1 |
SME Server 7.5.1 Release Announcement |
SME Server 7.6 Release Announcement |
2 |
=================================== |
=================================== |
3 |
|
|
4 |
June 27 2010 |
March 24 2012 |
5 |
|
|
6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
7 |
SME Server 7.5.1 This is a patch release for SME 7.5 to resolve |
SME Server 7.6. This release is based on CentOS 4.9 which is the final |
8 |
problems seen by some VPN users, and other minor fixes. |
version of CentOS 4 and now End of Life. |
9 |
|
|
10 |
|
This is the final ISO release for SME 7, only critical updates will be |
11 |
|
provided from now as SME 8 is now at Release Candidate status. |
12 |
|
|
13 |
The release should be obtained from your closest mirror, see |
The release should be obtained from your closest mirror, see |
14 |
http://wiki.contribs.org/SME_Server:Download |
http://wiki.contribs.org/SME_Server:Download |
36 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
37 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
38 |
|
|
|
This release is based on CentOS 4.8. |
|
|
|
|
39 |
|
|
40 |
Thanks |
Thanks |
41 |
====== |
====== |
56 |
|
|
57 |
Backups |
Backups |
58 |
------- |
------- |
59 |
- Restoring from a Workstation Backup showed a false failure. |
- Allow for daylight saving changes when running backups. |
60 |
- The Workstation Backup panel now removes leading and trailing spaces |
- Handle removable backup locations when using modern browsers. |
61 |
from the hostname. |
- Backup to Workstation to handle full remote disc gracefully. |
62 |
|
- Do not make backup fail when due to a modified file. |
63 |
Localisation |
- The backup to workstation did not correctly handle network drives |
64 |
------------ |
starting with a leading slash. The leading slash is now allowed |
65 |
- Latest translation updates. |
and silently removed. |
|
- Fix translation of local nic string in console. |
|
|
|
|
|
Mail Server |
|
|
----------- |
|
|
- Implement a database key (TlsBeforeAuth) to allow SMTP |
|
|
Authentication without TLS. The default remains to require TLS before |
|
|
Auth (introduced in SME 7.5). |
|
|
|
|
|
Server manager |
|
|
-------------- |
|
|
- Add option to limit port forwarding by source ip address. |
|
|
- Enable port forwards to localhost if mode is serveronly. |
|
|
- Text description added for each Port Forwarding. |
|
|
|
|
|
Other fixes and updates |
|
|
----------------------- |
|
|
- VPN failed for some users due to incorrect kernel module. |
|
|
- Error in postuninstall script prevented kmod packages from being |
|
|
removed during upgrade. |
|
|
- /etc/cron.daily/freshclam was replaced by a dummy file as freshclam |
|
|
does not need to be run daily as it is run as a supervised process. |
|
|
|
|
|
Changes from SME 7.4 to SME 7.5 |
|
|
=============================== |
|
|
|
|
|
Backups |
|
|
------- |
|
|
- The backup service has been made more robust: |
|
|
Allow many backups in the same day. |
|
|
Prevent launching a restore if all needed backups are not available. |
|
|
Do not allow a restore from a partial backup. |
|
|
- Some valid passwords would fail due to how the backup directory was |
|
|
mounted, the use of a credentials file for mount.cifs now avoids this |
|
|
limitation. |
|
|
- The e-mail now correctly identifies incremental and full backups. |
|
|
- Make Workstation Backup 'full backup allowed on' setting stick across |
|
|
revisits of the Configure page when set to 'Sunday'. |
|
|
- Workstation Backup emails now include a To: header. |
|
66 |
|
|
67 |
File Server |
File Server |
68 |
----------- |
----------- |
69 |
- A patch was added to support multiple samba roles, the change is |
- Create .V2 profiles for Windows 7 clients. |
70 |
transparent. However installing smeserver-adv-samba allows the user to |
- Changes in Samba's "Recycle VFS exclude" syntax (for ibays). |
71 |
take advantage of additional server roles as detailed in |
- Change separator character in general Samba configuration file. |
72 |
http://wiki.contribs.org/Advanced_Samba |
- Fix USB fstab issue preventing automatic mount (HAL). |
73 |
|
|
74 |
|
Installer |
75 |
|
--------- |
76 |
|
- Allow installation when dmraid present. |
77 |
|
|
78 |
Localisation |
Localisation |
79 |
------------ |
------------ |
80 |
- As part of a major update with translations we have added seven new |
- Add Chinese (Taiwan) language. |
81 |
languages: |
- Add Hebrew language. |
|
Thai, Polish, Romanian, Estonian, Chinese, Norwegian (Bokmal), |
|
|
Russian. |
|
82 |
- Other fixes include updated translations for the existing languages. |
- Other fixes include updated translations for the existing languages. |
83 |
|
|
84 |
Mail Server |
Mail Server |
85 |
----------- |
----------- |
86 |
- Transport Layer Security (TLS) authentication capability has been |
- TLS Ciphers for qpsmtpd can be configured. |
87 |
added for incoming smtp ehlo requests. |
- Fix Pseudonym "local network only" to merge multiple properties. |
|
- SMTP Authentication requires TLS before Auth to increase security. |
|
|
- Implement correctly the subject line SPAM tagging functionality. |
|
|
- The syntax of the smtproutes and SMTPSmartHost templates have been |
|
|
updated to avoid MX lookups |
|
|
- Incoming mail could be incorrectly rejected by qpsmtpd plugin |
|
|
require_resolvable_fromhost. |
|
|
- Update to qpsmtpd 0.83 |
|
|
- Update to ClamAV 0.96.1 |
|
|
- Increase MemLimit to 600M for clamav-0.96 |
|
|
- Remove spamassassin jobs from cron.daily that are no longer needed. |
|
|
- HeuristicScanPrecedence is a new option in clamav 0.94. |
|
|
See http://wiki.contribs.org/Email#Heuristic_Scan |
|
|
- Rotate Virus scanning log files |
|
|
- Remove the external preloaded library, qmail-workaround, which was |
|
|
needed for qmail loopback connections if a domain MX resolves to |
|
|
0.0.0.0. This has now been replaced by a patch to qmail itself. |
|
|
- Use HeloHost (if present) for SMTP auth proxy |
|
88 |
|
|
89 |
Server manager |
Server manager |
90 |
-------------- |
-------------- |
91 |
- The reconfigure warning is displayed in subsequent browser sessions of |
- There should be strict checking of the IP address and Subnet Mask |
92 |
the server-manager when the server is updated from the Command Line, |
entered into remote access panel before allowing to save successfully. |
93 |
or after a reboot, if a full reconfiguration has not been performed. |
- Fix handling of double speechmarks in the comment field of the |
94 |
- Allow to select "check for updates" daily, weekly or monthly in the |
hostname panel. |
|
Software Installer. Check for updates can also be disabled. |
|
|
- Fix yum warnings about "another instance is running" when running a |
|
|
second instance of yum from another terminal. |
|
|
- Improve the HTML formatting of the modify quota panel to work in IE8. |
|
95 |
|
|
96 |
Webmail and Groupware |
Webmail and Groupware |
97 |
--------------------- |
--------------------- |
98 |
- Horde, imp, turba and ingo have been updated to the latest versions |
- Horde, imp, turba and ingo have been updated to the latest versions. |
99 |
- Patch to make sure username is always saved in lowercase to horde db's |
- Add option to verify from address in webmail if setting up additional |
100 |
- Allow FQDN and non-FQDN access to webmail. |
identities. |
|
- The spell checker in Horde Mail has been enabled for HTML composition. |
|
|
- Obsolete smeserver-trean < 0.1-8 as it makes the sidebar menu of the |
|
|
webmail interface disappear. |
|
101 |
|
|
102 |
Web Server |
Web Server |
103 |
---------- |
---------- |
104 |
- Implement a database key (SSLv2) which allows to disable certificates |
- Improve validation (error) message for remote access setup. |
105 |
signed with SSLv2, enabled by default to keep current behaviour. |
- Default expose_php to Off for security reasons. A database property |
106 |
- Add support for more MIME Types to Apache: |
is added to allow the value to be easily controlled. |
107 |
Openoffice 1.x, Openoffice 2.x |
To enable expose_php /sbin/e-smith/config setprop php ExposePHP On |
108 |
Microsoft Office 2007 |
To disable expose_php /sbin/e-smith/config setprop php ExposePHP Off |
|
XML |
|
|
- SSL Certificates will now use a SHA1 |
|
|
- SSL Certificates will now use a 2048 bits key size |
|
109 |
|
|
110 |
Other fixes and updates |
Other fixes and updates |
111 |
----------------------- |
----------------------- |
112 |
- From June 2009 smeserver-rkhunter was removed from smeos and made a |
- Fix group-modify event to honour ibays group assignment. |
113 |
contrib. |
- Don't exit 99 from e-smith-service script when called with |
114 |
- Do not allow re-allocation of deleted Windows user profiles. |
'condrestart' and service is disabled. |
115 |
- Template sshd login grace time |
- Correct the ldif file expansion for groups to include the uid element |
116 |
- Correct the configuration of smartd to monitor hard disk status, but |
and fix the objectClass. |
117 |
default to disabled. |
- Apply patch to allow rsync v3.0+ to work (needs -e parameter). |
118 |
- Display the boot time menu by default by removing the hiddenmenu entry |
- Add random wait timer for check4updates script to distribute load on |
119 |
from the default grub.conf to be in line with the documentation. |
ibiblio. |
120 |
- Enable error logging for MySQL. |
- Update Clamav to latest version. |
121 |
- When user or group names with a "." in the names exist, |
- Update yum to handle CentOS 4 moving to the vault. |
|
running /sbin/e-smith/audittools/aliases will show more than the |
|
|
expected list. |
|
|
- Improve the quality of the mirrors by using a network mirror-list. The |
|
|
list is automatically generated hourly based on the status of the |
|
|
current mirrors. By using these mirror-lists it is ensured that people |
|
|
are directed to an updated mirror. When a mirror is added or removed |
|
|
the change will be available quickly and automatically. It also |
|
|
centralizes control of the mirror lists. |
|
|
- Add yum-protect-packages support to prevent removal of needed |
|
|
packages. This stops accidental removal of core SME Server packages. |
|
|
- Introduced (weak) kernel modules which are independent of kernel |
|
|
version. This means there is no need to update/rebuild kmods for each |
|
|
kernel update. |
|
|
- Fix for VPN access failed with buffer too small errors. |
|
|
- Require /sbin/mdassemble so mkinitrd works correctly. |
|
|
- Reduce drive size requirements from 5G to 1.5G |
|
122 |
|
|
123 |
$Id: README.txt,v 1.9 2010/05/24 21:17:17 wellsi Exp $ |
$Id: README.txt,v 1.13 2012/03/23 05:12:32 wellsi Exp $ |