Current Document and Section   Other Documents     Documentation     Release Notes   User Guide DNS and Domains Gateway Services Guide Howtos

Release Notes - ClarkConnect 5.0

Introduction

The following release notes provide an overview of the ClarkConnect 5.0 release. All users should read this document, but special attention should be made by users upgrading their systems to this release.

What's New

The full list of changes is available in the developer change log -- highlights include:

• Upgrade to CentOS 5.x
• Complete LDAP integration
• Protocol filtering
• Improved bandwidth management
• Mail quarantine
• Improved Windows integration:
  • Roaming profiles
  • Recycle bin support
  • File auditing

Upgrading

Version 5.x supports upgrades from ClarkConnect 4.x and later. Upgrades from earlier versions (or systems originally installed with an earlier version) are not supported. When you run the ClarkConnect installer, make sure you select the upgrade option (see adjacent screenshot). As with any upgrade, please backup any critical data.

The 5.0 release is a major operating system upgrade, so it is not possible to perform the upgrade on a live system.

In addition, users who have installed third party software packages or used the command-line apt-get tool to install software should also run the following commands:

yum upgrade

Creating Install/Upgrade Media

There are three ways to install or upgrade ClarkConnect software:

   * Bootable CD
   * USB key (requires Internet access)
   * PXE-enabled network card 

Click here for more information on how to create your install media (e.g. burning a CD).

Known Issues

• Blank screens on first boot with some types of hardware
• Localization is incomplete.
• (Community Edition only) If the first boot after an upgrade is taking a long time, add bind_policy soft to /etc/ldap.conf.

Deprecated Packages

The following key packages are no longer included in this version:

4.x to 5.x

• apt (replaced by yum)
• bpalogin (deprecated)
• dev (replaced by udev)
• dspam (deprecated)
• gallery (unsupported, but still available)
• pcmcia-cs (deprecated)

Software Package Notes - 4.x to 5.0

	Warning!

If you have only used the ClarkConnect web-based administration tool to configure and manage your system, the required changes for the upgrade are handled automatically. If you have customized configuration files or other aspects of your system, you may need to intervene to re-integrate your custom changes.

Apt

Apt has been replaced by yum. For those of you comfortable with the command line environment:

Bandwidth

The bandwidth management system is very different in ClarkConnect 5.x. Old bandwidth rules will need to be re-configured using the new Bandwidth Manager. Port ranges are no longer supported.

Flexshare

Some options in the Flexshare system have been simplified. In ClarkConnect 4.2 and earlier, it was possible to configure different groups for a single Flexshare. This option is no longer available -- a Flexshare can only be assigned to a single group.

Kernel

Support for very old CPUs has been dropped (i586 / Pentium 2 or earlier).

LAN Backup/Restore

The Bacula LAN Backup/Restore feature will be deprecated in a future release.

Peer-to-Peer Engine

The new Protocol Filter tool in 5.0 handles peer-to-peer blocking (among many other protocols). If you have enabled peer-to-peer blocking in 4.x, you should review and reconfigure your peer-to-peer policy using the new tool.

Udev

The /dev/ system has been replaced by udev.

Web Proxy

The Squid web proxy software has been upgraded to 2.6.STABLE21. Important features (notably IP reporting for the content filter) are not yet available in Squid 3.0. For this reason, ClarkConnect will continue to use the same version provided upstream.

Windows / Samba

The Windows/Samba software is now completely integrated into the ClarkConnect LDAP/directory system. If you have configured your 4.x system as a primary domain controller (PDC), you will need to rejoin every workstation to the 5.x system. This is an unfortunate but unavoidable requirement in the 4.x to 5.x upgrade.

Just to re-iterate the warning message above: if you have customized the Samba configuration outside of the ClarkConnect web-based interface, you will need to carefully review and possibly re-integrate those custom changes.

Software Package Notes - 4.2 to 4.3

Kolab

The kolabd service (daemon) has changed to ldapsync. This was done to avoid some confusion with Kolab Groupware. The ldapsync service does two tasks:

• synchronizes LDAP settings for other applications
• synchronizes mail accounts with LDAP (if the mail software is installed)

OpenVPN

If you have been experimenting with OpenVPN in previous versions (beta via , the upgrade to 4.3 may impact your settings. Please verify your configuration after performing an upgrade.

Kernel

Some Intel Gigabit network cards have changed drivers (from e1000 to e1000e). If your network cards are not detected on your first reboot, please run the kudzu hardware detection tool from the command line. The kernel upgrade from version 4.2 is optional, but you can upgrade it with the following commands:

apt-get update
apt-get install kernel

The last command will show a list of available kernels. Select your preferred kernel and install it, e.g:

apt-get install kernel#2.6.18-93.cc

Software Package Notes - 4.1 to 4.2

Content Filter (Beta)

If you installed the experimental version of the content filter in version 4.1, you must perform a re-install of the software. From the command line, run the following:

• rpm -e cc-dansguardian-av cc-dansguardian dansguardian dansguardian-blacklists dansguardian-phraselists dansguardian-av
• mv /etc/dansguardian-av /etc/dansguardian-av.old
• apt-get update
• apt-get install cc-dansguardian-av cc-dansguardian

Kernel

The kernel has been upgraded from 2.6.9 to 2.6.18. This means that you must reboot your system after the upgrade. In addition, multiprocessor (SMP) support is now included in the base Linux kernel -- you no longer require the kernel-smp package. If you have more than 4 GB of memory installed, please install the special PAE kernel -- apt-get update; apt-get install kernel-PAE

VPN

Both the PPTP VPN and the IPsec VPN servers have been moved in the menu system. You can now find these features under the Network configuration.

Software Package Notes - 4.0 to 4.1

Mail - Antispam

Antispam training has changed. Please review the Antispam Training in the User Guide.

Mail - SMTP

The mail server will now reject e-mail messages to invalid addresses earlier in the mail processing. This will reduce the resources required for the antivirus and antispam services. This change will be reflected in the mail server reports.