1 |
SME Server 7.4 Release Announcement |
SME Server 7.5 Release Announcement |
2 |
=================================== |
=================================== |
3 |
|
|
4 |
November 21 2008 |
March xx 2010 |
5 |
|
|
6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
7 |
SME Server 7.4. This release is based on CentOS 4.7. Other major changes |
SME Server 7.5. This release is based on CentOS 4.8. |
|
in this release are the use dar for backups and the change to UTF-8 |
|
|
along with translation into 6 additional languages. |
|
|
|
|
|
|
|
|
All SME Server users should upgrade to this release. |
|
8 |
|
|
9 |
The release should be obtained from your closest mirror, see |
The release should be obtained from your closest mirror, see |
10 |
http://wiki.contribs.org/SME_Server:Download |
http://wiki.contribs.org/SME_Server:Download |
11 |
|
|
12 |
Bug reports and reports of potential bugs should be raised |
Bug reports and reports of potential bugs should be raised in the bug |
13 |
in the bug tracker (and only there, please); |
tracker (and only there, please); |
14 |
|
|
15 |
http://bugs.contribs.org/ |
http://bugs.contribs.org/ |
16 |
|
|
17 |
|
|
18 |
Please Note |
Please Note |
19 |
=========== |
=========== |
20 |
It may take up to 48 hours for mirrors to finish syncing, |
It may take up to 48 hours for mirrors to finish syncing, during this |
21 |
during this time you may experience problems. |
time you may experience problems. |
|
|
|
22 |
|
|
23 |
About SME Server |
About SME Server |
24 |
================ |
================ |
26 |
SME Server is the leading Linux distribution for small and medium |
SME Server is the leading Linux distribution for small and medium |
27 |
enterprises. |
enterprises. |
28 |
|
|
29 |
SME Server is freely available under the GNU General Public License |
SME Server is freely available under the GNU General Public License and |
30 |
and is only possible through the efforts of the SME Server community. |
is only possible through the efforts of the SME Server community. |
31 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
32 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
33 |
|
|
34 |
|
|
35 |
Thanks |
Thanks |
36 |
====== |
====== |
37 |
The development team would like to thank all of those involved in |
The development team would like to thank all of those involved in this |
38 |
this release. However, this distribution cannot continue with the |
release. More people are required to help with bug triage and |
39 |
current level of support. More people are required to help with |
verification testing. |
40 |
bug triage and verification testing. |
|
41 |
|
This release contains many new features, all released updates for SME |
42 |
|
Server 7.4 and fixes for many reported problems. Upgrades will be |
43 |
This release contains many new features, all released updates for |
available by CD, the Software Installer and command line. |
|
SME Server 7.3 and fixes for many reported problems. Upgrades |
|
|
will be available by CD, the Software Installer and command line. |
|
44 |
|
|
45 |
|
|
46 |
Upgrades |
Upgrades |
52 |
Changes in this release |
Changes in this release |
53 |
======================= |
======================= |
54 |
|
|
|
Installer |
|
|
--------- |
|
|
- Fix grub label to keep consistent with the SME Server brand. |
|
|
|
|
|
Mail system changes |
|
|
------------------- |
|
|
- Introduce a web interface to configure the pseudonym "visible" property |
|
|
(internal|external) |
|
|
- New feature now allows a "catch all" situation where you have the ability |
|
|
to redirect "@virtualdomain1.com" to user "joe". |
|
|
- Fix the "Ugly" log messages (Use of uninitialized value) when spam checking |
|
|
results in 0 hits. |
|
|
- Emails sent to a null address like ""@domain without the username part |
|
|
are now rejected. |
|
|
- qplogsumm is a optional feature that should be disabled by default. |
|
|
- A request that the log information is reduced with the default loglevel |
|
|
setting of 6 in qpsmtpd. |
|
|
- Support for sending mail to ISP via Secure SMTP |
|
|
- Enable the auth plugin for local lan connections |
|
|
- Migrate (remove) "ordb.net" from the RBL lists to prevent mail bouncing. |
|
|
- Remove blackhole.securitysage.com as service no longer in use. |
|
|
- Remove sbl-xbl.spamhaus.org from default lists and use a more improved |
|
|
list in zen.spamhaus.org. |
|
|
|
|
|
Console |
|
|
------- |
|
|
- Improved validation will check password on first enter password screen |
|
|
before verifying if too simple then asking to verify and proceed to |
|
|
configuration of server. |
|
|
- Passwords should be validated for strength on first entry rather than |
|
|
waiting for the second confirmation entry. |
|
|
- The console should validate passwords using the common method, |
|
|
using esmith::util::validatePassword |
|
|
- The last item in the server console, "Exit from server console", is removed |
|
|
as it is redundant. |
|
|
- Display frames in console server-manager. |
|
|
When browsing server-manager through console pressing 'H' goes to |
|
|
http://localhost/server-manager |
|
|
|
|
55 |
Backups |
Backups |
56 |
------- |
------- |
57 |
- Backups now use dar which enables a backup to consist of more than 2GB |
- The backup service has been made more robust: |
58 |
of data to a workstation in any of the following supported methods: |
Allow many backups in the same day. |
59 |
cifs, nfs or local usb disk. It also gives the option to set how many |
Prevent launching a restore if all needed backups are not available. |
60 |
rotating backups are required and allows to split size of backup |
Do not allow a restore from a partial backup. |
61 |
to DVD size. |
- Some valid passwords would fail due to how the backup directory was |
62 |
- Removed 'restore from desktop' functionality |
mounted, the use of a credentials file for mount.cifs now avoids this |
63 |
- The error codes from tar are now logged, in line with flexbackup, and do not |
limitation. |
64 |
cause a backup to fail. |
- The e-mail now correctly identifies incremental and full backups. |
65 |
- A Iomeage USB REV-drive was by default mounted in /media as a cdrom device. |
- Make workstation-backup 'full backup allowed on'-setting stick across |
66 |
It is now automagically mounted as an usbdisk so it can be used as a backup |
revisits of the Configure-page when set to: 'Sunday' |
67 |
device without manual intervention. |
|
68 |
- Set dar compression to default to gzip |
File Server |
69 |
- dar backup to be less verbose in panel |
----------- |
70 |
- Correct mounting for usb disks |
- A patch was added to support multiple samba roles, the change is |
71 |
- no compression for ogg media files |
transparent. However installing smeserver-adv-samba allows the user to |
72 |
- Make dar use defined list of directories to backup |
take advantage of additional server roles as detailed in |
73 |
- Remove obsolete smbfs backup method |
http://wiki.contribs.org/Advanced_Samba |
|
|
|
74 |
|
|
75 |
Localisation |
Localisation |
76 |
------------ |
------------ |
77 |
As part of a major update with translations we have added six new |
- As part of a major update with translations we have added seven new |
78 |
languages and made it much easier to add other languages in the |
languages: |
79 |
future. |
Thai, Polish, Romanian, Estonian, Chinese, Norwegian (Bokmal), |
80 |
|
Russian. |
81 |
We now support the following languages in the server-manager: Danish, |
- Other fixes include updated translations for the existing languages. |
82 |
Dutch, English, French, Greek, German, Hungarian, Indonesian, Italian, |
|
83 |
Portuguese, Slovenian, Spanish and Swedish. |
Mail Server |
84 |
|
----------- |
85 |
We have made major strides to assist the non-English community by |
- Transport Layer Security (TLS) authentication capability has been |
86 |
using a tool called pootle. This is a web based translation tool that |
added for incoming smtp ehlo requests. |
87 |
will allow new languages to be added and existing languages to be more |
- Implement correctly the subject line SPAM tagging functionality. |
88 |
easily maintained. |
- The syntax of the smtproutes and SMTPSmartHost templates have been |
89 |
|
updated to avoid MX lookups |
90 |
We have cleaned up a lot of the packages as a part of getting them to |
- Incoming mail could be incorrectly rejected by qpsmtpd plugin |
91 |
work with pootle. Another big change as part of this upgrade is the |
require_resolvable_fromhost. |
92 |
switch from ISO-8859-1 (Latin) charset to UTF-8 (Universal) charset, |
- Update to qpsmtpd 0.83 |
93 |
this will allow us to support languages that don't use latin |
- HeuristicScanPrecedence is a new option in clamav 0.94. |
94 |
characters (like Greek). |
See http://wiki.contribs.org/Email#Heuristic_Scan |
95 |
|
- Rotate Virus scanning log files |
96 |
Other fixes include updated translations for the existing languages. |
- Remove the external preloaded library, qmail-workaround, which was |
97 |
|
needed for qmail loopback connections if a domain MX resolves to |
98 |
Software Installer |
0.0.0.0. This has now been replaced by a patch to qmail itself. |
|
------------------ |
|
|
- smeextras repository added, it is used for building the installer and ISO |
|
|
- The yum-update event now includes the yum-import-keys action to allow |
|
|
users to update yum packages and configuration without rebooting, |
|
|
which enables updating when there is a compatibility problem. |
|
|
- Correct yum-update-dbs action to adjust yum service properly. |
|
|
- The BaseURL property has been removed for repos with mirrorlists. |
|
|
- The message "This system is up to date." is displayed if no updates are |
|
|
available. |
|
|
|
|
|
Webmail |
|
|
------- |
|
|
- Horde, imp, turbo and ingo have been updated to the latest versions |
|
|
- Support the ability to save user kronolith free/busy information to the LDAP |
|
|
database. |
|
|
- Servers with a custom template for 110AppRegistryHorde found webmail no |
|
|
longer worked. |
|
|
- The name of the webmail installation is now configurable. |
|
|
To use - config setprop horde Name xxxx ; signal-event email-update. |
|
99 |
|
|
100 |
Server manager |
Server manager |
101 |
-------------- |
-------------- |
102 |
- The name of the log file being viewed via the Server Manager 'View log |
- The reconfigure warning is displayed in subsequent browser sessions of |
103 |
files' is now displayed as the first line. |
the server-manager when the server is updated from the Command Line, |
104 |
- Disabling the daily update check in the server-manager did not stop the |
or after a reboot, if a full reconfiguration has not been performed. |
105 |
check4updates task sending mail to the server administrator. |
- Allow to select "check for updates" daily, weekly or monthly in the |
106 |
- Server-manager > printers > add printer - now advises users to avoid |
Software Installer. Check for updates can also be disabled. |
107 |
certain names and descriptions as this causes printer state to be incorrect. |
- Fix yum warnings about "another instance is running" when running a |
108 |
- Fix the Unknown heading in server-manager after an update. |
second instance of yum from another terminal. |
109 |
- Fix inconsistency within the navigation.xx files which no longer adds extra |
|
110 |
spaces and newlines in panel headers. |
Webmail and Groupware |
111 |
- The Anti-virus (ClamAV) panel text was updated to remove the word 'entire' |
--------------------- |
112 |
as this could be misleading. |
- Horde, imp, turba and ingo have been updated to the latest versions |
113 |
- Allow server-manager to successfully create a one character user account. |
- Patch to make sure username is always saved in lowercase to horde db's |
114 |
- After adding a user and trying to set password via server-manager or |
- Allow FQDN and non-FQDN access to webmail. |
115 |
user-password using the ";" sign you encountered a "white screen of |
- The spell checker in Horde Mail has been enabled for HTML composition. |
116 |
death". This was due to the version of perl-Object-Persistence being used. |
- Obsolete smeserver-trean < 0.1-8 as it makes the sidebar menu of the |
117 |
- Remove the last 'pleasewait' message as it is no longer needed. |
webmail interface disappear. |
118 |
- The button to add a new user in the server-manager was missing due to a |
|
119 |
problem with the free/busy code in usermanager causing the panel to exit. |
Web Server |
120 |
|
---------- |
121 |
|
- Implement a database key (SSLv2) which allows to disable certificates |
122 |
|
signed with SSLv2, enabled by default to keep current behaviour. |
123 |
|
- Add support for more MIME Types to Apache: |
124 |
|
Openoffice 1.x, Openoffice 2.x |
125 |
|
Microsoft Office 2007 |
126 |
|
XML |
127 |
|
- SSL Certificates will now use a SHA1 |
128 |
|
- SSL Certificates will now use a 2048 bits key size |
129 |
|
|
130 |
Other fixes and updates |
Other fixes and updates |
131 |
----------------------- |
----------------------- |
132 |
- Updated Samba resolves various file sharing problems |
- From June 2009 smeserver-rkhunter was removed from smeos and made a |
133 |
- The length of an Ibay name is now configurable via maxIbayNameLength |
contrib. |
134 |
- The Samba "unix extensions" are turned off for Mac compatibility |
- Do not allow re-allocation of deleted Windows user profiles. |
135 |
- radiusd.conf allows support for additional authentication methods |
- Template sshd login grace time |
136 |
- Ability to modify pseudonyms with special characters |
- Correct the configuration of smartd to monitor hard disk status, but |
137 |
- Prevent NameServer being set to current IP of SME Server |
default to disabled. |
138 |
- Allow support for server side includes for ibays when a directory is |
- Display the boot time menu by default by removing the hiddenmenu entry |
139 |
browsed. |
from the default grub.conf to be in line with the documentation. |
140 |
- Made mtu/mru settings configurable. |
- Enable error logging for MySQL. |
141 |
- Increased the templating in php.ini |
- When user or group names with a "." in the names exist, |
142 |
- Fixed timezone detection issues for certain timezones during certificate |
running /sbin/e-smith/audittools/aliases will show more than the |
143 |
generation |
expected list. |
144 |
- Added support for cciss RAID controller |
- Improve the quality of the mirrors by using a network mirror-list. The |
145 |
- Enable a new feature to allow admin to have own password not shared with |
list is automatically generated hourly based on the status of the |
146 |
root. |
current mirrors. By using these mirror-lists it is ensured that people |
147 |
- nut is now started after the network to avoid mails to the admin mailbox |
are directed to an updated mirror. When a mirror is added or removed |
148 |
about lost communication. |
the change will be available quickly and automatically. It also |
149 |
- e-smith-openssh contained unused template fragments were removed. |
centralizes control of the mirror lists. |
150 |
- ibays can now be set as non-browsable (hidden), but accessible via their |
- Add yum-protect-packages support to prevent removal of needed |
151 |
UNC. An ibay can be hidden by setting the Browsable property to disabled. |
packages. This stops accidental removal of core SME Server packages. |
152 |
- Suspicious string scanning (supscan) has been disabled due |
- Introduced (weak) kernel modules which are independent of kernel |
153 |
to being CPU and I/O intensive and prone to producing false positives.. |
version. This means there is no need to update/rebuild kmods for each |
154 |
- The audittool script has been updated to also identify modified events. |
kernel update. |
155 |
- If a custom motd was used this could have been sent with the smolt data, now |
- Fix for VPN access failed with buffer too small errors. |
156 |
only the version from e-smith-release is sent. |
|
157 |
- The wrong URL was shown for the smolt profile, it has been updated to |
$Id: README.txt,v 1.4 2010/03/01 19:30:11 wellsi Exp $ |
158 |
http://smolt.contribs.org/ |
|
159 |
- Patch djbdns around TCP bug: http://alkemio.org/dns_transmit-bug.html |
|
160 |
- Change license of djbdns to "Public Domain' - |
|
|
http://cr.yp.to/distributors.html |
|
|
- Do not display symlinks via ftp. |
|
|
- New LPRng where both inbuilt filters as well as smbprint filters work. |
|
|
- Resolved false positives that were being reported by rkhunter. |
|
|
- Move the clamav scan schedule to the correct crontab file for ease of use. |
|
|
- Use yum installonlyn plugin to keep only the last 5 kernels. |
|
|
- Change Wpad URL to match system domain to enable the Wpad feature. |
|
|
- dnscache will now ignore referrals when in forwardonly mode. |
|
|
- On servers with no ibays and less than two users the shadow-copy-rotate |
|
|
script would fail. |
|
|
- Correct the step-ticker to pool.ntp.org hosts. |
|
|
- Hide normally hidden files from view when using roaming profiles. |
|
|
- The dungog yum repository has been obsoleted as the packages are in |
|
|
smecontribs. |
|
|
- When a user is deleted from the server-manager his/her pseudonyms should not |
|
|
appear in any configuration file. |
|
161 |
|
|
162 |
|
|
|
General features |
|
|
================ |
|
|
- Based on CentOS 4.7 and all available updates |
|
163 |
|
|
164 |
|
|
|
There are a few differences from previous releases <=7.2 |
|
|
======================================================== |
|
165 |
|
|
|
After installing for the very first time: |
|
|
----------------------------------------- |
|
|
- First night you may receive an email from cron about sa_updates. |
|
|
- First night you should receive a large email saying a bunch of |
|
|
groups/users were removed/added (rkhunter email notification). |
|
|
- Any time you change users/groups you will receive an email the next day |
|
|
about those changes (rkhunter email notification). |
|
166 |
|
|
|
$Id: README.txt,v 1.27 2008/11/17 23:15:15 slords Exp $ |
|