SME Server:10.0

Languages:

English

Koozali SME Server 10.0 Release Notes "Justine"

The Koozali SME Server development team is pleased to announce the release of SME Server 10.0 which will be the next major release of SME Server. Code named "Justine"

This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.

	Note:
	Koozali SME Server users should upgrade production servers to this Release

Warning:

Please ensure your hardware is compatible with RHEL7/CentOS7. Very old or very new hardware may have issues. See the following links for more: https://wiki.centos.org/AdditionalResources/HardwareList https://access.redhat.com/documentation/en_us/red_hat_enterprise_linux/7/html/installation_guide/sect-installation-planning-hardware-compatibility-x86 https://wiki.koozali.org/SME_Server:10.0#High_CPU_load_for_ssl-param_.2Fdovecot_on_initial_boot

Some notes on Koozali SME Server 10 can be found at https://wiki.contribs.org/SME_Server_10.0_Development

SME10 Roadmap https://wiki.contribs.org/SME10_Roadmap

Bug reports and reports of potential bugs should be raised in the bug tracker (and only there, please);

     https://bugs.koozali.org/

Release notes for Koozali SME Server 10.0 can be found here https://lists.contribs.org/pipermail/updatesannounce/2021-June/000478.html

Koozali Foundation Inc.

The Koozali SME Server project

The Koozali Foundation Inc. is a nonprofit corporation that governs the open source Koozali SME Server project. Koozali SME Server is a stable, secure and easy to use/manage linux server that provides common server functionalities out of the box. Many open source contributions are available that can extend the default server functionality making Koozali SME Server an even more powerful and flexible business server solution. Thousands of Koozali SME Severs have been deployed as real or virtual servers and in the cloud to serve many small to medium enterprises, and this number is growing day by day. The Koozali SME Server is free to use but it takes a lot of effort and money to develop, make, and maintain. We therefore ask you for your considerations.

Volunteering

Koozali Foundation Inc. together with its community hosted at https://contribs.org is a collaborative effort of volunteers. You too can contribute to the development and continuity of the Koozali SME Server project as described on our volunteering page. Everybody is welcome to join the already 4000+ member contribs.org community and can contribute with any skill set.

Financial donations

You can also show your support by making financial donations. The preferred way to make financial donations is using the donate option in the forums. You are free to choose any amount and frequency, being monthly, yearly or only once. The benefit of donating through your forums account is that your forum user name will receive a badge, showing your donation status. If you do not have a forum account, you can create one, or select the below PayPal option to make your donations.

Commercial usage

Organizations that use Koozali SME Server for their business, provide professional services related to SME Server or in any other way benefit commercially from the Koozali SME Server project, are kindly requested to consider regular financial donations that reflect their business benefits.

Koozali Foundation Inc. is happy to supply an invoice for any donations received. For more information on invoicing please send a mail to treasurer@koozali.org.

Thank you for your considerations and support!

Download

Koozali SME Server : STABLE releases
Version		DVD ISO	Checksum		Netinstall ISO	Checksum
SME Server 10.1 Release notes Addendum EOL June 30th, 2024
		x86_64	MD5	SHA1	x86_64	MD5	SHA1
Direct link to the Koozali SME Server mirrors and how to become a mirror. SME Server requires a DVD/CD, a USB Stick/Disk can also be used. The Koozali Foundation Inc. would like to thank all of our sponsors and partners.

About SME Server

SME Server is the leading Linux distribution for small and medium enterprises. SME Server is brought to you by Koozali Foundation, Inc., a non-profit corporation that exists to provide marketing and legal support for SME Server.

SME Server is freely available under the GNU General Public License and is only possible through the efforts of the SME Server community.

However, the availability and quality of SME Server is dependent on meeting our expenses, such as hosting costs, server hardware, etc.

As such, we ask for a donation to offset costs and fund further development.

a) If you are a school, a church, a non-profit organisation or an individual using SME Server for private purposes, we would appreciate you to contribute within your means toward the costs associated with hosting, maintenance and development.

b) If you are a company or an integrator and you are deploying SME Server in the course of your work to generate revenue, we expect you to make a donation commensurate with the level of revenue you generate and the number of servers your have in the field. Please, help the project

Please visit https://wiki.koozali.org/Donate to donate.

Koozali Inc is happy to supply an invoice for any donations received, simply email treasurer at koozali.org

Notes

In-place upgrades are not supported. It is necessary to backup and then restore. (Remember, testing purpose only and note warnings),

Restore of a sme9 console or workstation backup is now fully supported

Single disk install no longer creates a degraded Raid1 array, Two or more disks will be created as a Raid1-6 array, see wiki https://wiki.contribs.org/Raid

The spare handling for RAID arrays is now implemented.

Support for further Raid configuration on install is now implemented - see wiki

New Server-Manager Framework, Mojolicious, is now well on the way to full implementation

USB installs are once again fully supported, Note: it is important to use proposed apps to create the boot media See: https://wiki.koozali.org/Install_From_USB

Netinstall is once again fully supported, additional repos easily added

Install to a system supporting a UEFI BIOS is also now fully supported

Console backup, and workstation backup to removable storages is now fully supported.

Thanks

A plethora of other under the hood changes, too numerous to list

The work that has gone into getting SME 10 to this stage has been enormous, an attempt to list and detail the work that has been done in recent months would not do justice to the effort contributed by the following,

Thank you one and all:

• Jean Phillipe Pialasse
• Michel Begue
• Brian Read
• Catton Durbrow
• Chris Sansom-Ninnes
• Jean-pierre Odion
• Zsolt Vasarhelyi
• John Crisp
• Terry Fage

there have also been many others who have done what they can, thank you:

The changes that have been implemented to ensure the Koozali Sme Server way is fully implemented have been far reaching, far to many to try and list, suffice to say long live "Justine".

Installing

Hardware requirements

Installation procedure

https://wiki.centos.org/AdditionalResources/HardwareList
https://access.redhat.com/documentation/en_us/red_hat_enterprise_linux/7/html/installation_guide/sect-installation-planning-hardware-compatibility-x86

Upgrading

	Note:
	In-place upgrades from SME 9.# to SME 10.x using yum or CD are not supported due to design constraints imposed by CentOS. It is necessary to backup the old server & then restore to the new server. Contribs will need to be reinstalled.

The simplest way to do this is via a Console Backup to attached USB disk on the old server( or if using a virtual machine, and USB is no t available, you can try adding a virtual drive as SATA). Alternatively use one of the Backup & Restore options available in server manager panel, ie backup to desktop, or backup to workstation (either to attached USB or network share). Other non standard options exist to Backup virtual servers that do not have USB ports etc, & Restore to similar virtual systems, eg using ssh. If you have a lot of contribs that have files to backup that are not in standard backup, you can give a try to Migratehelper.

Tip:

The Restore from USB on first boot function (on a newly installed SME 10 server), will only utilise backups that are saved as smeserver.tgz files, which are the Console backup to USB or the server manager backup to Desktop. The server manager backup to Workstation (either to USB or network share) creates a "backupdate.dar" type filename (or multiple split parts) & cannot be used to restore using the Restore on first boot function, it can only be used for restores from server manager.

	Tip:
	After a Restore to new hardware, networking may not be functional. This is caused by the restored NIC settings being incorrect for the NIC's in the new hardware. To fix this, login as admin & from the console menu select Configure this server. Step through the screens & choose the new hardware network card (NIC) drivers, & leave other settings unchanged.

Upgrade via Console backup to USB drive

• Log in as admin & Backup the old server via a Console Backup to attached USB disk. This may take many hours if you have a lot of data on your server, depending on USB port speed, USB drive speed, & types of files being backed up ie whether already compressed or not etc. Typically for 250Gb of data on your server hard drive, 2 to 4 hours.
• Install the SME 10.x OS from CD on the new hardware (on new server).
• Select to do a Restore on first boot of the newly installed SME Server 10. Only attach USB containing the backup file, when asked on first reboot. Restore may take a few hours depending on data size etc. Make sure you wait for the Restore complete message.
• If necessary use the consol to adjust some parameters, e.g. network cards and network addressé This will be needed particularly if you have the old SME9 still running at the same IP, or simply if you install on new hardware to make your restored configuration aware of this new hardware.
• A reboot is necessary after the restore, even if you did not alter the configuration, to have all services running as planned, failure to do so will leave you with only standard services running.

	Tip:
	You can dismiss the restore from USB on initial boot and access it later from the console as long as you do not create new group on you freshly intalled SME10.x.

Upgrade via server manager backup to Desktop or Workstation (USB or network)

• On the old server in server manager, configure the required backup in the Backup or Restore panel. Schedule the backup to run at a suitable time. This backup can be to a workstation desktop for systems with a smaller amount of data, which creates a smeserver.tgz backup file, or to a locally connected USB drive or to a network share, & creates xx...xx.dar files, split into multiple parts if configured & data size is large. This may take many hours to run depending on data size etc.
• On the new SME10 server, manually configure the identical backup job in the server manager Backup or Restore panel. The backup job MUST point to the exact same location that the original backup file is saved to.
• Select the Restore function within server manager & select the full backup you want to restore from. This may take many hours to run depending on data size, network speed etc. Make sure you wait for the Restore complete message.
• Basic networking configuration of the new and/or restored SME10 server will be required if different from original server.

Upgrade using command line restore via ssh or USB

• It is possible to use the command line to transfer a backup file via ssh (or USB) to the new server & then to run the restore. Standard & non standard backup concepts & procedures are outlined in the Backup server config Howto, http://wiki.contribs.org/Backup_server_config If using any non standard method, then the integrity of your SME server data cannot be guaranteed.
• To do a standard backup & restore using CLI, on the old server log in as admin & perform the Console Backup to USB drive (to a locally connected USB). Alternatively using suitable commands, a smeserver.tgz backup file could be created & saved to / folder, refer Howto.
• Install the SME 10.x OS from CD on the new hardware (on new server).
• Answer No when asked if you want to restore from USB during the first boot.

• If you created or have the backup file on the old server, transfer the smeserver.tgz backup file via ssh from your old server to your new server. Both servers must be connected & remote access enabled
• On the old server do:

scp -P zzzz /smeserver.tgz newserverIP:/

(where zzzz = port number)

• If you saved the backup file to USB, then transfer the smeserver.tgz backup file from USB to your new server
• Log in as root or a root user on the new server & do:

mount /media/usbdisk
cp /media/usbdisk/Backup-date-folder/smeserver.tgz /

(replace usbdisk with actual mount point name & Backup-date-folder with actual folder date name)

• After the backup file has been copied to the new server, on the new server do:

cd /
signal-event pre-restore
tar -C / -xzvf smeserver.tgz
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

• Before restarting the new server, disconnect old server from network (as you will have clashes due to duplicate IPs)
• On new server do:

cd /
rm smeserver.tgz

• Note the backup & restore may take many hours to complete depending on data size etc.
• After restore, the Configuration of the new server should be identical to the old server.
• Note with two servers connected during ssh copying operations, basic networking configuration of the new unrestored SME9 server will need to be temporarily different to the old server to avoid clashes

Reinstall Contribs after restore

Add on contrib rpm packages will need to be re-installed on the new SME 9.x server as these are NOT included in the backup. Contrib data & configuration is included in backups & will be restored, but its usefulness will depend on the contrib design being unchanged between older (SME7/el4 or SME8/el5) & SME9/el6 package versions.

Delete & Reconfigure Manual tweaks

Other manual tweaks eg custom templates or scripts, will need to be deleted & recreated in line with SME 10.x template code & base code.

Where extensive modifications have been made to the "old server (eg SME9.2)", it is recommended to carry out a test backup & restore upgrade first, to discover any problems & ascertain suitable fixes & workarounds. Removing contribs & custom templates before upgrading is recommended.

Known issues upgrade from SME9

I can not ssh/rsync/scp/sshfs from my SME9 to SME10 to migrate

A the reason is we enforced only stronger ciphers as default in /etc/ssh/ssh_config. Short way is to add a supported cipher on both systems :aes256-ctr, aes192-ctr or aes128-ctr

[root@mySME9]#ssh root@mysme10 -c aes256-ctr
[root@mySME9]#sshfs -o Ciphers=aes256-ctr root@mysme10:/media/extra /mnt/backup/
[root@mySME9]#rsync  -e "ssh -c aes256-ctr" -av /var/spool/spamd/ root@mysme10:/var/spool/spamd/
[root@mySME9]#scp -c aes256-ctr  /etc/zabbix/zabbix_agentd.conf root@5.39.81.171:/etc/zabbix

High CPU load for ssl-param /dovecot on initial boot

A 4096 Diffie-Hellman parameter is being generated on first launch of dovecot which handles IMAP and POP access. Depending on your CPU and entropy availability, this could take up to 48 hours, if you reboot the job will restart until completion.

No access to http or server-manager

We stopped using PHP module for apache, and switched to php-fpm. If you left any templates-custom including options related to php module, please remove them and restart httpd-e-smith.

mkdir /root/httpd.conf
mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/httpd.conf/
systemctl restart httpd-e-smith.service

You can generally debug issues with httpd by issuing the following command, this will output what is wrong in the file

httpd -t

and you can then to a a search with the pattern of the error pointed to find what fragment seems problematic

grep -r "pattern"  /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf

I need a newer/supported version of PHP

Command line interface reports:

# php -v
PHP 5.4.16 (cli) (built: Apr  1 2020 04:07:17) 

But apache uses by default php-fpm with version PHP 7.4. Also, please note that PHP 5.4 provided with SME 10 is still maintained by Red-Hat as they backport every security patches.

I can not access to my ibay from my windows XP

Windows XP and Windows 7 are software no longer supported by Microsoft, you are encouraged to migrate. That said, they are expecting the SMB1 protocol, and SME 10 uses SMB2 and SMB3. A workaround could be to allow SMB1 on the server using the correct property in the configuration, but this is at your own risks.

I can navigate to my server using its ip, but the netbios name does not work, and it does not show in my network

Netbios is deprecated and is part of the SMB1 protocol. You can workaround that using the contrib WSSD See https://wiki.contribs.org/Wsdd

I am not able to update - I get some el6 packages proposed to be part of the updates

There are chances you have some old el6 centos6 rhel6 repos still configured. Start with this :

yum update smeserver-yum --disablerepo=* --enablerepo=smeos,smeupdates
signal-event yum-modify

If the issue remains, then check your configured repo, remove those with reference to 6.

db yum_repositories print
db yum_repositories delete repoForEL6

And install them using the extrarepositories packages https://wiki.contribs.org/Extrarepositories

db yum_repositories show

I am not able to update and yum seems to try to resolve to ip v6

You have network connectivity issue or most probably dns issue. start with simple tests to more complexes. First you need to use plain ip, to exclude dns issues.

Do I have access to my ISP or to my local gateway in case something else is doing the gateway on my LAN

 ping your.gate.way.ip

Do I have access to the internet. let's ping a known IP.

# ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=6.11 ms

Is DNS working ?

# dig google.com +short
16.58.213.174
# dig mirror.centos.org +short
212.69.166.138

Then fix your network /dns

Impossible to install got error ValueError: name already in use

This is because you already have a SME 9 (most probably) installation on your disk with LVM. To avoid this, either boot in rescue mode to wipe the partition, either use the partitioning tool at screen 2 to create your own partition. Beware auto partitioning at this stage is not SME with raid or other options you had chosen but default CentOS ie EFI if needed, boot and one huge LVM with all the remaining space on ALL disks include

I do not have the default raid 1 after the server installed as expected, while I have set default partitioning it the gui

Beware auto partitioning in the installer GUI is not SME with raid or other options you had chosen at boot time but default CentOS ie EFI if needed, boot and one huge LVM with all the remaining space on ALL disks include. Going in the partitioning tool will erase all previous settings chosen at boot time of installer for SME.

Raid 1

SME10 does not handle anymore degraded RAID1 on initial install due to limitations with new version of installation software Anaconda.

See also AddExtraHardDisk if you think you might use RAID1 one day. But it's an alternative for part of the date. Best solution is to reinstall SME10 with 2 drives.

Koozali SME Server 10.0 Changelog

Major changes in this release

• This release is based on CentOS 7.9.2009 and all available updates
• Improved handling of SSL certificates
• Increased level of security in term of encryption for all services
• FTP is only available over TLS by default to avoid clear text exchanges on the network
• PHP module is not used anymore by apache server. We now use php-fpm 7.4 by default.
• PHP-FPM available by default : 5.4, 5.5, 5.6, 7.0, 7.1, 7.2, 7.3, 7.4, and 8.0. Supported versions are 5.4, 7.3, 7.4 and 8.0
• no degraded RAID support on install
• using protocol SMB2 and SMB3 only for file share, CIFS/SMB1 is not available as default.
• migration of most services to systemd
• added specific events to prevent the need of reboot on yum update / yum install
• Switch from mysql 5.1 to mariadb 5.5
• Dovecot is now handling imap, imaps, pop3, pop3s

Detailed changes in this release

Only the changes since SME Server 10 RC1 are listed, mainly autogenerated from the changelogs.

Packages altered by Centos, Redhat, and Fedora-associated developers are not included.

The changelogs are written per package

SME built or modified packages - ChangeLogs

9 June 2021

Backups

• e-smith-backup

- fix dar restore replacing rootdir symlinks by folders [SME: 11424]
- Remove duplicate gunzip call in perform_restore [SME: 11266]
- Remove debug output of device names
- Revert BlockDevices.pm and backup call to not filter to removable drives
- Replace hal-* calls with BlockDevices [SME: 11319]
- add update event [SME: 11124]
- Added /etc/backup-data.d to backup paths [SME: 10245]
- Added error handling to restore using pipe pattern from perform_backup [SME: 3139]
- Made reboot optional after console restore
- Fixed bootstrap restore not activating config changes [SME: 10921]
- Manually added ext2 and ext3 to Block Device file system check where ext4 present
- updated Block Device discovery to fix recovery from console [SME: 8244]
- Credit to Catton Durbrow

File Server

• e-smith-proftpd

- cleanup in /etc/rc.d [SME: 9692]
- redirect log away from message [SME: 11384]
- fix circular Conflict with proftpd [SME: 11357]
- improve protect from proftpd.service running [SME: 11106]
- protect from proftpd.service running in place of ftp.service [SME: 11106]
- remove system-preset file from usr [SME: 10958]
- SSL crt and key to self signed if path does not exist [SME: 11316]
- add Requires=runit.service [SME: 11245]
- execute systemd-reload before service adjust in events [SME: 11228]
- remove S95reset-unsavedflag [SME: 11229]
- Remove ftp from 'init.d/supervise' [SME: 11106] [SME: 11150]
- Move ftp service to systemd [SME: 11106]
- Create e-smith-proftpd-update event [SME: 11150]

• e-smith-samba

- clean rsyslog syntax for smbd and nmbd [SME: 11422]
- fix noise in message log from nmbd and smbd redirected to dedicated logs [SME: 11349]
- allow using user-create-profiledir action with temp or package-update events [SME: 11348]
- fix log noise for smb.service [SME: 11157]
- add Restart=always [SME: 11118]
- add Restart=always [SME: 11117]
- migrate nmbd to systemd [SME: 11118]
- migrate smbd to systemd [SME: 11117]
- create general smb.service service
- create e-smith-samba-update event [SME: 11157]
- Fix mutex locking [SME: 11199]
- Fix pid directory [SME: 11198]
- Add /etc/krb5.conf as template using templates from smeserver-samba[SME: 11093]
- remove win98pwdcache.reg from server-resources [SME: 9060]
- set min server and client protocol SMB2 [SME: 10576]
- add check so max always greater than min
- add port 445 if min server protocol is SMB2 or SMB3 [SME: 10963]

Mail Server

• e-smith-email

- webmail is only SSL [SME: 11443]
- create -update event [SME: 11133]
- move smtp-auth-proxy to systemd [SME: 11102]
- allow creation of pseudonyms with setting of local only [SME: 3802]

• smeserver-dovecot

- clean rsyslog syntax for dovecot [SME: 11422]
- add Restart=always [SME: 11101]
- fix path for event -update [SME: 11101]
- cleanup /var/service/dovecot [SME: 11101]
 -close logger and service from previous runit instance before starting

systemd one

- add systemd drop-in expand in bootstrap-console-save, console-save, post-install, post-upgrade [SME: 11101]
- move service to systemd [SME: 11101]
- add imap idle notify interval setting [SME: 10947]
- fix typo in enabling TLSv1.2 as default [SME: 10934]
- fix typo in 35ssl template [SME: 10934]
- fix typo in createlinks [SME: 10932]
- revert property names with period in it [SME: 10934]
- add property AcceptFullEmail with enabled as default [SME: 9865]

• smeserver-qpsmtpd

- remove /usr/lib/systemd/system-preset/80-koozali-qpsmtpd.preset [SME: 10958]
- modify for clamav 0.103.0 [SME: 11210]
- roll up patches
- add Requires=runit.service (qpsmtpd & sqpsmtpd) [SME: 11245]
- fix service not enabled [SME: 11107]
- remove reset-unsavedflag
- Move qpsmtpd & sqpsmtpd services to systemd [SME: 11107]
- Create smeserver-qpsmtpd-update event [SME: 11164]
- expand badrcptto_ext when needed [SME: 10638]
- this avoid user, group or pseudonyms for internal purpose to be reachable
- from outside
- minimum Protocol TLSv1.0 [SME: 10460]
- better ciphers order.

Server manager

• e-smith-formmagick

- increase CSRF timeout from 120s to 180s [SME: 10902]
- added property httpd-admin{csrfTimeout} in second to override
- added hability to ovarride the Timeout from panel to panel
- add update event [SME: 11136]
- add locale for CSRF [SME: 10626]
- add CSRF patch [SME: 10626] - thank you to Daniel Berteaud

• e-smith-manager

- take 2 wrong system mode reported in bugreport [SME: 10448]
- fix wrong system mode reported in bugreport [SME: 10448]
- create -update event [SME: 11144]
- migrate httpd-admin to systemd [SME: 11110]
- removing hardcoded ports [SME: 10967]
- Add a FollowSymlinks for user-password in password/cgi-bin (perl-suid) [SME: 9677]
- update apache icon path [SME: 9591]
- add message to indicate EOL after Jun 30 2024 fix [SME: 10170]

• perl-CGI-FormMagick

- increase default timeout, allow setting from outside [SME: 10902]
- add timeout [SME: 10626]
- update CSRF patch [SME: 10626]
- add requires perl(Session::Token) [SME: 10626]
- fix add CSRF patch [SME: 1723] - thank you to Daniel Berteaud

Webmail and Groupware

• smeserver-horde

- clean rsyslog syntax for horde [SME: 11422]
- improved php basedir, with filtering of noise for gpg [SME: 10945]
- force SSL for horde [SME: 11443]
- fix horde not honoring switch to php-fpm 5.4 [SME: 11433]
- update mail settings for the php-pool [SME: 11431]
- spamd SpamLearning property migrated to spamassassin SpamLearning [SME: 11376]
- Configuration is not up to date, hash to update [SME: 11308]
- fix wrong template path for php55, php56 and php [SME: 11255]
- fix webmail not accessible after enabling from manager [SME: 11233]
- update rsyslog syntax [SME: 11016]
- move fragment so syntax is similar to message
- remove harcoded ports [SME: 10969]
- add gpg to php base dir [SME: 10945]
- workaround logging noise caused by libsasl [SME: 10943]
- log as admin and not admin at domain for cli tasks [SME: 10910]
- fix ingo imap preferences [SME: 10912]
- allow httpd-auth for calendar, tasks access using rpc.php ... [SME: 10908]
- add smeserver-horde-update event [SME: 10909]
- avoid loss of user parameter on Primary Domain change [SME: 1005]
- this will also avoid the loss of parameter if we log with a different virtualhost
- horde preference is now stored with the SME username without @domain
- fix bad regex to strip domain [SME: 10224]
- also we can now force Primary domain to use as default email
- we can strip heading string from virtualhost domain to create email
- default identity email will update as long as no other identity is created for the user
- fix typo in php-fpm patch [SME: 10872]
- remove php3 references [SME: 10866]
- remove strict and warning alert from error log [SME: 10823]
- dedicated php-fpm pool for horde [SME: 10872]
- apply patches from John H. Bennett III [SME: 10717]
- cvs admin -ko on patch1

Other fixes and updates

• e-smith-base

- removing weekly cron for ddns update, targeted script has been removed [SME: 11470]
- revert e-smith-service file [SME: 9692]
- add systemctl wrapper [SME: 11345]
- clean rsyslog syntax for dhcpd [SME: 11422]
- cleanup /etc/rc.d and /var/service [SME: 9692]
- remove klogd references [SME: 11363]
- restore part of pptp code and move to generik vpn entry [SME: 11374]
- drop dyndns core support [SME: 11415]
- fix enabled service not started on reboot [SME: 11355]
- unless a power outage, as long as you reboot, halt or shutdown systemd will be in sync
- fix console::startup run twice [SME: 11358 ]
- improve run order in systemd-default [SME: 11356]
- fix uninitialized value during post-install [SME: 11350]
- fix user with rssh shell need to be member of rsshusers group [SME: 9155]
- add missing /sbin/e-smith/bootstrap-runlevel7 [SME: 11318]
- fix typo for isolate [SME: 11246]
- separate bootstrap-console from run level service launch [SME: 11318]
- only run isolate if sme-server.target is not active [SME: 11246]
- update system-preset usr/lib file [SME: 10958]
- fix loss of httpd basic auth [SME: 11309]
- fix services starting when they are in Wants= for sme-server.target and preset disabled [SME: 11247]
- rewrite of manageRAID.pl and add_drive_to_raid for SME10 [SME: 10918]
- added gdisk as a dependency to support GPT systems
- fix modSSL key crt and keychain files really exist [SME: 11252]
- add ldap.init as exception for preset
- fix init-accounts [SME: 9642]
- validate modSSL key crt and keychain files really exist [SME: 11252]
- if not we use self generated
- drop pptpd support [SME: 11250]
- add bash-completion [SME: 11244]
- improve local service to systemd [SME: 11119]
- now run rc.local file as part of the event
- move local service to systemd [SME: 11119]
- make it run /etc/rc.d/rc.local
- cleaning /var/service/syslog still there
- workaround drop-in install section ignored by systemctl preset [SME: 11231]
- some cleanup
- remove S95reset-unsavedflag [SME: 11229]
- add exclusion for lpd [SME: 11006]
- execute systemd-reload before service adjust in events [SME: 11228]
- fix ExecStart for raidmonitor [SME: 11094]
- fix permission for /sbin/e-smith/systemd/mdmonitor-pre [SME: 11094]
- Don't ask for confirmation to save changes on first install configuration [SME: 11193]
- Fix RAID detection regex for disk redundancy screen [SME: 10918]
- add Install part of systemd unit [SME: 11100]
- move dhcpd to systemd [SME: 11100]
- get dhcpd log out of message [SME: 2408]
- also configure logrotate for /var/log/dhcpd/dhcpd.log and /var/log/dhcpd/current
- reverte previous changes for service2adjust and util.pm [SME: 11177]
- files are owned by e-smith-lib
- allow more systemctl controls [SME: 11177]
- convert unrecognized signals from service2adjust in events for systemd
- handle unsupervised services the same way supervised were in adjust-services
- make service-status only log when service disabled and not fail it
- add template for /etc/systemd/system-preset/49koozali.preset [SME: 11174]
- this will help systemd integration in enabling and disabling services
- remove wan link
- move raidmonitor to systemd [SME: 11094]
- move network service to systemd [SME: 11090]
- move wan service to systemd [SME: 11091]
- create e-smith-base-update event [SME: 11012]
- create sme-server.target [SME: 10957]
- make sme-server.target default target
- change default target on signal-event post-upgrade, post-install, e-smith-base-update
- requires update or smeserver-php and e-smith-runit
- add an executable to check if service is enabled in e-smith db
- validate submask on remote access panel [SME: 6536]
- accept netmask bit and convert it
- validate subnet mask on local network panel [SME: 10974]
- accept netmask bit and convert it
- remove info.txt [SME: 9590]

• e-smith-dnscache

- cleanup in /etc/rc.d/ [SME: 9692]
- remove /usr/lib/systemd/system-preset/80-koozali-dnscache.preset [SME: 10958]
- add Requires=runit.service (dnscache & dnscache.forwarder) [SME: 11245]
- execute systemd-reload before service adjust in events [SME: 11228]
- remove S95reset-unsavedflag [SME: 11229]
- remove createlink safesymlink in /etc/rc.d/init.d [SME: 11097]
- remove rc7.d link [SME: 11097]
- fix actions in e-smith-tinydns-update [SME: 11127]
- Move dnscache, dnscache.forwarder services to systemd [SME: 11097]
- Create e-smith-dnscache-update event [SME: 11127]
- Modify run script to allow for loopback commmunications with other DNS
- servers on the local machine and DNS forwarding [SME: 9715]

• e-smith-domains

- avoid encoding of utf strings in domain table [SME: 11391]
- this will mess with some languages
- Create e-smith-domains-update event [SME: 11128]

• e-smith-grub

- fix unable to boot on a non xfs root filesystem [SME: 11365]
- cleanup remove /boot/grub dir [SME: 11354]
- Add support for EFI systems [SME: 10998]
- add update event [SME: 11137]

• e-smith-ibays

- fix patch for SSLRequireSSL [SME: 8150]
- force https if auth or dav are enabled [SME: 11407]
- merge SSL and SSLRequireSSL properties [SME: 8150]
- now SSLRequireSSL will force SSL to the html ibay directory and redirect to https
- update php properties and folders [SME: 11412]
- remove last bit of atalk [SME: 668]
- add update event [SME: 11139]
- remove hardcoded ports [SME: 10968]
- remove php3 reference [SME: 10869]
- fix apache failing if ibay has dynamic content enabled and phpmodule is disabled [SME: 10871]
- revert patch, wrong rpm [SME: 10871]
- add support for php-fpm [SME: 10871]

• e-smith-lib-compspec

- allow easy access to templates.metadata to expand desired files [SME: 11312]
- add update event [SME: 11142]

• e-smith-mysql

- fix wrong path for set password [SME: 11468]
- fix restore of sme9 backup fails to start mysql.init [SME: 11453]
- add property to enable mysqld slow queries log [SME: 455]
- simply use SlowQueries as the amount of second and it is enabled
- remove property to stop logging
- more mysqld/mariadb parameter available with properties /templates [SME: 4606]
- ease 4 databit characters with innodb [SME: 11404]
- redirect mariadb log from systemd to file [SME: 11425]
- fix backup fails in pre-backup in mysqldump [SME: 7827]
- expand 10mysql_upgrade and restart mysql.init on e-smith-mysql-update [SME: 11120]
- this to make sure mariadb upgrade fully and prevent residual 10mysql_upgrade stay in the way
- fix issue with 10mysql_upgrade crashing mariadb [SME: 11120]
- also removed noise from spec file
- e-smith-update event [SME: 11145]
- mariadb systemd integration [SME: 11021]
- move set.password and template
- create /usr/lib/systemd/system/mariadb.service.d/sme.conf
- create /sbin/e-smith/systemd/mariadb-initialize + chmod
- cleanup and remove old /var/service/mariadb
- mysql.init systemd integration [SME: 11120]
- create mysql_init.service

• e-smith-openssh

- clean rsyslog syntax for sshd [SME: 11422]
- increase default host key size [SME: 11359]
- redirect logging to /var/log/sshd/sshd.log and logrotate [SME: 11256]
- add support for denyhost [SME: 10939]
- move sshd to systemd [SME: 11109]
- create -update event [SME: 11147]
- add ed25519 and ecdsa hostkeys [SME: 10940]
- add Whitelist to AutoBlock using property sshd ValidFrom [SME: 9893]
- update client ciphers to use [SME: 10621]
- add ciphers, macs and KexAlgorithms for server [SME: 10937]

• e-smith-packetfilter

- move ulogd to systemd [SME: 11426]
- require ulogd 2 [SME: 11426]
- remove pptpd last references [SME: 11420]
- remove /usr/lib/systemd/system-preset/80-koozali-packetfilter.preset [SME: 10958]
- drop pptpd support [SME: 11251]
- launch masq using systemd unit [SME: 11089]
- create event to avoid reboot on update [SME: 11122]

• e-smith-proxy

- cleanup in /etc/rc.d and /var/service/squid [SME: 9692]

• e-smith-runit

- reverting removal of deamontools [SME: 9692]
- could be needed for legacy support with rc7.d services
- cleanup of /etc/rc.d [SME: 9692]
- create e-smith-runit-update event [SME: 11156]
- also tidy target wantedby: should run from basic.target
- fix issue with Before rules in unit file [SME: 11013]
- run before network-pre.target [SME: 11088]
- enable for sme-server.target [SME: 11013]
- e-smith-test
- e-smith-tinydns
- cleanup in /etc/rc.d [SME: 9692]
- remove /usr/lib/systemd/system-preset/80-koozali-tinydns.preset [SME: 10958]
- Add 'Requires=runit.service' [SME: 11245]
- remove S95reset-unsavedflag [SME: 11229]
- execute systemd-reload before service adjust in events [SME: 11228]
- remove createlink safesymlink in /etc/rc.d/init.d [SME: 11098]
- remove rc7.d link [SME: 11098]
- fix date in changelog
- fix actions in e-smith-tinydns-update [SME: 11159]
- Move tinydns service to systemd [SME: 11098]
- Create e-smith-tinydns-update event [SME: 11159]

• smeserver-release

- Bump new rpm for sme10 release candidate 1
- updating release number everywhere [SME: 11366]
- Bump release to 1 as buildsys believe 1.alpha5 is newer than 0.beta1 [SME: 11317]
- Bump new rpm for sme10 beta1 [SME: 11317]
- add update event [SME: 11165]
- Bump new rpm for sme10 alpha5

• smeserver-yum

- avoid reboot on removal of smeserver-* rpms [SME: 11458]
- navigation-conf when a panel is installed
- fix wrong path for rsyslog.conf [SME: 11364]
- remove noise in yum process "overriding all signals, forcing restart" [SME: 11372]
- packages installed logged both in yum.log and message [SME: 11364]
- set priority to 10 for remi-safe [SME: 11360]
- fix poor handling of service adjusting and action order [SME: 11300]
- now a temp event is created
- also better logging, better handling of update vs removal
- make yum dbs service fork [SME: 11243]
- now smeserver.py plugin call the service
- yum-modify can use the service restart
- yum.service is its own service, not called by local.service
- move yum upate db service to systemd [SME: 11180]
- fix -update events not runt on package upgrade [SME: 11184]
- lower noise on forced restart
- fix switch to vault BaseURL for CentOS [SME: 11227]
- add remi-safe as base repo [SME: 11179]
- smeserver-yum-update event created [SME: 11168]
- fix separate action before template, and after service [SME: 11175]
- run all actions with post-upgrade as default event
- fix some templates not expanded [SME: 11121]
- fix smeserver.py not executing action because of wrong path [SME: 11047]
- fix error when key absent of a dict of smeserver plugin at clean stage [SME: 10931]
- avoid missing template error after removal of a rpm [SME: 10846]
- restart php-fpm services when needed [SME: 10873]
- applying patch [SME: 10690]
- fix NameError: global name 'yum_update_dbs' is not defined [SME: 6940]
- use yum-cron with autoupdate feature [SME: 10690]

These are either not SME modified Packages, or are kernel mods.

• clamav
• libprelude
• sendmail

The changelogs are written per package On behalf of the Koozali SME Server development team

- Compilation of release data is thanks to scripts developed by Ian Wells and substantially improved by Jean Phillipe Pialasse