0-smtpd_to_qpsmtpd.patch [SME: 9478]
+   add a wrapper for clamdscan to force --fdpass
- - Greeting property was still attached to smtpd in a template
+ - ease use of clamdtop [SME: 11313]
- - updated regex for RBL and SBL in smeserver-qpsmtpd-2.6.0-change_rbl_sbl_list_separator.patch
+ - fix Transaction check error [SME: 11311]
- - to take into account list using a subdomain [SME: 10123]
+ - add pid folder /run/clamd/ [SME: 11103]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+   few improvements
- - Turn SPF and DMARC rejects off by default [SME: 9664]
+ - create update event [SME: 11162]
- - Fix disabling DMARC reporting [SME: 9206]
+ - Updated to use 0.103+ from EPEL [SME: 11194]
- - Add missing tnef2mime and MaximumDateOffset to qpsmtpd [SME: 9560]
+ - Updated to use systemd for clamd [SME: 11103]
- smeserver-spamassassin
+ - Updated to use systemd for freshclam [SME: 11104]
- - Rewrite spamd run script to add support for --allow-tell [SME: 10137]
+ - increase lower memory limit to 1GB [SME: 10833]
+ - fix for AllowSupplementaryGroups warning [SME: 10813]
- Server manager
+   thanks to bunkobugsy
- e-smith-manager
+ smeserver-dovecot
- - add a panel to ease reporting bugs [SME: 8783]
+ - ssl pem update via template expand in place of copy [SME: 11601]
- - Original work from Mats Schuh m.schuh@neckargeo.net
+ - clean rsyslog syntax for dovecot [SME: 11422]
- - fix warning uninitialized value in lc [SME: 10209]
+ - add Restart=always [SME: 11101]
- - fix typo in e-smith-manager-2.8.0-bz10167-emptyback.patch
+ - fix path for event -update [SME: 11101]
- - avoid internal server error if empty back parameter [SME: 10167]
+ - cleanup /var/service/dovecot [SME: 11101]
- - return user friendly message
+   close logger and service from previous runit instance before starting systemd one
- - fix too short timeout in server-manager [SME: 9921]
+ - add systemd drop-in expand in bootstrap-console-save, console-save, post-install, post-upgrade [SME: 11101]
- - now 30 min as default instead of 5
+ - move service to systemd [SME: 11101]
- - possibility to change this and adapt the default 0.66 of timeout remaining to reset it
+ - add imap idle notify interval setting [SME: 10947]
- - by default only a session cookie, can activate persistent cookie
+ - fix typo in enabling TLSv1.2 as default [SME: 10934]
- - sha256 as encryption.
+ - fix typo in 35ssl template [SME: 10934]
- - fix bad redirection parameter that might reveal session information to remote site [SME: 9924]
+ - fix typo in createlinks [SME: 10932]
- - added missing template-begin for tkt.css [SME: 9676]
+ - revert property names with period in it [SME: 10934]
- - Update server-manager to Koozali branding [SME: 9676]
+ - add property AcceptFullEmail with enabled as default [SME: 9865]
- - We thanks John Crisp for his wonderful work.
- - change link for donation to koozali.org [SME: 9599]
+ smeserver-qpsmtpd
- - Fix syntax for removing Indexes options [SME: 9587]
+ - update depreacted reject_threshold to reject [SME: 11492]
- - Remove index option for manager's resources [SME: 9587]
+ - remove /usr/lib/systemd/system-preset/80-koozali-qpsmtpd.preset [SME: 10958]
- - fix 307 redirection to http when https is used [SME: 8825] [SME: 9583]
+ - modify for clamav 0.103.0 [SME: 11210]
- - update syntaxe for TKT Auth
+ - roll up patches
- - bump 8 for typo
+ - add Requires=runit.service (qpsmtpd & sqpsmtpd) [SME: 11245]
- - Fix a syntax error in server-manager's logout script [SME: 9527]
+ - fix service not enabled [SME: 11107]
- e-smith-starterwebsite
+   remove reset-unsavedflag
- - fix can't chownfile index file [SME: 9900]
+ - Move qpsmtpd & sqpsmtpd services to systemd [SME: 11107]
- perl-CGI-FormMagick
+ - Create smeserver-qpsmtpd-update event [SME: 11164]
- - fix uninitialized value $what_to_make in lc [SME: 10210]
+ - expand badrcptto_ext when needed [SME: 10638]
- php
+   this avoid user, group or pseudonyms for internal purpose to be reachable
- - bz2: fix improper error handling in bzread() CVE-2016-5399
+   from outside
- - gd: fix integer overflow in _gd2GetHeader() resulting in
+ - minimum Protocol TLSv1.0 [SME: 10460]
- heap overflow CVE-2016-5766
+   better ciphers order.
- - gd: fix integer overflow in gdImagePaletteToTrueColor()
- resulting in heap overflow CVE-2016-5767
+ smeserver-spamassassin
- - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
+ - prevent noise in log at spamassassin call from qpsmtpd [SME: 11491]
- CVE-2016-5768
+ - clean rsyslog syntax for spamd [SME: 11422]
- - don't set environmental variable based on user supplied Proxy
+ - remove warning while trying to delete file when missing in post script [SME: 11375]
- request header CVE-2016-5385
+ - remove spamd reference as service use spamassassin.service [SME: 11375]
- - fix segmentation fault in header_register_callback #1344578
+   migrate spamd propertie SpamLearning to spamassassin
- - curl: add options to enable TLS #1291667
+   template for /etc/sysconfig/spamassassin, revert --allow-tell option
- - mysqli: fix segfault in mysqli_stmt::bind_result() when
+   stop spamassassin spamd and delete /etc/systemd/system/spamassassin.service link if exists
- link is closed #1096800
+ - fix typo [SME: 11361]
- - fpm: fix incorrectly defined SCRIPT_NAME variable when
+ - fix spamd unable to load [SME: 11361]
- using Apache #1138563
+ - redirect spamd loging to spamd.log instead of message [SME: 11362]
- - core: fix segfault when a zend_extension is loaded twice #1289457
+ - add requires DCC as we have built it [SME: 11065]
- - openssl: change default_md algo from MD5 to SHA1 #1073388
+ - fix smeserver-spamassassin-update event fix [SME: 11166]
- - wddx: fix segfault in php_wddx_serialize_var #1131979
+ - Start systemd migration. Remove symlinks [SME: 11224]
- - session: fix segfault in session with rfc1867 #1297179
+ - remove refresh clam as this will be provided by clamav
+ - require spamassassin 3.4.4 +
- Webmail and Groupware
+ Server manager
+ e-smith-formmagick
- Web Server
+ - fix wrong PATH which makes fail grub reconfiguration [SME: 11556]
+ - increase CSRF timeout from 120s to 180s [SME: 10902]
- e-smith-php
+   added property httpd-admin{csrfTimeout} in second to override
- - clean daily session and tmp folders [SME: 9626]
+   added hability to ovarride the Timeout from panel to panel
- - updated path for ibays' session and tmp folders to /var/cache
+ - add update event [SME: 11136]
- - add tmp folder to ibays [SME: 7011]
+ - add locale for CSRF [SME: 10626]
- - add session folder to ibays [SME: 9620]
+ - add CSRF patch [SME: 10626] - thank you to Daniel Berteaud
- - change global session folder from /tmp to /var/lib/php/session/ [SME: 139]
+ Webmail and Groupware
- Other fixes and updates
+ smeserver-horde
+ - fix missing call to perl module emsith::php [SME: 11489]
- e-smith-base
+ - clean rsyslog syntax for horde [SME: 11422]
- - Expand route-bond0 when nic bonding is enabled [SME: 10272]
+ - improved php basedir, with filtering of noise for gpg [SME: 10945]
- - improve regex to catch local [SME: 9724]
+ - force SSL for horde [SME: 11443]
- - change smtpd to qpsmtpd for default service access [SME: 9478]
+ - fix horde not honoring switch to php-fpm 5.4 [SME: 11433]
- - add translation links for manager to most language variations we support [SME: 11121]
+ - update mail settings for the php-pool [SME: 11431]
- - prevent restoration from being called on regular and post-upgrade reboot [SME: 9550]
+ - spamd SpamLearning property migrated to spamassassin SpamLearning [SME: 11376]
- - console restoration can be launched again from console
+ - Configuration is not up to date, hash to update [SME: 11308]
- - Use ip route syntax to define routes to local network [SME: 10083]
+ - fix wrong template path for php55, php56 and php [SME: 11255]
- - Allow /32 masks on the external interface, in which case we don't
+ - fix webmail not accessible after enabling from manager [SME: 11233]
- check if the gateway is on the correct network) [SME: 9610]
+ - update rsyslog syntax [SME: 11016]
- - fix config db locale property [SME: 9724]
+   move fragment so syntax is similar to message
- - adapt e-smith service command to systemd [SME: 9672]
+ - remove harcoded ports [SME: 10969]
- - add systemd skip redirect to e-smith-service [SME: 9688]
+ - add gpg to php base dir [SME: 10945]
- - fix broken link /etc/init.d/supervise/local link [SME: 9687]
+ - workaround logging noise caused by libsasl [SME: 10943]
- - fix mysqld to mariadb [SME: 9438]
+ - log as admin and not admin@domain for cli tasks [SME: 10910]
- - fix missing path to chkconfig [SME: 9641]
+ - fix ingo imap preferences [SME: 10912]
- - Fix deprecated syntax '*' in rsyslog [SME: 9398]
+ - allow httpd-auth for calendar, tasks access using rpc.php ... [SME: 10908]
- - Added e-smith-base-5.8.0.bz9398.DeprecatedRsyslogSyntax.patch
+ - add smeserver-horde-update event [SME: 10909]
- - Set the hostname by hostnamectl [SME: 9631]
+ - avoid loss of user parameter on Primary Domain change [SME: 1005]
- - Stefano Zamboni <zamboni@mind-at-work.it>
+   this will also avoid the loss of parameter if we log with a different virtualhost
- - fix Lang and keyboard layout configured are not used [SME: 9539]
+   horde preference is now stored with the SME username without @domain
- - Fix display of email forward fields since smtpd entry has been merged
+ - fix bad regex to strip domain [SME: 10224]
- qpsmtpd [SME: 9552]
+   also we can now force Primary domain to use as default email
- e-smith-devtools
+   we can strip heading string from virtualhost domain to create email
- - added grub2 directories to ignore list [SME: 10325]
+   default identity email will update as long as no other identity is created for the user
- - Quote filenames in genfilelist so filenames containing spaces are correctly
+ - fix typo in php-fpm patch [SME: 10872]
- handled [SME: 9750]
+ - remove php3 references [SME: 10866]
- e-smith-grub
+ - remove strict and warning alert from error log [SME: 10823]
- - rebuild for file ownership conflict [SME: 10325]
+ - dedicated php-fpm pool for horde [SME: 10872]
- - fix edition and consol grub terminal not visible because of koozali logo [SME: 9728]
+ - apply patches from John H. Bennett III [SME: 10717]
- - enable quota for groups and users with XFS [SME: 10211]
+ - cvs admin -ko on patch1
- - Koozali grub splash screen
- - Write the full path for the grub Action [SME: 9668]
+ Web Server
- - Added e-smith-grub-2.6.1.bz9668.AddFullPath2GrubAction.patch
+ e-smith-apache
- - New source [SME: 9321]
+ - add possibility to force https on LAN only [SME: 11511]
- - Adaptation to grub2 [SME: 9321]
+   usefull for VPN over port 443
- e-smith-hosts
+ - prevent httpd to fail if modSSL defined certs does not exist [SME: 10826]
- - remove reference to smtpd [SME: 9478]
+   default on self generated cert
- - fix servicename syslog to rsylog [SME: 9691]
+ - create-update event [SME: 11123]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - move httpd-e-smith to systemd [SME: 11111]
- by assuming the date is correct and changing the weekday.
+   changed sigusr1 used in events to reload as defined in the unit file
- - fix mysqld to mariadb [SME: 9438]
+ - give a logger to httpd-e-smith : journald [SME: 1416]
- e-smith-ibays
+ - set default SSLStrictSNIVHostCheck to off [SME: 8693]
- - fix typo thanks to Stephane de Labrusse [SME: 7011]
+ - add SNI support for individual certificates per VirtualHosts [SME: 8693]
- - ibay to ibays
+ - port 80 and 443 should not be hardcoded [SME: 9192]
- - as per comment 2 of bug 0600 instead of 0700 for perms [SME: 9621]
+ - e-smith-apache removing hardcoded ports [SME: 10966]
- - as discussed, moving cache and tmp out of ibay folder [SME: 9105] [SME: 9621]
+ - remove php3 and php4 refs [SME: 10867]
- - creating basedir /var/cache/e-smith/files/ibays for tmp and cache
+ - disable TLSv1 TLSv1.1 by default [SME: 10459]
- - create tmp folder in ibays when needed [SME: 9105]
- - create session folder in ibays when needed [SME: 9621]
+ Other fixes and updates
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ e-smith-base
- e-smith-lib
+ - fix missing export [SME: 11620]
- - remove reference to smtpd in configuration.conf [SME: 9478]
+ - fix issue with adding new user to the ldap db [SME: 11607]
- - fix console startup display [SME: 9352]
+ - always renew self signed certificate [SME: 11552]
- - fix service name syslog to rsyslog [SME: 9691]
+   update key / crt if not signed with the right key size
- - fix mysqld to mariadb [SME: 9438]
+   default to self signed if custom cert and key are not files or not rigth type
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+   add perl module to help handle certificates and keys
- - fix esmith::util::serviceControl to manage systemd service [SME: 9660]
+   TODO: check if both key and cert are related, if not default to self signed
- - Added e-smith-lib-2.6.0.bz9660.serviceControlSystemd.patch
+ - fix openssl.conf not generated when openldap field are empty [SME: 11569]
- e-smith-mysql
+ - fix missing path to systemctl for add-wants [SME: 11537]
- - systemd skip redirect [SME: 9688]
+ - merge dhcpdmanager custom template fragments with core [SME: 10657]
- - Corrected a typo in e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch
+ - remove templates-custom previously owned by a contrib [SME: 11508]
- - [SME: 9671]
+   they got migrated as part as normal backup restore
- - fix broken link /etc/init.d/supervise/mariadb [SME: 9686]
+ - fix masq failing on initial boot [SME: 11479]
- - Remove Dummy database from backup and restoration [SME: 9671]
+ - removing weekly cron for ddns update, targeted script has been removed [SME: 11470]
- - Added e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch
+ - revert e-smith-service file [SME: 9692]
- - fix forgotten mysqld variables in various scripts [SME: 9438]
+ - add systemctl wrapper [SME: 11345]
- - e-smith-mysql-2.6.0-mariadb_forgotten_var.patch
+ - clean rsyslog syntax for dhcpd [SME: 11422]
- e-smith-ntp
+ - cleanup /etc/rc.d and /var/service [SME: 9692]
- - fix wrong link to restart rsyslog [SME: 9690]
+ - remove klogd references [SME: 11363]
- e-smith-proxy
+ - restore part of pptp code and move to generik vpn entry [SME: 11374]
- - fix disabling smtp proxy via SM doesn't work [SME: 9639]
+ - drop dyndns core support [SME: 11415]
- - redirect squid syslog messages to /var/log/squid/squid.log [SME: 79]
+ - fix enabled service not started on reboot [SME: 11355]
- - Allow custom file descriptor limit, and set default to 4096 [SME: 9912]
+   unless a power outage, as long as you reboot, halt or shutdown systemd will
- e-smith-quota
+   be in sync
- - enable quota for groups and users with XFS [SME: 10211]
+ - fix console::startup run twice [SME: 11358 ]
- e-smith-runit
+ - improve run order in systemd-default [SME: 11356]
- - add systemd skip redirect [SME: 9688]
+ - fix uninitialized value during post-install [SME: 11350]
- e-smith-test
+ - fix user with rssh shell need to be member of rsshusers group [SME: 9155]
- - remove reference to smtpd [SME: 9478]
+ - add missing /sbin/e-smith/bootstrap-runlevel7 [SME: 11318]
- - fix servicename syslog to rsyslog [SME: 9691]
+ - fix typo for isolate [SME: 11246]
- - fix mysqld to mariadb [SME: 9438]
+ - separate bootstrap-console from run level service launch [SME: 11318]
- initscripts
+ - only run isolate if sme-server.target is not active [SME: 11246]
- - use DBUS calls directly instead of calling nmcli (bug #1422820)
+ - update system-preset usr/lib file [SME: 10958]
- - rhel-import-state: fix broken order of parameters
+ - fix loss of httpd basic auth [SME: 11309]
- - import-state: copy just some attributes
+ - fix services starting when they are in Wants= for sme-server.target and preset disabled [SME: 11247]
- - functions: systemctl show now returns an error when unit does not exist
+ - rewrite of manageRAID.pl and add_drive_to_raid for SME10 [SME: 10918]
- - import-state: restore also sensitivity part of SELinux context
+ - added gdisk as a dependency to support GPT systems
- - network: run after network-pre.target
+ - fix modSSL key crt and keychain files really exist [SME: 11252]
- - ifup-eth: fix setting preferred_lft and valid_lft
+ - add ldap.init as exception for preset
- - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
+ - fix init-accounts [SME: 9642]
- - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
+ - validate modSSL key crt and keychain files really exist [SME: 11252]
- - ifup-aliases: inherit ARPCHECK from parent device
+   if not we use self generated
- - rhel-dmesg: don't start in containers
+ - drop pptpd support [SME: 11250]
- - ifup-eth: fix typo in error message (#1038776)
+ - add bash-completion [SME: 11244]
- - sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
+ - improve local service to systemd [SME: 11119]
- - rwtab: /var/lib/nfs needs to copy the files
+   now run rc.local file as part of the event
- - functions: improve killing loops
+ - move local service to systemd [SME: 11119]
- - ipcalc: detect invalid mask
+   make it run /etc/rc.d/rc.local
- - ifup: set valid_lft and preferred_lft to forever for static ip
+   cleaning /var/service/syslog still there
- - service: use systemd mangle for given service
+ - workaround drop-in install section ignored by systemctl preset [SME: 11231]
- - ifup-post: check resolve.conf also with DNS2
+   some cleanup
- - ifdown-post: remove resolv.conf only in specific cases
+ - remove S95reset-unsavedflag [SME: 11229]
- - spec: ghost /var/log/dmesg
+ - add exclusion for lpd [SME: 11006]
- - network-functions: is_available_wait should wait even in the case that is_available returns 2
+ - execute systemd-reload before service adjust in events [SME: 11228]
- - autorelabel: turn quota off before relabeling
+ - fix ExecStart for raidmonitor [SME: 11094]
- - autorelabel: call dracut-initramfs-restore before forced reboot
+ - fix permission for /sbin/e-smith/systemd/mdmonitor-pre [SME: 11094]
- mod_auth_tkt
+ - Don't ask for confirmation to save changes on first install configuration [SME: 11193]
- - fix redirection when proxy ssl [SME: 8825] [SME: 9583]
+ - Fix RAID detection regex for disk redundancy screen [SME: 10918]
- smeserver-release
+ - add Install part of systemd unit [SME: 11100]
- - Bump new rpm for sme10 alpha2
+ - move dhcpd to systemd [SME: 11100]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - get dhcpd log out of message [SME: 2408]
- smeserver-support
+   also configure logrotate for /var/log/dhcpd/dhcpd.log and /var/log/dhcpd/current
- - exclude samba from centos repo as we have our own with DC support [SME: 10155]
+ - reverte previous changes for service2adjust and util.pm [SME: 11177]
- - improving link to donation [SME: 9598]
+   files are owned by e-smith-lib
- - fix hover color [SME: 9676]
+ - allow more systemctl controls [SME: 11177]
- - Koozali branding of manager [SME: 9676]
+   convert unrecognized signals from service2adjust in events for systemd
- - new images in archive; removed old images from cvs
+   handle unsupervised services the same way supervised were in adjust-services
- - updated some css smeserver-support-2.8.0-koozali_manager.patch
+   make service-status only log when service disabled and not fail it
- - reverting partly the changes in last patch [SME: 9598]
+ - add template for /etc/systemd/system-preset/49koozali.preset [SME: 11174]
- - wrong catch of proxy related url with the http to https changes
- - thank to Charlie Brady for reporting
+ e-smith-devtools
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - netlogon.bat +x [SME: 11566]
- - update links to koozali.org [SME: 9598]
+ - add update event [SME: 11126]
- - Template of os-release [SME: 9580]
- smeserver-yum
+ e-smith-domains
- - add rpmfusion free el7 RPM GPG KEY [SME: 10263]
+ - setup dns services on domain creation and other events [SME: 10115]
- - avoid reboot for smeserver-locale upgrade [SME: 8705]
+ - avoid encoding of utf strings in domain table [SME: 11391]
- - code by stefano zamboni <zamboni@mind-at-work.it>
+   this will mess with some languages
- - correct service names with plugin to avoid reboot [SME: 8705]
+ - Create e-smith-domains-update event [SME: 11128]
- - code by stefano zamboni <zamboni@mind-at-work.it>
- - fix KeyError with plugin to avoid reboot [SME: 8705]
+ e-smith-grub
- - code by stefano zamboni <zamboni@mind-at-work.it>
+ - set missing locale if update-grub called by server-manager [SME: 11559]
- - remove centos contrib repo [SME: 10156]
+ - fix unable to boot on a non xfs root filesystem [SME: 11365]
- - added centos SCLo SIG gpg rpm signing key [SME: 10119]
+ - cleanup remove /boot/grub dir [SME: 11354]
- - will allow to install SCL packages directly from smecontribs
+ - Add support for EFI systems [SME: 10998]
- - Added smeserver-yum-2.6.0.bz8705.avoidReboot.patch [SME: 8705]
+ - add update event [SME: 11137]
- - code by stefano zamboni <zamboni@mind-at-work.it>
- - Avoid to reboot after the installation of a smeserver-* package
+ e-smith-lib
- - add Remi Collet RPM GPG KEY [SME: 9903]
+ - update copyright dates, and make it easier to change from spec file [SME: 11570]
- - Rpm updates can be downloaded during the night [SME: 1502]
+ - partial revert of signals [SME: 11177]
- - Added smeserver-yum-2.6.0.bz1502.DownloadOnly.patch
+   signal s not passed to runit services (dnscache*, qmail, qpsmtpd...)
- - Deltarpm is now a setting in the yum panel (disabled by default)
+   services handled by systemd crash if they do not have Restart=always defined
- - Added smeserver-yum-2.6.0.bz8834.DeltaRpm.patch [SME: 8834]
+ - add support for signals SIG* with systemd [SME: 11177]
+   fix typo for reload-or-try-restart
- On behalf of the Koozali SME Server development team
+   unsupervised services: really stop when disabled and start stopped enabled ones
+ - remove error when sending sighup event [SME: 11177]
+ - allow more systemctl controls [SME: 11177]
+   convert unrecognized signals from service2adjust in events for systemd
+   handle unsupervised services the same way supervised were in adjust-services
+ - create e-smith-lib-event [SME: 11141]
+ - add support for systemctl reload-or-restart, try-restart, enable -now [SME: 10848]
+ e-smith-nutUPS
+ - fix start ordering nut.service [SME: 11488]
+ - fix ExecStartPre path for /usr/lib/tmpfiles.d/nut-run.conf [SME: 11488]
+ - fix ExecStartPre path for nut.service [SME: 11488]
+ - fix template path for monitor [SME: 9423]
+ - Fix preset line endings in 49-koozali.preset [SME: 11215]
+ - add update event to avoid reboot [SME: 11146]
+ - adapt nut UPS for systemd [SME: 9423]
+ e-smith-packetfilter
+ - fix dropin file not expanded on initial installation [SME: 11528]
+ - fix noise on logrotate, doing a restart instead of reload [SME: 11451]
+ - move ulogd to systemd [SME: 11426]
+ - require ulogd 2 [SME: 11426]
+ - remove pptpd last references [SME: 11420]
+ - remove /usr/lib/systemd/system-preset/80-koozali-packetfilter.preset [SME: 10958]
+ - drop pptpd support [SME: 11251]
+ - launch masq using systemd unit [SME: 11089]
+ - create event to avoid reboot on update [SME: 11122]
+ e-smith-radiusd
+ - remove services2adjust in bootstrap-console-save event, this put systemd in a loop [SME: 11602]
+ - ssl pem using template in place of copy [SME: 11602]
+ - radiusd needs ldap started before [SME: 11302]
+ - add Restart=always [SME: 11113]
+   change group of pem file to radiusd
+ - create -update event [SME: 11155]
+ - move radiusd to systemd {SME: 11113]
+   remove noise from spec file
+ - fix server restartting with virtual_server error [SME: 10853]
+ smeserver-release
+ - Bump new rpm for sme 10.0 final
+ - Bump new rpm for sme10 release candidate 1
+ - updating release number everywhere [SME: 11366]
+ - Bump release to 1 as buildsys believe 1.alpha5 is newer than 0.beta1 [SME: 11317]
+ - Bump new rpm for sme10 beta1 [SME: 11317]
+ - add update event [SME: 11165]
+ - Bump new rpm for sme10 alpha5
+ smeserver-support
+ - fix copyright date and make it easier to update from spec file [SME: 11568]
+ - fix typo and wording [SME: 11535]
+ - add update event [SME: 11167]
+ - revert update of samba using upstream CentOS repo [SME: 11196]
+ - obsoletes e-smith-starterwebsite [SME: 8903]
+ smeserver-yum
+ - no reboot needed for systemd-python [SME: 11609]
+ - fix services stop on removal [SME: 11510]
+ - run navigation-conf when a panel is installed [SME: 11507]
+ - migrate back to normal CentOS mirrors after el6 EOL [SME: 11477]
+ - version 2 with
+   deleting yum{eolversion} if for previous release or not yet eol
+   better handling of conditions
+ - avoid reboot on removal of smeserver-* rpms [SME: 11458]
+ - navigation-conf when a panel is installed
+ - fix wrong path for rsyslog.conf [SME: 11364]
+ - remove noise in yum process "overriding all signals, forcing restart" [SME: 11372]
+ - packages installed logged both in yum.log and message [SME: 11364]
+ - set priority to 10 for remi-safe [SME: 11360]
+ - fix poor handling of service adjusting and action order [SME: 11300]
+   now a temp event is created
+   also better logging, better handling of update vs removal
+ - make yum dbs service fork [SME: 11243]
+   now smeserver.py plugin call the service
+   yum-modify can use the service restart
+   yum.service is its own service, not called by local.service
+ - move yum upate db service to systemd [SME: 11180]
+ - fix -update events not runt on package upgrade [SME: 11184]
+   lower noise on forced restart
+ - fix switch to vault BaseURL for CentOS [SME: 11227]
+ - add remi-safe as base repo [SME: 11179]
+ - smeserver-yum-update event created [SME: 11168]
+ - fix separate action before template, and after service [SME: 11175]
+   run all actions with post-upgrade as default event
+ - fix some templates not expanded [SME: 11121]
+ - fix smeserver.py not executing action because of wrong path [SME: 11047]
+ - fix error when key absent of a dict of smeserver plugin at clean stage [SME: 10931]
+ - avoid missing template error after removal of a rpm [SME: 10846]
+ - restart php-fpm services when needed [SME: 10873]
+ - applying patch [SME: 10690]
+ - fix NameError: global name 'yum_update_dbs' is not defined [SME: 6940]
+ - use yum-cron with autoupdate feature [SME: 10690]
+ These are either not SME modified Packages, or are kernel mods.
+ clamav
+ libprelude
+ sendmail
+ The changelogs are written per package On behalf of the Koozali SME Server development team
+ - Compilation of release data is thanks to scripts developed by Ian Wells and substantially improved by Jean Phillipe Pialasse
+ Terry Fage

 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
-Removed lines/characters
+Added lines/characters

admin@koozali.org	ViewVC Help
Powered by ViewVC 1.2.1