1 |
SME Server 7.5 Release Candidate 1 Release Announcement |
SME Server 7.5.1 Release Announcement |
2 |
========================================== |
=================================== |
3 |
|
|
4 |
March 7 2010 |
June 27 2010 |
5 |
|
|
6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
7 |
SME Server 7.5RC1. This release is based on CentOS 4.8. |
SME Server 7.5.1 This is a patch release for SME 7.5 to resolve |
8 |
|
problems seen by some VPN users, and other minor fixes. |
|
|
|
|
This is only released for testing and not for production use. |
|
9 |
|
|
10 |
The release should be obtained from your closest mirror, see |
The release should be obtained from your closest mirror, see |
11 |
http://wiki.contribs.org/SME_Server:Download |
http://wiki.contribs.org/SME_Server:Download |
12 |
|
|
13 |
Bug reports and reports of potential bugs should be raised |
Bug reports and reports of potential bugs should be raised in the bug |
14 |
in the bug tracker (and only there, please); |
tracker (and only there, please); |
15 |
|
|
16 |
http://bugs.contribs.org/ |
http://bugs.contribs.org/ |
17 |
|
|
18 |
|
|
19 |
Please Note |
Please Note |
20 |
=========== |
=========== |
21 |
It may take up to 48 hours for mirrors to finish syncing, |
It may take up to 48 hours for mirrors to finish syncing, during this |
22 |
during this time you may experience problems. |
time you may experience problems. |
23 |
|
|
24 |
|
|
25 |
About SME Server |
About SME Server |
26 |
================ |
================ |
28 |
SME Server is the leading Linux distribution for small and medium |
SME Server is the leading Linux distribution for small and medium |
29 |
enterprises. |
enterprises. |
30 |
|
|
31 |
SME Server is freely available under the GNU General Public License |
SME Server is freely available under the GNU General Public License and |
32 |
and is only possible through the efforts of the SME Server community. |
is only possible through the efforts of the SME Server community. |
33 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
34 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
35 |
|
|
36 |
|
This release is based on CentOS 4.8. |
37 |
|
|
38 |
|
|
39 |
Thanks |
Thanks |
40 |
====== |
====== |
41 |
The development team would like to thank all of those involved in |
The development team would like to thank all of those involved in this |
42 |
this release. More people are required to help with |
release. More people are required to help with bug triage and |
43 |
bug triage and verification testing. |
verification testing. |
|
|
|
|
|
|
|
This release contains many new features, all released updates for |
|
|
SME Server 7.4 and fixes for many reported problems. Upgrades |
|
|
will be available by CD, the Software Installer and command line. |
|
44 |
|
|
45 |
|
|
46 |
Upgrades |
Upgrades |
47 |
======== |
======== |
48 |
|
Upgrades are available by CD, the Software Installer and command line. |
49 |
- Always perform a backup prior to major system upgrades |
- Always perform a backup prior to major system upgrades |
50 |
- An upgrade will preserve the existing data |
- An upgrade will preserve the existing data |
51 |
|
|
53 |
Changes in this release |
Changes in this release |
54 |
======================= |
======================= |
55 |
|
|
56 |
This will be updated for 7.5 Final, here are the changelogs |
Backups |
57 |
|
------- |
58 |
|
- Restoring from a Workstation Backup showed a false failure. |
59 |
e-smith-apache |
- The Workstation Backup panel now removes leading and trailing spaces |
60 |
- Add option to disable SSLv2 [SME: 5034] |
from the hostname. |
61 |
- Add OpenOffice2 MIME Types [SME: 5112] |
|
62 |
- Add OpenOffice MIME Types [SME: 4848] |
Localisation |
63 |
- Add XML MIME Type [SME: 5035] |
------------ |
64 |
- Fix issues in patch that adds Microsoft Office 2007 MIME types [SME: 4548] |
- Latest translation updates. |
65 |
- Add Microsoft Office 2007 MIME types [SME: 4548] |
- Fix translation of local nic string in console. |
66 |
|
|
67 |
e-smith-backup |
Mail Server |
68 |
- Fix full backup on Sunday displayed as Everyday. [SME: 5624] |
----------- |
69 |
- workstation backup: add cifs credentials expand to bootstrap-console-save [SME: 4850] |
- Implement a database key (TlsBeforeAuth) to allow SMTP |
70 |
- workstation backup: using credentials file for cifs mount [SME: 4850] |
Authentication without TLS. The default remains to require TLS before |
71 |
- workstation backup: allow many backups in the same day [SME: 5393] |
Auth (introduced in SME 7.5). |
72 |
- workstation restore: all needed backups must be available before restore [SME: 5395] |
|
73 |
- workstation verify: add option to check integrity of backups needed in a full restore [SME: 5396] |
Server manager |
74 |
- minor fix in translation [SME: 5406] |
-------------- |
75 |
- Fix DAR e-mail message with regards to incremental backups [SME: 4579] |
- Add option to limit port forwarding by source ip address. |
76 |
- Fix discrepancy in maximum compression level [SME: 4841] |
- Enable port forwards to localhost if mode is serveronly. |
77 |
|
- Text description added for each Port Forwarding. |
78 |
e-smith-base |
|
79 |
- Improve security by using SHA1 algorithm for certificate signing [SME: 5736] |
Other fixes and updates |
80 |
- Bump certificate encryption from 1024 bits to 2048 bits [SME: 5734] |
----------------------- |
81 |
- Add a dummy call so xgettext can pull translated $ifName in console configuration pages [SME: 1189] |
- VPN failed for some users due to incorrect kernel module. |
82 |
- Translate $ifName in console configuration pages [SME: 1189] |
- Error in postuninstall script prevented kmod packages from being |
83 |
- Clean up stray symlinks in /lib/modules before depmod [SME: 5334] |
removed during upgrade. |
84 |
- Allow for different mdadm output formats for DeviceSize. [SME: 5258] |
- /etc/cron.daily/freshclam was replaced by a dummy file as freshclam |
85 |
- Auto-mount USB REV70-drive as usbdisk [SME: 5006] |
does not need to be run daily as it is run as a supervised process. |
86 |
- create service link for smartd [SME: 1445] |
|
87 |
- Add patch to support multiple samba roles [SME: 4172] |
Changes from SME 7.4 to SME 7.5 |
88 |
|
=============================== |
89 |
e-smith-formmagick |
|
90 |
- Update path for 64-bit compatibility [SME: 5755] |
Backups |
91 |
|
------- |
92 |
e-smith-grub |
- The backup service has been made more robust: |
93 |
- Remove hiddenmenu entry from grub.conf [SME: 5166] |
Allow many backups in the same day. |
94 |
|
Prevent launching a restore if all needed backups are not available. |
95 |
e-smith-horde |
Do not allow a restore from a partial backup. |
96 |
- Patch to make sure username is always saved in lowercase to horde db's [SME: 5627] |
- Some valid passwords would fail due to how the backup directory was |
97 |
- Upgrade horde templates to reflect changes in Horde 3.3.6 [SME: 5721] |
mounted, the use of a credentials file for mount.cifs now avoids this |
98 |
- Update to Spec file to obsolete smeserver-trean < 0.1-8 [SME: 4860] |
limitation. |
99 |
- Patch to conf.php template to set a blank cookie domain so that FQDN and non-FQDN |
- The e-mail now correctly identifies incremental and full backups. |
100 |
- access to webmail will work. Remove klutz template from registry.php [SME: 4787] |
- Make Workstation Backup 'full backup allowed on' setting stick across |
101 |
|
revisits of the Configure page when set to 'Sunday'. |
102 |
e-smith-imap |
- Workstation Backup emails now include a To: header. |
103 |
- Move creation of chrooted dev/urandom to spec-file [SME: 1105] |
|
104 |
- Create chroot dev/urandom for stunnel to use [SME: 1105] |
File Server |
105 |
|
----------- |
106 |
e-smith-imp |
- A patch was added to support multiple samba roles, the change is |
107 |
- Updated templates to reflect changes in imp 4.3.6 [SME: 5722] |
transparent. However installing smeserver-adv-samba allows the user to |
108 |
- Updated spec file to require php-pear-HTTP-Request to accomodate HTML composition [SME: 4821] |
take advantage of additional server roles as detailed in |
109 |
|
http://wiki.contribs.org/Advanced_Samba |
110 |
e-smith-ingo |
|
111 |
- Update e-smith-ingo templates to reflect changes in Ingo 1.2.3 [SME: 5724] |
Localisation |
112 |
|
------------ |
113 |
e-smith-lib |
- As part of a major update with translations we have added seven new |
114 |
- Add patch (Federico Simoncelli) to prevent re-use of uids. [SME: 4969] |
languages: |
115 |
- Update path for 64-bit compatibility [SME: 5755] |
Thai, Polish, Romanian, Estonian, Chinese, Norwegian (Bokmal), |
116 |
- Add patch to support multiple samba roles [SME: 4172] |
Russian. |
117 |
|
- Other fixes include updated translations for the existing languages. |
118 |
e-smith-manager |
|
119 |
- display reconfigure warning once if UnsavedChanges=yes [SME: 5475] |
Mail Server |
120 |
- display reconfigure warning if UnsavedChanges=yes [SME: 2081] |
----------- |
121 |
- Fix misinterpretation of display string [SME: 5022] |
- Transport Layer Security (TLS) authentication capability has been |
122 |
|
added for incoming smtp ehlo requests. |
123 |
e-smith-mysql |
- SMTP Authentication requires TLS before Auth to increase security. |
124 |
- Rework log-error logic [SME: 4807] |
- Implement correctly the subject line SPAM tagging functionality. |
125 |
- Fix log-error detection algorithm [SME: 4807] |
- The syntax of the smtproutes and SMTPSmartHost templates have been |
126 |
|
updated to avoid MX lookups |
127 |
e-smith-nutUPS |
- Incoming mail could be incorrectly rejected by qpsmtpd plugin |
128 |
- Fix another instance of ups model for new version of nut [SME: 4750] |
require_resolvable_fromhost. |
129 |
|
- Update to qpsmtpd 0.83 |
130 |
e-smith-openssh |
- Update to ClamAV 0.96.1 |
131 |
- Template sshd login grace time, kept default at 600s [SME: 4903] |
- Increase MemLimit to 600M for clamav-0.96 |
132 |
|
- Remove spamassassin jobs from cron.daily that are no longer needed. |
133 |
e-smith-qmail |
- HeuristicScanPrecedence is a new option in clamav 0.94. |
134 |
- SMTPSmartHost template incorrectly uses brackets to avoid MX lookups. [SME: 5455] |
See http://wiki.contribs.org/Email#Heuristic_Scan |
135 |
- smtproutes template incorrectly uses brackets to avoid MX lookups. [SME: 5254] |
- Rotate Virus scanning log files |
136 |
- Remove qmail-workaround and obsolete it after patch to treat 0.0.0.0 as a |
- Remove the external preloaded library, qmail-workaround, which was |
137 |
local ip [SME: 5171] |
needed for qmail loopback connections if a domain MX resolves to |
138 |
|
0.0.0.0. This has now been replaced by a patch to qmail itself. |
139 |
e-smith-samba |
- Use HeloHost (if present) for SMTP auth proxy |
140 |
- Add registry file to server-resources to allow windows 7 to |
|
141 |
join Samba 3.x domains [SME: 5423] |
Server manager |
142 |
- Fix warnings in template expansion [SME: 4954] |
-------------- |
143 |
- Fix migrate fragments for samba [SME: 4777] |
- The reconfigure warning is displayed in subsequent browser sessions of |
144 |
- Fix oslevel fragment for server roles [SME: 4730] |
the server-manager when the server is updated from the Command Line, |
145 |
- Add patch to support multiple samba roles [SME: 4172] |
or after a reboot, if a full reconfiguration has not been performed. |
146 |
|
- Allow to select "check for updates" daily, weekly or monthly in the |
147 |
e-smith-turba |
Software Installer. Check for updates can also be disabled. |
148 |
- Updated template files to reflect changes in Turba 2.3.3 [SME: 5723] |
- Fix yum warnings about "another instance is running" when running a |
149 |
- Remove redundant 49turba_migrate_contacts template fragments [SME: 5148] |
second instance of yum from another terminal. |
150 |
- Fix turba.sql patch to prevent creating a .orig file [SME: 4910] |
- Improve the HTML formatting of the modify quota panel to work in IE8. |
151 |
|
|
152 |
horde |
Webmail and Groupware |
153 |
- Updated to Horde 3.3.6 [SME: 5721] |
--------------------- |
154 |
|
- Horde, imp, turba and ingo have been updated to the latest versions |
155 |
imp-h3 |
- Patch to make sure username is always saved in lowercase to horde db's |
156 |
- Updated to Imp 4.3.6 [SME: 5722] |
- Allow FQDN and non-FQDN access to webmail. |
157 |
|
- The spell checker in Horde Mail has been enabled for HTML composition. |
158 |
ingo-h3 |
- Obsolete smeserver-trean < 0.1-8 as it makes the sidebar menu of the |
159 |
- Update to Ingo 1.2.3 [SME: 5724] |
webmail interface disappear. |
160 |
|
|
161 |
initscripts |
Web Server |
162 |
- Reapply SME Server patches [SME: 2043] |
---------- |
163 |
- Exit with zero exit status for services not listed in configuration |
- Implement a database key (SSLv2) which allows to disable certificates |
164 |
database to avoid failures in post scriptlets [SME: 1653] |
signed with SSLv2, enabled by default to keep current behaviour. |
165 |
- Merge in SME Server /sbin/e-smith/service wrapper so that only |
- Add support for more MIME Types to Apache: |
166 |
initscripts which exist in run-level 7 can be run. This ensures |
Openoffice 1.x, Openoffice 2.x |
167 |
that the supervised service is run, if one exists, and protects |
Microsoft Office 2007 |
168 |
against running "service httpd restart" [SME: 61, 1495] |
XML |
169 |
|
- SSL Certificates will now use a SHA1 |
170 |
mkinitrd |
- SSL Certificates will now use a 2048 bits key size |
171 |
- Use generated config file instead of just scanning [SME: 2192] |
|
172 |
- Use mdassemble rather than raidautorun in initrd, so that we control |
Other fixes and updates |
173 |
UUID to device mapping. [SME: 961, 1895] |
----------------------- |
174 |
|
- From June 2009 smeserver-rkhunter was removed from smeos and made a |
175 |
qmail |
contrib. |
176 |
- Add Scott Gifford patch to treat 0.0.0.0 as a local ip [SME: 5171] |
- Do not allow re-allocation of deleted Windows user profiles. |
177 |
|
- Template sshd login grace time |
178 |
qpsmtpd |
- Correct the configuration of smartd to monitor hard disk status, but |
179 |
- Apply qpsmtpd git changesets to implement custom SPAM |
default to disabled. |
180 |
subject prefix [SME: 5567] |
- Display the boot time menu by default by removing the hiddenmenu entry |
181 |
- Update pre requires so scripts don't fail on install [SME: 5557] |
from the default grub.conf to be in line with the documentation. |
182 |
- Rebase bad_rcptto patch to remove orig file [SME: 5549] |
- Enable error logging for MySQL. |
183 |
- Change logging in tls init to prevent warnings [SME: 5550] |
- When user or group names with a "." in the names exist, |
184 |
- Only run/initialize plugins once [SME: 5533] |
running /sbin/e-smith/audittools/aliases will show more than the |
185 |
- Change spool dir permissions and owner to qpsmtpd:clamav |
expected list. |
186 |
- Change log dir permissions and owner to smelog:smelog |
- Improve the quality of the mirrors by using a network mirror-list. The |
187 |
- add sme specific patches |
list is automatically generated hourly based on the status of the |
188 |
- Update to 0.83 |
current mirrors. By using these mirror-lists it is ensured that people |
189 |
|
are directed to an updated mirror. When a mirror is added or removed |
190 |
rkhunter |
the change will be available quickly and automatically. It also |
191 |
From June 2009 smeserver-rkhunter was removed from smeos and made a contrib. |
centralizes control of the mirror lists. |
192 |
|
- Add yum-protect-packages support to prevent removal of needed |
193 |
smeserver-audittools |
packages. This stops accidental removal of core SME Server packages. |
194 |
- Fix regular expression to actually replace the colon with a dot [SME: 4913] |
- Introduced (weak) kernel modules which are independent of kernel |
195 |
- Undo changes made in 1.0.0-5 [SME: 4913] |
version. This means there is no need to update/rebuild kmods for each |
196 |
- Properly fix output for usernames and groups containing a dot [SME: 4913] |
kernel update. |
197 |
- Remove comment lines from output of aliases [SME: 4913] |
- Fix for VPN access failed with buffer too small errors. |
198 |
- Remove the leading path for yum in newrpms [SME: 5566] |
- Require /sbin/mdassemble so mkinitrd works correctly. |
199 |
- Revert changes made in [SME: 5416] |
- Reduce drive size requirements from 5G to 1.5G |
|
- Sort the output of the repositories audittool alphabetically [SME: 5416] |
|
|
|
|
|
smeserver-clamav |
|
|
- Setup logrotate for /var/log/clamd/clamscan.log [SME: 5287] |
|
|
- Remove create option from logrotate configuration [SME: 5287] |
|
|
- Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5287] |
|
|
- Minor changelog fixes in version number |
|
|
- Fix permissions on freshclam.conf file [SME: 5320] |
|
|
- Add HeuristicScanPrecedence option, default disabled [SME: 4598] |
|
|
- Obsolete e-smith-antivirus [SME: 4786] |
|
|
|
|
|
smeserver-locale |
|
|
- apply locale 2009-10-27 patch |
|
|
- Add Thai language [SME: 5466] |
|
|
- Add Polish language [SME: 5436] |
|
|
- Add Romanian language [SME: 5268] |
|
|
- Add Estonian language [SME: 5199] |
|
|
- Add Chineese (China) language [SME: 5002] |
|
|
- Add Norwegian (Bokmal) language [SME: 5002] |
|
|
- Add Russian language [SME: 5002] |
|
|
|
|
|
smeserver-qpsmtpd |
|
|
- Tie the template fragment into the event system to have it expand [SME: 5567] |
|
|
- Add qpsmtpd template fragment for custom SPAM subject prefix [SME: 5567] |
|
|
- Add hooks cleanout back in in so auth works. |
|
|
- Add compatibility with qpsmtpd 0.83 [SME: 5543] |
|
|
- Add tls to base config [SME: 1076] |
|
|
|
|
|
smeserver-spamassassin |
|
|
- Fix invalid service name in sa-update [SME: 3304] |
|
|
|
|
|
smeserver-support |
|
|
- Add support for Polish (pl). [SME: 5433] |
|
|
- Add support for Thai (th). [SME: 5466] |
|
|
- Add support for Romanian (ro). [SME: 5268] |
|
|
- Obsoletes: rkhunter to remove from default install [SME: 5172] |
|
|
- Add support for Estonian (et). [SME: 5203] |
|
|
- Add support for Norwegian Bokmal (nb) [SME: 5002 ] |
|
|
- Add support for Russian (ru) [SME: 5002] |
|
|
- Add support for Chinese China (zh_CN) [SME: 5002] |
|
|
|
|
|
smeserver-yum |
|
|
- only unlink file if we created it [SME: 4169] |
|
|
- set unsaved changes in yum event [SME: 2081] |
|
|
- move yum warming to sme yum plugin [SME: 5472] |
|
|
- ensure file exists before unlinking [SME: 4169] |
|
|
- remove semicolons from yum plugin |
|
|
- Add frequency of updates toggle [SME: 5473] |
|
|
- remove stray file |
|
|
- Add /etc/yum.smerepos.d to package [SME: 5306] |
|
|
- Change SME mirrorlists to point to ibiblio [SME: 5242] |
|
|
- Require mailx [SME: 5131] |
|
|
- Add yum-protect-packages support to prevent removal of |
|
|
needed pacakges [SME: 3133] |
|
|
|
|
|
turba-h3 |
|
|
- Updated to Turba 2.3.3 [SME: 5723] |
|
|
|
|
200 |
|
|
201 |
$Id: README.txt,v 1.3 2010/02/28 10:02:23 wellsi Exp $ |
$Id: README.txt,v 1.9 2010/05/24 21:17:17 wellsi Exp $ |