Release Notes — ownCloud 10.0 Server Administration Manual 10.0 documentation

- « Introduction
- What’s New in... »

# Release Notes

- Changes in 10.0.1
- Changes in 10.0.0
- Changes in 9.1
- Changes in 9.0
- Changes in 8.2
- Changes in 8.1
- Changes in 8.0
- Changes in 7.0

## Changes in 10.0.1

Hello ownCloud administrator, please read carefully to be prepared for updates and operations of your ownCloud setup.

- A new update path: ownCloud 10.0.1 contains migration logic to allow upgrading directly from 9.0 to 10.0.1.
- Marketplace: Please create an account for the new marketplace. Access to optional ownCloud extensions and enterprise apps will be provided by the marketplace from now on. Currently some apps are still shipped with the tarballs / packages and will be moved to the marketplace in the near future.
- Apps: LDAP, gallery, activity, PDF viewer, and text editor were moved to the marketplace.
- Updates with marketplace: During the upgrade, enabled apps are also updated by fetching new versions directly from the marketplace. If during an update, sources for some apps are missing, and the ownCloud instance has no access to the marketplace, the administrator needs to disable these apps or manually download and provide the apps before updating.
- App updates: Third party apps are not disabled anymore when upgrading.
- Upgrade migration test: The upgrade migration test has been removed; see Testing a Migration. (Option `--skip-migration-tests` removed from update command).

Note

The template editor app is not included in the 10.0.1 release due to technical reasons, but will be distributed via the marketplace. However, you can still edit template files manually.

### Settings

- Settings design: Admin, personal pages, and app management are now merged together into a single “Settings” entry.
- Disable users: The ability to disable users in the user management panel has been added.
- Password Policy: Rules now apply not only to link passwords but also to user passwords.

### Infrastructure

- Client: You need to update to the latest desktop client version.
- Cron jobs: The user account table has been reworked. As a result the Cron job for syncing user backends, e.g., LDAP, needs to be configured.
- Logfiles: App logs, e.g., auditing and owncloud.log, can now be split, see: https://doc.owncloud.org/server/10.0/admin_manual/configuration/server/config_sample_php_parameters.html#logging.

### Known Issues

#### Converting the Database Type doesn’t work

Converting a Database from e.g. `SQLite` to `MySQL` or `PostgreSQL` with the `occ db:convert-type` currently doesn’t work. See https://github.com/owncloud/core/issues/27075 for more info.

#### Installing the LDAP user backend will trigger the installation twice

This causes an SQL error such as the following:

    sudo -u www-data ./occ market:install user_ldap

    user_ldap: Installing new app ...
    user_ldap: An exception occurred while executing 'CREATE TABLE `ldap_user_mapping` (`ldap_dn` VARCHAR(255) DEFAULT '' NOT NULL, `owncloud_name` VARCHAR(255) DEFAULT '' NOT NULL, `directory_uuid` VARCHAR(255) DEFAULT '' NOT NULL, UNIQUE INDEX ldap_dn_users (`ldap_dn`), PRIMARY KEY(`owncloud_name`)) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_bin ENGINE = InnoDB ROW_FORMAT = compressed':

    SQLSTATE[42S01]: Base table or view already exists: 1050 Table 'ldap_user_mapping' already exists

This can be safely ignored. And the app can be used after enabling it. Please be aware that when upgrading an existing ownCloud installation that already has `user_ldap` this error will not occur. It was fixed by https://github.com/owncloud/core/pull/27982. However, this could happen for other apps as well that use `database.xml`. If it does please use the same workaround.

#### SAML authentication only works for users synced with `occ user:sync`

We will re-enable SSO for LDAP users with an update of the app in the market after completing internal testing.

#### The web UI prevents uninstalling apps marked as shipped, e.g., `user_ldap`

To uninstall, disable the app with occ and rm the app directory.

#### Moving files around in external storages outside of ownCloud will invalidate the metadata

All shares, comments, and tags on the moved files will be lost.

#### Existing LDAP users only show up in the user management page and the share dialog after being synced

The account table introduced in ownCloud 10.0.0 significantly reduces LDAP communication overhead. Password checks are yet to be accounted for. LDAP user metadata in the account table will be updated when users log in or when the administrator runs `occ user:sync "OCA\User_LDAP\User_Proxy"`. We recommend setting up a nightly Cron job to keep metadata of users not actively logging in up to date.

#### Error pages will not use the configured theme but will instead fall back to the community default

## Changes in 10.0.0

- PHP 7.1 support added (supported PHP versions are 5.6 and 7.0+)

- The upgrade migration test has been removed; see Testing a Migration. (Option `"--skip-migration-tests"` removed from update command)

- Requires to use the latest desktop client version 2.3

- Third party apps are not disabled anymore when upgrading

- User account table has been reworked. CRON job for syncing with e.g. LDAP needs to be configured (see https://doc.owncloud.com/server/10.0/admin_manual/configuration/server/occ_command.html#syncing-user-accounts)

- LDAP app is not released with ownCloud 10.0.0 and will be released on the marketplace after some more QA

- files_drop app is not shipped anymore as it’s integrated with core now. Since migrations are not possible you will have to reconfigure your drop folders (in the ‘Public Link’ section of the sharing dialog of the respective folders).

- SAML/Shibboleth with device-specific app passwords: No migration possible; Users need to regenerate device-specific app passwords in the WebUI and enter those in their clients.

- For security reasons status.php can now be configured in config.php to not return server version information anymore (‘version.hide’; default ‘false’). As clients still depend on version information this is not yet recommended. The default will change to ‘true’ with 10.0.2 once clients are ready.

- Order of owncloud.log entries changed a bit, please review any application (e.g. fail2ban rules) relying on this file

- External storages
    - FTP external storage moved to a separate app (https://marketplace.owncloud.com/apps/files_external_ftp)
    - “Local” storage type can now be disabled by sysadmin in config.php (to prevent users mounting the local file system)

Full changelog: https://github.com/owncloud/core/wiki/ownCloud-10.0-Features

## Changes in 9.1

General

- Background jobs (cron) can now run in parallel
- Update notifications in client via API - You can now be notified in your desktop client about available updates for core and apps. The notifications are made available via the notifications API.
- Multi-bucket support for primary objectstore integration
- Support for Internet Explorer below version 11 was dropped
- Symlinks pointing outside of the data directory are disallowed. Please use the Configuring External Storage (GUI) with the Local storage backend instead.
- Removed `dav:migrate-calendars` and `dav:migrate-addressbooks` commands for `occ`. Users planning to upgrade from ownCloud 9.0 or below to ownCloud 9.1 needs to make sure that their calendars and address books are correctly migrated before continuing to upgrade to 9.1.

Authentication

- Pluggable authentication: plugin system that supports different authentication schemes
- Token-based authentication
- Ability to invalidate sessions
- List connected browsers/devices in the personal settings page. Allows the user to disconnect browsers/devices.
- Device-specific passwords/tokens, can be generated in the personal page and revoked
- Disable users and automatically revoke their sessions
- Detect disabled LDAP users or password changes and revoke their sessions
- Log in with email address
- Configuration option to enforce token-based login outside the web UI
- Two Factor authentication plug-in system
- OCC command added to (temporarily) disable/enable two-factor authentication for single users

Note

The current desktop and mobile client versions do not support two-factor yet, this will be added later. It is already possible to generate a device specific password and enter that in the current client versions.

Files app

- Ability to toggle displaying hidden files
- Remember sort order
- Permalinks for internal shares
- Visual cue when dragging in files app
- Autoscroll file list when dragging files
- Upload progress estimate

Federated sharing

- Ability to create federated shares with CRUDS permissions
- Resharing a federated share does not create a chain of shares any more but connects the share owner’s server to the reshare recipient

External storage

- UTF-8 NFD encoding compatibility support for NFD file names stored directly on external storages (new mount option in external storage admin page)
- Direct links to the configuration pages for setting up a GDrive or Dropbox application for use with ownCloud
- Some performance and memory usage improvements for GDrive, stream download and chunk upload
- Performance and memory usage improvements for Dropbox with stream download
- GDrive library update provides exponential backoff which will reduce rate limit errors

Shibboleth

- The WebDAV endpoint was changed from `/remote.php/webdav` to `/remote.php/dav`. You need to check your Apache configuration if you have exceptions or rules for WebDAV configured.

Minor additions

- Support for print style sheets
- Command line based update will now be suggested if the instance is bigger to avoid potential timeouts
- Web updater will be disabled if LDAP or shibboleth are installed
- DB/application update process now shows better progress information
- Added `occ files:scan --unscanned` to only scan folders that haven’t yet been explored on external storages
- Chunk cache TTL can now be configured
- Added warning for wrongly configured database transactions, helps prevent “database is locked” issues
- Use a capped memory cache to reduce memory usage especially in background jobs and the file scanner
- Allow login by email
- Respect CLASS property in calendar events
- Allow addressbook export using VCFExportPlugin
- Birthdays are also generated based on shared addressbooks

For developers

- New DAV endpoint with a new chunking protocol aiming to solve many issues like timeouts (not used by clients yet)
- New webdav property for share permissions
- Background repair steps can be specified info.xml
- Background jobs (cron) can now be declared in info.xml
- Apps can now define repair steps to run at install/uninstall time
- Export contact images via Sabre DAV plugin
- Sabre DAV’s browser plugin is available in debug mode to allow easier development around webdav

Technical debt

- PSR-4 autoloading forced for `OC\` and `OCP\`, optional for `OCA\` docs at https://doc.owncloud.org/server/9.1/developer_manual/app/classloader.html
- More cleanup of the sharing code (ongoing)

## Changes in 9.0

9.0 requires .ico files for favicons. This will change in 9.1, which will use .svg files. See Changing favicon in the Developer Manual.

Home folder rule is enforced in the user_ldap application in new ownCloud installations; see User Authentication with LDAP. This affects ownCloud 8.0.10, 8.1.5 and 8.2.0 and up.

The Calendar and Contacts apps have been rewritten and the CalDAV and CardDAV backends of these apps were merged into ownCloud core. During the upgrade existing Calendars and Addressbooks are automatically migrated (except when using the `IMAP user backend`). As a fallback for failed upgrades, when using the `IMAP user backend` or as an option to test a migration `dav:migrate-calendars` and/or `dav:migrate-addressbooks` scripts are available (only in ownCloud 9.0) via the `occ` command. See Using the occ Command.

Warning

After upgrading to ownCloud 9.0 and before continuing to upgrade to 9.1 make sure that all of your and your users Calendars and Addressbooks are migrated correctly. Especially when using the `IMAP user backend` (other user backends might be also affected) you need to manually run the mentioned `occ` migration commands described above.

Updates on systems with large datasets will take longer, due to the addition of checksums to the ownCloud database. See https://github.com/owncloud/core/issues/22747.

Linux packages are available from our official download repository . New in 9.0: split packages. `owncloud` installs ownCloud plus dependencies, including Apache and PHP. `owncloud-files` installs only ownCloud. This is useful for custom LAMP stacks, and allows you to install your own LAMP apps and versions without packaging conflicts with ownCloud. See Preferred Installation Method.

New option for the ownCloud admin to enable or disable sharing on individual external mountpoints (see Mount Options). Sharing on such mountpoints is disabled by default.

### Enterprise 9.0

owncloud-enterprise packages are no longer available for CentOS 6, RHEL6, Debian 7, or any version of Fedora. A new package, owncloud-enterprise-files, is available for all supported platforms, including the above. This new package comes without dependencies, and is installable on a larger number of platforms. System administrators must install their own LAMP stacks and databases. See https://owncloud.org/blog/time-to-upgrade-to-owncloud-9-0/

## Changes in 8.2

New location for Linux package repositories; ownCloud admins must manually change to the new repos. See How to Upgrade Your ownCloud Server

PHP 5.6.11+ breaks the LDAP wizard with a ‘Could not connect to LDAP’ error. See https://github.com/owncloud/core/issues/20020.

`filesystem_check_changes` in `config.php` is set to 0 by default. This prevents unnecessary update checks and improves performance. If you are using external storage mounts such as NFS on a remote storage server, set this to 1 so that ownCloud will detect remote file changes.

XSendFile support has been removed, so there is no longer support for serving static files from your ownCloud server.

LDAP issue: 8.2 uses the `memberof` attribute by default. If this is not activated on your LDAP server your user groups will not be detected, and you will see this message in your ownCloud log: `Error PHP Array to string conversion at /var/www/html/owncloud/lib/private/template/functions.php#36`. Fix this by disabling the `memberof` attribute on your ownCloud server with the `occ` command, like this example on Ubuntu Linux:

    sudo -u www-data php occ ldap:set-config "s01" useMemberOfToDetectMembership 0

Run `sudo -u www-data php occ ldap:show-config` to find the correct `sNN` value; if there is not one then use empty quotes, `""`. (See Using the occ Command.)

Users of the Linux Package need to update their repository setup as described in this blogpost.

## Changes in 8.1

Use APCu only if available in version 4.0.6 and higher. If you install an older version, you will see a `APCu below version 4.0.6 is installed, for stability and performance reasons we recommend to update to a newer APCu version` warning on your ownCloud admin page.

SMB external storage now based on `php5-libsmbclient`, which must be downloaded from the ownCloud software repositories (installation instructions).

“Download from link” feature has been removed.

The `.htaccess` and `index.html` files in the `data/` directory are now updated after every update. If you make any modifications to these files they will be lost after updates.

The SabreDAV browser at `/remote.php/webdav` has been removed.

Using ownCloud without a `trusted_domain` configuration will not work anymore.

The logging format for failed logins has changed and considers now the proxy configuration in `config.php`.

A default set of security and privacy HTTP headers have been added to the ownCloud `.htaccess` file, and ownCloud administrators may now customize which headers are sent.

More strict SSL certificate checking improves security but can result in “cURL error 60: SSL certificate problem: unable to get local issuer certificate” errors with certain broken PHP versions. Please verify your SSL setup, update your PHP or contact your vendor if you receive these errors.

The persistent file-based cache (e.g. used by LDAP integration) has been dropped and replaced with a memory-only cache, which must be explicitly configured. See User Authentication with LDAP. Memory cache configuration for the ownCloud server is no longer automatic, requiring installation of your desired cache backend and configuration in `config.php` (see Memory Caching.)

The `OC_User_HTTP` backend has been removed. Administrators are encouraged to use the `user_webdavauth` application instead.

ownCloud ships now with its own root certificate bundle derived from Mozilla’s root certificates file. The system root certificate bundle will not be used anymore for most requests.

When you upgrade from ownCloud 8.0, with encryption enabled, to 8.1, you must enable the new encryption backend and migrate your encryption keys. See Encryption migration to ownCloud 8.0.

Encryption can no longer be disabled in ownCloud 8.1. It is planned to re-add this feature to the command line client for a future release.

It is not recommended to upgrade encryption-enabled systems from ownCloud Server 8.0 to version 8.1.0 as there is a chance the migration will break. We recommend migrating to the first bugfix release, ownCloud Server 8.1.1.

Due to various technical issues, by default desktop sync clients older than 1.7 are not allowed to connect and sync with the ownCloud server. This is configurable via the `minimum.supported.desktop.version` switch in `config.php`.

Previews are now generated at a maximum size of 2048 x 2048 pixels. This is configurable via the `preview_max_x` and `preview_max_y` switches in `config.php`.

The ownCloud 8 server is not supported on any version of Windows.

The 8.1.0 release has a minor bug which makes application updates fail at first try. Reload the apps page and try again, and the update will succeed.

The `forcessl` option within the `config.php` and the `Enforce SSL` option within the Admin-Backend was removed. This now needs to be configured like described in Use HTTPS.

WebDAV file locking was removed in ownCloud 8.1 which causes Finder on Mac OS X to mount WebDAV read-only.

### Enterprise 8.1

The SharePoint Drive application does not verify the SSL certificate of the SharePoint server or the ownCloud server, as it is expected that both devices are in the same trusted environment.

## Changes in 8.0

### Manual LDAP Port Configuration

When you are configuring the LDAP user and group backend application, ownCloud may not auto-detect the LDAP server’s port number, so you will need to enter it manually.

### No Preview Icon on Text Files

There is no preview icon displayed for text files when the file contains fewer than six characters.

### Remote Federated Cloud Share Cannot be Reshared With Local Users

When you mount a Federated Cloud share from a remote ownCloud server, you cannot re-share it with your local ownCloud users. (See Configuring Federation Sharing to learn more about federated cloud sharing)

### Manually Migrate Encryption Keys after Upgrade

If you are using the Encryption application and upgrading from older versions of ownCloud to ownCloud 8.0, you must manually migrate your encryption keys. See Encryption migration to ownCloud 8.0.

### Windows Server Not Supported

Windows Server is not supported in ownCloud 8.

### PHP 5.3 Support Dropped

PHP 5.3 is not supported in ownCloud 8, and PHP 5.4 or better is required.

### Disable Apache Multiviews

If Multiviews are enabled in your Apache configuration, this may cause problems with content negotiation, so disable Multiviews by removing it from your Apache configuration. Look for lines like this:

    <Directory /var/www/owncloud>
    Options Indexes FollowSymLinks Multiviews

Delete `Multiviews` and restart Apache.

### ownCloud Does Not Follow Symlinks

ownCloud’s file scanner does not follow symlinks, which could lead to infinite loops. To avoid this do not use soft or hard links in your ownCloud data directory.

### No Commas in Group Names

Creating an ownCloud group with a comma in the group name causes ownCloud to treat the group as two groups.

### Hebrew File Names Too Large on Windows

On Windows servers Hebrew file names grow to five times their original size after being translated to Unicode.

### Google Drive Large Files Fail with 500 Error

Google Drive tries to download the entire file into memory, then write it to a temp file, and then stream it to the client, so very large file downloads from Google Drive may fail with a 500 internal server error.

### Encrypting Large Numbers of Files

When you activate the Encryption application on a running server that has large numbers of files, it is possible that you will experience timeouts. It is best to activate encryption at installation, before accumulating large numbers of files on your ownCloud server.

### Enterprise 8.0

#### Sharepoint Drive SSL Not Verified

The SharePoint Drive application does not verify the SSL certificate of the SharePoint server or the ownCloud server, as it is expected that both devices are in the same trusted environment.

#### No Federated Cloud Sharing with Shibboleth

Federated Cloud Sharing (formerly Server-to-Server file sharing)does not work with Shibboleth .

#### Direct Uploads to SWIFT do not Appear in ownCloud

When files are uploaded directly to a SWIFT share mounted as external storage in ownCloud, the files do not appear in ownCloud. However, files uploaded to the SWIFT mount through ownCloud are listed correctly in both locations.

#### SWIFT Objectstore Incompatible with Encryption App

The current SWIFT implementation is incompatible with any application that uses direct file I/O and circumvents the ownCloud virtual filesystem. Using the Encryption application on a SWIFT object store incurs twice as many HTTP requests and increases latency significantly.

#### application Store is Back

The ownCloud application Store has been re-enabled in ownCloud 8. Note that third-party apps are not supported.

## Changes in 7.0

### Manual LDAP Port Configuration

When you are configuring the LDAP user and group backend application, ownCloud may not auto-detect the LDAP server’s port number, so you will need to enter it manually.

### LDAP Search Performance Improved

Prior to 7.0.4, LDAP searches were substring-based and would match search attributes if the substring occurred anywhere in the attribute value. Rather, searches are performed on beginning attributes. With 7.0.4, searches will match at the beginning of the attribute value only. This provides better performance and a better user experience.

Substring searches can still be performed by prepending the search term with “*”.For example, a search for `te` will find Terri, but not Nate:

    occ ldap:search "te"

If you want to broaden the search to include Nate, then search for `*te`:

    occ ldap:search "*te"

Refine searches by adjusting the `User Search Attributes` field of the Advanced tab in your LDAP configuration on the Admin page. For example, if your search attributes are `givenName` and `sn` you can find users by first name + last name very quickly. For example, you’ll find Terri Hanson by searching for `te ha`. Trailing whitespaces are ignored.

### Protecting ownCloud on IIS from Data Loss

Under certain circumstances, running your ownCloud server on IIS could be at risk of data loss. To prevent this, follow these steps.

- In your ownCloud server configuration file, `owncloud\config\config.php`, set `config_is_read_only` to true.
- Set the `config.php` file to read-only.
- When you make server updates `config.php` must be made writeable. When your updates are completed re-set it to read-only.

### Antivirus Application Modes

The Antivirus application offers three modes for running the ClamAV anti-virus scanner: as a daemon on the ownCloud server, a daemon on a remote server, or an executable mode that calls `clamscan` on the local server. We recommend using one of the daemon modes, as they are the most reliable.

### “Enable Only for Specific Groups” Fails

Some ownCloud applications have the option to be enabled only for certain groups. However, when you select specific groups they do not get access to the app.

### Changes to File Previews

For security and performance reasons, file previews are available only for image files, covers of MP3 files, and text files, and have been disabled for all other filetypes. Files without previews are represented by generic icons according to their file types.

### 4GB Limit on SFTP Transfers

Because of limitations in `phpseclib`, you cannot upload files larger than 4GB over SFTP.

### “Not Enough Space Available” on File Upload

Setting user quotas to `unlimited` on an ownCloud installation that has unreliable free disk space reporting– for example, on a shared hosting provider– may cause file uploads to fail with a “Not Enough Space Available” error. A workaround is to set file quotas for all users instead of `unlimited`.

### No More Expiration Date On Local Shares

In older versions of ownCloud, you could set an expiration date on both local and public shares. Now you can set an expiration date only on public shares, and local shares do not expire when public shares expire.

### Zero Quota Not Read-Only

Setting a user’s storage quota should be the equivalent of read-only, however, users can still create empty files.

### Enterprise 7.0

#### No Federated Cloud Sharing with Shibboleth

Federated Cloud Sharing (formerly Server-to-Server file sharing) does not work with Shibboleth .

#### Windows Network Drive

Windows Network Drive runs only on Linux servers because it requires the Samba client, which is included in all Linux distributions.

`php5-libsmbclient` is also required, and there may be issues with older versions of `libsmbclient`; see Using External Storage > Installing and Configuring the Windows Network Drive application in the Enterprise Admin manual for more information.

By default CentOS has activated SELinux, and the `httpd` process can not make outgoing network connections. This will cause problems with curl, LDAP and samba libraries. Again, see Using External Storage > Installing and Configuring the Windows Network Drive application in the Enterprise Admin manual for instructions.

#### Sharepoint Drive SSL

The SharePoint Drive application does not verify the SSL certificate of the SharePoint server or the ownCloud server, as it is expected that both devices are in the same trusted environment.

#### Shibboleth and WebDAV Incompatible

Shibboleth and standard WebDAV are incompatible, and cannot be used together in ownCloud. If Shibboleth is enabled, the ownCloud client uses an extended WebDAV protocol

#### No SQLite

SQLite is no longer an installation option for ownCloud Enterprise Edition, as it not suitable for multiple-user installations or managing large numbers of files.

#### No Application Store

The application Store is disabled for the Enterprise Edition.

#### LDAP Home Connector Linux Only

The LDAP Home Connector application requires Linux (with MySQL, MariaDB, or PostgreSQL) to operate correctly.

- « Introduction
- What’s New in... »