debian-edu-config (0.415) unstable; urgency=low [ Petter Reinholdtsen ] * Change LTSP build rules to use a network based APT source when build LTSP chroot with amd64 netinst CD, as the CD is missing the i386 binaries needed. * Remove cfengine rule to update /etc/default/update-hostname. It is now handled by preseeding. Solves skolelinux bug #1228. [ Daniel Hess ] * For network based LTSP build on amd64 change build rules: . Set option_mirror_value instead of MIRROR and add option_extra_mirror_value for skolelinux/local packages. . Set local as component for exta_mirror and remove it for all other mirrors. . Add the Debian-Edu archive key as in debian-edu-archive-keyring to the apt-keys list, so it is available when the Release file is checked. . Check for http_proxy set to "high" and unset it, if it is. This seems to be a bug with debconf, which returns always "high" after the debconf priority (which is high) was been read. -- Petter Reinholdtsen Fri, 20 Jul 2007 17:08:03 +0200 debian-edu-config (0.414) unstable; urgency=low [ Daniel Heß ] * Add suffix for group mappings to samba config. Allow samba to add groupmapping existing groups in the slapd config. This restores the old behaviour from when groupmaps where stored external. * Add Samba groupmap information to "admins" group when loading root.ldif in ldap-debian-edu-install. (Closes skolelinux bug #1223) * Include "displayName" attribute in the groupmap. This is not required for it to work, but it's displayed in Windows and is less confusing this way. [ Petter Reinholdtsen ] * Remove cfengine rule to edit /etc/opera6rc.fixed and other references to Opera. Opera is no longer included. * Add more debug output to ldap-debian-edu-install. * Disable editing of /etc/inputrc, as testing show that it is no longer needed to support 8-bit characters in bash. * Remove bogus calls to db_go in debian-edu-config.postinst. [ Holger Levsen ] * Modified /etc/lsb-release to only include DISTRIB_DESCRIPTION. -- Petter Reinholdtsen Wed, 18 Jul 2007 00:26:20 +0200 debian-edu-config (0.413) unstable; urgency=low [ Ronny Aasen and Petter Reinholdtsen ] * Fixed a bug in cfengine's ltsp_arch variable, that broke the installer. Based on patch from Klaus Ade Johnstad. Fixes skolelinux bug #1196. [ Klaus Ade Johnstad ] * Fixed typo introduced in fix for skolelinux bug #1196 * Fixed tail according to new syntax, 's/tail +/tail -n +/g' in /usr/sbin/ltsp-make-client * Fixed bug #1220, typo in lts.conf [ Petter Reinholdtsen ] * Update ltsp testsuite to use i386 on amd64 systems to fix skolelinux bug #1200. * Fixed debian-edu-etc-svk initialization using expect, and improved the script to a point where it is working properly. * Make it possible to enable debian-edu-etc-svk by preseeding debian-edu-config/etc-in-svk, and include cronjob for updating the svk state of /etc/. Depend on svk and expect to make sure the needed packages are installed. * Make sure init.d/start-wlan is not executed during package installation, as it can kill the network connection on laptops. * Change init.d/fetch-ldap-cert to extract the server certificate using the SSL protocol, instead of downloading it over HTTP. * Correct ldap-tools/mkslapdcert to extract the server certificate (and no the public key) and make it available for download, as this is the file needed by clients interested in verifying the SSL connection to the LDAP server. * Rewrite ldap.conf to use the downloaded LDAP server certificate to verify the connection, trying to make it possible to disable the 'TLS_REQCERT never' setting to enforce this. It is not yet working, so the 'TLS_REQCERT never' is still needed. This is related to skolelinux bug 1211. * Move stray client side LDAP configuration from cf.ldapserver to the more correct cf.ldapclient. * Remove kdm theme cfengine rules. They are no longer needed. * Renamed the 'update' command in debian-edu-etc-svk to commit. The old command still work, but will be removed in the future. * Add proposed APT sources in the LTSP chroot as well. Related to skolelinux bug #1168. * Remove code in mkslapdcert to make the LDAP SSL certificate available from the web server. It is no longer needed when fetch-ssl-cert can fetch it directly from the LDAP server. Make sure to only try to download the certificate if it is mentioned in the LDAP config. * Modify cfengine rule for editing /etc/libnss-ldap.conf and /etc/pam_ldap.conf to avoid editing if the host setting already is present. * Improve usage information printed by debian-edu-fsautoresize. * Extend testsuite/taskpkgs to detect if a package in a task is missing. * Update cfengine rule for /etc/hosts.allow to also allow access from 10.0.2.0/23 to tftp and portmap, making sure diskless workstation boots get access. * Allow 127.0.0.1 NFS mount privileges to the LTSP chroot, to get qemu testing to work out of the box. * Updates in ltsp-make-client: - General cleanup and convert it to use aptitude instead of apt-get to track manually installed packages. - Make sure it installs debian-edu-archive-keyring, and - fetches the LDAP SSL certificate. - Add code verify that enoug disk space is available in /opt/ltsp/$arch before starting. Using 4096 MiB as the limit. - Add code to make sure /var/lib/dbus and /media is writable by dbus. Solves skolelinux bug #1180. - Stop installing usbmount. It does not work at the moment, and is not needed when udev/hal is working. * Specify SCREEN_07=ldm in lts.conf to make sure ldm is still enabled on thin clients after ltsp-make-clients installed kdm. Solves skolelinux bug #1210. [ Steffen Joeris ] * Include debian-edu-etc-svk under the SBIN programs in the Makefile to make sure it is included in the binary package * Make sure that the start page translations are in sync with the English page (Closes skolelinux bug #1156) - Include updated Spanish start page Thanks to José L. Redrejo - Include initial Russian start page Thanks to Yuri Kozlov - Include updated German start page Thanks to Ludger Sicking - Include updated French start page Thanks to Xavier Oswald - Include updated Norwegian start page Thanks to Frode Jemtland - Include updated Dutch start page Thanks to Thijs Kinkhorst * Delete old obsolete directories from the old kde-profile * Add kgeography, gcompris, gimp and stopmotion to the students desktop (See skolelinux bug #1199) * Make sure that the standard kde start menu is recognized and avoid having an empty menu (Closes skolelinux bug #1199) * Remove obsolete desktop-directories dir from students kiosk mode * Change slapd-etch_debian-edu.conf to allow the members of the admin group to perform their administrative privileges (Closes skolelinux bug #1146) * Uncomment code in debian-edu-etc-svk to call aptitude, because the dependencies are already solved via Depends field and it would cause the installer to fail (Closes skolelinux bug #1205) Thanks to Daniel Heß * Remove dependency against debianutils as this package is essential * Make sure that Makefile clean call will honour failures * Remove some kde restrictions from the kiosk mode, only keep the rule that students are not allowed to start a new session and can't become root via kde. Thanks to Klaus Ade Johnstad for some advice * Include configuration file for adept_notifer to tell the application not to start during login (Closes skolelinux bug: #1151) [ Daniel Heß ] * Let cupsd listen on /var/run/cups/cups.sock for connections from local clients like the KDE printer ui (Closes skolelinux bug #1207) * Change slapd (ldap) config to restrict jradmins from changing the passwords of users with higher privileges (members of the admins group, smbadmin and the rootdn). This could had been used to set new passwords and gain access to accounts with higher privileges. Many thanks to Steffen Joeris for helping to implement this. -- Steffen Joeris Thu, 12 Jul 2007 21:53:16 +0200 debian-edu-config (0.412) unstable; urgency=low [ Petter Reinholdtsen ] * Remove init.d/loadcpufreq, as the functionality is moved to the cpufrequtils package. * Add new pam.d/common-auth-debian-edu activated on standalone installations to make sure console users is given access to local devices. * Remove obsolete pam.d files not used since woody. * Provide access to the scanner group for users on the console. Based on patch to user-setup in Ubuntu. * Make default /usr/share/debian-edu-config/fsautoresizetab and include it in the package. * Change quoting in the dhcpd.conf editing in sbin/ltsp-make-client to try to get it working with bash (Related to Skolelinux bug #1060). * Install localization-config in ltsp-make-client, and run it after the packages are installed, trying to fix skolelinux bug #1127. * Make sure all pxe booting clients use the same path to pxelinux.0 in dhcpd.conf. * Remove support for etherboot/non-pxe boot in dhcpd.conf. Those with such network cards will have to add it manually. * Make sure the munin server is treated as a munin client when collecting information to get the new sitesummary integration working out of the box. Change how munin-client.conf is updated to get the cfengine rule working. * Drop the fuse group from the list of groups assiged to console users, and make it a group assigned to all logged in users on thin clients, to make it easier to enable local device access on thin clients. * Make sure kderc is updated to enable the special desktop icons for the root user and the members of the admins group. * Make sure /var/www/index.html.?? files uses relative URLs when possible, and use the symbolic www DNS name instead of tjener. * Modified squid to access SSL on port 631, and change all links to Cups to use https on this port. * Change ldap-tools/mkslapdcert to secure the directory where the certificate is created before creating the certificate, and make the public key available in a separate file to make it easier to copy it to the clients. * Create init.d script fetch-ldap-cert to download after apache starts the LDAP SSL certificate on clients when they boot, unless it already is downloaded. * Rename ESERVER to the correct ESPEAKER in the desktop-profile trigger for thin client sound settings in KDE. Fixes skolelinux bug #1183. * Add fuse to /etc/modules on thin-client-servers, to make sure local device access work out of the box when enabled. Fixes skolelinux bug #1184. * Enable sound on LTSP thin clients by default, and let those who want silent clients disable it by changing to SOUND=N in lts.conf, instead of the other way around. * Add 000-arch-detection plugin for ltsp-build-client, to install i386 LTSP chroot on amd64 machines. Fixes skolelinux bug #1195. * Remove obsolete/renamed scripts cfengine-skolelinux, skolelinux-hd-warn, skolelinux-restart-services and skolelinux-test-install. The rename was done in 2004, so documentation should be updated by now. * Enable local device access on LTSP thin clients by default. * Rename cfengine variable de_arch to ltsp_arch, to make it more obvious what the variable is used for. Change its content to i386 on amd64. [ Ronny Aasen ] * Remove the timeout on nbd-server, it removed the swapfile from the client while it's running. * Cleanup the slapd config file. Rename from sarge to etch. And update the cf script to match. And remove the old woody file from the package. * Added sambaNextRid to smbadmin's acl. needed in order to join machines to the domain. * Added ldap-users.pl with dependencies from webmin 1.180, used by samba to create machine accounts in ldap. * Edited smbaddclient.pl to use the provided ldap-users.pl, and not webmin. * Added configfile to support the links to debian-edu-doc made from the local webpage. * Added script to cleanup the ltsp network swapdir daily (Closes Skolelinux Bug #1169) * Added script nbdquery. shows ports in use by nbd-client on ltsp clients * Changed nbdswapd-cleanup to use nbdquery on the ltsp clients, and edited cf.ltsp to activate nbdquery on the ltsp clients * Add dependency on lsof * Added nbdquery to the makefile [ Holger Levsen ] * Relabeled descriptions to say "all $foo in the institution" instead of "...school" [ Klaus Ade Johnstad ] * Small fix of comments in dhcpd.conf * Removed Norwegian comments in dhcpd.conf * Removed unneeded stanzas for ltsp-clients -- Petter Reinholdtsen Sat, 16 Jun 2007 15:17:06 +0100 debian-edu-config (0.411) unstable; urgency=low [ Steffen Joeris ] * Remove icons from the kiosk desktop for student users which relate to uninstalled software (Closes Skolelinux Bug #1140) * Remove obsolete kiosk-profile directory as it is now divided into individual directories * Allow students to run a shell and the kde command execution * Include the kiosk mode for root - Give root the tjener desktop icon to call the internal webpage - Update Makefile and add the tjener.desktop file - Update debian-edu-config.postinst to generate additional config entry for the root kiosk mode [ Petter Reinholdtsen ] * Add the fuse group to the list of groups assigned during login, trying to get LTSP local device access working out of the box. * Avoid hardcoding the IP address on the default apache web page. * Avoid hardcoding IP addresses in the nagios config. This will cause problem in case DNS is unavailable, but make it easier to change IP subnet. * Add pam-foreground as an optional pam session module, to get /var/run/console/ populated with information needed by dbus to give special privileges to users on the console. * Edit /etc/security/group.conf to set up local device access to local users for all profiles, not just standalone and workstation. * Remove unused directory /etc/kde2/kdm from package. * Correct URL to popularity-contest in the default web page. * Drop the popularity-context section in the default web page, as it is part of the default install now. * Add group description to the LDAP groups missing it (Closes skolelinux bug #1132). * Add new init.d script loadcpufreq based on scripts found in the powernowd package in Ubuntu to load the required cpufreq kernel modules, and edit /etc/default/cpufrequtils to enable ondemand cpu scaling to save power. * Change install rule to fail on errors copying files. * Add LC_ALL=C in bin/update-hostname-from-ip to make sure the output format is known. * Use the service name in tjener.desktop, to make it easier to use a different DNS domain. * Modify cf.ltsp to not export /var/opt/ltsp/swapfiles. Swap is done using nbd and not nfs now. * Removed obsolete cf/cf.sarge-installation-cleanup and cf/cf.devfsd. * Avoid hardcoding DNS domain name on the web page. Use relative links where it is possible. * New script sbin/debian-edu-fsautoresize making it easier to resize LVM volumes. Add depend on libfilesys-df-perl to get it working. * Minor cleanup related to the init.d/nbd-poll script. [ Bart Cornelis (cobaco) ] * Added Dutch translation [ Holger Levsen ] * Added myself to uploaders. * added catalan translation, thanks to René Mérou * converted /var/www/index.html.?? files to unicode (Closes: Skolelinuxbug #1142) [ Ronny Aasen ] * Added configuration for network swap out of the default install. (Closes Skolelinux bug #1087) * Generate random nagios password at installation time (Closes skolelinux bug #1119) * Edit testsuite/bind9-dns to support bind9-host * Edit ltsp-make-client to include preseeds for popularity-contest. * Edit ltsp-make-client to prevent starting a second instance of all deamons in the chroot. * Make a working resolv.conf for the ltsp thin clients. (Closes Skolelinux bug #1073) * Provide debian's default DB_CONFIG before making the ldap DB's, shameless rip from slapd.postinst. (Closes Skolelinux bug #1150) * Renamed index.html.nb to index.html.no (Closes Skolelinux bug #1148) * Changed links on nagios to https. * Added a variable in cfengine, and replaced i386 in cf scripts. * Added support for bind9-host to update-hostname-from-ip. * Cleaning up cf.exim, mail should own /var/lib/maildirs * New syntax in authldaprc (Closes Skolelinux bug #1163) * Added slbackup-php in the webpage * Added a /debian-edu-doc to the webpage * Added subtree_check on exports made by ltsp-make-client (Closes Skolelinux bug #1167) * Forcing the use of encryption on cups administration pages. * Dropped developer pages, we use the wiki. on the webpage. * Updated the url for the mailinglists. On the webpage. * Make nbd-server save in the correct swapfile dir. avoid creating large files in /tmp (Closes Skolelinux bug #1169) [ Finn-Arne Johansen ] * Prepared for better integration with resolvconf -- Petter Reinholdtsen Sun, 27 May 2007 08:47:19 +0200 debian-edu-config (0.410) unstable; urgency=low [ Patrick Winnertz ] *Include wpad for autoconfiguring the proxy for clients. [ Steffen Joeris ] * Correct the path to the kiosk profile in /etc/kderc * Remove unneeded .desktop files from the applications and Desktop sections for kiosk profile as these are not on the CD * Adding first version of the kpanel for the student kiosk profile which includes some generic directories and the some of the current applications * Remove webmin check from testsuite scripts as we do not have webmin anymore and this always reports an error after the installation * Drop the ispell-dict-default script from the testsuite as we are no longer distributing the education-desktop-other metapackage on the first CD due to space limits and therefore no longer including the various dictionaries and make sure that bogus error messaging after the installation is avoided * Do not perform the bind9-dns check after installation in case a standalone profile will be installed * Only perform network check for showmount if nfs-common is installed and therefore exclude the Standalone profile from this check * Disable all syslog checks on Standalone profile as it is not setup * Add myelf to uploaders * Add information about kiosk mode students to README * Drop cf.apache script and make sure that cf.apache2 script is installed * Include Spanish debconf translation (Closes: #407474) thanks to Javier Ruano * Include initial Portuguese debconf translation (Closes: #414060) thanks to Ricardo Silva [ Petter Reinholdtsen ] * Extend filesystem test to report ext3 file systems without the resize_inode feature. [ Ronny Aasen ] * disable cf.apache since we are installing apache2 now. * configure apache2 userdir with our homedir location * provide a new apache2 default sitefile, showing our frontpage and correct hostmaster email address. * provide a new apache2 ssl default sitefile, using a selfsigned cert. * modified debian/rules to use a debian-edu-config.links file * using cf.apache2 to enable userdir and ssl modules. * using cf.apache2 to disable the debian stock default site, and enable our own ssl and regular default site files * Deleted webmin from our web frontpage * Added link to sitesummary on our web frontpage * fixed link to nagios on web frontpage * Added experimental nagios2 configuration /etc/nagios2/debian-edu * Added and enabeled cfengine script cf.nagios2 * mount nfs with the tcp argument in automounter ldap * Add lwat to the local homepage * Add append_domain to squid.conf, to fix broken resolv on non FQDN * Make Nagios ignore space checks on special filesystems * Trying to remove the spare freespace partition properly, in cf.fstab * Update testsuite/timezone, /etc/localtime is not a symlink anymore. * alter the way we configure bind9, to avoid breaking on bind reconfiguration [ Finn-Arne Johansen ] * chown /var/lib/ldap to openldap after slapadd has been run as root -- Steffen Joeris Fri, 9 Mar 2007 19:22:09 +1100 debian-edu-config (0.409) unstable; urgency=low [ Luk Claes ] * Added myself to uploaders. [ Petter Reinholdtsen ] * Adjust cfengine test for detecting etch, to look for '4.0' and not 'testing', to match the current version. * Change testsuite/bind9-dns to not report missing Internet connectivity as an error. * Change testsuite/ispell-dict-default to handle locales with UTF-8 or other non-ISO-8859-1 charmaps properly. -- Luk Claes Wed, 22 Nov 2006 22:31:59 +0100 debian-edu-config (0.408) unstable; urgency=low [ Ronny Aasen ] * Add authorative to dhcp configuration * reordering cf.ldapclient fixes libnss-ldap * Modify cf.ntp to support setting the clock on startup * Add /etc/lsb-release with some initial values. This should remove the need to preseed ltsp with --dist since lsb-release should function as expected * remove cf.popcon from the makefile. since cf.popcon is removed * added ltsp plugin in order to configure ltsp pxelinnux to use usplash * added nosuid to /tmp in cf.fstab * creates /opt/ltsp/i386/etc/ltsp/update-kernels.conf tru cf.ltsp this enables usplash in ltsp booting clients [ Steffen Joeris ] * Include French translation for debconf questions (Closes: #392190) Thanks to Guilhelm Panaget * Delete apt settings for woody and sarge, to clean up a bit * Delete old kdesktoprc for the kiosk profile * Make sure that the kiosk profile is installed in a hierachic order * Include new desktop icon framework for the debian_edu_pupils * Update the package build to honor the new kiosk files * Include German translation for debconf questions (Closes: #396383) Thanks to Helge Kreutzmann * Add special desktop restrictions to the debian_edu_pupils kiosk mode * Add the first customized kmenu for the debian_edu_pupils kiosk profile which is divided into the disciplines [ Petter Reinholdtsen] * Enable esd sound in KDE for thin client users by adding a new desktop profile thin-client for all users with LTSP_CLIENT and ESERVER set in the environment. * Modify default pam.d/common-auth to use pam_group, to make it easier to provide local device access to the user logged into the console. Rewrite pam_group config to include more groups and also work on tty1-9 logins. Activate it on thin-client-server installs, as well as workstation and standalone installs. [ Morten Werner Olsen ] * Removing all traces of bind8. -- Petter Reinholdtsen Sun, 19 Nov 2006 13:56:08 +0100 debian-edu-config (0.407) unstable; urgency=low [ Ronny Aasen ] * Modify cf.ldapclient, Altering libnss-ldap default bind policy to soft * Added commented volatile sources for etch to cf.apt * modify cf.fstab, to delete the dummy freespace logical volume * fix the regex matcing /tmp in cf.fstab * updated www.uio.no ip address in testsuite * dont run debian-edu-ltsp, we use ltsp-client-builder [ Petter Reinholdtsen ] * Correct exit code and output handling in update-hostname-from-ip. * Drop code to edit /etc/defaults/ntpdate. It is no longer needed. * Moved testing of network settings from debian-edu-install to testsuite/network. * Add DNS alias sitesummary.intern for the sitesummary collector. [ Steffen Joeris ] * Include Czech translation for debconf questions (Closes: #391475) Thanks to Miroslav Kure -- Petter Reinholdtsen Wed, 4 Oct 2006 13:50:48 +0200 debian-edu-config (0.406) unstable; urgency=low [ Petter Reinholdtsen ] * Use 'tail -n +3' instead of 'tail +3' in ntp test, to avoid warning. * Make dash test more robust. * Update test to detect missing webmin and report that. * Correct syslog UDP activation code to edit /etc/default/syslogd, not /etc/default/sysklogd. * Fix typo in webmin test script. * Modify testsuite/kde to accept execute bit on /etc/kde3/kioslaverc. No idea why the file is executable, but we only need to check if it is readable for all. * Correct testsuite/webcache to not test a non-proxying connection to squid. It does not, and should not, work. * Add testsuite/ltsp to detect if the LTSP chroot is installed on the thin client server. * Modify ntp test to check if /etc/default/ntpdate have syntax errors. * Change init.d/update-hostname to use the LSB log functions and to not print anything when VERBOSE=no. Add depends on lsb-base. * Removed useless chkconfig line from init.d scripts. [ Steffen Joeris ] * Mark update-hostname debconf question as internal and fix typo at enable-nat question (Closes: #388062) * Fix typo in update-hostname debconf question to make sure lintian is happy * Change hash commenting for /etc/default/ntpdate file, because current code breaks configuration for main-server(only), because of if-clause * Remove mime-types from cf.mime-support which are already merged into the mime-support package and write bugreport against mime-support for the rest to make sure we can remove cf.mime-support soon [ Ronny Aasen ] * Added cf.fstab, purpose is to add /tmp as tmpfs in fstab * Modify dhcp configuration to look for pxelinux.0 in the correct location * ldm fail if Xsession is not executable, edit cf.ltsp to make sure /etx/X11/Xsession is +x -- Petter Reinholdtsen Sun, 24 Sep 2006 17:26:20 +0200 debian-edu-config (0.405) unstable; urgency=low [ Patrick Winnertz ] * Removed obsolete alternative dependency on cfengine, because it is going to be removed from debian. [ Petter Reinholdtsen ] * Rewrite base-config test to no longer report the missing dbootstrap_settings as an error. It is not present on etch. * Adjust syslog cfengine rule to enable UDP listening on etch. * Adjust webserver test to accept as a success both either apache2 or apache running. * Update debian-edu-ltsp to work with both old and new version of ltsp-server. Change default dist from sarge to etch, and add new option --dist to make it easier to change it. * New test 'dash' to check that /bin/sh points to dash, not bash. * Remove cfengine rule to set GreetString in kdmrc. Leave this to debian-edu-artwork. Use debian-edu-artwork script to enable KDM theme. * Updated LSB header for the init.d scripts. [ Steffen Joeris ] * Cleanup the cf scripts and remove cf.shell and cf.webmin entries and adjust the Makefile * Deactivate slbackup configuration part via cfengine for combo servers as it is merged into the installer, * Add dh_link to debian/rules and use it for linking the ldapdump script into the needed slbackup directory and deactivate the generation via cfengine merge it into the installer * Move the enable-nat part for the thin-client-server into the postinst script and deactivate the cf.nat cfengine call * Start the debian-edu-config.prerm script and make sure that the enable-nat init script is called if nat is enabled * Remove the cf.issue file as we don't use it anymore * Change code for enable-nat script to make it compliant with policy and use the code snipplet from dh_installinit * Add debconf template to ask if enable-nat should be activated or not (Closes: #365140) * Start the debian-edu-config.config script for the debconf question * Include code into debian-edu-config.postinst script to avoid starting enable-nat script if debconf boolean is false * Add po-debconf to Build-Depends-Indep as we need it for the debconf templates * Start the po files for the debconf templates * Add code to debian-edu-config.postinst to start the kde kiosk profiles for debian-edu which creates basic configuration for the /etc/kderc and the /etc/kde-user-profile as a mapping file [ Ronny Aasen ] * Avoid touching the conffile named.conf of bind9, instead give it the option -c filename in the non conffile /etc/default/bind9 * Edit cf.ldapserver and slapd-sarge_debian-edu.conf to try to run slapd as the default openldap user. (Closes Skolelinux Bug #1112) * Fixed wrong dist variable in debian-edu-ltsp, blocked execution * Workaround for a bug in ltsp-build-client. * add --accept-unsigned-package, since our cd is not signed yet. * add a workaround for bug #375077 to avoid the long lookuptimes that occure after the cfengine run edits nsswitch.conf. * PXElinux in etch have changed it needs next-server and root-path options in dhcp now. * incresed editfilesize in cfengine.conf, squid'c config was larger then the previous value. * make debian-edu-pxelinux.cfg use syslinux from the chroot * pxelinux don't like symlinks. copied pxelinux and images instead since hardlinks dont work across devices * added the mandatory nfs export flag for subtree_check or not * remove debian-edu-pxelinux.cfg from cf.ltsp instead call ltsp-server from debian-edu-ltsp -- Petter Reinholdtsen Sun, 17 Sep 2006 17:13:00 +0200 debian-edu-config (0.404) unstable; urgency=low [ Petter Reinholdtsen ] * Remove the cron job bin/filehandle_ctl.sh. It is no longer needed with linux 2.6 kernels. * Comment out cf.shell, as the same setting can be activated using preseeding now. * Update standards-version from 3.6.2 to 3.7.2. No change needed. * Add depend on ${misc:Depends} to get a debconf dependency for the hidden debconf question available for preseeding. [ Steffen Joeris ] * Change build-depends-indep to build-depends as debhelper is needed during the clean target * Increase debhelper level to 4 * Remove obsolete calls for conffiles in Makefile * Cleanup debian/rules to remove the obsolete calls too * Adding md5sum file for package * Change DESTDIR to package name instead of tmp to adjust packaging to current debhelper level -- Petter Reinholdtsen Sun, 20 Aug 2006 23:27:54 +0200 debian-edu-config (0.403) unstable; urgency=low [ Steffen Joeris ] * Update sources.list and adjust it for etch as non-US is gone * Remove cf.webmin as webmin is gone * Remove obsolete cf.shorewall * Remove obsolete cf.kdm_hdwarn as kde is doing this check now * Remove obsolete cf.udev as we are configuring the rights for the sound device via pam (Closes: #370350) * Remove obsolete cf.amanda as we are using other backup methods (Closes: #370393) * Fix configuration of squid.conf in cf.squid * Adjust path for dhcpd.conf in cfrunhosts.pl * Adjust Makefile because of removed files * Fix configuration for authldaprc in cf.imap [ Frode Jemtland ] * Translated norwegian comment in cfengine.conf to english. Fixed skolelinux bug #1088 [ Ronny Aasen ] * Removed webmin from ltspserver profile cfengine run. [ Bart Cornelis (cobaco) ] * Use desktop-profiles instead of debian-edu specific script to set up the kde-profiles (Fixes skolelinux bug #1005). [ Petter Reinholdtsen ] * Correct LSB dependency info in resize_lvm init.d script. -- Petter Reinholdtsen Fri, 4 Aug 2006 19:36:49 +0200 debian-edu-config (0.402) unstable; urgency=low [ Petter Reinholdtsen ] * Update the resize_lvm init.d script: - use MiB instead of LVM PE as size unit. - Make sure it is installed in rcS.d/ - Make sure it isn't started during install nor upgrade. - Rename variable MOUNTPOINT to DEVNAME to reflect its content. - Use lvextend instead of lvresize to be compatible with LVM 1.x. Thanks to Finn-Arne for this idea. - Do not include the resize_lvm default file in the package, to avoid upgrade problems on installations where it is modified. * Update standards-version from 3.6.1 to 3.6.2. [ Finn-Arne Johansen ] * Added resize_lvm init-script * Treat sarge and etch as !woody to simplify scripting with cfengine * Keep the slapd config from sarge (not renaming it to "*-!woody_*") * Added etch templates for sources.list (maybe it's not needed) -- Petter Reinholdtsen Wed, 19 Apr 2006 22:50:02 +0200 debian-edu-config (0.401) unstable; urgency=low [ Petter Reinholdtsen ] * Fix syntax error in boot_xconf. (Closes: #343457) * Achnowledge old upload. (Closes: #301565) * Modified the ltsp-make-client script used for building diskless workstations: - Modify code to rename rc#.d symlinks instead of removing them, to avoid them to reappear after an upgrade. - Reinsert init.d scripts ifupdown and networking when building diskless workstation, to make sure the loopback network interface is enabled. - Make sure to only update /etc/exports once when executing ltsp-make-client several times. - Move network interface name into variable to make it easier to change. - Use the apt location of ltsp-server instead of ltsp-client to detect the apt source to use, as the latter might not be installed nor available on the server. - Add /opt/ltsp instead of /opt/ltsp/i386 to /etc/exports, to be compatible with the update done by the ltsp package itself. * Add dependency on host to make sure init.d/update-hostname work. -- Petter Reinholdtsen Thu, 23 Mar 2006 13:08:44 +0100 debian-edu-config (0.400) unstable; urgency=low [ Patrick Winnertz ] * Changed symlink of /bin/sh from /bin/ash to /bin/dash * Added shellcommands section in cf.shell in order to invoke dpkg-divert --add /bin/sh (Closes Skolelinux Bug #1041) [ Benjamin Sonntag ] * Added manpages for some binaries in this package. Also added a mechanism in Makefile so that /bin /sbin and ldapprograms manpages are autodetected and installed too. * Added file for backdoor in /etc/default (still disabled by default, but useful to know how to fill it) * Added documentation in README file for samba ssh and apache. * Corrected lintian warning on xboot_conf not having restart and reload cases. * Added CFBINFILES to Makefile so that cfd and cfrunhosts.pl are now executables. [ Steffen Joeris ] * Distribution umask only in /etc/profile (Closes Skolelinux Bug #996) * Disable connection settings in courier-imap so that the cf.imap is running and the courier-imap is not running by default (Closes Skolelinux Bug #998) * change ntp-configuration to not use pool.ntp.org and let the clients search for ntp.intern (Closes Skolelinux Bug #1024) * Dropping kmail preconfiguration (Closes Skolelinux Bug #550 and #1017) * Also remove conffiles for kmail from /usr/share/debian-edu/* and update Makefile * still providing sound permission changes for devfs if someone still uses kernel24 * update Makefile for cf.udev [ Henning Sprang ] * Now configuring NTP with cfengine (cf/cf.ntp). (Closes Skolelinux bug #1024) [ Bjorn Ove Grotan ] * Fixed typo in tools/jrpasswd [ Ragnar Wisloff ] * Added example of settings for serial mouse to lts.conf. Fixes #584. [ Finn-Arne Johansen ] * Fixed typo in when creating pxelinux config for old ltsp * Added permissions to set timestamps when passwords was changed * Display menu for pxebooting devices if more than one netbooting solution is installed * Set PATH for ldapdump.sh to properly stop/start slapd. (Closes Skolelinux bug #1000) * Cleaned up the dependencies of debian-edu-config, only include the necesarry packages for installing this package. * added HOST variable for talking to the ldap-server * Set the correct permission on samba passwords. (Closes Skolelinux bug #1007) * Added support for doing a netbased installation of ltsp in debian-edu * Added support for installing ltsp in another location than /opt/ltsp/i386 * Extended/rewritten script for creating diskless/stateless workstations * Split up the configuration of courier imap, should close skolelinux bug #998 * Added dependency to ng-utils (should close Skolelinux bug #1033) * Stopped imap from running on a unencrypted port * Removed positive test for imap2 (unencrypted port) (closes Skolelinux #1038) * Added commented out cfengine code to set up access to local devices when logged in via kdm on non-server (alternativ fix for Skolelinux #974) * Added sample definition for shared folder in samba * Added sample config for usbmount * Added sample config for pam_mount on stateless clients * Added script for making stateless workstations to the package, should be ready for testing * Added workaround for missing background.png in ltsp-themes (Skolelinux #1035) * Set up mozilla-firefox to use kprinter and A4 as default. Thanks to Klaus Ade Johnstad for finding the bug (and the solution) (Closes Skolelinux #1042) * use pam_group instead of manipulating the devices to get access to local devices * ldap-debian-edu-install needs to use bash for now * Dont test for a running squid on a thin-client-server. Thanks to Ole-Anders Andreassen for finding this bug (Closes Skoleliux #1054) * Add support for detecting Arch in debian-edu-ltsp (Closes Skolelinux #1055) * Modified slapd-sarge-debian-edu.conf to allow jradmins to change passwords, and admins to add user * Dont use bash on diskless workstation, since it breaks ltsp-client-setup (Closes Skolelinux #1059) * Removed extra "-e" in ltsp-make-client breaking dhcpd.conf (Closes Skolelinux #1060) * No need to allow users to read their own encrypted samba password * Need to allow samba root to update nextID, and to search the samba Attributes (Closes Skolelinux #1061) * Define wins server in dhcp, to allow windows clients to resolv the samba domain (Closes Skolelinux #1067) [ Patrice Neff ] * Added support for using cfengine server * Enabled configuration of the sysstat system * Cleaned up the test for squid * Cleaned up test for XFS * Included libnet-ldap-perl required by some of the ldap-tools * Added a Spanish translation of the index page at var/www/index.html.es * Allow port 10000 in Squid configuration (so that Webmin is accessible) [ Morten Werner Olsen ] * Removing /etc/skel/.kde/share/config from debian/dirs. * Removing all references to /etc/default/ntp-servers (isn't owned by any packages). * Cleaning up cf/cf.ntp and commenting out all references to pool.ntp.org and using 127.127.1.0 as default for main-server (as NTP will understand that is using the local clock as reference). * Fix /etc/default/ntpdate for non-Main-server's (point to ntp). * Fixing Finn-Arne's email-address in the 0.397 changelog entry (prevents lintian-error). * Disabling the xfree-test that assume that xfree86 is started. * Disabling the kdm-tests that assumes that kdm is started. * Now defaulting to not sending any Nagios-mails. * Change my email-address in the Uploaders-field. :) [ Andreas Schuldei ] * making slapd use ipv4 only in cf.ldapserver (for uml testframework, where long timeouts occure when probing for ipv6 stuff) [ Frode Jemtland ] * Found a updated version of debian-edu-config/bin/debian-edu-ltsp in one of my test servers. This seemd to me to be a improvment to get disk less workstations to work, with ltsp. Probably need more files from this installation to get it to work * Updated the index.html.en and index.html.de with a plea to install the popcon package * Added a German var/www/index.html.de by Ralf Gesellensetter * Updated rest of the index files to have a link to the German translation * Changed special norwegian characters to html codes [ Bart Cornelis (cobaco) ] * Added var/www/index.html.nl with a Dutch translation of the default page. * Updated the other index.html pages to have a link to the Dutch version * Added dutch index.html in the Makefile script -- Morten Werner Olsen Sat, 4 Mar 2006 19:33:13 +0100 debian-edu-config (0.399) unstable; urgency=low [ Bjorn Ove Grotan ] * Added administrative password-change utility (tools/jrpasswd) [ Morten Werner Olsen ] * Added LDAP-database dump script (tools/ldapdump.sh) * Added etc/slbackup/pre.d to debian/dirs * Added a cfengine-hook that symlinks the tools/ldapdump.sh into /etc/slbackup/pre.d/ (fixes debian-edu bug #923) * Fixed the permissions on the config-file (pxelinux.cfg/config) for PXE-booting. * Updated cf/cf.kdm to get a little bit more interesting background for the login-screen. * Added myself as uploader. * Deliver mail to root as the mail-user (not root). This prevented mail for root to be delivered. [ Petter Reinholdtsen ] * Fix typo in testsuite/webcache, using correct argument to find. * Close stdin/stdout when restarting the wlan to avoid hanging on first time installs. * Add LSB init.d headers to document boot time dependencies. * Use new script debian-edu-ltsp to build LTSP environment using the new LTSP debian packages. * Make sure missing sound card don't give a warning dialog box. * Make sure testsuite/php is no longer used. We do not install PHP any more. * Only run testsuite/{ldap-server,webmin,webserver} on Main-Server installs. * Only run testsuite/{ldap-client,ntp,webcache} on Main-Server, Workstation and Thin-Client-Server installs. * Only run testsuite/dhcpd on Main-Server and Thin-Client-Server installs. * Only report missing kdm and X server as information when running the testsuite, as these are started after this point in the installation sequence. * Start on script ltsp-make-client to convert a LTSP thin client chroot to a more complete client installation. [ Maximilian Wilhelm ] * Added exim4 LDAP configuration for server and client (Closes: #276769) [ Finn-Arne Johansen ] * Added firefox proxy, cache and printer config * Fixed detection of 2.4-kernel * Included the munin cfengine script, and fixed the munin script * Made cfengine-debian-edu work with both cfengine and cfengine2 * Better detection of group "installation" * Replaced all occurences in chengine of "installasjon" with "installation" * Disabled FifoDir for kdm on non-standalone, to prevent shutdown from a logged in session * Disabled shutdown from non-local display for kdm (fixes debian-edu bug #949) * Updateded /etc/samba/slapaddclient.pl because tdbdump is relocated * Set up automounting via ldap * Disabled listing of hashed password to unauthenticated users (fixes debian-edu bug #945) * Gave smbadmin access to the Machine Subtree (fixes debian-edu bug #950) * Installation script for lessdisks thin client is availible, but does not run by default * Set up ldap users on lessdisks clients * Set a more suited certificate for the postoffice (Closes: #301288) * Fixed Typo preventing hidden home dir mounting from Windows server Thanks to Bernt Johnsen AFK for discovering * Close debconf fd before init-script runs, prevents initscripts from runing cleanly (Fixes debian-edu bug: #301565) * Made nightkill a bit more quiet * Made debian-edu-config Replace,Conflict and Provide ncs (fixes debian-edu bug #975) * Fixed missing translation from installasjon -> installation in cf.cups (Fixes debian-edu bug: #967) * Disabled ldap idletimeout, since kdm fails to set up a new connection * tftpboot files are moved from /tftpboot into /var/lib/tftpboot, rewritten dhcpd.conf, and added script debian-edu-pxelinux.cfg to help maintain pxelinux.cfg/default (Partly closes: #905) * Fixed typo in tools/ldapdump.sh to remove error-message * Added support for using /usr/share/d-e-c/tools/passwd as non-root user * Fixed permission on samba passwords for ldap [ Ragnar Wisloff ] * Corrected cfengine edit line for USE_XFS in cf.ltsp to make LTSP * Changed permissions on /etc/skel/.kde/share/config/kmailrc to make only user readable. (Fixes debian-edu bug #887) * Added cf.sysstat which enables the sysstat system * Added Nagios config files and amended cf.nagios to fit. (Fixes debian-edu bug #953 and #954). * Fixed missing logos from NAgios package. * Added UserDir config to cf.apache. Fixes debian-edu bug #639. [ Frode Jemtland ] * Corrected errors about php4 in cf.apache * Updated information about ServerAdmin in cf.apache * Added language support for nb, no and nn in cf.apache * Commented out mime type nb in cf.apache * Fixes skolelinux bug: #938 and #864 * Added files to /var/www: index.html.nb, index.html.en, logo-trans.png, skl-ren_css.css. Fixes debian-edu bug: #942. * Fixed typos in html files. [ Andreas Schuldei ] * extending ldap-debian-edu-install to deal with cases where /etc/shadow does not exist (for uml test installations) -- Petter Reinholdtsen Sun, 11 Dec 2005 21:00:32 +0100 debian-edu-config (0.398) unstable; urgency=low * Finn-Arne Johansen - Added common-auth|account|passwd-ldap-debian-edu for ldap authentication, Tried to enable it for Sarge only (Closes: #275031). - Added detection of sarge in lessdisks-chroot. - Added conf-files for winbind/ads authentication, with dummy variables - Added pam_env to common session to support /etc/environment - better detection of woody/sarge - fixed kdm to not show userlist on sarge (Closes: #294048) - fixed kdm to allow root logins on server console (Closes: #294047) - moved dbootstrap_settings on sarge, to prevent cfengine from detect a clean installation if run again - Remove custom Xsession, to get kdm to honour /etc/alternatives/x-session-manager - Rewrite of debian-edu-restart-services - Added test for samba to debian-edu-test-install - Make sure ldap is stopped during ldap-debian-edu-install - Added new imapd.pem for courier-imap-ssl certificate - fixed some ACL stuff in ldap-schema/lis.schema to make it work - Disabled devfsd for 2.6 kernels (use udev instead) - changed slapd-debian-edu.conf -> slapd-sarge_debian-edu.conf to support slapd 2.2 - Moved skript for setting up X in lessdisks ws at boot from d-e-install (also updated) - Replaced cfengine with cfengine2 - sett correct path to cfagent * Bart Cornelis - Set up proxy + kmail when inside a debian-edu network. * Petter Reinholdtsen - Get PCI reporting working in Sarge. * Bjørn Ove Grøtan - Updated norEduPerson.schema * Andreas Schuldei - add writeableBy for ACL usage to ldap-schema/lis.schema -- Andreas Schuldei Sat, 4 Jun 2005 21:36:07 +0200 debian-edu-config (0.397) unstable; urgency=high * Andreas Schuldei - added afs entries to the named zone files * Finn-Arne Johansen - Changed samba into using tls instead of ldaps - Changed test for services in inetd.conf, not lines containing the name of service (Closes: #288912) * Klaus Ade Johnstad -Removed a space, to avoid errormessage "bad substitution" when running /usr/bin/debian-edu-hd-warn -- Finn-Arne Johansen Thu, 6 Jan 2005 11:48:33 +0100 debian-edu-config (0.396) unstable; urgency=low * Correct code to make sure /etc/kde[23]/kioslaverc. It need to create the file if it missing, as the 'files' section is executed before the 'shellcommands' section. * Remove share/debian-edu/common/share/config/kioslaverc. Not all profiles uses a proxy (standalone does not), so KDE should not always use a proxy. * Move editing of /etc/ldap/ldap.conf from cf.ldapclient to cf.ldapserver where it belongs, and where it can be part of the cfengine rules already editing the file. * Do the same editing of /etc/ldap/ldap.conf in woody and sarge, as the rules were similar enough, and seem to differ only for historical reasons. -- Petter Reinholdtsen Sat, 23 Oct 2004 20:43:23 +0200 debian-edu-config (0.395) unstable; urgency=low * Finn-Arne Johansen - Set Thin client nfs-access to be async - Added, but deactivated code to set nscd cache size - Updated ldap initialisation to set up group mapping from unix group admins to samba group "Domain Admins" (fixes skolelinux bug #812) - Updated format for slapd.conf to specify both ldap and ldaps as service - Added pointer to certificate file on sarge server install - Set ldap clients to never check certificate - Updated samba.schema to support sambaPasswordHistory - Added test for squid spool dir ownership - Added host definition for ldap-clients * Klaus Ade Johnstad - Added some more host-templates in dhcpd-debian-edu.conf, and some space between the lines, to avoid some gruff in the comment fields in webmin-dhcp. * Petter Reinholdtsen - Add test to detect errors with /etc/kde[23]/kioslaverc. - Make sure /etc/kde[23]/kioslaverc is readable by all. * Maximilian Wilhelm - Complete rewrite of /etc/group to LDAP migration script. -- Joey Hess Tue, 5 Oct 2004 16:29:20 -0400 debian-edu-config (0.394) unstable; urgency=low * Finn-Arne Johansen - Fixed bashism in detection of workstation profile in cfengine.conf - Added slapdconfig for sarge (bdb backend, commented out for now) - Changed ldap-bootstrap script to support exim4, and nonexisting samba - Added support for sarge in cfengine.conf - Fixed squid config for sarge - Fixed slapd Database setup for sarge - Changed detection of ltspserver profile * Petter Reinholdtsen - Correct xfree86 test. It should no longer report errors on Main-server installs. - Enable postinst code to handle debconf preseeding for init.d/update-hostname. It is now working as it should. - Document some problems with init.d/open-backdoor. - Make sure open-backdoor print a message when it is enabled. * Maximilian Wilhelm - Added ldap base dn to client config - Added CNAME kerberos for tjener to db.intern - Localized debian-edu-hd-warn correctly and added chech if X is running -- Petter Reinholdtsen Sun, 8 Aug 2004 13:28:30 +0200 debian-edu-config (0.393) unstable; urgency=low * Andreas Schuldei - Remove unnecessary and wrong lines from the autofs.ldif. objectclasses OU and automoutMap can not be in the same ldap entry, with stricter checking as in openldap 2.1.X. * Finn-Arne Johansen - Remove path from temporary filename for ldap-user-clean-attic.sh. (Fixes skolelinux bug #786) * Petter Reinholdtsen - Add debconf template install rule. - Add quotes (") around the value stored in /etc/default/update-hostname to make sure it is a valid sh-script even if the value is junk. -- Petter Reinholdtsen Thu, 17 Jun 2004 10:16:04 +0200 debian-edu-config (0.392) woody; urgency=low * Petter Reinholdtsen - Change xfree86 test to only warn if X isn't running. X is started after the test is executed, so it isn't really an error. - Make it possible to configure init.d/update-hostname at install time using an hidden debconf value. - Restart bind before ntpd, as ntpd need to look up 'ntp' in DNS. * Finn-Arne Johansen - Added ldap-user-clean-attic.sh to the command line ldap tools - Changed number of imap clients allowd to connect from same host (closes: #459) -- Petter Reinholdtsen Mon, 14 Jun 2004 09:27:02 +0200 debian-edu-config (0.391) woody; urgency=low * Finn-Arne Johansen - Improved a workaround for bug #286 in skolelinux, #156332 in debian to ensure that the dhcp server is restartable after installation -- Petter Reinholdtsen Sat, 12 Jun 2004 22:06:24 +0200 debian-edu-config (0.390) woody; urgency=low * Petter Reinholdtsen - Only test XFree86, kdm and xfs if it is supposed to be installed (!Main-Server). - Insert code in debian-edu-restart-services to force dhcpd restart as a workaround for skolelinux bug #286. Not sure if it works, but it is better to have this code here instead of in debian-edu-install. - Add test to check if host 'ldap', 'ntp', 'syslog' and 'webcache' is reachable. - Started in README on highlevel description of the configuration changes done. -- Petter Reinholdtsen Fri, 11 Jun 2004 00:04:30 +0200 debian-edu-config (0.389) unstable; urgency=low * Finn-Arne Johansen - Fetch sambasid for PDC instead of domain. * Petter Reinholdtsen - Rewrote samba-debian-edu-admin script to make timeout length a variable, and to fetch hostname short form only once. - Remove trailing space from line ends and the samba-debian-edu-admin file. -- Petter Reinholdtsen Thu, 3 Jun 2004 18:07:44 -0300 debian-edu-config (0.388) unstable; urgency=low * Finn-Arne Johansen - Set smaller cache size for mozilla - Fixed type and missing entries in mozilla proxy settings -- Petter Reinholdtsen Mon, 31 May 2004 01:53:18 -0300 debian-edu-config (0.387) unstable; urgency=low * Finn-Arne Johansen - Fixed some missing samba objects to the ldap tree. - Changed procedure to fetch sambaSID. - Updated Makefile to include cf.mozilla. - Tries to take up the network interface before fetching sambaSID. - Changed samba-debian-edu-admin to ensure that sambaSID is availible when needed. - Disabled samba password change. - Disabled samba root access to shared resources. - Added sample entry for assigning static ip to workstations, (fixes SL #750). -- Petter Reinholdtsen Fri, 28 May 2004 14:36:35 -0300 debian-edu-config (0.386) unstable; urgency=medium * Finn-Arne Johansen - Updated slapd.conf to limit the write access of smbadmin -- Petter Reinholdtsen Fri, 21 May 2004 23:36:04 +0200 debian-edu-config (0.385) unstable; urgency=medium * Petter Reinholdtsen - Change webmin test to check the config file before checking if the server is listening to the correct port. Also changed it to not die on the first error, but to do all checks before setting the return code. * Finn-Arne Johansen - Changed DHCP lease time. - Moved samba clients to a subtree under ou=People. * Andreas Schuldei - Make the retrival of the machine group dynamic in etc/samba/smbaddclient.pl. -- Petter Reinholdtsen Thu, 20 May 2004 22:28:22 +0200 debian-edu-config (0.384) unstable; urgency=low * Finn-Arne Johansen - Changed config of samba, and rewritten smbaddclient.pl script to ease the adding of NT clients. - Removed nss_base_passwd from libnss-ldap.conf to allow use of ou=machines for samba clients. - Added config for mozilla to use webcache, and kprinter. * Petter Reinholdtsen - Reinsert nss_base_passwd into libnss-ldap.conf, as it might have unwanted side effects, like removed users and machines showing up as existing users. - Add test for webmin allow line in /etc/webmin/miniserv.conf. -- Petter Reinholdtsen Sat, 15 May 2004 19:44:45 +0200 debian-edu-config (0.383) unstable; urgency=low * adding organisational unit Machines to root.ldif for samba. -- Andreas Schuldei Wed, 5 May 2004 21:38:39 +0200 debian-edu-config (0.382) unstable; urgency=low * Finn-Arne Johansen - Added missing samba-debian-edu-install script * Andreas Schuldei - performance tuning for slapd: adding some indices and keeping the db in RAM -- Andreas Schuldei Wed, 28 Apr 2004 19:12:41 +0200 debian-edu-config (0.381) unstable; urgency=low * Finn-Arne Johansen - Added config for samba 3.0 * Petter Reinholdtsen - Only create samba LDAP config on first time install. -- Andreas Schuldei Wed, 28 Apr 2004 17:27:13 +0200 debian-edu-config (0.380) unstable; urgency=low * Petter Reinholdtsen - Fix typo in cf.webmin. The file is called /etc/webmin/config, not /etc/webmin/config.conf. - Add cfengine rule in cf.webmin to rewrite /etc/webmin/dhcpd/config to use dhcp version 3 instead of version 2. (Fixes skolelinux bug #666) - Renamed every file using 'skolelinux' prefix and postfix, to using 'debian-edu' instead. Added compatibility wrapper scripts to avoid breaking installation while changing. This will break existing installations, but is needed to be done before we stabilise for consistency. -- Petter Reinholdtsen Mon, 26 Apr 2004 20:09:52 +0200 debian-edu-config (0.379) unstable; urgency=low * Remove cf.mkinitrd from the include list in cfengine.conf too. -- Petter Reinholdtsen Fri, 23 Apr 2004 23:30:09 +0200 debian-edu-config (0.378) unstable; urgency=low * Klaus Ade Johnstad - Changed the warning/explanation in 10skolelinux-one-login-per-host from Norwegian into English. * Petter Reinholdtsen - Changed webmin configuration to use PAM for authentication, removing the need to keep a separate user database in webmin. -- Petter Reinholdtsen Fri, 23 Apr 2004 00:06:47 +0200 debian-edu-config (0.377) unstable; urgency=low * Petter Reinholdtsen - Add test taskpkgs to check if the correct task packages are installed. * Klaus Ade Johnstad - Added the special forwarders need for Skoleetaten i Oslo, in named-bind9.conf - Added the correct path to the dhcp3 script, in dhcpd-skolelinux.conf -- Petter Reinholdtsen Tue, 20 Apr 2004 00:07:37 +0200 debian-edu-config (0.376) unstable; urgency=low * Petter Reinholdtsen - Do not edit /usr/X11R6/lib/X11/xkb/rules/xfree86.lst any more, as we are using XFree86 4.2 now, and the changes are already there. - Rewrite edit rule for xfree86.lst in cf.locales to insert the same text as is used in XFree86 4.2. - Remove cf.mkinitrd, as DELAY=0 is the default in debian-installer. - Remove edit rule for /etc/network/interfaces from cf.ldap, as this file is updated correctly by debian-edu-profile-udeb in d-i now. - Modify update-ini-file to add a section if the ini-file only consist of comments. (Skolelinux bug #633) -- Petter Reinholdtsen Thu, 15 Apr 2004 00:09:12 +0200 debian-edu-config (0.375) unstable; urgency=low * Andreas Schuldei - Renamed the 'guest' group to 'none' and the 'jnadmin' group to 'jradmin' in root.ldif. - Adding an attic OU for deleted users, and added an attic capability flag in root.ldif. * Petter Reinholdtsen - Add missing newline at the end of ldap-bootstrap/root.ldif. -- Petter Reinholdtsen Wed, 14 Apr 2004 10:00:19 +0200 debian-edu-config (0.374) unstable; urgency=low * Petter Reinholdtsen - Report output from rpcinfo -p when testing the network status. * Andreas Schuldei - Adding a default class to root.ldif, removing the generic age group. * Finn-Arne Johansen - Modified password script to allow changing of admin password. (fixes skolelinux #236) * Ragnar Wisloff - Added nagios to list of services to restart. -- Petter Reinholdtsen Thu, 1 Apr 2004 22:34:09 +0200 debian-edu-config (0.373) unstable; urgency=low * Petter Reinholdtse - Change /etc/exports rule for /skole/tjener/home0 to only export to selected host netgroups by default. * Bjørn Ove Grøtan - Commented out indexing of eduPerson-related parts in slapd.conf since we're not using EduPerson.schema yet. -- Petter Reinholdtsen Tue, 30 Mar 2004 23:31:31 +0200 debian-edu-config (0.372) unstable; urgency=low * Petter Reinholdtsen - Improve the mail content sent from init.d/report-reboot. - Avoid restarting init.d/report-reboot on installs and upgrades. (Closes: #240776) - Do not use EduPerson.schema yet. - Make sure debian-edu-mailcap is installed without execute bit. * Ragnar Wisloff - Fixed typos in cf.nagios -- Petter Reinholdtsen Mon, 29 Mar 2004 21:35:47 +0200 debian-edu-config (0.371) unstable; urgency=low * Bjørn Ove Grøtan - Add norEduPerson.schema to the package. * Petter Reinholdtsen - Make sure to install EduPerson.schema and norEduPerson.schema, to get slapd to start. (Fixes Skolelinux bug #664) - Make sure newly added scripts in /usr/share/ are installed with execute bit. - Make sure /etc/init.d/report-reboot is a conffile. -- Petter Reinholdtsen Sun, 28 Mar 2004 22:50:44 +0200 debian-edu-config (0.370) unstable; urgency=low * Finn-Arne Johansen - Adding script to change users password in ldap (also samba) - Moved nice to have script from /usr/sbin/ into /usr/share... - Added code to set umask when logging in with kdm - Added the script located in share into the Makefile * Petter Reinholdtsen - Updated testsuite/dhcpd to check dhcpd version 3. -- Petter Reinholdtsen Sat, 27 Mar 2004 16:57:14 +0100 debian-edu-config (0.369) unstable; urgency=low * Bjørn Ove Grøtan - adding ACL for smbadmin and performance tuning * Petter Reinholdtsen - Add workaround for apache problem in skolelinux-restart-services. This should make sure the missing apache parent process is worked around. (Skolelinux bug #636) * Ragnar Wisloff - Changed cf.nagios to use forced symlinks -- Petter Reinholdtsen Sat, 27 Mar 2004 11:58:23 +0100 debian-edu-config (0.368) unstable; urgency=low * Petter Reinholdtsen - Add new init.d script report-reboot, which can send an email when a server boots. - Implement 'status' argument to init.d/open-backdoor, reporting if the SSH backdoor is running or not. - Add Finn-Arne Johansen as uploader. - Remove all '.#*' files in clean target, to make sure this cruft do not make it into the source package. -- Petter Reinholdtsen Mon, 15 Mar 2004 22:19:29 +0100 debian-edu-config (0.367) unstable; urgency=low * Replaced dhcp with dhcp3-server in skolelinux-restart-services, should fix #286 and #421 -- Finn-Arne Johansen Thu, 4 Mar 2004 20:50:19 +0100 debian-edu-config (0.366) unstable; urgency=low * Fixed config for dhcp3 -- Finn-Arne Johansen Wed, 3 Mar 2004 22:27:21 +0100 debian-edu-config (0.365) unstable; urgency=low * changed distribution from UNRELEASED to unstable -- Andreas Schuldei Wed, 3 Mar 2004 17:15:44 +0100 debian-edu-config (0.364) unstable; urgency=low * Rune Nordbøe Skillingstad - Package now conflicts debian-edu-install <= 0.616. (Closes: #235734) * Petter Reinholdtsen - Restart autofs at the end of the install, to make sure the new configuration is used. -- Rune Nordbøe Skillingstad Tue, 2 Mar 2004 09:20:24 +0100 debian-edu-config (0.363) unstable; urgency=low * Finn-Arne Johansen - Added /etc/mailcap - Added /etc/dhcp3/dhcp-skolelinux.conf * Petter Reinholdtsen - Make sure to include cf.nagios in the package. - Removed cf.modules as it is unused now. - Add missing quote character in cf.apache. (Closes: #235537) * Rune Nordbøe Skillingstad - Restart nscd - Fixed bug: /etc/dhcp3 was not created in install in Makefile - Moved /etc/mailcap to /lib/mime/packages/debian-edu-mailcap and using update-mime in postinst script - Package now depends on mime-support. -- Petter Reinholdtsen Mon, 1 Mar 2004 17:28:06 +0100 debian-edu-config (0.362) unstable; urgency=low * Ragnar Wisløff - Added cf.nagios and changes to cfengine.conf to include cf.nagios * Rune Nordbøe Skillingstad - Moved mime.types from cf.apache to cf.mime-support - Added rewriting of apache to cf.apache -- Petter Reinholdtsen Sun, 29 Feb 2004 17:06:43 +0100 debian-edu-config (0.361) unstable; urgency=low * Rune Nordbøe Skillingstad - Fixed wrong loggin in bind9 configuration - Moved restarting of services from cf-files to skolelinux-restart-services - Moved skolelinux-test-install and skolelinux-restart-services here from debian-edu-install - No more initializing of LDAP if data exists * Ragnar Wisløff - Changed default kernel for thin clients to PXE -- Petter Reinholdtsen Sun, 29 Feb 2004 15:42:13 +0100 debian-edu-config (0.360) unstable; urgency=low * Alex Brasetvik - New netgroups infrastructure. * Petter Reinholdtsen - Get rid of warning message if the user isn't allowed access to the sound device (artsmessagerc) and dialog box on initial login asking about default configuration (kpersonalizerrc). - Avoid confusing users about the disabled ssh tunneling script. (Closes: #233174) * Rune Nordbøe Skillingstad - Added ltsp network in acl for squid - Changed to use bind9 -- Petter Reinholdtsen Sat, 28 Feb 2004 17:42:09 +0100 debian-edu-config (0.359) unstable; urgency=low * Make sure /etc/default/update-hostname is created when needed. * Move named configuration from /etc/bind/ to /etc/bind/debian-edu/, to reduce the chance of a name conflict with existing zone files. (Closes: #232805) -- Petter Reinholdtsen Sun, 15 Feb 2004 15:43:26 +0100 debian-edu-config (0.358) unstable; urgency=low * Petter Reinholdtsen - Convert init.d/start-wlan to POSIX sh notation. - Make sure init.d/update-hostname is enabled for all profiles except the main-server profile. * Bart Cornelis - Changed occurences of devel@skolelinux.no to debian-edu@l.d.o everywhere. * Finn-Arne Johansen - Include sbin/logoutkill.sh and sbin/nightkill.sh in the package. -- Petter Reinholdtsen Sun, 15 Feb 2004 11:18:37 +0100 debian-edu-config (0.357) unstable; urgency=low * Make sure it is safe to run 'init.d/enable-nat start' several times. -- Petter Reinholdtsen Sat, 7 Feb 2004 20:49:18 +0100 debian-edu-config (0.356) unstable; urgency=low * Petter Reinholdtsen - Return 0 and not 5 from init.d scripts if the service is unavailable to avoid errors in Debian. The LSM specify 5 as the return value, but this give warnings from invoke-rc.d in Debian Woody. - Fix typo in init.d/enable-nat. - Make sure init.d/update-hostname is disabled by default. - Avoid error message from mii-tool in init.d/start-wlan. -- Petter Reinholdtsen Sat, 7 Feb 2004 20:27:39 +0100 debian-edu-config (0.355) unstable; urgency=low * Petter Reinholdtsen - Improve init.d/ltspnet-nat, making sure it enables IPv4 forwarding if it isn't enabled already. - Improve Linux Software Base complience for all init.d scripts. - Include init.d/backdoor and init.d/wlan in package. - Use dh_installinit to install and enable init.d scripts. This gets rid of some lintian warnings -- Petter Reinholdtsen Sat, 7 Feb 2004 19:53:48 +0100 debian-edu-config (0.354) unstable; urgency=low * Petter Reinholdtsen - Improve init.d/ltspnet-nat. Add 'restart' and 'status' arguments. Make it possible to override the default configuration using /etc/default/ltspnet-nat. - Add depends on iptables as init.d/ltspnet-nat need it. -- Petter Reinholdtsen Sat, 7 Feb 2004 10:07:46 +0100 debian-edu-config (0.353) unstable; urgency=medium * Petter Reinholdtsen - Make sure bin/update-ini-file handle missing files by creating them first, and then leave it to Config::IniFiles to update the content. - Change Build-Depends to Build-Depends-Indep as this package is architecture 'all'. - Add Andreas Schuldei as uploader. -- Petter Reinholdtsen Sat, 31 Jan 2004 20:19:56 +0100 debian-edu-config (0.352) unstable; urgency=medium * Petter Reinholdtsen - Jump to version number to 0.352 make sure it is higher than the version used in Skolelinux / Woody (0.351.skolelinux.#). - Fixed several syntax errors in ldap-bootstrap/root.ldif: All lisAclGroups needed a 'member' attribute, the Variables object was listed twice, and the cn and dn of object 'juadmins' was not the same. - Made sure all groups are object class posixGroup. - Reordered objectClass specifiers to make sure all objects use the same order; top, RFC-standardized groups, and site-specific groups. - Make sure ldap-skolelinux-install exit on first error, to try to detect if it fail. - Rewrite update-ini-file from using libconfig-ini-perl to using libconfig-inifiles-perl, to get a dependency which exist both in Woody and Sarge. * Per Harald Westby - cf.apache adds entries for OpenOffice.org document types to /etc/mime.types * Finn-Arne Johansen - Added scripts to remove stray processes. One for logout (logoutkill.sh), and one for a nightly cron task (nightkill.sh). - Added script apt-get-update-files-download that gives somewhat a better message whenever there is new packages waiting to be installed. -- Petter Reinholdtsen Fri, 30 Jan 2004 22:46:09 +0100 debian-edu-config (0.1) unstable; urgency=low * Initial upload, based on the current Skolelinux version 0.350-7. -- Petter Reinholdtsen Sat, 17 Jan 2004 16:00:09 +0100