--- cdrom.image/sme7/README.txt 2009/06/06 23:51:54 1.1 +++ cdrom.image/sme7/README.txt 2010/03/01 19:30:11 1.4 @@ -1,15 +1,13 @@ -SME Server 7.4 Release Announcement -=================================== +SME Server 7.5 Release Candidate 1 Release Announcement +========================================== -November 21 2008 +March 7 2010 The SME Server development team is pleased to announce the release of -SME Server 7.4. This release is based on CentOS 4.7. Other major changes -in this release are the use dar for backups and the change to UTF-8 -along with translation into 6 additional languages. +SME Server 7.5RC1. This release is based on CentOS 4.8. -All SME Server users should upgrade to this release. +This is only released for testing and not for production use. The release should be obtained from your closest mirror, see http://wiki.contribs.org/SME_Server:Download @@ -25,7 +23,6 @@ Please Note It may take up to 48 hours for mirrors to finish syncing, during this time you may experience problems. - About SME Server ================ @@ -41,13 +38,12 @@ meeting our expenses, such as hosting co Thanks ====== The development team would like to thank all of those involved in -this release. However, this distribution cannot continue with the -current level of support. More people are required to help with +this release. More people are required to help with bug triage and verification testing. This release contains many new features, all released updates for -SME Server 7.3 and fixes for many reported problems. Upgrades +SME Server 7.4 and fixes for many reported problems. Upgrades will be available by CD, the Software Installer and command line. @@ -60,194 +56,207 @@ Upgrades Changes in this release ======================= -Installer ---------- -- Fix grub label to keep consistent with the SME Server brand. - -Mail system changes -------------------- -- Introduce a web interface to configure the pseudonym "visible" property - (internal|external) -- New feature now allows a "catch all" situation where you have the ability - to redirect "@virtualdomain1.com" to user "joe". -- Fix the "Ugly" log messages (Use of uninitialized value) when spam checking - results in 0 hits. -- Emails sent to a null address like ""@domain without the username part - are now rejected. -- qplogsumm is a optional feature that should be disabled by default. -- A request that the log information is reduced with the default loglevel - setting of 6 in qpsmtpd. -- Support for sending mail to ISP via Secure SMTP -- Enable the auth plugin for local lan connections -- Migrate (remove) "ordb.net" from the RBL lists to prevent mail bouncing. -- Remove blackhole.securitysage.com as service no longer in use. -- Remove sbl-xbl.spamhaus.org from default lists and use a more improved - list in zen.spamhaus.org. - -Console -------- -- Improved validation will check password on first enter password screen - before verifying if too simple then asking to verify and proceed to - configuration of server. -- Passwords should be validated for strength on first entry rather than - waiting for the second confirmation entry. -- The console should validate passwords using the common method, - using esmith::util::validatePassword -- The last item in the server console, "Exit from server console", is removed - as it is redundant. -- Display frames in console server-manager. - When browsing server-manager through console pressing 'H' goes to - http://localhost/server-manager - -Backups -------- -- Backups now use dar which enables a backup to consist of more than 2GB - of data to a workstation in any of the following supported methods: - cifs, nfs or local usb disk. It also gives the option to set how many - rotating backups are required and allows to split size of backup - to DVD size. -- Removed 'restore from desktop' functionality -- The error codes from tar are now logged, in line with flexbackup, and do not - cause a backup to fail. -- A Iomeage USB REV-drive was by default mounted in /media as a cdrom device. - It is now automagically mounted as an usbdisk so it can be used as a backup - device without manual intervention. -- Set dar compression to default to gzip -- dar backup to be less verbose in panel -- Correct mounting for usb disks -- no compression for ogg media files -- Make dar use defined list of directories to backup -- Remove obsolete smbfs backup method - - -Localisation ------------- -As part of a major update with translations we have added six new -languages and made it much easier to add other languages in the -future. - -We now support the following languages in the server-manager: Danish, -Dutch, English, French, Greek, German, Hungarian, Indonesian, Italian, -Portuguese, Slovenian, Spanish and Swedish. - -We have made major strides to assist the non-English community by -using a tool called pootle. This is a web based translation tool that -will allow new languages to be added and existing languages to be more -easily maintained. - -We have cleaned up a lot of the packages as a part of getting them to -work with pootle. Another big change as part of this upgrade is the -switch from ISO-8859-1 (Latin) charset to UTF-8 (Universal) charset, -this will allow us to support languages that don't use latin -characters (like Greek). - -Other fixes include updated translations for the existing languages. - -Software Installer ------------------- -- smeextras repository added, it is used for building the installer and ISO -- The yum-update event now includes the yum-import-keys action to allow - users to update yum packages and configuration without rebooting, - which enables updating when there is a compatibility problem. -- Correct yum-update-dbs action to adjust yum service properly. -- The BaseURL property has been removed for repos with mirrorlists. -- The message "This system is up to date." is displayed if no updates are - available. - -Webmail -------- -- Horde, imp, turbo and ingo have been updated to the latest versions -- Support the ability to save user kronolith free/busy information to the LDAP - database. -- Servers with a custom template for 110AppRegistryHorde found webmail no - longer worked. -- The name of the webmail installation is now configurable. - To use - config setprop horde Name xxxx ; signal-event email-update. - -Server manager --------------- -- The name of the log file being viewed via the Server Manager 'View log - files' is now displayed as the first line. -- Disabling the daily update check in the server-manager did not stop the - check4updates task sending mail to the server administrator. -- Server-manager > printers > add printer - now advises users to avoid - certain names and descriptions as this causes printer state to be incorrect. -- Fix the Unknown heading in server-manager after an update. -- Fix inconsistency within the navigation.xx files which no longer adds extra - spaces and newlines in panel headers. -- The Anti-virus (ClamAV) panel text was updated to remove the word 'entire' - as this could be misleading. -- Allow server-manager to successfully create a one character user account. -- After adding a user and trying to set password via server-manager or - user-password using the ";" sign you encountered a "white screen of - death". This was due to the version of perl-Object-Persistence being used. -- Remove the last 'pleasewait' message as it is no longer needed. -- The button to add a new user in the server-manager was missing due to a - problem with the free/busy code in usermanager causing the panel to exit. - -Other fixes and updates ------------------------ -- Updated Samba resolves various file sharing problems -- The length of an Ibay name is now configurable via maxIbayNameLength -- The Samba "unix extensions" are turned off for Mac compatibility -- radiusd.conf allows support for additional authentication methods -- Ability to modify pseudonyms with special characters -- Prevent NameServer being set to current IP of SME Server -- Allow support for server side includes for ibays when a directory is - browsed. -- Made mtu/mru settings configurable. -- Increased the templating in php.ini -- Fixed timezone detection issues for certain timezones during certificate - generation -- Added support for cciss RAID controller -- Enable a new feature to allow admin to have own password not shared with - root. -- nut is now started after the network to avoid mails to the admin mailbox - about lost communication. -- e-smith-openssh contained unused template fragments were removed. -- ibays can now be set as non-browsable (hidden), but accessible via their - UNC. An ibay can be hidden by setting the Browsable property to disabled. -- Suspicious string scanning (supscan) has been disabled due - to being CPU and I/O intensive and prone to producing false positives.. -- The audittool script has been updated to also identify modified events. -- If a custom motd was used this could have been sent with the smolt data, now - only the version from e-smith-release is sent. -- The wrong URL was shown for the smolt profile, it has been updated to - http://smolt.contribs.org/ -- Patch djbdns around TCP bug: http://alkemio.org/dns_transmit-bug.html -- Change license of djbdns to "Public Domain' - - http://cr.yp.to/distributors.html -- Do not display symlinks via ftp. -- New LPRng where both inbuilt filters as well as smbprint filters work. -- Resolved false positives that were being reported by rkhunter. -- Move the clamav scan schedule to the correct crontab file for ease of use. -- Use yum installonlyn plugin to keep only the last 5 kernels. -- Change Wpad URL to match system domain to enable the Wpad feature. -- dnscache will now ignore referrals when in forwardonly mode. -- On servers with no ibays and less than two users the shadow-copy-rotate - script would fail. -- Correct the step-ticker to pool.ntp.org hosts. -- Hide normally hidden files from view when using roaming profiles. -- The dungog yum repository has been obsoleted as the packages are in - smecontribs. -- When a user is deleted from the server-manager his/her pseudonyms should not - appear in any configuration file. - +This will be updated for 7.5 Final, here are the changelogs -General features -================ -- Based on CentOS 4.7 and all available updates +e-smith-apache +- Add option to disable SSLv2 [SME: 5034] +- Add OpenOffice2 MIME Types [SME: 5112] +- Add OpenOffice MIME Types [SME: 4848] +- Add XML MIME Type [SME: 5035] +- Fix issues in patch that adds Microsoft Office 2007 MIME types [SME: 4548] +- Add Microsoft Office 2007 MIME types [SME: 4548] + +e-smith-backup +- Fix full backup on Sunday displayed as Everyday. [SME: 5624] +- workstation backup: add cifs credentials expand to bootstrap-console-save [SME: 4850] +- workstation backup: using credentials file for cifs mount [SME: 4850] +- workstation backup: allow many backups in the same day [SME: 5393] +- workstation restore: all needed backups must be available before restore [SME: 5395] +- workstation verify: add option to check integrity of backups needed in a full restore [SME: 5396] +- minor fix in translation [SME: 5406] +- Fix DAR e-mail message with regards to incremental backups [SME: 4579] +- Fix discrepancy in maximum compression level [SME: 4841] + +e-smith-base +- Improve security by using SHA1 algorithm for certificate signing [SME: 5736] +- Bump certificate encryption from 1024 bits to 2048 bits [SME: 5734] +- Add a dummy call so xgettext can pull translated $ifName in console configuration pages [SME: 1189] +- Translate $ifName in console configuration pages [SME: 1189] +- Clean up stray symlinks in /lib/modules before depmod [SME: 5334] +- Allow for different mdadm output formats for DeviceSize. [SME: 5258] +- Auto-mount USB REV70-drive as usbdisk [SME: 5006] +- create service link for smartd [SME: 1445] +- Add patch to support multiple samba roles [SME: 4172] + +e-smith-formmagick +- Update path for 64-bit compatibility [SME: 5755] + +e-smith-grub +- Remove hiddenmenu entry from grub.conf [SME: 5166] + +e-smith-horde +- Patch to make sure username is always saved in lowercase to horde db's [SME: 5627] +- Upgrade horde templates to reflect changes in Horde 3.3.6 [SME: 5721] +- Update to Spec file to obsolete smeserver-trean < 0.1-8 [SME: 4860] +- Patch to conf.php template to set a blank cookie domain so that FQDN and non-FQDN +- access to webmail will work. Remove klutz template from registry.php [SME: 4787] + +e-smith-imap +- Move creation of chrooted dev/urandom to spec-file [SME: 1105] +- Create chroot dev/urandom for stunnel to use [SME: 1105] + +e-smith-imp +- Updated templates to reflect changes in imp 4.3.6 [SME: 5722] +- Updated spec file to require php-pear-HTTP-Request to accomodate HTML composition [SME: 4821] + +e-smith-ingo +- Update e-smith-ingo templates to reflect changes in Ingo 1.2.3 [SME: 5724] + +e-smith-lib +- Add patch (Federico Simoncelli) to prevent re-use of uids. [SME: 4969] +- Update path for 64-bit compatibility [SME: 5755] +- Add patch to support multiple samba roles [SME: 4172] + +e-smith-manager +- display reconfigure warning once if UnsavedChanges=yes [SME: 5475] +- display reconfigure warning if UnsavedChanges=yes [SME: 2081] +- Fix misinterpretation of display string [SME: 5022] + +e-smith-mysql +- Rework log-error logic [SME: 4807] +- Fix log-error detection algorithm [SME: 4807] + +e-smith-nutUPS +- Fix another instance of ups model for new version of nut [SME: 4750] + +e-smith-openssh +- Template sshd login grace time, kept default at 600s [SME: 4903] + +e-smith-qmail +- SMTPSmartHost template incorrectly uses brackets to avoid MX lookups. [SME: 5455] +- smtproutes template incorrectly uses brackets to avoid MX lookups. [SME: 5254] +- Remove qmail-workaround and obsolete it after patch to treat 0.0.0.0 as a +local ip [SME: 5171] + +e-smith-samba +- Add registry file to server-resources to allow windows 7 to +join Samba 3.x domains [SME: 5423] +- Fix warnings in template expansion [SME: 4954] +- Fix migrate fragments for samba [SME: 4777] +- Fix oslevel fragment for server roles [SME: 4730] +- Add patch to support multiple samba roles [SME: 4172] + +e-smith-turba +- Updated template files to reflect changes in Turba 2.3.3 [SME: 5723] +- Remove redundant 49turba_migrate_contacts template fragments [SME: 5148] +- Fix turba.sql patch to prevent creating a .orig file [SME: 4910] + +horde +- Updated to Horde 3.3.6 [SME: 5721] + +imp-h3 +- Updated to Imp 4.3.6 [SME: 5722] + +ingo-h3 +- Update to Ingo 1.2.3 [SME: 5724] + +initscripts +- Reapply SME Server patches [SME: 2043] +- Exit with zero exit status for services not listed in configuration +database to avoid failures in post scriptlets [SME: 1653] +- Merge in SME Server /sbin/e-smith/service wrapper so that only +initscripts which exist in run-level 7 can be run. This ensures +that the supervised service is run, if one exists, and protects +against running "service httpd restart" [SME: 61, 1495] + +mkinitrd +- Use generated config file instead of just scanning [SME: 2192] +- Use mdassemble rather than raidautorun in initrd, so that we control +UUID to device mapping. [SME: 961, 1895] + +qmail +- Add Scott Gifford patch to treat 0.0.0.0 as a local ip [SME: 5171] + +qpsmtpd +- Apply qpsmtpd git changesets to implement custom SPAM +subject prefix [SME: 5567] +- Update pre requires so scripts don't fail on install [SME: 5557] +- Rebase bad_rcptto patch to remove orig file [SME: 5549] +- Change logging in tls init to prevent warnings [SME: 5550] +- Only run/initialize plugins once [SME: 5533] +- Change spool dir permissions and owner to qpsmtpd:clamav +- Change log dir permissions and owner to smelog:smelog +- add sme specific patches +- Update to 0.83 + +rkhunter +From June 2009 smeserver-rkhunter was removed from smeos and made a contrib. + +smeserver-audittools +- Fix regular expression to actually replace the colon with a dot [SME: 4913] +- Undo changes made in 1.0.0-5 [SME: 4913] +- Properly fix output for usernames and groups containing a dot [SME: 4913] +- Remove comment lines from output of aliases [SME: 4913] +- Remove the leading path for yum in newrpms [SME: 5566] +- Revert changes made in [SME: 5416] +- Sort the output of the repositories audittool alphabetically [SME: 5416] + +smeserver-clamav +- Setup logrotate for /var/log/clamd/clamscan.log [SME: 5287] +- Remove create option from logrotate configuration [SME: 5287] +- Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5287] +- Minor changelog fixes in version number +- Fix permissions on freshclam.conf file [SME: 5320] +- Add HeuristicScanPrecedence option, default disabled [SME: 4598] +- Obsolete e-smith-antivirus [SME: 4786] + +smeserver-locale +- apply locale 2009-10-27 patch +- Add Thai language [SME: 5466] +- Add Polish language [SME: 5436] +- Add Romanian language [SME: 5268] +- Add Estonian language [SME: 5199] +- Add Chineese (China) language [SME: 5002] +- Add Norwegian (Bokmal) language [SME: 5002] +- Add Russian language [SME: 5002] + +smeserver-qpsmtpd +- Tie the template fragment into the event system to have it expand [SME: 5567] +- Add qpsmtpd template fragment for custom SPAM subject prefix [SME: 5567] +- Add hooks cleanout back in in so auth works. +- Add compatibility with qpsmtpd 0.83 [SME: 5543] +- Add tls to base config [SME: 1076] + +smeserver-spamassassin +- Fix invalid service name in sa-update [SME: 3304] + +smeserver-support +- Add support for Polish (pl). [SME: 5433] +- Add support for Thai (th). [SME: 5466] +- Add support for Romanian (ro). [SME: 5268] +- Obsoletes: rkhunter to remove from default install [SME: 5172] +- Add support for Estonian (et). [SME: 5203] +- Add support for Norwegian Bokmal (nb) [SME: 5002 ] +- Add support for Russian (ru) [SME: 5002] +- Add support for Chinese China (zh_CN) [SME: 5002] + +smeserver-yum +- only unlink file if we created it [SME: 4169] +- set unsaved changes in yum event [SME: 2081] +- move yum warming to sme yum plugin [SME: 5472] +- ensure file exists before unlinking [SME: 4169] +- remove semicolons from yum plugin +- Add frequency of updates toggle [SME: 5473] +- remove stray file +- Add /etc/yum.smerepos.d to package [SME: 5306] +- Change SME mirrorlists to point to ibiblio [SME: 5242] +- Require mailx [SME: 5131] +- Add yum-protect-packages support to prevent removal of +needed pacakges [SME: 3133] -There are a few differences from previous releases <=7.2 -======================================================== +turba-h3 +- Updated to Turba 2.3.3 [SME: 5723] -After installing for the very first time: ------------------------------------------ -- First night you may receive an email from cron about sa_updates. -- First night you should receive a large email saying a bunch of - groups/users were removed/added (rkhunter email notification). -- Any time you change users/groups you will receive an email the next day - about those changes (rkhunter email notification). -$Id: README.txt,v 1.27 2008/11/17 23:15:15 slords Exp $ +$Id: README.txt,v 1.3 2010/02/28 10:02:23 wellsi Exp $