Zivios 0.6.6 Released

We are happy to announce the release of Zivios 0.6.6. A couple of updates did not make the 0.6.5 release that were planned for inclusion (namely, the configuration of the memberof overlay during installation, alongside minor fixes for the package module).

CentOS Release Notes:

The CentOS packages on our download page have been broken down into 3 separate downloads, namely:

  • Zivios Base Infrastructure RPMs
  • Zivios Panel RPM
  • Zivios Agent RPM

If you have already downloaded Zivios 0.6.5, simply grab the 0.6.6 panel and agent RPMs.

The coming releases of Zivios will feature updates primarily to the Zivios Panel and Agent, with the base infrastructure packages being updated only for major version updates (for example, going from Zivios 0.6.x to 0.7.x).

The Zivios Team

Zivios 0.6.5 Released

We are happy to announce the release of Zivios 0.6.5. This release is primarily targeted at CentOS 5.X, ensuring installation and Zivios Replica setup issues are fixed.

Complete announcement details are available at the following URL:

http://lists.zivios.org/pipermail/zivios-announce/2010-September/000014.html

The Zivios Team

Zivios 0.6.5 & 0.8 Update

As a result of an issue with the back-ldap module (see relevant message here), the 0.8 release has been delayed till OpenLDAP 2.4.24 is released with the required updates. We did however finish PAM integration with the installer, as well as the nssov module replacing libnss-ldap.We hope to have 0.8 ready in the near future, hopefully a week or so after OpenLDAP 2.4.24 is released.

Applicable updates from 0.8 have been ported to our main line of development, including OpenLDAP indexing support, direct integration of cn=config style ldif injection during installation (negates all the required conversion as well as multiple restarts to the Directory Service), as well as many improvements to the OpenLDAP replication setup.

Testing on Debian Lenny and CentOS 5 has been completed and, we are now finalizing Ubuntu Lucid packages. We hope to have the release ready in the next few days for everyone.

Also: one of our clients looking to implement Zivios is being kind enough to share some hardware with us for SuSE Linux Enterprise support. SLES-10 support will probably not be publicly available for the 0.6.5 release, however, we plan to have it officially supported in the near future.

The screen-shot below shows how Indexing works in Zivios for OpenLDAP:

Nssov, back-Ldap, Pcache & Zivios…

With the Zivios Builder provisioned to build nssov as well as nss-pam-ldapd stub libraries, package builds out of the way and the initial installation done, we are now finalizing configuration of how the base infrastructure will work. Going by recommendations documented by  the OpenLDAP team, nssov is working quite well to provide user, group and host information from LDAP, alongside authorized service lookups based on LDAP ACLs.

We have so far tested SSH logins successfully, with remote systems working via nssov alongside back-ldap and pcache. The configuration is quite simple, yet provides a robust and solid base for central control of network operations.

Our next steps will include integrating the aforementioned configuration via the Zivios installer (which basically automates all aspects of setup), and moving on to implementing the feature-set in the Zivios Web Panel. Zivios administrators will be able to provision supported services on a given server, with Zivios Group ACLs further provisioning access. Server add operations will automatically provision for back-ldap, pcache and nssov, allowing for a measure of disconnected operations.

Zivios replication will be extended to support nssov as well, though this change will be minimalistic in nature (we simply provision for nssov).

Finally, a big thumbs up to the OpenLDAP team for designing nssov and pcache as wonderfully well as they have. The two overlays are exactly what was required to take the “clunk” out of complex setups.

Zivios 0.8.0 highlights

OpenLDAP has had a stable overlay called “nssov” for some time now. So what does it do? In a nutshell, nssov answers NSS and PAM requests directly in slapd, replacing nss-ldap and pam-ldap.

It negates the need for a caching daemon like nscd while freeing us from dependency nightmares that currently exist between libldap and pam_ldap/nss_ldap based solutions.

Imagine deploying a Linux server via Zivios where, for example, SSH access (for the added server) can be restricted to certain administrative groups that exist in LDAP. Imagine further that all commands executed by users are controlled via sudo, and sudo is tied to LDAP as well. Automatic generation of audit trails, instant notification of system misuse, etc. — all quite possible. Of course configuration of such an infrastructure is very possible today; in fact, countless organizations have deployed complex and comprehensive solutions dictated by their IT policies and requirements.

Zivios 0.8.0 aims to provide “at least” the aforementioned functionality. We also have a DHCP module on the table with Linux Desktop support and package management support being added.

Expect some alpha level releases in August for 0.8, with something solid surfacing hopefully by mid-September.

Zivios 0.6.4 Released!

We are happy to announce the release of Zivios 0.6.4 for CentOS 5.x, Debian Lenny 5.x, Ubuntu Hardy Heron 8.04 as well as Ubuntu Lucid Lynx (10.04).  For information on how to get started, please visit:

http://www.zivios.org/downloads/index

Please note that Zivios 0.6.4 is a beta release and not intended for production use. An updated road-map for the coming 0.6.5 release, as well as information regarding this release is available at:

http://www.zivios.org/roadmap/index

Zivios 0.6.4 updates include:

  • OpenLDAP upgrade to 2.4.21
  • Heimdal upgrade to 1.3.1
  • Bind upgrade to 9.7.0
  • PHP upgrade to 5.3.2
  • Apache upgrade to 2.2.14
  • Cyrus SASL upgrade to 2.1.23
  • Oracle BDB upgrade to 4.8.26
  • Upgrade all prerequisite library dependencies to latest stable version
  • Remove Zend Forms (module forms are work-in-progress)
  • Fix layout issues (scrolling) for user, group and dashboard views
  • Rewrite communication functions in JavaScript library
  • Rework Zivios_Ldap_Engine for speed improvements
  • Rework Zivios_Transaction for speed improvements
  • Redo installer without Zend Forms
  • Introduce new communication library (JavaScript) as well as new layout
  • Fix permission issues during deployment of ISC Bind and Zivios Panel
  • Fix CentOS certificate generation
  • Add support for Ubuntu Lucid
  • Add replica deployment support (via OpenLDAP Delta-Syncrepl)
  • Add OpenLDAP log level control via panel
  • Add forceful password updates, lock-outs and password strength checking
  • Add complete support and integration with LDAP for the Asterisk module

As always, for support running Zivios, please contact us on our Mailing Lists.

Delta Syncrepl for Zivios Directory Service

One of the primary features of the coming release (0.6.4) is replication support for Zivios Core Services. Replicated Core Services include OpenLDAP, Heimdal Kerberos and Bind DNS. As Zivios houses all the aforementioned data in OpenLDAP to begin with, replication of the OpenLDAP service automatically brings slave Bind servers as well as Heimdal KDCs into the picture for us.

Additionally, controlling the Log Level of OpenLDAP is now possible from the control panel itself. Below are a few screen-shots that demo the  functionality:

Setting OpenLDAP Log Level via Zivios:

Controlling the OpenLDAP Log Level via Zivios Directory Service

Controlling the OpenLDAP Log Level via Zivios Directory Service

Setting up Replication — a 2-click operation — for the most part :)

Adding OpenLDAP Replication to a network Server

Adding OpenLDAP Replication to a network Server

Select the Network Server and click on Add Replica -- done!

Select the Network Server and click on Add Replica -- done!

Final testing and package building should begin by the weekend, and we hope to have a release in the first week of May.

Finally an Update!

Hi folks,

It has been a while since we made any indication of a release. An update however is finally here.

The required functionality enhancements for Zivios 0.6.4 are near complete. The list of changes include:

  • Core packages upgraded. This is inclusive of OpenLDAP (2.4.21), Heimdal Kerberos (1.3.1), Bind DNS, Apache, PHP (5.3.2), assorted libraries, etc.
  • Bug fixes and enhancements to the installer.
  • Abandoned ZF Forms (this was a long time coming).
  • Speed enhancements to the Core LDAP and Transaction engine. Benchmarks show a performance improvement of over 100% for almost all Zivios operations.
  • An improved communication framework. A lot of bloat has been removed and leaner xhr functions have been written.
  • Zivios replication support has been added for OpenLDAP, Heimdal Kerberos as well as DNS. This leads to an almost “single click” deployment of core services on remote servers.
  • A complete rewrite of the Asterisk plugin with native integration with OpenLDAP.
  • Forceful password updates, password policies, strength checking, etc.
  • Layout enhancements are being put in place to further improve the UI experience.

We are confident that the next release of Zivios will happen late April or the first week of May. Thanks to everyone for their patience and support.

The Zivios Team.

64bit Packages for 0.6.3

64bit Packages for Ubuntu Hardy LTS and Debian Lenny have been tested and made available via our APT repository. We are currently in the process of compiling on x86_64 for CentOS.

An updated Zivios Builder will also be released within the next few days after final testing is complete.

Zivios 0.6.3 Released!

We’re happy to announce the immediate availability of Zivios 0.6.3.

The official announcement (with complete details of new features) will follow shortly on our mailing lists and will be published on this blog as well.

The primary highlight of this release is our own PHP and Apache package, with full support for running Zivios on Debian Lenny and CentOS 5 (finally!). Furthermore, OpenLDAP has been updated to version 2.4.19, and ISC Bind to version 9.6.1-P1.

Updated installation documents for all aforementioned distributions have been made available on the Zivios Wiki. Instructions for downloading Zivios are available on our primary web site’s download section.