Software Release Bulletin SafeKit 7.4

Warning

This bulletin lists 7.4 SafeKit releases. Use the latest release to fix SafeKit.
For migration instructions and new features of SafeKit 7.4.x, see the SafeKit Release Notes (HTML, PDF ).

Latest Documentation Reference: SafeKit User's Guide / Guide de l'utilisateur SafeKit

SafeKit and OS at the correct level

Use Safekit 7.4 for:

Redhat Enterprise Linux 7 at least 7.3 (Intel x86 64-bit kernel)
Redhat Enterprise Linux 8 (Intel x86 64-bit kernel)
CentOS 7 at least 7.3 (Intel x86 64-bit kernel)
CentOS 8 Linux (Intel x86 64-bit kernel)
Ubuntu 20.04 (Intel x86 64-bit kernel)
Windows Server 2019 (Intel x86 64-bit kernel)
Windows Server 2016 (Intel x86 64-bit kernel)
Windows Server 2012 R2 (Intel x86 64-bit kernel)
Windows 10 Enterprise (Intel x86 64-bit kernel)
Windows 10 Pro (Intel x86 64-bit kernel)

Use previous SafeKit package for other OS

7.4.0.59

Date : December 3, 2021

OS :

Redhat Enterprise Linux 7 at least 7.3 (Intel x86 64-bit kernel)
Redhat Enterprise Linux 8 (Intel x86 64-bit kernel)
CentOS 7 at least 7.3 (Intel x86 64-bit kernel)
CentOS 8 Linux (Intel x86 64-bit kernel)
Ubuntu 20.04 (Intel x86 64-bit kernel)

Fix:

Rfs : Reintegration failure "BAD_COOKIE" ( MARS 74256 /EVD 76564 )
SafeKit : fix problems when cluster is configured whith FQDN and DNS server is unreachable ( MARS 72520 )
SafeKit : Unexpected message "The unconfiguration of the cluster has failed on this node...." when removing a node from a cluster ( MARS 74232 )
Installation : fix webserver installation on Ubuntu ( MARS 74205 )

Changes:

Upgrade to Apache httpd 2.4.51 and openssl 1.1.1l
When the SafeKit cluster contains DNS names and the corresponding DNS entry is modified, you must reapply the cluster configuration to force DNS resolution and take into account the new IP address (by SafeKit services and modules)

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
IE11 and Webconsole secured with https - see SK-0065
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.

7.4.0.58

Date : November 10, 2021

OS :

Windows Server 2019 (Intel x86 64-bit kernel)
Windows Server 2016 (Intel x86 64-bit kernel)
Windows Server 2012 R2 (Intel x86 64-bit kernel)
Windows 10 Enterprise (Intel x86 64-bit kernel)
Windows 10 Pro (Intel x86 64-bit kernel)

Fix:

Rfs : Primary in Alone degraded mode ( MARS 73756 / EVD 75686 )
Rfs : Primary in degraded mode when moving files during reintegration ( MARS 74109, 74179 )
SafeKit : fix problems when cluster is configured whith FQDN and DNS server is unreachable
SafeKit : If cluster is configured with FQDN, the module remains in WAIT state after network disconnection and reconnection (MARS 73890 )

Changes:

Upgrade to Apache httpd 2.4.51 and openssl 1.1.1l
When the SafeKit cluster contains DNS names and the corresponding DNS entry is modified, you must reapply the cluster configuration to force DNS resolution and take into account the new IP address (by SafeKit services and modules)

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
Unexpected message "The unconfiguration of the cluster has failed on this node...." when removing a node from a cluster, but action is completed
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065

7.4.0.53

Date : July 2, 2021

OS :

Fix:

Checker : splitbrain checker error if Safekit is installed in a path containing space ( MARS 73635 )
Vip : stopstart fails on vipd death ( MARS 73564 )

Changes:

Upgrade to Apache httpd 2.4.48

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.52

Date : May 8, 2021

OS :

Fix:

SafeKit : Fix start problem with "truncate / SetEndOfFile: 1224" message ( MARS 73359 / EVD74656 )

Changes:

Upgrade to Apache httpd 2.4.46 and openssl 1.1.1k
Add japanese messages

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.50

Date : April 28, 2021

OS :

Fix:

SafeKit : Automatic switch from SafeKit built-in Apache HTTP server to external Apache HTTP server - see SK-0087
Rfs : Reintegration now fails, when delta between internal synctimestamp dates is > 90s ( MARS 73264 )

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.

7.4.0.48

Date : March 5, 2021

OS :

Fix:

SafeKit : Fix buffer overrun when installation path is around 100 chars
Webserver : service fails to start in https mode after installing certificates from external PKI (proxy.crtkey file is needed) ( MARS 73057 ) - see SK-0086
SafeKit : Call internal powershell scripts with executionpolicy RemoteSigned ( MARS 72878 )
Webconsole : Fix configuration deployment when "proxy=true" ( MARS 73026 )
WebConsole : "Loading Error: not found." when "Generic modules" list is empty ( MARS 72991 )
SafeKit : unexpected "SafeKit" under "Security Settings" even if "OEMNAME" is set ( MARS 73013 )
SafeKit : minor bugs in case of package customization ( MARS 73014 and 73015 )

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.47

Date : February 9, 2021

OS :

Fix:

Rfs : fix access to unix named sockets
Rfs : write to too big offset ( MARS 70696 ).
Vip : unexpected segfault on stop ( MARS 72984 )
SafeKit : CA server start on CentOS 8.2 ( MARS 72644 )
SafeKit : "safekit -H" command fails when proxy environment variable is set ( MARS 72945 )
Errd : check max process/service name lentgh at configuration ( MARS 72651 )
max process name lentgh is 15 characters on Linux, 63 on Windows; max service name lentgh is 63 characters.

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.46

Date : December 18, 2020

OS :

Fix:

Errd : avoid multiple notifications in the same monitoring loop
SafeKit : "This node is already configured in a cluster" message displayed in WebConsole after installation ( MARS 72819 )

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.41

Date : Oct 12, 2020

OS :

Fix:

Rfs : Safekit module start fail during boot phase because of concurrent changes in mount table.
Rfs : Rare case of reintegration blocked in TLS handshake when using encrypted replication flux (MARS 72413).
Safeadmin : Fix handling of DNS not responding at start (see also SK-0080 ) (MARS 72416).

Changes:

Create safekit user account as a system account (adduser -r)

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.38

Date : Oct 26, 2020

OS :

Fix:

SafeKit : fix vip configuration failure when TCP/IP is bound to more than 20 devices
SafeKit : uninstalled modules still displayed in WebConsole ( MARS 71689 )

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.35

Date : June 26, 2020

OS :

Fix:

Rfs: Fix nfsbox 100% CPU when a high number of replicated file are opened rapidly (EVD 72564)

Changes:

Update SafeKit User's Guide

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.34

Date : May 19, 2020

OS :

Fix:

Webconsole : display of cluster configuration date ( MARS 71627 )
SafeKit: more explicit message on certificate expiration on Primary ( MARS 71628 )
SafeKit : fix bug in "cluster state" command ( MARS 71633 )
SafeKit : fix MARS 71597

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.33

Date : April 30, 2020

OS :

Fix:

SafeKit: Cerficate validity is now 20 years; explicit message on expiration ( MARS 71535 )
SafeKit: safeadmin or safekit.exe exception due to size limit when many Applications modules are installed ( MARS 71411 )
Web server : "safekit webserver restart" failure if webserver is not running ( MARS 70987 )
Webconsole : 3nodesrepli : unexpected "Failover" failure ( MARS 70689 )
Webconsole : 3nodesrepli : behavior improvment after "Failover" when servers come back ( MARS 70675 )
SafeKit : unexpected "maxloop" failure ( MARS 71584 )
SafeKit : "cluster confinfo" improvment ( MARS 71586 )

Changes:

Upgrade to openssl 1.1.1g

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.31

Date : March 30, 2020

OS :

Fix:

SafeKit: safeadmin or safekit.exe exception due to size limit when many Applications modules are installed (MARS 71344 and 71338)
Mosaic / Webconsole : redirection errors

Changes:

Rfs : Support of roflags=0x10000 attribute; Secondary is stopped if a process other than system tries to modify a replicated file
Rfs : Swap transitions are ignored if rfs scripts are active.

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.30

Date : February 20, 2020

OS :

Fix:

Web console File Editor: Fix line ending problem (KB SK-0074)
Mosaic : Fix ipv6 numerical representation in mosaic.html (MARS 71167 and 71168)

Changes:

Upgrade to Apache httpd 2.4.41, openssl 1.1.1d, curl 7.67.0
Support Windows 10 Pro 1909

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.27

Date : December 17, 2019

OS :

Fix:

Add or fix japanese messages
File replication : fix "rfsdiff" and "rfssync" commands (MARS 70537 and 70554)
Fix "kill_process" : used in rfsplug_cmd, does not correctly select processes ( MARS 70770)
Https : second server configuration fails when first server's CA uses a password whith reserved characters ( MARS 70774 )

Changes:

Modification of firewall rules management : first firewallcfg add don't open all safekit ports anymore. A second firewallcfg add must be executed after the first cluster configuration to open safeadmin port.
Webconsole : improvement of firewall problems checking
New command "checkcert" to check certificates
User's Guide update : "Securing the SafeKit web console" (https/certificates)

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
SafeKit File replication is not compatible with RH8.4 linux kernel 4.18.0-305. Please upgrade to latest RH8.4 kernel.
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.20

Date : September 27, 2019

OS :

Windows Server 2019 (Intel x86 64-bit kernel)
Windows Server 2016 (Intel x86 64-bit kernel)
Windows Server 2012 R2 (Intel x86 64-bit kernel)
Windows 10 Enterprise (Intel x86 64-bit kernel)

Fix:

Web console: fix japanese charset (MARS 70053 / EVD 69572)
Mosaic : empty list in mosaic.html if Safekit is installed in a path containing space (MARS 66639)
Fix "addStartupShutdown" script (MARS 70263). Refer to SafeKit User's Guide to use this script.

Changes:

File replication: Add statistics for "reject write request" message, make all of them debug level 3
Webconsole : only "E" messages are displayed in module short log

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.19

Date : August 10, 2019

OS :

Redhat Enterprise Linux 7 at least 7.3 (Intel x86 64-bit kernel)
CentOS 7 at least 7.3 (Intel x86 64-bit kernel)

Fix:

File replication: do not save partial namespace when ALONE server stops (MARS 69828)
Web console: fix menu for farm modules (MARS 70101)
Web console: add support for specific charset for user log file (MARS 70053)

Changes:

File replication: in Linux, use new linux kernel 3.10 API for file access
User log: change the filename extension of the log that contains output of restart scripts. The filename is now SAFEVAR/modules/AM/userlog.ulog (where AM is the module name)
Vip filter: in Linux, on module re-configuration, re-compile the vip kernel filter if the kernel version has changed
User's Guide update

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.17

Date : July 4, 2019

OS :

Windows Server 2016 (Intel x86 64-bit kernel)
Windows Server 2012 R2 (Intel x86 64-bit kernel)
Windows 10 Enterprise (Intel x86 64-bit kernel)

Fix:

File replication: deadlock rfsfilter (MARS 69669)
File replication: "VnodeDoLocalRename : srcnode not found" during a rename inside a not reintegrated directory (MARS 69715)
File replication: overflow during ruzone_valid field update (MARS 69828)
File replication: reintegration failure (open failed) on a symbolic link whose target has been deleted (MARS 69906)
Commands: exception in safekit_cmd.exe
Safekit: possibly empty "laststate.rfs"" file after a crash (MARS 69576)
Safekit: unexpected "invalid local nodename received" at boot start (MARS 69605)
Documentation: minor errors (MARS 69048)

Changes:

File replication: remove checking of all files opened on secondary before reintegration
Documentation improvements

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065

7.4.0.16

Date : May 31, 2019

OS :

Windows Server 2016 (Intel x86 64-bit kernel)
Windows Server 2012 R2 (Intel x86 64-bit kernel)
Windows 10 Enterprise (Intel x86 64-bit kernel)

Fix:

Maxloop: fix maxloop interval checking (EVD 68434/MARS 69249)
DNS names: fix module start error when the cluster configuration contains DNS FQDN in addr field. In Windows, additional network configuration may be needed (see SK-0079)

Changes:

File replication: add sendtimeout attribute, for setting a timeout when sending packets to the remote node. This value may be increased when replication or reintegration fails on high latency networks (default value is 30 seconds)
Framework communications: accept externally generated certificates (provided they are signed by one of the web/conf/cacert.crt authorities)

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065

7.4.0.13

Date : April 12, 2019

OS :

Redhat Enterprise Linux 7 at least 7.3 (Intel x86 64-bit kernel)
CentOS 7 at least 7.3 (Intel x86 64-bit kernel)

Fix:

File replication: "Invalid remote file handle" on hard linked file removal
File replication: "Invalid cross device link" during hard link create on Alone (MARS 69043)
File replication: "server Bad address" error when writing a big file during reintegration (MARS 68433)
File replication: reintegration problem when file system is full
Farm module on Linux only: Kernel memory leak leading to kernel crash on recent kernel (EVD 67907 / MARS 68758)
Distributed commands: fix execution failure when a node is not available (MARS 68217)
Checker: the activation of the ip checker process monitoring is set too early (MARS 68516 /EVD 67621)
Application module installation failure after import/export (MARS 68052)
Minor Installation problem (MARS 68868)

Changes:

Major changes: see SafeKit Release Notes.
Major change in Apache Configuration (need to migrate old customized configuration): Support of roles with basic authentication (ldap and file)
Apache: upgrade to latest version : httpd 2.4.39 and openssl 1.1.1a
Webconsole: automatic insertion of the connected server as a cluster into cluster inventory
File replication: Reintegration optimization (new value for "namespacepolicy" attribute : 4 (default))
File replication: improve reintegration by reconnecting on communication failure
File replication: checks all files can be opened on secondary before reintegration

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080

7.4.0.5

Date : December 20, 2018

OS :

Redhat Enterprise Linux 7 at least 7.3 (Intel x86 64-bit kernel)
CentOS 7 at least 7.3 (Intel x86 64-bit kernel)
Windows Server 2016 (Intel x86 64-bit kernel)

Changes:

Major changes : see SafeKit Release Notes.

Restriction and Known Problems:

Refer to the SafeKit Release Notes.
File replication does not support hard links and file system transactions
IE11 and Webconsole secured with https - see SK-0065
Use of DNS names in cluster configuration - see SK-0080