debian-edu-config (0.409) unstable; urgency=low [ Luk Claes ] * Added myself to uploaders. [ Petter Reinholdtsen ] * Adjust cfengine test for detecting etch, to look for '4.0' and not 'testing', to match the current version. * Change testsuite/bind9-dns to not report missing Internet connectivity as an error. * Change testsuite/ispell-dict-default to handle locales with UTF-8 or other non-ISO-8859-1 charmaps properly. -- Luk Claes Wed, 22 Nov 2006 22:31:59 +0100 debian-edu-config (0.408) unstable; urgency=low [ Ronny Aasen ] * Add authorative to dhcp configuration * reordering cf.ldapclient fixes libnss-ldap * Modify cf.ntp to support setting the clock on startup * Add /etc/lsb-release with some initial values. This should remove the need to preseed ltsp with --dist since lsb-release should function as expected * remove cf.popcon from the makefile. since cf.popcon is removed * added ltsp plugin in order to configure ltsp pxelinnux to use usplash * added nosuid to /tmp in cf.fstab * creates /opt/ltsp/i386/etc/ltsp/update-kernels.conf tru cf.ltsp this enables usplash in ltsp booting clients [ Steffen Joeris ] * Include French translation for debconf questions (Closes: #392190) Thanks to Guilhelm Panaget * Delete apt settings for woody and sarge, to clean up a bit * Delete old kdesktoprc for the kiosk profile * Make sure that the kiosk profile is installed in a hierachic order * Include new desktop icon framework for the debian_edu_pupils * Update the package build to honor the new kiosk files * Include German translation for debconf questions (Closes: #396383) Thanks to Helge Kreutzmann * Add special desktop restrictions to the debian_edu_pupils kiosk mode * Add the first customized kmenu for the debian_edu_pupils kiosk profile which is divided into the disciplines [ Petter Reinholdtsen] * Enable esd sound in KDE for thin client users by adding a new desktop profile thin-client for all users with LTSP_CLIENT and ESERVER set in the environment. * Modify default pam.d/common-auth to use pam_group, to make it easier to provide local device access to the user logged into the console. Rewrite pam_group config to include more groups and also work on tty1-9 logins. Activate it on thin-client-server installs, as well as workstation and standalone installs. [ Morten Werner Olsen ] * Removing all traces of bind8. -- Petter Reinholdtsen Sun, 19 Nov 2006 13:56:08 +0100 debian-edu-config (0.407) unstable; urgency=low [ Ronny Aasen ] * Modify cf.ldapclient, Altering libnss-ldap default bind policy to soft * Added commented volatile sources for etch to cf.apt * modify cf.fstab, to delete the dummy freespace logical volume * fix the regex matcing /tmp in cf.fstab * updated www.uio.no ip address in testsuite * dont run debian-edu-ltsp, we use ltsp-client-builder [ Petter Reinholdtsen ] * Correct exit code and output handling in update-hostname-from-ip. * Drop code to edit /etc/defaults/ntpdate. It is no longer needed. * Moved testing of network settings from debian-edu-install to testsuite/network. * Add DNS alias sitesummary.intern for the sitesummary collector. [ Steffen Joeris ] * Include Czech translation for debconf questions (Closes: #391475) Thanks to Miroslav Kure -- Petter Reinholdtsen Wed, 4 Oct 2006 13:50:48 +0200 debian-edu-config (0.406) unstable; urgency=low [ Petter Reinholdtsen ] * Use 'tail -n +3' instead of 'tail +3' in ntp test, to avoid warning. * Make dash test more robust. * Update test to detect missing webmin and report that. * Correct syslog UDP activation code to edit /etc/default/syslogd, not /etc/default/sysklogd. * Fix typo in webmin test script. * Modify testsuite/kde to accept execute bit on /etc/kde3/kioslaverc. No idea why the file is executable, but we only need to check if it is readable for all. * Correct testsuite/webcache to not test a non-proxying connection to squid. It does not, and should not, work. * Add testsuite/ltsp to detect if the LTSP chroot is installed on the thin client server. * Modify ntp test to check if /etc/default/ntpdate have syntax errors. * Change init.d/update-hostname to use the LSB log functions and to not print anything when VERBOSE=no. Add depends on lsb-base. * Removed useless chkconfig line from init.d scripts. [ Steffen Joeris ] * Mark update-hostname debconf question as internal and fix typo at enable-nat question (Closes: #388062) * Fix typo in update-hostname debconf question to make sure lintian is happy * Change hash commenting for /etc/default/ntpdate file, because current code breaks configuration for main-server(only), because of if-clause * Remove mime-types from cf.mime-support which are already merged into the mime-support package and write bugreport against mime-support for the rest to make sure we can remove cf.mime-support soon [ Ronny Aasen ] * Added cf.fstab, purpose is to add /tmp as tmpfs in fstab * Modify dhcp configuration to look for pxelinux.0 in the correct location * ldm fail if Xsession is not executable, edit cf.ltsp to make sure /etx/X11/Xsession is +x -- Petter Reinholdtsen Sun, 24 Sep 2006 17:26:20 +0200 debian-edu-config (0.405) unstable; urgency=low [ Patrick Winnertz ] * Removed obsolete alternative dependency on cfengine, because it is going to be removed from debian. [ Petter Reinholdtsen ] * Rewrite base-config test to no longer report the missing dbootstrap_settings as an error. It is not present on etch. * Adjust syslog cfengine rule to enable UDP listening on etch. * Adjust webserver test to accept as a success both either apache2 or apache running. * Update debian-edu-ltsp to work with both old and new version of ltsp-server. Change default dist from sarge to etch, and add new option --dist to make it easier to change it. * New test 'dash' to check that /bin/sh points to dash, not bash. * Remove cfengine rule to set GreetString in kdmrc. Leave this to debian-edu-artwork. Use debian-edu-artwork script to enable KDM theme. * Updated LSB header for the init.d scripts. [ Steffen Joeris ] * Cleanup the cf scripts and remove cf.shell and cf.webmin entries and adjust the Makefile * Deactivate slbackup configuration part via cfengine for combo servers as it is merged into the installer, * Add dh_link to debian/rules and use it for linking the ldapdump script into the needed slbackup directory and deactivate the generation via cfengine merge it into the installer * Move the enable-nat part for the thin-client-server into the postinst script and deactivate the cf.nat cfengine call * Start the debian-edu-config.prerm script and make sure that the enable-nat init script is called if nat is enabled * Remove the cf.issue file as we don't use it anymore * Change code for enable-nat script to make it compliant with policy and use the code snipplet from dh_installinit * Add debconf template to ask if enable-nat should be activated or not (Closes: #365140) * Start the debian-edu-config.config script for the debconf question * Include code into debian-edu-config.postinst script to avoid starting enable-nat script if debconf boolean is false * Add po-debconf to Build-Depends-Indep as we need it for the debconf templates * Start the po files for the debconf templates * Add code to debian-edu-config.postinst to start the kde kiosk profiles for debian-edu which creates basic configuration for the /etc/kderc and the /etc/kde-user-profile as a mapping file [ Ronny Aasen ] * Avoid touching the conffile named.conf of bind9, instead give it the option -c filename in the non conffile /etc/default/bind9 * Edit cf.ldapserver and slapd-sarge_debian-edu.conf to try to run slapd as the default openldap user. (Closes Skolelinux Bug #1112) * Fixed wrong dist variable in debian-edu-ltsp, blocked execution * Workaround for a bug in ltsp-build-client. * add --accept-unsigned-package, since our cd is not signed yet. * add a workaround for bug #375077 to avoid the long lookuptimes that occure after the cfengine run edits nsswitch.conf. * PXElinux in etch have changed it needs next-server and root-path options in dhcp now. * incresed editfilesize in cfengine.conf, squid'c config was larger then the previous value. * make debian-edu-pxelinux.cfg use syslinux from the chroot * pxelinux don't like symlinks. copied pxelinux and images instead since hardlinks dont work across devices * added the mandatory nfs export flag for subtree_check or not * remove debian-edu-pxelinux.cfg from cf.ltsp instead call ltsp-server from debian-edu-ltsp -- Petter Reinholdtsen Sun, 17 Sep 2006 17:13:00 +0200 debian-edu-config (0.404) unstable; urgency=low [ Petter Reinholdtsen ] * Remove the cron job bin/filehandle_ctl.sh. It is no longer needed with linux 2.6 kernels. * Comment out cf.shell, as the same setting can be activated using preseeding now. * Update standards-version from 3.6.2 to 3.7.2. No change needed. * Add depend on ${misc:Depends} to get a debconf dependency for the hidden debconf question available for preseeding. [ Steffen Joeris ] * Change build-depends-indep to build-depends as debhelper is needed during the clean target * Increase debhelper level to 4 * Remove obsolete calls for conffiles in Makefile * Cleanup debian/rules to remove the obsolete calls too * Adding md5sum file for package * Change DESTDIR to package name instead of tmp to adjust packaging to current debhelper level -- Petter Reinholdtsen Sun, 20 Aug 2006 23:27:54 +0200 debian-edu-config (0.403) unstable; urgency=low [ Steffen Joeris ] * Update sources.list and adjust it for etch as non-US is gone * Remove cf.webmin as webmin is gone * Remove obsolete cf.shorewall * Remove obsolete cf.kdm_hdwarn as kde is doing this check now * Remove obsolete cf.udev as we are configuring the rights for the sound device via pam (Closes: #370350) * Remove obsolete cf.amanda as we are using other backup methods (Closes: #370393) * Fix configuration of squid.conf in cf.squid * Adjust path for dhcpd.conf in cfrunhosts.pl * Adjust Makefile because of removed files * Fix configuration for authldaprc in cf.imap [ Frode Jemtland ] * Translated norwegian comment in cfengine.conf to english. Fixed skolelinux bug #1088 [ Ronny Aasen ] * Removed webmin from ltspserver profile cfengine run. [ Bart Cornelis (cobaco) ] * Use desktop-profiles instead of debian-edu specific script to set up the kde-profiles (Fixes skolelinux bug #1005). [ Petter Reinholdtsen ] * Correct LSB dependency info in resize_lvm init.d script. -- Petter Reinholdtsen Fri, 4 Aug 2006 19:36:49 +0200 debian-edu-config (0.402) unstable; urgency=low [ Petter Reinholdtsen ] * Update the resize_lvm init.d script: - use MiB instead of LVM PE as size unit. - Make sure it is installed in rcS.d/ - Make sure it isn't started during install nor upgrade. - Rename variable MOUNTPOINT to DEVNAME to reflect its content. - Use lvextend instead of lvresize to be compatible with LVM 1.x. Thanks to Finn-Arne for this idea. - Do not include the resize_lvm default file in the package, to avoid upgrade problems on installations where it is modified. * Update standards-version from 3.6.1 to 3.6.2. [ Finn-Arne Johansen ] * Added resize_lvm init-script * Treat sarge and etch as !woody to simplify scripting with cfengine * Keep the slapd config from sarge (not renaming it to "*-!woody_*") * Added etch templates for sources.list (maybe it's not needed) -- Petter Reinholdtsen Wed, 19 Apr 2006 22:50:02 +0200 debian-edu-config (0.401) unstable; urgency=low [ Petter Reinholdtsen ] * Fix syntax error in boot_xconf. (Closes: #343457) * Achnowledge old upload. (Closes: #301565) * Modified the ltsp-make-client script used for building diskless workstations: - Modify code to rename rc#.d symlinks instead of removing them, to avoid them to reappear after an upgrade. - Reinsert init.d scripts ifupdown and networking when building diskless workstation, to make sure the loopback network interface is enabled. - Make sure to only update /etc/exports once when executing ltsp-make-client several times. - Move network interface name into variable to make it easier to change. - Use the apt location of ltsp-server instead of ltsp-client to detect the apt source to use, as the latter might not be installed nor available on the server. - Add /opt/ltsp instead of /opt/ltsp/i386 to /etc/exports, to be compatible with the update done by the ltsp package itself. * Add dependency on host to make sure init.d/update-hostname work. -- Petter Reinholdtsen Thu, 23 Mar 2006 13:08:44 +0100 debian-edu-config (0.400) unstable; urgency=low [ Patrick Winnertz ] * Changed symlink of /bin/sh from /bin/ash to /bin/dash * Added shellcommands section in cf.shell in order to invoke dpkg-divert --add /bin/sh (Closes Skolelinux Bug #1041) [ Benjamin Sonntag ] * Added manpages for some binaries in this package. Also added a mechanism in Makefile so that /bin /sbin and ldapprograms manpages are autodetected and installed too. * Added file for backdoor in /etc/default (still disabled by default, but useful to know how to fill it) * Added documentation in README file for samba ssh and apache. * Corrected lintian warning on xboot_conf not having restart and reload cases. * Added CFBINFILES to Makefile so that cfd and cfrunhosts.pl are now executables. [ Steffen Joeris ] * Distribution umask only in /etc/profile (Closes Skolelinux Bug #996) * Disable connection settings in courier-imap so that the cf.imap is running and the courier-imap is not running by default (Closes Skolelinux Bug #998) * change ntp-configuration to not use pool.ntp.org and let the clients search for ntp.intern (Closes Skolelinux Bug #1024) * Dropping kmail preconfiguration (Closes Skolelinux Bug #550 and #1017) * Also remove conffiles for kmail from /usr/share/debian-edu/* and update Makefile * still providing sound permission changes for devfs if someone still uses kernel24 * update Makefile for cf.udev [ Henning Sprang ] * Now configuring NTP with cfengine (cf/cf.ntp). (Closes Skolelinux bug #1024) [ Bjorn Ove Grotan ] * Fixed typo in tools/jrpasswd [ Ragnar Wisloff ] * Added example of settings for serial mouse to lts.conf. Fixes #584. [ Finn-Arne Johansen ] * Fixed typo in when creating pxelinux config for old ltsp * Added permissions to set timestamps when passwords was changed * Display menu for pxebooting devices if more than one netbooting solution is installed * Set PATH for ldapdump.sh to properly stop/start slapd. (Closes Skolelinux bug #1000) * Cleaned up the dependencies of debian-edu-config, only include the necesarry packages for installing this package. * added HOST variable for talking to the ldap-server * Set the correct permission on samba passwords. (Closes Skolelinux bug #1007) * Added support for doing a netbased installation of ltsp in debian-edu * Added support for installing ltsp in another location than /opt/ltsp/i386 * Extended/rewritten script for creating diskless/stateless workstations * Split up the configuration of courier imap, should close skolelinux bug #998 * Added dependency to ng-utils (should close Skolelinux bug #1033) * Stopped imap from running on a unencrypted port * Removed positive test for imap2 (unencrypted port) (closes Skolelinux #1038) * Added commented out cfengine code to set up access to local devices when logged in via kdm on non-server (alternativ fix for Skolelinux #974) * Added sample definition for shared folder in samba * Added sample config for usbmount * Added sample config for pam_mount on stateless clients * Added script for making stateless workstations to the package, should be ready for testing * Added workaround for missing background.png in ltsp-themes (Skolelinux #1035) * Set up mozilla-firefox to use kprinter and A4 as default. Thanks to Klaus Ade Johnstad for finding the bug (and the solution) (Closes Skolelinux #1042) * use pam_group instead of manipulating the devices to get access to local devices * ldap-debian-edu-install needs to use bash for now * Dont test for a running squid on a thin-client-server. Thanks to Ole-Anders Andreassen for finding this bug (Closes Skoleliux #1054) * Add support for detecting Arch in debian-edu-ltsp (Closes Skolelinux #1055) * Modified slapd-sarge-debian-edu.conf to allow jradmins to change passwords, and admins to add user * Dont use bash on diskless workstation, since it breaks ltsp-client-setup (Closes Skolelinux #1059) * Removed extra "-e" in ltsp-make-client breaking dhcpd.conf (Closes Skolelinux #1060) * No need to allow users to read their own encrypted samba password * Need to allow samba root to update nextID, and to search the samba Attributes (Closes Skolelinux #1061) * Define wins server in dhcp, to allow windows clients to resolv the samba domain (Closes Skolelinux #1067) [ Patrice Neff ] * Added support for using cfengine server * Enabled configuration of the sysstat system * Cleaned up the test for squid * Cleaned up test for XFS * Included libnet-ldap-perl required by some of the ldap-tools * Added a Spanish translation of the index page at var/www/index.html.es * Allow port 10000 in Squid configuration (so that Webmin is accessible) [ Morten Werner Olsen ] * Removing /etc/skel/.kde/share/config from debian/dirs. * Removing all references to /etc/default/ntp-servers (isn't owned by any packages). * Cleaning up cf/cf.ntp and commenting out all references to pool.ntp.org and using 127.127.1.0 as default for main-server (as NTP will understand that is using the local clock as reference). * Fix /etc/default/ntpdate for non-Main-server's (point to ntp). * Fixing Finn-Arne's email-address in the 0.397 changelog entry (prevents lintian-error). * Disabling the xfree-test that assume that xfree86 is started. * Disabling the kdm-tests that assumes that kdm is started. * Now defaulting to not sending any Nagios-mails. * Change my email-address in the Uploaders-field. :) [ Andreas Schuldei ] * making slapd use ipv4 only in cf.ldapserver (for uml testframework, where long timeouts occure when probing for ipv6 stuff) [ Frode Jemtland ] * Found a updated version of debian-edu-config/bin/debian-edu-ltsp in one of my test servers. This seemd to me to be a improvment to get disk less workstations to work, with ltsp. Probably need more files from this installation to get it to work * Updated the index.html.en and index.html.de with a plea to install the popcon package * Added a German var/www/index.html.de by Ralf Gesellensetter * Updated rest of the index files to have a link to the German translation * Changed special norwegian characters to html codes [ Bart Cornelis (cobaco) ] * Added var/www/index.html.nl with a Dutch translation of the default page. * Updated the other index.html pages to have a link to the Dutch version * Added dutch index.html in the Makefile script -- Morten Werner Olsen Sat, 4 Mar 2006 19:33:13 +0100 debian-edu-config (0.399) unstable; urgency=low [ Bjorn Ove Grotan ] * Added administrative password-change utility (tools/jrpasswd) [ Morten Werner Olsen ] * Added LDAP-database dump script (tools/ldapdump.sh) * Added etc/slbackup/pre.d to debian/dirs * Added a cfengine-hook that symlinks the tools/ldapdump.sh into /etc/slbackup/pre.d/ (fixes debian-edu bug #923) * Fixed the permissions on the config-file (pxelinux.cfg/config) for PXE-booting. * Updated cf/cf.kdm to get a little bit more interesting background for the login-screen. * Added myself as uploader. * Deliver mail to root as the mail-user (not root). This prevented mail for root to be delivered. [ Petter Reinholdtsen ] * Fix typo in testsuite/webcache, using correct argument to find. * Close stdin/stdout when restarting the wlan to avoid hanging on first time installs. * Add LSB init.d headers to document boot time dependencies. * Use new script debian-edu-ltsp to build LTSP environment using the new LTSP debian packages. * Make sure missing sound card don't give a warning dialog box. * Make sure testsuite/php is no longer used. We do not install PHP any more. * Only run testsuite/{ldap-server,webmin,webserver} on Main-Server installs. * Only run testsuite/{ldap-client,ntp,webcache} on Main-Server, Workstation and Thin-Client-Server installs. * Only run testsuite/dhcpd on Main-Server and Thin-Client-Server installs. * Only report missing kdm and X server as information when running the testsuite, as these are started after this point in the installation sequence. * Start on script ltsp-make-client to convert a LTSP thin client chroot to a more complete client installation. [ Maximilian Wilhelm ] * Added exim4 LDAP configuration for server and client (Closes: #276769) [ Finn-Arne Johansen ] * Added firefox proxy, cache and printer config * Fixed detection of 2.4-kernel * Included the munin cfengine script, and fixed the munin script * Made cfengine-debian-edu work with both cfengine and cfengine2 * Better detection of group "installation" * Replaced all occurences in chengine of "installasjon" with "installation" * Disabled FifoDir for kdm on non-standalone, to prevent shutdown from a logged in session * Disabled shutdown from non-local display for kdm (fixes debian-edu bug #949) * Updateded /etc/samba/slapaddclient.pl because tdbdump is relocated * Set up automounting via ldap * Disabled listing of hashed password to unauthenticated users (fixes debian-edu bug #945) * Gave smbadmin access to the Machine Subtree (fixes debian-edu bug #950) * Installation script for lessdisks thin client is availible, but does not run by default * Set up ldap users on lessdisks clients * Set a more suited certificate for the postoffice (Closes: #301288) * Fixed Typo preventing hidden home dir mounting from Windows server Thanks to Bernt Johnsen AFK for discovering * Close debconf fd before init-script runs, prevents initscripts from runing cleanly (Fixes debian-edu bug: #301565) * Made nightkill a bit more quiet * Made debian-edu-config Replace,Conflict and Provide ncs (fixes debian-edu bug #975) * Fixed missing translation from installasjon -> installation in cf.cups (Fixes debian-edu bug: #967) * Disabled ldap idletimeout, since kdm fails to set up a new connection * tftpboot files are moved from /tftpboot into /var/lib/tftpboot, rewritten dhcpd.conf, and added script debian-edu-pxelinux.cfg to help maintain pxelinux.cfg/default (Partly closes: #905) * Fixed typo in tools/ldapdump.sh to remove error-message * Added support for using /usr/share/d-e-c/tools/passwd as non-root user * Fixed permission on samba passwords for ldap [ Ragnar Wisloff ] * Corrected cfengine edit line for USE_XFS in cf.ltsp to make LTSP * Changed permissions on /etc/skel/.kde/share/config/kmailrc to make only user readable. (Fixes debian-edu bug #887) * Added cf.sysstat which enables the sysstat system * Added Nagios config files and amended cf.nagios to fit. (Fixes debian-edu bug #953 and #954). * Fixed missing logos from NAgios package. * Added UserDir config to cf.apache. Fixes debian-edu bug #639. [ Frode Jemtland ] * Corrected errors about php4 in cf.apache * Updated information about ServerAdmin in cf.apache * Added language support for nb, no and nn in cf.apache * Commented out mime type nb in cf.apache * Fixes skolelinux bug: #938 and #864 * Added files to /var/www: index.html.nb, index.html.en, logo-trans.png, skl-ren_css.css. Fixes debian-edu bug: #942. * Fixed typos in html files. [ Andreas Schuldei ] * extending ldap-debian-edu-install to deal with cases where /etc/shadow does not exist (for uml test installations) -- Petter Reinholdtsen Sun, 11 Dec 2005 21:00:32 +0100 debian-edu-config (0.398) unstable; urgency=low * Finn-Arne Johansen - Added common-auth|account|passwd-ldap-debian-edu for ldap authentication, Tried to enable it for Sarge only (Closes: #275031). - Added detection of sarge in lessdisks-chroot. - Added conf-files for winbind/ads authentication, with dummy variables - Added pam_env to common session to support /etc/environment - better detection of woody/sarge - fixed kdm to not show userlist on sarge (Closes: #294048) - fixed kdm to allow root logins on server console (Closes: #294047) - moved dbootstrap_settings on sarge, to prevent cfengine from detect a clean installation if run again - Remove custom Xsession, to get kdm to honour /etc/alternatives/x-session-manager - Rewrite of debian-edu-restart-services - Added test for samba to debian-edu-test-install - Make sure ldap is stopped during ldap-debian-edu-install - Added new imapd.pem for courier-imap-ssl certificate - fixed some ACL stuff in ldap-schema/lis.schema to make it work - Disabled devfsd for 2.6 kernels (use udev instead) - changed slapd-debian-edu.conf -> slapd-sarge_debian-edu.conf to support slapd 2.2 - Moved skript for setting up X in lessdisks ws at boot from d-e-install (also updated) - Replaced cfengine with cfengine2 - sett correct path to cfagent * Bart Cornelis - Set up proxy + kmail when inside a debian-edu network. * Petter Reinholdtsen - Get PCI reporting working in Sarge. * Bjørn Ove Grøtan - Updated norEduPerson.schema * Andreas Schuldei - add writeableBy for ACL usage to ldap-schema/lis.schema -- Andreas Schuldei Sat, 4 Jun 2005 21:36:07 +0200 debian-edu-config (0.397) unstable; urgency=high * Andreas Schuldei - added afs entries to the named zone files * Finn-Arne Johansen - Changed samba into using tls instead of ldaps - Changed test for services in inetd.conf, not lines containing the name of service (Closes: #288912) * Klaus Ade Johnstad -Removed a space, to avoid errormessage "bad substitution" when running /usr/bin/debian-edu-hd-warn -- Finn-Arne Johansen Thu, 6 Jan 2005 11:48:33 +0100 debian-edu-config (0.396) unstable; urgency=low * Correct code to make sure /etc/kde[23]/kioslaverc. It need to create the file if it missing, as the 'files' section is executed before the 'shellcommands' section. * Remove share/debian-edu/common/share/config/kioslaverc. Not all profiles uses a proxy (standalone does not), so KDE should not always use a proxy. * Move editing of /etc/ldap/ldap.conf from cf.ldapclient to cf.ldapserver where it belongs, and where it can be part of the cfengine rules already editing the file. * Do the same editing of /etc/ldap/ldap.conf in woody and sarge, as the rules were similar enough, and seem to differ only for historical reasons. -- Petter Reinholdtsen Sat, 23 Oct 2004 20:43:23 +0200 debian-edu-config (0.395) unstable; urgency=low * Finn-Arne Johansen - Set Thin client nfs-access to be async - Added, but deactivated code to set nscd cache size - Updated ldap initialisation to set up group mapping from unix group admins to samba group "Domain Admins" (fixes skolelinux bug #812) - Updated format for slapd.conf to specify both ldap and ldaps as service - Added pointer to certificate file on sarge server install - Set ldap clients to never check certificate - Updated samba.schema to support sambaPasswordHistory - Added test for squid spool dir ownership - Added host definition for ldap-clients * Klaus Ade Johnstad - Added some more host-templates in dhcpd-debian-edu.conf, and some space between the lines, to avoid some gruff in the comment fields in webmin-dhcp. * Petter Reinholdtsen - Add test to detect errors with /etc/kde[23]/kioslaverc. - Make sure /etc/kde[23]/kioslaverc is readable by all. * Maximilian Wilhelm - Complete rewrite of /etc/group to LDAP migration script. -- Joey Hess Tue, 5 Oct 2004 16:29:20 -0400 debian-edu-config (0.394) unstable; urgency=low * Finn-Arne Johansen - Fixed bashism in detection of workstation profile in cfengine.conf - Added slapdconfig for sarge (bdb backend, commented out for now) - Changed ldap-bootstrap script to support exim4, and nonexisting samba - Added support for sarge in cfengine.conf - Fixed squid config for sarge - Fixed slapd Database setup for sarge - Changed detection of ltspserver profile * Petter Reinholdtsen - Correct xfree86 test. It should no longer report errors on Main-server installs. - Enable postinst code to handle debconf preseeding for init.d/update-hostname. It is now working as it should. - Document some problems with init.d/open-backdoor. - Make sure open-backdoor print a message when it is enabled. * Maximilian Wilhelm - Added ldap base dn to client config - Added CNAME kerberos for tjener to db.intern - Localized debian-edu-hd-warn correctly and added chech if X is running -- Petter Reinholdtsen Sun, 8 Aug 2004 13:28:30 +0200 debian-edu-config (0.393) unstable; urgency=low * Andreas Schuldei - Remove unnecessary and wrong lines from the autofs.ldif. objectclasses OU and automoutMap can not be in the same ldap entry, with stricter checking as in openldap 2.1.X. * Finn-Arne Johansen - Remove path from temporary filename for ldap-user-clean-attic.sh. (Fixes skolelinux bug #786) * Petter Reinholdtsen - Add debconf template install rule. - Add quotes (") around the value stored in /etc/default/update-hostname to make sure it is a valid sh-script even if the value is junk. -- Petter Reinholdtsen Thu, 17 Jun 2004 10:16:04 +0200 debian-edu-config (0.392) woody; urgency=low * Petter Reinholdtsen - Change xfree86 test to only warn if X isn't running. X is started after the test is executed, so it isn't really an error. - Make it possible to configure init.d/update-hostname at install time using an hidden debconf value. - Restart bind before ntpd, as ntpd need to look up 'ntp' in DNS. * Finn-Arne Johansen - Added ldap-user-clean-attic.sh to the command line ldap tools - Changed number of imap clients allowd to connect from same host (closes: #459) -- Petter Reinholdtsen Mon, 14 Jun 2004 09:27:02 +0200 debian-edu-config (0.391) woody; urgency=low * Finn-Arne Johansen - Improved a workaround for bug #286 in skolelinux, #156332 in debian to ensure that the dhcp server is restartable after installation -- Petter Reinholdtsen Sat, 12 Jun 2004 22:06:24 +0200 debian-edu-config (0.390) woody; urgency=low * Petter Reinholdtsen - Only test XFree86, kdm and xfs if it is supposed to be installed (!Main-Server). - Insert code in debian-edu-restart-services to force dhcpd restart as a workaround for skolelinux bug #286. Not sure if it works, but it is better to have this code here instead of in debian-edu-install. - Add test to check if host 'ldap', 'ntp', 'syslog' and 'webcache' is reachable. - Started in README on highlevel description of the configuration changes done. -- Petter Reinholdtsen Fri, 11 Jun 2004 00:04:30 +0200 debian-edu-config (0.389) unstable; urgency=low * Finn-Arne Johansen - Fetch sambasid for PDC instead of domain. * Petter Reinholdtsen - Rewrote samba-debian-edu-admin script to make timeout length a variable, and to fetch hostname short form only once. - Remove trailing space from line ends and the samba-debian-edu-admin file. -- Petter Reinholdtsen Thu, 3 Jun 2004 18:07:44 -0300 debian-edu-config (0.388) unstable; urgency=low * Finn-Arne Johansen - Set smaller cache size for mozilla - Fixed type and missing entries in mozilla proxy settings -- Petter Reinholdtsen Mon, 31 May 2004 01:53:18 -0300 debian-edu-config (0.387) unstable; urgency=low * Finn-Arne Johansen - Fixed some missing samba objects to the ldap tree. - Changed procedure to fetch sambaSID. - Updated Makefile to include cf.mozilla. - Tries to take up the network interface before fetching sambaSID. - Changed samba-debian-edu-admin to ensure that sambaSID is availible when needed. - Disabled samba password change. - Disabled samba root access to shared resources. - Added sample entry for assigning static ip to workstations, (fixes SL #750). -- Petter Reinholdtsen Fri, 28 May 2004 14:36:35 -0300 debian-edu-config (0.386) unstable; urgency=medium * Finn-Arne Johansen - Updated slapd.conf to limit the write access of smbadmin -- Petter Reinholdtsen Fri, 21 May 2004 23:36:04 +0200 debian-edu-config (0.385) unstable; urgency=medium * Petter Reinholdtsen - Change webmin test to check the config file before checking if the server is listening to the correct port. Also changed it to not die on the first error, but to do all checks before setting the return code. * Finn-Arne Johansen - Changed DHCP lease time. - Moved samba clients to a subtree under ou=People. * Andreas Schuldei - Make the retrival of the machine group dynamic in etc/samba/smbaddclient.pl. -- Petter Reinholdtsen Thu, 20 May 2004 22:28:22 +0200 debian-edu-config (0.384) unstable; urgency=low * Finn-Arne Johansen - Changed config of samba, and rewritten smbaddclient.pl script to ease the adding of NT clients. - Removed nss_base_passwd from libnss-ldap.conf to allow use of ou=machines for samba clients. - Added config for mozilla to use webcache, and kprinter. * Petter Reinholdtsen - Reinsert nss_base_passwd into libnss-ldap.conf, as it might have unwanted side effects, like removed users and machines showing up as existing users. - Add test for webmin allow line in /etc/webmin/miniserv.conf. -- Petter Reinholdtsen Sat, 15 May 2004 19:44:45 +0200 debian-edu-config (0.383) unstable; urgency=low * adding organisational unit Machines to root.ldif for samba. -- Andreas Schuldei Wed, 5 May 2004 21:38:39 +0200 debian-edu-config (0.382) unstable; urgency=low * Finn-Arne Johansen - Added missing samba-debian-edu-install script * Andreas Schuldei - performance tuning for slapd: adding some indices and keeping the db in RAM -- Andreas Schuldei Wed, 28 Apr 2004 19:12:41 +0200 debian-edu-config (0.381) unstable; urgency=low * Finn-Arne Johansen - Added config for samba 3.0 * Petter Reinholdtsen - Only create samba LDAP config on first time install. -- Andreas Schuldei Wed, 28 Apr 2004 17:27:13 +0200 debian-edu-config (0.380) unstable; urgency=low * Petter Reinholdtsen - Fix typo in cf.webmin. The file is called /etc/webmin/config, not /etc/webmin/config.conf. - Add cfengine rule in cf.webmin to rewrite /etc/webmin/dhcpd/config to use dhcp version 3 instead of version 2. (Fixes skolelinux bug #666) - Renamed every file using 'skolelinux' prefix and postfix, to using 'debian-edu' instead. Added compatibility wrapper scripts to avoid breaking installation while changing. This will break existing installations, but is needed to be done before we stabilise for consistency. -- Petter Reinholdtsen Mon, 26 Apr 2004 20:09:52 +0200 debian-edu-config (0.379) unstable; urgency=low * Remove cf.mkinitrd from the include list in cfengine.conf too. -- Petter Reinholdtsen Fri, 23 Apr 2004 23:30:09 +0200 debian-edu-config (0.378) unstable; urgency=low * Klaus Ade Johnstad - Changed the warning/explanation in 10skolelinux-one-login-per-host from Norwegian into English. * Petter Reinholdtsen - Changed webmin configuration to use PAM for authentication, removing the need to keep a separate user database in webmin. -- Petter Reinholdtsen Fri, 23 Apr 2004 00:06:47 +0200 debian-edu-config (0.377) unstable; urgency=low * Petter Reinholdtsen - Add test taskpkgs to check if the correct task packages are installed. * Klaus Ade Johnstad - Added the special forwarders need for Skoleetaten i Oslo, in named-bind9.conf - Added the correct path to the dhcp3 script, in dhcpd-skolelinux.conf -- Petter Reinholdtsen Tue, 20 Apr 2004 00:07:37 +0200 debian-edu-config (0.376) unstable; urgency=low * Petter Reinholdtsen - Do not edit /usr/X11R6/lib/X11/xkb/rules/xfree86.lst any more, as we are using XFree86 4.2 now, and the changes are already there. - Rewrite edit rule for xfree86.lst in cf.locales to insert the same text as is used in XFree86 4.2. - Remove cf.mkinitrd, as DELAY=0 is the default in debian-installer. - Remove edit rule for /etc/network/interfaces from cf.ldap, as this file is updated correctly by debian-edu-profile-udeb in d-i now. - Modify update-ini-file to add a section if the ini-file only consist of comments. (Skolelinux bug #633) -- Petter Reinholdtsen Thu, 15 Apr 2004 00:09:12 +0200 debian-edu-config (0.375) unstable; urgency=low * Andreas Schuldei - Renamed the 'guest' group to 'none' and the 'jnadmin' group to 'jradmin' in root.ldif. - Adding an attic OU for deleted users, and added an attic capability flag in root.ldif. * Petter Reinholdtsen - Add missing newline at the end of ldap-bootstrap/root.ldif. -- Petter Reinholdtsen Wed, 14 Apr 2004 10:00:19 +0200 debian-edu-config (0.374) unstable; urgency=low * Petter Reinholdtsen - Report output from rpcinfo -p when testing the network status. * Andreas Schuldei - Adding a default class to root.ldif, removing the generic age group. * Finn-Arne Johansen - Modified password script to allow changing of admin password. (fixes skolelinux #236) * Ragnar Wisloff - Added nagios to list of services to restart. -- Petter Reinholdtsen Thu, 1 Apr 2004 22:34:09 +0200 debian-edu-config (0.373) unstable; urgency=low * Petter Reinholdtse - Change /etc/exports rule for /skole/tjener/home0 to only export to selected host netgroups by default. * Bjørn Ove Grøtan - Commented out indexing of eduPerson-related parts in slapd.conf since we're not using EduPerson.schema yet. -- Petter Reinholdtsen Tue, 30 Mar 2004 23:31:31 +0200 debian-edu-config (0.372) unstable; urgency=low * Petter Reinholdtsen - Improve the mail content sent from init.d/report-reboot. - Avoid restarting init.d/report-reboot on installs and upgrades. (Closes: #240776) - Do not use EduPerson.schema yet. - Make sure debian-edu-mailcap is installed without execute bit. * Ragnar Wisloff - Fixed typos in cf.nagios -- Petter Reinholdtsen Mon, 29 Mar 2004 21:35:47 +0200 debian-edu-config (0.371) unstable; urgency=low * Bjørn Ove Grøtan - Add norEduPerson.schema to the package. * Petter Reinholdtsen - Make sure to install EduPerson.schema and norEduPerson.schema, to get slapd to start. (Fixes Skolelinux bug #664) - Make sure newly added scripts in /usr/share/ are installed with execute bit. - Make sure /etc/init.d/report-reboot is a conffile. -- Petter Reinholdtsen Sun, 28 Mar 2004 22:50:44 +0200 debian-edu-config (0.370) unstable; urgency=low * Finn-Arne Johansen - Adding script to change users password in ldap (also samba) - Moved nice to have script from /usr/sbin/ into /usr/share... - Added code to set umask when logging in with kdm - Added the script located in share into the Makefile * Petter Reinholdtsen - Updated testsuite/dhcpd to check dhcpd version 3. -- Petter Reinholdtsen Sat, 27 Mar 2004 16:57:14 +0100 debian-edu-config (0.369) unstable; urgency=low * Bjørn Ove Grøtan - adding ACL for smbadmin and performance tuning * Petter Reinholdtsen - Add workaround for apache problem in skolelinux-restart-services. This should make sure the missing apache parent process is worked around. (Skolelinux bug #636) * Ragnar Wisloff - Changed cf.nagios to use forced symlinks -- Petter Reinholdtsen Sat, 27 Mar 2004 11:58:23 +0100 debian-edu-config (0.368) unstable; urgency=low * Petter Reinholdtsen - Add new init.d script report-reboot, which can send an email when a server boots. - Implement 'status' argument to init.d/open-backdoor, reporting if the SSH backdoor is running or not. - Add Finn-Arne Johansen as uploader. - Remove all '.#*' files in clean target, to make sure this cruft do not make it into the source package. -- Petter Reinholdtsen Mon, 15 Mar 2004 22:19:29 +0100 debian-edu-config (0.367) unstable; urgency=low * Replaced dhcp with dhcp3-server in skolelinux-restart-services, should fix #286 and #421 -- Finn-Arne Johansen Thu, 4 Mar 2004 20:50:19 +0100 debian-edu-config (0.366) unstable; urgency=low * Fixed config for dhcp3 -- Finn-Arne Johansen Wed, 3 Mar 2004 22:27:21 +0100 debian-edu-config (0.365) unstable; urgency=low * changed distribution from UNRELEASED to unstable -- Andreas Schuldei Wed, 3 Mar 2004 17:15:44 +0100 debian-edu-config (0.364) unstable; urgency=low * Rune Nordbøe Skillingstad - Package now conflicts debian-edu-install <= 0.616. (Closes: #235734) * Petter Reinholdtsen - Restart autofs at the end of the install, to make sure the new configuration is used. -- Rune Nordbøe Skillingstad Tue, 2 Mar 2004 09:20:24 +0100 debian-edu-config (0.363) unstable; urgency=low * Finn-Arne Johansen - Added /etc/mailcap - Added /etc/dhcp3/dhcp-skolelinux.conf * Petter Reinholdtsen - Make sure to include cf.nagios in the package. - Removed cf.modules as it is unused now. - Add missing quote character in cf.apache. (Closes: #235537) * Rune Nordbøe Skillingstad - Restart nscd - Fixed bug: /etc/dhcp3 was not created in install in Makefile - Moved /etc/mailcap to /lib/mime/packages/debian-edu-mailcap and using update-mime in postinst script - Package now depends on mime-support. -- Petter Reinholdtsen Mon, 1 Mar 2004 17:28:06 +0100 debian-edu-config (0.362) unstable; urgency=low * Ragnar Wisløff - Added cf.nagios and changes to cfengine.conf to include cf.nagios * Rune Nordbøe Skillingstad - Moved mime.types from cf.apache to cf.mime-support - Added rewriting of apache to cf.apache -- Petter Reinholdtsen Sun, 29 Feb 2004 17:06:43 +0100 debian-edu-config (0.361) unstable; urgency=low * Rune Nordbøe Skillingstad - Fixed wrong loggin in bind9 configuration - Moved restarting of services from cf-files to skolelinux-restart-services - Moved skolelinux-test-install and skolelinux-restart-services here from debian-edu-install - No more initializing of LDAP if data exists * Ragnar Wisløff - Changed default kernel for thin clients to PXE -- Petter Reinholdtsen Sun, 29 Feb 2004 15:42:13 +0100 debian-edu-config (0.360) unstable; urgency=low * Alex Brasetvik - New netgroups infrastructure. * Petter Reinholdtsen - Get rid of warning message if the user isn't allowed access to the sound device (artsmessagerc) and dialog box on initial login asking about default configuration (kpersonalizerrc). - Avoid confusing users about the disabled ssh tunneling script. (Closes: #233174) * Rune Nordbøe Skillingstad - Added ltsp network in acl for squid - Changed to use bind9 -- Petter Reinholdtsen Sat, 28 Feb 2004 17:42:09 +0100 debian-edu-config (0.359) unstable; urgency=low * Make sure /etc/default/update-hostname is created when needed. * Move named configuration from /etc/bind/ to /etc/bind/debian-edu/, to reduce the chance of a name conflict with existing zone files. (Closes: #232805) -- Petter Reinholdtsen Sun, 15 Feb 2004 15:43:26 +0100 debian-edu-config (0.358) unstable; urgency=low * Petter Reinholdtsen - Convert init.d/start-wlan to POSIX sh notation. - Make sure init.d/update-hostname is enabled for all profiles except the main-server profile. * Bart Cornelis - Changed occurences of devel@skolelinux.no to debian-edu@l.d.o everywhere. * Finn-Arne Johansen - Include sbin/logoutkill.sh and sbin/nightkill.sh in the package. -- Petter Reinholdtsen Sun, 15 Feb 2004 11:18:37 +0100 debian-edu-config (0.357) unstable; urgency=low * Make sure it is safe to run 'init.d/enable-nat start' several times. -- Petter Reinholdtsen Sat, 7 Feb 2004 20:49:18 +0100 debian-edu-config (0.356) unstable; urgency=low * Petter Reinholdtsen - Return 0 and not 5 from init.d scripts if the service is unavailable to avoid errors in Debian. The LSM specify 5 as the return value, but this give warnings from invoke-rc.d in Debian Woody. - Fix typo in init.d/enable-nat. - Make sure init.d/update-hostname is disabled by default. - Avoid error message from mii-tool in init.d/start-wlan. -- Petter Reinholdtsen Sat, 7 Feb 2004 20:27:39 +0100 debian-edu-config (0.355) unstable; urgency=low * Petter Reinholdtsen - Improve init.d/ltspnet-nat, making sure it enables IPv4 forwarding if it isn't enabled already. - Improve Linux Software Base complience for all init.d scripts. - Include init.d/backdoor and init.d/wlan in package. - Use dh_installinit to install and enable init.d scripts. This gets rid of some lintian warnings -- Petter Reinholdtsen Sat, 7 Feb 2004 19:53:48 +0100 debian-edu-config (0.354) unstable; urgency=low * Petter Reinholdtsen - Improve init.d/ltspnet-nat. Add 'restart' and 'status' arguments. Make it possible to override the default configuration using /etc/default/ltspnet-nat. - Add depends on iptables as init.d/ltspnet-nat need it. -- Petter Reinholdtsen Sat, 7 Feb 2004 10:07:46 +0100 debian-edu-config (0.353) unstable; urgency=medium * Petter Reinholdtsen - Make sure bin/update-ini-file handle missing files by creating them first, and then leave it to Config::IniFiles to update the content. - Change Build-Depends to Build-Depends-Indep as this package is architecture 'all'. - Add Andreas Schuldei as uploader. -- Petter Reinholdtsen Sat, 31 Jan 2004 20:19:56 +0100 debian-edu-config (0.352) unstable; urgency=medium * Petter Reinholdtsen - Jump to version number to 0.352 make sure it is higher than the version used in Skolelinux / Woody (0.351.skolelinux.#). - Fixed several syntax errors in ldap-bootstrap/root.ldif: All lisAclGroups needed a 'member' attribute, the Variables object was listed twice, and the cn and dn of object 'juadmins' was not the same. - Made sure all groups are object class posixGroup. - Reordered objectClass specifiers to make sure all objects use the same order; top, RFC-standardized groups, and site-specific groups. - Make sure ldap-skolelinux-install exit on first error, to try to detect if it fail. - Rewrite update-ini-file from using libconfig-ini-perl to using libconfig-inifiles-perl, to get a dependency which exist both in Woody and Sarge. * Per Harald Westby - cf.apache adds entries for OpenOffice.org document types to /etc/mime.types * Finn-Arne Johansen - Added scripts to remove stray processes. One for logout (logoutkill.sh), and one for a nightly cron task (nightkill.sh). - Added script apt-get-update-files-download that gives somewhat a better message whenever there is new packages waiting to be installed. -- Petter Reinholdtsen Fri, 30 Jan 2004 22:46:09 +0100 debian-edu-config (0.1) unstable; urgency=low * Initial upload, based on the current Skolelinux version 0.350-7. -- Petter Reinholdtsen Sat, 17 Jan 2004 16:00:09 +0100