nethserver / dev Goto Github PK

Fix rsyslogd deprecation warnings

rsyslogd: warning: ~ action is deprecated, consider using the 'stop' statement instead [try http://www.rsyslog.com/e/2307 ]

Fail2ban scans log files (e.g. /var/log/apache/error_log) and bans IPs that show the malicious signs – too many password failures, seeking for exploits, etc

Implement nethserver-fail2ban RPM package with

• Fail2ban panel
• Blacklist tab with Unban Input Box

More info here:

• http://wiki.nethserver.org/doku.php?id=module:fail2ban
• http://community.nethserver.org/t/nethserver-fail2ban-needs-testers/2464

When it's ready and stable the package will be moved into the NethForge

nethserver-delegated-panel is a software to grant access permissions to the server-manager for groups or users.

You can define precisely who is granted and for what.

http://community.nethserver.org/t/nethserver-delegated-panel/1937

what is needed to do

• allow dashboard for simple users
• templatize the json authorisation file

When it's ready and stable the package will be moved into the NethForge

Guidelines to accomplish this task are published on

http://wiki.nethserver.org/doku.php?id=developer:nethserver_7_kickstart

Original issue http://dev.nethserver.org/issues/3145

DNSmasq service running under systemd doesn't implement the reload action.

Following packages must replace reload action with restart:

• nethserver-ejabberd
• nethserver-squid
• nethserver-dnsmasq

Let's Encrypt automatically generates and renews SSL certificates (see: https://letsencrypt.org/).

Prerequisites:

• the server must be reachable from outside at port 80
• the server must have at least one public domain name associated to its own public IP (technically a DNS record A or a CNAME)

The system should support Let's Encrypt to generate certificates for the following domains:

• server FQDN
• server alias used as web root inside shared folders (ibays)
• custom domain names

in page proxy settings, user prop isn't saved. Proxy key is configured with host, port and pass, but not user because of a wrong property name

Package:
nethserver-base-3.0.0

CentOS 7 brings Apache 2.4 which replaces all Order/Deny directives with the Require option.

All web applications should switch to the new options.

See:

• https://httpd.apache.org/docs/2.4/howto/access.html
• https://httpd.apache.org/docs/2.4/mod/mod_authz_host.html#requiredirectives

In FirstConfigWiz UI module, when a validation error occurs and a red warning banner is shown, the title for the next section is highlighted on the left-column.

http://community.nethserver.org/t/centos-6-8-is-out-updates-are-available/3449/25?u=davidep
Thanks to @dnutan for pointing it out

don’t know if it’s related, found this in journalctl:

esmith::event[4380]: Failed to start openvpn.service: Unit openvpn.service failed to load: No such file or directory.

VPN works just fine, I think somewhere “@host-to-net” is missing in a systmctl status query

/var/log/samba/cores/winbindd/core

s;��@�����������qtP������p����

Boris DE ANDRADE wrote:

The email validation function uses several regex to filter emails.
Maybe we could use the native php function "filter_var" with the "FILTER_VALIDATE_EMAIL" filter? which is following the RFC 5322
It would answer to some needs , like the "+" char.
Attached, a suggestion of improvement to the function evalEmail()
http://www.rfc-editor.org/rfc/rfc5322.txt
@ 3.4. Address Specification

Imported from http://dev.nethserver.org/issues/3209
Original author Boris DE ANDRADE

The "Network services" edit page displays an empty checkbox for each unconfigured ethernet interface.

Affected package
nethserver-base-3.0.0-1

Steps to reproduce

• Configure a machine with 2 interfaces
• Leave a ethernet interface unconfigured

Expected behavior

• The edit page inside "Network services" section must display green and red zones

Actual behavior

• The edit page inside "Network services" section displays an empty checkbox

Package
nethserver-samba-1.5.4-1.2.g66cac90.ns7.noarch

Symptom
during nethserver-samba installation the runlevel-adjust event fails, while initializing the admin account into SAM db

Expected result
runlevel-adjust must not fail, and admin user and primary group must be correctly mapped in SAM db. At least net sam list groups and net sam list users must print admin.

In /var/log/messages

Jan 13 15:47:31 vm5 esmith::event[13503]: Event: user-create admin
Jan 13 15:47:32 vm5 nslcd[13362]: [495cff] <passwd=1000> (re)loading /etc/nsswitch.conf
Jan 13 15:47:32 vm5 esmith::event[13503]: Action: /etc/e-smith/events/user-create/S04user-create-unix SUCCESS [0.362314]
Jan 13 15:47:32 vm5 esmith::event[13503]: Action: /etc/e-smith/events/user-create/S20nethserver-directory-organization-modify SUCCESS [0.082775]
Jan 13 15:47:32 vm5 esmith::event[13503]: Mapping group admin failed with NT_STATUS_GROUP_EXISTS
Jan 13 15:47:32 vm5 esmith::event[13503]: Failed to map user's unix group `admin` in SAM database at /etc/e-smith/events/user-create/S20nethserver-samba-user-create line 93.
Jan 13 15:47:32 vm5 esmith::event[13503]: Updated 'user must change password at next logon' for VM5\admin to yes
Jan 13 15:47:32 vm5 esmith::event[13503]: Action: /etc/e-smith/events/user-create/S20nethserver-samba-user-create FAILED: 1 [0.485939]
...
Jan 13 15:47:33 vm5 esmith::event[13503]: Event: user-create FAILED
Jan 13 15:47:33 vm5 esmith::event[13280]: [ERROR] admin account creation failed!
...
Jan 13 15:47:34 vm5 esmith::event[13280]: Event: runlevel-adjust FAILED

Package
nethserver-directory-2.2.0-1.1.ga90636c.ns7.noarch

Symptom
After installing nethserver-directory the admin user is missing and the -update event fails

Expected result
The admin user exists with uid=500

In /var/log/messages

Dec 21 16:46:30 vm5 esmith::event[4495]: Event: nethserver-directory-update
...
Dec 21 16:46:32 vm5 esmith::event[4495]: Action: /etc/e-smith/events/actions/generic_template_expand SUCCESS [0.267819]
Dec 21 16:46:32 vm5 systemd: Starting OpenLDAP Server Daemon...
Dec 21 16:46:33 vm5 systemd: Started OpenLDAP Server Daemon.
Dec 21 16:46:34 vm5 esmith::event[4495]: Error modifying olcDatabase={2}bdb,cn=config
Dec 21 16:46:34 vm5 esmith::event[4495]: LDAP_INVALID_SYNTAX objectClass: value #1 invalid per syntax at /etc/e-smith/events/nethserver-directory-update/S10nethserver-directory-conf line 163.
Dec 21 16:46:34 vm5 esmith::event[4495]: Error adding "relay" backend database: objectClass: value #1 invalid per syntax at /etc/e-smith/events/nethserver-directory-update/S10nethserver-directory-conf line 171.
Dec 21 16:46:34 vm5 esmith::event[4495]: Action: /etc/e-smith/events/nethserver-directory-update/S10nethserver-directory-conf FAILED: 1 [1.410326]
Dec 21 16:46:34 vm5 esmith::event[4495]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 116.
...
Dec 21 16:46:34 vm5 esmith::event[4495]: error merging  at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 128.
Dec 21 16:46:34 vm5 esmith::event[4495]: Action: /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup FAILED: 9 [0.125024]
...
Dec 21 16:46:35 vm5 esmith::event[4733]: Event: user-create admin
Dec 21 16:46:35 vm5 esmith::event[4733]: Error initializing libuser: could not bind to LDAP server, first attempt as `cn=libuser,dc=directory,dc=nh': Invalid credentials.
Dec 21 16:46:35 vm5 esmith::event[4733]: Failed to create user private group account `admin`.
Dec 21 16:46:35 vm5 esmith::event[4733]: Action: /etc/e-smith/events/user-create/S04user-create-unix FAILED: 1 [0.210669]
Dec 21 16:46:35 vm5 esmith::event[4733]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/user-create/S20nethserver-directory-organization-modify line 86.
Dec 21 16:46:35 vm5 esmith::event[4733]: [ERROR] Failed to set contact info on entry `uid=admin,ou=People,dc=directory,dc=nh`: no global superior knowledge at /etc/e-smith/events/user-create/S20nethserver-directory-organization-modify line 88.
Dec 21 16:46:35 vm5 esmith::event[4733]: Action: /etc/e-smith/events/user-create/S20nethserver-directory-organization-modify FAILED: 1 [0.068379]
Dec 21 16:46:35 vm5 esmith::event[4733]: Action: /etc/e-smith/events/user-create/S25count-active-user-accounts SUCCESS [0.032729]
...

In sogo v3 SOGoJunkFolderName is not mandatory.
I added this to my custom 05general_preferences template

$S{SOGoJunkFolderName} = ($dovecot{SpamFolder} || "Junk");

New upstream release (SOGo 3) moved the configuration to a standard file: /etc/sogo/sogo.conf.

Change current implementation by switching from GNUStep database to configuration file.

See pull request: NethServer/nethserver-sogo#4

Port the fix from NS 6.

See http://dev.nethserver.org/issues/3416

• Modify NethServer::Service Perl module to wrap systemctl command from systemd.
• Fix daemons startup scripts

Original issue http://dev.nethserver.org/issues/3149

Upgrade current configuration for ownCloud 8.
Two packages available:

• EPEL: https://dl.fedoraproject.org/pub/epel/7/x86_64/repoview/owncloud.html
• Upstream: https://download.owncloud.org/download/repositories/stable/owncloud/

The first one is much more CentOS-compliant but it's outdated, I'd rather go with upstream release even if we have to import the RPM inside our repository.

Also the package should be reworked to:

• use occ tool for installation process (probably, we do not need autoconfig.php anymore)
• use occ tool for trusted domains configuration
• move data to /var/lib/nethserver/owncloud/

Installation example:

  ./occ  maintenance:install  --database mysql --database-name owncloud --database-pass mypass --database-user ownuser --admin-user admin  --admin-pass Nethesis,1234 --data-dir /var/lib/nethserver/owncloud/

When setting a new hostname from web interface, the hostname is not reflected in the underlying running system.

See @markVnl patch from #5029:

[root@nethso actions]# diff interface-config-hostname-old interface-config-hostname
17c17
< /bin/hostname ${system_name:-localhost}.${domain_name:-localdomain}

---
> /bin/hostnamectl set-hostname  ${system_name:-localhost}.${domain_name:-localdomain}

• rebuild snort 2.9.8.0 with nethserver patches (still waiting upstream merge)
• enable open appid
• rename as snort (upstream name is snort-openappid)

Step to reproduce:

• install Account provider: Samba Active Directory
• go to domain controller configuration interface, set an ip address and create bridge option
• click on START DC

Now I can see on /var/log/messages that nethserver-dc-save event is in progress, but nothing happens on the interface

It used to work, it's an intermittent bug or something has been broken during development

Symptom
After replacing a NIC, the boot process hangs

Expected behaviour
If NIC is replaced, nethserver-config-network, run by the rc.local template at boot must ask to reassign the old interface name.

Fetchmail is software is old and doesn't work correctly with many ISP.
Substitute Fetchmail with the much more promising Getmail (http://pyropus.ca/software/getmail/).

The new package should be able to read existing Fetchmail configuration.

Implement nethserver-guacamole RPM package, following Adam's howto
http://community.nethserver.org/t/guacamole-package/2030/27?u=alefattorini

http://guac-dev.org/
It's a very handy opensource replacement for the RDP gateway that used to come with Microsoft SBS servers before SBS was deemed to be no more: Remote Web Workplace.

Scenario: VPS provider which offers simple virtual machine with a network interface configured using DHCP.

The system actually supports green interfaces configured only with static IPs: if initialization scripts set a static IP on the previous scenario, the server could be unreachable if the lease expires.

See: http://community.nethserver.org/t/after-installation-on-arubacloud-server-is-not-reachable/2847

There are quite some users in the community with an educational background. In an attempt to get some specialized applications integrated in NS, it would be great to start with moodle. Http://www.moodle.org
Moodle is a webbased elearning application wich is very feature rich, including system social media features, student score history an ofcourse serving e learning objects.
Goal is to have moodle installed with SSO support from NS user accounts.

Installed nethserver-adagios-1.0.3-1.4.ga4f16be.ns7.noarch.rpm, nagios service fails to start

First error

qh: Failed to init socket '/var/log/nagios/rw/nagios.qh'. bind() failed: No such file or directory
Error: Failed to initialize query handler. Aborting

The /var/log/nagios/rw directory is missing. If I create it manually and nagios ownership,

Error: Could not load module '/usr/lib64/mk-livestatus/livestatus.o' -> /usr/lib64/mk-livestatus/livestatus.o: undefined symbol: last_command_check
Error: Failed to load module '/usr/lib64/mk-livestatus/livestatus.o'.
Error: Module '/usr/lib64/nagios/brokers/npcdmod.o' is using an old or unspecified version of the event broker API.  Module will be unloaded.
Error: Failed to load module '/usr/lib64/nagios/brokers/npcdmod.o'.

Probably Nagios 4 and packages from ok-testing repo are not compatible. Upstream discussion on opinkerfi/adagios#585

I can confirm the send buton fails sometimes, symptoms:

• Sent button does fail.
• Only local receipts are accepted.

It's quirky, sometime it just works. Can't remember having this with v2.
I tied so far:
-one mail domain = server domain
-one mail domain <> server domain
-two mail domains (one = server doamin) in diferent order

in the sogo log :
sogod [2929]: <0x0x7ff6529e0720[SOGoCache]> an error occurred when caching value for key

this indicates memcached can't be reached http://wiki.sogo.nu/CommonProblems
tried in sogod.plist:

<key>SOGoMemcachedHost</key>
<string>127.0.0.1</string>

Note i did a lot of testing: dav access, thunderbird integrator, ActiveSync etc. etc. so should probably set up an vanilla system to investigate, running out of time so this could take a while...

During/after update of vanilla ns7 and install of Mail-Server and Sogo amavisd does not start.

Found a (lost) use strict; in amavisd.conf:

# ================= DO NOT MODIFY THIS FILE =================
#
# Manual changes will be lost when this file is regenerated.
#
# Please read the developer's guide, which is available
# at https://dev.nethesis.it/projects/nethserver/wiki/NethServer
# original work from http://www.contribs.org/development/
#
# Copyright (C) 2013 Nethesis S.r.l.
# http://www.nethesis.it - [email protected]
#


use strict;

don’t know the origin but suspect .../ actions/nethserver-mail-filter-conf

Starts fine after removing this from amavisd.conf

After enabling webvirtmgr from the web interface the service will not start.

Steps to reproduce:

• Enable "Virtual machine manager" from "Virtual Machine" page
• The system doesn't report any error, but the service will not start

Relevant log:

-- 
-- Unit webvirtmgr.service has begun starting up.
Feb 18 16:33:19 nethtest1.ftp.sh systemd[30603]: Failed at step CHDIR spawning /usr/bin/python: No such file or directory
-- Subject: Process /usr/bin/python could not be executed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- The process /usr/bin/python could not be executed and failed.
-- 
-- The error number returned by this process is 2.
Feb 18 16:33:19 nethtest1.ftp.sh systemd[1]: webvirtmgr.service: main process exited, code=exited, status=200/CHDIR
Feb 18 16:33:19 nethtest1.ftp.sh systemd[1]: Unit webvirtmgr.service entered failed state.
Feb 18 16:33:19 nethtest1.ftp.sh systemd[1]: webvirtmgr.service failed.
Feb 18 16:33:19 nethtest1.ftp.sh polkitd[25152]: Unregistered Authentication Agent for unix-process:30598:121008432 (system bus name :1.95, object path /org/f
Feb 18 16:33:30 nethtest1.ftp.sh polkitd[25152]: Registered Authentication Agent for unix-process:30607:121009482 (system bus name :1.96 [/usr/bin/pkttyagent 
Feb 18 16:33:30 nethtest1.ftp.sh systemd[30612]: Failed at step CHDIR spawning /usr/bin/python: No such file or directory
-- Subject: Process /usr/bin/python could not be executed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- The process /usr/bin/python could not be executed and failed.
-- 
-- The error number returned by this process is 2.
Feb 18 16:33:30 nethtest1.ftp.sh systemd[1]: Started WebVirtMgr Gunicorn Server.
-- Subject: Unit webvirtmgr.service has finished start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit webvirtmgr.service has finished starting up.
-- 
-- The start-up result is done.
Feb 18 16:33:30 nethtest1.ftp.sh systemd[1]: Starting WebVirtMgr Gunicorn Server...
-- Subject: Unit webvirtmgr.service has begun start-up
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit webvirtmgr.service has begun starting up.
Feb 18 16:33:30 nethtest1.ftp.sh systemd[1]: webvirtmgr.service: main process exited, code=exited, status=200/CHDIR
Feb 18 16:33:30 nethtest1.ftp.sh systemd[1]: Unit webvirtmgr.service entered failed state.
Feb 18 16:33:30 nethtest1.ftp.sh systemd[1]: webvirtmgr.service failed.
Feb 18 16:33:30 nethtest1.ftp.sh polkitd[25152]: Unregistered Authentication Agent for unix-process:30607:121009482 (system bus name :1.96, object path /org/f...)

Workaround
Start webvirtmgr manually:

/usr/bin/python2 /usr/lib/python2.7/site-packages/webvirtmgr/manage.py run_gunicorn \
-c /usr/lib/python2.7/site-packages/webvirtmgr/conf/gunicorn.conf.py

Package
nethserver-httpd-2.4.0-1.3.gc38287d.ns7.noarch

Symptom
The nethserver-httpd-update event is not triggered. If it is triggered manually an Apache configuration error occurs. In /var/log/messages

Jan 15 14:37:38 vm5 httpd: httpd: Syntax error on line 28 of /etc/httpd/conf/httpd.conf: Cannot load modules/mod_authn_alias.so into server: /etc/httpd/modules/mod_authn_alias.so: cannot open shared object file: No such file or directory

Expected results
Apache must be up and running after nethserver-httpd-update event

More informations:
http://www.nethserver.org/go7/result.html#ruleresult-idp7335504

After enabling snort from the web interface the service will not start.

Steps to reproduce:

• Enable snort from "IPS"
• Choose "Security" or "Connectivity" as "Rule policy"
• The system will report the event is failed

Relevant log:

Feb 17 16:39:53 engine esmith::event[3260]: Event: nethserver-pulledpork-save
...
Feb 17 16:39:57 engine esmith::event[3260]: #011Error 404 when fetching https://rules.emergingthreatspro.com/emerging.rules.tar.gz.md5 at /usr/bin/pulledpork.
pl line 516.
Feb 17 16:39:57 engine esmith::event[3260]: #011main::md5file('open', 'emerging.rules.tar.gz', '/tmp/', 'https://rules.emergingthreatspro.com/') called at /us
r/bin/pulledpork.pl line 1937
Feb 17 16:39:57 engine esmith::event[3260]: Rules tarball download of community-rules.tar.gz....
Feb 17 16:39:57 engine esmith::event[3260]: Checking latest MD5 for emerging.rules.tar.gz....
Feb 17 16:39:57 engine esmith::event[3260]: #011A 404 error occurred, please verify your filenames and urls for your tarball!
Feb 17 16:39:57 engine esmith::event[3260]: Action: /etc/e-smith/events/nethserver-pulledpork-save/S30nethserver-pulledpork-apply FAILED: 255 [3.472343]
Feb 17 16:39:57 engine esmith::event[3260]: Event: nethserver-pulledpork-save FAILED

Also:

Feb 17 16:39:58 engine systemd: Starting SYSV: snort is a lightweight network intrusion detection tool that currently detects more than 1100 host and network vulnerabilities, portscans, backdoors, and more....
Feb 17 16:39:58 engine snortd: Starting snort: /usr/sbin/snort: error while loading shared libraries: libsnf.so.0: cannot open shared object file: No such file or directory
Feb 17 16:39:58 engine snortd: [FAILED]

Port the commits from NS6.

See: http://dev.nethserver.org/issues/3413

Steps to reproduce

• From Software Center > Install File Server group
• After successful installation the File Server group is still listed under "Software Center > Available"
• The yum grouplist utility shows it is actually installed:

# yum grouplist
...
Installed Groups:
   Backup
   File server
Available Groups:
   Bandwidth monitor
   Basic firewall

Expected results
After successful installation the File Server group must be listed in "Software Center > Installed"

Package
nethserver-base-2.9.5-1.14.gfb91f72.ns7.noarch

In CentOS the new default NTP server daemon is chrony.
Change the underlying implementation and replace ntpd daemon with chronyd.

Also take care to:

• migrate current db configuration to the new key
• remove unused property SyncToHWClockSupported
• update administrator and developer manuals

See: https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/System_Administrators_Guide/ch-Configuring_NTP_Using_the_chrony_Suite.html

The service clamd@squidclamav doesn't automatically start at boot.
The c-icap daemon launches a clamd instance (clamd@squidclamav) using a systemd unit template:

/usr/sbin/clamd -c /etc/clamd.d/squidclamav.conf --nofork=yes

Steps to reproduce

• Install nethserver-squidclamav
• Enable the antivirus from Content filter configuration page and check clamd is running
• Reboot the system
• The unit clamd@squidclamav is stopped

nethserver-phonehome 1.2.0 uses its own proxy configuration file instead of global proxy configuration.

Change the nethserver-phonehome configuration to read the proxy configuration from the global proxy settings, as other services like yum.

CentOS 7 drops the support for hal daemon.
Actually, the backup module uses hal commands to search for USB removable devices to be used as backup target.

The code must reworked using the lsblk command.

Dec 22 17:48:12 localhost systemd: Starting OpenLDAP Server Daemon...
Dec 22 17:48:12 localhost esmith::event[11020]: Cannot connect LDAP server at /etc/e-smith/events/nethserver-directory-update/S10nethserver-directory-conf line 48.
Dec 22 17:48:12 localhost esmith::event[11020]: Action: /etc/e-smith/events/nethserver-directory-update/S10nethserver-directory-conf FAILED: 111 [0.204992]
Dec 22 17:48:12 localhost systemd: Started OpenLDAP Server Daemon.
Dec 22 17:48:12 localhost esmith::event[11020]: Added LDIF /etc/openldap/schema/cosine.ldif schema
Dec 22 17:48:12 localhost esmith::event[11020]: Added LDIF /etc/openldap/schema/nis.ldif schema
Dec 22 17:48:12 localhost esmith::event[11020]: Added LDIF /etc/openldap/schema/inetorgperson.ldif schema
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying ou=People,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying ou=Groups,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying uid=nsstest,ou=People,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying cn=nsstest,ou=Groups,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying uid=locals,ou=People,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 122.
Dec 22 17:48:12 localhost esmith::event[11020]: Error modifying cn=locals,ou=Groups,dc=directory,dc=nh: 53 LDAP_UNWILLING_TO_PERFORM at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 124.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 133.
Dec 22 17:48:12 localhost esmith::event[11020]: error merging at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 133.
Dec 22 17:48:12 localhost esmith::event[11020]: LDAP_UNWILLING_TO_PERFORM no global superior knowledge at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 134.
Dec 22 17:48:12 localhost esmith::event[11020]: error merging at /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup line 134.
Dec 22 17:48:12 localhost esmith::event[11020]: Action: /etc/e-smith/events/nethserver-directory-update/S11nethserver-directory-dit-setup FAILED: 9 [0.185004]
Dec 22 17:48:12 localhost esmith::event[11020]: Action: /etc/e-smith/events/nethserver-directory-update/S50nethserver-directory-password-policy SUCCESS [0.055556]
Dec 22 17:48:12 localhost systemd: Reloading.

Error message post install;

Task completed with errors
S10nethserver-directory-conf #15 (exit status 28416)
S11nethserver-directory-dit-setup #16 (exit status 2304)
S97nethserver-samba-sam-conf #60 (exit status 256)
Adjust service smb #53 (exit status 1)
restart service smb failed!
Adjust service smb #75 (exit status 1)
failed
S04user-create-unix #78 (exit status 256)
S20nethserver-directory-organization-modify #79 (exit status 256)
S25nethserver-directory-user-modify #82 (exit status 256)
S04user-create-unix #87 (exit status 256)
S20nethserver-directory-organization-modify #88 (exit status 256)
S25nethserver-directory-user-modify #91 (exit status 256)
S04group-create-unix #96 (exit status 256)
S20group-modify-unix #97 (exit status 256)

AFAIK, NethServer 6 L2TP VPNs implementation has a limitation: it can't work with both windows or iOS clients, i.e. two different server setups are needed and they can't live together.

I'd like to change l2TP in NethServer 7 to overcome this limitation.
Meanwhile, we can ship working IPsec tunnels simply removing one line from a configuration file.

Following packages should be rebuilt to latest upstream release:

• c-icap
• squidclamav

Also, c-icap/squidclamav templates must be changed accordingly to new clamd configuration.

Nethserver-base requires the mdadm package, but this dependency is not satisfied for all architectures (eg. ARM).

Since Anaconda is smart enough to include mdadm package if a software RAID is configured, we could simply remove the hard dependency.

Reference: http://community.nethserver.org/t/nethserver-on-raspberry-pi/2851/72?u=giacomo

Anytime the user try to uninstall an a module from the Software Center, the web interface displays the following error:

Resolving RPM dependencies
The install/update may have failed due to metadata caching issues. Please clean the cache by clicking the button below and retry the install/update operation.
[CLEAR YUM CACHE]

Affected package: nethserver-base-3.0.0-

Steps to reproduce

• Open the Software Center page
• Install a new module
• Remove the installed module

Expected behavior

• The module should be removed without errors

Actual behavior

• The web interface always displays the above error

Reference: http://community.nethserver.org/t/ns7b1-software-center-warning-after-removing-any-module/3849

nethserver-dc-1.0.0: when backup is launched from interface or by cron, it fails. It's a race condition and after first backup fails, seem that others don't.
step to reproduce: launch configuration backup from interface or wait for cron to launch it and check in /var/log/messages that it fails

UrBackup is an easy to setup open source client/server backup system, that through a combination of image and file backups accomplishes both data safety and a fast restoration time. 

Implement nethserver-urbackup RPM package

More info here:

http://community.nethserver.org/t/nethserver-urbackup-need-testers/3272
http://community.nethserver.org/t/nethserver-as-a-backup-station/2962/11
When it's ready and stable the package will be moved into the NethForge @stephdl

Multiple instances of clamd can be run, each with its config.
nethserver-antivirus deals with database updates.
Remove clamd service definition.

At startup, sshd logs:
Jan 15 17:56:59 localhost sshd: Could not load host key: /etc/ssh/ssh_host_key
Jan 15 17:56:59 localhost sshd: Could not load host key: /etc/ssh/ssh_host_dsa_key

sshd_config needs to be adjusted. While at it, I'd cleanup the templates to reflect current defaults.