Change log from eBox Platform 1.4 to Zentyal 2.0

antivirus

• Add support for updates using the system wide defined proxy
• Avoid errors in ebox.log if /etc/cron.hourly/freshclam not exists
• New config templates from the lucid version of ClamAV

asterisk

• Commercial VoIP calls message disabled until service available again
• Zentyal rebrand
• Improve i18ned message for VoIP credit
• Bugfix: validatedTypedRow on Meetings model failed when making empty an existing field
• Delete enableService method override as it's useless
• Make dahdi depend optional and show a message with instructions on how to install it
• Added bridged mode support in firewall helper
• Updates migration script for adding service on read-only and with the same name that the menu item
• Updates modules.conf template for lucid
• Bug fix: Migration script 0002_migrate_ldap_schema is not run unless the module is configured

ca

• Zentyal rebrand
• Fixed CA server error in user corner
• Adds setServiceRO and updateCN methods to Certificates
• Allow new subjAltNames on renewCertificate, disabled there a broken external excepcion
• Generate PKCS12 keystore with private key and certificate using empty export password and add it to download archive
• Bugfix: Only ASCII alphanumeric characters are allowed in common name to workaround the yet not fixed issue with UTF-8 and OpenSSL
• Give support for subject alternative names: the available types are DNS, IP address and email address
• Add revokation reason listing certificates
• Fix enconding for CA HTML templates
• Cancel button works again when revoking and renewing a certificate
• Bugfix: DIRMODE changed to 0751 and migration script to fix existing deployments

dhcp

• Zentyal rebrand
• Added missing NetBIOS node type when setting the WINS server
• Improved usability using None search domain by default.
• Bugfix: DHCP log works now if the dhcp client sends a host name as suggested
• Bugfix: Fixed address names must be valid domain names to enable dynamic DNS feature.

dns

• Set @ to all domain-wide records (A, NS) to avoid issues regarding to order in the configuration file
• Added support for internal networks allowed to recurse the caching server.
• Add support for topdomain record in addDomain method.
• Add TCP/53 to dns service

ebackup

• Zentyal rebrand
• Target is now mandatory in any case to decide if the backup configuration is complete.
• Status cache is regenerated when restarting the module and before doing a backup.
• Removed information about obsolete eBox remote backup

ebox

• Fixed redis bug with dir keys prefix
• Improved login page style
• New login method using PAM instead of password file
• Allow to change admin passwords under System->General
• Avoid auto submit wizard forms
• Wizard skip buttons always available
• Rebranded post-installation questions
• Added zentyal-conf script to get/set redis config keys
• Added transition effect on first install slides
• Zentyal rebrand
• Added web page favicon
• Fixed already seen wizards apparition
• Fixed ro module creation with redis backend
• Use mason for links widgets
• Use new domain to official strings for subscriptions
• Added option to change hostname under System->General
• Show option "return to dashboard" when save changes fails.
• Added more tries on redis reconnection
• Fixed user corner access problems with redis server
• writeFile* methods reorganized
• Added cron as dependency as cron.hourly was never executed with anacron
• Improvements in consolidation of data for reports
• Fixed gconf to redis conversion for boolean values
• Improved migrations speed using the same perl interpreter
• Redis as configuration backend (instead of gconf)
• Improved error messages in ebox-software
• Set event source to 256 chars in database to adjust longer event sources
• Progress bar AJAX updates are sent using JSON
• Fixed progress bar width problems
• Fixed top menu on wizards
• Improved error message when disconnecting a not connected database
• Abort installation if 'ebox' user already exists
• Bugfix: IP address is now properly registered if login fails
• Added template tableorderer.css.mas
• Added buttonless top menu option
• Bugfix: Save all modules on first installation
• Bugfix: General ebox database is now created if needed when re/starting services
• Bugfix: Data to report are now uniform in number of elements per value. This prevents errors when a value is present in a month and not in another
• Bugfix: Don't show already visited wizard pages again
• Bugfix: Avoid error when RAID is not present
• Bugfix: Add ebox-consolidate-reportinfo call in daily cron script
• Bugfix: Called multiInsert and unbufferedInsert when necessary after the loggerd reimplementation
• Bugfix: EBox::ThirdParty::Apache2::AuthCookie? and EBox::ThirdParty::Apache2::AuthCookie::Util package defined just once
• Added util SystemKernel?
• Improved progress indicator
• Changes in sudo generation to allow sudo for remote support user
• Initial setup wizards support
• Reimplementation of loggerd using inotify instead of File::Tail
• Asynchronous load of dashboard widgets for a smoother interface
• Changed dbus-check script to accept config file as a parameter
• Function _isDaemonRunning works now with snort in lucid
• Javascript refreshing instead of meta tag in log pages
• Updated links in dashboard widget
• Add package versions to downloadable ebox.log
• Fixed postgresql data dir path for disk usage with pg 8.4
• GUI improvements in search box
• Security [ESN-1-1]: Validate referer to avoid CSRF attacks
• Added reporting structure to events module
• Added new CGI to download the last lines of ebox.log
• Bugfix: Catch exception when upstart daemon does not exist and return a stopped status
• Added method in logs module to dump database in behalf of ebackup module
• Bugfix: Do not check in row uniqueness for optional fields that are not passed as parameters
• Improve the output of ebox module status, to be consistent with the one shown in the interface
• Add options to the report generation to allow queries to be more flexible
• Events: Add possibility to enable watchers by default
• Bugfix: Adding a new field to a model now uses default value instead of an empty value
• Added script and web interface for configuration report, added more log files to the configuration report
• Use built-in authentication
• Use new upstart directory "init" instead of "event.d"
• Use new libjson-perl API
• Increase PerlInterpMaxRequests? to 200
• Increase MaxRequestsPerChild? (mpm-worker) to 200
• Fix issue with enconding in Ajax error responses
• Loggerd: if we don't have any file to watch we just sleep otherwise the process will finish and upstart will try to start it over again and again.
• Make /etc/init.d/ebox depend on $network virtual facility
• Show uptime and users on General Information widget.

egroupware

• Not officially supported anymore as it is no longer maintained by Debian/Ubuntu?
• Small cleanup on management scripts on tools/
• Update header.inc.php.mas template to sync latest header.inc.php.template version and use session files
• Support for postgresql 8.4 (lucid) instead of 8.3
• Bug fix: LDAP port on slave was not properly set everywhere

firewall

• Zentyal rebrand
• Use modelClasses API for firewall rule tables
• Increased size of description fields for rules
• Set iptables rule properly to fix PPPoE problems with some websites
• Bridged mode support
• New logging feature for port forwarding rules
• Only allow safe ICMP types everywhere
• New firewall table containing rules added by eBox services
• Bug fix: port forwarding now works with PPPoE
• Bug fix: openVPN interfaces are added as internal interfaces to iexternal and iexternalmodules (Closes #1758)
• Bug fix: allow only safe ICMP types and insert the rules after user rules so these override the default ones. Drop INVALID packets first too
• Added TCP/53 to DNS rules in fdns and ointernal chains
• Inverse match is not longer allowed for service 'any'

ids

• Consolidation for reports now discriminates between priority levels
• Bugfix: Snort doesn't fail to start when monitoring multiple interfaces
• Home nets list is hardcoded to default now
• Include snort.conf from the snort lucid package (2.8.5.2)

jabber

• Zentyal rebrand
• HTML fixes on userAddon.
• Completely new Jabber module using the MVC framework and ejabberd.
• Added bridged mode support in firewall helper.
• Configuration files updated for lucid.

l7-protocols

• Added l7 filter userspace package dependencies

mail

• Added Zarafa integration with mail module
• Zentyal rebrand
• Bugfix: external accounts retrieval works again in lucid
• New setup wizard
• Use ssl-cert package to create default certificates as all other eBox modules should be doing
• Added bridged mode support in firewall helper
• Update configuration templates with the newest versions from lucid
• Bugfix, dovecot ldap auth now works when using AD Sync
• Bugfix, using standard default smtp banner to avoid breaking banner checks. Thanks to ivo@… for pointing this
• Now event's mail dispatcher uses configured mailname instead of non-qualified hostname
• Firewall default policy allows mail system from external networks because is the expected and usual thing
• Bugfix, is not longer allowed a external alias with the same address than a existent account
• Bugfix, addColumn message_type on mail_message table which should have been added on migration 6
• Bugfix: changed location of default sieve script to a directory writable by LDA
• Added '@' character to virtual domain select control labels
• Bugfix: allow multiple alias to the same external account

mailfilter

• Zentyal rebrand
• Added bridged mode support in firewall helper
• Bugfix: data for CC's SMTP report was not correctly formated
• Update configuration templates with the configuration files from lucid
• Bugfix: fixed training with uploaded files
• Bugfix: removed duplicates from spamassasin trusted_networks variable

monitor

• Bugfix: Several thresholds for the same measure now works
• Bugfix: Removing a maximum/minimum when updating a threshold works again
• Added titles with breadcrumbs for threshold configuration and monitor watchers
• Allow to create thresholds differencing them only in the data source
• Monitor alerts now shows the gauge measure including several suffixes and prints only, if required, 3 decimal points
• Bugfix threshold configuration when a measure has been removed
• Add millisecond and bps gauge types
• Add include for more configuration files
• Register measures on demand using a ini file
• Zentyal rebrand
• Notify when values return to normal as info event
• Add upstart script in order to workaround a packaging bug in Lucid
• Make notification work again in Lucid
• Bugfix: The notificate passed the classes correctly to event watcher using escaping
• Disabled collectd.log to avoid infinite growth, syslog is still used
• Added exception class for threshold overrides
• Bugfix: solved problem when adding thresholds without using a CGI
• Use init.d script instead of upstart to avoid errors in syslog
• Removed loading of no longer used perl plugin
• Depends on @remoteservices@ package if the host is subscribed to eBox Control Center to send them the stats using the appropiate IP address to send stats to
• Add stopped on purpose file to stop the service without sending an event alerting with this situation

network

• Fixed network wizard interface and logic
• Added options for internal ifaces in wizard configuration
• Bug fix: disabling global proxy configuration didn't work
• More global proxy configuration and domain configuration improvements.
• Zentyal rebrand
• Do not show unreplaced {link} variable in dashboard if not available
• Add support to define a system wide proxy
• New setup wizard
• Bridged mode support
• Fixed failover problems with undefined default gateway
• Traceroute works again in network diagnostic tools
• Using iptables statistic module instead of route for better traffic balancing
• Fixed nasty bug of traceroute in Diagnostic Tools with invalid host
• Flush cache when regenerating routes
• Bug fix: use '>=' and not '>' to check if a test exceeds $maxRatio in Failover watcher
• Bug fix: do not run failover probes when all are disabled because they enable a disabled gateway.
• Add and use EBox::NetworkObserver::ifaceMethodChangeDone to tell observers that a configuration method change has been carried out. So far observers were only notified right before the change takes place.
• Add _notifyChangedIface() to factor code that calls observer to notify ifaceMethodChanged and ifaceMethodChangeDone
• Add etherIface to fetch the ethernet interface from a ppp interface
• Bug fix: do not mess with ebox's apache packets in failover test
• Make failover test more robust
• Added internal/external property to interfaces widget

ntp

• Zentyal rebrand
• Preconfigure the three NTP servers.

objects

• Forbid some confusing object's names

openvpn

• Zentyal rebrand
• Added Mac OS X option to download bundle (same bundle as linux)
• Added bridged mode support in firewall helper
• Use a different persistent connection file for each daemon instead of sharing a common one
• Better messages for upload bundle errors
• Added support for OpenVPN servers to listen only on a PPPoE iface
• Bugfix: Escape some files to make download client bundle work again if the server name has spaces
• Bugfix: Escape some files to allow spaces in server names
• Make initializeInterfaces() public
• Bugfix: ebox itself addresses are not accepted in VPN clients as server addresses
• Make changes to work with /etc/init upstart

printers

• Zentyal rebrand
• Use CUPS interface instead of eBox to add and manage printers
• Do not modify /etc/cups/mime.convs as it doesn't exist anymore

radius

• Zentyal rebrand
• Bugfix: update configuration syntax to new FreeRADIUS version
• Adds integration with ebox-ca
• Bugfix: don't use bootstrap certificate generation as breaks snakeoil certificates
• Disabled certificate creation until conflict with pgsql is solved
• Updated config files for lucid

remoteservices

• Fixed bug cleaning CC control jobs, added facilities for internal and no-CC job
• Check package installed with libapt-pkg-perl
• Mark squid as changed, if enabled, when subscription process is done
• Add installer script execution after saving changes to make sure VPN is up and running
• Bugfix: Speed up the subscription process when VPN is not set up yet
• Zentyal rebrand
• I18n the commercial message
• More robust report method
• New commercial messages
• Bugfix: Test if /var/run/screen exists before changing its permissions
• Bugfix: Work when there is nothing to report yet
• Fix bug to pass conf keys to the execute procedures after extracting the bundle
• Password strength checker done every week included in report and alert generated with the result
• Added support for ebox-qa apt sources
• Added support for scripts from subscription bundle
• Subscription enables monitor and logs module
• Bundle action occurs now when reloading the bundle (before only when subscribing), adapted to remoteservices version requirement for bundle
• Adapted to use preferences.d directory for QA's apt configuration
• Password strength checker done every week included in report and alert generated with the result
• Added support for ebox-qa apt sources
• Added support for scripts from subscription bundle
• Subscription enables monitor and logs module
• Bundle action occurs now when reloading the bundle (before only when subscribing), adapted to remoteservices version requirement for bundle
• Adapted to use preferences.d directory for QA's apt configuration
• Reload bundle while configuring the package and once a week to support eBox CC migration automatically (new keys) to make migration process even smoother
• Modified order in menu, now Control Center is right after software
• Security [ESN-1-1]: Added proxyDomain method needed for the CSRF fix
• Delete no longer available cron jobs when synchronising
• Use a new way to push stats to eBox Control Center by using collectd directly instead of using a cron job and xdelta. Exposed the required data to monitor module to work together.
• Added restriction to CC VPN to remote support feature
• Pass data-file for executing jobs
• Added class for easier parsing of CSV files
• Set monitor service as stopped on purpose to notify monitor stats to eBox Control Center
• Set maximum number for eBox common name to 32
• Bugfix: Found a lost method makes the monitorization work again
• Allow read-only script sessions
• Added class for easier parsing of CSV files
• Added remote support option

samba

• Rebranded domain name and description
• Zentyal rebrand
• On smb.conf.mas: use client driver = no to allow printer server to give clients the uploaded drivers.
• Avoid antivirus scan on large files to fix read problems
• Add a keyconf to Samba listen on external interfaces
• Added more report subsections
• Move NSS from ebox-samba to ebox-usersandgroups
• Home directories are under /home now
• Shares permissions model now states if the ACL is for a user or a group
• Bug fix: set proper permissions on guest shares
• Bug fix: avoid parse of non-word characters in vscan log entries
• Added bridged mode support in firewall helper
• Bug fix: do not add acl attribute in /etc/fstab when using xfs
• Enforce uniqueness of 'user/group' filed in shares permissions
• Enable full audit feature as it's working again in samba 3.4.6
• Allow guest shares
• Add support for file system ACLs. Modify /etc/fstab accordingly. Add dependency on acl.
• Bug fix: check if a group has been deleted when configurer printers, otherwise users end up with a blank screen when granting printer permissions
• Use the new upstart scripts that the Ubuntu samba packages ships in Lucid

services

• Zentyal rebrand
• Add serviceFromPort method to get the service which has a port
• Add setMultipleService method to update changes in services with multiple ports
• Add setMultipleService method to update changes in services with
• Add 'insertPosition' => 'back' to ServiceConfigurationTable? to allow _exposedMethods hacks. New exposedMethods to work with services addSrvConf, delSrvConf and srvConf

software

• Update list button gives feedback about the result now
• Profile descriptions are now translatable
• Updated installation slides
• Visual improvements in package selection page
• Zentyal rebrand
• Improve i18ned messages for QA updates
• In basic mode of ebox components installed metapackages appear with a tick
• Save changes automatically when a package is deleted
• Now ebox-software tables are ordered alphabetically
• Show package descriptions instead of package names in the confirmation screen
• Show update list button
• Skip install button
• Delete big space in update system
• Show information while downloading packages
• New slides translated to Spanish
• Bugfix: filter and order in ebox components table work properly now
• Added button to update packages list
• Bugfix: now ebox-apt-update throw exceptions
• Bugfix: solved bug in system updates
• Changed css file of tableorderer
• Template based top buttonless menu
• Show top menu buttons in ebox software (except on first install)
• Fixed bug in fetchAllPkgs
• Set preferences differently in Lucid
• Total redesign of the Software Management improving look and usability
• Starting hour of automatic operations is configurable
• Ready for QA repository support
• Bug fix: system updates work properly now

squid

• Rebranded access denied page
• Add SNMP server from Squid when required
• More global proxy configuration and domain configuration improvements
• Zentyal rebrand
• Running squid daemons are killed when starting ebox proxy if pidfile exists
• Fixed dansguardian/squid crash when logrotate was daily executed
• Fixed profile mime types migrations
• Added upstart script for squid to avoid first start problems
• Fixed problems with ACL names
• Fixed problem with whitespaces in users/groups/objects in squid configuration file
• Revert range_offset_limit option to default value because was causing troubles with streaming sites.
• Added bridged mode support in firewall helper
• Bugfix: Delay pools ordering works on UI
• Bugfix: use default squid init script instead of old missing ebox.squid
• Maximum file descriptor option in now set in /etc/default/squid
• Bugfix: Log exception hits in dansguardian so whitelisted domains are now logged properly
• Bugfix: Get virtual interfaces as well to set firewall rules
• Bugfix: Make some checks in delay pools to avoid misconfiguration, do not write the disabled rules and set the proper labels and more detailed explanation
• New bandwidth throttling support with delay pools
• Bugfix: trim URL string as DB stores it as a varchar(1024) (Log)
• Disabled ban URL regexes
• Added filter profile per object
• Bugfix, breadcrumbs triggered old problem with parent method in DomainFilterCategories? model, so we enable again the old workaround to avoid this error
• Add new information about saved bandwidth to the reports
• Fixed bug in filter profile by object with network addresses
• Customized Dansguardian blocked page template
• Exclude localnetworks from bandwidth throttling
• Added flash MIME types to default MIME types
• Squid default cache_mem set to 128 MB
• New option to configure maximum_object_size which defaults to 300 MB
• Add refresh_pattern options for Microsoft Windows, Debian and Ubuntu updates
• Removed dead code in dumpConfig/restoreConfig methods
• In configuration report mode the module does not longe include the domain lists archives

trafficshaping

• Bugfix: l7-based rules can now be combined with port-based rules
• Bugfix: There is no more duplicated iptables commands
• Start class identifiers in 0x300
• Flush previous rules does not launch a misleading exception anymore
• Zentyal rebrand
• Fixed l7 chains creation for virtual ifaces
• Removed unused postinst migrations
• Migrated l7 filter to userspace
• Bug fix: Check against objects in edit rules works again
• Bug fix: Return if changed if it really happens any change in the model for Interface Rate
• Bug fix: Return 0 if the interface is an internal one from TrafficShaping::uploadRate method
• Bug fix: implement interfaceChangeDone to handle transitions from static -> nonset. Remove relevant entries from InterfaceRate? and TS models and mark modelManager as changed.
• Bug fix: don't create builders when there aren't enough interfaces
• Add support for ppp configured interfaces
• Disable MAC filter based rules

usersandgroups

• Fixed failed login error on user corner
• Default login_shell under PAM Settings UI instead of 80users.conf
• Replaced /bin/false with /usr/sbin/nologin as default shell
• Some refactorizations centered in safer LDAP connections and defensive code
• More info link added in wizard
• Zentyal rebrand
• Removed NSS in slave configurations
• Nasty bug page replaced by the new eBox error page
• Fixed user corner access problems with redis server
• LDAP master creation optimized and less error-prone
• Bug fix: adding a user name with spaces no longer fails
• Move NSS from ebox-samba to ebox-usersandgroups
• Home directories are under /home now
• New options to configure shell and home directory umask
• New setup wizard
• Bug fix: fixed dbus init for usercorner
• Bug fix: fixed nasty bug with the last version of openldap in lucid
• Bug fix: do not call processDir if there are no slaves in slave-sync
• Bug fix: ebox-usersandgroups-reinstall now unconfigures all ldap modules
• Bug fix: updateSchema() returns unless the schema to update is available
• Bug fix: Set proper owner and permissions when updating a schema
• Bug fix: some problems with the AD synchronization solved
• Bug fix: userscorner title icon
• Bug fix: addUser() now checks if the user already exists as a system user
• Removed deprecated executable 'import-from-ldif'
• Bug fix: addUser() now checks for password argument
• Bug fix: when restoring we use the new users DN to init users
• Bug fix: don't try to contact slaves from within a slave when groups are updated
• Use built-in EBox::ThirdParty::Apache2::AuthCookie?

webmail

• Zentyal rebrand
• Adds integration between ebox-webserver virtual hosts and ebox-webmail.
• Support for postgresql 8.4 (lucid)
• Removed unsuported character from autogenerated key. Thanks to servisoft for pointing this out

webserver

• Zentyal rebrand
• Check if usersandgroups is configured instead of samba
• Enable the port available check using the new method from services.
• Bugfix: keep the service internal on port update.
• Temporary disabled the listen port available check.
• Adds default-ssl vhost and ssl module management.
• Implements SSL integration between ebox-webserver and ebox-ca for vhosts.
• Bugfix: logs are split up by vhost.
• Bugfix: vhosts DocumentRoot? moved to /srv/www/domain.tld to keep them separated from default vhost.
• Bugfix: NameVirtualHost? directive in ports.conf and not in every vhost.
• Vhosts ServerAdmin? now is root@fqdn.
• Handle default vhost for port, ServerAdmin? values and including the ServerName? directive.
• Bugfix: allow non fqdn and topdomains as vhosts.

zarafa

• New module not present in 1.4

libebox

• Improved reload icon
• Remove duplicated action in EBox::Sudo::_root
• Added bps and millisecond types to format monitor graphs
• Zentyal rebranding
• Added web page favicon
• Add new methods s and sx for official strings for subscriptions
• Give support for HTML::Mason exceptions in error page
• Added Ukranian locale (uk_UA)
• Added missing CIDR values between /16 and /8
• New function orderRow(field, order) added to table_order.js
• Fixed problem with icons in tableorderer header
• New method for escaping strings in mason, fixes problems with non-latin encodings
• Redis as configuration backend (instead of gconf)
• Bug fix: Error in table_orderer search and order
• Added bg.gif asc.gif desc.gif required for tableorderer
• Moved tableorderer.css to talbeorderer.css.mas in the ebox package
• Added table_orderer.js and tableorderer.css required for new ebox-software
• GUI improvements in search box
• Override user modifications by default
• Fixed usercorner dbus init
• Removed annoying _validateReferer debug message
• Security [ESN-1-1]: Added _validateReferer method needed for CSRF fix
• Improved error page with instructions on how to report the problem
• Added Czech language
• Add field help to old-school templates with MVC
• Add optional text to old-school templates with MVC
• Use external libraries: scriptaculous and prototype and don't ship them as third-party stuff
• Bugfix: Show help text from DataForm?
• Set override_user_modification to no
• Bugfix: Show help text from DataForm?