Release notes for SUSE Manager 3 Server

Version 3.0.12
Friday May 18, 2018

Version Revision History

About SUSE Manager
- Stay up-to-date
Installation
Major changes since SUSE Manager Server 3 GA
- Features and changes
- Patches
New features since SUSE Manager Server 2.1
Supportability of embedded software components
Red Hat Channels
Support for SLES 10 based systems
SUSE Manager Proxy versions
spacewalk-utils
Known bugs
Upstream changes since SUSE Manager 2.1
Providing feedback to our products
Documentation and other information
Legal Notices
Colophon

This SUSE product includes materials licensed to SUSE under the GNU General Public License (GPL). The GPL requires that SUSE makes available certain source code that corresponds to the GPL-licensed material. The source code is available for download at http://www.suse.com/download-linux/source-code.html.

Also, for up to three years from SUSE's distribution of the SUSE product, upon request SUSE will mail a copy of the source code. Requests should be sent by e-mail to sle_source_request@suse.com or as otherwise instructed at http://www.suse.com/download-linux/source-code.html. SUSE may charge a fee to recover its reasonable costs of distribution.

Version Revision History

Oct 14, 2015: Initial release
Dec 21, 2015: Beta 1
Jan 29, 2016: Beta 2
Mar 11, 2016: RC 1
Mar 23, 2016: RC 2
Apr 5, 2016: GM
Jul 4, 2016: Patches
Aug 15, 2016: Patches, Bootstrap UI, Oracle backend
Oct 22, 2016: v3.0.1
Nov 25, 2016: v3.0.2
Jan 17, 2017: v3.0.3
Feb 3, 2017: SLES 12 SP2 enablement
Mar 8, 2017: v3.0.4, clarify external db as unsupported
May 18, 2017: v3.0.5
Jun 21, 2017: v3.0.6
Jul 17, 2017: v3.0.7
Sep 13, 2017: v3.0.8
Nov 9, 2017: v3.0.9
Jan 30, 2018: v3.0.10
March 16, 2018: v3.0.11
June 2018: v3.0.12

About SUSE Manager

You have more than just a few Linux servers to manage, maybe even a mixed environment of RHEL and SLES?

Then SUSE Manager is the answer.

SUSE Manager gives you best of breed Linux lifecycle management based on the most mature codebase for any Linux management tool, with both RHEL and SLES support from one unified console, maintained and improved by the guys who wrote the fastest and most advanced Linux update stack on the planet.

SUSE Manager gives you the lowest possible Total Cost of Ownership for your Linux environment, from bare metal provisioning to daily patch management. SUSE Manager is an open source (GPLv2) Linux systems management solution that allows you to:

Inventory your systems (hardware and software information)
Install and update software on your systems
Collect and distribute your custom software packages into manageable groups
Provision (AutoYaST / Kickstart) your systems
Enterprise-grade configuration management with Salt from SaltStack
Match subscriptions to products installed on your servers
Provision and start/stop/configure virtual guests
Distribute content across multiple geographical sites in an efficient manner
Track compliance of managed systems with OpenSCAP

Stay up-to-date

You can stay up-to-date regarding information about SUSE Manager and SUSE products:

Check the SUSE Manager Wiki
Read the SUSE Blog

Installation

Requirements and registration code

SUSE Manager 3 Server is an extension for SLES 12 SP3 x86_64 or s390x.

This means that, unlike SUSE Manager 2.1 Server, installation is done in two steps

base operating system (SLES 12 SP3)
SUSE Manager 3 Server extension

This addresses the need of enterprise deployments to standardize on the base operating system as well as specific storage setups.

Attention Your SUSE Manager Server registration code is valid for the base operating system as well as the SUSE Manager 3 extension.

Installing the SUSE Manager 3 Server extension on SLES 12 SP3

You'll need a physical or virtual SLES 12 SP3 x86_64 or s390x system to install SUSE Manager 3.

When you install and register SLES 12 SP3, SUSE Manager 3 Server will show up in the list of available extensions.

You'll need a SUSE Manager Server registration code to access this extension.

Update from previous versions of SUSE Manager Server

In-place updates from previous versions of SUSE Manager Server are not supported.

Upgrade from SUSE Manager 2.1 Server to SUSE Manager 3 Server is done by choosing the 2.1 Server as a migration source when running ``yast2 susemanager_setup``

See this wiki page for a detailed description of the required steps.

All connected clients will continue to run and are manageable unchanged.

Note that the SUSE Manager 2.1 Server needs to have PostgreSQL as its database.

Update from SUSE Manager 2.1 with Oracle Database

Data migration from SUSE Manager 2.1 with Oracle Database is not possible.

You need to first migrate from Oracle to PostgreSQL database as outlined in the SUSE Manager 2.1 Server documentation.

Migrating from RHN Satellite 5

Is conditionally supported with SUSE Manager 3 Server.

If you have the need to migrate from RHN Satellite 5 to SUSE Manager 3, please get in contact with a SUSE sales engineer or a SUSE consultant before starting the migration.

Using an external database

It's strictly recommended to use the database embedded with the product. Deviating from this recommendation is not generally supportable.

Major changes since SUSE Manager Server 3 GA

Features and changes

Version 3.0.12

Bugfix release.

Update to Salt 'Oxygen' 2018.3.0

Salt is updated to the 'Oxygen' release, versioned as 2018.3.0.

This brings many changes and improvements all over the place, most notably in Python 3 support, Unicode, and Docker.

See the Salt Oxygen and Salt Nitrogen release notes for a full description of changes since SUSE Manager's previous Salt version.

Salt on SLE 11 and RHEL 5

Salt deprecated Python 2.6 with the release of Salt Nitrogen in 2017.

Client systems with Python 2.6, like SLE 11 or RHEL 5, will therefore NOT get Salt upgrades and stay with their current Salt version.

Python 3 subpackages

In order to support SLE 15 clients with salt-ssh, Python 3 compatibility packages are added in this update.

This enables salt-ssh to use Python 3 code when running on SLE 15 clients, which have Python 3 as their main Python version.

spacecmd updates

spacecmd now has a new command: softwarechannel_update (Update a software channel)

The spacecmd functions softwarechannel_create, softwarechannel_clone, and softwarechannel_tree now have a new parameter -g DISABLE-GPG-CHECK.

See 'spacecmd reference' in the advanced topics manual for details.

New products supported

SLES 12 SP2 LTSS

Version 3.0.11

Bugfix release.

Version 3.0.10

Bugfix release.

Database cleanup migration

After several reports about duplicate package ids in the database, a cleanup task was introduced in spacewalk-schema-upgrade to repair such cases.

Warning In case your database is corrupted with duplicate package ids, this cleanup task can take hours to complete. Runtimes of 4-5 hours are normal.

Here is how to check for duplicate package ids

  echo "select min(id) as id \
         from rhnpackageevr \
        group by version, release, epoch \
          having count(*) > 1;" \
    | spacewalk-sql --select-mode-direct -

  echo "select min(id) as id \
          from rhnPackageCapability \
          group by name, version \
          having count(*) > 1;"\
    | spacewalk-sql --select-mode-direct -

These read-only checks can be run during normal operation of SUSE Manager. Just running the checks can take a long time (up to 1hr in some of our test scenarios. YMMV).

If any of these queries returns a non-empty result, it can be stopped immediately. Your database has duplicate package ids in this case and the next run of spacewalk-schema-upgrade will take hours.

Take this under consideration before starting the upgrade to SUSE Manager 3.0.10.

Check for duplicate minion ids

With this update we introduce a unique constraint on minion_id in the database.

When multiple systems exists already with the same minion_id, the schema migration will fail.

There will be a list of the duplicates in the schema migration log. In this case, duplicate minion_id need a manual cleanup:

start spacewalk-service
remove the duplicate machines
stop spacewalk-service
finish the schema migration

New products supported

Open Enterprise Server (OES) 2018
Container as a Service (CaaS)
IBM DLPAR for SLES for SAP
SLE-RT 12 SP3
SLE12 LTSS as extension to SLES for SAP 12

Dropped products

Certification Module 12 from SP2 and SP3

Version 3.0.9

PostgreSQL 9.6 support

A new version of the PostgreSQL database is available in SLES 12 SP2 and can be used for SUSE Manager 3.0 Server.

New installations of SUSE Manager 3.0 Server based on SLES 12 SP3 will automatically pick up this version.

Migrating from PostgreSQL 9.4 to PostgreSQL 9.6

Note: SUSE Manager 3.0 Server must NOT be migrated to SLES 12 SP3 before migrating PostgreSQL to version 9.6.

The migration needs PostgreSQL 9.4 and 9.6 installed in parallel and PostgreSQL 9.4 is only available in SLES 12 SP2

You should have an up-to-date database backup before attempting the migration.

Existing installations of SUSE Manager 3.0 Server will need to run

      /usr/lib/susemanager/bin/pg-migrate.sh

to migrate from PostgreSQL 9.4 to PostgreSQL 9.6

Your SUSE Manager Server installation will not be accessible during the migration.

Migration will create a copy of the database under /var/lib/pgsql and thus needs sufficient disk space to hold two copies (9.4 and 9.6) of the database.

Since it does a full copy of the database, it also needs considerable time depending on the size of the database and the IO speed of the storage.

If your system is scarce on disk space you can do an fast, in-place migration by running

      /usr/lib/susemanager/bin/pg-migrate.sh fast

The fast migration usually only takes minutes and no additional disk space. However, in case of failure you need to restore the database from a backup.

This wiki page contains additional information about the migration.

SUSE Manager Server enabled for SLES 12 SP3

SUSE Manager 3.0 is now based on SLES 12 SP3.

If you already have a SUSE Manager 3.0 Server or Proxy deployed, you can now initiate a service pack migration as outlined in the SLES documentation.

Please migrate to PostgreSQL 9.6 as outlined above before starting the service pack migration.

If you deploy a new SUSE Manager 3.0 Server or Proxy, please start with SLES 12 SP3 as the base operating system.

Release notes and documentation have been adapted to reflect this.

Version 3.0.8

Bugfix release.

Change of jabberd database

jabberd now uses sqlite in place of the berkeley db database to improve stability and performance. sqlite is the preferred database option for jabberd.

Fresh installations of SUSE Manager 3.0 Server will use sqlite by default.

Existing installation need to manually switch to this database as follows

      # systemctl stop jabberd
      # sed -i.bak "s#<driver>db</driver>#<driver>sqlite</driver>#g" /etc/jabberd/sm.xml
      # sed -i.bak "s#<module>db</module>#<module>sqlite</module>#g" /etc/jabberd/c2s.xml
      # systemctl start jabberd

Note: Running spacewalk-setup-jabberd is not recommended as it will reset the jabberd password, breaking existing installations.

jabberd removal and recreation

Notice that the sqlite variant of the jabberd database does not get re-created automatically.

The workaround for corruptions of the old database - regular removal - does not apply anymore.

In case you erroneously deleted the sqlite database, jabberd will not be able to re-create it.

You need to run /usr/share/spacewalk/setup/jabberd/create_sqlite3_database to create the database schema and restart jabberd.

New products supported

SUSE LINUX Enterprise Server 12 SP3
SUSE LINUX Enterprise Desktop 12 SP3
SUSE Enterprise Storage 5
SUSE LINUX Enterprise Server 12 SP3 SAP Applications on ppc64le
SUSE OpenStack Cloud Continuous Delivery 6

Version 3.0.7

Bugfix release.

Version 3.0.6

Bugfix release.

New products supported

SLES 12 SP1 LTSS

Version 3.0.5

Security fix

This release contains a security fix (CVE-2017-7470) for spacewalk-backend where non admin or disabled user could make changes to a system using spacewalk-channel.

new package: locale-formula

This enables configuration of locale-related settings across many salt-management clients (minions) via a user-friendly UI.

UEFI PXE boot

PXE boot should now support UEFI systems. However, our experience shows that UEFI BIOS implementation still vary a lot. So this feature might not work for some systems.

To get this supported across more systems, we need your feedback.

New products supported

Cloud 7 - Magnum Orchestration

Version 3.0.4

SUSE Manager Server enabled for SLES 12 SP2

With the release of the SUSE Manager product definition 188 patch, SUSE Manager 3 is now based on SLES 12 SP2.

If you already have a SUSE Manager 3 Server or Proxy deployed, you can now initiate a service pack migration as outlined in the SLES documentation.

If you deploy a SUSE Manager 3 Server or Proxy anew, please start with SLES 12 SP2 as the base operating system. Release notes and documentation have been adapted to reflect this.

Websocket enablement

Sending remote commands to Salt minions could block the web UI. This was fixed by introducing websocket-based communication for the remote command UI.

If you are connecting from your browser to SUSE Manager Server UI via a http proxy, please enable websocket forwarding on the http proxy.

New products supported

SUSE Package Hub
SLES 12 for SAP on ppc64le

Version 3.0.3

Update of Salt to 2015.8.12

Salt is now at version 2015.8.12 and also available for SLES 12 via the advanced systems management module.

Please take care to update Salt first, before applying any other SUSE Manager updates.

'Live patching' support

Live patching is now fully supported in SUSE Manager. You can view and apply live patches to applicable systems. Please see the best practices guide for full documentation.

SSH push for Salt

SSH push is now available for Salt minions. This allows connections initiated by the SUSE Manager Server as well as agentless clients.

See the best practices guide for full documentation.

Add Raspberry Pi channels

A Raspberry Pi running SLES 12 SP2 or later can now be managed by SUSE Manager. Please note that this combination is self-supported.

New products supported

SLE-POS 12 SP2
SUSE Enterprise Storage 4
SUSE OpenStack Cloud 7
SLE-RT 12 SP2

Version 3.0.2

Support Service Pack migration for Salt minions

Service pack migration is now enabled for Salt minions.

python-pyinotify available in Tools channel

python-pyinotify, a Python module for watching filesystems changes has been added to the SUSE Manager Tools 12 Module.

This module can be used when setting up Beacons on Salt minions. For more details see (Salt beacons)

SLES 12 SP2 for ARM 64bit

The SUSE Manager Tools channel is now available for for aarch64 (bsc#1002776)

Version 3.0.1

Changed versioning scheme

SUSE Manager 3 now has a <major>.<minor>.<micro> version number and will be referenced as SUSE Manager 3.0.

Every patch release adding features will increase the <micro> version numnber. This version number will also be displayed in the footer of the web UI.

New products supported

SLE12 SP2 product family

Salt minions via SUSE Manager Proxy

SUSE Manager Proxy now supports clients managed by Salt, aka salt minions. See the SUSE Manager Proxy release notes for details.

Salt on Expanded Support Platform

Salt on clients running SUSE Linux Enterprise Server with Expanded Support or RHEL. Only versions 6 and 7 are supported. Version 5's Python version is too old to run Salt.

Note: When installing patches, the UI lags behind on the patch status. This will be fixed in the next maintenance update.

Skipping a Service Pack during SP migration

Service pack migration used to restrict migrations to the 'next' service pack only.

With SLE 12 SP2 it is possible to skip a service pack. You can migrate from SLE 12 GA to SLE 12 SP2 without the need to migrate to SLE 12 SP1 in between.

In the web UI this adds a new screen in the SP migration workflow, allowing you to select the migration target.

Note: Not all base and extension (aka add-on product) combinations are supported. The web UI restricts possible migration targets to supported scenarios.

'taskotop' web UI

You can now see the status of taskomatic jobs in the web UI. This is the same information you get from the taskotop command-line tool introduced before.

Go to 'Admin' -> 'Task Engine Status' -> 'Runtime Status'

The table shows you all currently running or finished jobs for the last 5 minutes. The view is refreshed every 5 seconds.

new API call: listMigrationTargets

The listMigrationTargets API call, given base and evtl. extensions, returns a list of available targets for a service pack migration.

The existing scheduleSPMigration API call now optionally takes one of those targets.

New documentation sections

Best practices

Getting started with Salt

Advanced topics

Salt Proxy
Monitoring with Icinga

Between GA and 3.0.1

New products supported

SLES 12 LTSS
OES 2015, OES 2015 SP1, incl. SP migration

Bootstrap UI

The new bootstrapping UI can be used to register systems from the UI by giving only the hostname of a machine to be managed and SSH credentials to access that machine. SUSE Manager will take care of installing the needed software agent (salt-minion) from its own (bootstrap) repositories, as well as configuring and enabling it.

With this procedure it is no longer necessary to manually accept that new minion's key because pre-accepted key is deployed to the system that is going to be registered.

If a username is provided that is different from "root" sudo will be used on the client to configure it, which naturally requires that sudo has been setup correctly.

taskotop

spacewalk-utils now contains taskotop, a command line tool to visualize the taskomatic schedule.

New products supported

SUSE Enterprise Storage 3
SLE 12 Certifications module
SLE-POS 11 SP3 as addon to SLES 11 SP4

Patches

The SUSE Patch Finder is a simple online service to view released patches.

Version 3.0.12

SUSE Manager Server

nutch:

Fix hadoop log dir (bsc#1061574)

patterns-suse-manager:

Add py26-compat-salt to be able to connect with salt-ssh to a system which only has python2.6 installed

spacecmd:

Connect to API using FQDN instead of hostname to avoid SSL validation problems (bsc#1085667)
Add function to update software channel through spacecmd

spacewalk-backend:

Do not fail boostrap if no ip6addr interface is available (bsc#1090395)
Fix encoding for RPM package group in reposync (bsc#1083001)

spacewalk-certs-tools:

Fix bootstrap script for python3 (bsc#1091840)

spacewalk-java:

Fix unknown installed products when using salt-ssh (bsc#1088861)
Add SLES12 SP2 LTSS family (bsc#1092194)
Fix token cleanup task crashing (bsc#1090585)
Fix taskomatic deadlock in failure case (bsc#1085471)
Wait until minion is back to set RebootAction as COMPLETED (bsc#1089401)
Fix Advanced search for systems with installed packages (bsc#1085838)
Fix index out of bound exception when os-release query returns multiple package names for RHEL/CentOS (bsc#1076931)
More specific message for empty custom system info
Fix presence ping (bsc#1080353)
Set hostname before hardware refresh as well (bsc#1077760)
Adjusted the code to override software channel's gpg_check during clone(#bsc1080290)
Harmonize display of custom system information (bsc#979073)
Fix NPE when retrieving OES repo (bsc#1082328)

spacewalk-search:

Adapt query to retrieve the servers from the DB after drop of rhnServerNetwork table (bsc#1083114)

spacewalk-utils:

Clone-by-date removes packages only if the list is not empty (bsc#1089396)

spacewalk-web:

Set SUSE Manager version to 3.0.12

subscription-matcher:

Add 2 new partnumbers to rules file (bsc#1081977)
Improve subscription-matcher reporting accuracy via SCC (bsc#1031716)
Small bugfixes

susemanager:

Fix bootstrap script for python3 (bsc#1091840)
Add new traditional packages and renamed to bootstrap repo data
Fix unknown installed products when using salt-ssh (bsc#1088861)
Add python2-salt to RES7 and SLES12 bootstrap repository
Fix bootstrapping RHEL 7 salt client (missing python-ipaddress) (bsc#1087055)
Add SLES4SAP-12-SP3-ppc64le as bootstrap repository (bsc#1082548)

susemanager-schema:

Remove update of not existing table (bsc#1087131)

susemanager-sls:

Change name of sle12 gpg key
Create bootstrap repo only if it exist in the server (bsc#1087840)
Fix master tops merging when running salt >= 2018

susemanager-sync-data:

Add SLES12-SP2-LTSS product classes (bsc#1092194)
Add support for SLES12 SP2 LTSS (bsc#1088878)

virtual-host-gatherer:

Support kubernetes access configuration only via kubeconfig. Remove other configuration options like url, username, password and certificates.

Salt

salt:

Documentation refresh to 2018.3.0
No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
MySQL returner now also allows to use Unix sockets (bsc#1091371)
Do not override jid on returners, only sending back to master (bsc#1092373)
Fixes for salt-ssh:
- Option --extra-filerefs doesn't add all files to the state archive
- Pillar completely overwritten (not merged) when doing module.run + state.apply with pillar in kwargs
Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
Fixed Python 3 issue with CIDR addresses.
Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
Fix for logging during network interface querying (bsc#1087581)
Fix rhel packages requires both net-tools and iproute (bsc#1087055)
Fix patchinstall on yum module. Bad comparison (bsc#1087278)
Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
Fallback to PyMySQL (bsc#1087891)
Improved test for fqdns
Update SaltSSH patch (use code checksum instead version on thin update)
Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
Add python-2.6 support to salt-ssh
Update salt-ssh multiversion patch
Add iprout/net-tools dependency
Salt-ssh: require same major version while minor is allowed to be
Fix zypper.info_installed 'ascii' issue
Update openscap push patch to include the test fixes
Explore 'module.run' state module output in depth to catch "result" properly
Make it possible to use docker login, pull and push from module.run and detect errors
Fix logging with FQDNs
Fix unicode decode error with salt-ssh
Fix cp.push empty file (bsc#1075950)
Salt-ssh - move log_file option to changeable defaults
Fix grains containing trailing "\n"
Remove salt-minion python2 requirement when python3 is default (bsc#1081592)
Remove-obsolete-unicode-handling-in-pkg.info_installed
Fix-epoch-handling-for-Rhel-6-and-7
Restoring-installation-of-packages-for-Rhel-6-7
Prevent queryformat pattern from expanding (bsc#1079048)
Fix epoch handling for Rhel 6 and 7 (bsc#1068566)
Fix for wrong version processing during yum pkg install (bsc#1068566)
Fix the usage of custom macros on the spec file.
Fix RES7: different dependency names for python-PyYAML and python-MarkupSafe
Build both python2 and python3 binaries together.
Bugfix: errors in external pillar causes crash instead of report of them (bsc#1068446)
Fix 'user.present' when 'gid_from_name' is set but group does not exist.
Fix "No service execution module loaded" issue (bsc#1065792)
Set SHELL environment variable
Add fqdns to grains (bsc#1063419)
Fixing cherrypy websocket with python3
Python3 bugfix for cherrypy read()
Fix for logging on salt-master exit in rare cases (pid-file removal)
Fix salt-master for old psutil version
Fix for delete_deployment in Kubernetes module (bsc#1059291)
Older logrotate need su directive (bsc#1071322)
Fix bsc#1041993 already included in 2017.7.2
Escape the usage of %{VERSION} when calling out to rpm. RPM 4.14 has %{VERSION} defined as 'the main packages version'.
Fix wrong version reported by Salt (bsc#1061407)
Fix CVE-2017-14696 (bsc#1062464) already included in 2017.7.2
Run salt master as dedicated salt user
Run salt-api as user salt (bsc#1064520)

supportutils-plugin-salt:

Collect salt-api, salt-broker and salt-ssh log files (bsc#1090242)

Client tools

cobbler:

Fix signature for SLES15 (bsc#1075014)
Detect if there is already another instance of "cobbler sync" running and exit with failure if so (bsc#1081714)
Escape shell parameters provided by the user for the reposync action (CVE-2017-1000469) (bsc#1074594)
Add sles15 distro profile (bsc#1090205)
SLES15 is using /etc/os-release instead of /etc/SuSE-release, use this one for checking also
Cleanup: cobbler is noarch, so arch specific requires do not make sense
Build server wants explicite package in BuildRequires; use tftp
Fix koan shebang
Require tftp(server) instead of atftp

hwdata:

Update to version 0.308:
- Updated pci, usb and vendor ids.

osad:

Use full package name python-jabberpy as dependency (bsc#1087299)
Sync with upstream (bsc#1083294)
Remove osad files when packaging only for python3
Run osa-dispatcher on python3 when possible
Remove clean section from spec (bsc#1083294)
Remove unused python-xml requirement (bsc#1082211)
Add missing directory to filelist
Splitinto python2/python3 specific packages

python-websocket-client:

Build python3 subpackage (fate#324435)

rhn-custom-info:

Remove empty clean section from spec (bsc#1083294)
Sync with upstream
Build with python3 when needed

rhn-virtualization:

Remove SUSE Studio based image deployments (bsc#1090504)
Sync with upstream (bsc#1083294)
Build python2 packages on SUSE systems
Remove empty clean section from spec (bsc#1083294)
Simplify status check
Open cache file in binary mode
Fixing traceback from poller.py on Python 3
Fixing a bytes-like object is required, not 'str'
Move files into proper python2/python3 subpackages

rhncfg:

Sync with upstream (bsc#1083294)
Build python2 packages on SUSE systems
Remove empty clean section from spec (bsc#1083294)
Improve webui for comparing files (bsc#1076201)
Add --config option to rhncfg-manager and rhncfg-client
Add better handling of interrupted system calls
Rhncfg: add missing dirs to filelist
Move files into proper python2/python3 subpackages
Store output in the action file so partial output can arrive to server
Print different message if file does not exist
Print a name of file which does not exist during diff
Tell user which file differs
Add password config option to rhncfg-manager
Execute remote commands in clean environment

rhnlib:

Sync with upstream (bsc#1083294)
Remove empty clean section from spec (bsc#1083294)
Replace netstat with ss command
Build python3 package
Check a state of handshake before shutdown SSL connection
Python's OpenSSL.SSL.Connection method for getting state was renamed.

rhnpush:

Sync with upstream (bsc#1083294)
Rhnpush is needed on python2 due to spacewalk-proxy
Build python2 on SUSE
Remove empty clean section from spec (bsc#1083294)
Move rhnpush files into proper python2/python3 subpackages

spacecmd:

Sync with upstream (bsc#1083294)
1539878 - add save_cache to do_ssm_intersect
Fix softwarechannel_listsyncschedule
Disable pylint for python2 and RES < 8 (bsc#1088070)
1536484 - Command spacecmd supports utf8 name of systems
1484056 - updatefile and addfile are basically same calls
1484056 - make configchannel_addfile fully non-interactive
1445725 - display all checksum types, not just MD5
Remove clean section from spec (bsc#1083294)
Added function to update software channel. Moreover, some refactoring has been done(bsc#1076578)
Add more python3 compatibility changes
Compatibility with Python 3
Fix typo (bsc#1081151)
Allow scheduling the change of software channels as an action. The previous channels remain accessible to the registered system until the action is executed.
Add --config option to spacecmd
Added custom JSON encoder in order to parse date fields correctly (bsc#1070372)
Pylint - fix intendation
Fix build with python 3
Show list of arches for channel
Allow softwarechannel_setsyncschedule to disable schedule
Add softwarechannel_setsyncschedule --latest
In case of system named by id, let id take precedence
Make spacecmd prompt for password when overriding config file user
Show less output of common packages in selected channels
Adding softwarechannel_listmanageablechannels

spacewalk-backend:

Bugfix: do not fail boostrap if no ip6addr interface (bsc#1090395)
Allow again to use a higher version of spacewalk-backend-libs with spacewalk-backend (bsc#1092383)
Sync with upstream (bsc#1083294)
1567157 - remove 'www' part from cve.mitre.org domain name
1198723 - rhnRepository.py: add support for Debian / Ubuntu Release files
1549546 - Allow spacewalk-channel to add parent channel
Temporary revert bsc#1083001
SLE15 support: recommended/required flag for products and channels (bsc#1087373)
Updating .po translations from Zanata
Fixing incorrect syntax of format string
Fixing newline error in translation
1550001 - KeyError: 'severity' caught when exporting channel with rhn-satellite-exporter
1534417 - sanitize pwds in backup files and http-proxy-pwds as well
Remove empty clean section from spec (bsc#1083294)
1540981 - Clarify error-reporting when checksum_cache is bad
1537098 - Teach packageImport to ignore flags RPM doesn't know
Fix: restore hostname and ip*addr in templated documents (bsc#1075044)
Fix directory name in spacewalk-data-fsck
Search for product packages when installed packages are available (bsc#1060182)
RhnServerNetwork refactoring (bsc#1063419)
Change the virtualization backend not to duplicate data in case host and guests are in different organizations
Fix joining strings
Yum ContentSource() should set number of packages during raw listing.
Convert release to long while checking which is older or newer
Do not import ignored errata
Process comps file before package import
Yum on RHEL6 has no idea about environments
Make rhn_rpm python3 compatible
Open checksummed files in binary mode
Mention package groups in help
Detect and parse package groups in filters
Add new spacewalk-repo-sync command line option to synopsis of man-page
Add new parameter '--show-packages' for spacewalk-repo-sync.
Build python3 subpackage for -libs package
Fix issues with syncing deb repos (bsc#1050433)
Honor MAX_LOG_AGE for (renamed) cobbler/tasks logs file in spacewalk-debug (bsc#1025201)
Add hostname to duplicate machine_id email (bsc#1055292)
Fix link to manual and the described procedure
Don't crash when token is set to 'fake' (bsc#1060022)
When searching for not installed products exclude release packages which are provided by others (bsc#1067509)

spacewalk-client-tools:

Require zypp-plugin-spacewalk and yum-rhn-plugin in a version which install actions to standard python path (bsc#1091665)
Sync with upstream (bsc#1083294)
Build both python 2/3 because of rhnpush
Updating .po translations from Zanata
Don't try to delete python2 files when there are none
Strip quotes when reading /etc/sysconfig/network
Remove empty clean section from spec (bsc#1083294)
Move dependency to python2 subpackage
Python3 fix for searching file in rpm
Make is_utf8 method python3 compatible
Platform module behave different with python3
Device.sys_path is attribute not function
Make getting device properties compatible with older versions of pyudev
Split files into proper python2/python3 subpackages
Fix syntax for python 3
Add epoch information for deb packages
Fix rhn-profile sync on Fedora 26 fix ipv6 network mask calculation
Use new pyudev module to get udev information
Remove dependency on libgnome

spacewalk-koan:

Sync with upstream (bsc#1083294)
Build python2 packages on SUSE systems
Remove empty clean section from spec (bsc#1083294)
Replace ifconfig with ip command
Add missing directories to filelist
Split spacewalk-koan into python2/python3 specific packages
Replace koan20 with koan
Remove dependency to rhn-virtualization

spacewalk-oscap:

Require openscap-scanner on newer versions of RHEL (bsc#1093545)
Sync with upstream (bsc#1083294)
Build python2 packages on SUSE systems
Remove clean section from spec (bsc#1083294)
Add missing directories to filelist
Split spacewalk-oscap into python2/python3 specific packages

spacewalk-remote-utils:

Sync with upstream (bsc#1083294)
1574492 - Update spacewalk-remote-utils with RHEL 7.5 channel definitions
Remove clean section from spec (bsc#1083294)
Update spacewalk-remote-utils with RHEL 7.4 channel definitions
Make python2/3 defs consistent with other specs
Build with python3 if needed

spacewalk-usix:

Split spacewalk-usix into python2 and python3 variants
Remove empty clean section from spec (bsc#1083294)
Sync with upstream
Use macro build_py3
Build subpackage with python3

spacewalksd:

Sync with upstream (bsc#1083294)
Updating .po translations from Zanata
Remove empty clean section from spec (bsc#1083294)
Cleanup specfiles
Close and reopen syslog when redirecting child output
No insserv on available in newer distributions

supportutils-plugin-susemanager-client:

Released in the SLE15 code stream

suseRegisterInfo:

Remove clean section from spec (bsc#1083294)
Build for python 2 and 3

zypp-plugin-spacewalk:

Fix encoding errors with python3 (bsc#1090746)
Use standard python path for actions also when building for older distributions (bsc#1091665)
Change pkg_gpgcheck setting to restore the old behaviour with upstream Spacewalk (bsc#1091034)
Python3 compatibility (bsc#1073879)

Version 3.0.11

spacecmd:

Configure gpg_flag via spacecmd creating a channel (bsc#1080290)

spacewalk-backend:

Fix spacewalk-data-fsck restore of broken package db entry (bsc#1071526)

spacewalk-java:

Handle stderr from "virtual-host-gatherer" to avoid hanging (bsc#1067010)
Provide another create method(with additional parameter Gpgcheck) to create software channel through XML RPC(bsc#1060691).
Uniform date formatting in System Details view (bsc#1045289)
Handle gpg_check correctly (bsc#1076578)
Show the time on the event history page in the users preferred timezone (bsc#1063891)
Uniform the notification message when rebooting a system (bsc#1036302)
Refresh pillar data on formular change (bsc#1028285)
Fix encoding/decoding of url_bounce with more parameters (bsc#1075408)

spacewalk-utils:

Remove restrictions imposed on regex used in 'removelist' parameter passed to spacewalk-clone-by-date that allowed only exact match (bsc#1075254)

spacewalk-web:

Set SUSE Manager version to 3.0.11

susemanager:

Fix custom SERVER_KEY overriding (bsc#1075862)
Do not try to force db encoding on db upgrade; use same value as for installation (bsc#1077730)

susemanager-schema:

Handle duplicate serverpackage entries while fixing duplicate evr ids (bsc#1075345)
Fix: schema with proper extension (bsc#1079820)

susemanager-sls:

Compare osmajorrelease in jinja always as integer

susemanager-sync-data:

Use TLS for mirroring OES2018 channels (bsc#1074430)

Version 3.0.10

nutch:

Fix log hadoop into proper dir (bsc#1061574)

osad:

Fixed TypeError for force flag in setup_config that could happen when jabberd restart was needed. (bsc#1064393)

pxe-default-image:

Spectre and Meltdown mitigation (CVE-2017-5753, CVE-2017-5715, CVE-2017-5754, bsc#1068032)

spacecmd:

Added custom JSON encoder in order to parse date fields correctly (bsc#1070372)

spacewalk-backend:

Fix: restore hostname and ip*addr in templated documents (bsc#1075044)
Fix directory name in spacewalk-data-fsck
RhnServerNetwork refactoring (bsc#1063419)
Non admin or disabled user cannot make changes to a system anymore
No need to be autonomous when inserting to rhnArchType
Add suseLib.accessible() doing a HEAD request to test
Fix extract keyid from RPM header
Fix typo in sql statement
Fix building on RH
Call yum update_md with the option to get all updateinfos
Backport upstrem fixes
Fix checksum handling.
Change suseServer ostarget to a foreign key to suseOSTarget(id) client registration.
Reposync: find checksums for packages in channels with org_id null
Skip patch instead of abort if no checksum for a package

spacewalk-branding:

Fix message about package profile sync (bsc#1073739)

spacewalk-client-tools:

Fix package sources

spacewalk-java:

Fix message about package profile sync (bsc#1073739)
Add VM state as info gathered from VMware (bsc#1063759)
Improve performance of token checking, when RPMs or metadata are downloaded from minions (bsc#1061273)
Fix action names and date formatting in system event history (bsc#1073713)
Fix incorrect 'os-release' report after SP migration (bsc#1071553)
Fix failed package installation when in RES 32 and 64 bit packages are installed together (bsc#1071314)
Add user preferences in order to change items-per-page (bsc#1055296)
Display messages about wrong input more end-user friendly. (bsc#1015956)
Fix content refresh when product keys change (bsc#1069943)
Allow 'Package List Refresh' when package arch has changed (bsc#1065259)
Support Open Enterprise Server 2018 (bsc#1060182)
Do not remove virtual instances for registered systems (bsc#1063759)
Process right configfile on 'scheduleFileComparisons' API calls (bsc#1066663)
Fix reported UUIDs for guests instances within a virtual host (bsc#1063759)
Generate Order Items for OEM subscriptions (bsc#1045141)
Enable 'Power Management' features on Salt minions.
Fail gracefully when GPG files are requested (bsc#1065676)
Improve messaging for "Compare Packages" (bsc#1065844)
RhnServerNetwork refactoring (bsc#1063419)
Add Adelaide timezone to selectable timezones (bsc#1063891)
Add logging messages for SP migration (bsc#1066819, bsc#1066404)
Make the packages require the frontend-libs
Do not allow creating kickstart profiles that differ from existing ones
Fix system.listLatestUpgradablePackages API to list upgradable packages
Backported better installation server detection code
Fix display of XML snippets in the web ui using session install=.... parameter
Settings the correct architecture in cobbler, needed by virt.
Rename sm-register to mgr-register
Some style fixes

spacewalk-reports:

More rhnServerNetwork refactoring (bsc#1063419)
RhnServerNetwork refactoring (bsc#1063419)

spacewalk-search:

RhnServerNetwork refactoring (bsc#1063419)
Fix requires

spacewalk-web:

Add user preferences in order to change items-per-page (bsc#1055296)

susemanager:

Support Open Enterprise Server 2018 (bsc#1060182)
Fixed bootstrap repository path for SLES4SAP version 12 and 12.1 (bsc#1062936)
Fix error message for database upgrade failure
Check for sufficient diskspace in /var/lib/pgsql
Notify admin that database backups need reconfiguration after db upgrade

susemanager-docs_en:

Update text and image files:
- List Open Enterprise Server 2015, 2015 SP1, 2018 as supported clients.

susemanager-schema:

Fix duplicate entries in channel listings
Handle nevra not found case while fixing duplicate evr ids (bsc#1074508)
Enable 'Power Management' features on Salt minions.
Fix unique index for evr and capability and remove duplicates during migration (bsc#1058110)
RhnServerNetwork refactoring (bsc#1063419)
Add Adelaide timezone to selectable timezones (bsc#1063891)
Registration of REHL4 clients fails due to incomplete
Fix copyright
Change suseServer ostarget to a foreign key to suseOSTarget(id)
Add RES GPG Key to DB
Add SUSE and Novell GPG Keys to DB

susemanager-sls:

Python3 compatibility fixes in modules and states
Fix deprecated SLS files to avoid deprecation warnings during highstate (bsc#1041993)

susemanager-sync-data:

Support Open Enterprise Server 2018 (bsc#1060182)
Fix description for HA channel (bsc#1063588)
Add support for CAASP (bsc#1052283)
Add IBM DLPAR channels to SLES for SAP SPx ppc64le (bsc#1068057)
Remove Certification Module 12 from SP2 and SP3 (bsc#1066819)
Add SUSE Manager Server 3.0 and 3.1 channels for mirroring
Support SLE-RT 12 SP3 (bsc#1063940)
Add SLE12 LTSS as extension to SLES for SAP 12 (bsc#1069615)
Remove OES2018 Debuginfo channels (bsc#1071367)

virtual-host-gatherer:

Add VM state as info gathered from VMware (bsc#1063759)
Explore the entire tree of nodes from VMware (bsc#1070597)
Skip safely VMs which have no config attribute on VMware (bsc#1066923)

Version 3.0.9

Patch 1217: SUSE Manager Proxy 3.0

jabberd:

Allow for up to 8k client connections. (bsc#950184).
Revert configuration files to %config(noreplace). (bsc#988378)

spacewalk-backend:

Copy the subscription-matcher directory instead of the content.
Machine_info capability and check for client tool compatibility with SUSE Manager 2.1.

spacewalk-certs-tools:

Correctly update the trust store on SLE 11.
Re-add lost dependency of spacewalk-base-minimal-config to spacewalk-certs-tools. (bsc#984418)
Fix mgr-ssh-push-init with proxy and sudo. (bsc#982562)

spacewalk-client-tools:

Fix syntax error preventing reading of HW data correctly. (bsc#984622)
Machine_info capability and check for client tool compatibility with SUSE Manager 2.1.

spacewalk-web:

Recompute window dimensions when content changes. (bsc#971559)
Fix aside column height computation. (bsc#969834)

susemanager-sls:

Update trust store when multiple certificates in one file are available on SLE11.
Update CA certificates only when they have changed.
Assume no pillar data if the yml file for the minion does not exist. (bsc#980354)
Add distributable pkgset beacon for RPM database notifications.

Patch 984: SUSE Manager Server, Proxy and Client Tools

zypp-plugin-spacewalk:

Fix failover for multiple URLs per repo. (bsc#964932)

salt:

Remove option -f from startproc. (bsc#975733)
Changed Zypper's plugin. Added Unit test and related to that data. (bsc#980313)
Zypper plugin: alter the generated event name on package set change.
Fix file ownership on master keys and cache directories during upgrade. (handles upgrading from salt 2014, where the daemon ran as root, to 2015 where it runs as the salt user, bsc#979676)
Salt-proxy .service file created. (bsc#975306)
Prevent salt-proxy test.ping crash. (bsc#975303)
Fix shared directories ownership issues.
Add Zypper plugin to generate an event, once Zypper is used outside the Salt infrastructure demand. (bsc#971372)
Restore boolean values from the repo configuration
Fix priority attribute (bsc#978833)
Unblock-Zypper. (bsc#976148)
Modify-environment. (bsc#971372)
Prevent crash if pygit2 package is requesting re-compilation.
Align OS grains from older SLES with current one. (bsc#975757)
Bugfix: salt-key crashes if tries to generate keys to the directory w/o write access. (bsc#969320)

spacecmd:

Make spacecmd createRepo compatible with SUSE Manager 2.1 API. (bsc#977264)

spacewalk-backend:

Better error message for system that is already registered as minion.
Fix GPG bad signature detection and improve error messages. (bsc#979313)
Send and save machine_id on traditional registration.
Add machine info capability

spacewalk-client-tools:

Send and save machine_id on traditional registration.
Send machine info only if server has machine info capability.

Version 3.0.8

salt-netapi-client:

Fix date format for Schedule
Fix sending kwarg in payload in RunnerCall
Better error handling in Runner and Wheel calls
Refactored some code and added module name information to Call classes
listJobs improvements
Increase the default SOCKET_TIMEOUT to 20 seconds
Cmd module enhancements

smdba:

Several autotuning fixes; ensure cleanup of existing too low value for default_statistics_target (bsc#1022286)
Do not set default_statistics_target (bsc#1022286)
Support postgresql96 (bsc#1045152)
Prevent use of /var/lib/pgsql/data (bsc#1024058)
Remove copyright message every time shown (and fix its data)
Cleanup stale pid for killed postmaster (ver 9.x)
Minor code cleanup
On systemd-enabled systems use it for start/stop PostgreSQL (bsc#1024058)

spacewalk-backend:

Increase rpclib timeout to 10 minutes (bsc#1026930)
Adapt for the new gpgcheck flag for the channels

spacewalk-branding:

fix overlapping text narrow window (bsc#1009118)

spacewalk-config:

Resolve comps.xml file for repositories (bsc#1048528)

spacewalk-java:

Delete and create new ServerNetAddress if it already exists on HW refresh (bsc#1054225)
Fix XSS vulnerability (https://bugzilla.redhat.com/1460208)
Fix enter key submit on ListTag filter input (bsc#1048762)
Create VirtpollerData object with JSON content instead null (bsc#1049170)
Prevent malformed XML if 'arch' is set to NULL (bsc#1045575)
Resolve comps.xml file for repositories (bsc#1048528)
Fix: don't add default channel if AK is not valid (bsc#1047656)
Add 'Enable GPG check' function for channels
Regenerate pillar for the minions using the channel being modified
Remove executable bit from service files (bsc#1051518)
Fix wrong openscap xid (bsc#1030898)
Organization name allows XSS CVE-2017-7538 (bsc#1048968)
Fix overlapping text narrow window (bsc#1009118)
Manager: Update salt-netapi-client (v0.12.0)
Fix broken link (bsc#1033999)
Fix alignment on the org details (bsc#1017513)
Update channels.xml with OpenStack Cloud Continuous Delivery 6 (bsc#1039458)
Handle possible wrong UUIDs on SLE11 minions (bsc#1046218)
Fix: allow blank key generation (bsc#1032350)

spacewalk-search:

Remove executable bit from service files (bsc#1051518)

spacewalk-setup-jabberd:

Change default backend for jabberd to sqlite (bsc#1047155)

spacewalk-web:

Fix enter key submit on ListTag filter input (bsc#1048762)

susemanager:

Do not use checkpoint_segments parameter during migrations
Add script for migrating from postgresql94 to postgresql96
Create bootstrap repo for SLES for SAP 11 SP1 (bsc#1049471)
Adjust the bootstrap repo with SLE 12 SP3 repos

susemanager-docs_en:

Update text and image files.

susemanager-schema:

Adapt for the new gpgcheck flag for the channels

susemanager-sync-data:

Add proxy 3.0 channels for SLES12SP3 (bsc#1053850)
Support SUSE Enterprise Storage 5 and SUSE LINUX Enterprise Server 12 - SP3 for SAP Applications on ppc64le (bsc#1028098)
Update channels.xml with OpenStack Cloud Continuous Delivery 6 (bsc#1039458)
Add the SLE 12 SP3-related products (bsc#1037609)

virtual-host-gatherer:

Params to configure Kuberntes module from kubeconfig
Implement kubernetes gatherer module

Version 3.0.7

spacecmd:

Spacecmd report_outofdatesystems: avoid one XMLRPC call per system (bsc#1015882)

spacewalk:

Conflict with postgresql version greater than 9.4 (bsc#1045152)

spacewalk-backend:

Remove not implemented option --force-all-packages (bsc#1040194)
Fix parsing oscap results - not every Rule has an XCCDF ID Tag (bsc#1041992)

spacewalk-certs-tools:

Improve text for bootstrap (bsc#1032324)
Fix html pub path (bsc#1041989)

spacewalk-java:

Make system search comparator consistent (bsc#1040631)
Duplicate Systems: correct language not to mention 'profiles' (bsc#1035728)
Fix list filters to work with URL special characters (bsc#1042846)
Update Ivy's version of the taglibs (bsc#1044804)
Fix NPE when there's not udev results (bsc#1042552)
Fix: hide non-org event details (bsc#1039579)
Fallback to first netw interf if no primary ips (bsc#1038677)
Remove repositories which are not assigned to a channel and not accessible anymore (bsc#1043131)
Spacecmd report_outofdatesystems: avoid one XMLRPC call per system (bsc#1015882)
Correctly set action status to failed when an unexpected exception occurs (bsc#1013606)
Bugfix: Traditional SSH Push to Minion migration (bsc#1040394)
Fix parsing oscap xml result for minions, not every Rule has an XCCDF ID Tag (bsc#1041812)
Prevents ISE if base channels data is not up-to-date on SSM. (bsc#1040420)
Schedule a package list update after a Service Pack Migration (bsc#1017703)
Show permission denied instead of internal server err (bsc#1036335)
Use fallback now time as is without user preferences (bsc#1034465)

spacewalk-utils:

Don't show password on input in spacewalk-manage-channel-lifecycle (bsc#1043795)

spacewalk-web:

Display a generic non-empty err msg in case of xhr.status==0 (bsc#1041913)

susemanager-sls:

Fix certs state for Tumbleweed (bsc#970630)
Fix certs state for Leap 42.2 (bsc#970630)
Make sumautil.get_kernel_live_version accept any kgr output 'active: NUM' where NUM > 0 (bsc#1044074)
Avoids formula leaking on pillar data (bsc#1044236)
Fix yum plugin when installing patches on RHEL6 (bsc#1039294)
Remove suseRegisterInfo in a separate yum transaction so that it's not called by yum plugin (bsc#1038732)
Refactoring formulas in suma_minion external pillar (bsc#1033825)

Version 3.0.6

locale-formula:

Remove documentation links which point to developer-only wiki. (bsc#1033341)

salt-netapi-client:

Fix sending kwarg in payload in RunnerCall.

spacecmd:

Remove get_certificateexpiration support in spacecmd. (bsc#1013876)

spacewalk-backend:

Don't let disabled user log in.
Fix relative imports and update Copyright date. (bsc#1037635)
Rename incomplete_package_import to package_import_skip_changelog.
Spacewalk-backend should require the exact version of spacewalk-backend-libs. (bsc#1037635)

spacewalk-certs-tools:

Update openssl on bootstrap. (bsc#1037828)
Setup bootstrap repository also when no packages are missing.
Update important packages before registration. (bsc#1037355)

spacewalk-config:

Rename incomplete_package_import to package_import_skip_changelog.
Document Incomplete_package_import, Java.message_queue_thread_pool_size, salt_presence_ping_timeout and salt_presence_ping_gather_job_timeout in man page.

spacewalk-java:

Fix race condition for preview websocket messages in remote commands page.
Enable pkgset beacon for all SUSE OS distributions. (bsc#1032286)
Add info about base products to json input for subscription-matcher.
Add product class info to the json input for the subscription-matcher. (bsc#1031716)
Change mgrsshtunnel user home to /var/lib/spacewalk.
Make schedule notification links consistent for actions for a single system. (bsc#1039286)
Lookup functions should return every minion only one time.
Store temporary roster in configured location. (bsc#1019672)
Avoid System.out for logging.
Allow dot character '.' for activation key. (bsc#1035633)
Use the util method when checking whether minion is ssh push-like.
Change contact method for bootstrap script and ssh-push. (bsc#1020852)
SSM Task Log: make title coherent with menu item.
Hide lock for Salt servers. (bsc#1032380)
Parse old and new return structure of spmigration return event.
Parse result of SP migration Dry Run correctly. (bsc#1034837)
Prevent possible null pointer exception when installed products could not be found. (bsc#1034837)
Added the following missing references to the changelog: bsc#1033889, bsc#1025761, bsc#1029840

spacewalk-web:

Set SUSE Manager version to 3.0.6.
Allow dot character '.' for activation key. (bsc#1035633)

susemanager:

Add openssl to bootstrap repositories. (bsc#1037828)
Add some basic packages to RES bootstrap repository. (bsc#1037355)
Add python-backports-ssl_match_hostname to RES7 bootstrap repository. (bsc#1038027)

susemanager-schema:

Add base column to suseProducts.
Add channel_family_id column to suseProducts. (bsc#1031716)
Recreate possible missing data. (bsc#1032798)
Take care that capability name exists. (bsc#1035724)
Add logging to can_entitle_server function to write out the reason of a failure. (bsc#1032798)

susemanager-sls:

Add missing file name attribute to yum plugin state.
Use include instead of state.apply channels to fix salt-ssh issue. (bsc#1036268)
Fix pkgset beacon. (bsc#1029350)
Encode formula to string. (bsc#1033825)
Update basic packages when bootstrapping with salt.

susemanager-sync-data:

Add support for SLES12 SP1 LTSS. (bsc#1037736)

Version 3.0.5

spacewalk-backend:

Non admin or disabled user cannot make changes to a system anymore using spacewalk-channel. (bsc#1026633, CVE-2017-7470)

cobbler:

Support UEFI boot with cobbler generated tftp tree. (bsc#1020376)
Refresh patch for fuzzless appliance.

rhnlib:

Support all TLS versions in rpclib. (bsc#1025312)

salt-netapi-client:

Fix date format for Schedule module. (bsc#1034465)

spacecmd:

Improve output on error for listrepo. (bsc#1027426)
Reword spacecmd removal message. (bsc#1024406)

spacewalk-backend:

Do not fail with traceback when media.1 does not exist. (bsc#1032256)
Create scap files directory beforehand. (bsc#1029755)
Fix error if SPACEWALK_DEBUG_NO_REPORTS environment variable is not present.
Don't skip 'rhnErrataPackage' cleanup during an errata update. (bsc#1023233)
Add support for running spacewalk-debug without creating reports. (bsc#1024714)
Set scap store directory mod to 775 and group owner to susemanager.
incomplete_package_import: Do import rhnPackageFile as it breaks some package installations.
Added traceback printing to the exception block.
Change postgresql starting commands.

spacewalk-certs-tools:

Always restart the minion regardless of its current state. (bsc#1034956)
Correctly honor disabling of SSL in bootstrap script. (bsc#1033383)
Add curl dependency and move mgr-proxy-ssh* to spacewalk-proxy package.
Exit for non-traditional bootstrap scripts. (bsc#1020904)
Rename mgr-ssh-proxy-force-cmd -> mgr-proxy-ssh-force-cmd.
Add mgr-proxy-ssh-force-cmd, mgr-proxy-ssh-push-init to rpm.
Add option to configure only sshd.
Restrictive ssh options for user mgrsshtunnel.

spacewalk-java:

Fix missing IPs in Overview tab. (bsc#1031453)
Fix scheduling VM deployment in future. (bsc#1034289)
Handle empty set to not produce invalid sql. (bsc#1033497)
Fix SSM group pagination. (bsc#1012784)
Create PooledExecutor with pre-filled queue. (bsc#1030716)
Make sure minion keys can only be seen/managed by appropriate user. (bsc#1025908)
Set action status to 'failed' on uncaught exceptions. (bsc#1013606)
Add missing library to taskomatic classpath. (bsc#1024066)
Set log level to DEBUG for EOFException when the Websocket connection is aborted by the client. (bsc#1031826)
Add a remote command with label as a script to the actionchain. (bsc#1011964)
Fix architecture for default channels lookup. (bsc#1025275)
Change required salt-netapi-client to >= 0.11.
Using stream() during collection processing.
Making salt presence timeouts configurable via rhn.conf. (bsc#1025761)
Avoid blocking synchronous calls if some minions are unreachable. (bsc#1025761)
Excludes unreachable minions from synchronous call to prevent blocking. (bsc#1025761)
Fix LocalDateTimeISOAdapter to parse date string with timezone. (bsc#1024966)
Create scap files directories beforehand. (bsc#1029755)
Make country, state/province and city searchable for system location. (bsc#1020659)
Change incorrect help link. (bsc#1017418)
Don't allow scheduling scap scan if openscap pkg missing from minion.
Make salt aware of rescheduled actions. (bsc#1027852)
Close hibernate session on async salt-ssh call.
Use a small fixed pool so we don't overwhelm the salt-api with salt-ssh executions
Fix remote cmd ui js err and timed out message.
Remote cmd UI changes for salt-ssh minions.
Add support for salt ssh minions to remote cmd UI.
Apply SessionFilter also for error pages. (bsc#1028062)
Use correct logging class.
Fix broken help link for taskstatus. (bsc#1017422)
Test errata not removed from origin.
Fix merge channels patches. (bsc#1025000)
Change XccdfIdent.identifier mapping length to 100.
Add xccdf result xslt.
Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)
Use consistent spelling in UI. (bsc#1028306)
Rewording distchannelmap text. (bsc#1017772)
Javascript datepicker needs the timezone create a correct date object. (bsc#1024966)
Don't show audit tab for ssh-push minions.
Set scap store dir mod to 775 and group owner to susemanager.
Better error handling and more tests.
Store uploaded scap files.
Openscap action scheduling and handling.
Grant scap capability to minion on registration.
Enable audit tab for salt minions.
Scap inital xccdfEval and hibernate mappings.
Show proxy path in bootstrap UI.
AuthFilter tests: Update expectations to reflect cookie update at end of request.
AuthFilter: Update cookie expiry date at end of HTTP request. (bsc#1025775)
MinionActionCleanup: Only call list_jobs once per action id. (bsc#1025291)
MinionActionCleanupTest: Expect that list_jobs is only called once.
Feat: Allow salt-enabled bootstrap.sh via UI.
Catch and display all bootstrap errors.
Sync grains and beacons only for regular minions.
Add new channel tokens to minion.accessTokens.
Fix getting server path for a first level proxy.
Fix bootstrap err when proxy not selected.
Check if proxy hostname is FQDN not name in UI.
Utility for runner to generate ssh key and execute cmd via proxies.
Add proxy_pub_key to ssh bootstrap pillar.
Add ssh timeout to temporary roster.
Salt_ssh_connect_timeout configuration parameter.
Authorize parent salt-ssh key on proxy.
Java backend for salt ssh-push through proxy.
Avoid deadlock with spacewalk-repo-sync. (bsc#1022530)
Fix NPE when no SUSE Product was found for an installed product. (bsc#1029840)
Keep organization after migrating a system to salt. (bsc#1026301)
Fix glob only for noarch rpm(s).
Feat: Dynamically detect deployed CA certificate.
Fix restore original default (certificate).
Rename variable (cert provided by RPM).
Fix uniform bootstrap.sh. (bsc#1000762)

spacewalk-reports:

Remove legacy audit logging reports. (bsc#1009545)

spacewalk-setup:

Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade.
Add xccdf result xslt.
Authorize parent salt-ssh key on proxy.

spacewalk-web:

Remote Commands: Allow Web Socket to be opened on non-standard port.
Improve remote cmd ui error handling.
Show message when waiting for ssh minions times out.
Fix remote cmd ui js err and timed out message.
Remote cmd UI changes for salt-ssh minions.
Fix broken help link for taskstatus. (bsc#1017422)
Add js utility function to create Date objects in different timezones.
Show proxy path in bootstrap UI.
Clear proxy selection when clicking clear fields button.
Check if proxy hostname is FQDN not name in UI.
Show warn in bootstrap UI if proxy hostname is not a FQDN.

subscription-matcher:

Set -Xmx launch parameter based on customer data. (bsc#1024863)
Small bugfixes and logging improvements.

susemanager:

Add bootstrap repo data for SLES for SAP 12 SP2 ppc64le.
Add python-setuptools to bootstrap repo. (bsc#1033731)
Create directory manually if mksubvolume fails, so we now support btrfs based systems with missing mksubvoume utility. (bsc#1031885)
Create /var/spacewalk/systems in spacewalk-setup and ensure perms on upgrade
Fix typo in comment noting option with-custom-channels. (bsc#1031092)
Pre require tomcat and salt.
Fix %pre and %post scripts in susemanager.spec.
Append salt, tomcat, wwwrun to susemanager group.
Susemanager group and change owner and permissions for /var/susemanager/systems.

susemanager-schema:

Don't fail if capability already exists.
Show update message only when updating the schema package. (bsc#1024456)
Fix audit log disabling in Oracle.
Grant minions scap capability.
Clean up stale logging data and triggers. (bsc#1009545)
Fix deduplicate to work with more than two duplicates.

susemanager-sls:

Add certificate state for CAASP.
Add certificate state for SLES for SAP. (bsc#1031659)
Pre-create empty top.sls with no-op. (bsc#1017754)
Add xccdf result xslt.
Fix mainframesysinfo module to use /proc/sysinfo on SLES11. (bsc#1025758)
Set scap store dir mod to 775 and group owner to susemanager.
Store uploaded scap files.
Set minion own key owner to bootstrap ssh_push_sudo_user.
Runner to generate ssh key and execute cmd via proxies.
Change ssh bootstrap state to generate and auth keys for salt-ssh push with tunnel.
Authorize parent salt-ssh key on proxy.

susemanager-sync-data:

Support Cloud 7 - Magnum Orchestration (bsc#1026266) and SLES for SAP 12 SP2 ppc64le.

virtual-host-gatherer:

Adding support for exploring 'vim.Folder'. (bsc#1025421)

Version 3.0.4

salt-netapi-client:

Version 0.10.0 See https://github.com/SUSE/salt-netapi-client/releases/tag/v0.10.0

spacecmd:

Removed obsolete code (bsc#1013938)

spacewalk-backend:

Add incomplete_package_import option to speed reposync up

spacewalk-client-tools:

Traditional registration: resolve /etc/hostname if not FQDN (bsc#1019360)

spacewalk-config:

Add wss: to apache Content-Security-Policy
Make remote commands UI async (bsc#993209)

spacewalk-java:

Create tmp directory in spec file (bsc#1024486, bsc#1024482)
Store rosters in SALT_FILE_GENERATION_TEMP_PATH (bsc#1024486, bsc#1024482)
Show only allowed minions in remote commands UI (bsc#1024496)
Reject tokens not assigned to minions (bsc#1019965)
Apply addon system types from activation key during registration (bsc#1020180)
Remote commands: no blocking when minions are down (bsc#993209)
Log auth failure as error (bsc#1017505)
Apply highstate as the last step of a registration in case an activation key was provided (bsc#1020232)
Add severity to updateinfo (bsc#1012365)
Hide migration targets without valid subscriptions (bsc#1019893)
Fix SP migration when the SUSE Manager Tools product is installed (bsc#1014498)
Fix timezone handling for rpm installtime (bsc#1017078)
Validate activation key values (bsc#1015967)
Pass user-preferred localtime to the highstate UI (bsc#1020027)
Send ChannelsChangedEventMessage in SSM (bsc#1019451)
Fix token refresh logic (bsc#973421)
Ignore case when comparing virtualization type (bsc#1016960)
XMLRPC: Allow specifying config revision by natural attributes when adding to action chain (bsc#1011962)
Do not execute package list refresh twice (bsc#1016344)

spacewalk-web:

Increase the version to 3.0.4
Remote commands: no blocking when minions are down (bsc#993209)
Validate activation key values (bsc#1015967)
Pass user-preferred localtime to the highstate UI (bsc#1020027)

susemanager:

Add missing '-y' parameter for salt-key call (bsc#1024473)
Create bootstrap repo for Raspberry Pi (bsc#1023133)
Add an "IMPORTANT" note after migration is done (bsc#1013145)
Create bootstrap repo for SLES for SAP ppc64le

susemanager-docs_en:

Commented out White Papers book
Fixed broken help link (bsc#1021648)

susemanager-schema:

Fix error on channel delete with tokens (bsc#1024471)
Add severity to updateinfo (bsc#1012365)
Drop index before it gets re-created and use if exists for postgres (bsc#1021381)

susemanager-sls:

Configure mine.update to submit a job return event (bsc#1022735)
Disable spacewalksd and spacewalk-update-status when switching to salt registration (bsc#1020902)
Fix timezone handling for rpm installtime (bsc#1017078)

susemanager-sync-data:

Support SUSE-PackageHub (bsc#1021884)
Support SLES for SAP on ppc64le (bsc#1015414)

Client tools

salt:

Fix invalid chars allowed for data IDs (bsc#1011304)
Fix timezone: should be always in UTC (bsc#1017078)
Fixes wrong "enabled" opts for yumnotify plugin
Ssh-option parameter for salt-ssh command.

spacewalk-backend:

Add incomplete_package_import option to speed reposync up

spacewalk-client-tools:

Traditional registration: resolve /etc/hostname if not FQDN (bsc#1019360)

spacewalk-koan:

Updated registry hostname for mgr subdomain

spacecmd:

Removed obsolete code (bsc#1013938)

spacewalksd:

Use spacewalk-update-status only on registered systems (bsc#1015136)

Version 3.0.3

salt:

Update to 2015.8.12
Splitted off non-Linux and other external platform modules to 'salt-other' sub-package.
Other bugfixes and enhancements. See upstream release notes for more details.

osad:

Fix logfile option for osa-dispatcher (bsc#980752)

spacewalk-backend:

Handle non-unique machine_id after migrate from 2.1 (bsc#1013002)
Refer to scc.suse.com instead of bugzilla.novell.com in case of problem (bsc#967818)
Fix: selection of primary interface (bsc#1009677)
Spacewalk-backend.spec: add link to SUSE name of program (bsc#1009435)
Reposync - assign orphaned vendor packages to the default org (bsc#995764) remove non-used exception (bsc#986447, bsc#996609)

spacewalk-branding:

Show kernel live patching info in 'system details overview' (fate#319519)
Bugfix: differentiate writable/non-writable fields (bsc#868132)
Fix checkbox icon align (bsc#966888)
Use different symbols for collapsible sidebar items (bsc#967880)
Use a brighter background color for legends in asides (bsc#967881)
Update copyright year to 2016 (bsc#1010543)

spacewalk-certs-tools:

Allow passing multiple GPG keys to mgr-bootstrap (bsc#989905)

spacewalk-java:

Add support for live patching
Initial support for executing actions in taskomatic
Hide kernel patches in CVE Audit results when live patching is used (fate#319519)
Show kernel live patching info in 'system details overview' (fate#319519)
Escape act key names in bootstrap UI (bsc#1015967)
Add tunneling to salt-ssh support
Fix server checks to allow minions to perform a distupgrade (bsc#1013945)
Change default sort to ascending for pending actions list
Add reboot/restart type icon to relevant patch column in upgradable package lists
Add system.getKernelLivePatch API method
Update kernel version and other system info during package refresh (bsc#1013551)
Fix ISE when sorting system notes list (bsc#979053)
Fix checkbox icon align (bsc#966888)
Fix fromdir for 3rd party server (bsc#998696)
Display warning when JavaScript is disabled on all pages (bsc#987579)
Rename SSM page titles for consistency (bsc#979623)
Hide action chain schedule for salt systems also in SSM (bsc#1005008)
Send ActionScheduled message for all saved actions (bsc#1005008)
Fix plus/minus buttons in action chain list (bsc#1011344)
Fix misleading message on system reboot schedule in SSM (bsc#1011817)
Utilize HostPortValidator to validate bootstrap host (bsc#1011317)
Increment 'earliest' date by a millisecond between chain actions (bsc#973226)
Use human-parseable dates for server notes (bsc#969564)
Respect order of validation constraints in XSD files (bsc#959573)
Remove useless self-link on login page (bsc#963545)
Use different symbols for collapsible sidebar items (bsc#967880)
Fix SSM reboot action success messages (bsc#968935)
Allow sorting on avisory name in errata lists (bsc#989703)
Update 'view/modify file' action buttons text (bsc#1009102)
Handle salt ssh sdterr message (bsc#1005927)
ScheduleDetail.jsp: clarify button label (bsc#1010664)
Bugfix: Prevent salt-master ERROR messages if formulas files are missing (bsc#1009004)
Hide RHN disconnection option (bsc#1010049)
Reword general config page text (bsc#1009982)
Check and fix also the assigned repository while updating the channels (bsc#1007490)
Match url including query param seperator to have a definitive end of the path component (bsc#1007490)
Only show minions with sids available as links (bsc#1007261, bsc#970460)
Delete previous Salt key on register event (bsc#1006119)
Repository progress: decode another possible log info (bsc#972492)
Add oes extensions to base products (bsc#1008480)
Create "script.run" capability if it is not found (bsc#1008759)
Avoid misleading expected check-in message (bsc#1009006)

spacewalk-setup:

Preventing stderr output from systemctl calls (bsc#1015055)
Removing non-used '/srv/susemanager/pillar'
Removing '/usr/share/susemanager/pillar' path
Retreiving SUMA static pillar data from ext_pillar (bsc#1010674)

spacewalk-utils:

Use spacewalk 2.6 for openSUSE Leap 42.2
Add channels for openSUSE Leap 42.2

spacewalk-web:

Small adjustments on bootstrap page (bsc#1012761)
Bootstrapping: ssh push for salt system feature preview
Fix plus/minus buttons in action chain list (bsc#1011344)
BugFix: message consistency attempting bootstrapping a minion (bsc#1005924)
Only show minions with sids available as links (bsc#1007261, bsc#970460)

susemanager:

Preventing stderr output from systemctl calls (bsc#1015055)

susemanager-docs_en:

Live Patching support (fate#319519)
Salt should support ssh-push (fate#320782)
Over 100 documentation bugs and typos fixed
Spacecmd documented in Advanced Topics book

susemanager-frontend-libs:

Switch architecture to "noarch"

susemanager-schema:

Schema upgrade for live patching (fate#319519)

susemanager-sls:

Rename 'master' pillar to 'mgr_server'
Add tunneling to salt-ssh support
Provide SUMA static pillar data for unregistered minions (bsc#1015122)
Implement fetching kernel live version as module (fate#319519)
Removing '/usr/share/susemanager/pillar' path
Retreiving SUMA static pillar data from ext_pillar (bsc#1010674)
Bugfix: Prevent salt-master ERROR messages if formulas files are missing (bsc#1009004)
Fallback to major os release version for cert names (bsc#1009749)

susemanager-sync-data:

Support SLE-POS 12 SP2 (bsc#1012789)
Add Raspberry Pi channels to SUSE Manager
Add support for SUSE Enterprise Storage 4, SUSE OpenStack Cloud 7 and SLE-RT 12 SP2 (bsc#1006556, bsc#984450, bsc#984447)

Version 3.0.2

salt:

Fix exit codes of sysv init script (bsc#999852)
Including resolution parameters in the Zypper debug-solver call during a dry-run dist-upgrade.
Fix Salt API crash via salt-ssh on empty roster (bsc#1004723)
Adding 'dist-upgrade' support to zypper module (fate#320559)
Acl.delfacl: fix position of -X option to setfacl (bsc#1004260)
Fix generated shebang in scripts on SLES-ES 7 (bsc#1004047)
Added reference for (bsc#986019).

spacecmd:

Make exception class more generic and code fixes. (bsc#1003449)
Handle exceptions raised by listChannels. (bsc#1003449)
Alert if a non-unique package ID is detected.

other bugfixes:

ISE Shown for Client(s) Bootstrapped Behind a Chain of Proxies (bsc#1000184)
Clicking on a system in the webUI returns "Internal Server Error" (bsc#1001738)
Internal error at Overview (System details) - SLE Branch Server (SLES 11 SP4) (bsc#1001784)
internal server error on web_ui (bsc#1001923)
Internal server error 500 trying to view system details of salt clients (bsc#1002678)
Running system_details against a minion throws XmlRpcFault (bsc#1003449)
SUSE Manager temporary executables should not be in /tmp (bsc#1004521)
Task CVE Server Channels FAILED (bsc#1004717)
When the susemanager-sls package is updated changes need to be propagated to minions (bsc#1004725)
The function "state.apply" is running as PID 28378 (bsc#1004743)
Server Showing ISE When Cancelling Pending Actions for Several Minions Which are Shut Down (bsc#1004745)
Single-HTML missing new Salt Getting Started (Updated Packages) (bsc#1005102)
Bootstrap hangs attempting to install corporate public CA cert (bsc#1005677)
RHEL7: Bootstrap Script with Salt - Final Package Update Failed (bsc#1006188)
mgr-setup failing when there are extra scripts executed in /etc/profile.d (bsc#1006718)
Error upgrading from SLES for SAP 11 SP3 to SLES for SAP 12 SP1 through Autoyast and SUSE Manager (bsc#1006786)
No connection path if the proxy's hostname is different than minion's master hostname (bsc#1006982)
Channel repository - Last sync time button opens the rep sync log in the same browser window (bsc#1007459)
Clients traditional bootstrap via proxy getting "Permission to access ... denied" (bsc#1008221)
rhn.conf entry for taskomatic maxmemory has no effect (bsc#957653)
Scheduling Patch Upgrade Results with Linking to System Instead of Pending Actions (bsc#971342)
Failed actions on minions cannot be rescheduled (bsc#971622)
Unable to add new suse-manager-tools (update and pool) - channels for SLEx12 SP1 (bsc#976184)
System Subscribed to a Subset Sees all Config Channels as the Ones Subscribed To (bsc#979630)
Patches page typo: errata -> patch(es) (bsc#981635)
Running mgr-sync failing with internal server error (bsc#982347)
"Duplicate Systems" misreporting (bsc#983347)
minion bootstrapping: error when bootstrap SLE11 clients (bsc#990439)
Typo in API docs (bsc#994848)
Proxy Clients' Names Need to be Sorted (bsc#998348)

From GA until version 3.0.1

Patch 1542: salt

salt:

Setting up OS grains for SLES-ES (SLES Expanded Support platform)
Move salt home directory to /var/lib/salt (bsc#1002529)
Generate Salt Thin with configured extra modules (bsc#990439)
Prevent pkg.install failure for expired keys (bsc#996455)
Required D-Bus and generating machine ID
Fix python-jinja2 requirements in rhel
Fix pkg.installed refresh repo failure (bsc#993549)
Fix salt.states.pkgrepo.management no change failure (bsc#990440)
Prevent snapper module crash on load if no DBus is available in the system (bsc#993039)
Prevent continuous restart, if a dependency wasn't installed (bsc#991048)
Fix beacon list to include all beacons being process
Run salt-api as user salt like the master (bsc#990029)

Patch 1533: cobbler

cobbler:

Enabling PXE grub2 support for PowerPC (bsc#986978)

Patch 1539: SUSE Manager Server

pxe-default-image:

Rebuild with latest OS fixes

rhnlib:

Add function aliases for backward compatibility (bsc#998185)

smdba:

Fix recovery.conf permissions and ownership for latest PostgreSQL (bsc#1002231)

spacewalk-backend:

Fix for non-integer IDs for bugzilla bug
Silently ignore non-existing errata severity label on errata import, remove non-used exception (bsc#986447)
Make suseLib usable on a proxy

spacewalk-branding:

Support Formulas in SUSE Manager
SPMigration: add multi-target-selection step in front of the wizard
Handle minion down and job not found when canceling jobs on minions (bsc#993304) (bsc#994623)
Rename Errata to Patches/Updates in system details page (bsc#979476)
Change btn-primary border color to @suse-green-dark (bsc#967894)
Re-title page as "Managed Systems" (bsc#981278)
Rename "States Catalog" to "State Catalog" in UI

spacewalk-certs-tools:

Fix traditional bootstrap for RHEL clients (bsc#1003123)
Added the bootstrap repo for RHEL minions when using the bootstrap.sh script (bsc#1001361)
Use init.d where systemd is not available
Salt: do not up2date/remote-mgmt/disable local repo
Only use the first activation key for minions
Add `--salt` option to mgr-bootstrap command to create a bootstrap script which install and configure salt
Terminate registration if hosts aren't found in nsswitch config (bsc#992565)
Check only if all required packages are installed (bsc#992987)

spacewalk-client-tools:

Logging message in case of malformed XML file
Prevent crashes if machine-id is None (bsc#994619)
Print invalid package name and replace the invalid character
Ignore packages with not UTF-8 characters in name, version and release (bsc#990738)

spacewalk-config:

Make the Apache proxy timeout greater (5 min) than the Salt timeout (bsc#993304, bsc#994623)

spacewalk-java:

Hide all formula tabs as long as there are no formulas installed
Support formulas in SUSE Manager
SPMigration UI: list not synced channels in the tooltip
SPMigration: add multi-target-selection step in front of the wizard
Sync product extensions
Handle JsonException when sls with error (bsc#987835)
Many fixes for onboarding minions
Handle hardware refresh like any other action
Clone Severity from an errata (bsc#1000666)
Do not check for password type on autoyast files (bsc#999304)
Handle minion down and job not found when canceling jobs on minions (bsc#993304, bsc#994623)
Clear hibernate session after entity type change to fix NonUniqueObjectException (bsc#997243)
Remove previous client capabilities on traditional->minion reactivation (bsc#997243)
Enables pkgset beacon to work in RHEL systems
Support Open Enterprise Server 11 SP3 (bsc#988303)
Fix broken merge (bsc#987864)
Use raw package install for non zypper systems
Redirect user to a meaningful page after requesting details of non-existing Action Chain (bsc#973198)
Setup Salt Minion before packages are taken
Support Salt on RedHat like systems
Fix race condition during auto errata update (bsc#969790)
API requests should not be redirected to login
Introduce Spark router conventions
Add server endpoint for TaskoTop web UI page
Change EmptyString warning to debug log level to not spam the logs (bsc#989498)
BugFix: use user preferences parameters as default page size (bsc#980678)
Add proxy detection during registration and pillar generation
Adding default channel for minion (bsc#986019)
Fix NoClassDefFoundError (bsc#988196)
Call cobbler sync in profile edit only if requested (bsc#991440)
No explicite cobbler sync needed (bsc#991440)
Call all sync_* functions at minion start event
Add beacon configuration for pkgset (bsc#971372)

spacewalk-setup:

Commented on file_roots/pillar_roots
Added formula directories and formulas.sls to setup script
Master_tops module provides static top information
Merging top.sls files in base env (bsc#986770)

spacewalk-web:

Support formulas in SUSE Manager
Switched SUSE Manager version to 3.0.1
Introduce Spark router conventions
Disable strict host key checking per default
Rename "States Catalog" to "State Catalog" in UI
Add TaskoTop to UI
BugFix: use user preferences parameters as default page size (bsc#980678)
Unified table version

susemanager:

Support creating bootstrap repos for SLE12 SP2 family (bsc#969889)
Use systemctl instead of insserv for enabling postgresql
Quietly enable systemd services and do not pollute logfiles
Enable postgresql via systemctl; it's already adapted to systemd (bsc#995314)
Check the integrity of an archive before the import actually starts
Mgr-create-bootstrap-repo: Support to append additional packages names via commandline
Mgr-create-bootstrap-repo: Collect errors and print them at the end and copy all found packages
Add salt bootstrap repo data for RES6 and RES7
Added dependencies for JeOS SLE12
Add dependancy packages for JeOS (fate#320809)
Enable and start postfix on setup (bsc#979664)

susemanager-docs_en:

Getting Started with SALT section missing in documentation (bsc#998542)
Getting started with Salt only shows headers but no content (bsc#990789)
Salt GS Single HTML missing on suse.com/documentation (bsc#998329)
Constructing the Sandbox with JeOS image (bsc#986796)
Added Comments for users to /etc/salt/master.d/susemanager.conf for file_roots, pillar_roots, and external pillar (bsc#984794)
DOCREVIEW: Fixed a large number of DocReview Reported Comments(Internal Documentation Testing Bugs)
ALL: Added Doc Update Sections to each book
GETTING STARTED: Salt Getting Started Content
BEST PRACTICE: Additional Resources YAML, jinja, and Salt
BEST PRACTICE: Backup Chapter Updates
BEST PRACTICE: Minor Product Comparison Updates
BEST PRACTICE: Added a Common Administration Tasks Section
BEST PRACTICE: Added Additional Tips to Troubleshooting Chapter
REFERENCE: Added New SP Migration Features (Skipping a Service pack)
ADVANCED TOPICS: Added Salt Proxy Quickstart Chapter
ADVANCED TOPICS: Getting Started with Icinga Chapter

susemanager-schema:

Add table for storing product extensions
Add severity_id to rhnErrataTmp for consistency with rhnErrata (bsc#1000666)
Fixing suseMinionInfo.sql to make 'osFamily' NULLABLE
Delete rhnContentSourceFilter before rhnContentSource (bsc#998380)
Avoid a deadlock when deleting a server (bsc#969790)

susemanager-sls:

Fixed bug with numbers in FormulaForm and improved ext_pillar script
Added formula directories and formulas.sls to setup script
External pillar script now also includes formula pillars
Rename symlinks according to changed 'os' grain for Expanded Support
Adding certs states for RHEL minion based on SLES-ES
Rename udevdb scsi info json key
Add support for mapping mainframe sysinfo
Implement isX86() in jinja more correctly
Initial support for querying and saving DMI info
Add support for mapping the devices
Actually handle incoming hardware details
Initial version of the hardware.profileupdate sls
Added pkgset beacon support in susemanager yum plugin
Trust also RES GPG key on all RedHat minions
Trust GPG keys for SUSE Manager Tools channel on RES
Configure bootstrap repository for RES
Always enable salt-minion service while bootstrapping (bsc#990202)
CentOS cert state symlinks and fixes
States for installing certificate on redhat minions
Pkg.list_products only on Suse
Yum plugin to add jwt token as http header
Generate SLE 12 bootstrap repo path correctly (bsc#994578)
Merging top.sls files in base env (bsc#986770)
Watch files instead of require

susemanager-sync-data:

Add support for Open Enterprise Server 11 SP3 (bsc#988303)
Add Support for SLE12 SP2 family (bsc#969889)
AMD repos removed because of security reasons
Add SLES12-GA-LTSS-X86 and SLES12-GA-LTSS-Z channel families (bsc#994305)

python-certifi:

Added to fix salt-ssh on SLE11 target machine (bsc#990439)

Patch 1216: SUSE Manager Server

This update fixes the following issues with cobbler:

Convert bootoption "text" into "textmode=1" for SUSE systems. (bsc#984998)

Patch 1217: SUSE Manager Server 3.0

This update for SUSE Manager Server 3.0 includes the following new features:

Enable Oracle database backend. (fate#320213)
This update fixes the following issues:

jabberd:

Allow for up to 8k client connections. (bsc#950184)
Revert configuration files to %config(noreplace). (bsc#988378)

quartz:

Adjust ojdbc requirements needed to enable support for the Oracle database.

salt:

pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty. (bsc#989193)
Rewrite Minion ID generation. (bsc#967803)
Fix behavior for SUSE OS grains. (bsc#970669)
Salt os_family does not detect SLES for SAP. (bsc#983017)
Move log message from INFO to DEBUG. (bsc#985661)
Fix salt --summary to count not responding minions correctly. (bsc#972311)
Fix memory leak on custom execution module scheduled jobs. (bsc#983512)
Fix groupadd module for SLES 11 systems. (bsc#978150)
Fix pkgrepo.managed gpgkey argument. (bsc#979448)

smdba:

Use backup directory temporary space on restore. (bsc#986955)
Prevent access uninitialized variable.
Return values from the backup locator.
Do not proceed if backups weren't enabled.
With PostgreSQL, compute space-overview with the size(available and used) of the partition disk.
Compute the DB usage percentage on the amount of the partition instead of the remaining space. (bsc#977888)

spacewalk:

Require only oracle-lib-compat. (fate#320213)

spacewalk-backend:

Copy the subscription-matcher directory instead of the content.
Machine_info capability and check for client tool compatibility with SUSE Manager 2.1.

spacewalk-branding:

Hide scrollbar when it's not needed.
Integrate bootstrapping UI with System Overview.
Fix warning string. (bsc#983826)
Fix message about debuginfo packages. (bsc#972156)

spacewalk-certs-tools:

Correctly update the trust store on SLE 11.
Re-add lost dependency of spacewalk-base-minimal-config to spacewalk-certs-tools. (bsc#984418)
Fix mgr-ssh-push-init with proxy and sudo. (bsc#982562)

spacewalk-client-tools:

Fix syntax error preventing reading of HW data correctly. (bsc#984622)
Machine_info capability and check for client tool compatibility with SUSE Manager 2.1.

spacewalk-java:

Integrate bootstrapping with System Overview.
Support SP Migration for OES 2015 to 2015 SP1.
Fix for minion with multiple interfaces. (bsc#985707)
Fix HW Refresh duplicate insert. (bsc#971622)
No addon entitlements allowed for Foreign and Bootstrap systems. (bsc#983826)
Disable checkboxes for foreign and bootstrap systems in system types page. (bsc#983826)
Tell linuxrc that self_update is an user option so that it'll pass it to AutoYaST but won't process it further.
Disable YaST self update for new auto-installation trees for SLE.
Remove misleading links from action chain page. (bsc#983297)
Support OES 2015. (bsc#934560)
Align reboot behavior of salt and traditional clients. (bsc#975534)
Report the state of virtual guests from virtual host manager as 'unknown'. (bsc#983344)
Add taskomatic job to clean up minion actions.
Replace ZypperEvent with default beacon event.
Enable minions to be worked with SSM only on available features.
Use the IP address when doing ssh push via proxy. (bsc#940927)
Don't allow URLs that only differ on the authorization token. (bsc#976184)
Fix typo in Systems column. (bsc#983916)
Salt HW reg: Ignore virtual SCSI devices. (bsc#962588)

spacewalk-search:

Round CPU MHz number correctly to a long value. (bsc#979745)

spacewalk-setup:

Change path to Oracle LD configuration file.

spacewalk-web:

Recompute window dimensions when content changes. (bsc#971559)
Fix aside column height computation. (bsc#969834)

susemanager:

Allow migration from external Oracle DB to local PostgreSQL DB. (bsc#987795)
Make sure migration with external database works for DB names other than susemanager. (bsc#987870)
Create nCoW subvolume for /var/cache/rhn on btrfs. (bsc#987614)
Use performance optimized database configuration also for migration from Oracle to PostgreSQL. (bsc#987550)
Check for uppercase characters in hostname. (bsc#980482)
Add support for migrating SUMA 2.1 to SUMA 3 with external Oracle DB.
Forbid more special characters for database and certificate passwords. (bsc#983295)
Do not create swapfile when root file system is on btrfs. (bsc#977804)

susemanager-docs_en:

Fix link from Best Practices to Advanced Topics (proxy configuration). (bsc#988573)
Advanced Topics Guide: Improve proxy documentation. (bsc#982373)
Fix Proxy port number. (bsc#981378)

susemanager-schema:

Add missing power_management feature for bootstrap_entitlement systems.
Fix HW Refresh duplicate insert. (bsc#971622)
Add taskomatic job to clean up minion actions.
Provide separate migration scripts for Oracle.
Remove duplicates from rhnChannelContentSource. (bsc#976184)

susemanager-sls:

Update trust store when multiple certificates in one file are available on SLE11.
Update CA certificates only when they have changed.
Assume no pillar data if the yml file for the minion does not exist. (bsc#980354)
Add distributable pkgset beacon for RPM database notifications.

susemanager-sync-data:

Support SLES 12 LTSS. (bsc#979288)
Support SP Migration for OES 2015 to 2015 SP1.
Add requires to spacewalk-java-lib with OES support.
Add support for OES 2015 and OES 2015 SP1. (bsc#934560)

Patch 1214: salt

This update for salt fixes the following issues:

Fix broken inspector. (bsc#989798)
lvm.vg_present does not recognize PV with certain LVM filter settings. (bsc#988506)
pkg.list_products on "registerrelease" and "productline" returns boolean.False if empty. (bsc#989193)
Fixed behavior for SUSE OS grains. (bsc#970669)
Salt os_family does not detect SLES for SAP. (bsc#983017)
Move log message from INFO to DEBUG. (bsc#985661)
Fix salt --summary to count not responding minions correctly. (bsc#972311)
Fix memory leak on custom execution module scheduled jobs. (bsc#983512)
Fix groupadd module for sles11 systems. (bsc#978150)
Fix pkgrepo.managed gpgkey argument doesn't work. (bsc#979448)
Package checksum validation for zypper pkg.download.
Check if a job has executed and returned successfully.

Patch 986: SUSE Manager Server 3.0

This update fixes the following issues:

salt:

Remove option -f from startproc. (bsc#975733)
Changed Zypper's plugin. Added Unit test and related to that data. (bsc#980313)
Zypper plugin: Alter the generated event name on package set change.
Salt-proxy .service file created. (bsc#975306)
Prevent salt-proxy test.ping crash. (bsc#975303)
Fix shared directories ownership issues.
Add Zypper plugin to generate an event, once Zypper is used outside the Salt infrastructure demand. (bsc#971372)
Restore boolean values from the repo configuration.
Fix priority attribute. (bsc#978833)
Unblock-Zypper. (bsc#976148)
Modify-environment. (bsc#971372)
Prevent crash if pygit2 package is requesting re-compilation.
Align OS grains from older SLES with current one. (bsc#975757)
Bugfix: salt-key crashes if tries to generate keys to the directory w/o write access. (bsc#969320)

spacecmd:

Make spacecmd createRepo compatible with SUSE Manager 2.1 API. (bsc#977264)

spacewalk-backend:

Spacewalk-repo-sync - Improved date handling. (bsc#975161)
Better error message for system that is already registered as minion.
Only trigger virtualization notification on server save when the virtualization data is not falsy. (bsc#975120)
Fix GPG bad signature detection and improve error messages. (bsc#979313)
Send and save machine_id on traditional registration.
Vendor channels may have no repo assigned. (bsc#977781)
Do not crash now that multiple urls are passed. (bsc#970951)
Add machine info capability.

spacewalk-branding:

Add missing label definition for task.status.gatherer and task.status.matcher.

spacewalk-client-tools:

Send and save machine_id on traditional registration.
Send machine info only if server has machine info capability.

spacewalk-java:

Fix NoSuchFileException at setup time when there are no orgs yet.
Add details to history event.
Only require lifecycle entitlements for systems with a SUSE base product, adjust test.
mgr-sync: Use bulk channel reposync.
Enhance list of channel families for SUSE Manager Server.
Reactivate traditional server as minion on registration.
taskomaticApi: Schedule bulk reposyncs in bulk.
Show machine_id in the system->hardware tab.
Change missing machine_id UI warning message.
Make message handling thread pool size configurable.
Support for concurrent handling of checkin events.
Add variable to make cobbler sync optional.
Add Virtualization Groups to the input JSON data for the matcher.
Backward synchronization for cobbler kernel options during CobblerSyncTask.
Support for multithreaded message handling.
BugFix: Redirect migration with no Org to the first step. (bsc#969529)
Trigger errata cache job on changed channel assignments.
Under high load, the service wrapper may incorrectly interpret the inability to get a response in time from taskomatic and kill it. (bsc#962253)
Make cobbler commands work from taskomatik.
Don't modify request map when rendering alphabar, since it may fail depending on the implementation of ServletRequest. (bsc#978253)
Require refresh channels before pkg states. (bsc#975424)
Manager-3.0: Reschedule failed actions. (bsc#971622)
Exit if there are exceptions on startup to let tanuki restart taskomatic.
BugFix: Keep trace of the parent channel selected during 'Create Channel'. (bsc#967865)
Remote commands: Filter minions by permissions and not just by org. (bsc#978050)
ProductSyncManager: when scheduling reposyncs, use bulk mode through TaskomaticApi. (bsc#961002)
Call cobbler sync after cobbler command is finished. (bsc#966890)
Use pillar and static states to install/remove packages. (bsc#975424)
Faster event processing.
Determine the action status more correctly.
Fix error msg if /srv/susemanager/salt/custom does not exist. (bsc#978182)
Recreate upgrade paths on every refresh. (bsc#978166)
Prevent non org-admin user accept/reject/delete a minion. (bsc#979686)
Regenerate salt files. (bsc#974302)
Log permissions problems on channel access while SP migration. (bsc#970223)
Support SLE-POS 11 SP3 as addon for SLES 11 SP4. (bsc#976194)
Delete salt key when system is deleted. (bsc#971606)
Improve the output of remote command actions.
No package list refresh after channel assignment change.
Force a package list refresh after the onboarding.
More "info" level logging about action executors.
Log out the duration of package profile updates.
Execute package profile update as a state.apply. (bsc#973365)
Adjust autoinst file error detecting heuristics to the newer format. (bsc#974119)
Use queue=true for all calls to state.apply. (bsc#980556)
Make postgresql a weak systemd dependency.
Filter osad from the activation key extra packages. (bsc#975135)
Ensure SCC data files are saved on disk as tomcat/root with 644 permissions.
Bugfix: Add management product ids to servers without products.
Double the backslashes when reading the config files from java. (bsc#958923)
Fix setting cpu flags on hw refresh. (bsc#975354)

spacewalk-utils:

taskotop: A utility to monitor what Taskomatic is doing.

spacewalk-web:

Disable action buttons to add/reject/delete minions if user is non org-admin.
Handle and show error message when session expires in remote-command page. (bsc#974891)
Enable Run button in remote-command page only if a preview exists.
Show both Preview and Run buttons to improve usability of remote command feature. (bsc#974288)

susemanager:

Fix help output for mgr-setup; no longer migration from RHN. (bsc#975746)
For SLES11 SP2 and lower we do not support salt. (bsc#978788)
mgr-sync: Use bulk channel reposync. (bsc#961002)
Show optional channels in mgr-sync add channel and add an option to hide optional channels. (bsc#977579)
Add more packages to bootstrap repo. (bsc#971237)

susemanager-docs_en:

Update text and image files: bsc#979491, bsc#977280, bsc#975889.

susemanager-schema:

Move machine_id from suseMinionInfo to rhnServer table.
Fix removing nonlinux entitlement during migration.
Fix migrating and cleanup system types during migration. (bsc#977465)
Enable ftr_package_refresh for minions.

susemanager-sls:

Require refresh channels before pkg states. (bsc#975424)
Use pillar and static states to install/remove packages. (bsc#975424)

susemanager-sync-data:

Support SUSE Enterprise Storage 3. (bsc#966441)
Support SLE-Module-Certifications12. (bsc#976203)
Support SLE-POS 11 SP3 as addon for SLES 11 SP4. (bsc#976194)
Handle product class changes for SUSE Manager Server.

susemanager-tftpsync:

Rename change_tftpd_proxies.py to sync_post_tftpd_proxies.py and change trigger type. (bsc#966890)

Patch 984: SUSE Manager Server, Proxy and Client Tools

This update fixes the following issues for the SUSE Manager Server 3.0 and Client Tools:

zypp-plugin-spacewalk:

Fix failover for multiple URLs per repo. (bsc#964932)
The following issues for SUSE Manager Proxy 3.0 and Client Tools have been fixed:

cobbler:

Remove grubby-compat because perl-Bootloader gets dropped.
Disabling 'get-loaders' command and 'check' fixed. (bsc#973418)
Add logrotate file for cobbler. (bsc#976826)
Additionally the following issues for the SUSE Linux Enterprise 12 Clienttools have been fixed:

salt:

Remove option -f from startproc. (bsc#975733)
Changed Zypper's plugin. Added Unit test and related to that data. (bsc#980313)
Zypper plugin: alter the generated event name on package set change.
Fix file ownership on master keys and cache directories during upgrade. (handles upgrading from salt 2014, where the daemon ran as root, to 2015 where it runs as the salt user, bsc#979676)
Salt-proxy .service file created. (bsc#975306)
Prevent salt-proxy test.ping crash. (bsc#975303)
Fix shared directories ownership issues.
Add Zypper plugin to generate an event, once Zypper is used outside the Salt infrastructure demand. (bsc#971372)
Restore boolean values from the repo configuration
Fix priority attribute (bsc#978833)
Unblock-Zypper. (bsc#976148)
Modify-environment. (bsc#971372)
Prevent crash if pygit2 package is requesting re-compilation.
Align OS grains from older SLES with current one. (bsc#975757)
Bugfix: salt-key crashes if tries to generate keys to the directory w/o write access. (bsc#969320)

spacecmd:

Make spacecmd createRepo compatible with SUSE Manager 2.1 API. (bsc#977264)

spacewalk-backend:

Better error message for system that is already registered as minion.
Fix GPG bad signature detection and improve error messages. (bsc#979313)
Send and save machine_id on traditional registration.
Add machine info capability

spacewalk-client-tools:

Send and save machine_id on traditional registration.
Send machine info only if server has machine info capability.

Patch 822: salt

This update for salt contains the following:

Fix file ownership on master keys and cache directories during upgrade (handles upgrading from salt 2014, where the daemon ran as root, to 2015 where it runs as the salt user, bsc#979676).

New features since SUSE Manager Server 2.1

Spacewalk 2.4

SUSE Manager 3 Server is based on Spacewalk 2.4 with many new features added by SUSE.

New documentation

The SUSE Manager 3 documentation was rewritten from scratch and is not derived from the upstream Spacewalk documentation any more.

SUSE Manager 3 comes with four manuals

Getting Started
Covering the initial steps until a first client registrations.
Best Practices
Collection of best practices to adapt SUSE Manager to your needs.
Advanced Topics
Documenting specific environments like SUSE Manager on z Systems or scaling with SUSE Manager Proxy.
Reference Manual
Explaining the web interface. This is also cross-referenced from the SUSE Manager Server UI.

All manuals will see regular updates and will be available online at www.suse.com.

Subscription Matching

SUSE Manager 3 Server removed all entitlement counting code and instead ships with subscription matching abilities. This is implemented in two parts:

a subscription matcher
a virtual host gatherer

The subscription matcher uses the subscription information from SUSE Customer Center and automatically matches those to known hosts.

A pre-requirement to match subscriptions to systems is to have complete information about which virtual system runs on which virtual host. See topology awareness below on how to have SUSE Manager 3 Server gather this information.

The result is stored in /var/lib/spacewalk/subscription-matcher as CSV files. A web UI will be added later.

See the SUSE Manager Reference Manual for further details about subscription matching.

Topology awareness

The tool virtual-host-gatherer is used to collect data about virtual machines running on virtual hosts.

This creates a topology mesh used by the subscription matcher.

See the SUSE Manager Reference Manual for further details about virtual-host-gatherer

Configuration management

Configuration management is about to see the biggest impact when moving from SUSE Manager 2.1 Server to SUSE Manager 3 Server as it changes from an imperative to a declarative model.

Instead of "install package X at this time", it's now "ensure package X is installed from this time on".

SUSE Manager 3 Server uses Salt from SaltStack Inc. as the client-side agent.

See the SaltStack walk-through for a quick introduction to Salt.

The traditional client stack (aka rhnsd) is still fully supported but deprecated. You do not need to make any changes to existing clients when moving from SUSE Manager 2.1 Server to SUSE Manager 3 Server.

Salt integration

SUSE Manager 3 Server comes with a preconfigured salt-master based on the official 2015.8.7 release.

Any system able to run a salt-minion can be connected to SUSE Manager 3 Server as a managed client.

Initially only SLES 11 SP4, SLES 12 GA, and SLES 12 SP1 clients are supported.

Salt vs. Traditional clients

Salt API support

SUSE Manager 3 Server provides and supports the Salt API as-is. This API will follow upstream Salt and might change at any time as Salt gets updated.

Package downloads changed

Package downloads are now using a new implementation which should have far less overhead for the SUSE Manager Server.

Package downloads itself will not be faster, but should scale better. Feedback welcome !

Monitoring dropped

The monitoring component of SUSE Manager Server has been dropped. Instead a lightweight integration with Icinga is planned.

A fully supported Icinga package for SLES 12 is available via the SUSE Manager Tools channel.

No support for Oracle database

SUSE Manager 3 Server does not initally support Oracle as a database backend.

Existing SUSE Manager 2.1 Server deployments with Oracle should be migrated to PostgreSQL.

PostgreSQL has similar functionality and performance characteristics as Oracle but uses dramatically fewer resources.

Going forward, we will focus on PostgreSQL for all scalability and performance improvements.

Extension for SLES 12 SP2

SUSE Manager is no longer an appliance but now an extension on top of SLES 12 SP2 x86_64 or s390x and available via SUSE Customer Center

This means you can set up the base operating system according to your needs and requirements. SUSE Manager 3 will add all required packages automatically during installation.

All storage setup (esp. for /var/lib/pgsql and /var/spacewalk) should be done before installation of SUSE Manager 3 Server.

Other changes since 2.1

supportconfig confidentiality disclaimer
When handling Service Requests, supporters and engineers may ask for the output of the supportconfig tool from the SUSE Manager Server or clients.
The standard disclaimer applies:
```
  Detailed system information and logs are collected and organized in a
  manner that helps reduce service request resolution times.
  Private system information can be disclosed when using this tool.
  
  If this is a concern, please prune private data from the log files.
  
  Several startup options are available to exclude more sensitive
  information. Supportconfig data is used only for diagnostic purposes
  and is considered confidential information.
```
In the SUSE Manager Server's case, please be aware that supportconfig's output will contain information about clients as well.
In particular, debug data for the Subscription Matching feature contain a list of the registered clients, their installed product and some minimal hardware information (CPU socket count). It also contains a copy of subscription data available from the SUSE Customer Center.
If this is a concern, please prune data in the subscription-matcher directory in the spacewalk-debug tarball.

Transparent huge pages must not be enabled
PostgreSQL might slow down if transparent huge pages are enabled.
See here for background information and this blog post on how to disable transparent huge pages.
rhn-entitlement-report dropped
The entitlement handling is replaced by the subscription matcher, which much better reflects business relations.
osa-dispatcher notify_threshold changed the default value
In SUSE Manager 2.1 the default was unlimited while in SUSE Manager 3 the default is 100.
FreeIPA disabled.
SUSE Manager 2.1 inherited a FreeIPA connector which was dropped for SUSE Manager 3 Server.
Custom software channels can no longer have names or labels that are used by SUSE.
See list of reserved names and list of reserved labels
Link behavior, links to manager host will open in same tab, links to foreign host will open in new tab.
Reference
postgrestcl dropped
removes spacewalk-report audit-users, spacewalk-report audit-servers, and spacewalk-report audit-server-groups
read-only user (from upstream)
Creation of first (admin) user and first organisation is now in one single web page
- this immediately triggers a refresh of the product database.

Upgrade of Inter Server Sync setups

In ISS (Inter Server Sync) setups, upgrade all slaves to 3 before upgrading the master.

Supportability of embedded software components

All software components embedded into SUSE Manager, like Cobbler for PXE booting, are only supported in the context of SUSE Manager. Stand-alone usage is not supported.

Red Hat Channels

Managing Red Hat clients requires availability of appropriate Red Hat packages. These are not available through the SUSE Customer Center (SCC) but must be provided by other means, e.g. from a retired Red Hat Satellite installation.

Support for SLES 10 based systems

The SUSE Manager client stack for SLES10 based systems is identical to the one used on SLES11 based systems. SLES 10 systems managed by SUSE Manager will have the ZENworks Managemen Daemon (ZMD) and the rug command line tool removed.

Salt is not available for SLES 10.

SUSE Manager Proxy versions

SUSE Manager 3 Server can work with version 2.1 of SUSE Manager Proxy.

spacewalk-utils

spacewalk-utils, a packaged set of command line tools, continues to be L1* supported only - with some exceptions. Any of these commands needs expertise and can break your system. However, we consider these tools valuable enough to be included, but not fully supported.

* L1 (Problem determination, which means technical support designed to provide compatibility information, usage support, on-going maintenance, information gathering and basic troubleshooting using available documentation.)

The following tools of spacewalk-utils are fully supported:

spacewalk-clone-by-date
spacewalk-sync-setup
spacewalk-manage-channel-lifecycle

Known bugs

System Set Manager (SSM) is not yet supported for Salt clients.
Service Pack Migration is not yet supported for Salt clients.
Audit log is partially incomplete and not covering all web actions.

Upstream changes since SUSE Manager 2.1

Note: Changes from the upstream project are listed here as-is. There's no guarantee that all of them are actually available in SUSE Manager 3 Server.

Spacewalk 2.4

Spacewalk now supported on Fedora 22
Spacewalk supports Fedora 22 clients
- New package dnf-plugin-spacewalk
Organization-specific configuration moved to Organization Admin menu
- Satellite admins can allow/disallow Organization admins to manage this configuration
Passwords are not sent to user in clear text anymore
- https://fedorahosted.org/spacewalk/wiki/Features/ResetPassword
Continued UI polish and improvements, including standardizing on Patternfly
Plenty of small enhancements and fixes
- Added support for Catalan and Portuguese translations from Zanata project
- Fedora and RHEL/CentOS 7 Cobbler provisioning fixes
- Removed checksum type None for software channels
- Fixed system.listUngroupedSystems API call
- Repository sync page improved to show more details about last sync
- Repository sync option for syncing latest packages only added
- Osa ping API calls added
- Added compliancy indicator icon on Scap results list page
New API calls:
- org.isErrataEmailNotifsForOrg
- org.isOrgConfigManagedByOrgAdmin
- org.setErrataEmailNotifsForOrg
- org.setOrgConfigManagedByOrgAdmin
- system.getOsaPing
- system.sendOsaPing

Spacewalk 2.3

Spacewalk now supported on RHEL7/CentOS7/Fedora21
Spacewalk supports Fedora21 clients
Improved Proxy caching of yum meta-data with addition of If-Modified-Since header support
Continued UI polish and improvements, including standardizing on Patternfly
Improved and simplified codebase by:
- Removing all Monitoring-related code
- Removing all Solaris support
- Completing the port of the web-UI from Perl to Java
- Cleaning up and removing large chunks of orphaned code
Plenty of small enhancements and fixes
- spacecmd enhancements:
  - softwarechannel_errata
  - configchannel_sync
  - softwarechannel_sync
  - softwarechannel_removesyncschedule
- spacewalk-clone-by-date enhancements:
  - added a --dry-run option
  - improved dependency resolution (see 1123468)
  - removed asynchronous background cloning - it conflicts (badly) with dependency resolution, see 1207846
- spacewalk-reports additions:
  - config-files
  - config-files-latest
  - additional data to scap-scan report
- Added support for xz-compressed repositories
- Added Korea to list of timezones
- aarch64 support
New API calls:
- activationkey.clone
- configchannel.deployAllSystems
- kickstart.listKickstartableTreeChannels
- kickstart.profile.getAvailableRepositories
- kickstart.profile.getRepositories
- kickstart.profile.getVirtualizationType
- kickstart.profile.setRepositories
- kickstart.profile.setVirtualizationType
- system.unentitle
- user.setErrataNotifications
Removed API calls:
- proxy.createMonitoringScout
- satellite.isMonitoringEnabled
- satellite.isMonitoringEnabledBySystemId

Spacewalk 2.2

Spacewalk supports RHEL 7 / CentOS 7 clients
Read-only API user
- support for user able to retrieve data via API without the rights to make changes (e.g. for auditing purposes)
Action chaining
- support for defining chain of actions executed on clients
- http://wiki.novell.com/index.php/SUSE_Manager/ActionChaining
- Video: http://turing.suse.de/%7Esmoioli/Action%20Chaining%20screencast.webm
Remote power management
- https://fedorahosted.org/spacewalk/wiki/power-management
Support for FIPS 140-2
- Ability to run on a FIPS enabled operating system (client and server)
- https://fedorahosted.org/spacewalk/wiki/Spacewalk-FIPS
Spacewalk Proxy content pre-caching
- https://fedorahosted.org/spacewalk/wiki/proxy-precache
Plenty of small enhancements and fixes
New API calls:
- actionchain.addConfigurationDeployment
- actionchain.addPackageInstall
- actionchain.addPackageRemoval
- actionchain.addPackageUpgrade
- actionchain.addPackageVerify
- actionchain.addScriptRun
- actionchain.addSystemReboot
- actionchain.createChain
- actionchain.deleteChain
- actionchain.listChainActions
- actionchain.listChains
- actionchain.removeAction
- actionchain.renameChain
- actionchain.scheduleChain
- channel.software.syncRepo
- kickstart.profile.software.getSoftwareDetails
- kickstart.profile.software.setSoftwareDetails
- systemgroup.listSystemsMinimal
- system.listSystemEvents
- system.provisioning.snapshot.rollbackToSnapshot
- system.provisioning.snapshot.rollbackToTag
- system.scheduleCertificateUpdate
- system.schedulePackageInstall
- user.external.createExternalGroupToRoleMap
- user.external.createExternalGroupToSystemGroupMap
- user.external.deleteExternalGroupToRoleMap
- user.external.deleteExternalGroupToSystemGroupMap
- user.external.getDefaultOrg
- user.external.getExternalGroupToRoleMap
- user.external.getExternalGroupToSystemGroupMap
- user.external.getKeepTemporaryRoles
- user.external.getUseOrgUnit
- user.external.listExternalGroupToRoleMaps
- user.external.listExternalGroupToSystemGroupMaps
- user.external.setDefaultOrg
- user.external.setExternalGroupRoles
- user.external.setExternalGroupSystemGroups
- user.external.setKeepTemporaryRoles
- user.external.setUseOrgUnit
- user.getCreateDefaultSystemGroup
- user.setCreateDefaultSystemGroup
- user.setReadOnly

Providing feedback to our products

In case of encountering a bug please report it through your support contact.

Documentation and other information

http://www.suse.com/products/suse-manager/technical-information/contains additional or updated documentation for SUSE Manager Server 2.1.

These Release Notes are available online at http://www.suse.com/documentation/releasenotes. Further information about SUSE Manager is available at http://wiki.novell.com/index.php/SUSE_Manager

Visit http://www.suse.com for the latest Linux product news from SUSE and http://www.suse.com/download-linux/source-code.html for additional information on the source code of SUSE Linux Enterprise products.

Legal Notices

  SUSE Linux GmbH 
  Maxfeldstr. 5 
  D-90409 Nürnberg 
  Tel: +49 (0)911 740 53 - 0 
  Email: feedback@suse.com 
  Registrierung/Registration Number: HRB 21284 AG Nürnberg 
  Geschäftsführer/Managing Director: Jeff Hawn, Jennifer Guild, Felix Imendörffer 
  Steuernummer/Sales Tax ID: DE 192 167 791 
  Erfüllungsort/Legal Venue: Nürnberg

SUSE makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to revise this publication and to make changes to its content, at any time, without the obligation to notify any person or entity of such revisions or changes.

Further, SUSE makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, SUSE reserves the right to make changes to any and all parts of SUSE software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classifications to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical/biological weaponry end uses. Please refer to http://www.novell.com/company/policies/trade_services/ for more information on exporting SUSE software. SUSE assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2016 SUSE LLC. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

SUSE has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the U.S. and other countries.

For SUSE trademarks, see SUSE Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html). All third-party trademarks are the property of their respective owners.

Colophon

Thank you for using SUSE Manager Server in your business.

Your SUSE Manager Server Team.