Feature release for opsi 4.0.7 in Testing and others also release as Stable

Antworten
Benutzeravatar
m.scalese
uib-Team
Beiträge: 37
Registriert: 22 Aug 2014, 09:13

Feature release for opsi 4.0.7 in Testing and others also release as Stable

Beitrag von m.scalese »

Dear opsi users,

Today we release a series of packages with features for testing. We deliberately decided not to do a new service release and instead publish the following features as part of the ongoing 4.0.7 service releases. No special upgrades procedures should be necessary. However, we kindly ask you to read the newly tailored documentation for the released features and the steps involved in them which are also described there. For this testing release, updated opsi manuals were made available as PDF under the following link:

Https://download.uib.de/opsi4.0/testing/opsi-v407/doc/

The opsi packages for testing can be found at:

Https://download.uib.de/opsi4.0/testing ... /products/

To test the paid features, you'll need to activate them with a modules file. A temporary activation, for the new features can be requested at info(at)uib.de.

The following features are released as testing:

Opsi Directory Connector (with additional costs)

The opsi Directory Connector is a module to reconciliate the data of a domain (Microsoft Active Directory or Samba4) with opsi. The main goal of the module is to use the domain as a leading system also for opsi.

Innovations on the opsi-Configed

Please note: We assume that Java 1.8x is rolled out everywhere, because older versions of the public are no longer receiving security updates. The opsi-configed is therefore compiled with Java 1.8 and is no longer executable under 1.7. If a 1.7x version is required, please let us know, so we can provide you with a temporary customized variant.

In the opsi-configed 4.0.7.5.x, in addition to many minor improvements and bug fixes, two major features are released:

1. User-Roles (with additional costs)

With this module, a role concept can be implemented for the first time in opsi. The client visibility in the opsi-Configed can be restricted to a certain depot (user specific), the processing of global settings can be thus prevented. In this case a pure Read only access, for example for the HelpDesk can be established as well.

2. Server console (free)

With this feature you no longer have to send commands over a regular server console. Now, it is possible to directly use the opsi-configed to send all opsi commands of the daily work, via a opsi configed dialogue. The default opsi calls are already configured. For other further server commands and scripts, the admin can set up additional menu entries with a few mouse clicks in the opsi-configed and make them available to all users or (in combination with the User Roles module) to specific users. On request, the configed can even open a fully-fledged SSH session on the opsi server so that no additional tools are needed to work administratively on the server.

Support for Windows 10 Creators Update

We are releasing new Windows 10 Netboot products, which are needed to distribute with opsi the new Windows 10 Creators Update (build 1703). Caution: The adjustments include a modified unattend.xml. This new unattend.xml is only installed automatically if you have made no changes to the custom/unattend.xml file (this is identical to the opsi/unattend.xml.template). If you have made any changes to your unattend.xml, you should match your current unattend.xml under custom, with the unattend.xml.template from the opsi directory and add the changes from the template into your unattend.xml. The changes are also backwards compatible with previous Windows 10 builds (tested with the following Win10 builds: 1511, 1607, and 1703).
Support for additional Linux distributions as testing

With this release we also publish the packages for SLES12 SP2 and OpenSuse Leap 42.2 as a test.

As stable we release:

Server packages:

opsi-nagios-plugins (4.0.7.2-1)

Localboot packages:

opsi-client-agent (4.0.7.12-1)
opsi-winst/opsi-script (4.11.6.12-1)

Netboot packages:

Centos7 (4.0.7.1-5)
Debian (4.0.7.1-3)
Debian7 (4.0.7.1-4)
Debian8 (4.0.7.1-5)
OpenSUSE Leap 42.1 (4.0.7.1-5)
RedHat7 (4.0.7.1-6)
SLES11SP4 (4.0.7.1-5)
SLES12 (4.0.7.1-5)
Ubuntu (4.0.7.1-3)
Ubuntu16-04 (4.0.7.1-6)

opsi-local-image packages:

opsi-local-image-* (4.0.7.1-4)

Following packages are published for Testing:

Server packages:

opsi-linux-support (4.0.7-5)
opsi-depotserver (4.0.7.1-1)
opsiconfd (4.0.7.9-1)
python-opsi (4.0.7.39-1)
opsi-linux-bootimage (20170405-1)

Localboot pacakges:

opsi-configed Version (4.0.7.5.22)
opsi-linux-clientagent (4.0.7.6-1)

Netboot packages:

win10 (4.0.7.1-7)
win10-x64 (4.0.7.1-7)
win10-captured (4.0.7.1-7)
win10-x64-captured (4.0.7.1-7)
centos70 (4.0.7.2-1)
debian (4.0.7.2-1)
debian7 (4.0.7.2-1)
debian8 (4.0.7.2-1)
debian9 (4.0.7.2-1)
opensuse13-2 (4.0.7.2-1)
opensusel42-1 (4.0.7.2-2)
opensusel42-2 (4.0.7.2-2)
redhat70 (4.0.7.2-1)
sles11sp4 (4.0.7.2-1)
sles12 (4.0.7.2-1)
sles12sp1 (4.0.7.2-1)
sles12sp2 (4.0.7.2-1)
ubuntu14-04 (4.0.7.2-1)
ubuntu16-04 (4.0.7.2-1)
ubuntu (4.0.7.2-1)
ucs41 (4.0.7.2-1)

opsi-local-image packages:

opsi-local-image-win10 (4.0.7.1-5)
opsi-local-image-win10-x64 (4.0.7.1-5)
opsi-local-image-win10-captured (4.0.7.1-5)
opsi-local-image-win10-x64-captured (4.0.7.1-5)

Changelogs for the Testing packages

Code: Alles auswählen

opsi-configed (4.0.7.5.22) stable; urgency=medium

    SSH console feature added
    licence management max table width extended
    removal of host specific properties via context menu
    ignore case for swident in SWAuditClientEntry (bugfix)
    new columns configurable in client menu
    user roles feature added
    modules check for user roles and linux clients
        interpreter for extended modules check
        logging and selecting tls version
        hosts-to-wake-up corrected
        fixing popup of combobox in windows

– Rupert Roeder r.roeder@uib.de Thu Apr 19 13:25:44 2017 +0200

Code: Alles auswählen

opsi-linux-support (4.0.7-5) stable; urgency=medium

    Better out-of-the-box experience for UCS.
    SUSE: do not alter default options.

– Niko Wenselowski n.wenselowski@uib.de Fri, 05 Aug 2016 15:46:46 +0200

Code: Alles auswählen

opsi-depotserver (4.0.7.1-1) testing; urgency=medium

    opsi-setup: Do not display None for value if this is returned reading data from an existing certificate.

– Niko Wenselowski n.wenselowski@uib.de Mon, 09 Jan 2017 15:53:20 +0100

Code: Alles auswählen

opsiconfd (4.0.7.9-1) stable; urgency=medium

    Infopage now sorts the seen user agents and rpc calls case-insensitive.

– Niko Wenselowski n.wenselowski@uib.de Fri, 21 Apr 2017 15:10:02 +0200

opsiconfd (4.0.7.8-1) stable; urgency=medium

    The infopage now shows what user agents have been seen during the run of opsiconfd.

– Niko Wenselowski n.wenselowski@uib.de Thu, 30 Mar 2017 13:23:36 +0200

opsiconfd (4.0.7.7-1) stable; urgency=medium

    Disabling „symlink logs“ now has the desired effect that logs will not be linked. Once a client is successful authenticated %m will be replaced with the client ID instead of the IP in the logfile name.

– Niko Wenselowski n.wenselowski@uib.de Wed, 29 Mar 2017 10:36:50 +0200

opsiconfd (4.0.7.6-2) experimental; urgency=low

    fixing broken logrotate on CentOS6 & RHEL6

– Mathias Radtke m.radtke@uib.de Mon, 16 Jan 2017 09:37:00 +0100

opsiconfd (4.0.7.6-1) experimental; urgency=medium

    Added support to configure the ciphers accepted by the opsiconfd when creating an secured connection (https).

– Niko Wenselowski n.wenselowski@uib.de Wed, 11 Jan 2017 14:53:01 +0100

Code: Alles auswählen

python-opsi (4.0.7.39-1) stable; urgency=medium

    Added 30_kiosk.conf for the new kiosk client.
    30_sshcommands.conf: Internal refactoring.
    30_sshcommands.conf: Removed getSSHCommand. Use SSHCommand_getObject instead.
    30_sshcommands.conf: Removed getSSHCommands. Use SSHCommand_getObjects instead.
    30_sshcommands.conf: Removed createSSHCommands. Use SSHCommand_createObjects instead.
    30_sshcommands.conf: Removed createSSHCommand. Use SSHCommand_createObject instead.
    30_sshcommands.conf: Removed updateSSHCommand. Use SSHCommand_updateObject instead.
    30_sshcommands.conf: Removed updateSSHCommands. Use SSHCommand_updateObjects instead.
    30_sshcommands.conf: Removed deleteSSHCommands. Use SSHCommand_deleteObjects instead.
    30_sshcommands.conf: Removed deleteSSHCommand. Use SSHCommand_deleteObject instead.
    40_admin_tasks.conf: Updated docstring of getClientsWithOutdatedProduct.

– Niko Wenselowski n.wenselowski@uib.de Mon, 24 Apr 2017 17:46:09 +0200

python-opsi (4.0.7.38-4) stable; urgency=medium

    Drop creating the custom ssh command file in the postinst.

– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 19:29:11 +0200

python-opsi (4.0.7.38-3) stable; urgency=medium

    Do not deploy empty file for custom ssh command config but instead create that file in the postinst if not existing.

– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 17:09:02 +0200

python-opsi (4.0.7.38-2) stable; urgency=medium

    Reverted the prevention of creating users on UCS.
    SSH extension: emptied file with default commands for safety reasons.

– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 12:52:51 +0200

python-opsi (4.0.7.38-1) stable; urgency=medium

    10_opsi.conf: Do not pass invalid parameter in deleteProductDependency.
    Added SSH extension.
    OPSI.Logger: Show no message if unlinking a non-existing file fails.
    OPSI.Util.File.Opsi.PackageControlFile: if no version for package or product are given assume defaults.

– Niko Wenselowski n.wenselowski@uib.de Thu, 30 Mar 2017 10:47:13 +0200

python-opsi (4.0.7.37-1) stable; urgency=medium

    20_legacy.conf: Removed methods getPcpatchRSAPrivateKey and setPcpatchPassword. Please use the opsi-admin task setPcpatchPassword for setting the password instead.

– Niko Wenselowski n.wenselowski@uib.de Thu, 02 Mar 2017 11:23:49 +0100

python-opsi (4.0.7.36-1) stable; urgency=medium

    OPSI.Util: the methods for blowfish encryption / decryption now raise a BlowfishError if things fail.

– Niko Wenselowski n.wenselowski@uib.de Thu, 16 Feb 2017 15:11:25 +0100

Code: Alles auswählen

opsi-nagios-plugins (4.0.7.2-1) testing; urgency=medium

    Using the new-style base64 Python interface to avoid breaking with combinations of username and password that exceed 72 characters and
    lead to newlines in the base64-encoded authentication header.
    This is in response to CVE-2016-5699 / Python bug 22928 as these patched Python versions may lead to breaks on some systems.

– Niko Wenselowski n.wenselowski@uib.de Tue, 26 Jul 2016 15:40:04 +0200

opsi-nagios-plugins (4.0.7.1-1) testing; urgency=medium

    Internal refactorings.
    Accepting self-signed certificates without showing a warning.

– Niko Wenselowski n.wenselowski@uib.de Tue, 26 Jul 2016 14:27:37 +0200

Code: Alles auswählen

opsi-client-agent (4.0.7.12-1) stable; urgency=low

    update auf opsi-script 4.11.6.12
    update auf openssl 1.0.2.k
    update opsiclientkiosk 4.0.7.5
    – Detlef Oertel d.oertel@uib.de Wed, 14 Dec 2016:14:30:00 +0200

Code: Alles auswählen

opsi-winst/opsi-script (4.11.6.12-1) stable; urgency=low

    osjson: escape chars in jsonAsArrayToStringList
    osparser: Logging at errorsOccurredSinceMark
    osparser: move/rename/symlink/hardlink: no Syntax error on wrong parameters ; fixes #2036
    some changes for 64 Bit Version
    update to openSSL 1.0.2k (1.0.2.11)
    integrate winst64.exe to the package for usage in winpe

– Detlef Oertel d.oertel@uib.de Tue, 03 Jan 2017:15:00:00 +0200

Code: Alles auswählen

opsi-linux-client-agent (4.0.7.6-1) stable; urgency=medium

    Updated opsi-deploy-client-agent to 4.0.7.5.

– Niko Wenselowski n.wenselowski@uib.de Mon, 5 Apr 2017 13:47:31 + 0100

Code: Alles auswählen

windows10 (4.0.7.1-7) testing; urgency=low

    unattend.xml: Windows 10 1703 compatible

– Mathias Radtke m.radtke@uib.de Wed, Apr 12 16:33:00 2017 +0200

Code: Alles auswählen

opsi-local-image-win10* (4.0.7.1-5) testing; urgency=low

    unattend.xml: Windows 10 1703 compatible

– Mathias Radtke m.radtke@uib.de Wed, Apr 12 16:33:00 2017 +0200

Code: Alles auswählen

Dieses Changelogs betreffen folgende Linux-Netboot-Pakete:

linux = alle opsi-Linux-Netboot-Pakete

linux (4.0.7.2-1) testing; urgency=low

    postinst: sudo command may fail -> echo to inform user

– Mathias Radtke m.radtke@uib.de Thu Mar 16 15:15:00 +0100

Spezielle Änderungen an einzelnen Paketen:

debian8 (4.0.7.1-5) testing; urgency=low

    setup.py: installing desktop_package at end of installation

– Mathias Radtke m.radtke@uib.de Tue Jan 30 08:50:00 2017 +0100

ubuntu16-04 (4.0.7.1-7) stable; urgency=low

    setup.py: removing xenial-updates/backports repository from sources.list when using local http repo

– Mathias Radtke m.radtke@uib.de Tue Mar 07 15:05:00 +0100

ubuntu16-04 (4.0.7.1-6) stable; urgency=low

    setup.py: installing desktop_package at end of installation

– Mathias Radtke m.radtke@uib.de Tue Jan 30 08:50:00 2017 +0100

opensusel42-1 & opensusel42-2 (4.0.7.2-2) testing; urgency=medium

    UEFI compatible installation

– Mathias Radtke m.radtke@uib.de Mon Apr 03 2017 14:50:00 +0200

Code: Alles auswählen

opsi-linux-client-agent (4.0.7.6-1) stable; urgency=medium

    Updated opsi-deploy-client-agent to 4.0.7.5.

– Niko Wenselowski n.wenselowski@uib.de Mon, 5 Apr 2017 13:47:31 + 0100

opsi-linux-client-agent (4.0.7.5-2) stable; urgency=medium

    setup.opsiscript: fix PatchHosts_standard wrong sequence; references #2508
    setup.opsiscript: get last element from 'dig +short' output list; references #2508
    setup.opsiscript: set non-debug default log level to 7

– d.oertel d.oertel@uib.de Fri, 24 Feb 2017 15:00:00 + 0100
As always, kind regards,

Martin of uib gmbh
opsi support - uib gmbh
For productive opsi installations we recommend support contracts.

http://www.uib.de
Antworten