Bug#602859: netgroup support for gosa
Hi there, On So 13 Feb 2011 13:34:04 CET Holger Levsen wrote: Hi, during the meeting in Zweibrücken we also discussed the need to be able to manage netgroups with gosa and thankfully Mike volunteered to work on this. Yay! I have just setup a development tree on my personal SVN site the GOsa² netgroups plugin: https://svn.das-netzwerkteam.de/websvn/listing.php?repname=nwt-projects&path=%2Fgosa%2F&#a8b699073403f8f7f8ed504d469016f9c There is nothing functional there yet, only my attempts to understand how GOsa² works... But for those who want to follow the development, this is the location to peer at. Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb pgpTslpAtjWvQ.pgp Description: Digitale PGP-Unterschrift
Re: Make LibreOffice part of Debian Edu
On Tue, Feb 15, 2011 at 12:13:50PM +0100, Alexander Reichle-Schmehl wrote: > b) Help Rene with his packages: > http://packages.qa.debian.org/libreoffice and backports. If you are wondering whether Rene really might need help, just look here: http://blends.debian.net/liststats/authorstat_openoffice.png Kind regards Andreas. -- http://fam-tille.de -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110216074832.gb31...@an3as.eu
Re: ldap: ou=group versus ou=groups
Hi list, On 02/15/2011 07:31 PM, Andreas B. Mundt wrote: > I think the best way to do the migration is completely independent of > all changes I proposed: Should we start a different thread for this? > * Prepare a list (csv) of all user for every category you use: > students, teachers, etc. Yes? At some schools the default database are indeed an external one. There this might be possible. However, for universities or large companies - where the users seldom change and large changes can be seen in LDAP, I always used the LDAP database as authoritative choice. Are you really suggesting to build a CSV file from a LDAP server to re-import that? Which LDAP attributes should be considered for the CVS file? Or could you say more about this situation? > * Prepare a (GOsa-) template for each category. Could you elaborate more on this? > * Mass-create all users from the lists. For each category use the > corresponding template. > > Well, where do you draw the line? It is now the chance to make these The line is: Is there a _technical_ reason? > changes (and in my opinion without extra minutes for the 's'). This > chance will not come again soon (hopefully). The missing 's' will be > missing "forever". If every second school in the world uses debian-edu > ;-) it will be too late, but the missing 's' will be still annoying > (at least to some). And yes all those small 's' do steal you time. Trust me. I worked years in that field ... > But I think (and made the experience when working on debian-edu), that > after quite some years since the beginning of skolelinux, here and > there cruft has built up. It's time to refurbish some things. This may > cause a bit more work for now (not the 's'), but will in the end > lead to a more attractive and better maintainable system. And this is > true for maintainers, developers as well as for our users in the > schools. I am in favor of progress. The 's' is just cosmetic - not progress. So if we need Kerberos (I am not convinced) then I vote for it! But if you ask about groups or group, I vote for: do not change it. Cheers C. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4d5afb9d.2010...@cipworx.org
Re: WebSVN broken for Debian Edu on svn.debian.org
Hi Holger, On Di 15 Feb 2011 17:48:04 CET Holger Levsen wrote: Hi Mike, it was great to meet you in person! THX!!! On Dienstag, 15. Februar 2011, Mike Gabriel wrote: When clicking the debian-edu link in the repos list on http://svn.debian.org/websvn/ ... ... WebSVN behaves differently from my expectation. What is the most appropriate channel to report this issue on? alioth. Either #alioth on irc.debian.org or via a report in their tracker at https://alioth.debian.org/projects/siteadmin/ Has been reported (+ a little copypaste error...): https://alioth.debian.org/tracker/index.php?func=detail&aid=313004&group_id=1&atid=21 Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0xB588399B mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb pgpuyVdiA1SMQ.pgp Description: Digitale PGP-Unterschrift
Re: ldap: ou=group versus ou=groups
Hi again, some more (and partially general) thoughts ... On Tue, Feb 15, 2011 at 12:40:31PM +0100, Christian Kuelker wrote: > On 02/15/2011 11:18 AM, Petter Reinholdtsen wrote: > > I believe we should leave it unchanged unless we have a good reason to > > change it. > > Every change in an LDAP DIT causes drain of human man power. Admins > or maintenance contractors have to work more for using continuously > Skolelinux. Migration scripts have to written any way, but the "s" > add some extra minutes of writing, testing, verifying ... Which > leads to demotivation and less acceptance. I think the best way to do the migration is completely independent of all changes I proposed: * Prepare a list (csv) of all user for every category you use: students, teachers, etc. * Prepare a (GOsa-) template for each category. * Mass-create all users from the lists. For each category use the corresponding template. I cannot imagine a more efficient way to do that, and if we want to avoid that way and have it simpler we need to revert all the 'new stuff' (Kerberos, GOsa) which has been developed since lenny. > If a change is nessessary due to technical reasons, this unavoidable > drain of man power is mostly accepted. > > However if the cause is just a normative rule (that plural looks > better) it is hardly to justify to use man power for a Debian Pure > Blend that is not respecting the time of others. Well, where do you draw the line? It is now the chance to make these changes (and in my opinion without extra minutes for the 's'). This chance will not come again soon (hopefully). The missing 's' will be missing "forever". If every second school in the world uses debian-edu ;-) it will be too late, but the missing 's' will be still annoying (at least to some). It's clear that backwards compatibility is important. You have to compare what you gain with the work you create (especially for others). My point of view is for sure the one of a developer not being the one who has to do the migration (but maybe this changes soon...). But I think (and made the experience when working on debian-edu), that after quite some years since the beginning of skolelinux, here and there cruft has built up. It's time to refurbish some things. This may cause a bit more work for now (not the 's'), but will in the end lead to a more attractive and better maintainable system. And this is true for maintainers, developers as well as for our users in the schools. If you are too conservative, the "next generation" will one day overtake you. Best Regards, Andi -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215183157.GA9023@flashgordon
Re: Is this package relevant for Debian-edu Squeeze?: slapd-smbk5pwd
Hi Jonas, On Mon, Feb 14, 2011 at 09:33:12PM +0100, Jonas Smedegaard wrote: > Just stumbled across the package slapd-smbk5pwd, which is also > available in Debian Squeeze. > > Could those of you knowledgeable in Samba and Kerberos check it out? > > Seems potentially beneficial to use (and disable similar routines in > high-level tools like GoSA and CipUX!) to have passwords in sync > always, not only when using high-level admin tools. > Yes, the package is well-known. However, it is for Heimdal Kerberos (which was missing other features when I compared Heimdal to MIT Kerberos). Currently MIT Kerberos is used in debian-edu. Veli-Matti Lintu prepared something comparable for MIT Kerberos IIRC, but it is not (yet?) available in Debian. Regards, Andi -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215170023.GA4704@flashgordon
Re: WebSVN broken for Debian Edu on svn.debian.org
Hi Mike, it was great to meet you in person! On Dienstag, 15. Februar 2011, Mike Gabriel wrote: > When clicking the debian-edu link in the repos list on > http://svn.debian.org/websvn/ ... > > ... WebSVN behaves differently from my expectation. What is the most > appropriate channel to report this issue on? alioth. Either #alioth on irc.debian.org or via a report in their tracker at https://alioth.debian.org/projects/siteadmin/ For more info see http://wiki.debian.org/Alioth#Technicaldetails cheers, Holger signature.asc Description: This is a digitally signed message part.
Bug#613553: document school workflow with gosa
package: debian-edu-doc severity: wishlist x-debbug-cc: debian-edu@lists.debian.org Hi, On Montag, 14. Februar 2011, José L. Redrejo Rodríguez wrote: >> Or you can tell the CipUX Team (for example on cipux-devel ore here >> ) what you need, and we will see if we can provide it. > Massive importation of user accounts in September, aplying permissions > and groups , using information provided by some xml and zip files > exported from the regional educative administration tool. The xml files > include the user login, classroom or department if they're a teacher and > student photos to be added to ldap. > > At the same time the accounts are created, cleaning of old accounts and > moving existing ones keeping their uid and gids is needed (as an > example, jmartinez user moves from 1A to 2B in september). > > I can provide xml and zip files as they are generated from the > administration tool. A xml file is generated with the teachers of every > school, and a zip cotaining photos and another xml with the students. > > So, it's a very specific need, depending tightly on the official > administrative tool used by our government. while the details of this are specific, the general workflow is not and something like this should be documented (at least) for our default admin tool, which atm is gosa. Filing this in the BTS so that it doesn't get forgotten. cheers, Holger signature.asc Description: This is a digitally signed message part.
documentation for choosing desktop environments (Re: r72930 - trunk/src/debian-edu-config/debian
Hi, On Dienstag, 15. Februar 2011, Mike Gabriel wrote: > An option for the preferred Window Manager (KDE, GNOME and LXDE(?)) would > be great. Also for or maybe even especially for non-expert mode. It's available ini non-expert mode and documented in http://wiki.debian.org/DebianEdu/Documentation/Squeeze/Installation#Theinstallationprocess :-) What's lacking afaik is documentation how to install and use them in parallel and how to use $desktop_environment on "normal logins" and lxde on thin-client-logins. It would be great to have that documented in http://wiki.debian.org/DebianEdu/Documentation/Squeeze/HowTo/NetworkClients cheers, Holger signature.asc Description: This is a digitally signed message part.
debian-edu-config_1.446~svn72977_i386.changes ACCEPTED
Accepted: debian-edu-config_1.446~svn72977.dsc to pool/local/d/debian-edu-config/debian-edu-config_1.446~svn72977.dsc debian-edu-config_1.446~svn72977.tar.gz to pool/local/d/debian-edu-config/debian-edu-config_1.446~svn72977.tar.gz debian-edu-config_1.446~svn72977_all.deb to pool/local/d/debian-edu-config/debian-edu-config_1.446~svn72977_all.deb Override entries for your package: debian-edu-config_1.446~svn72977.dsc - extra local/misc debian-edu-config_1.446~svn72977_all.deb - extra local/misc Announcing to comm...@skolelinux.org Thank you for your contribution to Debian-Edu/Skolelinux archive. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/e1ppmno-0002er...@administrator.skolelinux.no
WebSVN broken for Debian Edu on svn.debian.org
Hi there, When clicking the debian-edu link in the repos list on http://svn.debian.org/websvn/ ... ... WebSVN behaves differently from my expectation. What is the most appropriate channel to report this issue on? Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: Need in Extremadura for LDAP admin interface
On 14. feb. 2011 16:40, José L. Redrejo Rodríguez wrote: > El dom, 13-02-2011 a las 21:05 +0100, Jonas Smedegaard escribió: >> On Sun, Feb 13, 2011 at 04:17:44PM +0100, José L. Redrejo Rodríguez wrote: >>> Our servers still remain in lenny and our plans to move to squeeze (or >>> wheeze) include the development of a lwat replacement. We need to >>> develop it to fit our needs as we have to create accounts massively >>> every beginning of the course using as source an external application >>> where our ministry manages all the educational data for every citizen. >>> So, neither gosa, cipux or lwat can fulfill our needs, and a custom >>> development is the only solution I can see. >> >> Could you elaborate some more on your needs for LDAP admin interface? >> > > > Aproximately, exactly the same as lwat provides, including its > simplicity and easy of use. I'd only add the massive account creation, > as I've described in #602863 Do you really want to have dns in ldap ? In a large environment, I would prefer dns in flat files, and dhcp in ldap. > In the past I was doing something similar with lwat, but there were some > bad implications. As an example lwat stores in its configuration the > last used uid, instead of searching it dinamically in the ldap database, > so sometimes there are database corruptions if other tools are used to > create accounts. hmm. the nextGID that is stored in ldap is only a fast-way to get the next assumed availible (G)ID. If it's already used, lwat should automaticly search for a free (g)id and use that one. The reason to use this, is to speed up the search for the next(g)id. If you have a large db you may also get an error of you are not able to fetch all (dont remember now..) >> Therefore: Please do describe in more detail what it is you need in >> Extremadura - to inspire those working on CipUX, GoSA or other LDAP >> tools, to help tune inot such kind of large-deployment needs (and >> perhaps even offer solutions concretely!). > > As I've commented about, lwat fulfilled the needs quite well, except by > its bugs. We don't need a bloated tool, just create and modify user > accounts and machine groups from the admin point of view, and changing > passwords for the end user interface. No more, no less. Thanks. Mission acomplished (almost). If lwat creates duplicate id's then it's a bug. I have not seen such a bug report. // faj -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4d5a83b5.2040...@bzz.no
Re: r72930 - trunk/src/debian-edu-config/debian
On Tue, Feb 15, 2011 at 12:12:24PM +0100, Mike Gabriel wrote: Am Sonntag, 13. Februar 2011, 00:14:10 schrieb Petter Reinholdtsen: [Holger Levsen] > + There were also thoughts about an install option (like gnome > instead of kde) + though this aint that easy probably, as it also > involves the ldap ui... An option for the preferred Window Manager (KDE, GNOME and LXDE(?)) would be great. Also for or maybe even especially for non-expert mode. [snip] PS: the above is an enciphered ,,+1 from Mike'' :-) No it isn't, actually. Above thread was about Subversion commit r72930. It only _compared_ to GNOME debconf option. I confused this just as you and (apparently) Petter, but Holger briefly(!) pointed out that misunderstadning. I suggest to use more sensible subjects when posting to this list: Not everyone here knows what those Subversion numbers stand for (I for one do not). Regards, - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: Digital signature
Is this package relevant for Debian-edu Squeeze?: slapd-smbk5pwd
Hi, Just stumbled across the package slapd-smbk5pwd, which is also available in Debian Squeeze. Could those of you knowledgeable in Samba and Kerberos check it out? Seems potentially beneficial to use (and disable similar routines in high-level tools like GoSA and CipUX!) to have passwords in sync always, not only when using high-level admin tools. - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: Digital signature
Re: Need in Extremadura for LDAP admin interface
On Mon, Feb 14, 2011 at 04:40:05PM +0100, José L. Redrejo Rodríguez wrote: El dom, 13-02-2011 a las 21:05 +0100, Jonas Smedegaard escribió: On Sun, Feb 13, 2011 at 04:17:44PM +0100, José L. Redrejo Rodríguez wrote: >Our servers still remain in lenny and our plans to move to squeeze >(or wheeze) include the development of a lwat replacement. We need >to develop it to fit our needs as we have to create accounts >massively every beginning of the course using as source an external >application where our ministry manages all the educational data for >every citizen. So, neither gosa, cipux or lwat can fulfill our >needs, and a custom development is the only solution I can see. Could you elaborate some more on your needs for LDAP admin interface? Aproximately, exactly the same as lwat provides, including its simplicity and easy of use. I'd only add the massive account creation, as I've described in #602863 Sounds like you could benefit from a scriptable interface to a select subset of the Skolelinux objects - and I suspect CipUX is an ideal tool for this, either as currently shipped with Squeeze (even if not suitable for all Skolelinux needs) or maybe with some tuning (I am sure Christian Kuelker will like to figure out if that is little or much work. In the past I was doing something similar with lwat, but there were some bad implications. As an example lwat stores in its configuration the last used uid, instead of searching it dinamically in the ldap database, so sometimes there are database corruptions if other tools are used to create accounts. Therefore: Please do describe in more detail what it is you need in Extremadura - to inspire those working on CipUX, GoSA or other LDAP tools, to help tune inot such kind of large-deployment needs (and perhaps even offer solutions concretely!). As I've commented about, lwat fulfilled the needs quite well, except by its bugs. We don't need a bloated tool, just create and modify user accounts and machine groups from the admin point of view, and changing passwords for the end user interface. No more, no less. Also, as the tool is installed in several hundred of schools, it should work out of the box, without the need of manual configuration. Thanks. I now understand clearly (sorry if you've already pointed that out numerous times in the past without me paying properly attention) that your main need here is _simplicity_. I wrongly assumed that you would need some _complexity_ in your very large setup. Thanks for spelling it out to me :-D - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private signature.asc Description: Digital signature
Re: ldap: ou=group versus ou=groups
Hi list, On 02/15/2011 11:18 AM, Petter Reinholdtsen wrote: > I believe we should leave it unchanged unless we have a good reason to > change it. Every change in an LDAP DIT causes drain of human man power. Admins or maintenance contractors have to work more for using continuously Skolelinux. Migration scripts have to written any way, but the "s" add some extra minutes of writing, testing, verifying ... Which leads to demotivation and less acceptance. If a change is nessessary due to technical reasons, this unavoidable drain of man power is mostly accepted. However if the cause is just a normative rule (that plural looks better) it is hardly to justify to use man power for a Debian Pure Blend that is not respecting the time of others. We should leave it unchanged. BR C. (Being conservative in changes of released products is the virtue of good software engineers.) -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4d5a662f.6080...@cipworx.org
Re: Make LibreOffice part of Debian Edu
Hi! Am 15.02.2011 09:55, schrieb RalfGesellensetter: > Now, I wonder, what we can do to make LibreOffice part > of DebianEdu AFAP... Two options: a) Wait b) Help Rene with his packages: http://packages.qa.debian.org/libreoffice and backports. Best regards, Alexander -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/4d5a5fee.6070...@debian.org
Re: r72930 - trunk/src/debian-edu-config/debian
Hi Petter, hi list, Am Sonntag, 13. Februar 2011, 00:14:10 schrieb Petter Reinholdtsen: > Bringing the topic to debian-edu@, to discuss if this should be done > or not. > > [Holger Levsen] > > > + There were also thoughts about an install option (like gnome instead > > of kde) + though this aint that easy probably, as it also involves the > > ldap ui... > > It is technically not very hard. It would involve asking a debconf > question before pkgsel is running in d-i, and setting the > tasksel/desktop debconf value. This is the same operation that is > done based on the desktop=kde/gnome kernel argument used to select > gnome vs. kde vs xfce vs ... at the moment. > > The problematic part is explaining to teachers installing Debian Edu > for the first time what the options mean and why they should be forced > to select one of them. Perhaps it only should show up in > debian-edu-expert installation mode? An option for the preferred Window Manager (KDE, GNOME and LXDE(?)) would be great. Also for or maybe even especially for non-expert mode. As a description there could be a clause that states: The default window manager is set to KDE which is a fine default. If you do not know what this question means, just leave the default. I think that the window manager names are only unknown to the very linux beginners. Everyone else might well benefit from this new question-number-8- debconf-screen. Greets, Mike PS: the above is an enciphered ,,+1 from Mike'' :-) -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: ldap: ou=group versus ou=groups
On Tue, Feb 15, 2011 at 11:18:25AM +0100, Petter Reinholdtsen wrote: > [Andreas B. Mundt] > > I don't know why ou=group was chosen, > > It was selected because it is the proposal in the only known document > proposing a standardized LDAP structure, the draft available from > http://tools.ietf.org/html/draft-howard-rfc2307bis-02>. I saw no > need to divert from this proposal. Yeah, I looked into that too, but I think it's really just an example. I don't think using ou=group or ou=groups is of any technical relevance. > > I cannot imagine that using ou=group or ou=groups makes any > > difference for storing our possix groups, but from what I have seen, > > it looks as if using ou=groups is more common and the linguistic > > correct form. > > How do you determine that ou=groups is more common? >From books, mails, examples: > At the University of Oslo, cn=filegroups and cn=netgroups are used. :) cn=filegroups and cn=netgroups , both with the plural 's' ... > The former represent the cn=group subtree in Skolelinux. In > db.debian.org, file groups are stored in the ou=users subtree. ... ou=user_s_ Best regards, Andi -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215105622.GA10981@flashgordon
Re: ldap: ou=group versus ou=groups
Dear Petter, Am Dienstag, 15. Februar 2011, 11:32:41 schrieb Petter Reinholdtsen: > [Mike Gabriel] > > > +1 from Mike... > > Can we please stop this habit of voting before a discussion have taken > place. It make it harder to reach consensus and only increases the > chance of entrenching a discussion. Sorry, I do not mean this as a vote. It just means that I have an opinion about and fully agree with a made proposal. It is absolutely not meant to stop a discussion (or similar). I am sorry, if this has been conveyed. However, I would very much like to be able to commit such statements in the future. Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: ldap: ou=group versus ou=groups
Hi Petter, hi Andi, Am Dienstag, 15. Februar 2011, 11:18:25 schrieb Petter Reinholdtsen: > > I cannot imagine that using ou=group or ou=groups makes any > > difference for storing our possix groups, but from what I have seen, > > it looks as if using ou=groups is more common and the linguistic > > correct form. > > How do you determine that ou=groups is more common? All other ous are in plural form, only the ou=group looks misspelled... (and I no about that old RFC which did the original misspelling...). > At the University of Oslo, cn=filegroups and cn=netgroups are used. > The former represent the cn=group subtree in Skolelinux. In > db.debian.org, file groups are stored in the ou=users subtree. Those > where the LDAP instances I had easily available. Anyone else have > other data points? > I only have LDAP trees available that I set up by myself. I always dropped ou=group and replaced it by ou=groups as it seems more plausible to use plural. > > What do you think? > > I believe we should leave it unchanged unless we have a good reason to > change it. Anyway, GOsa has its own way of structuring LDAP (that's why GOsa in Skolelinux requires an LDAP-migration tool that is customized for the old lwat-based LDAP-DIT. My suggestion is to handle LDAP-stuff like GOsa proposes it. LDAP DIT has to be changed for GOsa anyway (part of the discussion in Zweibrücken), thus I recommend using the standard GOsa way (where the department ous are optional and should not be configured with standard Skolelinux, also part of the discussion in the Distro). dc= | |--ou= | | | |--ou=people | | | |--ou=groups | | | `--ou=systems | |--ou= | | | |--ou=people | | | |--ou=groups | | | `--ou=systems |--ou= | | | |--ou=people | | | |--ou=groups | | | `--ou=systems | |--ou=people | |--ou=groups | `--ou=systems One suggestion also was to disable the department-ous in GOsa for standard Skolelinux distribution and document how to re-enable it in case you want to setup a bigger site than a normal school. Andi proposed to setup ,,deparment-ous'' for students and teachers already as a default Skolelinux setup (as currently provided in Debian Edu). I also like this idea, but maybe for non-LDAP-gurus this might already be too much. However, GOsa has a fine way of presenting the ou-structure in the GUI... Sorry for running a little off-topic... Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: Make LibreOffice part of Debian Edu
Am Dienstag, 15. Februar 2011 schrieben Sie: > When I was printing the semester reports last week (from Windows - > photocopy machine driver problem), I had to wait for frustratingly > long for the new printing dialogue to respond. So long that I > uninstalled libre office and went back to OOo. It was much faster for > me to reinstall OOo than it was to wait for that thing repeatedly. > Perhaps because it was a network printer? A windows problem? Whatever, > I'm not in a hurry to inflict that on my school. I would rather wait > for libre office to percolate naturally into debian, which is surely > inevitable. Dear Nigel, thanks for your feedback, maybe really a windows issue? OOo had some shortcomings in its Linux version (e.g. file select dialogue), and as a teacher I appreaceate that LO now allows me - to print 2 (4,8,...) pages on a single sheet (this was really dreary, before, when I had to export to PDF and juggle with pdftools then). - actually print the same page twice on a sheet using the freeform text field for "pages to print": Here you can now enter "1,1" instead of heaving to copy page one to have an identic page two. Also opening PDF files and SVG from anywhere works like a charm, and I think the pdf import looks even better, now... Just my few coins on this, but of course, LO must get into Debian ASAP. Please check out LO for linux, and get your driver problem fixed (we might find a solution together). ;) Regards Ralf -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201102151141.26812@gmx.de
Re: ldap: ou=group versus ou=groups
[Mike Gabriel] > +1 from Mike... Can we please stop this habit of voting before a discussion have taken place. It make it harder to reach consensus and only increases the chance of entrenching a discussion. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215103241.gd4...@login2.uio.no
Re: ldap: ou=group versus ou=groups
Hi Andi, Am Dienstag, 15. Februar 2011, 10:58:12 schrieb Andreas B. Mundt: > Hi, > > in the process of overhauling the ldap tree, I am thinking about > renaming ou=group to ou=groups in order to better reflect the plural > form. > > I don't know why ou=group was chosen, perhaps because the expired and > in the meantime deleted RFC2307bis used ou=group in an example. I > cannot imagine that using ou=group or ou=groups makes any difference > for storing our possix groups, but from what I have seen, it looks as > if using ou=groups is more common and the linguistic correct form. > > The change is not worth an argument, but I think as we need to make > some changes in ldap with the upcoming release anyway, we should use > that chance to also improve that little thing. > > Neither using ou=groups nor ou=group is a big deal, but we have to > live for some (hopefully long) time with what we choose now ... > > What do you think? > > Best regards, > >Andi +1 from Mike... Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: experiences with ltsp thin clients and kde4
Hi Holger, Am Sonntag, 13. Februar 2011, 13:50:24 schrieb Holger Levsen: > does anybody already have experiences with running full classrooms of thin > clients with kde4? I recently was invited to a school to evaluate their setup. What I encountered were really old TC-devices with LTSP running. The server-side part of KDE4 seemed to be working quite preformanant, but the individual TC's XServer was creeping on the floor because it really seemed to have trouble with rendering the clicky-coloury Plasmoid/KDE4 widget stuff (old GCard problem probably)... This just as a side-note... Mike -- DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419 GnuPG Key ID 0x1943CA5B mail: m.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb signature.asc Description: This is a digitally signed message part.
Re: ldap: ou=group versus ou=groups
[Andreas B. Mundt] > I don't know why ou=group was chosen, It was selected because it is the proposal in the only known document proposing a standardized LDAP structure, the draft available from http://tools.ietf.org/html/draft-howard-rfc2307bis-02>. I saw no need to divert from this proposal. > I cannot imagine that using ou=group or ou=groups makes any > difference for storing our possix groups, but from what I have seen, > it looks as if using ou=groups is more common and the linguistic > correct form. How do you determine that ou=groups is more common? At the University of Oslo, cn=filegroups and cn=netgroups are used. The former represent the cn=group subtree in Skolelinux. In db.debian.org, file groups are stored in the ou=users subtree. Those where the LDAP instances I had easily available. Anyone else have other data points? > What do you think? I believe we should leave it unchanged unless we have a good reason to change it. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215101825.gb4...@login2.uio.no
ldap: ou=group versus ou=groups
Hi, in the process of overhauling the ldap tree, I am thinking about renaming ou=group to ou=groups in order to better reflect the plural form. I don't know why ou=group was chosen, perhaps because the expired and in the meantime deleted RFC2307bis used ou=group in an example. I cannot imagine that using ou=group or ou=groups makes any difference for storing our possix groups, but from what I have seen, it looks as if using ou=groups is more common and the linguistic correct form. The change is not worth an argument, but I think as we need to make some changes in ldap with the upcoming release anyway, we should use that chance to also improve that little thing. Neither using ou=groups nor ou=group is a big deal, but we have to live for some (hopefully long) time with what we choose now ... What do you think? Best regards, Andi -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20110215095811.GA4282@flashgordon
Re: Make LibreOffice part of Debian Edu
On 15 February 2011 17:55, RalfGesellensetter wrote: > > And, wow! - it's been a long time ago that a new version > took my breath away like LibreOffice 3.3! There is so much > improvement (e.g. with printing!), proving that forking was > the right step. Hi Ralf, When I was printing the semester reports last week (from Windows - photocopy machine driver problem), I had to wait for frustratingly long for the new printing dialogue to respond. So long that I uninstalled libre office and went back to OOo. It was much faster for me to reinstall OOo than it was to wait for that thing repeatedly. Perhaps because it was a network printer? A windows problem? Whatever, I'm not in a hurry to inflict that on my school. I would rather wait for libre office to percolate naturally into debian, which is surely inevitable. cheers nigel -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/AANLkTimT+8Ai4K-dvDJtPzcFzfF5r8=1pbiopneor...@mail.gmail.com
Make LibreOffice part of Debian Edu
Dear List, congratulations to all of you who contributed to the release of Squeeze! It's been some weeks that I have been following the fork of LibreOffice, but only recently I gave it a try. And, wow! - it's been a long time ago that a new version took my breath away like LibreOffice 3.3! There is so much improvement (e.g. with printing!), proving that forking was the right step. Now, I wonder, what we can do to make LibreOffice part of DebianEdu AFAP... Cheers, regards, Ralf. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201102150955.56800@gmx.de
