Re: EduFication package

2012-02-05 Thread Petter Reinholdtsen
[Giorgio Pioda]
>> Cool.  Sound like a package we should keep in the debian-edu
>> project on Alioth?  Perhaps you should join the project and put the
>> source there?
> 
> I'm really not a programmer (have a PhD in Chemistry, not in IT) and
> I have terrible tendency to write spaghetti code...
> 
> Anyway, I first have to decide if I'll switch my school to DebianEdu
> removing my old hand written system (Kerberos,NIS,NFS4). (99% yes,
> but I want to test a little more). Then I could join.

The "join the project" part of my suggestion above was a technical
one, as it is required to get write access to the repository on
Alioth.  It was not intended as a statement of intent to work on the
project in general.  If you decide not to use Debian Edu, it is fine
for us if you want to resign from the project later.

> In all cases, if the package works, I'll publish it GPL'ized. (I've
> to admit that is not that a big work)

If you publish it in our repository right away, you can more easily
get help by us writing it, and cleaning up your spagetti code. :)
-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120206075751.gg10...@login1.uio.no



Re: EduFication package

2012-02-05 Thread Giorgio Pioda
Hi

On Sun, Feb 05, 2012 at 10:14:46PM +0100, Petter Reinholdtsen wrote:
> 
> [Giorgio Pioda]
> > Hi,
> > 
> > I'm working on a binary .deb that can resolv for dependecies, and
> > using dpkg --divert install configs so that a plain Debian or Ubuntu
> > istallation is transformed into a workstation client.
> 
> Cool.  Sound like a package we should keep in the debian-edu project on
> Alioth?  Perhaps you should join the project and put the source there?
>

I'm really not a programmer (have a PhD in Chemistry, not in IT) and I have
terrible tendency to write spaghetti code...

Anyway, I first have to decide if I'll switch my school to DebianEdu
removing my old hand written system (Kerberos,NIS,NFS4). (99% yes, but I
want to test a little more). Then I could join.

In all cases, if the package works, I'll publish it GPL'ized. (I've to admit
that is not that a big work)

Cheers

Giorgio

>-- 
> Happy hacking
> Petter Reinholdtsen
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/2flmx8xkmnt@diskless.uio.no
> 
> 

-- 
Sysadmin SPSE-Tenero
Ufficio:   +41 91 735 62 48 
Cellulare: +41 79 629 20 63


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120206075420.gc2...@ticino.com



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-02-05 Thread Andreas B. Mundt

On Sun, Feb 05, 2012 at 10:51:08PM +0100, Petter Reinholdtsen wrote:
> 
> [Andreas B. Mundt]
> > How long?  I think entering the username triggers autofs (to read the
> > user's configuration, for example which desktop he want's to start by
> > default).  What if someone takes 15 seconds to enter his password, and
> > someone else needs only 3 seconds?
> 
> This do not sound right.  Setups using pam_mount work, and I believe PAM
> is only invoked after the password is entered.  Because of this, I
> believe the users home directory isn't accessed before the password is
> entered.
> 

I did not say that pam_mount doesn't work.  I believe gdm tries to
access the home directory.  If it doesn't succeed, this is non-fatal.
However we don't have to argue about that, it should be easy to
check: Login on a terminal on a workstation as root, check if the home
directories are not yet mounted and then login on gdm as a user and
carefully check when the home directory is accessed/mounted using the
terminal.   

> What are you seeing that make you believe PAM is invoked too late?
> Could it be some other pam module called earlier in the stack that
> causes the effect?

Hm?  Are we talking about the same issue, making a diskless
workstation work without machine credentials?

Best regards,

 Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120206075235.GA4158@fuzi



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-02-05 Thread Giorgio Pioda
Hi

On Sun, Feb 05, 2012 at 10:35:08PM +0100, Andreas B. Mundt wrote:
> Hi,
> 
> On Sun, Feb 05, 2012 at 05:25:20PM +0100, Giorgio Pioda wrote:
> 
> > > The script executed right after authentication copies the user's
> > > Kerberos ticket to the file krb5cc_diskless which is owned by root. 
> > > This ticket will be picked up by gssd to create the security context
> > > needed.  However, it's needed to restart autofs, I am not exactly sure
> > > why.  It looks like autofs caches failures in mounting a directory
> > > (which it tries earlier in the login process), and does not try again
> > > immediately when the ticket is available. 
> > > 
> > 
> > What about setting a delay in autofs?
> > 
> 
> How long?  I think entering the username triggers autofs (to read the
> user's configuration, for example which desktop he want's to start by
> default).  What if someone takes 15 seconds to enter his password, and
> someone else needs only 3 seconds?  Only if exactly at the right
> moment where pam gives the OK (i.e. the ticket is available) for login
> the autofs is triggered it will manage to provide the home directory.
> Imediatelly after that the user will have / as home (or might not be
> allowed to login on gdm).

It is pam that triggers autofs, I guess. Probably it is possible to
construct pam rules in such a way that your script is first executed
and only after this step aufofs is called, (either with libpam-script
or libpam-exec).

I've read around that such an hack has been
tested for EduUbuntu (thiny client based), but the guys didn't
publish the details.


> So I don't think that will work.  Did you have any success with the 
>
>verify_ap_req_nofail = false
> 

Yes, but it seems to be false by default. I have to test it again; no
success until now.

> stuff?
> 
> Best regards,
> 
>  Andi
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/20120205213507.GA6821@flashgordon
> 
> 

Regards

Giorgio

-- 
Sysadmin SPSE-Tenero
Ufficio:   +41 91 735 62 48 
Cellulare: +41 79 629 20 63


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120206074534.gb2...@ticino.com



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-02-05 Thread Petter Reinholdtsen

[Andreas B. Mundt]
> How long?  I think entering the username triggers autofs (to read the
> user's configuration, for example which desktop he want's to start by
> default).  What if someone takes 15 seconds to enter his password, and
> someone else needs only 3 seconds?

This do not sound right.  Setups using pam_mount work, and I believe PAM
is only invoked after the password is entered.  Because of this, I
believe the users home directory isn't accessed before the password is
entered.

What are you seeing that make you believe PAM is invoked too late?
Could it be some other pam module called earlier in the stack that
causes the effect?
-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/2flk441kkz7@diskless.uio.no



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-02-05 Thread Andreas B. Mundt
Hi,

On Sun, Feb 05, 2012 at 05:25:20PM +0100, Giorgio Pioda wrote:

> > The script executed right after authentication copies the user's
> > Kerberos ticket to the file krb5cc_diskless which is owned by root. 
> > This ticket will be picked up by gssd to create the security context
> > needed.  However, it's needed to restart autofs, I am not exactly sure
> > why.  It looks like autofs caches failures in mounting a directory
> > (which it tries earlier in the login process), and does not try again
> > immediately when the ticket is available. 
> > 
> 
> What about setting a delay in autofs?
> 

How long?  I think entering the username triggers autofs (to read the
user's configuration, for example which desktop he want's to start by
default).  What if someone takes 15 seconds to enter his password, and
someone else needs only 3 seconds?  Only if exactly at the right
moment where pam gives the OK (i.e. the ticket is available) for login
the autofs is triggered it will manage to provide the home directory.
Imediatelly after that the user will have / as home (or might not be
allowed to login on gdm).

So I don't think that will work.  Did you have any success with the 
   
   verify_ap_req_nofail = false

stuff?

Best regards,

 Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120205213507.GA6821@flashgordon



Re: EduFication package

2012-02-05 Thread Petter Reinholdtsen

[Giorgio Pioda]
> Hi,
> 
> I'm working on a binary .deb that can resolv for dependecies, and
> using dpkg --divert install configs so that a plain Debian or Ubuntu
> istallation is transformed into a workstation client.

Cool.  Sound like a package we should keep in the debian-edu project on
Alioth?  Perhaps you should join the project and put the source there?
-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/2flmx8xkmnt@diskless.uio.no



EduFication package

2012-02-05 Thread Giorgio Pioda
Hi,

I'm working on a binary .deb that can resolv for
dependecies, and using dpkg --divert install
configs so that a plain Debian or Ubuntu istallation
is transformed into a workstation client.

Cheers

Giorgio
-- 
Sysadmin SPSE-Tenero
Ufficio:   +41 91 735 62 48 
Cellulare: +41 79 629 20 63


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120205193211.ga6...@ticino.com



Re: Diskless clients: NFSv4 mounting with sec=krb5p and no machine creds

2012-02-05 Thread Giorgio Pioda
Hi
> 
> The script executed right after authentication copies the user's
> Kerberos ticket to the file krb5cc_diskless which is owned by root. 
> This ticket will be picked up by gssd to create the security context
> needed.  However, it's needed to restart autofs, I am not exactly sure
> why.  It looks like autofs caches failures in mounting a directory
> (which it tries earlier in the login process), and does not try again
> immediately when the ticket is available. 
> 

What about setting a delay in autofs?

-- 
Sysadmin SPSE-Tenero
Ufficio:   +41 91 735 62 48 
Cellulare: +41 79 629 20 63


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120205162520.ga2...@ticino.com



Re: Bug#658563: debian-edu-config: [INTL:id] Indonesian debconf templates translation

2012-02-05 Thread Kurniawan Haikal
On Sun, Feb 5, 2012 at 9:22 PM, David Prévot  wrote:
> Hi,
>
> Le 05/02/2012 08:35, Petter Reinholdtsen a écrit :
>> [Kurniawan Haikal]
>>> Of course, i'd love to and i'll try my best. But could you give me,
>>> some links may be, that help me to understand how to translate
>>> debian-edu-config/www/? Because i'm new to this things. And I'll try
>>> to ask people in Indonesian translation team too about it.
>>
>> Sure.
>>
>> Fetch the source for debian-edu-config from unstable and copy
>
> Even easier: download the PO file directly from
>
> http://i18n.debian.net/material/po/unstable/main/d/debian-edu-config/www/debian-edu-config_1.449_index.pot.gz
>
>> www/index.pot to www/id.po to get started.  Submit the resulting id.po
>> to BTS.
>>
>> Similar for debian-edu-install, fetch from unstable and work in
>> debian/po/.
>
> Similar easier way: download it from
>
> http://i18n.debian.net/material/po/unstable/main/d/debian-edu-install/debian/po/debian-edu-install_1.524_templates.pot.gz
>
> Regards
>
> David
>
> P.-S.: links from
> http://www.debian.org/international/l10n/po/pot#debian-edu-config and
> http://www.debian.org/international/l10n/po-debconf/pot#debian-edu-install
>

Got it. Thanks all :)

-- 
Kurniawan Haikal 


--
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAAhTSxUe1-0pdPGBqQjTR_8woe-RGk3jq0yAÌbsfi63h1...@mail.gmail.com



Re: Bug#658563: debian-edu-config: [INTL:id] Indonesian debconf templates translation

2012-02-05 Thread David Prévot
Hi,

Le 05/02/2012 08:35, Petter Reinholdtsen a écrit :
> [Kurniawan Haikal]
>> Of course, i'd love to and i'll try my best. But could you give me,
>> some links may be, that help me to understand how to translate
>> debian-edu-config/www/? Because i'm new to this things. And I'll try
>> to ask people in Indonesian translation team too about it.
> 
> Sure.
> 
> Fetch the source for debian-edu-config from unstable and copy

Even easier: download the PO file directly from

http://i18n.debian.net/material/po/unstable/main/d/debian-edu-config/www/debian-edu-config_1.449_index.pot.gz

> www/index.pot to www/id.po to get started.  Submit the resulting id.po
> to BTS.
> 
> Similar for debian-edu-install, fetch from unstable and work in
> debian/po/.

Similar easier way: download it from

http://i18n.debian.net/material/po/unstable/main/d/debian-edu-install/debian/po/debian-edu-install_1.524_templates.pot.gz

Regards

David

P.-S.: links from
http://www.debian.org/international/l10n/po/pot#debian-edu-config and
http://www.debian.org/international/l10n/po-debconf/pot#debian-edu-install



signature.asc
Description: OpenPGP digital signature


debian-edu-config_1.450_i386.changes ACCEPTED

2012-02-05 Thread Skolelinux archive Installer

Accepted:
debian-edu-config-gosa-netgroups_1.450_all.deb
  to 
pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.450_all.deb
debian-edu-config_1.450.dsc
  to pool/local/d/debian-edu-config/debian-edu-config_1.450.dsc
debian-edu-config_1.450.tar.gz
  to pool/local/d/debian-edu-config/debian-edu-config_1.450.tar.gz
debian-edu-config_1.450_all.deb
  to pool/local/d/debian-edu-config/debian-edu-config_1.450_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.450_all.deb - extra local/misc
debian-edu-config_1.450.dsc - extra local/misc
debian-edu-config_1.450_all.deb - extra local/misc

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ru1sr-0006go...@administrator.skolelinux.no



debian-edu-config_1.450_i386.changes ACCEPTED into unstable

2012-02-05 Thread Debian FTP Masters



Accepted:
debian-edu-config-gosa-netgroups_1.450_all.deb
  to main/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.450_all.deb
debian-edu-config_1.450.dsc
  to main/d/debian-edu-config/debian-edu-config_1.450.dsc
debian-edu-config_1.450.tar.gz
  to main/d/debian-edu-config/debian-edu-config_1.450.tar.gz
debian-edu-config_1.450_all.deb
  to main/d/debian-edu-config/debian-edu-config_1.450_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.450_all.deb - extra misc
debian-edu-config_1.450.dsc - source misc
debian-edu-config_1.450_all.deb - extra misc

Announcing to debian-devel-chan...@lists.debian.org
Closing bugs: 658563 


Thank you for your contribution to Debian.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ru1uv-0007pw...@franck.debian.org



Processing of debian-edu-config_1.450_i386.changes

2012-02-05 Thread Debian FTP Masters
debian-edu-config_1.450_i386.changes uploaded successfully to localhost
along with the files:
  debian-edu-config_1.450.dsc
  debian-edu-config_1.450.tar.gz
  debian-edu-config_1.450_all.deb
  debian-edu-config-gosa-netgroups_1.450_all.deb

Greetings,

Your Debian queue daemon (running on host franck.debian.org)


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ru1nw-0007c5...@franck.debian.org



Bug#658563: marked as done (debian-edu-config: [INTL:id] Indonesian debconf templates translation)

2012-02-05 Thread Debian Bug Tracking System
Your message dated Sun, 05 Feb 2012 12:47:13 +
with message-id 
and subject line Bug#658563: fixed in debian-edu-config 1.450
has caused the Debian Bug report #658563,
regarding debian-edu-config: [INTL:id] Indonesian debconf templates translation
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
658563: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=658563
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---

Source: debian-edu-config
Version: 1.448
Severity: wishlist
Tags: patch l10n
X-Debbugs-CC: debian-l10n-indones...@lists.debian.org

id.po attached.

Regards.

--
Kurniawan Haikal 
# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR THE PACKAGE'S COPYRIGHT HOLDER
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR , YEAR.
#
msgid ""
msgstr ""
"Project-Id-Version: debian-edu-config 1.448\n"
"Report-Msgid-Bugs-To: debian-edu@lists.debian.org\n"
"POT-Creation-Date: 2006-09-22 22:06+1000\n"
"PO-Revision-Date: 2012-02-04 11:58+0700\n"
"Last-Translator: Kurniawan Haikal \n"
"Language-Team: Debian Indonesia Translators 
\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"

#. Type: boolean
#. Description
#: ../debian-edu-config.templates:1001
msgid "Should the init.d/update-hostname script run at boot time?"
msgstr "Apakah script init.d/update-hostname dijalankan pada saat boot?"

#. Type: boolean
#. Description
#: ../debian-edu-config.templates:2001
msgid "Do you want to run enable-nat on your system?"
msgstr "Apakah anda ingin menjalankan enable-nat pada sistem anda?"

#. Type: boolean
#. Description
#: ../debian-edu-config.templates:2001
msgid ""
"The enable-nat script activates NAT for your Thin-Clients and overwrites "
"your iptables rules."
msgstr ""
"Script enable-nat mengaktifkan NAT untuk Thin-Client anda dan menimpa aturan 
iptables anda."
--- End Message ---
--- Begin Message ---
Source: debian-edu-config
Source-Version: 1.450

We believe that the bug you reported is fixed in the latest version of
debian-edu-config, which is due to be installed in the Debian FTP archive:

debian-edu-config-gosa-netgroups_1.450_all.deb
  to main/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.450_all.deb
debian-edu-config_1.450.dsc
  to main/d/debian-edu-config/debian-edu-config_1.450.dsc
debian-edu-config_1.450.tar.gz
  to main/d/debian-edu-config/debian-edu-config_1.450.tar.gz
debian-edu-config_1.450_all.deb
  to main/d/debian-edu-config/debian-edu-config_1.450_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 658...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Petter Reinholdtsen  (supplier of updated debian-edu-config 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.8
Date: Sun, 05 Feb 2012 13:36:01 +0100
Source: debian-edu-config
Binary: debian-edu-config debian-edu-config-gosa-netgroups
Architecture: source all
Version: 1.450
Distribution: unstable
Urgency: low
Maintainer: Debian Edu Developers 
Changed-By: Petter Reinholdtsen 
Description: 
 debian-edu-config - Configuration files for Skolelinux systems
 debian-edu-config-gosa-netgroups - netgroups plugin for GOsa²
Closes: 658563
Changes: 
 debian-edu-config (1.450) unstable; urgency=low
 .
   [ Petter Reinholdtsen ]
   * Document that debian-edu-munin-node.conf need to change when using
 subnet-change.
   * Move libjavascript-perl from depends to recommends, to see if it still
 is installed and to get our packages to propagate to wheezy while we
 figure out a solution for #631045.
   * Raise versioned dependency on education-tasks from (>= 0.842~svn60380)
 (>= 0.853), to ensure we get the current one and detect when only the
 old version is available.
 .
   * Translation updates:
 - Updates Indonesian debconf translation from Kurniawan Haikal (Closes: 
#658563).
Checksums-Sha1: 
 f8beba0b4cc4ceea384f82ba94e2f21424257fb7 1447 debian-edu-config_1.450.dsc
 b80698f56dd58b0358bc6df00743c0bdc9eb5842 498895 debian-edu-config_1.450.tar.gz
 2e5c793ea94d6728f19484fbe96ca768440a77bb 387666 debian-edu-config_1.450_all.deb
 a1a60c818c767457d2c3cffa4647245c6d9f0472 111016 
debian-edu-config-gosa-netgroups_1.4

Re: Bug#658563: debian-edu-config: [INTL:id] Indonesian debconf templates translation

2012-02-05 Thread Petter Reinholdtsen
[Kurniawan Haikal]
> Of course, i'd love to and i'll try my best. But could you give me,
> some links may be, that help me to understand how to translate
> debian-edu-config/www/? Because i'm new to this things. And I'll try
> to ask people in Indonesian translation team too about it.

Sure.

Fetch the source for debian-edu-config from unstable and copy
www/index.pot to www/id.po to get started.  Submit the resulting id.po
to BTS.

Similar for debian-edu-install, fetch from unstable and work in
debian/po/.

Cc to the project list, to allow our translator coordinator to
contribute.
-- 
Happy hacking
Petter Reinholdtsen


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120205123532.gl8...@login1.uio.no



debian-edu-config_1.450~svn76017_i386.changes ACCEPTED

2012-02-05 Thread Skolelinux archive Installer

Accepted:
debian-edu-config-gosa-netgroups_1.450~svn76017_all.deb
  to 
pool/local/d/debian-edu-config/debian-edu-config-gosa-netgroups_1.450~svn76017_all.deb
debian-edu-config_1.450~svn76017.dsc
  to pool/local/d/debian-edu-config/debian-edu-config_1.450~svn76017.dsc
debian-edu-config_1.450~svn76017.tar.gz
  to pool/local/d/debian-edu-config/debian-edu-config_1.450~svn76017.tar.gz
debian-edu-config_1.450~svn76017_all.deb
  to pool/local/d/debian-edu-config/debian-edu-config_1.450~svn76017_all.deb


Override entries for your package:
debian-edu-config-gosa-netgroups_1.450~svn76017_all.deb - extra local/misc
debian-edu-config_1.450~svn76017.dsc - extra local/misc
debian-edu-config_1.450~svn76017_all.deb - extra local/misc

Announcing to comm...@skolelinux.org


Thank you for your contribution to Debian-Edu/Skolelinux archive.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ru0ij-0002sq...@administrator.skolelinux.no



NFSv4 Kerberized

2012-02-05 Thread Giorgio Pioda
Hi,

On my Ubuntu workstation client I've been able to kerberize NFSv4 mounts.

Basically It is needed to create princ and keytab for nfs/yourclient.intern.
The princ for the nfs server is already existent as nfs/tjener.intern, but 
adding
the keytab is needed. Keytab can go to default krb5.keytab, since  nfs
runs as root. No need to add kerberos autentication of the autofs service,
like stated somewhere in internet (autofsclient principal and keytab).

Important is the "ktadd -e des" options for all nfs/xxx.intern since nfsv4
works only with des, and the allow_weak_crypto = true in krb5.conf.

Then modify ldap options "automountInformation: -fstype=nfs4,sec=krb5,rw 
tjener.intern:/&"

The rest is rebooting two or three times (no idea why, both tjener
and client), and checking the mount options with "mount" command.

At this stage I guess that it is possible to remove the sys option
in/etc/exports on tjener. ( Not tried yet, for sake of compatibility
with other client images).

Regards

Giorgio

P.S: Next would be to use authentication without TGT and avoiding
the keytab for client and server.

-- 
Sysadmin SPSE-Tenero
Ufficio:   +41 91 735 62 48 
Cellulare: +41 79 629 20 63


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20120205103748.ga4...@ticino.com