1 |
SME Server 9.0 Beta 3 Release Notes |
SME Server 9.0 Beta 4 Release Notes |
2 |
=================================== |
=================================== |
3 |
|
|
4 |
25 December 2013 |
10th April 2014 |
5 |
|
|
6 |
The SME Server development team is pleased to announce the release of |
The SME Server development team is pleased to announce the release of |
7 |
SME Server 9.0 Beta 3 which is based on CentOS 6.5 |
SME Server 9.0 Beta 4 which is based on CentOS 6.5 |
8 |
|
|
9 |
Bug reports and reports of potential bugs should be raised in the bug |
Bug reports and reports of potential bugs should be raised in the bug |
10 |
tracker (and only there, please); |
tracker (and only there, please); |
55 |
Major changes in this release |
Major changes in this release |
56 |
============================= |
============================= |
57 |
|
|
58 |
|
The installer has been substantially modified in Beta 3. |
59 |
|
The remaining relevant patches from SME Server 8 have been ported. |
60 |
|
Note: The spare handling for RAID arrays is not implemented. |
61 |
|
Workstation Backup has had many minor changes, see below for details. |
62 |
|
|
63 |
|
A new feature has been introduced to block SSH login attempts, |
64 |
|
http://wiki.contribs.org/AutoBlock |
65 |
|
It is set by default to reject SSH connections when there have been 3 |
66 |
|
or more requests in the previous 15 minutes. |
67 |
|
See the link above to tune the defaults, or to disable: |
68 |
|
db configuration setprop sshd AutoBlock enabled |
69 |
|
signal-event remoteaccess-update |
70 |
|
|
71 |
The installer has been substantially modified in Beta 2. |
The installer has been substantially modified in Beta 2. |
72 |
It now creates the degraded RAID1 array with a single disk install. |
It now creates the degraded RAID1 array with a single disk install. |
73 |
Some, but not all, install options are now supported. |
Some, but not all, install options are now supported. |
93 |
Backups |
Backups |
94 |
------- |
------- |
95 |
|
|
96 |
|
- Workstation Backup, do not exclude dar files by default |
97 |
|
in line with console backup. |
98 |
- Workstation Backup, fix selective restore by requesting array |
- Workstation Backup, fix selective restore by requesting array |
99 |
of results from CGI.pm. |
of results from CGI.pm. |
100 |
- Workstation Backup, new method to show files being restored is needed |
- Workstation Backup, new method to show files being restored is needed |
122 |
- Improve text in console backup for success and failure. |
- Improve text in console backup for success and failure. |
123 |
- Console USB Backup, allow user setting of compression level. |
- Console USB Backup, allow user setting of compression level. |
124 |
Compression level of the console backup is now -6 by default. |
Compression level of the console backup is now -6 by default. |
125 |
- Patch to exclude trying to backup aquota.* files so that backups to tape will |
- Patch to exclude trying to backup aquota.* files so that backups to tape |
126 |
succeed. |
will succeed. |
127 |
|
- Update to the latest version of console restore. |
128 |
|
- Boostrap console should only offer restore if no password set. |
129 |
|
- Delete items from dar catalog in descending order |
130 |
|
- Minor non-functional updates based on PerlCritic and review comments |
131 |
|
- Move console backup to e-smith-backup |
132 |
|
- Workstation Backup, selective restore of deleted files |
133 |
|
- Remove migrate fragment 30vfstype |
134 |
|
- Workstation Backup, Don't delete old sets, only empty them. |
135 |
|
- Workstation Backup, Mail and WOL now subroutines |
136 |
|
- Workstation Backup, remove the need for a temporary directory, updated. |
137 |
|
- Workstation Backup, backupname includes seconds. |
138 |
|
- Simplification of the time routines. |
139 |
|
- Workstation Backup, remove the need for a temporary directory. |
140 |
|
- Allow configuration of workstation backup if no removable disk present |
141 |
|
- Create simplified function for updating the DarCatalog |
142 |
|
|
143 |
|
|
144 |
File Server |
File Server |
145 |
----------- |
----------- |
155 |
- Change default Workgroup and Domain to sme-server. |
- Change default Workgroup and Domain to sme-server. |
156 |
- Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint |
- Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint |
157 |
authentication. |
authentication. |
158 |
- Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots. |
- Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots. |
159 |
|
- Remove 20smb as migrating from pre-SME7 is not supported |
160 |
|
|
161 |
LDAP (Optional in SME 9.0, and considered experimental) |
LDAP (Optional in SME 9.0, and considered experimental) |
162 |
---- |
---- |
169 |
Mail Server |
Mail Server |
170 |
----------- |
----------- |
171 |
- Only present one auth method at a time, in order, to NET::SMTP. |
- Only present one auth method at a time, in order, to NET::SMTP. |
172 |
|
- Remove limit properties from the imaps DB entry. |
173 |
|
- Apply process limits to dovecot. |
174 |
|
- Include /usr/bin/refreshclam |
175 |
- Allow webmail-only-local-network. |
- Allow webmail-only-local-network. |
176 |
- Fix handling of messages with no body and no trailing \n after |
- Fix handling of messages with no body and no trailing \n after |
177 |
headers (eq was used in attempted assignment). |
headers (eq was used in attempted assignment). |
196 |
- Requires e-smith-cvm-unix-local. |
- Requires e-smith-cvm-unix-local. |
197 |
- Load TextCat plugin if ok_languages is enabled. |
- Load TextCat plugin if ok_languages is enabled. |
198 |
- Fix how qpsmtpd tags spam email. |
- Fix how qpsmtpd tags spam email. |
199 |
|
- Remove Packager and Vendor from spec file. |
200 |
|
- Revert last change. |
201 |
|
- Sources are local, do not download them. |
202 |
|
- Updates to release 0.98.1 |
203 |
|
- Handle exceptions during attempted SASL auth. Add more debug tracing. |
204 |
|
- Remove DENYSOFT on SPF softfail |
205 |
|
- Remove insecure ciphers |
206 |
|
- Remove workarounds for how qpsmtpd tags spam email |
207 |
|
- Fix whitespace in 10required_score |
208 |
|
|
209 |
Server manager |
Server manager |
210 |
-------------- |
-------------- |
215 |
- Renew donation text and graphic in server-manager. |
- Renew donation text and graphic in server-manager. |
216 |
- Update footer copyright and renew full copyright text. |
- Update footer copyright and renew full copyright text. |
217 |
- Change wording of Software Update button. |
- Change wording of Software Update button. |
218 |
|
- Roll new stream to remove obsolete images |
219 |
|
- Remove references to obsolete images, by Stephane de Labrusse |
220 |
|
- Fix new starter website. |
221 |
|
- Update location of Primary index.html. |
222 |
|
|
223 |
Webmail and Groupware |
Webmail and Groupware |
224 |
--------------------- |
--------------------- |
225 |
- Allow webmail-only-local-network. |
- Allow webmail-only-local-network. |
226 |
- Don't use SSL over loopback. |
- Don't use SSL over loopback. |
227 |
|
- Replace last change with a default value for horde access |
228 |
|
- Ensure initialisation of variables in webmail-only-local-network. |
229 |
|
|
230 |
Web Server |
Web Server |
231 |
---------- |
---------- |
232 |
- Force magic_quotes Off. |
- Force magic_quotes Off. |
233 |
|
- Remove insecure ciphers |
234 |
|
|
235 |
Other fixes and updates |
Other fixes and updates |
236 |
----------------------- |
----------------------- |
237 |
|
- Add ssh-autoblock for external interface. |
238 |
- Do not hardcode NIC names to eth0 and eth1. |
- Do not hardcode NIC names to eth0 and eth1. |
239 |
- Return nic names in probeAdapters so we can drop HWAddress. |
- Return nic names in probeAdapters so we can drop HWAddress. |
240 |
- Remove HWAddress prop from interfaces. |
- Remove HWAddress prop from interfaces. |
242 |
- Remove obsolete VLAN code. |
- Remove obsolete VLAN code. |
243 |
- Load the bonding module if NIC bonding is enabled. |
- Load the bonding module if NIC bonding is enabled. |
244 |
- Define the udev-post service in the DB. |
- Define the udev-post service in the DB. |
245 |
|
- Provide the ability to restrict ibay access to http. |
246 |
- Restart rsyslog in logrotate event. |
- Restart rsyslog in logrotate event. |
247 |
- Set smb ServerName if unset. |
- Set smb ServerName if unset. |
248 |
- Don't reload init in bootstrap-console-save and console-save. |
- Don't reload init in bootstrap-console-save and console-save. |
306 |
- Update installer hard drive warning. |
- Update installer hard drive warning. |
307 |
- Customize confirmation dialogs during fresh install. |
- Customize confirmation dialogs during fresh install. |
308 |
- Run installer in 'text' mode. |
- Run installer in 'text' mode. |
309 |
|
- Roll new stream to really remove obsolete images |
310 |
|
- Roll new stream to remove obsolete images |
311 |
|
- Move console backup to e-smith-backup |
312 |
|
- Remove support.pl from e-smith-base and move to smeserver-support |
313 |
|
- Console restore should reboot |
314 |
|
- Boostrap console should only offer restore if no password set |
315 |
|
- Add restore backup as a console item for freshly installed servers |
316 |
|
- Non-code changes to perform_restore.pm |
317 |
|
- Refer to removable media not CDROM in console restore |
318 |
|
- Remove insecure SSL ciphers |
319 |
|
- Add more PHP options to ibays only by db commands |
320 |
|
- Add SSLRequireSSL to ibays when SSL is set to enabled |
321 |
|
- Force https per ibay should not be the default for existing ibays |
322 |
|
- Add textbox() to console.pm, getLicenseFile to util.pm |
323 |
|
- Update frame header and footer |
324 |
|
- Use mysql_upgrade in 00_restore_dumped_dbs, by Terje Edseth |
325 |
|
- Use mysql_upgrade --force due to upgrade to MySQL 5.1 |
326 |
|
- Prevent server being used in NTP amplification attacks. |
327 |
|
- Code by Jesper Holck |
328 |
|
- Modify template to allow Squid proxy https access to ports other than |
329 |
|
443,563 using db command |
330 |
|
- Codes by Ray Mitchell and Ian Wells |
331 |
|
- Add -n 1 to the dmesg line in rc.sysinit to prevent unwanted messages |
332 |
|
appearing on the console |
333 |
|
- Correct offest in runlevel7 patch to avoid .orig file |
334 |
|
- Remove CentOS Branding patch |
335 |
|
- Add logcheck to help analyse errors in the log files |
336 |
|
- Roll new stream to remove obsolete images |
337 |
|
- Move support.pl from e-smith-base to smeserver-support |
338 |
|
- The console license page now uses dialog's textbox. |
339 |
|
- Ensure console is run with taint checking. |
340 |
|
|
341 |
General features |
General features |
342 |
================ |
================ |
343 |
|
|
344 |
- Based on CentOS 6.5 and all available updates |
- Based on CentOS 6.5 and all available updates |
345 |
|
|
346 |
$Id: README.txt,v 1.5 2013/11/06 06:26:57 wellsi Exp $ |
$Id: README.txt,v 1.8 2014/03/30 04:08:35 wellsi Exp $ |