334
edits
Changes
From SME Server
Jump to navigationJump to searchno edit summary
====Backups====
====Backups====
- Workstation Backup allows the day of the week to be specified on which a full backup occurs. This now works correctly for all days of the week.
- Workstation Backup allows the day of the week to be specified on which a full backup occurs. This now works correctly for all days of the week.
- To increase reliability of backups to a Microsoft Vista drive, a one second delay was added to the backup.
- To increase reliability of backups to a Microsoft Vista drive, a one second delay was added to the backup.
- Allow user setting of compression level for Desktop and Console Backups.
- Allow user setting of compression level for Desktop and Console Backups.
For example: config setprop backupconsole CompressionLevel -6
For example: config setprop backupconsole CompressionLevel -6
The default is -6, where -1 is fastest and -9 is optimal compression.
The default is -6, where -1 is fastest and -9 is optimal compression.
- In the console, under item 8, refer to removable media instead of USB device.
- In the console, under item 8, refer to removable media instead of USB device.
- After a restore from the console the post-upgrade event was not being performed.
- After a restore from the console the post-upgrade event was not being performed.
- Add an option to use Wake on LAN before starting Workstation Backup.
- Add an option to use Wake on LAN before starting Workstation Backup.
- Workstation Backup, report cifs mount errors.
- Workstation Backup, report cifs mount errors.
- Workstation Backup, be compatible with destinations that include spaces.
- Workstation Backup, be compatible with destinations that include spaces.
- Workstation Backup, remove temporary directory on success .
- Workstation Backup, remove temporary directory on success .
- Workstation Backup, add a choice to delete old backup before or after backup.
- Workstation Backup, add a choice to delete old backup before or after backup.
- Add support for Windows 8 domain joining & user login with a new registry file.
- Add support for Windows 8 domain joining & user login with a new registry file.
/server-resources/regedit/win8samba.reg
/server-resources/regedit/win8samba.reg
- New optional samba property smb{WideLinks}, valid values are 'no' or 'yes'. The current samba default is 'no'.
- New optional samba property smb{WideLinks}, valid values are 'no' or 'yes'. The current samba default is 'no'.
see http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html#WIDELINKS
see http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html#WIDELINKS
For example to enable samba Wide Links
For example to enable samba Wide Links
# config setprop smb WideLinks yes
# config setprop smb WideLinks yes
- Add windows network performance enhancements registry file that can help Windows slow logons.
- Add windows network performance enhancements registry file that can help Windows slow logons.
/server-resources/regedit/windows_samba_performance.reg
/server-resources/regedit/windows_samba_performance.reg
- Two new optional samba properties smb{ServerMaxProtocol} & smb{ClientMaxProtocol}.
- Two new optional samba properties smb{ServerMaxProtocol} & smb{ClientMaxProtocol}.
For example: # config setprop smb ServerMaxProtocol NT1
For example: # config setprop smb ServerMaxProtocol NT1
- Remove the samba_audit specific logrotate configuration which was causing an email to be sent to the admin every night.
- Remove the samba_audit specific logrotate configuration which was causing an email to be sent to the admin every night.
- Enable smb auditing per ibay, it is disabled by default.
- Enable smb auditing per ibay, it is disabled by default.
Auditing is enabled via
Auditing is enabled via
# db accounts setprop ibayname Audit enabled
# db accounts setprop ibayname Audit enabled
# signal-event ibay-modify ibayname
# signal-event ibay-modify ibayname
- Prevent emailing about the normal, weekly, checks of RAID arrays
- Prevent emailing about the normal, weekly, checks of RAID arrays
- Update ServerName (Samba netbios name) when SystemName is updated
- Update ServerName (Samba netbios name) when SystemName is updated
- Workaround a deficiency in the proftpd package where it does not handle long lines correctly in its configuration file. This caused FTP to fail when large numbers of local networks were configured.
- Workaround a deficiency in the proftpd package where it does not handle long lines correctly in its configuration file. This caused FTP to fail when large numbers of local networks were configured.
- Ensure Deny from all is on its own line in 15LimitLOGIN
- Ensure Deny from all is on its own line in 15LimitLOGIN
====LDAP (Optional in SME 8.1, and considered experimental)====
====LDAP (Optional in SME 8.1, and considered experimental)====
- Fix init-account script when LDAP auth is enabled.
- Fix init-account script when LDAP auth is enabled.
- Fix group creation/modification when LDAP auth is enabled.
- Fix group creation/modification when LDAP auth is enabled.
- The ldap.init script which starts just after the ldap service waits for slapd to be to available. The logic to check if slapd is ready was corrected.
- The ldap.init script which starts just after the ldap service waits for slapd to be to available. The logic to check if slapd is ready was corrected.
- Add missing dependency on openldap-servers.
- Add missing dependency on openldap-servers.
- The ldap log files can take significant space on servers with a lot of users. This update will ensure old BDB log files are removed.
- The ldap log files can take significant space on servers with a lot of users. This update will ensure old BDB log files are removed.
====Mail Server====
====Mail Server====
- Fetchmail multidrop mode follows TCPPort setting.
- Fetchmail multidrop mode follows TCPPort setting.
- Avoid use of unitialised variables in smtp migrate fragments.
- Avoid use of unitialised variables in smtp migrate fragments.
- Allow smtp_auth_proxy to use port 587 with STARTTLS.
- Allow smtp_auth_proxy to use port 587 with STARTTLS.
- Due to SMTP servers not handling SMTP Auth well enable the use of a blacklist to remove the troublesome methods.
- Due to SMTP servers not handling SMTP Auth well enable the use of a blacklist to remove the troublesome methods.
For example to remove CRAM-MD5:
For example to remove CRAM-MD5:
# db configuration setprop smtp-auth-proxy Blacklist "CRAM-MD5 DIGEST-MD5"
# db configuration setprop smtp-auth-proxy Blacklist "CRAM-MD5 DIGEST-MD5"
# sv t /service/smtp-auth-proxy
# sv t /service/smtp-auth-proxy
- imap-relocate-maildirs action was removed.It was no longer necessary and was sometimes very slow.
- imap-relocate-maildirs action was removed.It was no longer necessary and was sometimes very slow.
- The soft memory limits for pop3 and pop3s were increased. Two new optional database properties pop3{MemLimit} and pop3s{MemLimit}
- The soft memory limits for pop3 and pop3s were increased. Two new optional database properties pop3{MemLimit} and pop3s{MemLimit}
For example to increase the memory limit
For example to increase the memory limit
# config setprop pop3 MemLimit 50000000
# config setprop pop3 MemLimit 50000000
# expand-template /var/service/pop3/env/MEMLIMIT
# expand-template /var/service/pop3/env/MEMLIMIT
- New optional qmail property qmail{ConcurrencyLocal} and default for /var/qmail/control/concurrencylocal changed to 20.
- New optional qmail property qmail{ConcurrencyLocal} and default for /var/qmail/control/concurrencylocal changed to 20.
For example to decrease the local concurrecny limit
For example to decrease the local concurrecny limit
# config setprop qmail ConcurrencyLocal 6
# config setprop qmail ConcurrencyLocal 6
- Modify domain style pseudonym pointing to user with dot in name.
- Modify domain style pseudonym pointing to user with dot in name.
- Accept messages with no body and no trailing \n after headers.
- Accept messages with no body and no trailing \n after headers.
- Prevent email delivery failure with required updates for perl-Net-DNS and qpsmtpd.
- Prevent email delivery failure with required updates for perl-Net-DNS and qpsmtpd.
- New optional spamassassin property spamassassin{MaxMessageSize} to allow for spamassassin qpsmtpd's plugin size limit to be changed.
- New optional spamassassin property spamassassin{MaxMessageSize} to allow for spamassassin qpsmtpd's plugin size limit to be changed.
For example to also scan larger files
For example to also scan larger files
# config setprop spamassassin MaxMessageSize 1500000
# config setprop spamassassin MaxMessageSize 1500000
- Make CipherSuite secure by default and tls ciphers defaults to disallow SSLv2.
- Make CipherSuite secure by default and tls ciphers defaults to disallow SSLv2.
- Fix how qpsmtpd tags spam email.
- Fix how qpsmtpd tags spam email.
- Add template to extend the functionality of SSL verified certificate to IMAP and SSMTP transactions
- Add template to extend the functionality of SSL verified certificate to IMAP and SSMTP transactions
- Update ClamAV to release 0.97.8.
- Update ClamAV to release 0.97.8.
- Load TextCat plugin if ok_languages is enabled.
- Load TextCat plugin if ok_languages is enabled.
====Server manager====
====Server manager====
- Do not load mod_ssl for httpd-admin as it is not needed and creates log noise.
- Do not load mod_ssl for httpd-admin as it is not needed and creates log noise.
- If the browser used to access the server-manager used lower case for %escapes a blank screen would be shown. The server manager URL processing is now case-insensitive for %escapes.
- If the browser used to access the server-manager used lower case for %escapes a blank screen would be shown. The server manager URL processing is now case-insensitive for %escapes.
- Fix more uninitialized warnings in log (httpd/admin_error_log) from HTML.pm.
- Fix more uninitialized warnings in log (httpd/admin_error_log) from HTML.pm.
- Remove log noise (httpd/admin-error-log) when accessing the Create Starter Web panel in server-manager
- Remove log noise (httpd/admin-error-log) when accessing the Create Starter Web panel in server-manager
====Webmail and Groupware====
====Webmail and Groupware====
- If IMAP is disabled in the server manager email panel, IMAP will now listen to the loopback interface to allow webmail to function.
- If IMAP is disabled in the server manager email panel, IMAP will now listen to the loopback interface to allow webmail to function.
- Webmail no longer uses SSL over loopback interface.
- Webmail no longer uses SSL over loopback interface.
====Web Server====
====Web Server====
- Disable index listing of Apache icons folder.
- Disable index listing of Apache icons folder.
- PHP's magic_quotes are deprecated so should no longer be used. The php.ini will now have "magic_quotes Off" instead of fully removing it as the default is ON.
- PHP's magic_quotes are deprecated so should no longer be used. The php.ini will now have "magic_quotes Off" instead of fully removing it as the default is ON.
- Change wording of Software Update button.
- Change wording of Software Update button.
====Other fixes and updates====
====Other fixes and updates====
- Remove old System Name from the Hosts DB
- Remove old System Name from the Hosts DB
- Fix warning in /var/log/messages by correctly initialising the relevant variable. The warning related to the HW Address of a NIC.
- Fix warning in /var/log/messages by correctly initialising the relevant variable. The warning related to the HW Address of a NIC.
- user-modify-unix script could take many minutes, it has now been optimised to take only seconds
- user-modify-unix script could take many minutes, it has now been optimised to take only seconds
- The memory limit for pppoe was increased to 100Mb.
- The memory limit for pppoe was increased to 100Mb.
- On upgrading from SME Server 7 to SME Server 8 an email could be sent to the admin everyday due to a modified /etc/updatedb.conf file. This update ensures the correct /etc/updatedb.conf file.
- On upgrading from SME Server 7 to SME Server 8 an email could be sent to the admin everyday due to a modified /etc/updatedb.conf file. This update ensures the correct /etc/updatedb.conf file.
- Updated SME root server template as D-root changed its IPv4 address on the 3rd of January.
- Updated SME root server template as D-root changed its IPv4 address on the 3rd of January.
- The console would crash when no value is entered as static gateway in servergateway(-private) mode. Improved error-checking in isValidIP() prevents this.
- The console would crash when no value is entered as static gateway in servergateway(-private) mode. Improved error-checking in isValidIP() prevents this.
- Use file locking to make sure that only one copy of the masq script is running at any particular time.
- Use file locking to make sure that only one copy of the masq script is running at any particular time.
- Add python-hashlib so we can read newer repodata signatures.
- Add python-hashlib so we can read newer repodata signatures.
- Point mirrorlist to mirrorlist.contribs.org
- Point mirrorlist to mirrorlist.contribs.org
- Increase memory limit for ntpd .
- Increase memory limit for ntpd .
