debian-edu-config_1.449~svn75887_i386.changes ACCEPTED

2012-01-28 Thread Skolelinux archive Installer

Accepted:
debian-edu-config-gosa-netgroups_1.449~svn75887_all.deb
  to 
pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.449~svn75887_all.deb
debian-edu-config_1.449~svn75887.dsc
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75887.dsc
debian-edu-config_1.449~svn75887.tar.gz
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75887.tar.gz
debian-edu-config_1.449~svn75887_all.deb
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75887_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.449~svn75887_all.deb - extra local/misc
debian-edu-config_1.449~svn75887.dsc - extra local/misc
debian-edu-config_1.449~svn75887_all.deb - extra local/misc

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rro2c-0005rf...@administrator.skolelinux.no



Content and translation status for the debian-edu-squeeze manual

2012-01-28 Thread Holger Levsen
The (translated) debian-edu-squeeze manual as PDF or HTML is available at 
http://maintainer.skolelinux.org/debian-edu-doc/

To understand this mail better, please read 
/usr/share/doc/debian-edu-doc/README.
This mail is automatically send by a cronjob run by Holger Levsen every two 
weeks. Please send feedback, suggestions, flames and cookies via this list.

debian-edu-squeeze-manual.de.po: 464 translated messages, 514 fuzzy 
translations, 268 untranslated messages.
debian-edu-squeeze-manual.es.po: 316 translated messages, 416 fuzzy 
translations, 514 untranslated messages.
debian-edu-squeeze-manual.fr.po: 490 translated messages, 506 fuzzy 
translations, 250 untranslated messages.
debian-edu-squeeze-manual.it.po: 1004 translated messages, 197 fuzzy 
translations, 45 untranslated messages.
debian-edu-squeeze-manual.nb.po: 421 translated messages, 536 fuzzy 
translations, 289 untranslated messages.
debian-edu-squeeze-manual.zh.po: 23 translated messages, 174 fuzzy 
translations, 1049 untranslated messages.
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Architecture
FIXME: Give a good content into the Table of services 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Features
FIXME: the detailed info from the beta releases should be wrapped up into one 
big block for the final release. until then, this shouldn't be translated. 
FIXME: describe new features in squeeze here 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Installation
FIXME Check these numbers for Squeeze.  They are 2012-01-22 for Lenny. 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//GettingStarted
FIXME: the change from documenting lwat to GOsa2 still needs to be completed 
FIXME: add an updated english squeeze screenshot here. 
FIXME: image for the Filter Box 
FIXME: image for Editing a User 
FIXME: add GOsa² password dialog image here 
FIXME: obsolete?]
FIXME: obsolete?]
FIXME: this yet to be written chapter needs to include the info about the 
cronjob updating dns running every hour and "su -c ldap2bind - bind" to trigger 
this manually 
FIXME This section needs to mention the sitesummary2ldapdhcp script, which 
automatically adds machines to GOsa² if the machines have booted as thin 
clients/diskless workstations or been installed using any of the networked 
profiles. 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Maintainance
FIXME: this page name is a misspelling (uncorrected because it's referenced 
from other pages) 
FIXME: Explain how to use kde-update-notifier, best with screenshots. 
FIXME: continue description of slbackup-php usage, maybe with screenshots 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Upgrades
FIXME: described required changes to LDAP 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//HowTo/Administration
FIXME: add more info about stable-updates here 
FIXME: update information about Java in the web browser in Squeeze 
FIXME: this is so generic it's almost useless 
FIXME: Compare with DebianEdu/Documentation/Squeeze/HowTo/NetworkClients
 and get rid of redundant information. 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//HowTo/Desktop
FIXME: kiosktool is no longer in Debian post-Lenny; new content needed for 
whatever replaces it 
FIXME: describe how to install and use them in parallel and how to use 
$desktop_environment on "normal logins" and lxde on thin-client-logins. 
Probably describe that in 
 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//HowTo/NetworkClients
FIXME: would it be better to explain user groups in Windows first with GOsa, 
and then with an example for the command line? 
FIXME explain how to use profiles from global policies for Windows machines in 
the skolelinux network 
FIXME: describe roaming profile key for the global policy editor here 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//HowTo/Samba
FIXME: ... from here it needs someone with an English-language install of MS 
Windows to provide the necessary steps ... 
FIXME: ... from here it needs someone with an English-language install of MS 
Windows to provide the necessary steps ... 
--
http://wiki.debian.org/DebianEdu/Documentation/Squeeze//Translations
FIXME". 

29 FIXMEs left to fix



-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rrju8-gl...@ravel.debian.org



Re: pxeinstall fails if network card requires nonfree firmware

2012-01-28 Thread Holger Levsen
On Donnerstag, 26. Januar 2012, Petter Reinholdtsen wrote:
> Perhaps we should call auto-addfirmware during installation?  I am
> reluctant to do so, as it will silently add an non-free APT source, and
> I suspect using non-free software should be a decition left to the local
> admin.  On the other hand, our DVD and CD images include all the
> firmware packages and this firmware will be used automatically if it is
> needed on the machine being installed.
> 
> I guess we should clean up the scripts and make them have consistent
> behaviour, but that can wait for Wheezy, I believe.

yes.

documenting how to do this manually is what we should do for Squeeze.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/201201290126.10977.hol...@layer-acht.org



debian-edu-config_1.449~svn75876_i386.changes ACCEPTED

2012-01-28 Thread Skolelinux archive Installer

Accepted:
debian-edu-config-gosa-netgroups_1.449~svn75876_all.deb
  to 
pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.449~svn75876_all.deb
debian-edu-config_1.449~svn75876.dsc
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75876.dsc
debian-edu-config_1.449~svn75876.tar.gz
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75876.tar.gz
debian-edu-config_1.449~svn75876_all.deb
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75876_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.449~svn75876_all.deb - extra local/misc
debian-edu-config_1.449~svn75876.dsc - extra local/misc
debian-edu-config_1.449~svn75876_all.deb - extra local/misc

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rrhua-0001wi...@administrator.skolelinux.no



debian-edu-config_1.449~svn75860_i386.changes ACCEPTED

2012-01-28 Thread Skolelinux archive Installer

Accepted:
debian-edu-config-gosa-netgroups_1.449~svn75860_all.deb
  to 
pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.449~svn75860_all.deb
debian-edu-config_1.449~svn75860.dsc
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75860.dsc
debian-edu-config_1.449~svn75860.tar.gz
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75860.tar.gz
debian-edu-config_1.449~svn75860_all.deb
  to pool/local/d/debian-edu-config/debian-edu-config_1.449~svn75860_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.449~svn75860_all.deb - extra local/misc
debian-edu-config_1.449~svn75860.dsc - extra local/misc
debian-edu-config_1.449~svn75860_all.deb - extra local/misc

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rrgjb-0006px...@administrator.skolelinux.no



Why disable IPv6 for Samba?

2012-01-28 Thread Petter Reinholdtsen

I'm currently improving the support for changing the IP network in
Debian Edu, and update the subnet-change script to work better.

In the process I discovered that smb.conf now hardcode the tjener IP
address for the server, and the backbone subnet for the clients.  Why is
this?  This is the changelog entry assosiated with this change, which
was done by Mike Gabriel 2011-09-03:

  * Disable IPv6 for Samba on Skolelinux systems (clients+server).

Why is it important to disable IPv6 for Samba?  I fail to find any
emails where this has been discussed on the list.  Can we disable ipv6
without hardcoding IP addresses in smb.conf?  This is the only hardcoded
IP address/subnet left on clients, as far as I can tell, and I would
really like to avoid hardcoded static IP setup on clients.

There is another hardcoded IP subnet in smb.conf on the server, blocking
access to anyone from outside the, but as the subnet-change script will
run on the main-server anyway, it isn't that much of a problem.

This is the commit in question:
 
Index: etc/samba/smb-debian-edu.conf
===
--- etc/samba/smb-debian-edu.conf   (revisjon 74049)
+++ etc/samba/smb-debian-edu.conf   (revisjon 74050)
@@ -26,6 +26,10 @@
#server signing = auto
server schannel = auto 
 
+# disable IPv6 for Samba on Skolelinux systems
+   interfaces = 127.0.0.1 10.0.2.2
+   bind interfaces only = yes
+
 # server string/NT Description field
server string = %h server (Debian Edu/Skolelinux Main Server)
 
Index: etc/samba/smb-debian-edu-client.conf
===
--- etc/samba/smb-debian-edu-client.conf(revisjon 74049)
+++ etc/samba/smb-debian-edu-client.conf(revisjon 74050)
@@ -23,6 +23,10 @@
 # server string/NT Description field
server string = %h server (Samba %v)
 
+# disable IPv6 for Samba on Skolelinux systems
+   interfaces = 127.0.0.1 10.0.0.0/8
+   bind interfaces only = yes
+
 # Use kerberos
 
realm = INTERN
-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/2fl39az8qz3@diskless.uio.no



debian-edu-install_1.524~svn75817_i386.changes ACCEPTED

2012-01-28 Thread Skolelinux archive Installer

Accepted:
debian-edu-install-udeb_1.524~svn75817_all.udeb
  to 
pool/local/d/debian-edu-install/debian-edu-install-udeb_1.524~svn75817_all.udeb
debian-edu-install_1.524~svn75817.dsc
  to pool/local/d/debian-edu-install/debian-edu-install_1.524~svn75817.dsc
debian-edu-install_1.524~svn75817.tar.gz
  to pool/local/d/debian-edu-install/debian-edu-install_1.524~svn75817.tar.gz
debian-edu-install_1.524~svn75817_all.deb
  to pool/local/d/debian-edu-install/debian-edu-install_1.524~svn75817_all.deb
debian-edu-profile-udeb_1.524~svn75817_all.udeb
  to 
pool/local/d/debian-edu-install/debian-edu-profile-udeb_1.524~svn75817_all.udeb


Override entries for your package:
debian-edu-install-udeb_1.524~svn75817_all.udeb - optional 
local/debian-installer
debian-edu-install_1.524~svn75817.dsc - extra local/misc
debian-edu-install_1.524~svn75817_all.deb - extra local/misc
debian-edu-profile-udeb_1.524~svn75817_all.udeb - optional 
local/debian-installer

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1rr5xq-rx...@administrator.skolelinux.no



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-01-28 Thread Andreas B. Mundt
Hi,

On Fri, Jan 27, 2012 at 11:14:04PM +0100, Giorgio Pioda wrote:
> 
> your solution seems more or less an unavoidable hack.
> 
> Nice would be to tell Kerberos to avoid service check and control
> only user ID.
> 
> What about this:
> 
> http://docs.oracle.com/cd/E19963-01/html/821-1456/setup-148.html#gihyu
> 
> Maybe could be a solution, but I don't know exactly if it works
> as I think it should:
> 
> client # cat /etc/krb5/krb5.conf
> [libdefaults]
> default_realm = EXAMPLE.COM
> verify_ap_req_nofail = false
>   ...

I just tried with 

  verify_ap_req_nofail = false

and disabled the ticket copying, unfortunatelly it seems not to work
here.  I have to think about it, but isn't it necessary to have a
ticket available as it is used to encrypt the connection to the NFS
server (sec=krb5p)?

Best regards,

 Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120128094033.GA5120@flashgordon