-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Thu, 21 Jan 2010 14:22:38 +0100 Source: debian-edu-config Binary: debian-edu-config Architecture: source all Version: 1.434 Distribution: unstable Urgency: low Maintainer: Debian Edu Developers <debian-edu@lists.debian.org> Changed-By: Petter Reinholdtsen <pere@debian.org> Description: debian-edu-config - Configuration files for Skolelinux systems Changes: debian-edu-config (1.434) unstable; urgency=low . [ Petter Reinholdtsen ] * Adjust ltsp-make-client used to improve LTSP based diskless workstations: - Make sure to make /etc/ldap/ssl/ldap-server-pubkey.pem readable by all users, to get screen unlocking to work (Solves Skolelinux bug #1415). - Make sure to disable gdm in runlevel 4 the same way kdm is disabled, to try to get the gnome option working (Skolelinux bug #1420). - Start cron in runlevel 3, to get shutdown-at-night to work. - Purge munin-node and xfs from chroot. We do not want these network services running, and having them installed confused sitesummary when generating Nagios configuration. * Remove obsolete cfengine rules only affecting sarge and etch installs. * Change lenny cfengine rules to run on lenny and later (aka squeeze). * Adjust lwat cfengine rules to make sure the "sambaPwdLastSet" settings are only inserted when it is missing. * Add new tool wpad-extract making it possible to extract the proxy setting from a WPAD file on the command line. Depend on libjavascript-perl to get it to work. * Add postinst code to correct permissions on ldap-server-pubkey.pem in LTSP chroot and fix skolelinux bug #1415 on upgrades. * Add code in the preinst to remove obsolete conffiles in /etc/nagios/ and /etc/cfengine/. Not removing obsolete files in /etc/bind/ and /etc/ldap/ to avoid breaking those still using bind and slapd config from Etch during upgrades. * Add test to detect incorrect permissions on /etc/resolv.conf. * Make sure LTSP resolv.conf is readable by all also on DVD installs (Solves Skolelinux bug #1416). Fix this bug on upgrades too. * Adjust debian-edu-pxeinstall to improve the PXE installation experience: - Rewrite how a test installation is detected, to make sure it work on both DVD, netinst and PXE installs. - Make sure to preseed ftp to use the same proxy as http. - Make sure to fetch proxy settings from /etc/environment if they are set there. - Make sure to only create thin client and diskless LTSP options when the main-server is a thin client server. * Speed up the test suite when no Internet is available by using netstat --numeric-hosts when checking if a given port is open, to avoid unneeded DNS lookups. * Use ltsp-arch-debian-edu in ltsp test code to make sure all parts use the same way to figure out the LTSP architecture. * Change ltsp-arch-debian-edu to only run dpkg once. * Do not run snakeoil-on-ice in the LTSP client chroot to avoid error during installation when it is unable to fetch SSL certificate from https://www/. * Provide installation option (kernel argument edu-skip-ltsp-make-client) to skip the step converting LTSP chroot to a combined thin client/diskless workstation chroot (Solves Skolelinux bug #1417). * Add etc/skel/.kde/share/config/kickerrc enabling mediaapplet.desktop for users, to make sure the direct media applet is started. The file was created by logging in and adding the applet to kicker. The list of default applets in kicker is hardcoded in the source, so this is the only non-forking way to add a default applet. The list of applications in share/debian-edu/common/share/apps/kicker/default-apps is overrided. * Run sitesummary client and server parts at first boot, to make sure munin config is configured imediately. * Remove some old cruft from bin/debian-edu-ltsp, and make sure it runs ltsp-update-sshkeys after the ltsp chroot is generated. * Add APT option "Acquire::http::Pipeline-Depth 0;" to make sure package downloading work well througth Squid (partly solves skolelinux bug #1419). * Rewrite how cfengine detect a thin client server environment, to make sure a simple main-server is not mistaken as a thin client server. * Rewrite how cfengine detect a workstation environment, to make sure both kde and gnome environments are detected while not detecting it for a standalone installation. * New testcase for workstations to detect if cfengine fail to update mplayer configuration. * Disable nagios configuration in cfengine. This is now done by sitesummary using preseeding. * Create an empty /etc/nagios3/htpasswd.users to make sure the documenteed htpasswd call can add the nagiosadmin user. * Use wpad-extract in webcache test to verify that the wpad file work. * Make sure everything looking for the wpad.dat file is using the URL http://wpad/wpad.dat. * Provide new tool update-proxy-from-wpad to update /etc/envionment and APT proxy settings using the content of a wpad file. Updates /etc/apt/apt.conf, the file created by debian-installer with proxy information. Use it to update the settings during installation. * Remove obsolete cfengine rule for updating the permissions of /etc/kde3/kioslaverc. This file is no longer created by us. * Make sure debian-edu-pxeinstall is used on main-server installs too, not only on combined main-server+thin-client-server installs. * Remove trailing slash from directory entries in cf.iceweasel, to try to avoid error from cfengine when the directories exist. * Run cfengine three times to recover from bug in cfengine. Try to commit to etcinsvk between each run. Save output from the cfengine run in /var/log/installer/cfengine-debian-edu-*.log for easier debugging. * Make all cfengine files and directories rules use consistent mode= and act= statements. * Make sure mplayer cfengine rule is executed on workstations as well as standalone profiles. * Remove code creating /etc/inittab.real for cfengine to find. It is no longer needed as the udebs use -Dinstallation now. . [ José L. Redrejo Rodríguez ] * Added /var/lib/gdm if it exist to the list of writable dirs for diskless using Gnome. . [ Morten Werner Forsbring ] * Fixed a cfengine-syntaxproblem in cf/cf.dhcpserver. * Changed from using action=create to action=touch in cf/* as this should be a workaround for a bug reported to cfengine upstream (https://cfengine.org/pipermail/help-cfengine/2008-November/004434.html). Checksums-Sha1: 4bfb6d525f07d30a7edc338c5b3d5354c67c19ad 1326 debian-edu-config_1.434.dsc 6b55aa27b168fde1d85847a4ec56a1e38436e7ba 304358 debian-edu-config_1.434.tar.gz 04331c49cfa482d00292c2615e68bba3b1fbe8b8 273578 debian-edu-config_1.434_all.deb Checksums-Sha256: 909172285bce63c125633611f961f70f017be011da1caa97fa19e30225a2883d 1326 debian-edu-config_1.434.dsc 2d1bdcbf2c76e91308741b458cac4cb8b38d508945d5c75c40d2d02c7c432eec 304358 debian-edu-config_1.434.tar.gz b339572ebd04f8cafe27c109e46eb77ff9719574bc3e8684a4f060f61ac31572 273578 debian-edu-config_1.434_all.deb Files: 8ea674594e0a2e3627e3e8ab4febcfd2 1326 misc extra debian-edu-config_1.434.dsc f0a922b282e994c62e09789996dd626d 304358 misc extra debian-edu-config_1.434.tar.gz d4d633239ecbc2d89b0201866f0acd02 273578 misc extra debian-edu-config_1.434_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFLXbDOUHLQNqxYNSARAgrGAJ9Wny/eq2bGoZoU1NDLdle6j1LjPACgj9E6 7Qb3NFputAe6nhiuGTkBLy4= =a2GT -----END PGP SIGNATURE----- Accepted: debian-edu-config_1.434.dsc to main/d/debian-edu-config/debian-edu-config_1.434.dsc debian-edu-config_1.434.tar.gz to main/d/debian-edu-config/debian-edu-config_1.434.tar.gz debian-edu-config_1.434_all.deb to main/d/debian-edu-config/debian-edu-config_1.434_all.deb