oc-tmueller · Nov 3, 2026 · Nov 3, 2026 · Nov 3, 2026 · Nov 3, 2026 · Nov 3, 2026
@@ -154,7 +154,7 @@ Four bits of bookkeeping remain:
 | Product | Versions (folder) | Notes |
 |---------|-------------------|-------|
 | main | — | ROOT landing component (versionless) |
-| server | 11.0, 10.16 | no 11.0 branch upstream yet; master is the 11.0 line and is `latest` |
+| server | 11.1, 11.0, 10.16 | 11.1 is `latest`, copied from 11.0 (never imported); 11.0 was imported from master |
 | ocis | 8.3 (dev), 8.2, 8.1, 8.0, 7.3 | master→8.3 (prerelease); 8.2 branch is `latest` |
 | webui | — | single rolling component (versionless) |
 | desktop | 7.2 (dev), 7.1, 6.0, 5.3 | master→7.2 (prerelease); 7.1 branch is `latest` |

@@ -5,6 +5,7 @@
 :description: Dear ownCloud Classic administrator, find below the changes and known issues in ownCloud Classic that need your attention.
 :page-aliases: {latest-server-version}@server:admin_manual:whats_new_admin.adoc, \
 {latest-server-version}@server:ROOT:server_release_notes.adoc, \
+11.0@server:admin_manual:whats_new_admin.adoc, 11.0@server:ROOT:server_release_notes.adoc, \
 next@docs::server_release_notes.adoc, next@docs_main::server_release_notes.adoc
 
 :server-10_2-avatar-change-url: https://github.com/owncloud/core/issues/35311
@@ -17,6 +18,18 @@ next@docs::server_release_notes.adoc, next@docs_main::server_release_notes.adoc
 toc::[]
 
 
+== Changes in 11.1.0
+
+Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 11.1.0 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.
+
+[discrete]
+=== Changes
+
+* *Local accounts are temporarily locked after repeated failed logins*: https://github.com/owncloud/core/pull/41805[#41805], https://github.com/owncloud/core/pull/41936[#41936] +
+The lockout is enabled by default: after 5 failed password attempts an account of the built-in user backend is locked for 10 minutes. It is configured with the `account_lockout.*` keys in `config.php`, and `occ user:unlock` lifts a lockout early. See xref:11.1@server:admin_manual:configuration/server/security/account_lockout.adoc[Account Lockout] for details.
+* *The signature of every installed app package is verified*: https://github.com/owncloud/core/pull/41955[#41955] +
+Where code signing is enforced, an app without a signature is only installed or updated when it is listed in `integrity.ignore.missing.app.signature`. An app archive must contain exactly one app folder, named after the app id in its `info.xml`.
+
 == Changes in 11.0.1
 
 Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 11.0.1 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.
@@ -94,6 +107,16 @@ Files whose names end in extensions such as `.jpg`, `.png`, `.svg` or `.json` co
 * Reject non-numeric avatar crop coordinates and fix the avatar cropper: https://github.com/owncloud/core/issues/41723[#41723]
 * Add missing space to mail footer signature delimiter: https://github.com/owncloud/core/issues/41364[#41364]
 
+== Changes in 10.16.7
+
+Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 10.16.7 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.
+
+[discrete]
+=== Changes
+
+* *The signature of every installed app package is verified*: https://github.com/owncloud/core/pull/41959[#41959] +
+Where code signing is enforced, an app without a signature is only installed or updated when it is listed in `integrity.ignore.missing.app.signature`. An app archive must contain exactly one app folder, named after the app id in its `info.xml`.
+
 == Changes in 10.16.6
 
 Dear ownCloud administrator, find below the changes and known issues in ownCloud Classic 10.16.6 that need your attention. You can also read the {oc-changelog-url}[full ownCloud Classic changelog] for further details on what has changed.

@@ -8,7 +8,7 @@
 // the image version documented on this branch. this is intentionally a literal
 // and not an attribute, because the global -version attributes track the latest
 // release of the product and not this branch.
-:docker-image-version: 10.16.6
+:docker-image-version: 10.16.7
 
 == Introduction
 

@@ -1,4 +1,4 @@
-OWNCLOUD_IMAGE={latest-server-download-version}
+OWNCLOUD_IMAGE={docker-image-version}
 OWNCLOUD_DOMAIN=localhost
 OWNCLOUD_TRUSTED_DOMAINS=localhost
 OWNCLOUD_OVERWRITE_CLI_URL=http://localhost

@@ -1,6 +1,7 @@
 = Installing with Docker
 :toc: right
 :description: ownCloud can be installed using the official ownCloud Docker image.
+:docker-image-version: 11.0.1
 :page-aliases: enterprise/installation/install.adoc, \
 installation/index.adoc, \
 installation/source_installation.adoc, \
@@ -64,10 +65,10 @@ For testing purposes or a quick hands-on to get familiar with the look and feel,
 
 [source,docker,subs="attributes+"]
 ----
-docker run --rm --name oc-eval -d -p{std-port-http}:{std-port-http} owncloud/server:{latest-server-download-version}
+docker run --rm --name oc-eval -d -p{std-port-http}:{std-port-http} owncloud/server:{docker-image-version}
 ----
 
-This starts a docker container with the name "oc-eval" in the background (option `-d`). `owncloud/server:{latest-server-download-version}` is the docker image downloaded from Docker Hub. Always name an explicit version tag, see the note on the `OWNCLOUD_IMAGE` setting below. If you don't start the container with option `-d`, the logs will be displayed in the shell. If you are running it in the background as in the example above, you can display the logs with the command:
+This starts a docker container with the name "oc-eval" in the background (option `-d`). `owncloud/server:{docker-image-version}` is the docker image downloaded from Docker Hub. Always name an explicit version tag, see the note on the `OWNCLOUD_IMAGE` setting below. If you don't start the container with option `-d`, the logs will be displayed in the shell. If you are running it in the background as in the example above, you can display the logs with the command:
 
 [source,docker]
 ----
@@ -156,7 +157,7 @@ Only a few settings are required, these are:
 | `OWNCLOUD_IMAGE`
 | The ownCloud version. +
 Always use an explicit version, never `latest`.
-a| `{latest-server-download-version}`
+a| `{docker-image-version}`
 
 | `OWNCLOUD_DOMAIN` *^1^*
 a| Only for use with a single ownCloud domain +
@@ -205,7 +206,7 @@ a| xref:{config-sample}#override-cli-url[OWNCLOUD_OVERWRITE_CLI_URL]
 [NOTE]
 ====
 * `OWNCLOUD_IMAGE` +
-Pin this to a full version like `{latest-server-download-version}`. Do not use the `latest` tag: it does not track the newest ownCloud Classic release, and there are no rolling major or minor tags either. Using an explicit version also means you decide when an upgrade happens, rather than a container restart deciding it for you.
+Pin this to a full version like `{docker-image-version}`. Do not use the `latest` tag: it does not track the newest ownCloud Classic release, and there are no rolling major or minor tags either. Using an explicit version also means you decide when an upgrade happens, rather than a container restart deciding it for you.
 
 * `ADMIN_USERNAME` and `ADMIN_PASSWORD` +
 The values will not change between deploys even if you change them in the `.env` file. +

@@ -34,8 +34,8 @@ a| image::public-link/public-link-settings-file.png[Assign file permissions,widt
 --
 ** The ownCloud Enterprise Edition **and**
 ** a Collabora Online Document Server **and**
-** a configured xref:{current-server-version}@server:admin_manual:enterprise/collaboration/collabora_secure_view.adoc[Collabora Online App] (ownCloud's Collabora Online / Richdocuments App) **and**
-** xref:{current-server-version}@server:admin_manual:enterprise/collaboration/collabora_secure_view.adoc#configure-owncloud-for-collabora-online-secure-view[Secure View] has been enabled and configured by your administrator
+** a configured xref:admin_manual:enterprise/collaboration/collabora_secure_view.adoc[Collabora Online App] (ownCloud's Collabora Online / Richdocuments App) **and**
+** xref:admin_manual:enterprise/collaboration/collabora_secure_view.adoc#configure-owncloud-for-collabora-online-secure-view[Secure View] has been enabled and configured by your administrator
 +
 NOTE: Additional permission items may be available for files depending on the administrator's secure view configuration.
 --

@@ -0,0 +1,16 @@
+name: server
+title: ownCloud Server
+version: '11.1'
+start_page: ROOT:index.adoc
+nav:
+- modules/ROOT/partials/nav.adoc
+
+asciidoc:
+  attributes:
+    latest-server-version: {page-component-version}   # do not change, this is the value of the version key
+    previous-server-version: {page-component-version} # do not change, this is the value of the version key
+    current-server-version: {page-component-version}  # do not change, this is the value of the version key
+    minimum-php-printed: '8.1.0'
+    recommended-php-version: '8.1' # note: admin docs
+    format: 'html' # this attribute is a necessary legacy
+    config-sample: configuration/server/config_sample_php_parameters.adoc
@@ -0,0 +1,3 @@
+= Introduction to ownCloud Classic
+
+Welcome to the ownCloud Classic documentation. These documents provide an xref:admin_manual:index.adoc[admin guide] with information for installation, configuration and administrative tasks as well as documentation for xref:developer_manual:index.adoc[developers]. An xref:classic_ui:index.adoc[ownCloud User Manual] for the server is provided in the web documentation.
@@ -0,0 +1,4 @@
+* xref:index.adoc[Introduction]
+include::admin_manual:partial$nav.adoc[]
+include::developer_manual:partial$nav.adoc[]
+include::classic_ui:partial$nav.adoc[]
@@ -0,0 +1,152 @@
+# This an example of a config file:
+
+# See slapd.conf(5)
+
+# Global Directives:
+
+# Schema and objectClass definitions
+include         /etc/ldap/schema/core.schema
+include         /etc/ldap/schema/cosine.schema
+include         /etc/ldap/schema/nis.schema
+include         /etc/ldap/schema/inetorgperson.schema
+include 	/etc/ldap/schema/misc.schema
+
+# Where the pid file is put. The init.d script
+# will not stop the server if you change this.
+pidfile         /var/run/slapd/slapd.pid
+
+# List of arguments that were passed to the server
+argsfile        /var/run/slapd/slapd.args
+
+# Read slapd.conf(5) for possible values
+# Change loglevel to "any" if you want to see everything.
+loglevel        none
+
+# Where the dynamically loaded modules are stored
+modulepath      /usr/lib/ldap
+
+# Here are the recommended modules:
+
+# module for meta-database
+moduleload back_meta.la
+
+# module for the target ldap-server
+moduleload	back_ldap.la
+
+# module for your local database
+moduleload	back_hdb.la
+
+# module for rewriting attributes
+moduleload	rwm
+
+# caching module
+moduleload	pcache.la
+
+# module to enable memberof in ldap
+moduleload memberof.la
+
+# The maximum number of entries that is returned for a search operation
+sizelimit 500
+
+# The tool-threads parameter sets the actual amount of cpu's that is used
+# for indexing.
+tool-threads 1
+
+# If you want to save time and don't want to list all the refferals, set "yes"
+norefs  yes
+
+# Same as above
+chase-referrals no
+
+# See slapd-meta
+
+# database type, for multiple ADS "meta" is required
+database	meta
+
+# now we create a local ldap tree
+# in our tree we put the multiple ADS on different branches
+# we need a suffix, an admin, and a password
+suffix          "dc=owncloud,dc=com"
+rootdn		"cn=Administrator,cn=Users,dc=example,dc=com"
+rootpw "Password"
+
+# now we specify our ADs
+# First-AD
+# uri <protocol>://[<host>]/<naming context>
+uri             "ldap://first.ad.com:389/
+cn=users,dc=first,dc=example,dc=com"
+
+# here we need to set the virtual name to the real name
+# the virtual name is a branch in our new created ldap tree
+# suffixmassage <virtual naming context> <real naming context>
+suffixmassage   "cn=users,dc=first,dc=example,dc=com" "cn=users,dc=first,dc=ad,dc=com"
+
+# authentication parameters
+idassert-bind	bindmethod=simple
+		binddn="cn=user01,cn=users,dc=first,dc=owncloud,dc=com"
+credentials="Password01"
+
+# Second-AD
+uri             "ldaps://second.ad.com:636/cn=users,dc=second,dc=example,dc=com"
+suffixmassage   "cn=users,dc=second,dc=example,dc=com" "cn=users,dc=second,dc=ad,dc=com"
+idassert-bind   bindmethod=simple
+                binddn="cn=user02,cn=users,dc=second,dc=owncloud,dc=com"
+                credentials="Password02"
+
+# Now we start initialising the modules
+# First the rewrite module
+overlay         rwm
+
+# Now we rewrite the attributes
+rwm-map         attribute uid sAMAccountName
+rwm-map         attribute dn distinguishedName
+
+# Next one is optional, if you want memberof, for the groups,
+# you have to load it.
+overlay         memberof
+
+# Now we load the caching module
+overlay pcache
+
+# The directive enables proxy caching
+# See slapo-pcache
+
+# pcache <database> <max_entries> <numattrsets> <entry_limit> <cc_period> 
+# Parameters:
+# 
+# <database> for cached entries. 
+# <max_entries> when reached - cache replacement is invoked
+# <numattrsets> = pcacheAttrset
+# <entry_limit> limit to the number of entries returned 
+# <cc_period> Consistency check time to wait
+pcache hdb 100000 3 1000 100
+
+# pcachePersist { TRUE | FALSE }
+# Write cached results into the database
+# Results remain in database after restart
+pcachePersist TRUE
+
+# Where the database files are physically stored for database #1
+directory       "/var/lib/ldap"
+
+# Caching templates for general search
+
+# pcacheAttrset <index> <attrs...>
+# First set the index number
+# Then set the attribute to cache
+pcacheAttrset   0 1.1
+
+# pcacheTemplate <template_string> <attrset_index> <ttl>
+# First define the query sting to cache
+# Then reference the Attrset
+# Last set the time-to-live
+pcacheTemplate  (&(|(objectClass=))) 0 3600
+pcacheTemplate (objectClass=*) 0 3600
+
+# User Name Field (Advanced Tab)
+pcacheAttrset   1 displayname
+pcacheTemplate (objectClass=*) 1 3600
+
+# Group Field
+pcacheAttrset   2 memberOf
+pcacheTemplate (objectClass=*) 2 3600
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		= Introduction to ownCloud Classic

		Welcome to the ownCloud Classic documentation. These documents provide an xref:admin_manual:index.adoc[admin guide] with information for installation, configuration and administrative tasks as well as documentation for xref:developer_manual:index.adoc[developers]. An xref:classic_ui:index.adoc[ownCloud User Manual] for the server is provided in the web documentation.