3.0.15 Fri, 18 Aug 2006 11:45:50 +0200 Changes since 3.0.13 Engines core: * Fixed removing unused link descriptors to prevent zms-integity to report false alert about database corruption. Key management * Fixed a serious deadlock in automatic key distribution which lead to the hanging of the zms-engine process key distribution started. This problem only exists in version 3.0.14. Monitor agent: * Fixed possible abnormal program termination when a 0 period monitoring job changed. 3.0.13 Fri, 28 Apr 2006 12:16:40 +0200 Changes since 3.0.12 Engine core: * Fixed some memory and fd leak. Configuration database: * Handle mixed encodings in configuration check by replacing non-UTF8 characters with '.'. Key management: * Fixed a problem in database saving which may have caused missing keys. Transfer agent: * Failed upload propagates better error reporting. Mail Transport generator: * Empty value is permitted as the value of an advenced option. Zorp generator: * Fixed the indentation of the automatic code lines in the Zorp class editor. * Fixed empty hash generation in the class codes. 3.0.12 Fri, 10 Feb 2006 16:18:15 +0100 Changes since 3.0.11 Configuration database: * Added support for editing hashlimit matcher in packet filter rules. * Zorp 3.0.9 configuration support. Key management: * Key distribution always creates all necessary container directiories. * Fixed possible abnormal program termination while key distribution. * Certificate without extiension can be imported as both ca and non-ca certificate. 3.0.11 Tue, 22 Nov 2005 10:33:57 +0100 Changes since 3.0.10 Configuration database: * Improved the resource management of the configuration generator. * Fixed a possible deadlock in file difference checking. * Fixed a bug in file property (inode, etc.) storage on clusters. * Zorp 3.0.8 configuration support. * Zorp: extensions attribute setting fixed. * Fixed the creation of the symlink pointing to the CA group directory. * Fixed race condition in zorp generator which may have caused heap corruption. Key management: * Private key export uses the given export password. * Fixed a possible deadlock. * Fixed endless loop when importing password protected certificates. * Do not replace existing CRL if the downloaded one is exactly the same. * Do not keep information about revoked CRLs. 3.0.10 Thu, 08 Aug 2005 17:00:00 +0200 Changes since 3.0.8 Key management: * Fixed the link between the CRL and its issuer CA. Configuration database: * Fixed the configuration generation of the agent plugin. * Value of the option message_size_limit in postfix templates changed to 0 from -1. 3.0.8 Wed, 17 Aug 2005 10:44:30 +0200 Changes since 3.0.7 WARNING: this release is not compatible with ZMC 3.0.7, you need to upgrade your ZMC version when upgrading. Configuration database: * Configurations on clusters are generated in separate threads for each cluster-node. * Disabled the generation of the Zorp configuration in case of unresolvable zones. * Changed the configuration version for Networking which makes this release incompatible with earlier ZMC releases. 3.0.7 Tue, 28 Jun 2005 17:00:00 +0200 Released without any changes to match the version number of the Zorp Management Console component. 3.0.6 Wed, 11 May 2005 12:00:00 +0200 Key management: * Fixed a serious problem when importing a CSR without any extensions. Transfer agent: * Fixed statically linked binary (only affects 3.0.5). 3.0.5 Wed, 27 Apr 2005 18:00:00 +0200 Engine core: * Added manual pages for zms and the zms-integrity utility. * Fixed possible deadlock in core message handler. Configuration database: * Merged the Zorp configuration file classes.py to the policy.py file. * Fixed zone references in global Zorp variables. * Added missing newline character from the end of the haresources file. * Fixed possible state database corruption. Monitoring: * Triggers can be in 'error' state to mark job errors. * Database is automatically upgraded if the structure of a monitoring job's output changes. * Spread the start of monitoring jobs to span the whole interval to avoid startup bursts. * Fixed possible monitor job descriptor database corruption. * Some log messages has been clarified. 3.0.4 Fri, 21 Jan 2005 15:37:41 +0200 Configuration database: * VBuster proxy error_hash can be specified as quoted string. * Fixed Heartbeat generator to set authentication key in its proper place. Key management: * Enable refresh of self-signed certificates. 3.0.3 Wed, 22 Dec 2004 14:56:32 +0200 Engine core: * Fixed possible deadlock in message handler. Configuration database: * Speed up generation of Zorp configuration. * Speed up connection lookup and module startup. * Heartbeat handles the ownership of resources, so the resource owner is not always the master node. * Pass information about the lock's owner to ZMC. * Support IMQ target in packet filter. * Support 'identreject' local service in packet filter. * Several small configuration template changes. Key management: * Support CA private key distribution. Monitoring: * Several small fixes upgrading from 2.1. * Notify users if backend database connection aborted. * Triggers on non-running jobs are in 'undefined' state. * Agent generates output if monitoring job failes to run or gives no output. VMStat agent plugin: * Handle different versions of procps. 3.0.2 Thu, 21 Oct 2004 11:16:32 +0200 Engine core: * Bootstrap imports commonly used trusted CA certificates to the key management subsystem. * Backup script no longer keeps all archives, only the last few generations. The number of generations can be controlled on the Management server component in ZMC. Configuration database: * Upload to cluster nodes keeps file information for each node, so Upload and Check work just like on normal hosts. * Alert all connected management clients if saving the configuration database failed for some reason. * Various small fixes in database templates. Key management: * All key distribution messages are kept in one transaction, so any error causes rollback to the original state of both /etc/key.d and /etc/ca.d. * Alert all connected management clients if saving the database failed. Monitoring: * Fixed a bug which prevented disconnection of passive connections. * Fixed a bug which may have caused deadlock in histogram data request. * Fixed trigger upgrading to fetch old 'repeat alert' setting. * Support for no-database operation and better handling of database connection failures. * Alert messages includes the name of the related fields instead of non-informative field ids. Diskfree agent plugin: * Replaced '--partition' option with '--mountpt'. Sitecheck agent plugin: * No longer uses 'wget' to check target url. SMTP agent plugin: * Removed SMTP banner from the output. Zorpcheck agent plugin: * Use zorpctl to gather instance information. This also implies output field changes. Transfer: * Fixed a bug which prevented disconnecting passive connections. 3.0.1 Thu, 16 Sep 2004 19:03:49 +0200 Configuration database: * Fixed some tipos in various templates. IPsec VPN configuration * Take certificate path between <"> because certificate uniq name contain space. Monitoring: * Database needed for monitoring now can be created in installation phase. * New internal job. Checks that jobs are send data or no. Transfer: * Set the other side's clock from our in recovery connection. 3.0beta3 Wed, 09 Jun 2004 11:55:10 +0200 Engine core: * Fixes in upgrading configuration files when upgrading from version ZMS 2.1 * Bootstrap generates all-site CAs by default to make it easier to create multiple independent sites. * Limit minimum interval in timer based actions (key distribution, etc.) to 5 minutes. * Changed program names in log messages to "zms/engine", "zms/transfer" etc. * Improved connection handling and connection related error reporting. Configuration database: * Fixed possible infinite message passing between configdb<->engine, which might cause a high load on the ZMS host. * Added default configuration file template for bind9. Key management: * Support the conversion of site-specific certificates to be visible on all sites and vice versa for non-CA certificates. Monitoring: * Fixed a problem in calendar matching, which caused unrequested triggers to be sent. * Several fixes in self monitoring. * Better pager support for sending alerts. * Fixed possible infinite message passing between monitor<->engine, which might cause a high load on the ZMS host. * Several fixes for possible segmentation faults. 3.0.0 Wed Jul 14 13:26:25 2004 Engine core: * Keep logged in user and host information for sessions, used by logging. * Disable GUI connections while bootstraping is taking place. * Fixed possible deadlock in maintenence mode. * Requires at least ZMC version 3.0.0. Configuration database: * Upload and check operations report errors if setting the file ownership or permissions failed. * Fixed self monitoring problem when cluster nodes change. * Several small fixes in default configuration templates. ZAS configuration: * Fixed ZAS configuration generation as previously invalid comments were generated. Zorp configuration: * Generated zorp configuration files now contain the class descriptions as comments * Added 'self' parameter to class editor generated class init functions. * Append a tailing commas to tuples and lists to make singleton tuples valid * Generated Zorp configuration parts are properly ordered. Networking configuration: * Don't generate comment to hostname file IPTables configuration: * More verbose comments in generated iptables configuration files. Key management: * Key distribution supports cluster-node constraint, so ZMS no longer distributes keys to all cluster-nodes at the same time if not explicitly requested. Monitoring: * Default database connection uses "zms" user and unix domain sockets. * Job period can be significantly larger, changed from about 8 hours to maximum about 25000 days. * Job metainformation is no longer stored in database but stored in the XML database instead. * Automatically creates database tables for job outputs. * Self monitoring jobs have more readable name. * Empty formulas in monitoring conditions default to FALSE. * Triggers can be suspended. * Fixed a problem in alerting: every ancestor is checked in the tree, instead of only checking the parent. * Fixed a bug in formula evaluation.