| 1 |
SME Server 7.5 Beta 2 Release Announcement |
SME Server 7.5.1 Release Announcement |
| 2 |
========================================== |
=================================== |
| 3 |
|
|
| 4 |
March 1 2010 |
June 27 2010 |
| 5 |
|
|
| 6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
| 7 |
SME Server 7.5beta2. This release is based on CentOS 4.8. |
SME Server 7.5.1 This is a patch release for SME 7.5 to resolve |
| 8 |
|
problems seen by some VPN users, and other minor fixes. |
|
|
|
|
This is only released for testing and not for production use. |
|
| 9 |
|
|
| 10 |
The release should be obtained from your closest mirror, see |
The release should be obtained from your closest mirror, see |
| 11 |
http://wiki.contribs.org/SME_Server:Download |
http://wiki.contribs.org/SME_Server:Download |
| 12 |
|
|
| 13 |
Bug reports and reports of potential bugs should be raised |
Bug reports and reports of potential bugs should be raised in the bug |
| 14 |
in the bug tracker (and only there, please); |
tracker (and only there, please); |
| 15 |
|
|
| 16 |
http://bugs.contribs.org/ |
http://bugs.contribs.org/ |
| 17 |
|
|
| 18 |
|
|
| 19 |
Please Note |
Please Note |
| 20 |
=========== |
=========== |
| 21 |
It may take up to 48 hours for mirrors to finish syncing, |
It may take up to 48 hours for mirrors to finish syncing, during this |
| 22 |
during this time you may experience problems. |
time you may experience problems. |
| 23 |
|
|
| 24 |
|
|
| 25 |
About SME Server |
About SME Server |
| 26 |
================ |
================ |
| 28 |
SME Server is the leading Linux distribution for small and medium |
SME Server is the leading Linux distribution for small and medium |
| 29 |
enterprises. |
enterprises. |
| 30 |
|
|
| 31 |
SME Server is freely available under the GNU General Public License |
SME Server is freely available under the GNU General Public License and |
| 32 |
and is only possible through the efforts of the SME Server community. |
is only possible through the efforts of the SME Server community. |
| 33 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
| 34 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
| 35 |
|
|
| 36 |
|
This release is based on CentOS 4.8. |
| 37 |
|
|
| 38 |
|
|
| 39 |
Thanks |
Thanks |
| 40 |
====== |
====== |
| 41 |
The development team would like to thank all of those involved in |
The development team would like to thank all of those involved in this |
| 42 |
this release. More people are required to help with |
release. More people are required to help with bug triage and |
| 43 |
bug triage and verification testing. |
verification testing. |
|
|
|
|
|
|
|
This release contains many new features, all released updates for |
|
|
SME Server 7.4 and fixes for many reported problems. Upgrades |
|
|
will be available by CD, the Software Installer and command line. |
|
| 44 |
|
|
| 45 |
|
|
| 46 |
Upgrades |
Upgrades |
| 47 |
======== |
======== |
| 48 |
|
Upgrades are available by CD, the Software Installer and command line. |
| 49 |
- Always perform a backup prior to major system upgrades |
- Always perform a backup prior to major system upgrades |
| 50 |
- An upgrade will preserve the existing data |
- An upgrade will preserve the existing data |
| 51 |
|
|
| 53 |
Changes in this release |
Changes in this release |
| 54 |
======================= |
======================= |
| 55 |
|
|
| 56 |
This will be updated for 7.5 RC, here are the changelogs |
Backups |
| 57 |
|
------- |
| 58 |
|
- Restoring from a Workstation Backup showed a false failure. |
| 59 |
e-smith-apache |
- The Workstation Backup panel now removes leading and trailing spaces |
| 60 |
- Add option to disable SSLv2 [SME: 5034] |
from the hostname. |
| 61 |
- Add OpenOffice2 MIME Types [SME: 5112] |
|
| 62 |
- Add OpenOffice MIME Types [SME: 4848] |
Localisation |
| 63 |
- Add XML MIME Type [SME: 5035] |
------------ |
| 64 |
- Fix issues in patch that adds Microsoft Office 2007 MIME types [SME: 4548] |
- Latest translation updates. |
| 65 |
- Add Microsoft Office 2007 MIME types [SME: 4548] |
- Fix translation of local nic string in console. |
| 66 |
|
|
| 67 |
e-smith-backup |
Mail Server |
| 68 |
- Fix full backup on Sunday displayed as Everyday. [SME: 5624] |
----------- |
| 69 |
- workstation backup: add cifs credentials expand to bootstrap-console-save [SME: 4850] |
- Implement a database key (TlsBeforeAuth) to allow SMTP |
| 70 |
- workstation backup: using credentials file for cifs mount [SME: 4850] |
Authentication without TLS. The default remains to require TLS before |
| 71 |
- workstation backup: allow many backups in the same day [SME: 5393] |
Auth (introduced in SME 7.5). |
| 72 |
- workstation restore: all needed backups must be available before restore [SME: 5395] |
|
| 73 |
- workstation verify: add option to check integrity of backups needed in a full restore [SME: 5396] |
Server manager |
| 74 |
- minor fix in translation [SME: 5406] |
-------------- |
| 75 |
- Fix DAR e-mail message with regards to incremental backups [SME: 4579] |
- Add option to limit port forwarding by source ip address. |
| 76 |
- Fix discrepancy in maximum compression level [SME: 4841] |
- Enable port forwards to localhost if mode is serveronly. |
| 77 |
|
- Text description added for each Port Forwarding. |
| 78 |
e-smith-base |
|
| 79 |
- Improve security by using SHA1 algorithm for certificate signing [SME: 5736] |
Other fixes and updates |
| 80 |
- Bump certificate encryption from 1024 bits to 2048 bits [SME: 5734] |
----------------------- |
| 81 |
- Add a dummy call so xgettext can pull translated $ifName in console configuration pages [SME: 1189] |
- VPN failed for some users due to incorrect kernel module. |
| 82 |
- Translate $ifName in console configuration pages [SME: 1189] |
- Error in postuninstall script prevented kmod packages from being |
| 83 |
- Clean up stray symlinks in /lib/modules before depmod [SME: 5334] |
removed during upgrade. |
| 84 |
- Allow for different mdadm output formats for DeviceSize. [SME: 5258] |
- /etc/cron.daily/freshclam was replaced by a dummy file as freshclam |
| 85 |
- Auto-mount USB REV70-drive as usbdisk [SME: 5006] |
does not need to be run daily as it is run as a supervised process. |
| 86 |
- create service link for smartd [SME: 1445] |
|
| 87 |
- Add patch to support multiple samba roles [SME: 4172] |
Changes from SME 7.4 to SME 7.5 |
| 88 |
|
=============================== |
| 89 |
e-smith-formmagick |
|
| 90 |
- Update path for 64-bit compatibility [SME: 5755] |
Backups |
| 91 |
|
------- |
| 92 |
e-smith-grub |
- The backup service has been made more robust: |
| 93 |
- Remove hiddenmenu entry from grub.conf [SME: 5166] |
Allow many backups in the same day. |
| 94 |
|
Prevent launching a restore if all needed backups are not available. |
| 95 |
e-smith-horde |
Do not allow a restore from a partial backup. |
| 96 |
- Patch to make sure username is always saved in lowercase to horde db's [SME: 5627] |
- Some valid passwords would fail due to how the backup directory was |
| 97 |
- Upgrade horde templates to reflect changes in Horde 3.3.6 [SME: 5721] |
mounted, the use of a credentials file for mount.cifs now avoids this |
| 98 |
- Update to Spec file to obsolete smeserver-trean < 0.1-8 [SME: 4860] |
limitation. |
| 99 |
- Patch to conf.php template to set a blank cookie domain so that FQDN and non-FQDN |
- The e-mail now correctly identifies incremental and full backups. |
| 100 |
- access to webmail will work. Remove klutz template from registry.php [SME: 4787] |
- Make Workstation Backup 'full backup allowed on' setting stick across |
| 101 |
|
revisits of the Configure page when set to 'Sunday'. |
| 102 |
e-smith-imap |
- Workstation Backup emails now include a To: header. |
| 103 |
- Move creation of chrooted dev/urandom to spec-file [SME: 1105] |
|
| 104 |
- Create chroot dev/urandom for stunnel to use [SME: 1105] |
File Server |
| 105 |
|
----------- |
| 106 |
e-smith-imp |
- A patch was added to support multiple samba roles, the change is |
| 107 |
- Updated templates to reflect changes in imp 4.3.6 [SME: 5722] |
transparent. However installing smeserver-adv-samba allows the user to |
| 108 |
- Updated spec file to require php-pear-HTTP-Request to accomodate HTML composition [SME: 4821] |
take advantage of additional server roles as detailed in |
| 109 |
|
http://wiki.contribs.org/Advanced_Samba |
| 110 |
e-smith-ingo |
|
| 111 |
- Update e-smith-ingo templates to reflect changes in Ingo 1.2.3 [SME: 5724] |
Localisation |
| 112 |
|
------------ |
| 113 |
e-smith-lib |
- As part of a major update with translations we have added seven new |
| 114 |
- Add patch (Federico Simoncelli) to prevent re-use of uids. [SME: 4969] |
languages: |
| 115 |
- Update path for 64-bit compatibility [SME: 5755] |
Thai, Polish, Romanian, Estonian, Chinese, Norwegian (Bokmal), |
| 116 |
- Add patch to support multiple samba roles [SME: 4172] |
Russian. |
| 117 |
|
- Other fixes include updated translations for the existing languages. |
| 118 |
e-smith-manager |
|
| 119 |
- display reconfigure warning once if UnsavedChanges=yes [SME: 5475] |
Mail Server |
| 120 |
- display reconfigure warning if UnsavedChanges=yes [SME: 2081] |
----------- |
| 121 |
- Fix misinterpretation of display string [SME: 5022] |
- Transport Layer Security (TLS) authentication capability has been |
| 122 |
|
added for incoming smtp ehlo requests. |
| 123 |
e-smith-mysql |
- SMTP Authentication requires TLS before Auth to increase security. |
| 124 |
- Rework log-error logic [SME: 4807] |
- Implement correctly the subject line SPAM tagging functionality. |
| 125 |
- Fix log-error detection algorithm [SME: 4807] |
- The syntax of the smtproutes and SMTPSmartHost templates have been |
| 126 |
|
updated to avoid MX lookups |
| 127 |
e-smith-nutUPS |
- Incoming mail could be incorrectly rejected by qpsmtpd plugin |
| 128 |
- Fix another instance of ups model for new version of nut [SME: 4750] |
require_resolvable_fromhost. |
| 129 |
|
- Update to qpsmtpd 0.83 |
| 130 |
e-smith-openssh |
- Update to ClamAV 0.96.1 |
| 131 |
- Template sshd login grace time, kept default at 600s [SME: 4903] |
- Increase MemLimit to 600M for clamav-0.96 |
| 132 |
|
- Remove spamassassin jobs from cron.daily that are no longer needed. |
| 133 |
e-smith-qmail |
- HeuristicScanPrecedence is a new option in clamav 0.94. |
| 134 |
- SMTPSmartHost template incorrectly uses brackets to avoid MX lookups. [SME: 5455] |
See http://wiki.contribs.org/Email#Heuristic_Scan |
| 135 |
- smtproutes template incorrectly uses brackets to avoid MX lookups. [SME: 5254] |
- Rotate Virus scanning log files |
| 136 |
- Remove qmail-workaround and obsolete it after patch to treat 0.0.0.0 as a |
- Remove the external preloaded library, qmail-workaround, which was |
| 137 |
local ip [SME: 5171] |
needed for qmail loopback connections if a domain MX resolves to |
| 138 |
|
0.0.0.0. This has now been replaced by a patch to qmail itself. |
| 139 |
e-smith-samba |
- Use HeloHost (if present) for SMTP auth proxy |
| 140 |
- Add registry file to server-resources to allow windows 7 to |
|
| 141 |
join Samba 3.x domains [SME: 5423] |
Server manager |
| 142 |
- Fix warnings in template expansion [SME: 4954] |
-------------- |
| 143 |
- Fix migrate fragments for samba [SME: 4777] |
- The reconfigure warning is displayed in subsequent browser sessions of |
| 144 |
- Fix oslevel fragment for server roles [SME: 4730] |
the server-manager when the server is updated from the Command Line, |
| 145 |
- Add patch to support multiple samba roles [SME: 4172] |
or after a reboot, if a full reconfiguration has not been performed. |
| 146 |
|
- Allow to select "check for updates" daily, weekly or monthly in the |
| 147 |
e-smith-turba |
Software Installer. Check for updates can also be disabled. |
| 148 |
- Updated template files to reflect changes in Turba 2.3.3 [SME: 5723] |
- Fix yum warnings about "another instance is running" when running a |
| 149 |
- Remove redundant 49turba_migrate_contacts template fragments [SME: 5148] |
second instance of yum from another terminal. |
| 150 |
- Fix turba.sql patch to prevent creating a .orig file [SME: 4910] |
- Improve the HTML formatting of the modify quota panel to work in IE8. |
| 151 |
|
|
| 152 |
horde |
Webmail and Groupware |
| 153 |
- Updated to Horde 3.3.6 [SME: 5721] |
--------------------- |
| 154 |
|
- Horde, imp, turba and ingo have been updated to the latest versions |
| 155 |
imp-h3 |
- Patch to make sure username is always saved in lowercase to horde db's |
| 156 |
- Updated to Imp 4.3.6 [SME: 5722] |
- Allow FQDN and non-FQDN access to webmail. |
| 157 |
|
- The spell checker in Horde Mail has been enabled for HTML composition. |
| 158 |
ingo-h3 |
- Obsolete smeserver-trean < 0.1-8 as it makes the sidebar menu of the |
| 159 |
- Update to Ingo 1.2.3 [SME: 5724] |
webmail interface disappear. |
| 160 |
|
|
| 161 |
initscripts |
Web Server |
| 162 |
- Reapply SME Server patches [SME: 2043] |
---------- |
| 163 |
- Exit with zero exit status for services not listed in configuration |
- Implement a database key (SSLv2) which allows to disable certificates |
| 164 |
database to avoid failures in post scriptlets [SME: 1653] |
signed with SSLv2, enabled by default to keep current behaviour. |
| 165 |
- Merge in SME Server /sbin/e-smith/service wrapper so that only |
- Add support for more MIME Types to Apache: |
| 166 |
initscripts which exist in run-level 7 can be run. This ensures |
Openoffice 1.x, Openoffice 2.x |
| 167 |
that the supervised service is run, if one exists, and protects |
Microsoft Office 2007 |
| 168 |
against running "service httpd restart" [SME: 61, 1495] |
XML |
| 169 |
|
- SSL Certificates will now use a SHA1 |
| 170 |
mkinitrd |
- SSL Certificates will now use a 2048 bits key size |
| 171 |
- Use generated config file instead of just scanning [SME: 2192] |
|
| 172 |
- Use mdassemble rather than raidautorun in initrd, so that we control |
Other fixes and updates |
| 173 |
UUID to device mapping. [SME: 961, 1895] |
----------------------- |
| 174 |
|
- From June 2009 smeserver-rkhunter was removed from smeos and made a |
| 175 |
qmail |
contrib. |
| 176 |
- Add Scott Gifford patch to treat 0.0.0.0 as a local ip [SME: 5171] |
- Do not allow re-allocation of deleted Windows user profiles. |
| 177 |
|
- Template sshd login grace time |
| 178 |
qpsmtpd |
- Correct the configuration of smartd to monitor hard disk status, but |
| 179 |
- Apply qpsmtpd git changesets to implement custom SPAM |
default to disabled. |
| 180 |
subject prefix [SME: 5567] |
- Display the boot time menu by default by removing the hiddenmenu entry |
| 181 |
- Update pre requires so scripts don't fail on install [SME: 5557] |
from the default grub.conf to be in line with the documentation. |
| 182 |
- Rebase bad_rcptto patch to remove orig file [SME: 5549] |
- Enable error logging for MySQL. |
| 183 |
- Change logging in tls init to prevent warnings [SME: 5550] |
- When user or group names with a "." in the names exist, |
| 184 |
- Only run/initialize plugins once [SME: 5533] |
running /sbin/e-smith/audittools/aliases will show more than the |
| 185 |
- Change spool dir permissions and owner to qpsmtpd:clamav |
expected list. |
| 186 |
- Change log dir permissions and owner to smelog:smelog |
- Improve the quality of the mirrors by using a network mirror-list. The |
| 187 |
- add sme specific patches |
list is automatically generated hourly based on the status of the |
| 188 |
- Update to 0.83 |
current mirrors. By using these mirror-lists it is ensured that people |
| 189 |
|
are directed to an updated mirror. When a mirror is added or removed |
| 190 |
rkhunter |
the change will be available quickly and automatically. It also |
| 191 |
From June 2009 smeserver-rkhunter was removed from smeos and made a contrib. |
centralizes control of the mirror lists. |
| 192 |
|
- Add yum-protect-packages support to prevent removal of needed |
| 193 |
smeserver-audittools |
packages. This stops accidental removal of core SME Server packages. |
| 194 |
- Fix regular expression to actually replace the colon with a dot [SME: 4913] |
- Introduced (weak) kernel modules which are independent of kernel |
| 195 |
- Undo changes made in 1.0.0-5 [SME: 4913] |
version. This means there is no need to update/rebuild kmods for each |
| 196 |
- Properly fix output for usernames and groups containing a dot [SME: 4913] |
kernel update. |
| 197 |
- Remove comment lines from output of aliases [SME: 4913] |
- Fix for VPN access failed with buffer too small errors. |
| 198 |
- Remove the leading path for yum in newrpms [SME: 5566] |
- Require /sbin/mdassemble so mkinitrd works correctly. |
| 199 |
- Revert changes made in [SME: 5416] |
- Reduce drive size requirements from 5G to 1.5G |
|
- Sort the output of the repositories audittool alphabetically [SME: 5416] |
|
|
|
|
|
smeserver-clamav |
|
|
- Setup logrotate for /var/log/clamd/clamscan.log [SME: 5287] |
|
|
- Remove create option from logrotate configuration [SME: 5287] |
|
|
- Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5287] |
|
|
- Minor changelog fixes in version number |
|
|
- Fix permissions on freshclam.conf file [SME: 5320] |
|
|
- Add HeuristicScanPrecedence option, default disabled [SME: 4598] |
|
|
- Obsolete e-smith-antivirus [SME: 4786] |
|
|
|
|
|
smeserver-locale |
|
|
- apply locale 2009-10-27 patch |
|
|
- Add Thai language [SME: 5466] |
|
|
- Add Polish language [SME: 5436] |
|
|
- Add Romanian language [SME: 5268] |
|
|
- Add Estonian language [SME: 5199] |
|
|
- Add Chineese (China) language [SME: 5002] |
|
|
- Add Norwegian (Bokmal) language [SME: 5002] |
|
|
- Add Russian language [SME: 5002] |
|
|
|
|
|
smeserver-qpsmtpd |
|
|
- Tie the template fragment into the event system to have it expand [SME: 5567] |
|
|
- Add qpsmtpd template fragment for custom SPAM subject prefix [SME: 5567] |
|
|
- Add hooks cleanout back in in so auth works. |
|
|
- Add compatibility with qpsmtpd 0.83 [SME: 5543] |
|
|
- Add tls to base config [SME: 1076] |
|
|
|
|
|
smeserver-spamassassin |
|
|
- Fix invalid service name in sa-update [SME: 3304] |
|
|
|
|
|
smeserver-support |
|
|
- Add support for Polish (pl). [SME: 5433] |
|
|
- Add support for Thai (th). [SME: 5466] |
|
|
- Add support for Romanian (ro). [SME: 5268] |
|
|
- Obsoletes: rkhunter to remove from default install [SME: 5172] |
|
|
- Add support for Estonian (et). [SME: 5203] |
|
|
- Add support for Norwegian Bokmal (nb) [SME: 5002 ] |
|
|
- Add support for Russian (ru) [SME: 5002] |
|
|
- Add support for Chinese China (zh_CN) [SME: 5002] |
|
|
|
|
|
smeserver-yum |
|
|
- only unlink file if we created it [SME: 4169] |
|
|
- set unsaved changes in yum event [SME: 2081] |
|
|
- move yum warming to sme yum plugin [SME: 5472] |
|
|
- ensure file exists before unlinking [SME: 4169] |
|
|
- remove semicolons from yum plugin |
|
|
- Add frequency of updates toggle [SME: 5473] |
|
|
- remove stray file |
|
|
- Add /etc/yum.smerepos.d to package [SME: 5306] |
|
|
- Change SME mirrorlists to point to ibiblio [SME: 5242] |
|
|
- Require mailx [SME: 5131] |
|
|
- Add yum-protect-packages support to prevent removal of |
|
|
needed pacakges [SME: 3133] |
|
|
|
|
|
turba-h3 |
|
|
- Updated to Turba 2.3.3 [SME: 5723] |
|
|
|
|
| 200 |
|
|
| 201 |
$Id: README.txt,v 1.2 2009/11/21 20:03:10 wellsi Exp $ |
$Id: README.txt,v 1.9 2010/05/24 21:17:17 wellsi Exp $ |
Parent Directory
| 
Revision Log
| 
Revision Graph
| 
Patch
