/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.4 by wellsi, Sat Oct 12 06:31:51 2013 UTC Revision 1.24 by unnilennium, Thu Mar 16 03:38:33 2017 UTC
# Line 1  Line 1 
1  SME Server 9.0 Beta 1 Release Notes  Koozali SME Server 9.2 RC1 Release Notes
2  ===================================  ===========================================
3    
4  14 October 2013  15 March 2017
5    
6  The SME Server development team is pleased to announce the release of  The Koozali SME Server (SME Server) development team is pleased to announce
7  SME Server 9.0 Beta 1 which is based on CentOS 6.4  the release of SME Server 9.2 RC1 which is based on CentOS 6.8
8    
9  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
10  tracker (and only there, please);  tracker (and only there, please);
11    
12      http://bugs.contribs.org/      http://bugs.contribs.org/
13    
14    Download
15    ========
16    
17    You can download Koozali SME Server 9.2 RC1 from
18    http://mirror.contribs.org/smeserver/releases/testing/9.2.rc1/
19    or for other methods see http://wiki.contribs.org/SME_Server:Download
20    
21    Please note it may take up to 48 hours for mirrors to finish syncing,
22    during this time you may experience problems.
23    
24  About SME Server  About SME Server
25  ================  ================
26    
27  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
28  enterprises.  enterprises. Loozali SME Server is brought to you by Koozali Foundation, Inc.,
29    a non-profit corporation that exists to provide marketing and legal support
30    for SME Server.
31    
32  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
33  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
# Line 23  However, the availability and quality of Line 35  However, the availability and quality of
35  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
36    
37  As such, we ask for a donation to offset costs and fund further development.  As such, we ask for a donation to offset costs and fund further development.
38    
39  a) If you are a school, a church, a non-profit organisation or an individual  a) If you are a school, a church, a non-profit organisation or an individual
40  using SME Server for private purposes, we would appreciate you to contribute  using SME Server for private purposes, we would appreciate you to contribute
41  within your means toward the costs associated with hosting, maintenance and  within your means toward the costs associated with hosting, maintenance and
42  development.  development.
43    
44  b) If you are a company or an integrator and you are deploying SME Server in  b) If you are a company or an integrator and you are deploying SME Server in
45  the course of your work to generate revenue, we expect you to make a donation  the course of your work to generate revenue, we expect you to make a donation
46  commensurate with the level of revenue you generate and the number of servers  commensurate with the level of revenue you generate and the number of servers
# Line 34  your have in the field. Please, help the Line 48  your have in the field. Please, help the
48    
49  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
50    
51  Thanks  Koozali Inc is happy to supply an invoice for any donations received,
52  ======  simply email treasurer@koozali.org
53    
 The development team would like to thank all of those who have involved  
 themselves with this release.  
54    
55  Notes  Notes
56  =====  =====
57    
58  This section will be updated for SME Server 9.0 Beta 2  In-place upgrades are not supported. It is necessary to backup and then restore.
59    /boot partition is always RAID 1.
60    
61    The spare handling for RAID arrays is not implemented.
62    
63    USB installs are now supported, see:
64    http://wiki.contribs.org/Install_From_USB#SME_Server_9
65    
66    
67  Major changes in this release  Major changes in this release
68  =============================  =============================
69    
70  This section will be updated for SME Server 9.0 Beta 2  Major Changes in this release. Updated all to Koozali branding. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. File Server - added W10 support to SME Domain. LDAP - Hook into the new ssl-update event. Mail Server - Update qpsmtpd to release 0.99.2 (including multiple plugins and ability to ebale/disable same), Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg.
71    
72    
73  Changes in this release  Detailed changes in this release
74  =======================  =======================
75    
76  This section will be updated for SME Server 9.0 Beta 2  Only the changes since SME Server 9.1 are listed, mainly autogenerated from the changelogs.
77  Currently this only shows changes since SME Server 9.0 Alpha 3 and it is  
78  autogenerated from the changelogs. A more human readable version will be  Packages altered by Centos, Redhat, and Fedora-associated developers are not included.
79  written for SME Server 9.0 Beta 2.  
80    Text With Bug Numbers
81    Text for ISO Release Notes with Bug Numbers
82  Packages altered by Centos, Redhat, and Fedora-associated developers are  The changelogs are written per package, and each package is assigned a group.
 not included.  
   
   
 Backups  
 -------  
 - Dar updated to 2.4.10  
 - Workstation Backup, add a choice to delete old backup before or after  
   backup.  
 - Workstation Backup, remove temporary directory on success.  
 - Refactor directory tree creation and removal.  
 - Workstation Backup, inconsistent formatting of host share name in messages.  
 - Workstation Backup, more reliable catalog creation.  
 - Workstation Backup, report cifs mount errors.  
 - Workstation Backup, do not access /proc/mounts  
 - Incremental backup fix.  
 - Workstation Backup, allow spaces in the backup destination.  
   Includes fix for disk usage broken with spaces.  
 - Desktop Backup, allow user setting of compression level.  
 - Use Wake on LAN before starting Backup with DAR.  
 - NFS syntax is deprecated for CIFS mount.  
 - Require cifs-utils and use UNC paths for cifs mount.  
 - Improve text in console backup for success and failure.  
 - Console USB Backup, allow user setting of compression level.  
   Compression level of the console backup is now -6 by default.  
83    
84  File Server  File Server
85  -----------  
86  - Also remove the empty template-begin file in pam.d/proftpd templates.  e-smith-samba
87  - Remove unused pam templates.  - Create V6 profile dir (for Win10 roaming profiles) [SME: 9772]
88  - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.  proftpd
89  - Add template for wide links.  - Additional tweak (to avoid null pointer dereference) for upstream bug 3868
90  - Add templates for max protocol.  - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters
91  - Add support for Windows 8 domain joining & user login.    see (http://bugs.proftpd.org/show_bug.cgi?id=4230)
92  - Add windows network performance enhancements registry file.  - Also fixed related issue where only first DH param in TLSDHParamFile is used,
93  - Update default ServerName in 30smbServerName    regardless of requested keylength (http://bugs.proftpd.org/show_bug.cgi?id=3868)
94  - Add ability to configure waiting for network Win7 registry option.  - Fix SUID/SGID directory permission setting regression introduced with fix
95  - Change default Workgroup and Domain to sme-server.    for CVE-2012-6095 (#1297264)
96  - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint  - Add support for specifying TLSv1.1 and TLSv1.2 (#1281493)
97    authentication  
98    LDAP
99  LDAP (Optional in SME 9.0, and considered experimental)  
100  ----  e-smith-ldap
101  None  - Disable SSLv3, but keep the possibility to enable it again [SME: 10113]
102    - Better default cipher suite, and honor global suite [SME: 10113]
103    - Hook into the new ssl-update event [SME: 9152]
104    
105  Localisation  Localisation
106  ------------  
107  - Latest translations included.  smeserver-locale
108    - apply locale 2017-03-03 patch from pootle [SME: 9592]
109    - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
110      by assuming the date is correct and changing the weekday.
111    
112  Mail Server  Mail Server
113  -----------  
114  - Fetchmail multidrop mode follows TCPPort setting.  clamav
115  - Always enable imap, listen on loopback is disabled.  - Update to release 0.99.2 [SME: 9489]
116  - Avoid use of unitialised variables in smtp migrate fragments.  - Add pcre-devel to BuildRequires [SME: 9151]
117  - Simplify qmail concurrency templates.  e-smith-pop3
118  - Modify domain style pseudonym pointing to user with dot in name.  - Hook into a new ssl-update event [SME: 9152]
119  - Accept messages with no body and no trailing \n after headers.  - Allow setting SSL protocols from DB (and set TLSv1 back to enabled
120  - Fix Net::DNS update breaks qpsmtpd.    on a default install) [SME: 9175]
121  - allows the spamassassin plugin to read the size limit from its  - Disable TLSv1 [SME: 9169]
122    arguments  e-smith-qmail
123  - Move clamscan scheduling to complete before 99-raid-check.  - Add possibility to exclude users or members of other groups from group
124  - Listen on loopback if disabled.    email address [SME: 9540]
125  - Fix permissions on imapd.pem as it's used by pop3s.  qmail
126  - Do not obsolete bglibs, it's required for cvm.  - Consider literal <> as null sender [SME: 9883]
127  - Allow plaintext (unless explicitly disabled).  qpsmtpd
128  - Do not obsolete cvm, it's still needed for qpsmtpd.  - Removed Message-Id validation, as it rejects MS account validation email [SME: 9773]
129  - Fix size_limit initialization.  - fix whitelist plugin to support helo with naughty rejecting at mail stage [SME: 10111]
130  - reads MaxMessageSize prop of spamassassin and adds it  - Validate domains found in uribl with Data::Validate::Domain [SME: 9499]
131    to the arguments of the plugin if defined.  - Use eval to fetch dkim policies, prevent fatal errors in case of DNS
132  - Requires e-smith-cvm-unix-local.    timeout [SME: 9504]
133  - Load TextCat plugin if ok_languages is enabled.  - Remove karma rcpt handling (buggy and doesn't make a lot of sense) [SME: 9502]
134  - Fix how qpsmtpd tags spam email.  - Check rua is defined before trying to parse it to prevent an errorif a domain has a DMARC
135      entry published with no rua [SME: 9507]
136    - Fix error when RCPT TO is not valid [SME: 8861]
137    - Fix karma logic by checking negative strikes [SME: 9502]
138    - Backport a fix for karma_tool so it can find its database [SME: 9502]
139    - Update to 0.96 (with some backports from GIT head) [SME: 8861]
140    - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default)
141      [SME: 9162]
142    - Correctly log login attempts with nulls in login name [SME: 9167]
143    - Disable TLSv1 [SME: 9162]
144    qpsmtpd-plugins
145    - remove whitelist_soft [SME: 10125]
146    smeserver-clamav
147    - Disable unofficial sigs for filesystem scans [SME: 9142]
148    smeserver-dovecot
149    - Better default cipher suite, and honor global suite [SME: 10114]
150    - Hook into the new ssl-update event [SME: 9152]
151    - Allow settings SSL protocols from DB (and set TLSv1 back to enabled on a default install)
152      [SME: 9175]
153    - Disable TLSv1 [SME: 9175]
154    smeserver-qpsmtpd
155    - updated regex for SBList in smeserver-qpsmtpd-2.4.0-change_rbl_sbl_list_separator.patch to take into
156      account list using a subdomain [SME: 10116]
157    - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, by assuming the date is correct
158      and changing the weekday.
159      Thu May 11 2005 --> Thu May 05 2005 or Wed May 11 2005 or Thu May 12 2005 or ....
160      Sun Sep 25 2010 --> Sun Sep 19 2010 or Sat Sep 25 2010 or Sun Sep 26 2010 or ....
161    - Set the default helo policy to lenient [SME: 9767]
162    - Turn SPF and DMARC rejects off by default [SME: 9654]
163    - Fix disabling DMARC reporting [SME: 9507]
164    - Remove o and r DKIM fields as they are not standard [SME: 9506]
165    - In qpsmtpd-print-dns set DKIM options after the public key so the string will still be splitted correctly [SME: 9506]
166    - Fix a syntax error in the qpsmtpd-print-dns script [SME: 9507]
167    - Remove warning about spool dir permission on startup [SME: 9511]
168    - Add missing patch for DKIM signing [SME: 9506]
169    - Add missing run time dependency on perl(DBD::SQLite) [SME: 9507]
170    - Check SPF for inbound emails [SME: 9505]
171    - Check DKIM for inbound emails [SME: 9504]
172    - Check DMARC for inbound emails (based on the previous SPF and DKIM checks) [SME: 9507]
173    - Store and send DMARC aggregate reports [SME: 9507]
174    - Support DKIM signing for outbound emails [SME: 9506]
175    - Use an additional badrcptto file list for external connections so local only pseudonymes work as expected [SME: 9503]
176    - Enable the bogus_bounce plugin [SME: 9501]
177    - Use the naughty plugin to defer rejections, leaving users an opportunity to authenticate [SME: 9500]
178    - Add support for the uribl plugin [SME: 9499]
179    - Change separator for SBList and RBLlist from : to , [SME: 9498]
180    - Switch to the clamdscan plugin [SME: 9497]
181    - Enabe the loadcheck plugin [SME: 9508]
182    - Add support for the karma plugin [SME: 9502]
183    - Work with qpsmtpd 0.96 [SME: 8861]
184    - Expand all ssl related conf in ssl-update [SME: 9152]
185    - Hook into a new ssl-update event [SME: 9152]
186    - Allow setting SSL protocols from DB [SME: 9162]
187    smeserver-spamassassin
188    - Rewrite spamd run script to add support for --allow-tell [SME: 10138]
189    - Add X-Spam-Details header (and simplify X-Spam-Status) [SME: 9509]
190    - Disable ipv6 support to prevent a warning during startup [SME: 9153]
191    
192  Server manager  Server manager
193  --------------  
194  - Renew donation text in server-manager.  e-smith-manager
195  - Do not load mod_ssl.  - reapply patch 4
196  - Remove log noise from Create starter web site panel.  - Update server-manager to Koozali branding [SME: 9678]
197  - add security fix for CVE-2013-4113.  - move fix to the right line to be effective [SME: 9920]
198    - fix bad redirection parameter that might reveal session information to remote site temporarily
199      reverting patch 4 for fast release of security fix please put it back at next release  [SME: 9920]
200    - Update server-manager to Koozali branding [SME: 9678]
201    - e-smith-manager-2.6.0-Koozali_manager.patch better syntax for removing Indexes option for the manager [SME: 9589]
202    - Remove index option for manager's resources [SME: 9589]
203    - fix 307 redirection to http when https is used [SME: 8825]
204    - update syntaxe for TKT Auth, bump 7 for typo, corrected typo in e-smith-manager-2.4.0-  dont_rewrite_to_https_from_localhost.patch code from John H. Bennett III bennettj@johnbennettservices.com [SME: 9271]
205    - Really don't redirect to http when login in/out of the server-manager [SME: 9163]
206    - Don't redirect to http when login in/out of the server-manager from localhost [SME: 9163]
207    - Allow access to the server-manager without SSL from the loopback [SME: 9163]
208    php
209    - don't set environmental variable based on user supplied Proxy request header CVE-2016-5385
210    - fix wrong warning in openssl_encrypt() for missing IV when IV is not required #1260315
211    - fix segfault's when you try and allocate an SplFixedArray with size >= 9999 #1071344
212    - segfault in php_pgsql_meta_data CVE-2015-4644 #1234434
213    - add options to enable TLS in curl #1255920
214    - fix segfault in gc_collect_cycles #1122681
215    
216  Webmail and Groupware  Webmail and Groupware
217  ---------------------  
 - Don't use SSL over loopback.  
218    
219  Web Server  Web Server
220  ----------  
221  - Force magic_quotes Off.  e-smith-apache
222    - Hook into the new ssl-update event [SME: 9152]
223    - Set TLSv1 back to enabled (but keep a prop to disable it if needed) [SME: 9154]
224    - Disable TLSv1 [SME: 9154]
225    
226  Other fixes and updates  Other fixes and updates
227  -----------------------  
228  - Update the full names of users added in %pre.  e-smith-base
229  - Fix uid and gid to be the same for the users added in %pre.  - Use ip route syntax to define routes to local network [SME: 9905]
230  - Changed Prereq to Requires(pre) as Prereq is deprecated.  - Allow /32 masks on the external interface, in which case we don't
231  - Patch to correct issue with not being able to access a password protected    check if the gateway is on the correct network) [SME: 9765]
232    ibay.  - Add a column to display forwarding address [SME: 9174]
233  - Update ServerName (Samba netbios name) when SystemName is updated.  - Correctly display http URL to the server-manager in the console [SME: 9163]
234  - Remove old System Name from the Hosts DB.  - Fire ssl-update event when default cert is renewed [SME: 2257]
235  - Fix group creation when LDAP auth is enabled.  - Expand /home/e-smith/ssl.pem/pem during ssl-update [SME: 9152]
236  - Disable IPv6 on a default install.  e-smith-devtools
237  - Continue escaping control chars in rsyslog, just replace LF with space.  - Quote filenames in genfilelist so filenames containing spaces are correctly
238  - Use UTF-8 in the console.    handled [SME: 9758]
239  - Remove redundant parts of init-accounts.  e-smith-grub
240  - Add_template_to_ssl.pem, codes by JP Pialasse.  - Remove motd text from grub.cfg [SME: 9161]
241  - Require diald.  e-smith-hosts
242  - Removal of rc.e-smith now functionality is in e-smith-service.  - Allow empty comment when creating/modifying a hostname [SME: 9177]
243  - Replacement of rc.e-smith by moving code into e-smith-service.  e-smith-ibays
244  - Fix the way '.' works in bash.  - Remove double / in SSL RewriteRule [SME: 9195]
245  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).  e-smith-lib
246  - Always define InternalInterface NICBonding.  - Adjust regex so adjust-service accepts sigusr1 and sigusr2 from files [SME: 9184]
247  - In the console refer to removable media instead of USB disk.  e-smith-proxy
248  - Fix a few more syslog => rsyslog items.  - Allow custom file descriptor limit, and set default to 4096 [SME: 9911]
249  - Remove modprobe stuff.  initscripts
250  - Don't be as agressive on rate limiting.  - Rebase on upstream 9.03.53-1 [SME: 9534]
251  - Change syslog templates to rsyslog.  - Roll in CentOS Branding
252  - Ensure existing_hwaddr is always initialized.  - functions: parse -d first
253  - Change System Name from mitel-networks-server to sme-server.  - functions: fix ignored delay in killproc
254  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.  - netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev
255  - Patch to correct issue with not being able to access a password protected  - functions: improve killing loops
256    ibay.  - netfs: tweak nfs umount
257  - Correctly display accented letters in the console.  - sysctl.conf: mention sysctl -a
258  - Add e-smith as a Requires(pre) and remove adding users in %pre.  - sysconfig.txt: document PPPOE_EXTRA and PPPD_EXTRA
259  - Fix uid and gid to be the same in create-system-user.  - spec: require plymouth
260  - Ignore mysql.event table.  - fix mangled sysconfig/init.s390
261  - Use --single-transaction in mysql-dump-tables.  - rc.sysinit: don't perform fsck twice with /.autorelabel
262  - Use mysql_upgrade instead of fix_privilege_tables.  - ifdown-eth: fix comparison
263  - Increase memory limit for ntp.  - ifup-eth: if arping fails, output responding MAC
264  - Make rsyslog listen to our socket.  - network-functions: fix change_resolv_conf after grep update
265  - Remove rc.quota_create.  - spec: add sysctl.d dir
266  - the config file is radiusclient.conf, not radiusclient-ng.conf.  - rc.sysinit: fix typo in fs
267  - Add templates for radiusclient-ng.conf file to remove binaddr  - rename_devices: comments need to have a blank before them
268    directive.  - rename_device: remove comments and trailing whitespaces
269  - Add directive to options.pptpd so that radius plugin can find the  - bonding: warn if the ifup for slave device failed
270    radiusclient configuration file..  - clarify daemon() usage message
271  - Fix permissions of /etc/radiusclient-ng/servers.  - ifdown: clean ipv4 localhost addresses
272  - Add hack for running rc7.d script during runlevel 4.  - ifup-post: check resolve.conf also with DNS2
273  - Apply SME Server config file changes to pwauth.  - ifup: add missing quotes
274  - Renew donation text and add donation graphic.  - ifup-eth: some bridge options are applied later
275  - Fix /etc/system-release.  - init.d/halt: give init some time to reexecute
276  - Fix libgomp obsoletes to not obsolete el6 version.  - network-scripts: DEVICE and HWADRR could be quoted by apostrophe
277  - Change order of mail options in check4updates.  - ifup-wireless: fix calling of phy_wireless_device
278  - Change wording of Software Update button.  - rc.sysinit: apply quotas after system is relabeled
279    mod_auth_tkt
280    - backport to SME9 fix redirection when proxy ssl [SME: 8825]
281    - update apxs path for SME9 (sbin)
282    smeserver-release
283    - Bump for beta1 release of 9.2 [SME: 9525]
284    smeserver-support
285    - updated sources with new pictures fix hover color [SME: 9678]
286    - Koozali branding of manager [SME: 9678]
287    - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,by assuming the date is correct and changing the weekday.
288    - Update copyright in server-manager footer [SME: 9266]
289    - Don't put motd content in /etc/redhat-release [SME: 9161]
290    smeserver-yum
291    - added centos SCLo SIG gpg rpm signing key [SME: 10102]
292      will allow to install SCL packages directly from smecontribs
293    
294  General features  General features
295  ================  ================
296    
297  - Based on CentOS 6.4 and all available updates  - Based on CentOS 6.8 and all available updates
   
 $Id: README.txt,v 1.3 2013/10/05 05:06:26 wellsi Exp $  
   
   
   
   
298    
299    Terry Fage
300    Compilation of release data is thanks to Ian Wells
301    On behalf of the Koozali SME Server development team


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed