Feature release for opsi 4.0.7 in Testing and others also release as Stable
Verfasst: 02 Mai 2017, 16:44
Dear opsi users,
Today we release a series of packages with features for testing. We deliberately decided not to do a new service release and instead publish the following features as part of the ongoing 4.0.7 service releases. No special upgrades procedures should be necessary. However, we kindly ask you to read the newly tailored documentation for the released features and the steps involved in them which are also described there. For this testing release, updated opsi manuals were made available as PDF under the following link:
Https://download.uib.de/opsi4.0/testing/opsi-v407/doc/
The opsi packages for testing can be found at:
Https://download.uib.de/opsi4.0/testing ... /products/
To test the paid features, you'll need to activate them with a modules file. A temporary activation, for the new features can be requested at info(at)uib.de.
The following features are released as testing:
Opsi Directory Connector (with additional costs)
The opsi Directory Connector is a module to reconciliate the data of a domain (Microsoft Active Directory or Samba4) with opsi. The main goal of the module is to use the domain as a leading system also for opsi.
Innovations on the opsi-Configed
Please note: We assume that Java 1.8x is rolled out everywhere, because older versions of the public are no longer receiving security updates. The opsi-configed is therefore compiled with Java 1.8 and is no longer executable under 1.7. If a 1.7x version is required, please let us know, so we can provide you with a temporary customized variant.
In the opsi-configed 4.0.7.5.x, in addition to many minor improvements and bug fixes, two major features are released:
1. User-Roles (with additional costs)
With this module, a role concept can be implemented for the first time in opsi. The client visibility in the opsi-Configed can be restricted to a certain depot (user specific), the processing of global settings can be thus prevented. In this case a pure Read only access, for example for the HelpDesk can be established as well.
2. Server console (free)
With this feature you no longer have to send commands over a regular server console. Now, it is possible to directly use the opsi-configed to send all opsi commands of the daily work, via a opsi configed dialogue. The default opsi calls are already configured. For other further server commands and scripts, the admin can set up additional menu entries with a few mouse clicks in the opsi-configed and make them available to all users or (in combination with the User Roles module) to specific users. On request, the configed can even open a fully-fledged SSH session on the opsi server so that no additional tools are needed to work administratively on the server.
Support for Windows 10 Creators Update
We are releasing new Windows 10 Netboot products, which are needed to distribute with opsi the new Windows 10 Creators Update (build 1703). Caution: The adjustments include a modified unattend.xml. This new unattend.xml is only installed automatically if you have made no changes to the custom/unattend.xml file (this is identical to the opsi/unattend.xml.template). If you have made any changes to your unattend.xml, you should match your current unattend.xml under custom, with the unattend.xml.template from the opsi directory and add the changes from the template into your unattend.xml. The changes are also backwards compatible with previous Windows 10 builds (tested with the following Win10 builds: 1511, 1607, and 1703).
Support for additional Linux distributions as testing
With this release we also publish the packages for SLES12 SP2 and OpenSuse Leap 42.2 as a test.
As stable we release:
Server packages:
opsi-nagios-plugins (4.0.7.2-1)
Localboot packages:
opsi-client-agent (4.0.7.12-1)
opsi-winst/opsi-script (4.11.6.12-1)
Netboot packages:
Centos7 (4.0.7.1-5)
Debian (4.0.7.1-3)
Debian7 (4.0.7.1-4)
Debian8 (4.0.7.1-5)
OpenSUSE Leap 42.1 (4.0.7.1-5)
RedHat7 (4.0.7.1-6)
SLES11SP4 (4.0.7.1-5)
SLES12 (4.0.7.1-5)
Ubuntu (4.0.7.1-3)
Ubuntu16-04 (4.0.7.1-6)
opsi-local-image packages:
opsi-local-image-* (4.0.7.1-4)
Following packages are published for Testing:
Server packages:
opsi-linux-support (4.0.7-5)
opsi-depotserver (4.0.7.1-1)
opsiconfd (4.0.7.9-1)
python-opsi (4.0.7.39-1)
opsi-linux-bootimage (20170405-1)
Localboot pacakges:
opsi-configed Version (4.0.7.5.22)
opsi-linux-clientagent (4.0.7.6-1)
Netboot packages:
win10 (4.0.7.1-7)
win10-x64 (4.0.7.1-7)
win10-captured (4.0.7.1-7)
win10-x64-captured (4.0.7.1-7)
centos70 (4.0.7.2-1)
debian (4.0.7.2-1)
debian7 (4.0.7.2-1)
debian8 (4.0.7.2-1)
debian9 (4.0.7.2-1)
opensuse13-2 (4.0.7.2-1)
opensusel42-1 (4.0.7.2-2)
opensusel42-2 (4.0.7.2-2)
redhat70 (4.0.7.2-1)
sles11sp4 (4.0.7.2-1)
sles12 (4.0.7.2-1)
sles12sp1 (4.0.7.2-1)
sles12sp2 (4.0.7.2-1)
ubuntu14-04 (4.0.7.2-1)
ubuntu16-04 (4.0.7.2-1)
ubuntu (4.0.7.2-1)
ucs41 (4.0.7.2-1)
opsi-local-image packages:
opsi-local-image-win10 (4.0.7.1-5)
opsi-local-image-win10-x64 (4.0.7.1-5)
opsi-local-image-win10-captured (4.0.7.1-5)
opsi-local-image-win10-x64-captured (4.0.7.1-5)
Changelogs for the Testing packages
As always, kind regards,
Martin of uib gmbh
Today we release a series of packages with features for testing. We deliberately decided not to do a new service release and instead publish the following features as part of the ongoing 4.0.7 service releases. No special upgrades procedures should be necessary. However, we kindly ask you to read the newly tailored documentation for the released features and the steps involved in them which are also described there. For this testing release, updated opsi manuals were made available as PDF under the following link:
Https://download.uib.de/opsi4.0/testing/opsi-v407/doc/
The opsi packages for testing can be found at:
Https://download.uib.de/opsi4.0/testing ... /products/
To test the paid features, you'll need to activate them with a modules file. A temporary activation, for the new features can be requested at info(at)uib.de.
The following features are released as testing:
Opsi Directory Connector (with additional costs)
The opsi Directory Connector is a module to reconciliate the data of a domain (Microsoft Active Directory or Samba4) with opsi. The main goal of the module is to use the domain as a leading system also for opsi.
Innovations on the opsi-Configed
Please note: We assume that Java 1.8x is rolled out everywhere, because older versions of the public are no longer receiving security updates. The opsi-configed is therefore compiled with Java 1.8 and is no longer executable under 1.7. If a 1.7x version is required, please let us know, so we can provide you with a temporary customized variant.
In the opsi-configed 4.0.7.5.x, in addition to many minor improvements and bug fixes, two major features are released:
1. User-Roles (with additional costs)
With this module, a role concept can be implemented for the first time in opsi. The client visibility in the opsi-Configed can be restricted to a certain depot (user specific), the processing of global settings can be thus prevented. In this case a pure Read only access, for example for the HelpDesk can be established as well.
2. Server console (free)
With this feature you no longer have to send commands over a regular server console. Now, it is possible to directly use the opsi-configed to send all opsi commands of the daily work, via a opsi configed dialogue. The default opsi calls are already configured. For other further server commands and scripts, the admin can set up additional menu entries with a few mouse clicks in the opsi-configed and make them available to all users or (in combination with the User Roles module) to specific users. On request, the configed can even open a fully-fledged SSH session on the opsi server so that no additional tools are needed to work administratively on the server.
Support for Windows 10 Creators Update
We are releasing new Windows 10 Netboot products, which are needed to distribute with opsi the new Windows 10 Creators Update (build 1703). Caution: The adjustments include a modified unattend.xml. This new unattend.xml is only installed automatically if you have made no changes to the custom/unattend.xml file (this is identical to the opsi/unattend.xml.template). If you have made any changes to your unattend.xml, you should match your current unattend.xml under custom, with the unattend.xml.template from the opsi directory and add the changes from the template into your unattend.xml. The changes are also backwards compatible with previous Windows 10 builds (tested with the following Win10 builds: 1511, 1607, and 1703).
Support for additional Linux distributions as testing
With this release we also publish the packages for SLES12 SP2 and OpenSuse Leap 42.2 as a test.
As stable we release:
Server packages:
opsi-nagios-plugins (4.0.7.2-1)
Localboot packages:
opsi-client-agent (4.0.7.12-1)
opsi-winst/opsi-script (4.11.6.12-1)
Netboot packages:
Centos7 (4.0.7.1-5)
Debian (4.0.7.1-3)
Debian7 (4.0.7.1-4)
Debian8 (4.0.7.1-5)
OpenSUSE Leap 42.1 (4.0.7.1-5)
RedHat7 (4.0.7.1-6)
SLES11SP4 (4.0.7.1-5)
SLES12 (4.0.7.1-5)
Ubuntu (4.0.7.1-3)
Ubuntu16-04 (4.0.7.1-6)
opsi-local-image packages:
opsi-local-image-* (4.0.7.1-4)
Following packages are published for Testing:
Server packages:
opsi-linux-support (4.0.7-5)
opsi-depotserver (4.0.7.1-1)
opsiconfd (4.0.7.9-1)
python-opsi (4.0.7.39-1)
opsi-linux-bootimage (20170405-1)
Localboot pacakges:
opsi-configed Version (4.0.7.5.22)
opsi-linux-clientagent (4.0.7.6-1)
Netboot packages:
win10 (4.0.7.1-7)
win10-x64 (4.0.7.1-7)
win10-captured (4.0.7.1-7)
win10-x64-captured (4.0.7.1-7)
centos70 (4.0.7.2-1)
debian (4.0.7.2-1)
debian7 (4.0.7.2-1)
debian8 (4.0.7.2-1)
debian9 (4.0.7.2-1)
opensuse13-2 (4.0.7.2-1)
opensusel42-1 (4.0.7.2-2)
opensusel42-2 (4.0.7.2-2)
redhat70 (4.0.7.2-1)
sles11sp4 (4.0.7.2-1)
sles12 (4.0.7.2-1)
sles12sp1 (4.0.7.2-1)
sles12sp2 (4.0.7.2-1)
ubuntu14-04 (4.0.7.2-1)
ubuntu16-04 (4.0.7.2-1)
ubuntu (4.0.7.2-1)
ucs41 (4.0.7.2-1)
opsi-local-image packages:
opsi-local-image-win10 (4.0.7.1-5)
opsi-local-image-win10-x64 (4.0.7.1-5)
opsi-local-image-win10-captured (4.0.7.1-5)
opsi-local-image-win10-x64-captured (4.0.7.1-5)
Changelogs for the Testing packages
Code: Alles auswählen
opsi-configed (4.0.7.5.22) stable; urgency=medium
SSH console feature added
licence management max table width extended
removal of host specific properties via context menu
ignore case for swident in SWAuditClientEntry (bugfix)
new columns configurable in client menu
user roles feature added
modules check for user roles and linux clients
interpreter for extended modules check
logging and selecting tls version
hosts-to-wake-up corrected
fixing popup of combobox in windows
– Rupert Roeder r.roeder@uib.de Thu Apr 19 13:25:44 2017 +0200
Code: Alles auswählen
opsi-linux-support (4.0.7-5) stable; urgency=medium
Better out-of-the-box experience for UCS.
SUSE: do not alter default options.
– Niko Wenselowski n.wenselowski@uib.de Fri, 05 Aug 2016 15:46:46 +0200
Code: Alles auswählen
opsi-depotserver (4.0.7.1-1) testing; urgency=medium
opsi-setup: Do not display None for value if this is returned reading data from an existing certificate.
– Niko Wenselowski n.wenselowski@uib.de Mon, 09 Jan 2017 15:53:20 +0100
Code: Alles auswählen
opsiconfd (4.0.7.9-1) stable; urgency=medium
Infopage now sorts the seen user agents and rpc calls case-insensitive.
– Niko Wenselowski n.wenselowski@uib.de Fri, 21 Apr 2017 15:10:02 +0200
opsiconfd (4.0.7.8-1) stable; urgency=medium
The infopage now shows what user agents have been seen during the run of opsiconfd.
– Niko Wenselowski n.wenselowski@uib.de Thu, 30 Mar 2017 13:23:36 +0200
opsiconfd (4.0.7.7-1) stable; urgency=medium
Disabling „symlink logs“ now has the desired effect that logs will not be linked. Once a client is successful authenticated %m will be replaced with the client ID instead of the IP in the logfile name.
– Niko Wenselowski n.wenselowski@uib.de Wed, 29 Mar 2017 10:36:50 +0200
opsiconfd (4.0.7.6-2) experimental; urgency=low
fixing broken logrotate on CentOS6 & RHEL6
– Mathias Radtke m.radtke@uib.de Mon, 16 Jan 2017 09:37:00 +0100
opsiconfd (4.0.7.6-1) experimental; urgency=medium
Added support to configure the ciphers accepted by the opsiconfd when creating an secured connection (https).
– Niko Wenselowski n.wenselowski@uib.de Wed, 11 Jan 2017 14:53:01 +0100
Code: Alles auswählen
python-opsi (4.0.7.39-1) stable; urgency=medium
Added 30_kiosk.conf for the new kiosk client.
30_sshcommands.conf: Internal refactoring.
30_sshcommands.conf: Removed getSSHCommand. Use SSHCommand_getObject instead.
30_sshcommands.conf: Removed getSSHCommands. Use SSHCommand_getObjects instead.
30_sshcommands.conf: Removed createSSHCommands. Use SSHCommand_createObjects instead.
30_sshcommands.conf: Removed createSSHCommand. Use SSHCommand_createObject instead.
30_sshcommands.conf: Removed updateSSHCommand. Use SSHCommand_updateObject instead.
30_sshcommands.conf: Removed updateSSHCommands. Use SSHCommand_updateObjects instead.
30_sshcommands.conf: Removed deleteSSHCommands. Use SSHCommand_deleteObjects instead.
30_sshcommands.conf: Removed deleteSSHCommand. Use SSHCommand_deleteObject instead.
40_admin_tasks.conf: Updated docstring of getClientsWithOutdatedProduct.
– Niko Wenselowski n.wenselowski@uib.de Mon, 24 Apr 2017 17:46:09 +0200
python-opsi (4.0.7.38-4) stable; urgency=medium
Drop creating the custom ssh command file in the postinst.
– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 19:29:11 +0200
python-opsi (4.0.7.38-3) stable; urgency=medium
Do not deploy empty file for custom ssh command config but instead create that file in the postinst if not existing.
– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 17:09:02 +0200
python-opsi (4.0.7.38-2) stable; urgency=medium
Reverted the prevention of creating users on UCS.
SSH extension: emptied file with default commands for safety reasons.
– Niko Wenselowski n.wenselowski@uib.de Thu, 20 Apr 2017 12:52:51 +0200
python-opsi (4.0.7.38-1) stable; urgency=medium
10_opsi.conf: Do not pass invalid parameter in deleteProductDependency.
Added SSH extension.
OPSI.Logger: Show no message if unlinking a non-existing file fails.
OPSI.Util.File.Opsi.PackageControlFile: if no version for package or product are given assume defaults.
– Niko Wenselowski n.wenselowski@uib.de Thu, 30 Mar 2017 10:47:13 +0200
python-opsi (4.0.7.37-1) stable; urgency=medium
20_legacy.conf: Removed methods getPcpatchRSAPrivateKey and setPcpatchPassword. Please use the opsi-admin task setPcpatchPassword for setting the password instead.
– Niko Wenselowski n.wenselowski@uib.de Thu, 02 Mar 2017 11:23:49 +0100
python-opsi (4.0.7.36-1) stable; urgency=medium
OPSI.Util: the methods for blowfish encryption / decryption now raise a BlowfishError if things fail.
– Niko Wenselowski n.wenselowski@uib.de Thu, 16 Feb 2017 15:11:25 +0100
Code: Alles auswählen
opsi-nagios-plugins (4.0.7.2-1) testing; urgency=medium
Using the new-style base64 Python interface to avoid breaking with combinations of username and password that exceed 72 characters and
lead to newlines in the base64-encoded authentication header.
This is in response to CVE-2016-5699 / Python bug 22928 as these patched Python versions may lead to breaks on some systems.
– Niko Wenselowski n.wenselowski@uib.de Tue, 26 Jul 2016 15:40:04 +0200
opsi-nagios-plugins (4.0.7.1-1) testing; urgency=medium
Internal refactorings.
Accepting self-signed certificates without showing a warning.
– Niko Wenselowski n.wenselowski@uib.de Tue, 26 Jul 2016 14:27:37 +0200
Code: Alles auswählen
opsi-client-agent (4.0.7.12-1) stable; urgency=low
update auf opsi-script 4.11.6.12
update auf openssl 1.0.2.k
update opsiclientkiosk 4.0.7.5
– Detlef Oertel d.oertel@uib.de Wed, 14 Dec 2016:14:30:00 +0200
Code: Alles auswählen
opsi-winst/opsi-script (4.11.6.12-1) stable; urgency=low
osjson: escape chars in jsonAsArrayToStringList
osparser: Logging at errorsOccurredSinceMark
osparser: move/rename/symlink/hardlink: no Syntax error on wrong parameters ; fixes #2036
some changes for 64 Bit Version
update to openSSL 1.0.2k (1.0.2.11)
integrate winst64.exe to the package for usage in winpe
– Detlef Oertel d.oertel@uib.de Tue, 03 Jan 2017:15:00:00 +0200
Code: Alles auswählen
opsi-linux-client-agent (4.0.7.6-1) stable; urgency=medium
Updated opsi-deploy-client-agent to 4.0.7.5.
– Niko Wenselowski n.wenselowski@uib.de Mon, 5 Apr 2017 13:47:31 + 0100
Code: Alles auswählen
windows10 (4.0.7.1-7) testing; urgency=low
unattend.xml: Windows 10 1703 compatible
– Mathias Radtke m.radtke@uib.de Wed, Apr 12 16:33:00 2017 +0200
Code: Alles auswählen
opsi-local-image-win10* (4.0.7.1-5) testing; urgency=low
unattend.xml: Windows 10 1703 compatible
– Mathias Radtke m.radtke@uib.de Wed, Apr 12 16:33:00 2017 +0200
Code: Alles auswählen
Dieses Changelogs betreffen folgende Linux-Netboot-Pakete:
linux = alle opsi-Linux-Netboot-Pakete
linux (4.0.7.2-1) testing; urgency=low
postinst: sudo command may fail -> echo to inform user
– Mathias Radtke m.radtke@uib.de Thu Mar 16 15:15:00 +0100
Spezielle Änderungen an einzelnen Paketen:
debian8 (4.0.7.1-5) testing; urgency=low
setup.py: installing desktop_package at end of installation
– Mathias Radtke m.radtke@uib.de Tue Jan 30 08:50:00 2017 +0100
ubuntu16-04 (4.0.7.1-7) stable; urgency=low
setup.py: removing xenial-updates/backports repository from sources.list when using local http repo
– Mathias Radtke m.radtke@uib.de Tue Mar 07 15:05:00 +0100
ubuntu16-04 (4.0.7.1-6) stable; urgency=low
setup.py: installing desktop_package at end of installation
– Mathias Radtke m.radtke@uib.de Tue Jan 30 08:50:00 2017 +0100
opensusel42-1 & opensusel42-2 (4.0.7.2-2) testing; urgency=medium
UEFI compatible installation
– Mathias Radtke m.radtke@uib.de Mon Apr 03 2017 14:50:00 +0200
Code: Alles auswählen
opsi-linux-client-agent (4.0.7.6-1) stable; urgency=medium
Updated opsi-deploy-client-agent to 4.0.7.5.
– Niko Wenselowski n.wenselowski@uib.de Mon, 5 Apr 2017 13:47:31 + 0100
opsi-linux-client-agent (4.0.7.5-2) stable; urgency=medium
setup.opsiscript: fix PatchHosts_standard wrong sequence; references #2508
setup.opsiscript: get last element from 'dig +short' output list; references #2508
setup.opsiscript: set non-debug default log level to 7
– d.oertel d.oertel@uib.de Fri, 24 Feb 2017 15:00:00 + 0100
Martin of uib gmbh