/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.1 by slords, Mon Mar 11 18:03:04 2013 UTC Revision 1.9 by wellsi, Mon Apr 7 16:24:22 2014 UTC
# Line 1  Line 1 
1  SME Server 8.0 Release Notes  SME Server 9.0 Beta 4 Release Notes
2  ============================  ===================================
3    
4  21 May 2012  10th April 2014
5    
6  The SME Server development team is pleased to announce the release of  The SME Server development team is pleased to announce the release of
7  SME Server 8.0 which is based on CentOS 5.8  SME Server 9.0 Beta 4 which is based on CentOS 6.5
8    
9  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
10  tracker (and only there, please);  tracker (and only there, please);
# Line 15  About SME Server Line 15  About SME Server
15  ================  ================
16    
17  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
18  enterprises.  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
19    a non-profit corporation that exists to provide marketing and legal support
20    for SME Server.
21    
22  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
23  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
24  However, the availability and quality of SME Server is dependent on  However, the availability and quality of SME Server is dependent on
25  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
26    
27  As such, we ask for a small donation to offset costs and fund further  As such, we ask for a donation to offset costs and fund further development.
28    a) If you are a school, a church, a non-profit organisation or an individual
29    using SME Server for private purposes, we would appreciate you to contribute
30    within your means toward the costs associated with hosting, maintenance and
31  development.  development.
32    b) If you are a company or an integrator and you are deploying SME Server in
33    the course of your work to generate revenue, we expect you to make a donation
34    commensurate with the level of revenue you generate and the number of servers
35    your have in the field. Please, help the project
36    
37  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
38    
39    Koozali Inc is happy to supply an invoice for any donations received,
40    simply email treasurer@koozali.org
41    
42    
43  Thanks  Thanks
44  ======  ======
45    
# Line 36  themselves with this release. Line 49  themselves with this release.
49  Notes  Notes
50  =====  =====
51    
52  1. CentOS 5 has dropped support for i586 and therefore SME Server 8  This section will be updated in a following ISO
    will not work on i586 hardware. [See bugzilla:2845]. i586 hardware  
    means processors before and including Intel Pentium, Pentium MMX;  
    AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors  
    are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,  
    Athlon XP and later.  
   
 2. Some notes on SME 8 including help on upgrades can be found at  
    http://wiki.contribs.org/SME_Server_8  
   
 3. Please note it may take up to 48 hours for mirrors to finish syncing,  
    during this time you may experience problems.  
    You can download SME8.0 from  
    http://mirror.contribs.org/smeserver/releases/8/iso/i386/  
    or for other methods see http://wiki.contribs.org/SME_Server_8  
   
 Major changes since beta 7  
 ==========================  
 * No major changes were introduced since beta 7  
53    
 Major changes in beta 7  
 =======================  
 * Require authentication for all emails, including local.  
 * Optional - to use ext4 instead of ext3 for file systems  
   (except for /boot). At the boot prompt use "ext4" or "sme ext4".  
   *** ext4 is considered experimental, so use with caution ***  
 * Optional - LDAP authentication can be enabled. Once enabled it cannot  
   be disabled, so experiment with care.  
   To enable: db configuration setprop ldap Authentication enabled  
54    
55  Major changes in beta 5  Major changes in this release
56  =======================  =============================
 The policy is to stick with upstream updates unless there are compelling  
 reasons not to. The number of customers unable to run the software they  
 want because of the PHP version constituted a compelling reason.  
57    
58  PHP 5.2.10: is provided by the Red Hat Application Stack v2.  The installer has been substantially modified in Beta 3.
59  5.2 is needed by recent web applications such as OScommerce.  The remaining relevant patches from SME Server 8 have been ported.
60    Note: The spare handling for RAID arrays is not implemented.
61    Workstation Backup has had many minor changes, see below for details.
62    
63    A new feature has been introduced to block SSH login attempts,
64    http://wiki.contribs.org/AutoBlock
65    It is set by default to reject SSH connections when there have been 3
66    or more requests in the previous 15 minutes.
67    See the link above to tune the defaults, or to disable:
68    db configuration setprop sshd AutoBlock enabled
69    signal-event remoteaccess-update
70    
71    The installer has been substantially modified in Beta 2.
72    It now creates the degraded RAID1 array with a single disk install.
73    Some, but not all,  install options are now supported.
74    
75    The base has been updated to CentOS 6.5
76    
77    The network interface code has been reworked to remove all hardcoding
78    relating to eth0 and eth1.
79    
80  Changes in this release  Changes in this release
81  =======================  =======================
82    
83  This section of this README file lists all package changes carried out  This section will be further updated in a later release
84  by SME-associated developers since 2009 where the most recent changes  Currently this only shows changes since SME Server 9.0 Alpha 3 and it is
85  to the package are dated after February 2010. The package changelogs  autogenerated from the changelogs. A more human readable version will be
86  often included earlier changes and changes carried out by non-SME-  written.
87  associated developers; these were removed to shorten the list. Packages  
88  recently altered by Centos, Redhat, and Fedora-associated developers are  
89    Packages altered by Centos, Redhat, and Fedora-associated developers are
90  not included.  not included.
91    
92    
93  Backups  Backups
94  -------  -------
95  - Provide support for Selective Restore with modern browsers  
96  - Remove default index.htm from Primary ibay before restore  - Workstation Backup, do not exclude dar files by default
97  - Allow backup reports to go to an alternate user instead of admin    in line with console backup.
98    for Workstation Backups  - Workstation Backup, fix selective restore by requesting array
99  - Improve how Backup to Workstation handles full remote disks.    of results from CGI.pm.
100  - Do not make backup fail when due to a modified file.  - Workstation Backup, new method to show files being restored is needed
101  - Localise the choices for 'Select the type of share for backup    when using dar 2.4.
102    destination' in the Configure Workstation Backup panel.  - Simplify the workstation backup report.
103  - Improve the wording of the 'Backup or restore' server-manager panel.  - Workstation Backup, count backup sets from 1.
104    Replace term "USB disk" with "removable disk" as this is not  - Update the text in the Backup panel.
105    restricted to only USB disks.  - Allow more time for cifs mounts before reporting errors.
106  - Improve wording of workstation backup email regarding the set number.  - Dar updated to 2.4.10.
107  - Do not modify the workstation backup location 'SmbShare' during  - Workstation Backup, add a choice to delete old backup before or after
108    software update.    backup.
109  - Include disk usage in Workstation Backup email.  - Workstation Backup, remove temporary directory on success.
110  - A new database property, OpenFilesLimit, allows customisation of  - Refactor directory tree creation and removal.
111    open_files_limit option in my.cnf. This can allow backups to succeed  - Workstation Backup, inconsistent formatting of host share name in messages.
112    if a MySQL database has a very large number of tables.  - Workstation Backup, more reliable catalog creation.
113  - Restoring from a Workstation Backup showed a false failure.  - Workstation Backup, report cifs mount errors.
114  - Workstation Backup emails include a To: header.  - Workstation Backup, do not access /proc/mounts
115  - Workstation Backup includes the system name and also indicates failure  - Incremental backup fix.
116    if applicable in the subject line of the email.  - Workstation Backup, allow spaces in the backup destination.
117  - Update backup instructions in server-manager.    Includes fix for disk usage broken with spaces.
118  - The Workstation Backup panel now removes leading and trailing spaces  - Desktop Backup, allow user setting of compression level.
119    from the hostname.  - Use Wake on LAN before starting Backup with DAR.
120  - Fix removal of leading slash in storage location.  - NFS syntax is deprecated for CIFS mount.
121  - The Workstation backup to USB panel no longer presents mounted disks.  - Require cifs-utils and use UNC paths for cifs mount.
122  - Only define Workstation Backup temporary directory once.  - Improve text in console backup for success and failure.
123  - Remove relocate_samba_file and all references to /etc/smbpasswd.  - Console USB Backup, allow user setting of compression level.
124  - Improved upgrade compatibility, remove .orig    Compression level of the console backup is now -6 by default.
125  - create mount point for verify  - Patch to exclude trying to backup aquota.* files so that backups to tape
126  - remove comment re smbpasswd being last    will succeed.
127  - Fix mounting usb disks  - Update to the latest version of console restore.
128  - Don't backup more than once per day  - Boostrap console should only offer restore if no password set.
129  - Fix full backup on Sunday diplayed as Everyday  - Delete items from dar catalog in descending order
130  - Add more excludes for compressed filetypes  - Minor non-functional updates based on PerlCritic and review comments
131  - Porting Jean-Paul Leclere changes in the SME Server 7 tree to SME  - Move console backup to e-smith-backup
132    Server 8:  - Workstation Backup, selective restore of deleted files
133  - using credentials file for cifs mount  - Remove migrate fragment 30vfstype
134  - workstation backup: add cifs credentials expand to  - Workstation Backup, Don't delete old sets, only empty them.
135    bootstrap-console-save  - Workstation Backup, Mail and WOL now subroutines
136  - workstation backup: allow many backups in the same day  - Workstation Backup, remove the need for a temporary directory, updated.
137  - workstation restore: all needed backups must be available before  - Workstation Backup, backupname includes seconds.
138    restore  - Simplification of the time routines.
139  - workstation verify: add option to check integrity of backups needed in  - Workstation Backup, remove the need for a temporary directory.
140    a full restore  - Allow configuration of workstation backup if no removable disk present
141  - Fix DAR e-mail message with regards to incremental backups  - Create simplified function for updating the DarCatalog
142  - Fix discrepancy in maximum compression level  
 - Fix console backup from removable media  
 - Fix console restore from removable media (Federico Simoncelli)  
 - Auto-mount USB REV70-drive as usbdisk  
143    
144  File Server  File Server
145  -----------  -----------
146  - Gracefully handle upgrades from SerNet Samba (SME7 TO SME8 VITH YUM)  - Also remove the empty template-begin file in pam.d/proftpd templates.
147  - Change separator character in general Samba configuration file.  - Remove unused pam templates.
148  - Changes in Samba's "Recycle VFS exclude" syntax (for ibays).  - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.
149  - Use samba3x package for windows 7 compatibility.  - Add template for wide links.
150  - Remove require strong key part of regedit file.  - Add templates for max protocol.
151  - Backup all the samba tdb files.  - Add support for Windows 8 domain joining & user login.
152  - Add dependency /usr/bin/tdbbackup.  - Add windows network performance enhancements registry file.
153  - Create/remove V2 profile directories  - Update default ServerName in 30smbServerName
154  - Enable bindinterfaces by default  - Add ability to configure waiting for network Win7 registry option.
155  - Set recyle bin permissions  - Change default Workgroup and Domain to sme-server.
156  - Add registry file to server-resources to allow windows 7 to join Samba  - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint
157    3.x domains    authentication.
158  - Fix warnings in template expansion  - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.
159  - Fix migrate fragments for samba  - Remove 20smb as migrating from pre-SME7 is not supported
160    
161  LDAP (Optional in SME 8, and considered experimental)  LDAP (Optional in SME 9.0, and considered experimental)
162  ----  ----
163  - Create samba account during event for machine  - Adjust slapd ACL to change dn.subtree to dn.children.
 - Keep uid/gid for computer accounts in synch for Unix/Samba/LDAP  
 - Fixed syntax error in create-machine-account  
 - Fix samba-group-mapping for users without group membership  
 - Fix cpu critical patch missing '  
 - LDAP admin password needs to be loaded in secrets.tdb  
 - Change authentication from passwd/shadow files to the pam database  
 - Turba searches on LDAP address book fixed  
 - Properly handle account with accents in first- or lastname with  
   regards to LDAP  
 - Fix create user gid parameter  
 - Path for gpasswd command fixed in "init-accounts" script  
 - All ibay account commands as system accounts in LDAP  
 - Create ibay accounts as system accounts in LDAP  
 - Use cpu commands to manage Ibays accounts if ldap is master  
 - Make cpu calls critical only with ldap{Auth} is enabled  
 - Check slapd.conf syntax before trying to dump the database  
 - Simplify ldap-update call by calling ldif-fix  
 - Change script order: ldap-update should be called after  
   domain-group-maps  
 - LDAP ou field is taken from Dept not Department  
 - LDAP changes: Add rfc2739.schema back in and include in config  
 - Use ldapmodify to load ldif, add -a if no changetype  
 - Remove bogus junk attribute from ldif templates  
 - Change startup order for ldap  
 - ldap should store locked passwords for expired passwords  
 - Add ldap as an auth type to radius  
 - Radius should use LDAP backend (if LDAP auth is enabled)  
 - Fix ldap-create errors when adding empty groups.  
 - The LDAP information for admin was not being updated.  
 - Don't try to save ibay password to LDAP.  
 - Fix admin user password change (Daniel B.)  
 - Init database if the ldif dump is empty (ie from sme8b)  
 - revert re-init database  
 - re-init readonly database on post-upgrade  
 - Force SSL/TLS for remote authentication  
 - reuse users_groups_ous.patch2  
 - Separate groups and users with mailboxRelatedObject  
 - Set readonly access  
 - Fix ldap-update action script to user-lock event  
 - Add Groups entries  
 - Add admin user as a standard user  
 - Add ldap-update action script to user-lock event  
 - Add ldap authentication and tls support  
 - Update schema for newer openldap and remove calFBurl  
 - Convert ldif dump  
 - Create bdb log directory  
 - Change ldap backend to bdb, and fix initialisation problem  
164    
165  Localisation  Localisation
166  ------------  ------------
167  - Other fixes include updated translations for the existing languages.  - Latest translations included.
 - Add Chinese (Taiwan) language (zh_TW).  
 - Add Hebrew language (he).  
 - Fix translation of local nic string in console.  
 - Add Thai language  
 - Add Polish language  
 - Add Romanian language  
 - Add Estonian language  
168    
169  Mail Server  Mail Server
170  -----------  -----------
171  - Provide option to force the smtp proxy not to use CRAM-MD5  - Only present one auth method at a time, in order, to NET::SMTP.
172       config setprop smtp-auth-proxy PeerPort <port nr>  - Remove limit properties from the imaps DB entry.
173       config setprop smtp-auth-proxy MD5Patch enabled  - Apply process limits to dovecot.
174  - Fix mail to domain pseudonyms pointing to group with dot in name  - Include /usr/bin/refreshclam
175  - Fix Mail Log File Analysis reports  - Allow webmail-only-local-network.
176  - Set SO_KEEPALIVE option on client socket to detect dead connections  - Fix handling of messages with no body and no trailing \n after
177  - Add template fragment for pyzor timeout    headers (eq was used in attempted assignment).
178  - Remove spamd restart from bootstrap-console-save event  - Fetchmail multidrop mode follows TCPPort setting.
179  - Require SMTP authentication by default when sending to an external  - Always enable imap, listen on loopback is disabled.
180    address.  - Avoid use of unitialised variables in smtp migrate fragments.
181  - Fix TLS security defaults, TLS Ciphers for qpsmtpd can be configured.  - Simplify qmail concurrency templates.
182  - Change enabled to transparent for mail proxy.  - Modify domain style pseudonym pointing to user with dot in name.
183  - Enable authentication for smtp traffic and migrate if necessary.  - Accept messages with no body and no trailing \n after headers.
184  - Fix pseudonym modification for "local network only" accounts.  - Fix Net::DNS update breaks qpsmtpd.
185  - Add smtp auth into web interface, not just when enabled.  - allows the spamassassin plugin to read the size limit from its
186  - Fix require_resolvable_fromhost doesn't work    arguments
187  - Fix qpsmtpd plugin fatal errors when incoming mail message has no  - Move clamscan scheduling to complete before 99-raid-check.
188    headers.  - Listen on loopback if disabled.
189  - Serialize configure_peers to prevent errors.  - Fix permissions on imapd.pem as it's used by pop3s.
190  - Fix SMTP proxy wording in server-manager.  - Do not obsolete bglibs, it's required for cvm.
191  - Fix SMTP auth wording in server-manager.  - Allow plaintext (unless explicitly disabled).
192  - New feature: Allow for individual configuration for the number of  - Do not obsolete cvm, it's still needed for qpsmtpd.
193    mail logfiles.  - Fix size_limit initialization.
194  - Disable by default the SMTP transparent proxy, however upgrades from  - reads MaxMessageSize prop of spamassassin and adds it
195    sme7 will retain old default behavior where SMTP connections will be    to the arguments of the plugin if defined.
196    transparently proxied.  - Requires e-smith-cvm-unix-local.
197  - Implement a database key (TlsBeforeAuth) to allow SMTP  - Load TextCat plugin if ok_languages is enabled.
198    Authentication without TLS. The default remains to require TLS before  - Fix how qpsmtpd tags spam email.
199    Auth (introduced in SME 8Beta5).  - Remove Packager and Vendor from spec file.
200  - Update qpsmtpd to 0.84  - Revert last change.
201  - Config setting to enable SMTP to ISP Authentication Debug now uses  - Sources are local, do not download them.
202    enabled/disabled for clarity.  - Updates to release 0.98.1
203  - Fix HeloHost patch.  - Handle exceptions during attempted SASL auth. Add more debug tracing.
204  - Remove cron.daily jobs that are no longer needed.  - Remove DENYSOFT on SPF softfail
205  - Update email addresses on domain change.  - Remove insecure ciphers
206  - Work around how qpsmtpd tags spam email.  - Remove workarounds for how qpsmtpd tags spam email
207  - Use HeloHost (if present) in smtp-auth-proxy.pl  - Fix whitespace in 10required_score
 - Allow for changing SPAM subject tag through server-manager  
 - Move creation of chrooted dev/urandom to spec-file  
 - Create chroot dev/urandom for stunnel to use  
 - Updated spec file to require php-pear(HTTP_Request)  
 - SMTPSmartHost template incorrectly uses brackets to avoid MX lookups  
 - smtproutes template incorrectly uses brackets to avoid MX lookups  
 - Remove qmail-workaround and obsolete it after patch to treat 0.0.0.0  
   as a local ip  
 - Remove spool and log dir from package (in smeserver-qpsmtpd)  
 - Don't create smtpd user (unused in sme)  
 - Apply qpsmtpd git changesets to implement custom SPAM subject prefix  
 - Update pre requires so scripts don't fail on install  
 - Rebase bad_rcptto patch to remove orig file  
 - Change logging in tls init to prevent warnings  
 - Only run/initialize plugins once  
 - Change spool dir permissions and owner to qpsmtpd:clamav  
 - Change log dir permissions and owner to smelog:smelog  
 - don't add qpsmtpd to start-up by default  
 - add apache config file to qpsmtpd-apache package  
 - use rpm macros for dirs  
 - use a filelist for main package instead of a long list of files  
 - Setup logrotate for /var/log/clamd/clamscan.log  
 - Remove create option from logrotate configuration  
 - Setup logrotate for /var/log/clamd/smeserver-clamscan.log  
 - Fix permissions on freshclam.conf file  
 - Add HeuristicScanPrecedence option, default to yes  
 - Obsolete e-smith-antivirus  
 - Enable qpsmtpd RequireResolvableFromHost plugin by default, remove  
   database entry and the database default value  
 - Tie template fragment into event system to have it expanded  
 - Add qpsmtpd template fragment for custom SPAM subject prefix  
 - Remove FuzzyOcr  
 - Run sa-update every two hours and check restart every hour  
 - Redirect cron job output to logfile to avoid mail noise  
 - Fix invalid service name in sa-update  
208    
209  Server manager  Server manager
210  --------------  --------------
211  - Enhance IP address syntax checking in remote access panel.  - Renew donation text in server-manager.
212  - Improve the HTML formatting of the modify quota panel.  - Do not load mod_ssl.
213  - Remove empty <p> tag from footer template.  - Remove log noise from Create starter web site panel.
214  - Only display error messages intended for admin in server-manager  - Add security fix for CVE-2013-4113.
215  - Fix css validation errors.  - Renew donation text and graphic in server-manager.
216  - display reconfigure warning once if UnsavedChanges=yes  - Update footer copyright and renew full copyright text.
217  - Fix unitialized value errors in HTML.pm  - Change wording of Software Update button.
218    - Roll new stream to remove obsolete images
219    - Remove references to obsolete images, by Stephane de Labrusse
220    - Fix new starter website.
221    - Update location of Primary index.html.
222    
223  Webmail and Groupware  Webmail and Groupware
224  ---------------------  ---------------------
225  - Update to Horde 3.3.11, imp 4.3.9, Ingo 1.2.5 & Turba 2.3.5  - Allow webmail-only-local-network.
226  - Add option to verify from address in webmail if setting up additional  - Don't use SSL over loopback.
227    identities.  - Replace last change with a default value for horde access
228  - Add the ability to have a local LDAP Group Address book.  - Ensure initialisation of variables in webmail-only-local-network.
 - Templated attributes.php to add ability to have multiple email  
   values for a contact. Separate entries with a comma and a space.  
 - Update to freebusy info in sources.php  
 - Update to remove turbaContact info that SME is not using.  
 - Change horde's templated mime_drivers.php file so some additional  
   settings can be customized  
 - Make sure username is always saved in lowercase to horde db's  
 - Updated spec file to remove requires and obsoletes of  
   php-pear-HTTP-Request information moved to e-smith-imp for both sme7  
   and sme8  
 - Update to Spec file to obsolete smeserver-trean < 0.1-8  
 - Patch to conf.php template to set a blank cookie domain so that FQDN  
   and non-FQDN access to webmail will work.  
 - Remove klutz template from registry.php  
 - Template imp's mime_drivers.php file so some settings can be  
   customized  
229    
230  Web Server  Web Server
231  ----------  ----------
232  - Enable automatic redirection for /server-resources  - Force magic_quotes Off.
233  - Disable SSLv2 by default.  - Remove insecure ciphers
 - make user 'apache' an alias for user 'www'.  
 - Default expose_php in php.ini to Off.  
 - Add option to disable SSLv2  
 - Add OpenOffice2 MIME Types  
 - Add OpenOffice MIME Types  
 - Add XML MIME Type  
 - Add Microsoft Office 2007 MIME types  
234    
235  Other fixes and updates  Other fixes and updates
236  -----------------------  -----------------------
237  - Add MAC address into console network selection  - Add ssh-autoblock for external interface.
238  - Fix non-translated locale in ibays panel  - Do not hardcode NIC names to eth0 and eth1.
239  - Improve error message for quota  - Return nic names in probeAdapters so we can drop HWAddress.
240  - Obsolete smeserver-php5-cgi & php-mcrypt  - Remove HWAddress prop from interfaces.
241  - Initialize ExternalInterface db structure so hwaddr in console works.  - Remove the "swap interface" feature.
242  - Option to select ext4 instead of ext3 for filesystems at boot prompt.  - Remove obsolete VLAN code.
243  - Enable quotas on ext4 filesystems as well.  - Load the bonding module if NIC bonding is enabled.
244  - Only allow backup to (removable) storage media that are not read only.  - Define the udev-post service in the DB.
245  - Improve error handling when trying to install without NIC.  - Provide the ability to restrict ibay access to http.
246  - Only remove dangling symlinks in weak-updates directories.  - Restart rsyslog in logrotate event.
247  - Fix template-expansion for dhclient.conf.  - Set smb ServerName if unset.
248  - Improve validation (error) message for remote access setup.  - Don't reload init in bootstrap-console-save and console-save.
249  - Change text in hostname and addresses panel for remote host (add  - Fix add_new_disk_to_raid1.
250    FQDN).  - Provide the ability to force https per ibay.
251  - Fix hostname editing for comments with double speechmarks  - Add an audit for groups.
252  - Trap croak inside Net::IPv4Addr::ipv4_in_network to allow a FQDN to be  - Update the full names of users added in %pre.
253    inserted in hostnames and addresses panel in lieu of an IP address.  - Fix uid and gid to be the same for the users added in %pre.
254  - Add validator back for ip or cname entry.  - Changed Prereq to Requires(pre) as Prereq is deprecated.
255  - Correctly strip numbers from sql scripts  - Patch to correct issue with not being able to access a password protected
256  - Enable speedier time synchronisation for suspended VMs, this can be    ibay.
257    configured by a new db key for ntpd, SupportLargeDrift.  - Update ServerName (Samba netbios name) when SystemName is updated.
258  - Set the TimeZone property earlier, so templates can rely on it.  - Remove old System Name from the Hosts DB.
259  - Obsolete KeepAlive and replace by ClientAliveInterval and  - Fix group creation when LDAP auth is enabled.
260    ClientAliveCountMax to prevent SSH sessions from being timed out by  - Disable IPv6 on a default install.
261    network inactivity.  - Continue escaping control chars in rsyslog, just replace LF with space.
262  - New feature: Default Cipher to blowfish for ssh configuration.  - Use UTF-8 in the console.
263  - Add directive "PersistentPasswd off" to proftpd configuration.  - Remove redundant parts of init-accounts.
264  - Quota panel should allow non-integers but only accept uppercase units.  - Add_template_to_ssl.pem, codes by JP Pialasse.
265  - Obsolete magic_quotes_gpc settings.  - Require diald.
266  - Set default timezone for php version 5.3.3.  - Removal of rc.e-smith now functionality is in e-smith-service.
267  - Handle no network interface scenario in console.  - Replacement of rc.e-smith by moving code into e-smith-service.
268  - Do not allow pool.ntp.org as NTP server.  - Fix the way '.' works in bash.
269  - Prepare for obsoletion of magic_quotes* when we supply PHP 5.3.0+  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).
270  - Fix missing space causing errors parsing the iptables rules.  - Always define InternalInterface NICBonding.
271  - Migrate MirrorList properties to sme8 repos.  - In the console refer to removable media instead of USB disk.
272  - Remove BaseURL properties if migrating to sme8 repos.  - Fix a few more syslog => rsyslog items.
273  - Remove yum databases and repodata if migrating to sme8 repos.  - Remove modprobe stuff.
274  - Enable cpuspeed by default.  - Don't be as agressive on rate limiting.
275  - Fix scriplet error in e-smith-service script when service is disabled.  - Change syslog templates to rsyslog.
276  - Allow use of CNAME in remote hosts.  - Ensure existing_hwaddr is always initialized.
277  - Add Obsoletes for php5-cgi-{imap,ldap,mysql,pear,xmlrpc}.  - Change System Name from mitel-networks-server to sme-server.
278  - Restate smartd dependency.  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.
279  - Fix gettext errors in WAN/LAN subnet error message  - Patch to correct issue with not being able to access a password protected
280  - Improve security by using SHA1 algorithm for certificate signing    ibay.
281  - Fix eth? swapping  - Correctly display accented letters in the console.
282  - Bump certificate encryption from 1024 bits to 2048 bits  - Add e-smith as a Requires(pre) and remove adding users in %pre.
283  - Add a dummy call so xgettext can pull translated $ifName in console  - Fix uid and gid to be the same in create-system-user.
284    configuration pages.  - Ignore mysql.event table.
285  - Translate $ifName in console configuration pages  - Use --single-transaction in mysql-dump-tables.
286  - Prevent IP conflicts between local and external interface in server  - Use mysql_upgrade instead of fix_privilege_tables.
287    gateway mode  - Increase memory limit for ntp.
288  - Clean up: remove unused nonetworkdrivers  - Make rsyslog listen to our socket.
289  - Clean up stray symlinks in /lib/modules before depmod  - Remove rc.quota_create.
290  - Allow for different mdadm output formats for DeviceSize  - the config file is radiusclient.conf, not radiusclient-ng.conf.
291  - Add compiled python files to the packaged files list  - Add templates for radiusclient-ng.conf file to remove binaddr
292  - Update path for 64-bit compatibility    directive.
293  - Remove hiddenmenu entry from grub.conf  - Add directive to options.pptpd so that radius plugin can find the
294  - adds the hwaddr parameter to probeAdapters()    radiusclient configuration file..
295  - Update path for 64-bit compatibility  - Fix permissions of /etc/radiusclient-ng/servers.
296  - Add patch (Federico Simoncelli) to prevent re-use of uids  - Add hack for running rc7.d script during runlevel 4.
297  - Fix log-error detection algorithm  - Apply SME Server config file changes to pwauth.
298  - Fix another instance of ups model for new version of nut  - Fix libgomp obsoletes to not obsolete el6 version.
299  - Template sshd login grace time, kept default at 600s  - Change order of mail options in check4updates.
300  - Enable port forwards to localhost if mode is serveronly  - Fix parsing issues with "manage RAID" menu option in the console.
301  - Adjust xml entry in locale  - Remove SSH v1 legacy support.
302  - Add option to limit port forwards from source ip  - Support nolvm boot option.
303  - Remove unnecessary Mount Proc line  - Create degraded RAID1 array with single disk install.
304  - Fix owner/perms for radius files  - nodmraid is the default for SME 9.0 installs.
305  - Fix typo in /sbin/service patch (Federico Simoncelli)  - Give more time to the grub menu.
306  - Exit with zero exit status for services not listed in configuration  - Update installer hard drive warning.
307    database to avoid failures in post scriptlets  - Customize confirmation dialogs during fresh install.
308  - Merge in SME Server /sbin/e-smith/service wrapper so that only  - Run installer in 'text' mode.
309    initscripts which exist in run-level 7 can be run. This ensures that  - Roll new stream to really remove obsolete images
310    the supervised service is run, if one exists, and protects against  - Roll new stream to remove obsolete images
311    running "service httpd restart"  - Move console backup to e-smith-backup
312  - Add requires on e-smith-lib so www user is created first  - Remove support.pl from e-smith-base and move to smeserver-support
313  - Fix regular expression to actually replace the colon with a dot  - Console restore should reboot
314  - Remove the leading path for yum in newrpms  - Boostrap console should only offer restore if no password set
315  - only unlink file if we created it  - Add restore backup as a console item for freshly installed servers
316  - Import only keys not already imported  - Non-code changes to perform_restore.pm
317  - set unsaved changes in yum event  - Refer to removable media not CDROM in console restore
318  - move yum warming to sme yum plugin  - Remove insecure SSL ciphers
319  - ensure file exists before unlinking  - Add more PHP options to ibays only by db commands
320  - remove semicolons from yum plugin  - Add SSLRequireSSL to ibays when SSL is set to enabled
321  - Add frequency of updates toggle  - Force https per ibay should not be the default for existing ibays
322  - Add /etc/yum.smerepos.d to package  - Add textbox() to console.pm, getLicenseFile to util.pm
323  - Change SME mirrorlists to point to ibiblio  - Update frame header and footer
324  - Require mailx  - Use mysql_upgrade in 00_restore_dumped_dbs, by Terje Edseth
325  - Add yum-protect-packages support to prevent removal of needed pacakges  - Use mysql_upgrade --force due to upgrade to MySQL 5.1
326    - Prevent server being used in NTP amplification attacks.
327    - Code by Jesper Holck
328    - Modify template to allow Squid proxy https access to ports other than
329      443,563 using db command
330    - Codes by Ray Mitchell and Ian Wells
331    - Add -n 1 to the dmesg line in rc.sysinit to prevent unwanted messages
332      appearing on the console
333    - Correct offest in runlevel7 patch to avoid .orig file
334    - Remove CentOS Branding patch
335    - Add logcheck to help analyse errors in the log files
336    - Roll new stream to remove obsolete images
337    - Move support.pl from e-smith-base to smeserver-support
338    - The console license page now uses dialog's textbox.
339    - Ensure console is run with taint checking.
340    
341  General features  General features
342  ================  ================
343    
344  - Based on CentOS 5.8 and all available updates  - Based on CentOS 6.5 and all available updates
   
 $Id: README.txt,v 1.15 2012/05/22 07:46:08 wellsi Exp $  
   
   
345    
346    $Id: README.txt,v 1.8 2014/03/30 04:08:35 wellsi Exp $


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed