| 1 |
SME Server 7.4 Release Announcement |
SME Server 7.5 Release Candidate 2 Release Announcement |
| 2 |
=================================== |
======================================================= |
| 3 |
|
|
| 4 |
November 21 2008 |
May 5 2010 |
| 5 |
|
|
| 6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
| 7 |
SME Server 7.4. This release is based on CentOS 4.7. Other major changes |
SME Server 7.5RC2. This release is based on CentOS 4.8. |
|
in this release are the use dar for backups and the change to UTF-8 |
|
|
along with translation into 6 additional languages. |
|
|
|
|
| 8 |
|
|
| 9 |
All SME Server users should upgrade to this release. |
This is only released for testing and not for production use. |
| 10 |
|
|
| 11 |
The release should be obtained from your closest mirror, see |
The release should be obtained from your closest mirror, see |
| 12 |
http://wiki.contribs.org/SME_Server:Download |
http://wiki.contribs.org/SME_Server:Download |
| 13 |
|
|
| 14 |
Bug reports and reports of potential bugs should be raised |
Bug reports and reports of potential bugs should be raised in the bug |
| 15 |
in the bug tracker (and only there, please); |
tracker (and only there, please); |
| 16 |
|
|
| 17 |
http://bugs.contribs.org/ |
http://bugs.contribs.org/ |
| 18 |
|
|
| 19 |
|
|
| 20 |
Please Note |
Please Note |
| 21 |
=========== |
=========== |
| 22 |
It may take up to 48 hours for mirrors to finish syncing, |
It may take up to 48 hours for mirrors to finish syncing, during this |
| 23 |
during this time you may experience problems. |
time you may experience problems. |
|
|
|
| 24 |
|
|
| 25 |
About SME Server |
About SME Server |
| 26 |
================ |
================ |
| 28 |
SME Server is the leading Linux distribution for small and medium |
SME Server is the leading Linux distribution for small and medium |
| 29 |
enterprises. |
enterprises. |
| 30 |
|
|
| 31 |
SME Server is freely available under the GNU General Public License |
SME Server is freely available under the GNU General Public License and |
| 32 |
and is only possible through the efforts of the SME Server community. |
is only possible through the efforts of the SME Server community. |
| 33 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
| 34 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
| 35 |
|
|
| 36 |
|
|
| 37 |
Thanks |
Thanks |
| 38 |
====== |
====== |
| 39 |
The development team would like to thank all of those involved in |
The development team would like to thank all of those involved in this |
| 40 |
this release. However, this distribution cannot continue with the |
release. More people are required to help with bug triage and |
| 41 |
current level of support. More people are required to help with |
verification testing. |
| 42 |
bug triage and verification testing. |
|
| 43 |
|
This release contains many new features, all released updates for SME |
| 44 |
|
Server 7.4 and fixes for many reported problems. Upgrades will be |
| 45 |
This release contains many new features, all released updates for |
available by CD, the Software Installer and command line. |
|
SME Server 7.3 and fixes for many reported problems. Upgrades |
|
|
will be available by CD, the Software Installer and command line. |
|
| 46 |
|
|
| 47 |
|
|
| 48 |
Upgrades |
Upgrades |
| 51 |
- An upgrade will preserve the existing data |
- An upgrade will preserve the existing data |
| 52 |
|
|
| 53 |
|
|
| 54 |
Changes in this release |
Summary of changes from SME 7.5 RC1 |
| 55 |
======================= |
=================================== |
| 56 |
|
|
| 57 |
|
Mail Server |
| 58 |
|
- Update to ClamAV 0.96 |
| 59 |
|
- Increase MemLimit to 600M for clamav-0.96 |
| 60 |
|
- Remove spamassassin jobs from cron.daily that are no longer needed. |
| 61 |
|
- Use HeloHost (if present) for SMTP auth proxy |
| 62 |
|
|
| 63 |
|
Server manager |
| 64 |
|
- Improve the HTML formatting of the modify quota panel to work in IE8. |
| 65 |
|
|
| 66 |
Installer |
Installer |
| 67 |
--------- |
- Require /sbin/mdassemble so mkinitrd works correctly. |
|
- Fix grub label to keep consistent with the SME Server brand. |
|
| 68 |
|
|
|
Mail system changes |
|
|
------------------- |
|
|
- Introduce a web interface to configure the pseudonym "visible" property |
|
|
(internal|external) |
|
|
- New feature now allows a "catch all" situation where you have the ability |
|
|
to redirect "@virtualdomain1.com" to user "joe". |
|
|
- Fix the "Ugly" log messages (Use of uninitialized value) when spam checking |
|
|
results in 0 hits. |
|
|
- Emails sent to a null address like ""@domain without the username part |
|
|
are now rejected. |
|
|
- qplogsumm is a optional feature that should be disabled by default. |
|
|
- A request that the log information is reduced with the default loglevel |
|
|
setting of 6 in qpsmtpd. |
|
|
- Support for sending mail to ISP via Secure SMTP |
|
|
- Enable the auth plugin for local lan connections |
|
|
- Migrate (remove) "ordb.net" from the RBL lists to prevent mail bouncing. |
|
|
- Remove blackhole.securitysage.com as service no longer in use. |
|
|
- Remove sbl-xbl.spamhaus.org from default lists and use a more improved |
|
|
list in zen.spamhaus.org. |
|
| 69 |
|
|
| 70 |
Console |
Changes from SME 7.4 |
| 71 |
------- |
==================== |
|
- Improved validation will check password on first enter password screen |
|
|
before verifying if too simple then asking to verify and proceed to |
|
|
configuration of server. |
|
|
- Passwords should be validated for strength on first entry rather than |
|
|
waiting for the second confirmation entry. |
|
|
- The console should validate passwords using the common method, |
|
|
using esmith::util::validatePassword |
|
|
- The last item in the server console, "Exit from server console", is removed |
|
|
as it is redundant. |
|
|
- Display frames in console server-manager. |
|
|
When browsing server-manager through console pressing 'H' goes to |
|
|
http://localhost/server-manager |
|
| 72 |
|
|
| 73 |
Backups |
Backups |
| 74 |
------- |
------- |
| 75 |
- Backups now use dar which enables a backup to consist of more than 2GB |
- The backup service has been made more robust: |
| 76 |
of data to a workstation in any of the following supported methods: |
Allow many backups in the same day. |
| 77 |
cifs, nfs or local usb disk. It also gives the option to set how many |
Prevent launching a restore if all needed backups are not available. |
| 78 |
rotating backups are required and allows to split size of backup |
Do not allow a restore from a partial backup. |
| 79 |
to DVD size. |
- Some valid passwords would fail due to how the backup directory was |
| 80 |
- Removed 'restore from desktop' functionality |
mounted, the use of a credentials file for mount.cifs now avoids this |
| 81 |
- The error codes from tar are now logged, in line with flexbackup, and do not |
limitation. |
| 82 |
cause a backup to fail. |
- The e-mail now correctly identifies incremental and full backups. |
| 83 |
- A Iomeage USB REV-drive was by default mounted in /media as a cdrom device. |
- Make workstation-backup 'full backup allowed on'-setting stick across |
| 84 |
It is now automagically mounted as an usbdisk so it can be used as a backup |
revisits of the Configure-page when set to: 'Sunday' |
| 85 |
device without manual intervention. |
|
| 86 |
- Set dar compression to default to gzip |
File Server |
| 87 |
- dar backup to be less verbose in panel |
----------- |
| 88 |
- Correct mounting for usb disks |
- A patch was added to support multiple samba roles, the change is |
| 89 |
- no compression for ogg media files |
transparent. However installing smeserver-adv-samba allows the user to |
| 90 |
- Make dar use defined list of directories to backup |
take advantage of additional server roles as detailed in |
| 91 |
- Remove obsolete smbfs backup method |
http://wiki.contribs.org/Advanced_Samba |
|
|
|
| 92 |
|
|
| 93 |
Localisation |
Localisation |
| 94 |
------------ |
------------ |
| 95 |
As part of a major update with translations we have added six new |
- As part of a major update with translations we have added seven new |
| 96 |
languages and made it much easier to add other languages in the |
languages: |
| 97 |
future. |
Thai, Polish, Romanian, Estonian, Chinese, Norwegian (Bokmal), |
| 98 |
|
Russian. |
| 99 |
We now support the following languages in the server-manager: Danish, |
- Other fixes include updated translations for the existing languages. |
| 100 |
Dutch, English, French, Greek, German, Hungarian, Indonesian, Italian, |
|
| 101 |
Portuguese, Slovenian, Spanish and Swedish. |
Mail Server |
| 102 |
|
----------- |
| 103 |
We have made major strides to assist the non-English community by |
- Transport Layer Security (TLS) authentication capability has been |
| 104 |
using a tool called pootle. This is a web based translation tool that |
added for incoming smtp ehlo requests. |
| 105 |
will allow new languages to be added and existing languages to be more |
- Implement correctly the subject line SPAM tagging functionality. |
| 106 |
easily maintained. |
- The syntax of the smtproutes and SMTPSmartHost templates have been |
| 107 |
|
updated to avoid MX lookups |
| 108 |
We have cleaned up a lot of the packages as a part of getting them to |
- Incoming mail could be incorrectly rejected by qpsmtpd plugin |
| 109 |
work with pootle. Another big change as part of this upgrade is the |
require_resolvable_fromhost. |
| 110 |
switch from ISO-8859-1 (Latin) charset to UTF-8 (Universal) charset, |
- Update to qpsmtpd 0.83 |
| 111 |
this will allow us to support languages that don't use latin |
- Update to ClamAV 0.96 |
| 112 |
characters (like Greek). |
- Increase MemLimit to 600M for clamav-0.96 |
| 113 |
|
- Remove spamassassin jobs from cron.daily that are no longer needed. |
| 114 |
Other fixes include updated translations for the existing languages. |
- HeuristicScanPrecedence is a new option in clamav 0.94. |
| 115 |
|
See http://wiki.contribs.org/Email#Heuristic_Scan |
| 116 |
Software Installer |
- Rotate Virus scanning log files |
| 117 |
------------------ |
- Remove the external preloaded library, qmail-workaround, which was |
| 118 |
- smeextras repository added, it is used for building the installer and ISO |
needed for qmail loopback connections if a domain MX resolves to |
| 119 |
- The yum-update event now includes the yum-import-keys action to allow |
0.0.0.0. This has now been replaced by a patch to qmail itself. |
| 120 |
users to update yum packages and configuration without rebooting, |
- Use HeloHost (if present) for SMTP auth proxy |
|
which enables updating when there is a compatibility problem. |
|
|
- Correct yum-update-dbs action to adjust yum service properly. |
|
|
- The BaseURL property has been removed for repos with mirrorlists. |
|
|
- The message "This system is up to date." is displayed if no updates are |
|
|
available. |
|
|
|
|
|
Webmail |
|
|
------- |
|
|
- Horde, imp, turbo and ingo have been updated to the latest versions |
|
|
- Support the ability to save user kronolith free/busy information to the LDAP |
|
|
database. |
|
|
- Servers with a custom template for 110AppRegistryHorde found webmail no |
|
|
longer worked. |
|
|
- The name of the webmail installation is now configurable. |
|
|
To use - config setprop horde Name xxxx ; signal-event email-update. |
|
| 121 |
|
|
| 122 |
Server manager |
Server manager |
| 123 |
-------------- |
-------------- |
| 124 |
- The name of the log file being viewed via the Server Manager 'View log |
- The reconfigure warning is displayed in subsequent browser sessions of |
| 125 |
files' is now displayed as the first line. |
the server-manager when the server is updated from the Command Line, |
| 126 |
- Disabling the daily update check in the server-manager did not stop the |
or after a reboot, if a full reconfiguration has not been performed. |
| 127 |
check4updates task sending mail to the server administrator. |
- Allow to select "check for updates" daily, weekly or monthly in the |
| 128 |
- Server-manager > printers > add printer - now advises users to avoid |
Software Installer. Check for updates can also be disabled. |
| 129 |
certain names and descriptions as this causes printer state to be incorrect. |
- Fix yum warnings about "another instance is running" when running a |
| 130 |
- Fix the Unknown heading in server-manager after an update. |
second instance of yum from another terminal. |
| 131 |
- Fix inconsistency within the navigation.xx files which no longer adds extra |
- Improve the HTML formatting of the modify quota panel to work in IE8. |
| 132 |
spaces and newlines in panel headers. |
|
| 133 |
- The Anti-virus (ClamAV) panel text was updated to remove the word 'entire' |
Webmail and Groupware |
| 134 |
as this could be misleading. |
--------------------- |
| 135 |
- Allow server-manager to successfully create a one character user account. |
- Horde, imp, turba and ingo have been updated to the latest versions |
| 136 |
- After adding a user and trying to set password via server-manager or |
- Patch to make sure username is always saved in lowercase to horde db's |
| 137 |
user-password using the ";" sign you encountered a "white screen of |
- Allow FQDN and non-FQDN access to webmail. |
| 138 |
death". This was due to the version of perl-Object-Persistence being used. |
- The spell checker in Horde Mail has been enabled for HTML composition. |
| 139 |
- Remove the last 'pleasewait' message as it is no longer needed. |
- Obsolete smeserver-trean < 0.1-8 as it makes the sidebar menu of the |
| 140 |
- The button to add a new user in the server-manager was missing due to a |
webmail interface disappear. |
| 141 |
problem with the free/busy code in usermanager causing the panel to exit. |
|
| 142 |
|
Web Server |
| 143 |
|
---------- |
| 144 |
|
- Implement a database key (SSLv2) which allows to disable certificates |
| 145 |
|
signed with SSLv2, enabled by default to keep current behaviour. |
| 146 |
|
- Add support for more MIME Types to Apache: |
| 147 |
|
Openoffice 1.x, Openoffice 2.x |
| 148 |
|
Microsoft Office 2007 |
| 149 |
|
XML |
| 150 |
|
- SSL Certificates will now use a SHA1 |
| 151 |
|
- SSL Certificates will now use a 2048 bits key size |
| 152 |
|
|
| 153 |
Other fixes and updates |
Other fixes and updates |
| 154 |
----------------------- |
----------------------- |
| 155 |
- Updated Samba resolves various file sharing problems |
- From June 2009 smeserver-rkhunter was removed from smeos and made a |
| 156 |
- The length of an Ibay name is now configurable via maxIbayNameLength |
contrib. |
| 157 |
- The Samba "unix extensions" are turned off for Mac compatibility |
- Do not allow re-allocation of deleted Windows user profiles. |
| 158 |
- radiusd.conf allows support for additional authentication methods |
- Template sshd login grace time |
| 159 |
- Ability to modify pseudonyms with special characters |
- Correct the configuration of smartd to monitor hard disk status, but |
| 160 |
- Prevent NameServer being set to current IP of SME Server |
default to disabled. |
| 161 |
- Allow support for server side includes for ibays when a directory is |
- Display the boot time menu by default by removing the hiddenmenu entry |
| 162 |
browsed. |
from the default grub.conf to be in line with the documentation. |
| 163 |
- Made mtu/mru settings configurable. |
- Enable error logging for MySQL. |
| 164 |
- Increased the templating in php.ini |
- When user or group names with a "." in the names exist, |
| 165 |
- Fixed timezone detection issues for certain timezones during certificate |
running /sbin/e-smith/audittools/aliases will show more than the |
| 166 |
generation |
expected list. |
| 167 |
- Added support for cciss RAID controller |
- Improve the quality of the mirrors by using a network mirror-list. The |
| 168 |
- Enable a new feature to allow admin to have own password not shared with |
list is automatically generated hourly based on the status of the |
| 169 |
root. |
current mirrors. By using these mirror-lists it is ensured that people |
| 170 |
- nut is now started after the network to avoid mails to the admin mailbox |
are directed to an updated mirror. When a mirror is added or removed |
| 171 |
about lost communication. |
the change will be available quickly and automatically. It also |
| 172 |
- e-smith-openssh contained unused template fragments were removed. |
centralizes control of the mirror lists. |
| 173 |
- ibays can now be set as non-browsable (hidden), but accessible via their |
- Add yum-protect-packages support to prevent removal of needed |
| 174 |
UNC. An ibay can be hidden by setting the Browsable property to disabled. |
packages. This stops accidental removal of core SME Server packages. |
| 175 |
- Suspicious string scanning (supscan) has been disabled due |
- Introduced (weak) kernel modules which are independent of kernel |
| 176 |
to being CPU and I/O intensive and prone to producing false positives.. |
version. This means there is no need to update/rebuild kmods for each |
| 177 |
- The audittool script has been updated to also identify modified events. |
kernel update. |
| 178 |
- If a custom motd was used this could have been sent with the smolt data, now |
- Fix for VPN access failed with buffer too small errors. |
| 179 |
only the version from e-smith-release is sent. |
- Require /sbin/mdassemble so mkinitrd works correctly. |
| 180 |
- The wrong URL was shown for the smolt profile, it has been updated to |
|
| 181 |
http://smolt.contribs.org/ |
$Id: README.txt,v 1.7 2010/04/26 20:09:15 wellsi Exp $ |
| 182 |
- Patch djbdns around TCP bug: http://alkemio.org/dns_transmit-bug.html |
|
| 183 |
- Change license of djbdns to "Public Domain' - |
|
| 184 |
http://cr.yp.to/distributors.html |
|
|
- Do not display symlinks via ftp. |
|
|
- New LPRng where both inbuilt filters as well as smbprint filters work. |
|
|
- Resolved false positives that were being reported by rkhunter. |
|
|
- Move the clamav scan schedule to the correct crontab file for ease of use. |
|
|
- Use yum installonlyn plugin to keep only the last 5 kernels. |
|
|
- Change Wpad URL to match system domain to enable the Wpad feature. |
|
|
- dnscache will now ignore referrals when in forwardonly mode. |
|
|
- On servers with no ibays and less than two users the shadow-copy-rotate |
|
|
script would fail. |
|
|
- Correct the step-ticker to pool.ntp.org hosts. |
|
|
- Hide normally hidden files from view when using roaming profiles. |
|
|
- The dungog yum repository has been obsoleted as the packages are in |
|
|
smecontribs. |
|
|
- When a user is deleted from the server-manager his/her pseudonyms should not |
|
|
appear in any configuration file. |
|
| 185 |
|
|
| 186 |
|
|
|
General features |
|
|
================ |
|
|
- Based on CentOS 4.7 and all available updates |
|
| 187 |
|
|
| 188 |
|
|
|
There are a few differences from previous releases <=7.2 |
|
|
======================================================== |
|
| 189 |
|
|
|
After installing for the very first time: |
|
|
----------------------------------------- |
|
|
- First night you may receive an email from cron about sa_updates. |
|
|
- First night you should receive a large email saying a bunch of |
|
|
groups/users were removed/added (rkhunter email notification). |
|
|
- Any time you change users/groups you will receive an email the next day |
|
|
about those changes (rkhunter email notification). |
|
| 190 |
|
|
|
$Id: README.txt,v 1.27 2008/11/17 23:15:15 slords Exp $ |
|
Parent Directory
| 
Revision Log
| 
Revision Graph
| 
Patch
