-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Fri, 06 Jan 2012 10:39:54 +0100 Source: debian-edu-config Binary: debian-edu-config debian-edu-config-gosa-netgroups Architecture: source all Version: 1.447 Distribution: unstable Urgency: low Maintainer: Debian Edu Developers <debian-edu@lists.debian.org> Changed-By: Petter Reinholdtsen <pere@debian.org> Description: debian-edu-config - Configuration files for Skolelinux systems debian-edu-config-gosa-netgroups - netgroups plugin for GOsa² Closes: 570773 650366 654023 654024 654529 Changes: debian-edu-config (1.447) unstable; urgency=low . [ Mike Gabriel ] * Fix of usage check in ldap-add-host-to-netgroup script. * Search Debian Edu code for ldapsearch statements and remove line breaks from DN search results (by piping the output through perl -p0e 's/\n //g'). Several ldapsearch commands had their output already piped through the named Perl expression, but for a few (more recent) scripts this had not been applied yet. Closes: #650366. * Add LTSP client builder script that removes 70-persistent-net.rules from /etc/udev/rules.d. * Call gosa-sync-dns-nfs as postcreate, postremove and postmodify hooks from GOsa² whenever a GOsa² system is touched. * Make the netgroupAccount tab visible for user accounts. . [ Petter Reinholdtsen ] * Add donation link on the start web page. * Change Nagios description on the start web page to reflect the fact that we now set up predefined password for the nagiosadmin user. This calls for updated translations. * Raise trigger point for adding entropy from 100 to 130, and log the new pool size after adding entropy. * Kill entropy gathering background job when cfengine is done, to avoid blocking umount at the end of the installation. * Update cfengine rules for iceweasel to ensure created file /etc/skel/.mozilla/firefox/profiles.ini is readable by everyone and not only the root user. * Fix incorrect package name credited for the divert in update-iceweasel-homepage. * Add cfengine rule to change default start page for iceweasel. For standalone profiles, use http://www.skolelinux.org/, while for all other profiles fetch the URL from LDAP the same way the default welcome page is fetched from LDAP. Make sure to use double quotes and escape : in shellcommands. Restructure how cf.iceweasel is included to set up default page also on standalone profiles. Syslog when the default start page is changed. Make sure everybody can read /etc/iceweasel/browserconfig.properties. * Adjust show-welcome-webpage to make sure first time users on Standalone profiles also get to see a welcoming web page. Also change it to only fetch page URL from LDAP for Networked profiles, to ensure Standalone installations get http://www.skolelinux.org/ also when booted for the first time in a network where the DNS name ldap exist and provide start page information. * Add init.d script iceweasel-ldapconf to update Iceweasel default start page at boot, to make it possible to update the default by rebooting instead of having to reinstall. Only execute it on networked profiles to not change Standalone setups. Make sure init.d/iceweasel-ldapconf do not run on LTSP clients (Closes: #654529). * Check that /opt/ltsp/i386/etc/ldap/ssl/ldap-server-pubkey.pem is readable by everyone, to detect problem reported by Klaus Ade Johnstad. * Make sure the /opt/ltsp/i386/etc/ldap/ssl/ldap-server-pubkey.pem file is readable by everyone when it is copied in place using the fetch-ldap-cert init.d scripts. * Make code checking permissions for /etc/resolv.conf report the current permission when it is wrong. * Add LDAP indexes for zoneName, relativeDomainName and sudoUser to avoid warnings in syslog and speed up LDAP searches. * Increase LDAP server file descriptor limit from 1024 to 32768, to raise the number of clients working out of the box from ~110 to ~5500. * Print something when setting up kerberos, to be able to find the script run in the log. * Log processes using mount points below /target/ from finish-install, to detect leftover processes. Tried to kill them but this seem to kill more than it should. Report an error if there any such processes, while ignoring mount points and paths that can not be opened.. * Move pre-pkgsel code to create localadmin user the debian-edu-install package. Add breaks debian-edu-install (<< 1.521~svn74617) to ensure a new version of the debian-edu-install package is used. * Move pre-pkgsel code to pass root password to the kerberos setup process to the debian-edu-install package. * Fix standalone installation by making sure missing ldap-password and kerberos-password templates are ignored in the finish-install script. * Do not add the localadmin user to the groups audio, video, cdrom, floppy and plugdev, as device access should be handled using policykit these days. * Change mkslapdcert to save the public certificate in /etc/ldap/ssl/ldap-server-pubkey.pem to ensure samba and kerberos find it when they look for it, and removing the need to download it on the main-server at first boot. This fixes the kerberos setup. Also avoid problem when installing Main-Server via PXE on a network with the ldap DNS name defined (Closes: #570773). * To reduce the default home directory footprint for users and reduce the IO strain on the file server when a classroom full of new users log in, reduce the akonadi disk usage by changing the mysql innodb log file size from 64 to 4 MiB. * debian-edu-ltsp-audiodivert: Drop audacity from diverted audio applications as it seem to work with PulseAudio now. Add FIXME to remind us to review the application list regularly. * Add new tool gosa-sync-dns-nfs to update DNS from LDAP and re-export NFS exports when a host is added to DNS and netgroups. * Partly revert NTP change introduced by Mike Gabriel in version 1.446~svn73330. Reintroduce local clock on the main-server to ensure clients can sync with the main-server even when all the machines are disconnected from the Internet. When they are on the Internet, all will sync with pool.ntp.org machines. Add comment in cf.ntp explaining the purpose of the change. * Adjust default PXE menu, lift menu entries higher on the screen to allow all lines to show on the default screen resolution. * Update PXE setup on the Main-Servers first boot, to make sure proxy settings show up in /etc/debian-edu/www/debian-edu-install.dat. * Quiet down sbin/debian-edu-pxeinstall by removing 'set -x'. The script is working well and do not always need debug output. * Avoid editing nsswitch.conf on roaming workstations, as the default setup with sssd should be working fine. * Remove obsolete readahead tuning code in run-at-first-boot. We no longer use a readahead implementation where it is relevant. * Update from Lenny to Squeeze our PXE installation workaround used to ensure our updated udebs are used. * Fix fallback code for setting up roaming workstations to avoid crashing when symlinking our static sssd configuration in place. * Test suite: - Correct DNS lookup test to find ltsp servers at new FQDN. - Extend LDAP server test to verify that search work also before flodding the server with LDAP connections. - Tried to extend the flood test to use use 33000 connections instead of 1200, to test the new limit, but this caused too much load, needed too much memory and extending file-max, so the change was undone. Keeping the test to check 1200 connections, to ensure the server do not have the original limit on 1024 file descriptors. - Make sure to increase /proc/sys/fs/file-max before flodding the LDAP server with connections, to avoid running out. - Extend LDAP server test to report number of connections per client. - Add kerberos test to check for network services kerberos/udp, kpasswd/tcp and kerberos-adm/tcp. - Move common test code from individual test scripts to /usr/share/debian-edu-config/testsuite-lib.sh. - Add DNS test to detect if ldap2zone still send email every hour (BTS #653053). - Add new test reporting the number of FIXMEs in the documentation. - Add new test to verify that etckeeper is installed and active. - Add LTSP tests to verify that the LTSP chroot is NFS exported and working as it should. - Remove xfs testsuite test, as xfs is no longer used by LTSP clients and will be removed from our task list. . [ Holger Levsen ] * www/index.html.en: - add "GOsa²" to all "LDAP administration" strings - mention that GOsa² can also be used to add+edit machines. - move "local services" section in the right menu above "debian-edu" section. - improve grammar. - improve ordering of local services. * www/*.po: - update to reflect changes in english source. - add "GOsa²" to many "LDAP administration" strings. - update german .po file for the "add+edit machines" addition. * www/Makefile: accept translations with 70% translation rate (down from default 80%). . [ Petter Reinholdtsen ] * www/Makefile: Move translation rate limit to a variable to make it easier to change. * www/index.html.en: Convert Debian-edu, debian-edu and variations to Debian Edu to be consistent with the project documentation and the official web pages. . * Translation updates (from before the last rewrite): - Updates for www/zh.po from Andrew Lee (李健秋). . * Translation updates (after the last rewrite): - Updates for www/nb.po from Petter Reinholdtsen. - Updates for www/ca.po from Hector Oron (Closes: #654024). - Updates for www/es.po from Hector Oron (Closes: #654023). - Updates for www/de.po from Jürgen Leibner and Holger Levsen. - Updates for www/it.po from Claudio Carboncini. Checksums-Sha1: 3a7edc31009f1f900953950ac29e023cae9b53c6 1447 debian-edu-config_1.447.dsc 592131794f7aaae601c48cca0b212622a4a6bf70 491585 debian-edu-config_1.447.tar.gz 686a1dbac6ca630e5d65ee35dbda27896eb4828b 379670 debian-edu-config_1.447_all.deb 928574b9546edace7b7f9aa1943f414c05ea397a 105748 debian-edu-config-gosa-netgroups_1.447_all.deb Checksums-Sha256: be317cb2d555ffa3060dbf0125924e1a09ee7a64d4638685c8681eeffe74b844 1447 debian-edu-config_1.447.dsc 518a92df1d8de58bdb006ed9dc03df694df5dafc54b21ebd15a63dd2ec228e0a 491585 debian-edu-config_1.447.tar.gz 7fabc7752aec31251270f1516f13d5901babcfbb3959b29f0ad9b3fbbbad2036 379670 debian-edu-config_1.447_all.deb d40ab202f05f68db05596b038597c4ca33d62c295f61ef7ea4af749f5dc7f95b 105748 debian-edu-config-gosa-netgroups_1.447_all.deb Files: 18d4eb342e748084161623bfc97a94b8 1447 misc extra debian-edu-config_1.447.dsc cdd1470d069438b71113eb9b686e2969 491585 misc extra debian-edu-config_1.447.tar.gz b160f1a39b17fb36863e4685e28dac0f 379670 misc extra debian-edu-config_1.447_all.deb 9d559cefcc07dd82e67d816ce7815e7c 105748 misc extra debian-edu-config-gosa-netgroups_1.447_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iD8DBQFPBseJ20zMSyow1ykRAv1zAKC7+3jrTcK+cKFDXSb5tHzgmbbj5ACgwbrR W6ukGrmH+3bhpZDQfQetRmw= =pGp8 -----END PGP SIGNATURE----- Accepted: debian-edu-config-gosa-netgroups_1.447_all.deb to main/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.447_all.deb debian-edu-config_1.447.dsc to main/d/debian-edu-config/debian-edu-config_1.447.dsc debian-edu-config_1.447.tar.gz to main/d/debian-edu-config/debian-edu-config_1.447.tar.gz debian-edu-config_1.447_all.deb to main/d/debian-edu-config/debian-edu-config_1.447_all.deb
