Release Notes for Open-AudIT v3.3.0

Version	Type	Collection	Description
Enterprise	Improvement	Baselines	Move baselines definition into the database. Results are still stored as JSON files on disk due to database size.
Enterprise	Improvement	Baselines	Make Baselines templates look as per other endpoint templates.
Community	Improvement	Groups	Allow for 'normal' /groups/<id>?action=execute URL as per other endpoints.
Professional	Improvement	Database	New menu option. Admin → Database → Schema Compare. Checks the schema of the in-use database against the definition supplied as a file and highlights differences.
Professional	Improvement	All	Add the name of the object to the title bar if we're viewing an execute or read template.
Cloud	Improvement	Tasks	Implement working tasks for all customers for Cloud.
Professional	Improvement	Discoveries	Change the Export Logs icon to avoid a clash with the Export icon implemented for all collections::read templates.
Professional	Improvement	Discoveries	New menu items under Discoveries.
Professional	Improvement	Devices	New menu items under Devices..
Professional	Improvement	Devices	Provide a global default columns retrieval list and default columns show list. Default columns show can be overwritten per user. Allow on the /devices page to show/hide columns and save as the users default columns list.
Professional	Improvement	Devices	Refine the devices collection template to hide/show the sub_resource items. Refine the sub_resource templates and add another for viewing a single sub_resource entry.
Professional	Improvement	Devices	Add task to the device display left side menu.
Enterprise	Improvement	Integrations	Add Last Run to Integrations Collection template.
Community	Improvement	Discoveries	Add sudo password on credentials templates. Use new 'sudo_password' when using ssh_key credentials, if populated. Revise SSH timeouts when using sudo. The old "password" field, on a credentials entry for an SSH Key, was used both for the key itself (if encrypted) and also for the sudo password. This didn't work when they we different (ie, most of the time). If the SSH Key had no password, it worked as expected.
Professional	Improvement	Configuration	Remove oae_password from being used. Set password to '', effectively barring logon (new installs only).
Community	Improvement	Devices	Only allow JPG, PNG and SVG files to be uploaded as device images.
Professional	Bug	Devices	Fix displayed text for Audit My PC link on Linux.
Community	Improvement	LDAP Servers	Add new attribute for ldap_servers - use_auth.
Professional	Improvement	Discoveries	Minor refinements to the discoveries_read template.
Professional	Improvement	Discoveries	Add open\|filtered to the discovery scan options with a default of 'y'. This change means Ultrafast, Superfast and Fast discovery scan options now have changed and will detect a device if an open\|filtered response is returned. Previously we used the "filtered" column to check for open\|filtered. This change aligns the discovery scan options with Nmap return strings.
Professional	Bug	Racks	System detail button on rack visualization does not work in Firefox.
Professional	Improvement	Discoveries	Add time for Scanning for Nmap response to discoveries::read template.
Community	Improvement	Discoveries	Remove network address, add open\|filtered to discoveries create and read templates.
Community	Improvement	Devices	Implement code to delete a device from the database when config item set and status changed to deleted.
Community	Improvement	Devices	Add nmis_customer to integrations (and database).
Professional	Improvement	Devices	Un-managed Devices Menu Entry and Edit.
Community	Improvement	Devices	Retrieve more linux user information (home, shell, ssh Keys).
Community	Improvement	All	A large amount of code formatting to adhere to the include code sniffer (see /other/PHPCS_Coding_Standard).
Community	Improvement	Devices	Add deprecation notice to devices::collection template for running a Query based on a Group.
Community	Improvement	Configuration	Allow filters in /configuration (particularly for configuration.name), mostly for the API.
Professional	Improvement	Widgets	Add server.edition to Server Types summary.
Community	Improvement	Devices	Remove the 'default' route (for 0.0.0.0) as it already shows in 'ip r' and it also may have more than one for 0.0.0.0 with different weights, think VPN.
Community	Improvement	Devices	Add Seagate identifier for Manufacturer to linux disks.
Community	Improvement	Discoveries	Don't use the timeout (2m), hard set to 10 seconds for SSH login.
Community	Improvement	All	Sort the meta->data order.
Community	Improvement	Discoveries	Mac Models added.
Community	Improvement	Discoveries	Revise SSH timeouts when using sudo. Only use configured limit for the audit script (otherwise a simple delete file has to timeout). Timeout was defaulting to 10mins, regardless of setting. I had to explicitly set this for each ssh->read command. Discovery using this went from 365 seconds to 165 seconds for a single host.
Community	Improvement	Discoveries	Use self-delete on SSH audit scripts running via discovery.
Community	Improvement	Users	Accept username and password via request headers in m_logon.
Community	Improvement	Configuration	Code added to check_defaults to set default_network_address based on determined server IP, if not already set by the user.
Community	Improvement	All	Massive (code) shake up of how we do Collections (and a bit of READ, too). No more m_collections::collection or My_Model::collection_sql used. Each collection now responsible for it's own items. Every model has a collection function that takes either a user or response. We can now call each for either a straight list of items the user can see or a full response with column list, exclusions, et al as per the API.
Community	Improvement	Users	Remove nmis user from default user list.
Community	Bug	Discoveries	Use correct argument order in explode function for UUID retrieval via SSH.
Community	Improvement	Discoveries	New discovery routine using the queue. We now have a "discovery queue". Each IP is scanned NOT by discover_subnet.vbs\|\|sh, now it's directly in PHP. We have effectively deprecated the discover_subnet scripts as at 3.3.0. We create a new entry per IP in a queue and loop over those, with a default number of spawned processes set to 20 (configurable). Discovery times have again sped up by a large amount and if your network and Open-AudIT server allow it, you can increase the default queue limit and gain even more.
Community	Bug	Discoveries	For service items, include the 'port' in the match. We were matching on name + type only, which failed when we have multiple websites, same names, different ports (80 + 443).
Community	Improvement	Discoveries	Remove 'manufacturer' from discover_subnet.sh as we don't use it and when it contains an ampersand, it seems to fail validations - even if we enclose it in CDATA.
Community	Improvement	Devices	Automatically filter any devices without oae_manage = 'y' when requesting from Enterprise.
Community	Bug	Discoveries	Fix bug in audit_linux.sh relating to Docker machine detection (thanks David).
Community	Improvement	Discoveries	Add config option called match_ip_no_data. If we discover a device and that IP is already in the database AND we have no audit data about that device, assuming it is the same device, do not create another (usually duplicate) device.