v4.3.3.016 (September 12 2017) DRIVER UPGRADE AVAILABLE - REBOOT REQUIRED

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.3.3.

ISO/DVD/USB Boot Install Image

Release Notes

Drivers

  • New SCST SCSI Target driver that allows iSCSI and FC ALUA luns to be presented from the same QuantaStor HA head nodes.

Cloud Containers

  • Added and Increased cache size for the stat cache used for S3FS based one-to-one Cloud Containers.
  • Fixed a problem where using multi delete volume would leave the cloud backup of a volume behind in the cloud container's mount directory.

High Availability Failover

  • Fixed: Added standby path ALUA Target Portal Group information to active node. This change accelerates path recovery for FC ALUA Storage Volumes.
  • Added support for FC ALUA for VMware clients.
  • Added HA Storage Pool support for disks and devices that provide unique device serial number identification via Vendor identification SCSI page 83
  • Fixed an issue where encrypted disk devices may not be automatically opened on HA failover of a Encrypted Storage Pool without a passphrase.
  • Fixed: Improved management around HA virtual interface location constraints.


Hardware Enclosures and Controllers:

  • Added new Broadcom HBA discovery support for the new IT mode controller section in the storcli raid utility.
  • Fixed: Updated sas3ircu utility that corrects a system crash when a system has a Broadcom 9400 series controller installed.
  • Fixed an issue with RAID Unit creation on Areca Hardware RAID controllers.
  • Added support for latest HPE hpssacli 2.40.13.0
  • Added: Disk Temperatures now supported on HPE Hardware RAID and SAS HBA controllers
  • Adds support for the SCSI Temperature field for disks on SAS HBA's.
  • Updated Broadcom storcli64 utility to version 007.0204.0000.0000 to support the latest LSI SAS HBA's and MegaRAID controllers.


Network Shares

  • Fix the QS CLI share-disable and share-enable to return the accurate value indicating if the share is active.
  • Fixed an issue with changing the description field in a Network Share Modify for shares and subshares.
  • Fixed: Share Quota support will now be greyed out in the WebUI dialogs for Network Shares created on Filesystems and Storage Pools that do not support quotas.
  • Added: Raise SMB limits to allow upto 1Million open files.
  • Fixed: Disabled ZFS only sync CLI flags in share-modify and share-create for non ZFS shares.


Remote Replication

  • Fixed an issue with share and volume associations to Remote Replication Schedule objects if a node is removed and re-added to the grid.
  • All nodes involved with the replication schedule need to be updated in the same downtime / maintenance to prevent ownership problems.
  • Resolved an issue with ownership of the Remote Replication Schedule object in a High Availability configuration.


Storage Volumes

  • Added 1KB, 2KB and 4KB block size support to ZFS Storage Volumes.
  • Fixed: Added additional locking protection to Storage volume multi-delete for mixed cloud XFS and ZFS deployments to ensure all volumes are removed as expected.


SCSI Target:

  • Fixed: Optimized SCSI target to only launch processes for mapped LUNs.


Security

  • Disables SSH port forwarding in the sshd service.
  • Configured nginx to correctly send the X-Frame-Options header.


Web Manager

  • Added Internationalization support to the Configuration manager Dialog.
  • Fixed a problem where the login failure dialog was closing before the user could read it


Storage Pools

  • Added support for more than one Zil SLOG mirror per pool, now with multiple mirrors the SLOG can provide higher performance by utilizing 4 or more SSD devices.
  • Added enclosure awareness for DELL MD* devices to Storage Pool disk device RAID redundancy balancing.
  • Fixed an issue with creating XFS Storage Pools on Multipath disk devices.
  • Fixed an issue with removing a spare disk from a XFS Storage Pool md RAID configuration.
  • Fixed: Greatly reduced the number of alerts triggered for a storage pool repair action when global spares are not configured.
  • Fixed: qs-pool-create will now generate a unique pool name when no pool name provided.
  • Fixed: Clearer error messages for invalid pool names when creating a pool.


Service Core

  • Added new --secure=1 option to the qs-logreport command.
  • Added Samba audit logging feature for logging client access of Network Shares. This new option is available under the advanced tab of the Network Share Create and Modify Dialogs.
  • Removed telegraf statistic gathering for disk devices that are not being graphed.

v4.3.2.025 (August 3rd 2017) DRIVER UPGRADE AVAILABLE - REBOOT REQUIRED

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.3.2.

ISO/DVD/USB Boot Install Image

 

Release Notes

Drivers

  • Updated hpsa driver 3.4.18-105
  • Updated mpt3sas driver 21.00.00.00
  • Added arcmsr driver v1.30.0X.27-20170206

Ceph

  • Fixed an issue where a failed ceph OSD could cause other OSD's on the same node to fail to start.
  • Fixed: Added a check for Device Mapper based disk devices are blocked when creating Journal and OSD devices. These devices have a different dev partition path and will be supported in a future release.
  • Fixed: Optimized Ceph Journal device discovery for faster service startup.

Cloud Containers

  • Fixed: You can now remove Cloud Backups Schedules if there are no Cloud Containers present.

Disk Manager

  • Fixed: Trusty deployments will now support dm multipath disk configuration for SAS Disks when there is only a single path from one SAS cable physically connected.
  • Fixed: Added some improvements for multipath and disk discovery on service startup and disk rescans after multipath configuration changes. This change also helps ensure that if a disk or other hardware device is faulty or slow to respond that disk discovery continues on all other devices.
  • Fixed an issue with the physical disk and storage pool device identify logic where the Hardware Enclosure identify disk logic to blink the enclosures disk slot ID LED was not consistently used.

Hardware Controller Support

  • Added Broadcom LSI 9400 series HBA controller support.
  • Added Hardware Enclosure and Controller management support for Areca Controllers in JBOD mode and RAID0/1+0/5/6 arrays.
  • Added a Disk Temperature alert for disks that go above a specific centigrade value. The default for this threshold is 50C. This is currently supported on LSI MegaRAID and Areca RAID controllers, SAS HBA and other controller support will be available in a future release. The alert threshold can be customized with the addition of a 'disk_temp_alert_threshold=NN' definition under the [hw_controller] section in the /etc/quantastor.conf config file.
  • Added a new Drive Temperature column to the Controller Disks tab grid view in the Hardware Enclosure and Controllers section of the Web Manager.
  • Added additional Enclosure Layouts and Enclosure images for HPE, Dell and Supermicro enclosures.
  • Added: Drives that go above the temperature threshold will now show a OVER-TEMP Status in the Controller Disks grid view.
  • Updated MotionFX chassis enclosure images and details to reflect new Acromove branding.
  • Added additional Enclosure Layouts and Enclosure images for HPE, Dell, HGST, and Supermicro enclosures.

High Availability Failover

  • Added Site Cluster VIF to the Web Manager. Site Cluster VIF's can be used to create a Virtual interface specific to a specific site cluster. Recommended for cases such as Network Share Namespaces.
  • Fixed: Added a check for HA Storage Pools to ensure that grow checks if the disk is available from both nodes before performing the pool grow.
  • Fixed: Added a check for HA Storage Pools to ensure that selecting a new disk to be used as a cache device or spare checks if the disk is available from both nodes before performing the operation.
  • Fixed: Added a check for HA Storage Pools when adding a Hotspare disk that the drives are available from both systems.
  • Added the ability to failover Site Cluster VIF's to a specific node on the Site Cluster.
  • Fixed an issue with deleting Site Cluster HA VIF's on precise platforms, this was a regression from improvements introduced in the 4.3.0 release.
  • Fixed an issue where deleting an encrypted HA storage pool would leave encrypted devices open on the standby node.
  • Fixed an issue with Storage Pool device verification on failover of HA Encrypted storage pools.
  • Fixed an issue where the /etc/crypttab key entries were not cleaned up on the standby node after a HA Encrypted Storage Pool was deleted.

Remote Replication

  • Fixed and issue where a newly created storage system link would not have the reverse link persist after a reboot or management service restart
  • Fixed: Storage System links that do not have a bandwidth limit will now correctly show the default limit of 100 MB/s when upgrading from a older release.

Web Manager

  • Updated the Central Grid view of the Enclosure and Controllers section in the Web Manager to provide a more concise and easier to navigate display for enclosure layout and controller and enclosure selection.
  • Updated the Central grid views in the Web Manager to provide a clearer layout that shows more information all at the same time.
  • Added support for AD groups in the Network Share User and Group Quota dialog.
  • Fixed a help documentation link for the Remove Heartbeat Cluster Dialog.
  • Fixed an issue where the Dashboard in the Ceph Tab of the Web Manager could collapse to a hidden state unexpectedly.
  • Fixed the Help Documentation for the FC Target port enable/Initiator Mode Enable dialogs.
  • Fixed: The Multipath Configurator scan drop down list will have single entries for each unique multipath capable device found.
  • Fixed: The Status field in the Controller Disks tab of the Hardware Enclosures and Controllers section is now wider to encompass most common disk status states.
  • Fixed: updated Execute Storage Pool Failover dialog to clarify the checkbox and it's effect for ensuring pool failover succeeds to the selected node in the event the original node fails to export the pool.

Storage Pool

  • Fixed: Task progress for a storage pool delete when a disk scrub is selected will now correctly show the progress for the overall task, including the scrub portion. Previously, individual scrub operations were reporting their process progress percentage as an update to the overall task, this resulted in the overall task progress being incorrect at times.
  • Fixed an issue with Pool deletion where the pool delete would fail if there was unexpected data in the pool mount path.


QS CLI

"* Added new CLI support for adding and removing Network Share Quotas per user and group. Previously this was only available in the Network Share User and Group Quota Manager dialog.

qs share-group-quota-add 
qs share-group-quota-remove 
qs share-user-quota-add 
qs share-user-quota-remove"

"* Added password token support for the .qs.cnf file in the root home directory on QuantaStor systems, this provides localhost authentication without needing to have the password in a authentication file for the root user.

Users can enable this by echoing the special token into the root users .qs.cnf file: 

echo ""localhost,admin,[QSCLITKN]"" > /root/.qs.cnf 

And then enabling token based authentication using the CLI command for the admin user shown below. 

qs user-modify admin --cli-auth=yes --server=localhost,admin,PASSWORD 

Note, if you have created a new Administrative role user, replace 'admin' with the name of your admin user."

v4.3.1.007 (June 30th 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.3.1.

ISO/DVD/USB Boot Install Image

Release Notes

Package updates

  • New nginx-light 1.12.0-1+trusty1 package for trusty deployments.

High Availability

  • Fixed an issue where the encryption keys would sometimes not be copied to the secondary node of an HA Failover Group.

Security

  • Changed the Password Policy Manager dialog to be the Security Manager Dialog.
  • Added http to https redirect option to the Security Policy Manager Dialog
  • Added option to disable http port 80 access to the Security Policy Manager Dialog
  • Added logging of manual and automatic user logout from the QuantaStor Web Manager to the '/var/log/qs_audit.log' file
  • Fixed an issue where the Password Policy changes could sometimes not be applied to all nodes in the grid.
  • Fixed a Security issue with bad password responses. Fixes items found related to CVE-2017-9978
  • Fixed the Rest API response for when a method is unsupported. Fixes items found related to CVE-2017-9979

Web Manager

  • Fixed: Right-click context menu's will now show the same list of menu options in the tree and grid view.

v4.3.0.335 (June 22nd 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.3.0.

ISO/DVD/USB Boot Install Image

 

Release Notes

Ceph Scale-out Block and Object

  • Updated Ceph Packages available:
- 10.2.7 Jewel for Trusty based installs 
- 0.94.10 Hammer for Precise based installs
  • Fixed Ceph Scale-out Block startup discovery on grid nodes that are still part of a ceph cluster, when one of the ceph nodes in the grid is removed from the grid.
  • Fixed: Added validation to correct an issue where a Grid Node Object and associated child objects were unexpectedly removed from the Grid Master if the QuantaStor Grid Node came onto the network with a new Storage System ID but using the same IP. This corrects a scenario where a system reinstalled in place due to a Hardware issue could cause an unexpected grid or configuration change.

 

Cloud Containers

  • New IBM Softlayer S3 Endpoints added to the default Cloud Providers configuration.
  • Fixed an issue where changes to the /etc/qs_cloud_providers.conf on the master node was not propagating to secondary nodes.
  • Fixed an issue where the entry fields for Tag and End-Point in the Cloud Containers> Add Provider Location Dialog and CLI were swapped.
  • Fixed a missing python-six dependency issue with the aws CLI tool.

 

High Availability

  • Improved pool failover times when network interface connectivity between nodes is lost.
  • Fixed an issue where high-availability virtual network interfaces could try and start on a system that did not currently have the QuantaStor service running.
  • Fixed issue where deleting high-availability virtual network interface could cause temporary outages on other high-availability virtual network interfaces.
  • Fixed an issue where deleting a high-availability virtual network interface could cause an unnecessary failover to occur.
  • Fixed an issue where failover would fail due to not finding the disks correctly on the secondary node.
  • Fixed an issue with nginx web service starting during qstormanager package install.
  • Fixed: HA Storage Pool Failover is now kernel panic aware to trigger a failover to the secondary node.
  • Fixed: Deleting a HA VIF from the Network port list in the Storage System View now correctly cleans up the High Availability Failover Group HA VIF object.
  • Fixed: A Site Cluster can now be deleted using the force flag if a Cluster node is Permanently offline and will not be returning.

 

Disk Management

  • Added a Multipath Configuration Dialog to the Physical Disk section of the Web Manager, this allows for administrators to scan for SAS, FC, iSCSI and other multipath/multiport capable devices and add their white-listing rules to the multipath configuration. This functionality is also available via the new qs CLI 'disk-multipath-config-list, disk-multipath-config-scan, disk-multipath-config-add and disk-multipath-config-remove' commands.
  • Fixed an issue where the /dev/disk/by-id/ata-* devices would be removed under the device mapper path after a Storage Pool is deleted by a user. Previously, a udevadm-trigger command would be required to bring the ata-* device back.
  • Fixed an issue with physical disk scan on multipath configurations that could cause the mutlipath devices to not appear in the QuantaStor WebUi and CLI once the scan completes.
  • Fixed: the qs disk-scan command now has a force flag


Storage Pool

  • Fixed an issue where old disk encryption keys would not be cleaned up after a storage pool is deleted.
  • Added earlier validation checks for Storage Pool Grow Operations for Encrypted Storage Pool configurations to ensure that the disks to be added are not encrypted before the RAID set size and resultant configuration is confirmed to be valid.
  • Fixed an issue during storage pool create where user specified RAID set sizes would not be used.
  • Fixed a few scenarios where creating a Storage Pool with XFS, Software RAID and Encryption could fail.
  • Fixed an issue where a failed disk device was not automatically removed from a ZFS Storage Pool in Multipath configured environments.
  • Fixed an issue that could occur when adding hot spares to ZFS Storage Pools in Multipath configured environments.
  • Fixed an issue where a failed disk device was not automatically removed from a ZFS Storage Pool in Multipath configured environments.

Remote Replication and Snapshots

  • Added a Remote Replication Report tab to the Remote Replication Schedules section of the Web Manager that shows the results of past replication tasks. Statistics in the report include: completion status, average throughput, the start and end time of the replication and many more. This is also available via the qs CLI with the 'qs replica-report-summary-list' and 'qs replica-report-entry-list' commands.
  • Added new snapshot retention options to the Create Remote Replication Schedule Dialog to allow for Daily, Weekly, Monthly and Quarterly Snapshots for Historical Storage Volume and Network Share snapshots.
  • Added new snapshot tags for Daily, Weekly, Monthly and Quarterly Snapshots that correspond with the retention policy picked for a particular Storage Volume or Network Share snapshot.
  • Added Compression support to Storage System Links, this allows for improved performance over slow WAN links.
  • Added: Remote Replication bandwidth throttling has been moved to the Storage System Link object. The qs link-create and link-modify commands and Web Manager Create Storage System Link and Modify Storage System Link Dialogs now allow for setting the bandwidth throttling.
  • Added the ability to turn on Unencrypted support for Remote Replication Storage System Links. This uses mBuffer to provide a high performance unencrypted channel for Remote Replication between QuantaStor nodes.
  • Added the ability to configure the Bandwidth Limiter in the Create and Modify Storage System Link Dialogs.
  • Added more information to indicate replication schedule health/state and cause of failures due to any miss-configuration or networking communication error.
  • Added: Snapshot Schedules can now be created for snapshots (allows Snapshot of Snapshot Scheduling)
  • Fixed an issue where remote replication could fail for manually initated replications.
  • Fixed: Max Replicas in Replication Schedules are now referred to more correctly as Max Delta Points, this clarifies more precisely how many Intermittent and hourly scheduled replica snapshot points are retained between a source and target replication association.
  • Fixed: The Remote Replication Offset interval for Hourly/Daily Replication in the Schedule Interval tab of the Create and Modify Replication Schedule dialogs now defaults to 0 minutes and can go to a max of 59.
  • Fixed: ZFS snapshots will once more be correctly removed upon the deletion of a Network Share snapshot. This corrects a regression from the 4.2.2 release.
  • Fixed: resolved an issue with updating the Timestamps for running remote replication tasks that could result in the remote replication link having incorrect progress information.

 

Gluster Scale-out File

  • Fixed an issue that could cause unexpected behavior with Gluster Peer and Volume objects showing correctly when Gluster is deployed n the same QuantaStor management grid as non Gluster nodes.
  • Fixed an issue that would prevent cleanup of Gluster Volumes in a configuration where the gluster bricks or underlying pools had been already removed.
  • Fixed: Re-ordered the Ribbon bar icons in the Scale-out File Storage tab.


Network Share:

  • Added the ability to see SMB session information for Network Shares under the new Web Manager Network Share>SMB Sessions tab and the 'qs share-session-list' and 'qs share-get' CLI commands.
  • Added the ability for users to create a snapshot of an existing Network Share snapshot (snapshot of a snapshot). This support is limited to custom named snapshots and not snapshots created by a schedule that has @GMT in the name.
  • Fixed an issue on Precise platforms with Network Share Snapshots for Windows SMB Shadow Copy and File Versioning support.
  • Fixed an issue where removing NFS access from a Network Share would collapse the tree to the first level in the Network Share tree view. Now the tree will stay as expected when a NFS Access object is removed from the share.
  • Fixed an issue in the Namespace Add/remove Network Shares Dialog where changing the namespace in the drop down would not always update the available selections.
  • Fixed an issue with the search filtering in the Add/Remove Network Shares to/from Namespaces.
  • Fixed an Issue with creating shares that have multiple '$' in the name.
  • Fixed an issue with snapshot mount directory cleanup after a network share snapshot has been deleted. Note, this prevents the issue from occurring going forward, If users ran into this case previous to upgrading to the 4.3 release they may need to manually remove old @GMT snapshot mount directories from the network share _snaps directory.

Web Manager

  • Added a new Password Policy dialog available under the Users and Groups tab in the Web Manager that allows Administrators to enforce password Requirements. This includes:
- Minimum password character length 
- Password expiration (in days). 
- Number of allowed login attempts 
- Minimum days to wait before password change is allowed. 
- Number of unique passwords before reusing a password is allowed.
  • Added: the Storage Volume Close Session dialog now shows a select-able list of the current sessions, clicking okay will close all the selected sessions on the SCSI Target.
  • Added: Network Share and Storage Volume Multi-Delete from the web manager can be used to delete share/volume and its child snapshots (select Delete Child Snapshots).
  • Added: The Network Shares and Storage Volumes Multi-Delete dialog now has the option to "Hide Snapshots", making it easier to select the parent share/volume to be deleted.
  • Added Passthru Storage Volume support to the Web Manager, Passthru Volumes can be created by right clicking on a Physical Disk and choosing the 'Create Passthru Volume' option.
  • Added new columns to the Create Storage Pool Dialog to show the Source System and Source Storage Volume to better allow customers to pick specific Passthru physical disks using QuantaStor appliances as backend storage for front end QuantaStor appliances.
  • Fixed: General responsiveness and UX performance improvements for the Web Manager on larger scale configurations.
  • Fixed: Provided a clearer message in the Create Pool dialog for when users do not provide matching passwords for the 'Encrypt Storage pool with Passphrase' fields.
  • Fixed: the Dashboards will enforce the use of https for their rest calls when the Web Manager is using https.
  • Updated the create and Modify Remote Replication Schedule Dialogs for a better workflow.
  • Fixed a problem under the Remote Replication tab in the Web Manager that could lead to a slow unresponsive Web Interface.
  • Fixed an issue where the Replication Targets tab under the Storage System Links could show as empty.
  • Fixed an issue where a newly created Host Group to not show the selected hosts in that group. Previously, a browser refresh was required to show them once more.
  • Fixed an issue with the Web Manager that would cause object status or task objects to not update or show as completed when a large number of events were received. Previously, a refresh of the Web Browser would have been required if this occurred.
  • In the Migration Edition Workflow Manager, the View Network Shares has been replaced with View SMB Connections.
  • Added a Task list counter to the Task list at the lower part of the Web Manager.
  • Added Block Size column option to the Storage Volume grid view.
  • Fixed: Removed the unsupported cloning options in the context menu for Network Share Alias or Subshare. Cloning should only occur at the Parent Share level.
  • Fixed an issue in the Physical Disk view that could cause the Firefox and IE Web browsers to report an unresponsive script warning.
  • Fixed a few areas in the Web Manager where large numbers of objects or events coming in could resulting in an unresponsive script warning for some Web Browsers.
  • Fixed an issue in the Storage Volume tree view where scrolling down and selecting a volume could cause the tree view to 'jump' up to the top of the list.
  • Fixed an issue with the tree view for Network shares that could sometimes show the NFS client access out of order with the associated network share snapshot.
  • Fixed an issue with truncation of some of the options in the Create and Modify User dialogs.
  • Fixed field, text, scroll and other alignment issues in various dialogs.
  • Fixed miscellaneous spellings in various Dialogs.
  • Fixed the Add user dialog descriptive text.
  • Fixed: Added a check to the Storage Volume Advanced Settings CHAP Username/Password to ensure that both Username and Password are supplied before clicking on OK.
  • Fixed: Corrected an issue under the Remote Replication Schedule View in the Web Manager where some items under the left hand tree view could not be selected if the same Network Share or Volume was also in under another schedule.
  • Fixed: Re-ordered the Ribbon bar icons in the Scale-out Block and Object Storage tab.
  • Fixed: Re-ordered the Ribbon bar icons in the Storage System tab.
  • Fixed: References for CIFS protocol in the Web Manager have been renamed or further clarified to SMB.
  • Fixed: The CIFS Configuration Dialog has been renamed to Active Directory Configuration.
  • Updated Web Manager splash to detail how to properly refresh the QuantaStor Web Manager on OS X.
  • Improved Web Manager responsiveness and performance.

 

Hardware RAID Support

  • Creating a Hardware RAID unit under Hardware Enclosures and Controllers will now create the HwUnit object for display immediately with discovery of properties occurring in the background. This provides better User Interface feedback when creating a large number of Hardware RAID units.
  • Fixed: added a guard to the Hardware RAID Controller SSD Cache Unit delete to prevent removal of the SSD cache if it is actively in use with Any other Hardware RAID units on that same RAID Controller.


Installer and Packaging

  • Fixed an issue with the .iso install media that required internet access for a install to finish.
  • Fixed: The Installer will now show eth* devices for UEFI BIOS installs
  • Fixed a problem with the latest qstortarget package compatibility with the older 3.19.0-29-quantastor kernel.


Localization

  • Updated Japanese, Chinese, French, Spanish, and Italian localizations for the QuantaStor Web Manager.

Security

  • Added: Users who are inactive for 30 minutes are automatically logged out of the Web Manager.
  • Added: Auto Logout clears all state information from the Web Browser.
  • Added CJIS Section 5.5.4 Compliance:
- System Use Notification is available with System Usage Notification Message field under Password Policy Dialog. 
  • Added CJIS Section 5.5.5 Compliance:
- Session Lock is available with Auto Logout value under Password Policy Dialog.
  • Added CJIS Section 5.4.1.1 Compliance.
CJIS Section 5.4.1.1 Events logging in the /var/log/qs_audit.log for: 
- Successful and unsuccessful system log-on attempts. 
- Successful and unsuccessful attempts to use access, create, write, delete or change permission on a user account or other system resource. 
- Successful and unsuccessful attempts to change account passwords. 
- Successful and unsuccessful actions by privileged accounts.
  • Added CJIS Section 5.6.2.1.1 Compliance.
Note: CJIS default password requirements compliance can be enabled under the Password Policy dialog in the Users and Groups tab. In the dialog, select Suggested Defaults and change password complexity to strong.
Detailed CJIS Section 5.6.2.1.1 Compliance, Password Shall:
- Be a minimum length of eight (8) characters on all systems. (Compliant & Enforced)
- Not be a dictionary word or proper name. (Compliant & Enforced, since QS v4.1.1)
- Not be the same as the Userid. (Compliant & Enforced)
- Expire within a maximum of 90 calendar days. (Compliant & Enforced, since QS v4.1.1)
- Not be identical to the previous ten (10) passwords. (Compliant & Enforced, since QS v4.1.1)
- Not be transmitted in the clear outside the secure location. (Compliant & Enforced)
- Not be displayed when entered. (Compliant & Enforced)
- Erase cached information when a UI session in terminated 
  • Fixed: Users created with the Cloud Admin and Cloud User Role can now change their own passwords.
  • Updated Samba packages are available to address CVE-2017-7494, please upgrade your system using the qs-upgrade CLI command to install these packages and bring your system current with all other security and stability fixes available on the package repository. Note: for customers who installed the sernet-samba4 packages on the older precise platform using the samba4-install script, a workaround to address this security alert is detailed in the KB article here: KBLINK
  • Added Logic to terminate SMB sessions for users who have had their user access removed.


Active Directory

  • Added support for RFC2307 configuration to the Configure Active Directory Dialog in the Web Manager for Trusty platforms or Precise installs that have the optional sernet-samba4 packages installed.
  • Added Trusted Domain checkbox to the Configure Active Directory Dialog box for Trusty platforms or Precise installs that have the optional sernet-samba4 packages installed. This enables trusted domain support for the CIFS/SMB service
  • Fixed: The Sernet Samba4 winbindd service will now be automatically started if it is detected that it is not running. This brings the Sernet samba service management inline with the standard Ubuntu Precise and Trusty Samba services.


CLI

  • qs CLI commands 'system-shutdown', 'system-restart' and 'system-upgrade' commands can accept a '--sys-list' argument with a comma delimmeted list of storage systems to perform Shutdown, restart or upgrade tasks on multiple gris nodes at once.
  • Fixed: 'qs set-tag' now allows the use of object UUIDs to set tags. Prior to this fix, only names were allowed to set tags.
  • Fixed: replaced the Parent Share ID with the human readable the Parent Share Name to the 'qs share-list' command for snapshots.
  • Added clarity to the help for qs commands such as 'pool-create', 'pool-grow' and others that have the "--disk-list" argument.
  • Updated the Help text and error responses for qs pool-create.
  • Fixed qs CLI cluster-ring-member-get command to provide better context with the --cluster-ring-member argument.
  • Added: Network Shares and Storage Volumes can now be deleted from the qs CLI using the flag '--delete-child-snaps'. Adding this flag will delete all the child snapshots. If snapshots are used by schedules then the additional '--flags=force' option should be used.


Core Service

  • Added a new QuantaStor Log collection tool with the below new features:
- adds support for uploading via https. 
- the tool will fetch an updated json definitions file if available from the OSNEXUS update servers before gathering logging data. This allows up to date fetching of diagnostics when working with the OSNEXUS support team. 
- The Send Log Report task will now show more detailed status on the log gather scripts progress. 
  • Fixed an issue where DNS entries added in the Web Manager Storage System Modify Dialog were not being reflected in the /etc/resolv.conf nameserver settings file.
  • Fixed an issue with the Web Manager Send Log Report task where the log would fail to upload but the task would return success. The task will now return as failed if the upload or gathering of the logs fails for any reason.
  • Fixed an issue that was blocking https access when the 'qs-util disablehttp' tool was used to turn off http port 80.
  • Updated SNMP MIB.

v4.2.4.004 (May 3rd 2017) DRIVER UPGRADE AVAILABLE REBOOT REQUIRED

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.2.4.

ISO/DVD/USB Boot Install Image

Release Notes

ZFS Driver


Web Manager

  • Fixed an issue where the Web Manager may not refresh as expected on some grid events.

 

v4.2.3.007 (April 21st 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.2.3.

ISO/DVD/USB Boot Install Image

Note: precise media is available here md5

Release Notes

High Availability

  • Added checks on system startup of passive nodes to ensure encrypted devices are available for HA failover to reduce failover time.
  • Fixed: Corrected a behavior where iofencing would sometimes not be released from a cache device that is removed from the Storage Pool. This would cause a device that was removed to still be locked to the old pool.
  • Fixed: Corrected an issue where some disks would not be included in the Storage Pool device list for iofencing for a storage pool during a failover. This would intermittently cause a failover to not succeed.
  • Fixed an issue with the refresh of the site cluster view in the Web manager after a site cluster configuration is removed by a User.

High Availability Fibre Channel Target

  • Fixed: Now uses Standby instead of transitioning mode during failover. This addresses the ALUA failover "flapping" issues which would cause the devices to not come back online without a reboot.
  • Fixed: Optimized the use of issue LIP to limit disturbance to FC fabrics.
  • Fixed closed a small time window where Relative Target Portal group ID for FC ALUA devices was not set early in an HA Failover. This would cause issues where devices would not come back online without a reboot.

Network Shares

  • Fixed: a Network Share Modify will now correctly apply the recordzsise change to Network Shares on ZFS Storage Pools.

Storage Pools

  • Fixed: Encrypted disks are now opened using concurrency to better support large configurations (80-200 disks). This reduces failover and pool startup time time for Encrypted disks by ~30%.

v4.2.2.045 (April 5th 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.2.2.

ISO/DVD/USB Boot Install Image

Note: precise media is available here md5

Release Notes

High Availability

  • Added a better Cluster site overview to the Cluster Resource Management section of the WebUI. Now when a site cluster is selected the central grid view will show all details regarding status for the Site Cluster nodes and services. Previously this information was available in separate tabs in the grid view and not always apparent.
  • Added: The Add Cluster Heartbeat ring Dialog now selects all nodes in the selectd Site Cluster by default reducing the number of clicks to create additional site cluster heartbeat rings.
  • Added the new Restart Site Cluster Services dialog and 'qs site-cluster-restart-services' CLI command that allows for Administrators to restart the heartbeat ring and site cluster service on a chosen node.
  • Fixed an issue where a Site Cluster would remain in a Warning state after the heartbeat rings and nodes were brought back to a Healthy state. It will now report a Healthy state as expected.
  • Fixed: Highly Available Storage Pools now add a protection lock on pool Import to ensure that they are not re-imported if they had previously failed to export on an automatic or manually initiated failover. Previously this check only occurred on pool export.


Network Shares

  • Added a check to Network Share Delete to ensure that any Network Share Aliases/Subshares are removed before the parent Network Share can be removed.
  • Fixed: Network Share Aliases now report a share type of alias. As they are an alias of the parent Network Share, they will now report N/A or '0' for their Logical Used/Physical Used to avoid confusion.
  • Fixed: The Network Share Logical Used and Physical Used reporting in the WebUI now matches the same precision with less rounding as the 'qs share-list' CLI output.
  • Fixed: Changes to the NFS exports for deletion or disabling a Network Share object now use a safe reload method for updating the NFS exports table. The create Network Share and Create Network Share Snapshot functions have been using this reload function for sometime.
  • Fixed an issue where subshare/aliases selected for removal in the MultiDelete Network Share Dialog would sometimes fail to be removed.
  • Fixed an issue where a newly created local clone of a Network Share would inherit the mountpoint property of the source Network Share. Previously this could lead to the source Network Share being taken offline if the clone share is disabled or removed.
  • Fixed an issue where disabling or deleting a Network Share Alias could unmount the Parent Network Share.
  • Fixed: Lazy Deleted Network Shares will now correctly be cleaned up on system boot or the next Storage Pool discovery cycle.


Storage Pools

  • Added new 'Hardware' Column to the disk selection section of the Storage Pool Create Dialog that provides a way to sort and select the disks based on disk location.
  • Fixed an issue where Growing A ZFS Storage Pool was not retaining enclosure level redundancy as expected.
  • Fixed an issue where the Snapshot Physical used capacity would incorrectly appear in the other category in the Storage Pool Dashboard.
  • Fixed an issue with pool import on disks with multipath devices.


Storage Volumes

  • Updated the Storage Volume Group icon with a new icon that provides a clearer difference between Storage Volumes and Volume Groups in the Storage Volume tree view.

Scale-out Block and Object (Ceph)

  • New icons used for Ceph RBD Storage Volumes.
  • Fixed an issue with creating a Ceph Scale-out Object Storage Pool Group.
  • Fixed an issue where OSD's could sometimes not start after reboot for Ceph cluster nodes on the Trusty Platform.

Web Manager

  • New Workflow Manager with easy workflows for common initial setup tasks. This replaces the previous System Checklist.
  • New Workflow Manager splash screen when logging into the Web Manager for Migration Edition. This new window present common initial tasks for the Migration Edition such opening/starting the encrypted pool, viewing the share mount commands, shutting down the storage appliance and other common tasks.


CLI

  • Added a validation check to ensure correct iQN formatting to the 'qs host-initiator-add' command.
  • Changed Link state column in the 'qs target-port-list' to show Link Up/Link Down instead of 'Normal'. Verbose output for the 'qs target-port-list' and 'qs target-port-get' commands show Link up/Link Down instead of 'Normal'. XML output will continue to report a enum of '0' or '1' as previously estabilished.


Core Service

  • Fixed the dependencies for the qstorservice so that the samba-client package is suggested and not a hard dependency. This is required top allow the upcoming precise to trusty platform upgrade path.

v4.2.1.018 (March 3rd 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.2.1.

ISO/DVD/USB Boot Install Image

Note: precise media is available here md5

Release Notes

Drivers

High Availability

  • Fixed: During a Manual Storage Pool Failover operation, the failover will now continue if the original owner of the Pool is unresponsive or unable to export the pool. This is now equivalent to using the force flag in the Execute Storage Pool Failover Dialog, which is now checked by default.

Network Shares

  • Added support for 256K, 512K and 1024K Record Sizes in Network Shares.
  • Fixed: New Network Share Namespaces are browseable and public by default.
  • Fixed an issue with renaming Network Shares that contain special characters such as $.
  • Fixed: a check has been added to ensure a Network Share is not renamed when it is part of a existing namespace as this can lead to unexpected behavior. If you wish to rename a share, please remove it from the namespace configuration, rename it and add it back.
  • Fixed an issue with the Modify NFS Client Access dialog under the The Network Share> NFS Client Access tab so that the Correct network Share is automatically selected and the rule to be modified can be selected from the drop down menu.

Remote Replication and Snapshots

  • Fixed: Network Share Subshares and Aliases are now correctly filtered from selection as a remote replication or snapshot source.
  • Fixed an issue with Replication of Shares that include a $ in the name.

Storage Pools

  • Added: the 'qs pool-create' argument '--disk-list' now supports specifying [n] number of disks or [*] to use all available disks when creating the Storage Pool.
  • Fixed: Updated Storage Pool Create, Modify, Grow and other Dialogs to be much more elastic.
  • Fixed: Storage Pool Modify, Grow and other dialogs now include more useful details displayed regarding the pool RAID type, RAID set size and other properties.
  • Fixed: Operations on Encrypted Storage Pools that require access to the Encryption key will now Fail with a clear error message prompting for the Pool to be opened with the Passphrase so that the operation can be performed.
  • Fixed a few small items that would cause the Storage Pool Dashboard to not display when selecting a different Storage Pool.
  • Fixed an issue where the wrong device path location was being used for ZFS Storage Pools when adding/removing cache devices and spares.

Storage Volumes

  • Added support for 256K, 512K and 1024K Record Sizes in Storage Volumes.
  • Adds new Storage Volume Dashboard in the Storage Volume section of the WebUI. The Storage Volume Dashboard provides a detailed view of the Logical and Physical Used capacity.
  • Fixed: The Storage Volume Modify Advanced Settings Dialog now correctly shows the Block Size that was chosen when the Storage Volume was Created. Previously this information was only available via the Properties view.

Scale-Out File Storage (Gluster)

  • Added a health check for the Selected Gluster Peers before a Gluster Volume Create, Modify or Grow operations can be executed.
  • Fixed: Gluster Volumes now correctly with type gvol in 'qs share-list' output.
  • Fixed: Gluster Volumes now include a Logical Used attribute to show the logically used capacity before mirroring or erasure coding.
  • Fixed: Storage Pool type now shows N/A for Gluster Shares as there is no direct mapping to the underlying pool for this Share type.

Hardware Enclosures and Controllers

  • Fixed an issue where Write Caching was shown as enabled for a RAID unit when the RAID controller BBU was failed or not present and the RAID controller was defaulting to Write Through mode.
  • Fixed an Issue where the default enclosure layout view was not being selected on newly added Enclosures.

Web Manager

  • Fixed an issue in the WebUI where new items added to a tree view would not show up until a discovery cycle or Browser reload has occurred.
  • Fixed an issue where Virtual Interfaces could not be created from the WebUI if the gateway field was empty.

Core Service

  • Added: Enterprise License keys now support License Capacity Passthrough when using LUNs presented from QuantaStor Backend Storage Appliances.
  • Updated API and CLI Documentation for the 4.1 and newer releases.
  • Fixed an issue where UEFI installs would incorrectly show the Base OS grub splash screen settings instead of those for QuantaStor.
  • Fixed an issue that was preventing the hourly automatic management database backups from occurring in some scenarios.

v4.2.0.375 (Feb 17th 2017)

Upgrade Instructions

Click here for instructions on upgrading to QuantaStor v4.2.0.

ISO/DVD/USB Boot Install Image

Note: precise media is available here md5

Release Notes

Network Shares

  • Added support for the '$' Character in Network Share names to provide support for Windows Client to automatically hide these Network Shares from Browsing.
  • Added the advanced recordsize option for Network Shares created on ZFS Storage Pools.
  • Added support to Network Shares for presenting a Secondary path (Alias) and/or Sub-folder via CIFS and NFS.
  • Fixed: Network Share Snapshots inherit the parent shares Security and access list settings.

Cloud Containers

  • Added a new One-to-One Cloud Container that uses S3FS to provide a direct Object mapping for every file written to the Cloud Container Network Share.
  • Added support for custom S3 endpoints.
  • Added new qs CLI commands to allow for management of Cloud Provider Locations, Cloud Providers, and Cloud Provider Credentials.
  • Fixed an issue where the S3/Swift bucket at the Cloud Provider would not be removed during a cloud container delete.
  • Fixed: Cloud Containers now report a Type of 'cloud' in their share list properties.
  • QuantaStor now uses awscli for all internal S3 endpoint management.

Storage Volumes

  • Added additional Columns and Properties to the Storage Volume Section of the WebUI to better show the PhysicalUsed capacity(after compression) on disk, Logical Used capacity(what the client has allocated) and child Snapshot Physical used capacity.
  • Added the qs volume-create-passthru command to allow for passthrough of Raw Storage devices such as NVMe disks as Storage Volumes.

Hardware Enclosures and Controllers

  • Added new Custom Chassis Tag for Hardware Disk Enclosures. This allows for custom names for the Disk Enclosures to match any real world location/naming scheme used in your orgination. If the same Custom Tag is used on multiple enclosures, QuantaStor will refer to them as the same enclosure., this is helpful for some Vendor enclusres that have a SAS Expander Backplane in the front and Back of their JBOD chassis that would normally appear as seperate enclosures.
  • Added further enhancements to the Hardware unit to Physical disk correlation.
  • Enhanced the iSCSI Software Adapter Create Dialog.
  • Fixed: the iSCSI SW Adapter now logins to it's remote targets much faster.
  • Fixed an issue that could prevent the Disk Locator light function from working on some Hardware Disk Enclosures.

Storage Pool and Disk Management

  • Added Hardware Disk Correlation in the Physical Disk view of the WebUI.
  • ZFS is now the default Storage pool type for 'qs pool-create' if a pool type is not specified.
  • Fixed: ZFS Storage pools comprised of Physical Disks which are Hardware RAID units, will now show a Combined RAID level property of (HWRAID+ZFSRAID). For instance, if underlying Hardware RAID 6 is used alongside ZFS RAID 0 the Value would report as (RAID6+0) or if HW RAID10 with ZFS RAIDZ2(6) the result would be (RAID10+6).
  • Fixed an issue that was preventing growing a Storage Pool if a Remote Replication was running for a Storage Volume/Network Share on that pool.
  • Fixed an issue where the suggested RAID level for a chosen number of disks would be incorrect.
  • Fixed an issue where multipath disks could sometimes appear as dm-name-mpathN device identifier instead of the always unique dm-UUID device identifier.
  • Fixed an issue where the physical disk multipath flag was not inheriting to encrypted device objects. This would result in a warning flag appearing on the device in the WebUI and Cli properties.
  • Fixed an issue where Storage Pools created without multipath device id's would not automatically import on boot up once multipathing is enabled for the disk devices and the system rebooted.

High Availability

  • Fixed an issue where ZFS Storage pool imports could take a much longer time than expected to import during an HA Pool Failover.
  • Fixed an issue that could sometimes occur after a QuantaStor HA node is upgraded and a Storage Pool Failover occurs where the Network Share user and group access list information could be removed.
  • Fixed: the FC-ALUA standby path devices will correctly appear on the passive node after a HA Storage Pool has been taken over by a node filling the active role. This fixes an issue introduced in the 4.1.5 release.
  • Fixed an issue with HA failover that could sometimes occur if the designated grid port was not available. Now the HA nodes try communicating via the Heartbeat ring interfaces if the normal grid communication port is unavailable.

Disk Encryption / Security

  • Added support for custom Encrypted Storage Pool key Passphrases. This allows for workflows where the Encrypted Storage Pool remains locked for access on bootup unless a Admin starts the storage Pool and enters the Passphrase. The Passphrase can be changed if needed from the Modify Storage Pool dialog advanced options.
  • Fixed an issue that would cause the DoD shred option to fail on Storage Pool with Encrypted disks.
  • Fixed: Encrypted Disk devices formatted using the Format Disk tool will now properly close out the dm-enc-* device releasing the underlying physical disk device for use.
  • Fixed: the 'qs-util crypttabrepair' utility will now try all available encryption keys instead of defaulting to the enc-scsi-*.key file that matches the enc-scsi-* device name.
  • Various fixes for Encrypted Storage Pool management.

Web Manager

  • Added a search bar to the tree view in various sections to allow for faster navigation.
  • Added New Dashboard to the Ceph Scale-out section in the WebUI that shows a more detailed picture of how the physical storage is being used.
  • Added New Dashboard to the Storage pool section in the WebUI that shows a more detailed picture of how the physical storage is being used.
  • Added support for creating custom Cloud Provider and Cloud Provider Locations(endpoints) in the WebUI.

User Management

  • QuantaStor now allows for custom UID/GID settings for Local QuantaStor users.
  • Added groups to Local user management in QuantaStor web interface. This includes managing the local POSIX group and GID.

Remote Replication and Snapshots

  • Fixed: Large and long running replication transfers in the same schedule with other pending replications could result in a serialization lock error causing the pending replication tasks to fail.
  • Fixed an issue where Manually triggering a Snapshot schedule could sometimes result in a silent failure.

Ceph Scale-out Block and Object

  • Fixed an issue with Ceph Journal device discovery on System Boot.

Core Service

  • Throttled the Storage Pool Low Free Space Alerts which could sometimes occur at 10 minute intervals to every two months at the Warning level, monthly at Alert level and weekly at Critical level.
  • Fixed an issue where the 'samba4-install' script could not connect to the update servers that contained the samba4 update packages.
  • It is now possible to use the samba4-install script on precise platforms to upgrade from Samba 3.x to Samba 4.x without needing to leave the AD domain to perform the upgrade.
  • Added new 'qs grid-send-supportlogs' and improved Send Support Logs dialog to allow customers to easily send logs to the OSNEXUS support team from multiple nodes in the grid.
  • Additional Grid performance and service improvements.

SNMP

  • Updated SNMP MIB for 4.2

VSS

  • Updated VSS Provider.

v4.1.6.896 (Feb 6th 2017)

Release Notes

Install Media

  • Fixed an issue with the package update server list file that was preventing customers from performing future upgrades who installed from the 4.1.5 ISO media.

Web Server

  • Fixed an issue that caused the webUI to be unavailable on systems where the http port was disabled with the 'qs-util disablehttp' command. Note: disabling the http port 80 will block the dashboard view from other systems, this will be addressed in a future release.

v4.1.5.894 (Jan 18th 2017)

Release Notes

Network Shares

  • Added descriptive text to Network Share Users Access tab Search field. Added example text to tooltip.
  • Fixed an issue that prevented wildcard searches for users.

Hardware Enclosures and Controllers

  • Added support for Cisco branded SAS HBA's
  • Fixed an issue where the Enclosure View could appear blank.
  • Various small fixes for the iSCSI Software Adapter login/logout dialogs.
  • Fixed a rare issue where the first unit created on an LSI RAID Controller may not appear in the WebUI.

Fibre Channel Target

  • Fixed an issue where a LIP would sometimes not be issued on the target FC ports during add/remove Host access for Storage Volumes.

High Availability Failover

  • Added a faster failover check so that a secondary node can more quickly take ownership of the Storage Pool, Storage Volumes and Network Shares for instances where a active node is powered off or loses all network connectivity to its network switch and standby nodes.
  • Added for FC ALUA paths now report standby status instead of unavailable for the secondary standby node. This corrects an issue that would cause some clients to report dead/failed paths.
  • Added for FC ALUA a check to issue a LIP after failover of the Storage Pool on the Standby node so that the standby paths are redicovered.
  • Added for FC ALUA an issue LIP for when a secondary node comes online from a poweroff or reboot state and goes into standby status.
  • Fixed an issue where some third party FC SAN arrays would not respond to a SCSI Persistant reservation request for full status including keys and reservations. qs-iofence now requests these items individually to support these FC array models.

Storage Pools

  • Added checks in the Create Storage Pool Dialog to detect the number of available disks on a system and provide suggested RAID levels at the top of the RAID selection list. For Example, this will ensure RAID60 is listed before RAID6.
  • Added checks in the Create Storage Pool Dialog to prefer for RAID+Striping Levels and remove Single RAID levels based on the number of drives in the system. This is to ensure best performance and capacity options are chosen during pool creation and discourage non-best practice extremely large single RAID Level, such as a twenty drive RAID5 for instance.
  • Added: Default compression to lz4 on ZFS storage pool create, this applies to all editions.
  • Added: When clicking on the Create Storage pool ribbon button, the first system selected is now a system that has available disks.
  • Fixed: When no free disks are available to create a disk, the options in the pool create dialog are now greyed out.
  • Fixed: enabled storage pool compression support for Community Edition licenses.

Core Service

  • Added: the qs_checkservice will now log to the /var/log/qs_checkservice.log file for any warnings or errors instead of issuing a mail.
  • Fixed an issue where the new qs_restd service was not being monitored correctly by the qs_checkservice.
  • Fixed: Corrected an issue with Object name caching, this corrects an error that could sometimes occur after deleting and then recreating a snapshot, or storage pool with the same name.

SNMP

  • There is a new SNMP MIB available with this release. You can use qs-util snmpmib to review.
  • Fixed an issue where an SNMP Walk would return no objects.
  • Fixed an issue where the snmpagent was unable to start on 12.04 precise platforms.

Security

  • Fixed: Addressed SSL concern CVE-2016-2183 (SWEET32) with updated qsciphers file to remove DES and 3DES ciphers and disabled tomcat web port 8443.