diff --git a/AUTHORS b/AUTHORS index c4a710f6a62272282c6868df4c2d7a0530cc6620..887a1bd77c3062a974815adfaadc76ceb5ee6b08 100644 --- a/AUTHORS +++ b/AUTHORS @@ -203,3 +203,6 @@ documentation and additional help. * Martin Hamant <mh@ow2.org> Adding DSA accounts into groups +* Mathias Soupault <mathias.soupault@inalco.fr> + Making supannAliasLogin usage possible in password recovery + diff --git a/Changelog b/Changelog index 354402bfb284bec42f5aa4db2f02631cd66cc73e..9f6b49e23e6cdd4a97deec03f6610e00f26dab50 100644 --- a/Changelog +++ b/Changelog @@ -1,6 +1,29 @@ FusionDirectory changelog ========================= +* FusionDirectory 1.0.20 + +[Fix] Bugs #5282: Documentation for Password Policy Plugin +[Fix] Bugs #5362: PHP errors related to ogroup +[Fix] FusionDirectory plugins - Bugs #5370: webservice doesn't provide a way to logout +[Feature] Bugs #5397: User is able to lock their own account +[Fix] Bugs #5410: edit conflict warning screen : "read only" button make the same page to reload +[Fix] Bugs #5422: There seems to be a problem with TimeAttribute +[Fix] Bugs #5426: Problems with PHP CAS on centos 7 +[Feature] FusionDirectory plugins - Bugs #5437: argonaut-ldap2zone should be able to get data from a branch +[Feature] FusionDirectory plugins - Bugs #5438: we should add the directive check-names into the argonaut-dns service +[Fix] FusionDirectory plugins - Bugs #5442: Document fopen activation for argonaut plugin +[Feature] FusionDirectory plugins - Bugs #5443: argonaut ldap2zone should be able to create config for dns slave also, but not create the data +[Feature] FusionDirectory plugins - Bugs #5444: dropdown in systems on the dns tab +[Fix] FusionDirectory plugins - Bugs #5445: reorganize the argonaut dns plugin service +[Fix] FusionDirectory plugins - Bugs #5446: Error message when trying to update System name in the systems page +[Fix] Bugs #5448: Foreign keys from Services does not work +[Fix] FusionDirectory plugins - Bugs #5452: Error when reloading dhcp service through FD +[Fix] FusionDirectory plugins - Bugs #5457: Error modifynig DNS settings in the system's DNS tab +[Feature] Wishlist #5424: Mail alternatif pour la récupération de mot de passe quand supann est activé +[Feature] Wishlist #5425: Utiliser le supannAliasLogin dans les messages et les vues de récupération de mot de passe +[Feature] Wishlist #5456: Fine grain ACL control + * FusionDirectory 1.0.19 [Fix] Bugs #5303: When clicking on login from user selection we end up in user edition diff --git a/contrib/docs/UPGRADE b/contrib/docs/UPGRADE index 498267ef9791ba8bb8966a21b67eaa8e14a088d3..dc7a735a6f0a95adfe70024479e004ef3d3cd844 100644 --- a/contrib/docs/UPGRADE +++ b/contrib/docs/UPGRADE @@ -2537,6 +2537,190 @@ No Upgrade Enjoy :) +Migrate FusionDirectory from 1.0.19 to 1.0.20 +============================================= + +Ubuntu 12.0.4 TLS users +======================= + +Since 1.0.9.2 FusionDirectory need the php-cas library for CAS server support. This library can normally found in universe in the Ubuntu repositories + +In case you did not find it, grab the deb from here and install it + +http://packages.ubuntu.com/trusty/all/php-cas/download + +and select your preferred mirror + +Upgrade FusionDirectory first +============================= + +- Upgrade FusionDirectory core package before other ones to avoid dependencies errors: + +apt-get install fusiondirectory + +- Upgrade FusionDirectory schema package too. + +apt-get install fusiondirectory-schema + + +Upgrade of LDAP directory +========================= + +- Upgrade the core schemas + +fusiondirectory-insert-schema -m /etc/ldap/schema/fusiondirectory/core-fd-conf.schema + +fusiondirectory-insert-schema -m /etc/ldap/schema/fusiondirectory/template-fd.schema + +- if your are using the argonaut plugin you have to update its schema + +fusiondirectory-insert-schema -m /etc/ldap/schema/fusiondirectory/argonaut-fd.schema + + +Check for deprecated attributes and objectClasses in your LDAP +============================================================== + +The --list-deprecated option of fusiondirectory-setup show deprecated attributes and objectClasses for FusionDirectory + +fusiondirectory-setup --list-deprecated +List deprecated attributes and objectclasses +Deprecated attributes: + gotoLpdServer (GOto - Gonicus Terminal Concept, value lpdServer.) - 1.3.6.1.4.1.10098.1.1.1.4 + fdPhoneMacroRDN (FusionDirectory - Phone macro RDN) - 1.3.6.1.4.1.38414.19.10.2 + gotoCdromEnable (GOto - Gonicus Terminal Concept, value cdromEnable.) - 1.3.6.1.4.1.10098.1.1.1.8 + gotoFontPath (GOto - Gonicus Terminal Concept, value fontPath.) - 1.3.6.1.4.1.10098.1.1.1.5 + printerWindowsDriverDir (Path to directory that contains windows drivers for this printer) - 1.3.6.1.4.1.38414.6.10.2 + avHttpProxyURL (How to get the updates) - 1.3.6.1.4.1.10098.1.1.9.76 + avMaxDirectoryRecursions (Number of recursions done with directories) - 1.3.6.1.4.1.10098.1.1.9.69 + goFonPassword (Admin password for fon server) - 1.3.6.1.4.1.10098.1.1.9.27 + gotoFilesystem (GOto - Gonicus Terminal Concept, value filesystem.) - 1.3.6.1.4.1.10098.1.1.1.6 + gotoPrinterPPD (GOto - Gonicus Terminal Concept, PPD data) - 1.3.6.1.4.1.10098.1.1.11.6 + fdSnapshotAdminDn (FusionDirectory - Snaphost admin dn) - 1.3.6.1.4.1.38414.8.17.4 + ghUsbSupport (Hardware definitions, value usbSupport) - 1.3.6.1.4.1.10098.1.1.2.3 + gotoScannerEnable (GOto - Gonicus Terminal Concept, value scannerEnable.) - 1.3.6.1.4.1.10098.1.1.1.10 + gotoNtpServer (GOto - Gonicus Terminal Concept, value ntpServer.) - 1.3.6.1.4.1.10098.1.1.1.2 + goFaxPassword (Admin password for fax server) - 1.3.6.1.4.1.10098.1.1.9.23 + gotoSysStatus (Keeps current system status - info shown in GOsa) - 1.3.6.1.4.1.10098.1.1.2.11 + gotoUserAdminPrinter (GOto - keeps printers we are admin for) - 1.3.6.1.4.1.10098.1.1.11.13 + ghIdeDev (Hardware definitions, value ideDev) - 1.3.6.1.4.1.10098.1.1.2.4 + gotoSndModule (GOto - Gonicus Terminal Concept, value sound Modules.) - 1.3.6.1.4.1.10098.1.1.1.29 + goFaxAdmin (Admin principal for fax server) - 1.3.6.1.4.1.10098.1.1.9.22 + gotoAdaptPath (GOto - Gonicus Terminal Concept, value adaptpath.) - 1.3.6.1.4.1.10098.1.1.1.33 + gotoScannerModel (GOto - Gonicus Terminal Concept, value scannerModel.) - 1.3.6.1.4.1.10098.1.1.1.40 + gotoXColordepth (GOto - Gonicus Terminal Concept, value xColordepth.) - 1.3.6.1.4.1.10098.1.1.1.21 + fdAsteriskDriver (Driver used for asterisk DB) - 1.3.6.1.4.1.10098.1.1.9.30 + fdSipContexts (FusionDirectory - available sip contexts) - 1.3.6.1.4.1.38414.19.11.1 + gosaObject (GOsa - DN of an object) - 1.3.6.1.4.1.10098.1.1.12.3 + ghInventoryNumber (Unique number for inclusion in an inventory) - 1.3.6.1.4.1.10098.1.1.2.10 + ghSoundAdapter (Hardware definitions, value soundAdapter) - 1.3.6.1.4.1.10098.1.1.2.7 + ghGfxAdapter (Hardware definitions, value Grafikkarte) - 1.3.6.1.4.1.10098.1.1.2.9 + gotoXDriver (GOto - Gonicus Terminal Concept, value xDriver.) - 1.3.6.1.4.1.10098.1.1.1.28 + gotoShare (GOto - specifies a share) - 1.3.6.1.4.1.10098.1.1.11.9 + fdCopyPaste (FusionDirectory - (de)Activate copy/paste) - 1.3.6.1.4.1.38414.8.14.5 + gotoAutoFs (GOto - Gonicus Terminal Concept, value autofs.) - 1.3.6.1.4.1.10098.1.1.1.31 + gotoScannerBackend (GOto - Gonicus Terminal Concept, value scannerBackend.) - 1.3.6.1.4.1.10098.1.1.1.39 + gotoUserPrinter (GOto - keeps printers shown for this user) - 1.3.6.1.4.1.10098.1.1.11.12 + printerWindowsInfFile (Path to windows inf file for this printer) - 1.3.6.1.4.1.38414.6.10.1 + avChecksPerDay (Update checks per day) - 1.3.6.1.4.1.10098.1.1.9.78 + gotoScannerClients (GOto - Gonicus Terminal Concept, value scannerClients.) - 1.3.6.1.4.1.10098.1.1.1.11 + gotoXKbLayout (GOto - Gonicus Terminal Concept, value xKblayout.) - 1.3.6.1.4.1.10098.1.1.1.26 + fdSnapshotAdminPassword (FusionDirectory - Snaphost admin password) - 1.3.6.1.4.1.38414.8.17.5 + fdPersonalTitleInDN (FusionDirectory - Personal title in dn) - 1.3.6.1.4.1.38414.8.12.5 + gotoXResolution (GOto - Gonicus Terminal Concept, value xResolution.) - 1.3.6.1.4.1.10098.1.1.1.20 + fdPasswordHook (FusionDirectory - Password hook (external command)) - 1.3.6.1.4.1.38414.8.13.4 + fdVoicemailContexts (FusionDirectory - available voicemail contexts) - 1.3.6.1.4.1.38414.19.11.2 + fdIdGenerator (FusionDirectory - An automatic way to generate new user ids) - 1.3.6.1.4.1.38414.8.12.4 + goLogPassword (Admin password for log server) - 1.3.6.1.4.1.10098.1.1.9.25 + ghCpuType (Hardware definitions, value cpuType) - 1.3.6.1.4.1.10098.1.1.2.1 + gotoGroupAdminPrinter (GOto - keeps printers we are admin for) - 1.3.6.1.4.1.10098.1.1.11.17 + fdAccountRDN (FusionDirectory - use a placeholder pattern for generating account RDNs) - 1.3.6.1.4.1.38414.8.12.2 + gotoFloppyEnable (GOto - Gonicus Terminal Concept, value floppyEnable.) - 1.3.6.1.4.1.10098.1.1.1.7 + goFonAreaCode (Store area code) - 1.3.6.1.4.1.10098.1.1.9.28 + avArchiveMaxRecursion (Maximum number of archive nestings) - 1.3.6.1.4.1.10098.1.1.9.73 + gotoRootPasswd (GOto - Gonicus Terminal Concept, value rootPasswd.) - 1.3.6.1.4.1.10098.1.1.1.14 + fdPrimaryGroupFilter (FusionDirectory - Primary group filter) - 1.3.6.1.4.1.38414.8.14.1 + goFonCountryCode (Store country code) - 1.3.6.1.4.1.10098.1.1.9.29 + avArchiveMaxFileSize (Maximum archive file size) - 1.3.6.1.4.1.10098.1.1.9.72 + gotoProfileServer (GOto - specifies the profile server) - 1.3.6.1.4.1.10098.1.1.11.8 + goLogAdmin (Admin user for log server) - 1.3.6.1.4.1.10098.1.1.9.24 + fdPhoneConferenceRDN (FusionDirectory - Phone conference RDN) - 1.3.6.1.4.1.38414.19.10.3 + goFonAdmin (Admin user for fon server) - 1.3.6.1.4.1.10098.1.1.9.26 + goLogDriver (FD logging MDB2 driver name) - 1.3.6.1.4.1.10098.1.1.9.84 + gotoLpdEnable (GOto - Gonicus Terminal Concept, value lpdEnable.) - 1.3.6.1.4.1.10098.1.1.1.9 + gotoModules (GOto - Gonicus Terminal Concept, value kernel modules.) - 1.3.6.1.4.1.10098.1.1.1.32 + gotoProfileQuota (GOto - save quota for home) - 1.3.6.1.4.1.10098.1.1.11.15 + avFlags (Special flags for the antivirus scan engine) - 1.3.6.1.4.1.10098.1.1.9.71 + avUser (Username to run antivirus with) - 1.3.6.1.4.1.10098.1.1.9.70 + ghMemSize (Hardware definitions, value memSize) - 1.3.6.1.4.1.10098.1.1.2.2 + gotoXMonitor (GOto - Gonicus Terminal Concept, value xMonitor.) - 1.3.6.1.4.1.10098.1.1.1.17 + gotoGroupPrinter (GOto - keeps printers shown for this user) - 1.3.6.1.4.1.10098.1.1.11.16 + fdRfc2307bis (FusionDirectory - rfc2307bis) - 1.3.6.1.4.1.38414.8.10.1 + gotoProfileFlags (GOto - Flags for Profile handling - C is for caching) - 1.3.6.1.4.1.10098.1.1.11.7 + fdMailMethod (FusionDirectory - Mail method) - 1.3.6.1.4.1.38414.10.10.1 + gotoXKbVariant (GOto - Gonicus Terminal Concept, value xKbvariant.) - 1.3.6.1.4.1.10098.1.1.1.27 + gotoXMouseport (GOto - Gonicus Terminal Concept, value xMouseport.) - 1.3.6.1.4.1.10098.1.1.1.22 + fdSnapshotURI (FusionDirectory - Snaphost URI) - 1.3.6.1.4.1.38414.8.17.3 + gotoHardwareChecksum (GOto - quick way to see if something has changed) - 1.3.6.1.4.1.10098.1.1.2.12 + printerWindowsDriverName (Windows name of the printer driver) - 1.3.6.1.4.1.38414.6.10.3 + ghScsiDev (Hardware definitions, value scsiDev) - 1.3.6.1.4.1.10098.1.1.2.5 + gotoXMouseType (Hardware definitions, value Type of mouse) - 1.3.6.1.4.1.10098.1.1.1.34 + gotoXVsync (GOto - Gonicus Terminal Concept, value xVsync.) - 1.3.6.1.4.1.10098.1.1.1.19 + goSyslogSection (What sections wants the server for its syslog service? i.e. *.*) - 1.3.6.1.4.1.10098.1.1.9.9 + avDatabaseMirror (Where to find updates) - 1.3.6.1.4.1.10098.1.1.9.75 + goLogDB (GOsa logging DB name) - 1.3.6.1.4.1.10098.1.1.9.83 + gosaUser (GOsa - DN of a user) - 1.3.6.1.4.1.10098.1.1.12.2 + gotoXHsync (GOto - Gonicus Terminal Concept, value xHsync.) - 1.3.6.1.4.1.10098.1.1.1.18 + avMaxThreads (Number of AV scanning threads) - 1.3.6.1.4.1.10098.1.1.9.68 + gotoXMouseButtons (GOto - Gonicus Terminal Concept, value xMouseButtons.) - 1.3.6.1.4.1.10098.1.1.1.23 + avArchiveMaxCompressionRatio (Maximum compression ratio) - 1.3.6.1.4.1.10098.1.1.9.74 + ghNetNic (Hardware definitions, value Network Device) - 1.3.6.1.4.1.10098.1.1.2.8 + gotoXKbModel (GOto - Gonicus Terminal Concept, value xKbmodel.) - 1.3.6.1.4.1.10098.1.1.1.25 +Deprecated objectClasses: + goFaxServer (Fax server description) - 1.3.6.1.4.1.10098.1.2.1.26 + goSyslogServer (Syslog server description) - 1.3.6.1.4.1.10098.1.2.1.21 + goCupsServer (CUPS server description) - 1.3.6.1.4.1.10098.1.2.1.23 + goNtpServer (Time server description) - 1.3.6.1.4.1.10098.1.2.1.20 + gosaLockEntry (GOsa - Class for GOsa locking) - 1.3.6.1.4.1.10098.1.2.1.19.2 + goVirusServer (Virus server definition) - 1.3.6.1.4.1.10098.1.2.1.39 + gosaUserTemplate (GOsa - Class for GOsa User Templates) - 1.3.6.1.4.1.10098.1.2.1.19.11 + goNfsServer (NFS server description) - 1.3.6.1.4.1.10098.1.2.1.19 + goFonServer (Fon server description) - 1.3.6.1.4.1.10098.1.2.1.29 + goLogDBServer (Log DB server description) - 1.3.6.1.4.1.10098.1.2.1.28 + +The --check-deprecated option will output a list of dn using old attributes and objectClasses of they are present in your ldap server + +fusiondirectory-setup --check-deprecated +List LDAP entries using deprecated attributes or objectclasses +There are no entries in the LDAP using obsolete attributes +There are no entries in the LDAP using obsolete classes + +The --ldif-deprecated option will output an ldif file on the console that you can use with ldapmodify to clean you ldap server from old attributes. + +fusiondirectory-setup --ldif-deprecated > remove_deprecated.ldif + +If they are old objectClasses it will warn you and you will have to remove them by hand, they have been specified at the --check-deprecated step. + +!! Please read it carefully before applying !! + +Correcting acl editownpwd +========================= + +!!!! to fix the error in the installed editownpwd, you need to go !!!! + + * Acl roles + * Open the editownpwd acl + * Save it + +Its very important you do it, to know why look at https://forge.fusiondirectory.org/issues/5276 + +Checking your indexed attributes +================================ + +Check that all you index still match with valid attributes present in your ldap directory + + + + --- * Further information