| 1 | This file contains upgrade instructions between different versions of jabberd2. |
|---|
| 2 | |
|---|
| 3 | * 2.1.3 to 2.1.4 upgrade: |
|---|
| 4 | |
|---|
| 5 | What had change: |
|---|
| 6 | - full SQLite support |
|---|
| 7 | - PostgreSQL NULL parameters handling |
|---|
| 8 | - more than one LDAP server support |
|---|
| 9 | - new LDAP append-realm setting |
|---|
| 10 | - correct CA chain handling |
|---|
| 11 | |
|---|
| 12 | Please refer to sm.xml.dist and c2s.xml.dist for new config sections and add |
|---|
| 13 | them to your config files. |
|---|
| 14 | Please read these example files to see how to setup your CA chain correctly. |
|---|
| 15 | You may also remove cachain option from c2s.xml. |
|---|
| 16 | You may remove hostname form PostgreSQL setup to access it via unix socket. |
|---|
| 17 | |
|---|
| 18 | |
|---|
| 19 | * 2.1 to 2.1.3 upgrade: |
|---|
| 20 | |
|---|
| 21 | What had change: |
|---|
| 22 | - c2s.xml added <ssl-mechanisms/> section |
|---|
| 23 | - c2s PAM authenticator now handles realm setting |
|---|
| 24 | - libjabberd moved from /usr/lib to /usr/lib/jabberd |
|---|
| 25 | - removed bootstrap script - use: autoreconf --install if you build from sources |
|---|
| 26 | |
|---|
| 27 | If you want to use new SSL aware auth mechanizms please merge <ssl-mechanisms/> |
|---|
| 28 | section of c2s.xml.dist into your c2s.xml config file. |
|---|
| 29 | Remove any realm setting for PAM authenticated domains or setup your PAM system |
|---|
| 30 | to handle additional realms. |
|---|
| 31 | If you use modules.path in sm.xml, add .../jabberd/ at the end. |
|---|
| 32 | |
|---|
| 33 | |
|---|
| 34 | * 2.0 to 2.1 upgrade: |
|---|
| 35 | |
|---|
| 36 | What had change: |
|---|
| 37 | - c2s.xml local/id syntax: |
|---|
| 38 | - DB schema |
|---|
| 39 | - amp and status modules |
|---|
| 40 | - CyrusSASL usage |
|---|
| 41 | |
|---|
| 42 | |
|---|
| 43 | Upgrade: |
|---|
| 44 | |
|---|
| 45 | Basically all <local/> subitems and registration options from section |
|---|
| 46 | <register/> are configurable per-realm now. So you need to move pemfile, |
|---|
| 47 | verify-mode, require-starttls to <id/> attributes. |
|---|
| 48 | You may also use subitems of <local/> as before, and these will be used |
|---|
| 49 | for legacy port 5223 SSL wrapper. |
|---|
| 50 | |
|---|
| 51 | Options require-starttls, register-enable and password-change ale boolean. |
|---|
| 52 | These are enabled if set to anything. 'true' seems reasonable for clarity. |
|---|
| 53 | WARNING: Setting 'false' doesn't disable it!!! |
|---|
| 54 | |
|---|
| 55 | When you disabled new registrations for a realm not setting register-enable, |
|---|
| 56 | you may wish to set password-change to enable users to change password. |
|---|
| 57 | |
|---|
| 58 | For new options like httpforward, see example c2s.xml for reference. |
|---|
| 59 | |
|---|
| 60 | |
|---|
| 61 | DB changes: |
|---|
| 62 | You need to add the following fields to the "vcard" table: |
|---|
| 63 | |
|---|
| 64 | ALTER TABLE vcard ADD COLUMN "tz" text; |
|---|
| 65 | ALTER TABLE vcard ADD COLUMN "n-middle" text; |
|---|
| 66 | ALTER TABLE vcard ADD COLUMN "n-prefix" text; |
|---|
| 67 | ALTER TABLE vcard ADD COLUMN "n-suffix" text; |
|---|
| 68 | ALTER TABLE vcard ADD COLUMN "n-prefx" text; |
|---|
| 69 | ALTER TABLE vcard ADD COLUMN "n-suffix" text; |
|---|
| 70 | ALTER TABLE vcard ADD COLUMN "adr-street" text; |
|---|
| 71 | ALTER TABLE vcard ADD COLUMN "adr-extadd" text; |
|---|
| 72 | ALTER TABLE vcard ADD COLUMN "adr-pobox" text; |
|---|
| 73 | ALTER TABLE vcard ADD COLUMN "adr-locality" text; |
|---|
| 74 | ALTER TABLE vcard ADD COLUMN "adr-region" text; |
|---|
| 75 | ALTER TABLE vcard ADD COLUMN "adr-pcode" text; |
|---|
| 76 | ALTER TABLE vcard ADD COLUMN "adr-country" text; |
|---|
| 77 | ALTER TABLE vcard ADD COLUMN "geo-lat" text; |
|---|
| 78 | ALTER TABLE vcard ADD COLUMN "geo-lon" text; |
|---|
| 79 | ALTER TABLE vcard ADD COLUMN "org-orgname" text; |
|---|
| 80 | ALTER TABLE vcard ADD COLUMN "agent-extval" text; |
|---|
| 81 | ALTER TABLE vcard ADD COLUMN "sort-string" text; |
|---|
| 82 | ALTER TABLE vcard ADD COLUMN "desc" text; |
|---|
| 83 | ALTER TABLE vcard ADD COLUMN "note" text; |
|---|
| 84 | ALTER TABLE vcard ADD COLUMN "photo-type" text; |
|---|
| 85 | ALTER TABLE vcard ADD COLUMN "photo-binval" text; |
|---|
| 86 | ALTER TABLE vcard ADD COLUMN "photo-extval" text; |
|---|
| 87 | ALTER TABLE vcard ADD COLUMN "logo-type" text; |
|---|
| 88 | ALTER TABLE vcard ADD COLUMN "logo-binval" text; |
|---|
| 89 | ALTER TABLE vcard ADD COLUMN "logo-extval" text; |
|---|
| 90 | ALTER TABLE vcard ADD COLUMN "sound-phonetic" text; |
|---|
| 91 | ALTER TABLE vcard ADD COLUMN "sound-binval" text; |
|---|
| 92 | ALTER TABLE vcard ADD COLUMN "sound-extval" text; |
|---|
| 93 | ALTER TABLE vcard ADD COLUMN "key-type" text; |
|---|
| 94 | ALTER TABLE vcard ADD COLUMN "key-cred" text; |
|---|
| 95 | ALTER TABLE vcard ADD COLUMN "rev" text; |
|---|
| 96 | |
|---|
| 97 | and create table "status": |
|---|
| 98 | |
|---|
| 99 | CREATE TABLE "status" ( |
|---|
| 100 | "collection-owner" text PRIMARY KEY, |
|---|
| 101 | "object-sequence" bigint, |
|---|
| 102 | "status" text NOT NULL, |
|---|
| 103 | "show" text, |
|---|
| 104 | "last-login" int DEFAULT '0', |
|---|
| 105 | "last-logout" int DEFAULT '0' ); |
|---|
| 106 | |
|---|
| 107 | NOTE: PostgreSQL schema was greatly improved as a whole. |
|---|
| 108 | It might be a good idea to dump your data (as INSERTS), recreate DB from |
|---|
| 109 | new schema and import data back again. |
|---|
| 110 | |
|---|
| 111 | |
|---|
| 112 | New modules: amp and status |
|---|
| 113 | |
|---|
| 114 | In order for amp and status session manager modules to work, you need to |
|---|
| 115 | add them to appropriate chains in sm.xml and set their configuration options. |
|---|
| 116 | Chains needed to be updated: sess-start, sess-end, in-sess, pkt-sm, pkt-user |
|---|
| 117 | and user-delete. For details see sm.xml.dist. |
|---|
| 118 | |
|---|
| 119 | |
|---|
| 120 | CyrusSASL |
|---|
| 121 | |
|---|
| 122 | You need working CyrusSASL installation. Please take care to include all |
|---|
| 123 | required auth modules. Especially cyrus-sasl-md5 and cyrus-sasl-plain. |
|---|
| 124 | |
|---|
| 125 | |
|---|
| 126 | |
|---|
| 127 | |
|---|
| 128 | Please report all errors of this howto to: |
|---|
| 129 | http://bugs.xiaoka.com/proj3 |
|---|
| 130 | |
|---|
| 131 | Tomasz Sterna <tomek@xiaoka.com> |
|---|