Changelog

Release Meridian-2022.1.7

Release 2022.1.7 contains a couple of bug fixes.

The codename for Meridian 2022.1.7 is Ara.

Bug

  • Event / Alarms filtering no longer works (Issue NMS-14542)

  • change or remove how Docker SSH keys are generated (Issue NMS-14643)

  • Graph page doesn’t escape <> in resource labels (Issue NMS-14657)

Story

  • PassiveStatusd (Issue NMS-8567)

  • Provisiond (Issue NMS-8569)

  • Please update the copyright year on the docs page! (Issue NMS-13911)

  • Upgrade dom4j to latest version (Issue NMS-14696)

Task

  • Change OIA name to OpenNMS Plugin API (Issue NMS-14475)

  • Remove footer content from opennms/docs (Issue NMS-14637)

Enhancement

  • Migrate Notification wiki pages into docs (Issue NMS-13584)

Release Meridian-2022.1.6

Release 2022.1.6 contains quite a few bug fixes as well as number of small features.

We have made a number of improvements to the documentation, including reworking the section on events and adding information on configuring SNMP traps and varbinds.

The codename for Meridian 2022.1.6 is Auriga.

Bug

  • show-event-config displays unexpected content after adding new event definitions (Issue NMS-12863)

  • Clearing an alarm brings alarm not found message (Issue NMS-12981)

  • JVM MemoryPool data collection not working (Issue NMS-14041)

  • Scripts invoke sudo even if running as root (Issue NMS-14410)

  • Documentation references invalid docker version for latest horizon version release (Issue NMS-14431)

  • WebMonitor does not track the response time (Issue NMS-14535)

  • Grafana dashboard reports do not run (Issue NMS-14544)

  • Fix docs references to editing org.apache.karaf.features.cfg (Issue NMS-14566)

  • Spring Framework CVE-2022-22950 Remediation (Issue NMS-14568)

Story

  • EventTranslator Daemon Documentation (Issue NMS-8566)

  • Add KPIs for CPU count and memory size to datachoices telemetry (Issue NMS-14482)

Task

  • Document allowed characters in service-names (Issue NMS-14423)

  • JDBCQueryDetector documentation (Issue NMS-14453)

  • JDBStoredProcedureDetector documentation (Issue NMS-14454)

Enhancement

  • Update PG installation documentation to use SCRAM (Issue NMS-13057)

  • Update Events Documentation (Issue NMS-14212)

  • Migrate Trap configuration wiki to docs (Issue NMS-14323)

  • Document SNMP oid varbind pattern matching and varbind expansion to create unique events (Issue NMS-14346)

  • SNMP Interface Poller doc updates (Issue NMS-14412)

  • Update documentation for policy matching (Issue NMS-14528)

  • simplify assembly tarballs (Issue NMS-14572)

Release Meridian-2022.1.5

Release 2022.1.5 contains a bunch of bug fixes, as well as a few enhancements.

The codename for Meridian 2022.1.5 is Crux.

Bug

  • Correct Grammar in Notices Box (Issue NMS-12355)

  • Error responses are not handled correctly when handling ElasticSearch responses (Issue NMS-13785)

  • Link in ERROR log doesn’t exist (Issue NMS-13956)

  • Event/Alarm advanced search not passing search terms (Issue NMS-14161)

  • Heatmap drill down does not show any alarms/outages (Issue NMS-14243)

  • Replace old logo references in some files/reports with the new logo (Issue NMS-14372)

  • runas=root entry in opennms.conf gets duplicated (Issue NMS-14396)

  • Notification with Destination Path and Group, Interval Delay doesnt show (Issue NMS-14403)

  • Kafka Consumer stops commits when overloaded (Issue NMS-14415)

Enhancement

  • event nodeCategoryMembershipChanged should be more verbose (Issue NMS-10634)

  • There should be documentation for the reports (Issue NMS-11810)

  • Authentication related WEB-INF files should also exist in etc-pristine (Issue NMS-13834)

  • Add support for pre-authorization via HTTP header (to be used with pre-authentication) (Issue NMS-14059)

  • upgrade JNA to 5 (Issue NMS-14417)

Release Meridian-2022.1.4

Release 2022.1.4 contains a number of bug fixes, as well as a few enhancements and a ton of documentation updates.

The codename for Meridian 2022.1.4 is Hydra.

Bug

  • [Web] - WebServer Fingerprinting (Issue NMS-13987)

  • Telemetryd does not shut down gracefully (Issue NMS-14003)

  • Users with ROLE_USER face Access Denied when accessing Resource Graphs from Reports Section (Issue NMS-14193)

  • Exception when searching assets (Issue NMS-14240)

  • Rogue opennms-tools/phonebook/pom.xml (Issue NMS-14266)

  • Remove "Commercial Support" ticket lookup from web ui support section (Issue NMS-14280)

  • Circle ci caching OIA issue (Issue NMS-14291)

  • Kafka-Producer Alarm Resync Failing Post Entire Kafka Cluster Outage (Issue NMS-14321)

Enhancement

  • Add a note to remember delete the browsers cache when upgrading OpenNMS (Issue NMS-8504)

  • there is no documentation on the instrumentation log reader (Issue NMS-10393)

  • LoopMonitor & detector (Issue NMS-11042)

  • Document PassiveServiceMonitor (Issue NMS-11052)

  • WmiMonitor (Issue NMS-11065)

  • Migrate External Auth into docs (Issue NMS-13574)

  • Document how to set up SSL with Jetty (Issue NMS-13684)

  • Document how to upgrade OpenNMS (Issue NMS-13692)

  • DCB: Error reporting needs love (Issue NMS-14128)

  • Be able to control label sizes for the stress-metrics command (Issue NMS-14194)

  • Add new KPIs to datachoices telemetry (Issue NMS-14203)

  • Correct errors on Business Service Monitoring docs (Issue NMS-14337)

  • Snmp Link Up does not clear Snmp Link Down (Issue NMS-14378)

Release Meridian-2022.1.3

Release 2022.1.3 contains a number of security dependency updates, plus a bunch of other bug fixes and documentation improvements.

While the dependency changes should not affect how the OpenNMS runtime works, this release contains a larger than usual number of changes to "plumbing" to facilitate these dependency updates. We strongly recommend that you do more than the usual amount of testing before deploying this update to a production environment.

The codename for Meridian 2022.1.3 is Microscopium.

Bug

  • install script fails if an OpenNMS directory contains root-owned lost+found directory (Issue NMS-14032)

  • Provisiond Fails to Start when wrong data is successfully POSTed via REST to hardwareInventory endpoint (Issue NMS-14085)

  • Grafana box renders raw JS when Grafana behind reverse proxy with SSO (Issue NMS-14109)

  • CVE-2022-22965: Spring RCE in Data Bindings (Issue NMS-14134)

  • Minions Trapd Listener Fails to Bind to udp/162 when broker is down (Issue NMS-14148)

  • Fix formatting in alarmd documentation (Issue NMS-14182)

  • Dependabot: update Vaadin to the latest 8.x (Issue NMS-14192)

  • Upgrade groovy-all dependency (Issue NMS-14208)

  • make sure license-maven-plugin is re-enabled in foundation and release branches (Issue NMS-14217)

  • Upgrade jackson-mapper-asl dependency (Issue NMS-14252)

Enhancement

  • Basic upgrade procedure (Issue NMS-13971)

  • Document housekeeping tasks before upgrade (Issue NMS-13972)

  • Cleanup Ticketer docs formatting (Issue NMS-14172)

  • Expand XmlCollector documented parameters (Issue NMS-14256)

  • Restructure Collector docs file path (Issue NMS-14258)

Release Meridian-2022.1.2

Release 2022.1.2 contains bunch of bug fixes and enhancements.

The codename for Meridian 2022.1.2 is Piscis Austrinus.

Bug

  • Documentation for all pollers misses RRD config parameter (Issue NMS-11747)

  • Enlinkd API response extremely slow for some nodes (Issue NMS-13507)

  • Resolve SonarCloud High priority Security Hotspots (Issue NMS-14002)

  • Can’t set capabilities in Minion systemd unit (Issue NMS-14016)

  • Scriptd helpers ignore community setting (Issue NMS-14045)

  • Wrong wiki URL in debian installer (Issue NMS-14053)

  • Build from source documentation needs a minor correction (Issue NMS-14088)

  • Hostname command is missing when running in a container (Issue NMS-14100)

  • Fix for NMS-13887 did not make it to Core (Issue NMS-14117)

  • Update docs for binding ports <1024 (Issue NMS-14162)

Enhancement

  • Switch to using a java e-mail library instead of system mail (Issue NMS-14015)

  • Expand newts converter documentation (Issue NMS-14073)

  • Add TcpDetector documentation (Issue NMS-14074)

  • Misspelling in SystemExecuteMonitor error text (Issue NMS-14091)

  • relicense rancid-api to LGPL, change dependency to match (Issue NMS-14093)

  • clean up JAXB dependencies (Issue NMS-14105)

Release Meridian-2022.1.1

Release 2022.1.1 contains a fix for a regression in graph viewing, plus a fix for permissions on the $OPENNMS_HOME/logs directory.

The codename for Meridian 2022.1.1 is Puppis.

Bug

  • Upgrading opennms ignores RUNAS when setting ownership on logs directory (Issue NMS-14000)

  • OpenNMS points to the wrong URL when trying to generate graphs (Issue NMS-14057)

Release Meridian-2022.1.0

Release 2022.1.0 is the first of the Meridian 2022 series, based on Horizon 29.

The codename for Meridian 2022.1.0 is Monoceros.

Bug

  • opennms user credentials wrongly exposed (Issue NMS-12146)

  • Install script fails when using Azure PostgreSQL Services (Issue NMS-13715)

  • In default installation the ActiveMQ Total Enqueued Messages throw divde error exceptions (Issue NMS-13737)

  • Systemd startup uses legacy SysV init script (Issue NMS-13783)

  • Telemetryd error occurring when testing with hsflowd (Issue NMS-13795)

  • OpenNMS Availability 'Chart' Shouldn’t Include Time Before Connected (Issue NMS-13822)

  • Support → System Report exposes credentials in plain text (Issue NMS-13831)

  • Cross site scripting - Reflected (Issue NMS-13835)

  • TLS: Diffie-Hellman Key Exchange Insufficient DH Group Strength Vulnerability (Issue NMS-13845)

  • Password field with autocomplete enabled (Issue NMS-13847)

  • fix-karaf-setup.sh should honor RUNAS (Issue NMS-13881)

  • Remote RMI is broken in 29.0.x (Issue NMS-13887)

  • Unable to modify node/interface/service metadata through requisition after initial synchronization (Issue NMS-13890)

  • Web UI redirects to http even with base-url set to https (Issue NMS-13901)

  • Minion fails to marshall requisition with JAXB error: Class [org.opennms.netmgt.model.PrimaryTypeAdapter] not found (Issue NMS-13927)

  • Prevent REST API from allowing multiple primary SNMP interfaces on a single node (Issue NMS-13939)

  • Unsynchronized access to service factories in TelemetryServiceRegistryImpl (Issue NMS-13961)

  • Instrument Provisiond Thread Pools (Issue NMS-13969)

  • SNMP Detector configuration page excludes useSnmpProfiles and ttl options (Issue NMS-13997)

  • install script fails if an OpenNMS directory contains root-owned lost+found directory (Issue NMS-14032)

Enhancement

  • Upgrade protobuf-java version (Issue NMS-13889)

  • Releases should document third party libraries and their licenses (Issue NMS-14004)

  • Delete BSM window should name the BSM (Issue NMS-14026)