{"id":77004,"date":"2023-08-24T10:49:51","date_gmt":"2023-08-24T10:49:51","guid":{"rendered":"https:\/\/owncloud.com\/?p=77004"},"modified":"2023-08-24T12:34:31","modified_gmt":"2023-08-24T12:34:31","slug":"owncloud-server-10-13","status":"publish","type":"post","link":"https:\/\/owncloud.com\/de\/blogs\/owncloud-server-10-13\/","title":{"rendered":"ownCloud Server 10.13 released: Kerberos authentication and enforceable 2-Factor-Authentication"},"content":{"rendered":"

We continue to recommend as a first choice a central identity management solution implementing Open ID Connect (OIDC<\/a>) with which you can enforce any type of authentication, including\u00a0passwordless authentication<\/a>.<\/p>\n

Additionally, we have focused on Kerberos Authentication for our Enterprise customers.<\/p>\n

A complete list of changes can be found in the\u00a0ownCloud Server changelog<\/a>\u00a0and more details in the ownCloud\u00a0Release Notes :: ownCloud<\/a><\/p>\n

New Highlights:<\/h2>\n

Enforce Two-Factor Authentication<\/h3>\n

If Two-Factor Authentication is enforced, all users will be required to use an app capable of 2FA. At least one such app is necessary for this feature, otherwise no enforcement will be done. Admins can define special groups that may be excluded from 2FA: Their group members can bypass Two-Factor authentication.\u00a0#40830<\/a><\/p>\n

Kerberos Authentication<\/h3>\n

Enterprise customers now benefit from ownCloud 10.13’s Kerberos support both for login and via delegation in the\u00a0Windows Network Drive<\/a>\u00a0app. For the user, this means less logins, less password entries and a much more efficient workflow: There’s additional single-sign-on options and no need to save usernames and passwords of LDAP users in order to access SMB\/CIFS shares in your on-premises environment.<\/p>\n

This enhancement will already be available in the next version of the WND app (for our Enterprise customers) and an additional Kerberos login app will soon be available in our marketplace. To implement this, we recommend our consulting services. Please contact\u00a0sales@owncloud.com<\/a>\u00a0for an offer.<\/p>\n

Implement App Registry (Open in Web)<\/h3>\n

By using a new option\u00a0Open in...<\/code>\u00a0in the iOS (version 12.0.3+) or Desktop client (version 4.0+) it is now possible to directly open a file in the Office Suite being installed on the ownCloud server.\u00a0(#40843<\/a>) This is a great feature further enhancing and extending our office integrations to the mobile apps!<\/p>\n

Additional Features and Important Fixes:<\/h2>\n

Added occ Command to Remove Obsolete Storages<\/h3>\n

Metadata coming from any storage are kept in ownCloud’s database. Previously, when a storage was removed from ownCloud, its metadata remained. The new occ command allows removing these obsolete metadata, reducing both the amount of space used by the DB as well as improving the performance (there’s simply less entries).\u00a0(#40779<\/a>)<\/p>\n

Update Symfony from 4.4.* to 5.4.*<\/h3>\n

The\u00a0Symfony<\/a>\u00a0PHP framework has been updated to LTS major version 5.4. This also affected a number of apps which required a new release and have been now included in the complete bundle.<\/p>\n

Setup of User Key Encryption no longer available<\/h3>\n

User key encryption has been deprecated in ownCloud core versions later than 10.7. That’s why we removed the command line interface and web UI components that enabled user key encryption. If you are operating an ownCloud installation with user key encryption enabled, please get in contact with\u00a0support@owncloud.com<\/a>\u00a0to plan a migration to master key encryption.\u00a0(encryption#389<\/a>)<\/p>\n

User Key Encryption Is No Longer Auto-Enabled<\/h3>\n

Executing the\u00a0occ command\u00a0encryption:encrypt-all<\/code>\u00a0will no longer auto-enable user key encryption.\u00a0(#40702<\/a>)<\/p>\n

Add Commands to Handle Trusted Servers from the Command Line<\/h3>\n

New occ commands have been added to handle the trusted servers for federation from the command line. These commands will allow the admin to add, list and remove trusted servers.\u00a0(#40796<\/a>)<\/p>\n

Skip\u00a0share_folder<\/code>\u00a0for Guest Users<\/h3>\n

When the\u00a0config.php option\u00a0share_folder<\/code> \u00a0was set, guest users could no longer see their received shares. We now skip the config.php option share_folder<\/code>\u00a0for guest users and default to root.\u00a0(#40864<\/a>)<\/p>\n

Minimum search length will be applied for all shares<\/h3>\n

Remote shares will have the same restrictions as user and group shares. In order for a remote user to show up as a participant in a share (a „sharee“), the search term length must be longer than the minimum configured otherwise only exact matches will be shown.\u00a0(#40885<\/a>)<\/p>\n

Clean up Storage and Database After Failed File Uploads<\/h3>\n

All remaining items of failed uploads will now be removed from storage and database. (#40892<\/a>)<\/p>\n

Setting Open Mode in the Checksum Wrapper<\/h3>\n

The checksum wrapper causes issues when uploading files to some external storages via the desktop client. We are using additional wrappers and the mode wasn\u2019t being detected correctly in some cases. Only if the correct mode was set in the checksum wrapper, ownCloud could decide whether to discard the final checksum or not. Doing so could cause a checksum mismatch. Now the open mode in the checksum wrapper is set explicitly.\u00a0(#40832<\/a>)<\/p>\n

Align to New\u00a0accounts.google.com<\/a>\u00a0Authorization URI<\/h3>\n

Core 10.12.1 brought an update of the google\/apiclient from version 2.12.6 to 2.13.1. However, in version 2.13.0 the\u00a0accounts.google.com<\/a>\u00a0authorization URI has been updated. This change broke old code that uses the method\u00a0setApprovalPrompt('force')<\/code>\u00a0instead of the newer\u00a0setPrompt('consent')<\/code>, as this endpoint does not support the legacy approval prompt parameter. This has been now fixed.\u00a0(#40783<\/a>)<\/p>\n

Automatically Disable Online Updater for Enterprise<\/h3>\n

Online updater is not recommended for Enterprise installations and is now automatically disabled in such cases.\u00a0(#40841<\/a>)<\/p>\n

Rely on Server to Sort the User List<\/h3>\n

Previously, the user list was sorted in the browser. This was causing confusion because the sorting happened without taking into account all the items, so there were some weird effects. There is no sorting in the browser now. The server is expected to return the list of users already sorted, so the browser just needs to show the list.\u00a0(#40840<\/a>)<\/p>\n

Remove the\u00a0add group<\/code>\u00a0button from the dropdowns in the users page<\/h3>\n

The\u00a0add group<\/code>\u00a0button has been removed from the dropdowns because the behavior was confusing. You can still create new groups in the users page by using the\u00a0add group<\/code>\u00a0button in the top left corner of the users page. The dropdowns will only select existing groups, but they won\u2019t add new groups.\u00a0(#40770<\/a>)<\/p>\n

Important: Internet Explorer 11 Deprecation Note<\/h3>\n

Internet Explorer 11 support will be dropped in the next server release.<\/p>\n

Default Minimum Supported Desktop Client Version<\/h3>\n

To ensure clean and reliable operation of the ownCloud platform, it is important to stay up-to-date with the latest releases of the server as well as the clients. To take care of compatibility between the server and desktop clients, the minimum version the server will accept connections from has been raised to version\u00a03.2.1<\/code>.<\/p>\n

While it\u2019s recommended to keep up with later versions, this is the new default value.\u00a0(#40876<\/a>)<\/p>\n

Updated App Versions<\/h2>\n

Find below a list of updated apps in comparison with the 10.12.2 complete bundle. More information on the changes can be found in the respective changelogs on ownCloud Marketplace.<\/p>\n