-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 17 May 2013 20:10:30 +0200 Source: debian-edu-config Binary: debian-edu-config debian-edu-config-gosa-netgroups Architecture: source all Version: 1.704 Distribution: unstable Urgency: low Maintainer: Debian Edu Developers <debian-edu@lists.debian.org> Changed-By: Holger Levsen <holger@debian.org> Description: debian-edu-config - Configuration files for Skolelinux systems debian-edu-config-gosa-netgroups - netgroups plugin for GOsa² Closes: 629054 629055 629367 655274 656296 678931 Changes: debian-edu-config (1.704) unstable; urgency=low . [ Wolfgang Schweer ] * Remove /etc/gosa/desktoprc, as the package gosa-desktop is now configured using debconf preseeding. . [ Holger Levsen ] * debian/control: remove obsolete XS-DM-Upload-Allowed: field. . [ Petter Reinholdtsen ] * Make debian-edu-bless more robust by trying twice to download packages before installing them, in case the network is flaky. Change its default locale from nb_NO.UTF-8 to en_US.UTF-8. * Adjust Iceweasel setup in debian-edu.js to also disable the offline disk cache, and enable memory cache with size adjusted according to the available memory on the machine. * Adjust Iceweasel setup to save X memory by setting MOZ_DISABLE_IMAGE_OPTIMIZE=1 for thin clients in /etc/Xsession.d/06debian-edu-iceweasel-ltsp during login. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn80050 . [ Petter Reinholdtsen ] * Adjust ldap-client testsuite check to accept the new roaming workstation configuration. * Fix typo in error reporting in the taskpkgs testsuite check, and add support for checking the Minimal profile there. * Add new tool/example bless-debian, demonstrating how to transform a Debian machine into a Debian Edu machine. * etc/sssd/sssd-debian-edu.conf: Replace krb5_kdcip with krb5_server based on change done to sssd-generate-config by Wolfgang Schweer. . [ Wolfgang Schweer ] * Add /etc/gosa/desktoprc, needed to configure gosa-desktop with the right URL. . [ Holger Levsen ] * Rename tools/bless-debian to debian-edu-bless. . [ Wolfgang Schweer ] * Remove file pwdchange.desktop, cause there seems to be no simple way to integrate it into the LXDE menu -- besides possible problems, that might occur, if someone installs several desktop environments. The package gosa-desktop now provides the same menu entry for KDE, GNOME and LXDE. * Add script /etc/dhcp/dhclient-exit-hooks.d/hostname, which will set the client's hostname. . [ Petter Reinholdtsen ] * Rewrite dhclient-exit-hooks.d/hostname to only trigger on profiles Workstation, Thin-Client-Server and Minimal, and to only print messages and syslog when the host name is changed. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn80012 . [ Petter Reinholdtsen ] * Add new filesystem testsuite check to report too full file systems, meaning file systems with less than 10% left. * Disable automounting on roaming workstation, that was enabled by mistake, as it confuses libpam-mklocaluser. Change cfengine rule to not configure autofs, and change test suite to not check autofs on this profile. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn80003 . [ Petter Reinholdtsen ] * Updates for roaming workstation: - Fix typo in tools/setup-roaming causing nsswitch.conf update to fail. Make the generated nsswitch.conf closer to the one generated automatically by debian packages, to make it easier to see which lines we have to change to get profile working. - Add missing automount line to nsswitch.conf to get automounting working. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79994 . [ Wolfgang Schweer ] * tools/sssd-generate-config: According to man 5 sssd-krb5, the option 'krb5_kdcip' is still valid, but deprecated and should be replaced with 'krb5_server'. (After this change related log file entries would no longer be added.) . [ Petter Reinholdtsen ] * Rewrite LTSP testsuite check again, this time to force IPv4 as IPv6 NFS mount hang at least when using localhost as the server name. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79965 . [ Petter Reinholdtsen ] * Ask apt-xapian-index to reconfigure at first boot to avoid having to wait a week before golearn start working. * Rewrite LTSP testsuite check to use 'getent hosts' instead of 'host' to look up the local hostname, and adjust the code to handle the IPv6 localhost address returned by default. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79964 . [ Petter Reinholdtsen ] * Improve roaming workstation setup and adjust for newer sssd. Use libnss-sss for netgroup lookup and make sure libnss-myhostname is enabled. . [ Wolfgang Schweer ] * ltsp/plugins/ltsp-build-client/Debian-custom/032-edu-pkg: Don't call update-locale-config in the LTSP chroot, which is no longer available. It belongs to the package localization-config, which is no longer of any use and not installed in the chroot. (The LTSP chroot installation is supposed to fail, if update-locale-config is still called.) . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79934 . [ Petter Reinholdtsen ] * Switch sssd.conf to check the TLS certificate, now that it is working as it should. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79894 . [ Petter Reinholdtsen ] * Fix automount check, make sure it is skipped for Main-Server and Standalone profiles. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79878 . [ Petter Reinholdtsen ] * Make sure to call pam-auth-update before db_stop in postinst to avoid hanging during installation. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79873 . [ Petter Reinholdtsen ] * Make d-i hook to increase entropy when running low more robust and get it to log any error messages to syslog. Also make sure it check the entropy level more often. * Add new testsuite test automount, to make it easier to debug autofs problems on clients. * Call pam-auth-update during installation and removal, to make sure PAM setup is properly handlet (Closes: #678931). . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79859 . [ Petter Reinholdtsen ] * Extend ldap-client testsuite check to detect if winbind or libpam-winbind is active. We do not want nor need them. . [ Wolfgang Schweer ] * cf/cf.ldapclient: Get rid of packages winbind, libpam-winbind, and libnss-winbind for all profiles (cifs-utils is kept installed). . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79805 . [ Petter Reinholdtsen ] * Adjust wpad-extract to only accept http and https URLs from the proxy tool, to avoid direct:// style URLs that are useless as values of http_proxy and ftp_proxy. * Extend the filesystems test suite check to accept ext4 as well as ext3 file system type. . [ Wolfgang Schweer ] * ltsp/init-ltsp.d/60-edu-diskless-ws: Add 'dhclient -nw' to fix the proxy setting in /etc/environment, cause the proxy setting hook scripts expect dhclient to run. * sbin/debian-edu-pxeinstall: Set distribution string to wheezy to let pxe installations take the right udebs while doing test-installs. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79804 . [ Wolfgang Schweer ] * ldap-tools/ldap-debian-edu-install: update the instructions for bootstrapping LDAP manually. . [ Petter Reinholdtsen ] * Extend network testsuite to detect if BTS report #705900 is present. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79734 . * Correct rdp-server testsuite check to only run on Thin Client Servers, not Main Servers. I used the wrong condition originally. * Change finish-install for d-i to not try to submit to sitesummary when installing a Main-Server. It will become its own collector after installation. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79733 . [ Wolfgang Schweer ] * gosa.conf: Change structure of content to comply with the bootstrap scripts. Replace erroneously contained password hashes with GOSAPWD. Logging into gosa should now be possible again. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79660 . * Fix RDP testsuite check to look for the correct TCP ports (3389 and 3350), instead of some random PIDs I inserted by mistake in the first draft. * Rewrite CUPS testsuite check to use wget --no-check-certificate instead of HEAD, to be able to check that the HTTP server is working while ignoring that the SSL certificate name do not match the URL we use to check it. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79650 . * New testsuite test to verify that the RDP server is running and accepting TCP connections. * Correct timezone testsuite check to look for new timezone name for the *_BE, *_DE, *_DK and *_NO locales. Need updates for the other locales too. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79644 . * Make sure LTSP change to 032-edu-pkgs regarding runlevel changes comment out the entire lines, not just part of the lines to disable. Fixes change done by Wolfgang Schweer in version 1.704~svn79603 and Holger Levsen in version 1.704~svn79638. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79638 . [ Wolfgang Schweer ] * Configure the GOsa gui stripped down to those menu items, tabs, and options, that seem to be useful and usable. (Closes: #655274). - Clean up gosa.conf for the sake of clarity. (A full version can be found in /usr/share/doc/gosa.) - Add ldif and csv import tabs to <ldiftab> in gosa.conf, as this will show 'temporary disabled' in GOsa² as long as the add-on isn't available -- and will be needed if it is. - Change GOsa admin acl in ldap-bootstrap/root.ldif to disable unusable options in Posix and Samba accounts. - Add sambaAccount restrictions to jradmin-role acl in ldap-bootstrap/gosa.ldif. - Change description of admin-role to document restrictions. * Set debug level back to '0' in gosa.conf. * Make diskless workstations comply with ltsp 5.4.2-6: - Remove 60-edu-nsswitch.conf - Add 60-edu-diskless-ws, to change /etc/nsswitch and enable services (autofs, nfs-common, nscd, nslcd) disabled by LTSP. * Edit Makefile to reflect the changes. . [ Holger Levsen ] * ltsp-build-client/Debian-custom/032-edu-pkgs: Replace portmap with rpcbind. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79603 . [ Mike Gabriel ] * Use my @debian.org mail address in Uploaders: field. * Fix passwd sync in Samba. (Closes: #656296). * The change-over to using an aufs overlay on diskless workstations fixes observed failures of the udisks daemon. (Closes: #629054, #629055). . [ Wolfgang Schweer ] * Some more steps to get both thin and fat LTSP client setup working: - Correct type error in debian-edu-pxe-install. - Remove duplicate code from 60-edu-nsswitch. - Comment out most lines concerning runlevels in 32-edu-pkgs, cause there's no need to change the runlevel defaults anymore. Now the default runlevel for both client types is 2, the init-ltsp process will start processes depending from the client type chosen. (Client type: LTSP_FATCLIENT=True is set by default, for thin clients this has to be set to 'False' via kernel command line, lts.conf or LDAP entry.) * Changelog: Remove useless whitespace. * Don't edit lts.conf provided by package ltsp-server, cause now required changes can be set on-the-fly: - Remove lts.conf.dist. - Remove 35-default-lts-conf. - Edit Makefile to reflect the above changes. - Remove line SCREEN_07=ldm from ltsp.ldif, cause this is now done during the init-ltsp process. * 70-edu-client-core: Edit ltsp-client-core without using line dependency. * Enable more types to choose from when adding systems: - Remove restriction from acl in root.ldif to provide non locked system type 'server'. - Add GOsa object classes goNtpServer and goLdapServer for tjener entry in gosa-server.ldif, required if adding systems of type workstation. - Add description for tjener in gosa-server.ldif including a warning. (Though the object tjener is still locked by default, it could be set to 'active' and then be modified.) (Closes: #629367). * debian-edu-restart-services: Replace portmap with rpcbind. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79534 . [ Wolfgang Schweer ] * testsuite/ltsp: Replace /etc/ltsp_chroot with /etc/lts.conf to test if the ltsp chroot exists, as ltsp_chroot seems to have been dropped. * debian-edu-pxeinstall: - Change kernel command lines to reflect new ltsp init process. - Append ipappend 2 (syslinux) to define network boot interface. - Change target distribution from squeeze to wheezy. - Testing for diskless ws support now requires arch dependent path to security so files. * etckeeper is now located in /usr/bin instead of /usr/sbin: - Correct path in tools/run-at-firstboot. - Correct path in debian-edu-config.postinstall. * LTSP now uses an aufs overlay filesystem (whole rootfs), so things have changed considerably as it is possible to change almost all configuration on-the-fly: - Add share/ltsp/get-ldap-ltsp-config. - Add share/ltsp/init-ltsp.d/70-edu-client-core. This snippet modifies /etc/init.d/ltsp-client-core to get config stored in LDAP for Debian Edu ltsp clients (thin and fat) by calling get-ldap-ltsp-config. - Add share/ltsp/init-ltsp.d/60-edu-nsswitch. For Debian Edu diskless workstations: Modify priority to make KERBEROS work. - Remove now obsolete files: + share/debian-edu-config/ltsp_set_runlevel + share/debian-edu-config/ltsp_local_mount + share/ltsp/ltsp_config.d/debian-edu-config-rwbind + share/ltsp/ltsp_config.d/debian-edu-config-ldap - Comment out lines in 032-edu-pkgs concerning obsoleted files. * Change Makefile to reflect these changes. . * uploaded to the Debian Edu archive as debian-edu-config 1.704~svn79463 . [ Wolfgang Schweer ] * ltsp-build-client (used by d-i ltsp-client-builder.udeb). Change configuration to fix ltsp chroot installation: - Preseed dictionaries-common/default-wordlist and default-ispell in /usr/share/ltsp/plugins/Debian-custom/032-edu-pkgs with values taken from the server side debconf data base. - Replace aptitude (in 032-edu-pkgs) by apt-get to avoid failure due to missing aptitude. * testsuite/ltsp: Use IP for NFS mount just in case only a hostname but not a fqdn has been set in GOsa. Checksums-Sha1: 6f08709547b985166c4a9095959778857c42c9d5 2011 debian-edu-config_1.704.dsc 7ae191a6416435bc6b5da32d39b98a2b71494016 510738 debian-edu-config_1.704.tar.gz 2fa061a02630ce5b0b2cab093a87fc0b0f234b19 394112 debian-edu-config_1.704_all.deb a367d04573e5d31d068fd848c5dfbdbe7f7c2e69 114410 debian-edu-config-gosa-netgroups_1.704_all.deb Checksums-Sha256: 0ed0d522cc5853414ab3f5b1837fb6a5dff89b132c68e19727bccad4952152aa 2011 debian-edu-config_1.704.dsc 283a02c8fba13e822f4f56b18be78751ed60146af67361f1aa1afbe986cde518 510738 debian-edu-config_1.704.tar.gz bb9b3d4cc725661a3c8ceec73fd5fbd5f9c55f8eed4eee3b4d0e9f3cd8a0b862 394112 debian-edu-config_1.704_all.deb 3f0a4cde4015ad2b328418a73c21f726d82879b7086a2045910e01566fc468be 114410 debian-edu-config-gosa-netgroups_1.704_all.deb Files: af92103959395bdd7ad690bc262a9d25 2011 misc extra debian-edu-config_1.704.dsc 8518d2062de0a6634b3b90457a6f5cad 510738 misc extra debian-edu-config_1.704.tar.gz 2516639fbafb583bec8a6cd25425cbab 394112 misc extra debian-edu-config_1.704_all.deb e555764b102dbd02184d7302c78ce1f9 114410 misc extra debian-edu-config-gosa-netgroups_1.704_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIVAwUBUZZ99AkauFYGmqocAQg6dw//TxR0zb6o8yq35a+MAXBUkTgdTKCnvFfQ mcUudOhGBxqeDLwE1Fq70ks8OT3PYaNfWDgsscKRZjyOzObbRsIgs6oT8vGnHHBF Ugvum0NRmAmy9QbFtvG7+vtZlwbVTXgIU24rpWgFUuFLe6OlLaBHspVDTO+cl9wJ f5Bon5FtguYCbopLCjFRSP3QjlnaCxa1PEP/yT0Bw50GRJ7A7FvbLT2A1gDo/mjX 69AEoVwEIhgxiFP8J+rjMIa4p9CoJoff610iuKJzTRz5zBwBLEpgGogkiIpxL5CH fS8UDIcG4WVnWIZA5y94jGj7It0ZlVwIbzDjMitgMZGEBe+YRH0NgMO1ZW68RvHY oaFDknPdSHN7gz3/ooKELfJhV7a2Zsjs1MJTOfYNHLvuhf+VPlphR/9ZSh71ngjD DE1E+5hd/FjG/ZJjN1kXpGWCaQxlHSaeVnlKV3FksXvP6Jt3uXNa0B8eVWPKAx0M pZfOTBwt89qOBnYg4zNIJWvMlC7jfsBXAae/5cvAw03kQ4apOytUhx7OziNqpUxD O7EorymsaefMPbERd66d30vb+hrWBhlUEaKjYTT7gTtzExVH7SGdYZy2/qI+xc3t 4SQ0JDuOBhu0lZLKXGxIJkVnHFual6hbEp/hbMIVeWwHW1AngXspTn1kmRBJsqc7 il8HMa2PLqc= =iI4O -----END PGP SIGNATURE-----
