SME Server:10.1

repoForEL6

     https://bugs.koozali.org/

scp -P zzzz /smeserver.tgz newserverIP:/

mount /media/usbdisk
cp /media/usbdisk/Backup-date-folder/smeserver.tgz /

cd /
signal-event pre-restore
tar -C / -xzvf smeserver.tgz
/sbin/e-smith/signal-event post-upgrade
/sbin/e-smith/signal-event reboot

cd /
rm smeserver.tgz

[root@mySME9]#ssh root@mysme10 -c aes256-ctr
[root@mySME9]#sshfs -o Ciphers=aes256-ctr root@mysme10:/media/extra /mnt/backup/
[root@mySME9]#rsync  -e "ssh -c aes256-ctr" -av /var/spool/spamd/ root@mysme10:/var/spool/spamd/
[root@mySME9]#scp -c aes256-ctr  /etc/zabbix/zabbix_agentd.conf root@5.39.81.171:/etc/zabbix

mkdir /root/httpd.conf
mv /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf /root/httpd.conf/
systemctl restart httpd-e-smith.service

httpd -t

grep -r "pattern"  /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf

# php -v
PHP 5.4.16 (cli) (built: Apr  1 2020 04:07:17) 

yum update smeserver-yum --disablerepo=* --enablerepo=smeos,smeupdates
signal-event yum-modify

db yum_repositories print
db yum_repositories delete repoForEL6

db yum_repositories show

 ping your.gate.way.ip

# ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1) 56(84) bytes of data.
64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=6.11 ms

# dig google.com +short
16.58.213.174
# dig mirror.centos.org +short
212.69.166.138

<IfModule mod_access_compat.c> 

<IfModule !mod_authz_core.c>

<IfModule mod_authz_core.c>
   #httpd 2.4 auth module
   Order Allow,Deny
   Deny from all
</IfModule>
<IfModule mod_access_compat.c>
    # mod compat is enabled here so this will be interpreted and lead issue
</IfModule>

<IfModule mod_authz_core.c>
    # Apache 2.4
    Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
   # Apache 2.2 
   Order Allow,Deny
   Deny from all
</IfModule>

Order Allow,Deny => 
Order Deny,Allow => 
Deny from all => Require all denied
Allow from x.x.x.x => Require ip x.x.x.x
Allow from all => Require all granted
Require valid-user => Require valid-user
Require user admin => Require user admin

Satisfy ANY
Allow from 127.0.0.1
Require user admin

Satisfy ALL
Allow from 127.0.0.1
Require user admin

<RequireAny>
  Require ip 127.0.0.1
  Require user admin
</RequireAny>

<RequireAll>
  Require ip 127.0.0.1
  Require user admin
</RequireAll>

find /home/e-smith/files/ibays/ -iname .htaccess  |xargs  egrep "allow|deny|order|satisfy|mod_access_compat.c"  -i --color=auto

egrep "allow|deny|order|satisfy|mod_access_compat.c"  -i --color=auto -r /etc/e-smith/templates-custom/etc/httpd/conf/

 create generik smb.service service

 add check so max always greater than min

 New property TLSProtocolMin
 Ciphers are now ordered with stronger first

 similar changes in contrib smesevrer-fetchmail

 would delete any account named with the string before the dot

 orphaned pseudonyms are associated to admin

 this allows to disable of type of delivery

 cleanup preset file

 take 3

 commented out load_plugins see https://github.com/smtpd/qpsmtpd/issues/288.

 added properties AlertBrokenExecutables AlertExceedsMax AlertOLE2Macros
 AlertPartitionIntersection AlertPhishingCloak and AlertPhishingSSLMismatch
 with default no
 added property HeuristicAlerts with default yes

 fix from Graeme Fleming

 move clamd.conf to scan.conf
 remove alias for clamtop
 add a wrapper for clamdscan to force --fdpass

 few improvements

 increase softlimit to 50000000.

 filtering again fetchmail originating mails

 this will be a temp fix by redefining MIME::Parser::Filer::output_path
 until it has been fixed upstream

 remove reset-unsavedflag

 this avoid user, group or pseudonyms for internal purpose to be reachable
 from outside

 better ciphers order.

 e-smith-viewlogfiles
 perl-CGI-FormMagick

 move fragment so syntax is similar to message

 this will also avoid the loss of parameter if we log with a different virtualhost
 horde preference is now stored with the SME username without @domain

 also we can now force Primary domain to use as default email
 we can strip heading string from virtualhost domain to create email
 default identity email will update as long as no other identity is created for the user

 use size to force log rotate before normal delay

 previously provided by webapps-common

 usefull for VPN over port 443

 default on self generated cert

 changed sigusr1 used in events to reload as defined in the unit file

 patched selftests.sh to avoid net/resolve_ipv4addr.c test which fails under mock
 added BuildRequires glibc glibc-static glibc-devel mtools autoconf
 commented out files for devel /usr/local/bglibs/lib/*.lib and /usr/local/bglibs/lib/*/*.a
 as they fails.

 template for /etc/systemd/journald.conf

 template for /etc/logrotate.conf
 use of size to limit max size of file and rotate earlier

 add local hosts in self signed cert alt subjects
 modSSL property to disable hosts domains addition : AddDomains AddHosts
 default is enabled when empty

 update key / crt if not signed with the right key size
 default to self signed if custom cert and key are not files or not rigth type
 add perl module to help handle certificates and keys
 TODO: check if both key and cert are related, if not default to self signed

 they got migrated as part as normal backup restore

 unless a power outage, as long as you reboot, halt or shutdown systemd will
 be in sync

 if not we use self generated

 now run rc.local file as part of the event

 removing daemontools requirement

 fix cvm-pre script permission

 use new require syntax for httpd 2.4

 now SSLRequireSSL will force SSL to the html ibay directory and redirect to https

 thanks to bunkobugsy for this patch

 add +x to ExecStartPRe script

 on sme10 systemd has ntpd disabled by default

 on sme10 systemd has ntpd disabled by default

 remove remoteVPNSubnet property added VPNif property

 also dropin file not expanded on install fixed

 change group of pem file to radiusd

 remove noise from spec file

 deleting yum{eolversion} if for previous release or not yet eol
 better handling of conditions

 now a temp event is created
 also better logging, better handling of update vs removal

 now smeserver.py plugin call the service
 yum-modify can use the service restart
 yum.service is its own service, not called by local.service

 lower noise on forced restart

 run all actions with post-upgrade as default event

- Compilation of release data is thanks to scripts developed by Ian Wells and substantially improved by Jean Phillipe Pialasse

Koozali SME Server : STABLE releases
Version	DVD ISO	Checksum		Netinstall ISO	Checksum
SME Server 10.1 Release notes Addendum EOL June 30th, 2024
	x86_64	MD5	SHA1	x86_64	MD5	SHA1
Direct link to the Koozali SME Server mirrors and how to become a mirror. SME Server requires a DVD/CD, a USB Stick/Disk can also be used. The Koozali Foundation Inc. would like to thank all of our sponsors and partners.

	Note:
	Koozali SME Server users should upgrade production servers to this Release

	Note:
	In-place upgrades from SME 9.# to SME 10.x using yum or CD are not supported due to design constraints imposed by CentOS. It is necessary to backup the old server & then restore to the new server. Contribs will need to be reinstalled.

	Tip:
	After a Restore to new hardware, networking may not be functional. This is caused by the restored NIC settings being incorrect for the NIC's in the new hardware. To fix this, login as admin & from the console menu select Configure this server. Step through the screens & choose the new hardware network card (NIC) drivers, & leave other settings unchanged.

	Tip:
	You can dismiss the restore from USB on initial boot and access it later from the console as long as you do not create new group on you freshly intalled SME10.x.

SME Server:10.1

Koozali SME Server 10.1 Release Notes "Justine"

The Koozali SME Server project

Volunteering

Financial donations

Commercial usage

Download

About SME Server

Notes

Thanks

Installing

Upgrading

Upgrade via Console backup to USB drive

Upgrade via server manager backup to Desktop or Workstation (USB or network)

Upgrade using command line restore via ssh or USB

Reinstall Contribs after restore

Delete & Reconfigure Manual tweaks

Known issues upgrade from SME9

I can not ssh/rsync/scp/sshfs from my SME9 to SME10 to migrate

High CPU load for ssl-param /dovecot on initial boot

No access to http or server-manager

I need a newer/supported version of PHP

I can not access to my ibay from my windows XP

I can navigate to my server using its ip, but the netbios name does not work, and it does not show in my network

I am not able to update - I get some el6 packages proposed to be part of the updates

I am not able to update and yum seems to try to resolve to ip v6

Impossible to install got error ValueError: name already in use

I do not have the default raid 1 after the server installed as I expected; I have set default partitioning in the gui

Known issues updating from SME10.0

Unable to access to a specific folder in my ibay using http

detect where something need to be changed in my ibays

detect where something need to be changed in my templates-custom fragments

Access to a specific folder in my ibay using http while I should not be able to access it

Known issues using ISO installer

Raid 1

My two disks ended up as a huge LVM virtual disk

Installer crashes on first GUI screen

netinstall ends up with a Centos minimal

Koozali SME Server 10.1 Changelog

Major changes in this release

Detailed changes in this release

Backups

File Server

LDAP

Localisation

Mail Server

Server manager

Webmail and Groupware

Web Server

Other fixes and updates

Navigation menu

Search