=============
Release Notes
=============

* :ref:`10.0.7_release_notes_label`
* :ref:`10.0.6_release_notes_label`
* :ref:`10.0.5_release_notes_label`
* :ref:`10.0.4_release_notes_label`
* :ref:`10.0.3_release_notes_label`
* :ref:`10.0.1_release_notes_label`
* :ref:`10.0.0_release_notes_label`
* :ref:`9.1_release_notes_label`
* :ref:`9.0_release_notes_label`
* :ref:`8.2_release_notes_label`
* :ref:`8.1_release_notes_label`
* :ref:`8.0_release_notes_label`
* :ref:`7.0_release_notes_label`

.. _10.0.7_release_notes_label:

Changes in 10.0.7
-----------------

ownCloud Server 10.0.7 is a hotfix follow-up release that takes care of an `issue regarding OAuth authentication <https://github.com/owncloud/core/issues/30157>`_.

Please consider the ownCloud Server 10.0.5 release notes.

Known issues
~~~~~~~~~~~~

- When using application passwords, `log entries related to "Login Failed" will appear <https://github.com/owncloud/core/issues/30157>`_ and can be ignored. For people using fail2ban or other account locking tools based on log parsing, please apply `this patch <https://github.com/owncloud/core/commit/50c78a4bf4c2ab4194f40111b8a34b7e9cc17a14.patch>`_ with :code:`patch -p1 < 50c78a4bf4c2ab4194f40111b8a34b7e9cc17a14.patch` (`original pull request here <https://github.com/owncloud/core/pull/30591>`_).

.. _10.0.6_release_notes_label:

Changes in 10.0.6
-----------------

ownCloud Server 10.0.6 is a hotfix follow-up release that takes care of an issue during the build process (https://github.com/owncloud/core/pull/30265). Please consider the ownCloud Server 10.0.5 release notes.

.. _10.0.5_release_notes_label:

Changes in 10.0.5
-----------------

Dear ownCloud administrator, please find below the changes and known issues in ownCloud Server 10.0.5 that need your attention. You can also read `the full ownCloud Server changelog`_ for further details on what has changed.

Technology preview for PHP 7.2 support
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ownCloud catches up with new web technologies. This has mainly been introduced for the open-source community to test and give feedback. PHP 7.2 is not yet supported nor recommended for production scenarios. ownCloud is going to fully support PHP 7.2 with the next major release.

php-intl now is a hard requirement
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please make sure to have the PHP extension installed before upgrading.

Changed: Only allow a single active theme app
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The theming behavior has been changed so that only a single theme can be active concurrently. This change ensures that themes can not interfere in any way (e.g., override default theming in an arbitrary order). Please make sure to have the desired theme enabled after upgrading.

Removed old Dropbox external storage backend (Dropbox API v1)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Please switch to the new *External Storage: Dropbox* app (https://marketplace.owncloud.com/apps/files_external_dropbox) with Dropbox API v2 support to continue providing Dropbox external storages to your users.

Fixed: Only set CORS headers on WebDAV endpoint when Origin header is specified
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ownCloud Server 10.0.4 known issue is resolved.

Fixes and improvements for the Mail Template Editor
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
- Known issues are resolved: Mail Template Editor works again, got support for app themes and additional templates were added for customization.
- Mail Template Editor is still bundled with ownCloud Server but will soon be released as a separate app to ownCloud Marketplace.
- Changelog: https://github.com/owncloud/templateeditor/blob/release/0.2.0/CHANGELOG.md

Known issues
~~~~~~~~~~~~

- When using application passwords, `log entries related to "Login Failed" will appear <https://github.com/owncloud/core/issues/30157>`_, please upgrade to 10.0.7 and check the fix mentionned in its release notes.

.. _10.0.4_release_notes_label:

Changes in 10.0.4
-----------------

Dear ownCloud administrator, please find below the changes and known issues in ownCloud Server 10.0.4 that need your attention. You can also read `the full ownCloud Server 10.0.4 changelog`_ for further details on what has changed.

More granular sharing restrictions
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The "*Restrict users to only share with users in their groups*" option, in the Sharing settings, restricts users to only share with groups which they are a member of, while simultaneously prohibiting sharing with single users that do not belong to any of the users' groups.

To make this more granular, we split this option into two parts and added "*Restrict users to only share with groups they are member of*", which differentiates between users and groups. Doing so makes it possible to restrict users from sharing with all users of an installation, limiting them to only being able to share with groups which they are a member of, and vice versa.

Configurable solution for indistinguishable user display names
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The ownCloud sharing dialog displays users according to their display name. As users can choose their display name in self-service (which can be disabled in `config.php`) and display names are not unique, it is possible that a user can't distinguish sharing results. To cover this case the displayed user identifiers are now configurable. In the Sharing settings administrators can now configure the display of either mail addresses or user ids.

Added "occ files:scan" repair mode to repair filecache inconsistencies
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

We recommend to use this command when directed to do so in the upgrade process.
Please refer to `the occ command's files:scan --repair documentation`_ for more information.

Detailed mode for "occ security:routes"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Administrators can use the output of this command when using a network firewall, to check the appropriateness of configured rules or to get assistance when setting up.

Added mode of operations to differentiate between single-instance or clustered setup
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

As ownCloud needs to behave differently when operating in a clustered setup versus a single instance setup, the new `config.php` option ``operation.mode`` has been added. 
It can take one of two values: ``single-instance`` and ``clustered-instance``. 
For example: ``'operation.mode' => 'clustered-instance',``.

Currently the Market App (ownCloud Marketplace integration) does not support clustered setups and can do harm when used for installing or updating apps. 
The new config setting prevents this and other actions that are undesired in cluster mode.

**When operating in a clustered setup, it is mandatory to set this option.**
Please check `the config_sample_php_parameters documentation`_ for more information.

Added occ dav:cleanup-chunks command to clean up expired uploads
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When file uploads are interrupted for any reason, already uploaded file parts (chunks) remain in the underlying storage so that the file upload can resume in a future upload attempt.
However, resuming an upload is only possible until the partial upload is expired and deleted, respectively. 

To clean up chunks (expire and delete) originating from unfinished uploads, administrators can use this newly introduced command. 
The default expiry time is two days, but it can be specified as a parameter to the command.
**It is recommended to configure CRON to execute this background job regularly**. 

It is not included in the regular ownCloud background jobs so that the administrators have more flexibility in scheduling it. 
Please check `the background jobs configuration documentation`_ for more information.

Administrators can now exclude files from integrity check in config.php
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When administrators did intentional changes to the ownCloud code they now have the ability to exclude certain files from the integrity checker.
Please check "config.sample.php" for the usage of ``'integrity.excluded.files'``.

Modification time value of files is now 64 bits long
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When upgrading to 10.0.4 migrations may increase update duration dependent on number of files.

Updated minimum supported browser versions
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Users with outdated browsers might get warnings. 
See `the list of supported browser versions`_.

Known issues
~~~~~~~~~~~~

- When using application passwords, `log entries related to "Login Failed" will appear <https://github.com/owncloud/core/issues/30157>`_, please upgrade to 10.0.7 and check the fix mentioned in its release notes.

10.0.3 resolved known issues
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

- `SFTP external storages with key pair mode work again <https://github.com/owncloud/core/issues/29156>`_
- `Added support for MariaDB 10.2.7+ <https://github.com/owncloud/core/issues/29240>`_
- `Encryption panel in admin settings fixed to properly detect current mode after upgrade to ownCloud 10 <https://github.com/owncloud/core/issues/29049>`_
- `Removed double quotes from boolean values in status.php output <https://github.com/owncloud/core/pull/29261>`_

Known issues
~~~~~~~~~~~~

- Impersonate app 0.1.1 does not work with ownCloud Server 10.0.4. Please update to `Impersonate 0.1.2 <https://marketplace.owncloud.com/apps/impersonate>`_ to be able to use the feature with ownCloud 10.0.4.
- `Mounting ownCloud storage via davfs does not work <https://github.com/owncloud/core/issues/29793>`_

.. _10.0.3_release_notes_label:

Changes in 10.0.3
-----------------

Dear ownCloud administrator, please find below the changes and known issues of ownCloud Server 10.0.3 that need your attention:

**The full ownCloud Server 10.0.3 changelog can be found here: https://github.com/owncloud/core/blob/stable10/CHANGELOG.md**

* It is now possible to directly upgrade from 8.2.11 to 10.0.3 in a single upgrade process.
* Added occ command to list routes which can help administrators setting up network firewall rules.
* 'occ upgrade' is now verbose by default. Administrators may need to adjust scripts for automated setup/upgrade procedures that rely on 'occ upgrade' outputs.

* Reenabled medial search by default
    * Enables partial search in sharing dialog autocompletion (e.g. a user wants to share with the user "Peter": Entering "pe" will find the user, entering "ter" will only find the user if the option is enabled)
    * New default is set to enabled as there is no performance impact anymore due to the introduction of the user account table in ownCloud Server 10.0.1.
    * Please check the setting. You need to disable it explicitly if the functionality is undesired.

* All database columns that use the fileid have been changed to bigint (64-bits). For large instances it is therefore highly recommended to upgrade in order to avoid reaching limits.

* Upgrade and Market app information
    * Removed "appstoreenabled" setting from config.php. If you want to disable the app store / Marketplace integration, please disable the Market app.
    * Added setting 'upgrade.automatic-app-update' to config.php to disable automatic app updates with 'occ upgrade' when Market app is enabled
    * On upgrade from OC < 10 the Market app won't be enabled if "appstoreenabled"  was false in config.php.

* Clustering: Better support of read only config file and apps folder
* Default minimum desktop client version in config.php is now 2.2.4.

**Known issues**

* Added quotes in boolean result values of yourdomain/status.php output
* Setting up SFTP external storages with keypairs does not work. https://github.com/owncloud/core/issues/28669
* If you have storage encryption enabled, the web UI for encryption will ask again what mode you want to operate with even if you already had a mode selected before. The administrator must select the mode they had selected before. https://github.com/owncloud/core/issues/28985
* Uploading a folder in Chrome in a way that would overwrite an existing folder can randomly fail (race conditions). https://github.com/owncloud/core/issues/28844
* Federated shares can not be accepted in WebUI for SAML/Shibboleth users
* For **MariaDB users**: Currently, Doctrine has no support for the breaking changes introduced in MariaDB 10.2.7, and above. If you are on MariaDB 10.2.7 or above, and have encountered the message "1067 Invalid default value for 'lastmodified'", `please apply this patch`_ to Doctrine. We expect this bug to be fixed in ownCloud 10.0.4. For more information on the bug, `check out the related issue`_.
* When updating from ownCloud < 9.0 the CLI output may hang for some time (potentially up to 20 minutes for big instances) whilst sharing is updated. This can happen in a variety of places during the upgrade and is to be expected. Please be patient as the update is performed and the output will continue as normal.

.. _10.0.1_release_notes_label:

Changes in 10.0.1
-----------------

Hello ownCloud administrator, please read carefully to be prepared for updates and operations of your ownCloud setup.

* **A new update path:** ownCloud 10.0.1 contains migration logic to allow upgrading directly from 9.0 to 10.0.1.
* **Marketplace:** Please create an account for `the new marketplace`_. 
  Access to optional ownCloud extensions and enterprise apps will be provided by the marketplace from now on.
  Currently some apps are still shipped with the tarballs / packages and will be moved to the marketplace in the near future.
* **Apps:** *LDAP*, *gallery*, *activity*, *PDF viewer*, and *text editor* were moved to the marketplace.
* **Updates with marketplace:** During the upgrade, enabled apps are also updated by fetching new versions directly from the marketplace. If during an update, sources for some apps are missing, and the ownCloud instance has no access to the marketplace, the administrator needs to disable these apps or manually download and provide the apps before updating.
* **App updates:** Third party apps are not disabled anymore when upgrading.
* **Upgrade migration test:** The upgrade migration test has been removed; see :ref:`migration_test_label`. (Option ``--skip-migration-tests`` removed from update command).

.. note::
   The template editor app is not included in the 10.0.1 release due to technical reasons, but will be distributed via the marketplace. However, you can still :ref:`edit template files manually <using_email_templates_label>`. 

Settings
~~~~~~~~

* **Settings design:** Admin, personal pages, and app management are now merged together into a single "Settings" entry.
* **Disable users:** The ability to disable users in the user management panel has been added.
* **Password Policy:** Rules now apply not only to link passwords but also to user passwords.

Infrastructure
~~~~~~~~~~~~~~

* **Client:** You need to update to `the latest desktop client version`_.
* **Cron jobs:** The user account table has been reworked. As a result the Cron job for `syncing user backends`_, e.g., LDAP, needs to be configured.
* **Logfiles:** App logs, e.g., auditing and owncloud.log, can now be split, see: https://doc.owncloud.org/server/latest/admin_manual/configuration/server/config_sample_php_parameters.html#logging.

Known Issues
~~~~~~~~~~~~

Converting the Database Type doesn't work
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Converting a Database from e.g. ``SQLite`` to ``MySQL`` or ``PostgreSQL`` with the ``occ db:convert-type`` currently doesn't work. See https://github.com/owncloud/core/issues/27075 for more info.

Installing the LDAP user backend will trigger the installation twice 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

This causes an SQL error such as the following:

.. code-block:: console

   sudo -u www-data ./occ market:install user_ldap

   user_ldap: Installing new app ...
   user_ldap: An exception occurred while executing 'CREATE TABLE `ldap_user_mapping` (`ldap_dn` VARCHAR(255) DEFAULT '' NOT NULL, `owncloud_name` VARCHAR(255) DEFAULT '' NOT NULL, `directory_uuid` VARCHAR(255) DEFAULT '' NOT NULL, UNIQUE INDEX ldap_dn_users (`ldap_dn`), PRIMARY KEY(`owncloud_name`)) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_bin ENGINE = InnoDB ROW_FORMAT = compressed':

   SQLSTATE[42S01]: Base table or view already exists: 1050 Table 'ldap_user_mapping' already exists


This can be safely ignored. 
And the app can be used after enabling it. 
Please be aware that when upgrading an existing ownCloud installation that already has ``user_ldap`` this error will not occur.
It was fixed by https://github.com/owncloud/core/pull/27982.
However, this could happen for other apps as well that use ``database.xml``.
If it does please use the same workaround.

SAML authentication only works for users synced with ``occ user:sync``
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

We will re-enable SSO for LDAP users with an update of the app in the market after completing internal testing.

The web UI prevents uninstalling apps marked as shipped, e.g., ``user_ldap``
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

To uninstall, disable the app with occ and rm the app directory.

Moving files around in external storages outside of ownCloud will invalidate the metadata
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

All shares, comments, and tags on the moved files will be lost.

Existing LDAP users only show up in the user management page and the share dialog after being synced
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The account table introduced in ownCloud 10.0.0 significantly reduces LDAP communication overhead. 
Password checks are yet to be accounted for. 
LDAP user metadata in the account table will be updated when users log in or when the administrator runs ``occ user:sync "OCA\User_LDAP\User_Proxy"``.
We recommend :ref:`setting up a nightly Cron job <cron_job_label>` to keep metadata of users not actively logging in up to date.

Error pages will not use the configured theme but will instead fall back to the community default
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

.. _10.0.0_release_notes_label:

Changes in 10.0.0
-----------------

* PHP 7.1 support added (supported PHP versions are 5.6 and 7.0+)
* The upgrade migration test has been removed; see :ref:`migration_test_label`. (Option ``"--skip-migration-tests"`` removed from update command)
* Requires to use the latest desktop client version 2.3
* Third party apps are not disabled anymore when upgrading
* User account table has been reworked. CRON job for syncing with e.g. LDAP needs to be configured (see https://doc.owncloud.com/server/latest/admin_manual/configuration/server/occ_command.html#syncing-user-accounts)
* LDAP app is not released with ownCloud 10.0.0 and will be released on the marketplace after some more QA
* files_drop app is not shipped anymore as it's integrated with core now. Since migrations are not possible you will have to reconfigure your drop folders (in the 'Public Link' section of the sharing dialog of the respective folders).
* SAML/Shibboleth with device-specific app passwords: No migration possible; Users need to regenerate device-specific app passwords in the WebUI and enter those in their clients.
* For security reasons status.php can now be configured in config.php to not return server version information anymore ('version.hide'; default ‘false’). As clients still depend on version information this is not yet recommended. The default will change to 'true' with 10.0.2 once clients are ready.
* Order of owncloud.log entries changed a bit, please review any application (e.g. fail2ban rules) relying on this file
* External storages
    * FTP external storage moved to a separate app (https://marketplace.owncloud.com/apps/files_external_ftp)
    * "Local" storage type can now be disabled by sysadmin in config.php (to prevent users mounting the local file system)

Full changelog: https://github.com/owncloud/core/wiki/ownCloud-10.0-Features

.. _9.1_release_notes_label:

Changes in 9.1
--------------

**General**

* Background jobs (cron) can now run in parallel
* Update notifications in client via API - You can now be notified in your desktop client
  about available updates for core and apps. The notifications are made available via the
  notifications API.
* Multi-bucket support for primary objectstore integration
* Support for Internet Explorer below version 11 was dropped
* Symlinks pointing outside of the data directory are disallowed. Please use the :doc:`configuration/files/external_storage_configuration_gui`
  with the :doc:`configuration/files/external_storage/local` storage backend instead.
* Removed ``dav:migrate-calendars`` and ``dav:migrate-addressbooks`` commands for ``occ``.
  Users planning to upgrade from ownCloud 9.0 or below to ownCloud 9.1 needs to make sure that their
  calendars and address books are correctly migrated **before** continuing to upgrade to 9.1.

**Authentication**

* Pluggable authentication: plugin system that supports different authentication schemes
* Token-based authentication
* Ability to invalidate sessions
* List connected browsers/devices in the personal settings page. Allows the user to disconnect browsers/devices.
* Device-specific passwords/tokens, can be generated in the personal page and revoked
* Disable users and automatically revoke their sessions
* Detect disabled LDAP users or password changes and revoke their sessions
* Log in with email address
* Configuration option to enforce token-based login outside the web UI
* Two Factor authentication plug-in system
* OCC command added to (temporarily) disable/enable two-factor authentication for single users

.. note:: The current desktop and mobile client versions do not support two-factor yet, this
   will be added later. It is already possible to generate a device specific password and
   enter that in the current client versions.

**Files app**

* Ability to toggle displaying hidden files
* Remember sort order
* Permalinks for internal shares
* Visual cue when dragging in files app
* Autoscroll file list when dragging files
* Upload progress estimate

**Federated sharing**

* Ability to create federated shares with CRUDS permissions
* Resharing a federated share does not create a chain of shares any more but connects the
  share owner's server to the reshare recipient

**External storage**

* UTF-8 NFD encoding compatibility support for NFD file names stored directly on external
  storages (new mount option in external storage admin page)
* Direct links to the configuration pages for setting up a GDrive or Dropbox application for use with ownCloud
* Some performance and memory usage improvements for GDrive, stream download and chunk upload
* Performance and memory usage improvements for Dropbox with stream download
* GDrive library update provides exponential backoff which will reduce rate limit errors

**Shibboleth**

* The WebDAV endpoint was changed from ``/remote.php/webdav`` to ``/remote.php/dav``. You need to check your Apache configuration if you have exceptions or rules for WebDAV configured.

**Minor additions**

* Support for print style sheets
* Command line based update will now be suggested if the instance is bigger to avoid potential timeouts
* Web updater will be disabled if LDAP or shibboleth are installed
* DB/application update process now shows better progress information
* Added ``occ files:scan --unscanned`` to only scan folders that haven't yet been explored on external storages
* Chunk cache TTL can now be configured
* Added warning for wrongly configured database transactions, helps prevent "database is locked" issues
* Use a capped memory cache to reduce memory usage especially in background jobs and the file scanner
* Allow login by email
* Respect CLASS property in calendar events
* Allow addressbook export using VCFExportPlugin
* Birthdays are also generated based on shared addressbooks

**For developers**

* New DAV endpoint with a new chunking protocol aiming to solve many issues like timeouts (not used by clients yet)
* New webdav property for share permissions
* Background repair steps can be specified info.xml
* Background jobs (cron) can now be declared in info.xml
* Apps can now define repair steps to run at install/uninstall time
* Export contact images via Sabre DAV plugin
* Sabre DAV's browser plugin is available in debug mode to allow easier development around webdav

**Technical debt**

* PSR-4 autoloading forced for ``OC\`` and ``OCP\``, optional for ``OCA\`` docs at https://doc.owncloud.org/server/latest/developer_manual/app/classloader.html
* More cleanup of the sharing code (ongoing)

.. _9.0_release_notes_label:

Changes in 9.0
--------------

9.0 requires .ico files for favicons. This will change in 9.1, which will use .svg files. See `Changing favicon <https://doc.owncloud.org/server/latest/developer_manual/core/theming.html#changing-favicon>`_ in the Developer Manual.

Home folder rule is enforced in the user_ldap application in new ownCloud installations; see
:doc:`configuration/user/user_auth_ldap`. This affects ownCloud 8.0.10, 8.1.5 and 8.2.0 and up.

The Calendar and Contacts apps have been rewritten and the CalDAV and CardDAV backends of these
apps were merged into ownCloud core. During the upgrade existing Calendars and Addressbooks
are automatically migrated (except when using the ``IMAP user backend``). As a fallback
for failed upgrades, when using the ``IMAP user backend`` or as an option to test a migration
``dav:migrate-calendars`` and/or ``dav:migrate-addressbooks`` scripts are available
(**only in ownCloud 9.0**) via the ``occ`` command. See :doc:`configuration/server/occ_command`.

.. warning:: After upgrading to ownCloud 9.0 and **before** continuing to upgrade to 9.1 make sure
   that all of your and your users Calendars and Addressbooks are migrated correctly. Especially
   when using the ``IMAP user backend`` (other user backends might be also affected) you need to
   manually run the mentioned ``occ`` migration commands described above.

Updates on systems with large datasets will take longer, due to the addition of checksums to the
ownCloud database. See `<https://github.com/owncloud/core/issues/22747>`_.

Linux packages are available from our `official download repository <https://download.owncloud.org/download/repositories/stable/owncloud/>`_ .
New in 9.0: split packages. ``owncloud`` installs ownCloud plus dependencies, including Apache
and PHP. ``owncloud-files`` installs only ownCloud. This is useful for custom LAMP stacks, and
allows you to install your own LAMP apps and versions without packaging conflicts with ownCloud.
See :doc:`installation/linux_installation`.

New option for the ownCloud admin to enable or disable sharing on individual external mountpoints
(see :ref:`external_storage_mount_options_label`). Sharing on such mountpoints is disabled by default.

Enterprise 9.0
~~~~~~~~~~~~~~

owncloud-enterprise packages are no longer available for CentOS 6, RHEL6, 
Debian 7, or any version of Fedora. A new package, owncloud-enterprise-files, is available for all supported platforms, including the above. This new package comes without dependencies, and is installable on a larger number of platforms. System administrators must install their own LAMP stacks and databases. See https://owncloud.org/blog/time-to-upgrade-to-owncloud-9-0/

.. _8.2_release_notes_label:

Changes in 8.2
--------------

New location for Linux package repositories; ownCloud admins must manually 
change to the new repos. See :doc:`maintenance/upgrade`

PHP 5.6.11+ breaks the LDAP wizard with a 'Could not connect to LDAP' error. See https://github.com/owncloud/core/issues/20020. 

``filesystem_check_changes`` in ``config.php`` is set to 0 by default. This 
prevents unnecessary update checks and improves performance. If you are using 
external storage mounts such as NFS on a remote storage server, set this to 1 
so that ownCloud will detect remote file changes.

XSendFile support has been removed, so there is no longer support for `serving 
static files
<https://doc.owncloud.org/server/latest/admin_manual/configuration/files/
serving_static_files_configuration.html>`_ from your ownCloud server.

LDAP issue: 8.2 uses the ``memberof`` attribute by default. If this is not 
activated on your LDAP server your user groups will not be detected, and you 
will see this message in your ownCloud log: ``Error PHP Array to string 
conversion at /var/www/html/owncloud/lib/private/template/functions.php#36``. 
Fix this by disabling the ``memberof`` attribute on your ownCloud server with 
the ``occ`` command, like this example on Ubuntu Linux::

 sudo -u www-data php occ ldap:set-config "s01" useMemberOfToDetectMembership 0
 
Run ``sudo -u www-data php occ ldap:show-config`` to find the correct ``sNN`` 
value; if there is not one then use empty quotes, ``""``. (See 
:doc:`configuration/server/occ_command`.)

Users of the Linux Package need to update their repository setup as described
in this `blogpost <https://owncloud.org/blog/upgrading-to-owncloud-server-8-2/>`_.

.. _8.1_release_notes_label:

Changes in 8.1
--------------

Use APCu only if available in version 4.0.6 and higher. If you install an older version,
you will see a ``APCu below version 4.0.6 is installed, for stability and performance
reasons we recommend to update to a newer APCu version`` warning on your ownCloud admin page.

SMB external storage now based on ``php5-libsmbclient``, which must be downloaded 
from the ownCloud software repositories (`installation instructions 
<https://software.opensuse.org/download.html?project=isv%3AownCloud%3Acommunity% 
3A8.1&package=php5-libsmbclient>`_).
  
"Download from link" feature has been removed.

The ``.htaccess`` and ``index.html`` files in the ``data/`` directory are now 
updated after every update. If you make any modifications to these files they 
will be lost after updates.

The SabreDAV browser at ``/remote.php/webdav`` has been removed.

Using ownCloud without a ``trusted_domain`` configuration will not work anymore.

The logging format for failed logins has changed and considers now the proxy 
configuration in ``config.php``.

A default set of security and privacy HTTP headers have been added to the 
ownCloud ``.htaccess`` file, and ownCloud administrators may now customize which 
headers are sent.

More strict SSL certificate checking improves security but can result in
"cURL error 60: SSL certificate problem: unable to get local issuer certificate"
errors with certain broken PHP versions. Please verify your SSL setup, update your
PHP or contact your vendor if you receive these errors.

The persistent file-based cache (e.g. used by LDAP integration) has been dropped and 
replaced with a memory-only cache, which must be explicitly configured. See 
:doc:`configuration/user/user_auth_ldap`. Memory cache configuration for the 
ownCloud server is no longer automatic, requiring installation of 
your desired cache backend and configuration in 
``config.php`` (see :doc:`configuration/server/caching_configuration`.) 

The ``OC_User_HTTP`` backend has been removed. Administrators are encouraged to use 
the ``user_webdavauth`` application instead.

ownCloud ships now with its own root certificate bundle derived from Mozilla's 
root certificates file. The system root certificate bundle will not be used 
anymore for most requests.
  
When you upgrade from ownCloud 8.0, with encryption enabled, to 8.1, you must 
enable the new encryption backend and migrate your encryption keys. See 
:ref:`upgrading_encryption_label`.

Encryption can no longer be disabled in ownCloud 8.1. It is planned to re-add
this feature to the command line client for a future release.

It is not recommended to upgrade encryption-enabled systems from ownCloud Server 8.0
to version 8.1.0 as there is a chance the migration will break. We recommend 
migrating to the first bugfix release, ownCloud Server 8.1.1.

Due to various technical issues, by default desktop sync clients older than 
1.7 are not allowed to connect and sync with the ownCloud server. This is 
configurable via the ``minimum.supported.desktop.version`` switch in 
``config.php``.

Previews are now generated at a maximum size of 2048 x 2048 pixels. This is configurable
via the ``preview_max_x`` and ``preview_max_y`` switches in ``config.php``.

The ownCloud 8 server is not supported on any version of Windows.

The 8.1.0 release has a minor bug which makes application updates fail at first try. Reload the
apps page and try again, and the update will succeed.

The ``forcessl`` option within the ``config.php`` and the ``Enforce SSL`` option 
within the Admin-Backend was removed. This now needs to be configured like 
described in :ref:`use_https_label`.

WebDAV file locking was removed in ownCloud 8.1 which causes Finder on Mac OS X to mount WebDAV read-only.

Enterprise 8.1 
~~~~~~~~~~~~~~

The SharePoint Drive application does not verify the SSL certificate of the SharePoint 
server or the ownCloud server, as it is expected that both devices are in the 
same trusted environment.

.. _8.0_release_notes_label:

Changes in 8.0
--------------

Manual LDAP Port Configuration
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When you are configuring the LDAP user and group backend application, ownCloud 
may not auto-detect the LDAP server's port number, so you will need to enter it 
manually.

.. https://github.com/owncloud/core/pull/16748

No Preview Icon on Text Files
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

There is no preview icon displayed for text files when the file contains fewer than six characters.

.. https://github.com/owncloud/core/issues/16556#event-316503097

Remote Federated Cloud Share Cannot be Reshared With Local Users
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When you mount a Federated Cloud share from a remote ownCloud server, you cannot re-share it with
your local ownCloud users. (See :doc:`configuration/files/federated_cloud_sharing_configuration` 
to learn more about federated cloud sharing)

Manually Migrate Encryption Keys after Upgrade
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you are using the Encryption application and upgrading from older versions of 
ownCloud to ownCloud 8.0, you must manually migrate your encryption keys.
See :ref:`upgrading_encryption_label`.

Windows Server Not Supported
~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Windows Server is not supported in ownCloud 8.

PHP 5.3 Support Dropped
~~~~~~~~~~~~~~~~~~~~~~~

PHP 5.3 is not supported in ownCloud 8, and PHP 5.4 or better is required.

Disable Apache Multiviews
~~~~~~~~~~~~~~~~~~~~~~~~~

If Multiviews are enabled in your Apache configuration, this may cause problems 
with content negotiation, so disable Multiviews by removing it from your Apache 
configuration. Look for lines like this:: 

 <Directory /var/www/owncloud>
 Options Indexes FollowSymLinks Multiviews
 
Delete ``Multiviews`` and restart Apache.

.. https://github.com/owncloud/core/issues/9039

ownCloud Does Not Follow Symlinks
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

ownCloud's file scanner does not follow symlinks, which could lead to 
infinite loops. To avoid this do not use soft or hard links in your ownCloud 
data directory.

.. https://github.com/owncloud/core/issues/8976

No Commas in Group Names
~~~~~~~~~~~~~~~~~~~~~~~~

Creating an ownCloud group with a comma in the group name causes ownCloud to 
treat the group as two groups.

.. https://github.com/owncloud/core/issues/10983

Hebrew File Names Too Large on Windows
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

On Windows servers Hebrew file names grow to five times their original size 
after being translated to Unicode.

.. https://github.com/owncloud/core/issues/8938

Google Drive Large Files Fail with 500 Error
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Google Drive tries to download the entire file into memory, then write it to a 
temp file, and then stream it to the client, so very large file downloads from 
Google Drive may fail with a 500 internal server error.

.. https://github.com/owncloud/core/issues/8810

Encrypting Large Numbers of Files
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When you activate the Encryption application on a running server that has large numbers 
of files, it is possible that you will experience timeouts. It is best to 
activate encryption at installation, before accumulating large numbers of files 
on your ownCloud server.

.. https://github.com/owncloud/core/issues/10657


Enterprise 8.0
~~~~~~~~~~~~~~

Sharepoint Drive SSL Not Verified
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The SharePoint Drive application does not verify the SSL certificate of the SharePoint 
server or the ownCloud server, as it is expected that both devices are in the 
same trusted environment.

No Federated Cloud Sharing with Shibboleth
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Federated Cloud Sharing (formerly Server-to-Server file sharing)does not work 
with Shibboleth .

.. https://github.com/owncloud/user_shibboleth/issues/28

Direct Uploads to SWIFT do not Appear in ownCloud
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

When files are uploaded directly to a SWIFT share mounted as external storage 
in ownCloud, the files do not appear in ownCloud. However, files uploaded to 
the SWIFT mount through ownCloud are listed correctly in both locations.

.. https://github.com/owncloud/core/issues/8633

SWIFT Objectstore Incompatible with Encryption App
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The current SWIFT implementation is incompatible with any application that uses direct 
file I/O and circumvents the ownCloud virtual filesystem. Using the Encryption 
application on a SWIFT object store incurs twice as many HTTP requests and increases 
latency significantly.

.. https://github.com/owncloud/core/issues/10900

application Store is Back
^^^^^^^^^^^^^^^^^^^^^^^^^

The ownCloud application Store has been re-enabled in ownCloud 8. Note that third-party apps 
are not supported.

.. _7.0_release_notes_label:

Changes in 7.0
--------------

Manual LDAP Port Configuration
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When you are configuring the LDAP user and group backend application, ownCloud 
may not auto-detect the LDAP server's port number, so you will need to enter it 
manually.

.. https://github.com/owncloud/core/pull/16748

LDAP Search Performance Improved
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Prior to 7.0.4, LDAP searches were substring-based and would match search 
attributes if the substring occurred anywhere in the attribute value. Rather, 
searches are performed on beginning attributes. With 7.0.4, searches will match 
at the beginning of the attribute value only. This provides better performance 
and a better user experience.

Substring searches can still be performed by prepending the search term with 
"*".For example, a search for ``te`` will find Terri, but not Nate::
 
 occ ldap:search "te"

If you want to broaden the search to include 
Nate, then search for ``*te``::

 occ ldap:search "*te"

Refine searches by adjusting the ``User Search Attributes`` field of the 
Advanced tab in your LDAP configuration on the Admin page. For example, if your 
search attributes are ``givenName`` and ``sn`` you can find users by first name 
+ last name very quickly. For example, you'll find Terri Hanson by searching for 
``te ha``. Trailing whitespaces are ignored.

.. https://github.com/owncloud/core/issues/12647

Protecting ownCloud on IIS from Data Loss
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Under certain circumstances, running your ownCloud server on IIS could be at 
risk of data loss. To prevent this, follow these steps.

* In your ownCloud server configuration file, ``owncloud\config\config.php``, set 
  ``config_is_read_only`` to true.
* Set the ``config.php`` file to read-only.
* When you make server updates ``config.php`` must be made writeable. When your 
  updates are completed re-set it to read-only.

Antivirus Application Modes
~~~~~~~~~~~~~~~~~~~~~~~~~~~

The Antivirus application offers three modes for running the ClamAV anti-virus scanner: 
as a daemon on the ownCloud server, a daemon on a remote server, or an 
executable mode that calls ``clamscan`` on the local server. We recommend using 
one of the daemon modes, as they are the most reliable.

"Enable Only for Specific Groups" Fails
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Some ownCloud applications have the option to be enabled only for certain 
groups. However, when you select specific groups they do not get access to the 
app.

Changes to File Previews
~~~~~~~~~~~~~~~~~~~~~~~~

For security and performance reasons, file previews are available only for 
image files, covers of MP3 files, and text files, and have been disabled for 
all other filetypes. Files without previews are represented by generic icons 
according to their file types. 

4GB Limit on SFTP Transfers
~~~~~~~~~~~~~~~~~~~~~~~~~~~

Because of limitations in ``phpseclib``, you cannot upload files larger than 
4GB over SFTP.

"Not Enough Space Available" on File Upload
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Setting user quotas to ``unlimited`` on an ownCloud installation that has 
unreliable free disk space reporting-- for example, on a shared hosting 
provider-- may cause file uploads to fail with a "Not Enough Space Available" 
error. A workaround is to set file quotas for all users instead of 
``unlimited``.

No More Expiration Date On Local Shares
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

In older versions of ownCloud, you could set an expiration date on both local 
and public shares. Now you can set an expiration date only on public shares, 
and local shares do not expire when public shares expire.

Zero Quota Not Read-Only
~~~~~~~~~~~~~~~~~~~~~~~~

Setting a user's storage quota should be the equivalent of read-only, however, 
users can still create empty files.

Enterprise 7.0
~~~~~~~~~~~~~~

No Federated Cloud Sharing with Shibboleth
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Federated Cloud Sharing (formerly Server-to-Server file sharing) does not work 
with Shibboleth .

Windows Network Drive
^^^^^^^^^^^^^^^^^^^^^
Windows Network Drive runs only on Linux servers because it requires the Samba 
client, which is included in all Linux distributions. 

``php5-libsmbclient`` is also required, and there may be issues with older 
versions of ``libsmbclient``; see Using External Storage > Installing and 
Configuring the Windows Network Drive application in the Enterprise Admin manual for 
more information. 

By default CentOS has activated SELinux, and the ``httpd`` process can not make 
outgoing network connections. This will cause problems with curl, LDAP and samba 
libraries. Again, see Using External Storage > Installing and Configuring the 
Windows Network Drive application in the Enterprise Admin manual for instructions.

Sharepoint Drive SSL
^^^^^^^^^^^^^^^^^^^^

The SharePoint Drive application does not verify the SSL certificate of the SharePoint 
server or the ownCloud server, as it is expected that both devices are in the 
same trusted environment.

Shibboleth and WebDAV Incompatible
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Shibboleth and standard WebDAV are incompatible, and cannot be used together in 
ownCloud. If Shibboleth is enabled, the ownCloud client uses an extended WebDAV 
protocol

No SQLite
^^^^^^^^^

SQLite is no longer an installation option for ownCloud Enterprise Edition, as 
it not suitable for multiple-user installations or managing large numbers of 
files.

No Application Store
^^^^^^^^^^^^^^^^^^^^

The application Store is disabled for the Enterprise Edition.

LDAP Home Connector Linux Only
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

The LDAP Home Connector application requires Linux (with MySQL, MariaDB, 
or PostgreSQL) to operate correctly.

.. Links
   
.. _the latest desktop client version: https://doc.owncloud.com/desktop/latest/
.. _syncing user backends: configuration/server/occ_command.html#syncing-user-accounts
.. _the new marketplace: https://marketplace.owncloud.com
.. _Open Build Service: https://download.owncloud.org/download/repositories/10.0/owncloud/
.. _please apply this patch: https://gist.github.com/VicDeo/bb0689104baeb5ad2371d3fdb1a013ac/raw/04bb98e08719a04322ea883bcce7c3e778e3afe1/DoctrineMariaDB102.patch
.. _check out the related issue: https://github.com/owncloud/core/issues/28695
.. _the full ownCloud Server 10.0.4 changelog: https://github.com/owncloud/core/blob/stable10/CHANGELOG.md
.. _the full ownCloud Server changelog: https://owncloud.org/changelog/server/
.. _the occ command's files:scan --repair documentation: https://doc.owncloud.com/server/latest/admin_manual/configuration/server/occ_command.html?highlight=occ#the-repair-option
.. _the config_sample_php_parameters documentation: https://doc.owncloud.com/server/latest/admin_manual/configuration/server/config_sample_php_parameters.html#mode-of-operation
.. _the background jobs configuration documentation: https://doc.owncloud.com/server/latest/admin_manual/configuration/server/background_jobs_configuration.html#cleanupchunks
.. _the list of supported browser versions: https://doc.owncloud.com/server/latest/admin_manual/installation/system_requirements.html#web-browser
