Hi Holger,
On Sat, Aug 06, 2016 at 11:03:45AM +, Holger Levsen wrote:
>
> I believe it's useful to have the maintainers/uploaders field of our
> packages match reality, that is, to only list people who are active
> on Debian Edu or plan to become active again.
>
> So I'm wondering, Andreas, Al
Hi,
On Thu, Jun 23, 2016 at 08:26:12AM +0200, Andreas Tille wrote:
> I've just read this article about UCS@school
>
> http://www.pro-linux.de/news/1/23680/ucsschool-41-r2-freigegeben.html
>
> Is there any relation to Debian Edu work and if not why not or should we
> cooperate to some extend?
Hi,
On Sun, Jul 05, 2015 at 11:40:36AM +0200, Giorgio Pioda wrote:
> I can confirm a boot race condition (IIRC somebody talked six months ago about
> autofs/systemd issues in this mailing list)
>
> Restarting manually the sercvices in the (more or less correct) order on
> tjener:
>
> 1) nscd & n
Hi Holger!
On Thu, Nov 27, 2014 at 08:05:54PM +0100, Holger Levsen wrote:
> (are you still subscribed to the list?)
Sure! (Although sometimes a bit flooded by mails ...)
> On Donnerstag, 27. November 2014, Andreas B. Mundt wrote:
> > The issue at hand is discussed in #758992 and #7
Hi,
On Wed, Nov 26, 2014 at 09:21:22PM +0100, Holger Levsen wrote:
>
> On Mittwoch, 26. November 2014, Benjamin Kaduk wrote:
> > Please unblock package krb5
> >
> > systemd does not respect inserv overrides (see #759001) and does
> > not plan to do so, since they appear to be used by only two pack
Hi,
On Tue, Aug 26, 2014 at 06:40:30AM +0200, Petter Reinholdtsen wrote:
>
> Btw, regarding our Kerberos error on the main server, Andreas B. Mundt
> just mentioned on IRC that https://bugs.debian.org/758992> would
> probably hit us too. It affect Kerberos with LDAP backend when
Hi Holger et. al,
[cc debian-science, related post:
https://lists.debian.org/debian-edu/2013/06/msg00177.html>]
On Fri, Jun 14, 2013 at 11:54:05PM +0200, Holger Levsen wrote:
> On Freitag, 14. Juni 2013, Andreas B. Mundt wrote:
> > libticables-1.3.4
> > libtifiles-1.1.6
&g
Hi all,
I would like to ask if everybody is fine with adding a few more
packages to the debian-edu alioth git repository. The packages are
usefull for Texas Instruments calculators, and the -edu fits nicely I
guess:
libticables-1.3.4
libtifiles-1.1.6
libticonv-1.1.4
libticalcs-1.1.8
gfm-1.0
Hi Giorgio,
On Sun, May 26, 2013 at 11:28:43AM +0200, Giorgio Pioda wrote:
> On Sun, May 26, 2013 at 10:23:41AM +0200, Andreas B. Mundt wrote:
> > Hi Giorgio,
> >
> > On Sun, May 26, 2013 at 09:43:17AM +0200, Giorgio Pioda wrote:
> > > On Sat, May 25, 2013 at 05:37:2
Hi Petter,
On Sun, May 26, 2013 at 11:41:48AM +0200, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > [1] Add 'session required pam_mkhomedir.so skel=/etc/skel umask=0027'
> > to /etc/pam.d/common-session
> > However this only creates the direc
Hi Giorgio,
On Sun, May 26, 2013 at 09:43:17AM +0200, Giorgio Pioda wrote:
> On Sat, May 25, 2013 at 05:37:20PM +0200, Petter Reinholdtsen wrote:
> > >
> > > pam_acct_mgmt: Authentication failure
> > >
> > > But actually sssd works, krb5 tickets are OK and right before this message
> > > pam_sss c
Hi Julien,
I hope you enjoyed holidays!
On Thu, May 23, 2013 at 10:29:41AM +0200, Julien Lambot wrote:
> Many thanks for that feature ! Great you could implement it.
>
> Back on testing after some holidays :)
How is your network performance going? I found two issues that might
be interesting t
(cc debian-edu, as they are working on the same issue ...)
Hi all,
with the latest commit, roaming workstations are available in
Debian-LAN!
http://anonscm.debian.org/gitweb/?p=collab-maint/debian-lan.git;a=commitdiff;h=9aef028d091e30f2a560315e89c604e7a07c2ffc>
The ROAMING class allows
Hi all,
I just accidentally came along a package which seems to be interesting
in the current context:
http://packages.debian.org/wheezy/unburden-home-dir
Best regards,
Andi
--
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Cont
Hi Klaus,
many thanks for sharing your experience!
On Mon, May 20, 2013 at 12:28:24PM +0200, Klaus Knopper wrote:
> We have been running NFS over WLAN, and experienced problems that turned
> out to be related to bufferbloat
> (http://en.wikipedia.org/wiki/Bufferbloat) in combination with low
> b
Hi,
I am wondering what the 'best' options mounting the home directories
via NFSv4 are.
IIRC, by default debian-edu uses rsize=32768,wsize=32768, which has
been adopted by debian-lan too.
Running a test without defining rsize,wsize on 3 different setups, I
got the following (remove rsize,wsize i
[cc ... let's ask on the debian-edu list if they know more ... ]
Hi all,
we would like to implement something like 'roaming workstations' in
debian-lan. Can someone give us some hints on how to do that best?
Is there any experience available with roaming workstations, do they
work sucessfully, o
Hi all,
On Mon, Mar 25, 2013 at 09:56:27PM +0100, Petter Reinholdtsen wrote:
>
> [Martin Schulte]
> > thank you for your answer.
> > I found a way to get the passwords in cleartext from lenny ldap, thanks
> > to windows, the secures OS ever :-) and his LM-Hash. You can crack this
> > LM-hash using
Hi Martin,
On Fri, Mar 22, 2013 at 06:33:11PM +0100, Martin Schulte wrote:
>
> while trying to upgrade to squeeze and restore old passwords, i had
> a look to the ldap in squeeze. I found the two attributes
> 'krbPrincipalKey' and 'sambaMungedDial'. Can someone tell me, what
> is the use of these
Hi,
On Sun, Feb 03, 2013 at 06:24:52PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
>
> > FYI, it looks as if "allow_weak_crypto = true" [1] is not needed
> > anymore for wheezy. This is at least the case for debian-lan.
>
> What was it needed for i
Hi,
FYI, it looks as if "allow_weak_crypto = true" [1] is not needed
anymore for wheezy. This is at least the case for debian-lan.
Best regards,
Andi
[1] c.f. debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init
--
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.
Hi,
On Tue, Jan 22, 2013 at 05:43:59AM +0100, Mike Gabriel wrote:
> Hi Andi, hi Wolfgang,
>
> On Di 22 Jan 2013 00:38:32 CET Wolfgang Schweer wrote:
>
> >>In addition, I had to rewrite gosa-sync.
> >
> >gosa-sync seems to work here without any change.
>
> In Debian Edu squeeze and GOsa² 2.6 the go
Hi,
On Sun, Jan 20, 2013 at 05:25:16PM +0100, Wolfgang Schweer wrote:
> On Sun, Jan 20, 2013 at 01:38:22PM +0100, Andreas B. Mundt wrote:
> > I had to modify the variable name to be send to gosa-sync:
> >
> > - postmodify="USERPASSWORD=%userPassword /usr/bin/
Hi,
concerning Wolfgangs work on the GOsa setup for wheezy which I
currently do for debian-lan, I found the following which I would like
to share to not double debugging.
I had to modify the variable name to be send to gosa-sync:
If I don't do that, I end up with the hash in th
Hi Bengt,
On Sun, Oct 14, 2012 at 10:38:39AM +1100, Bengt Thuree wrote:
[...]
>
> I really wish I can get this to work, but might have to have a second
> look at Edubuntu :(, but since everything else is Debian, I am not to
> keen on that.
>
Another possibility you might want to take a look at
Hi Mike,
On Tue, Aug 21, 2012 at 10:19:00PM +0200, Mike Gabriel wrote:
> On Di 21 Aug 2012 22:02:20 CEST "Andreas B. Mundt" wrote:
[...]
> >
> >This could be worth a try:
> >
> >https://init.linpro.no/pipermail/skolelinux.no/commits/2012-August/119291.htm
Hi Sebastian,
> I've added users via csv-import and most user-accounts are fine, but
> some have no acces to their own homedirectory. (The owner is someone
> else) Any suggestion how this could happen and/or how to fix it?
This could be worth a try:
https://init.linpro.no/pipermail/skoleli
Hi everybody,
I am happy to report that with the last commits there are no specific
hardcoded IP addresses left in the config space [1] and it should be
possible to use debian-lan in a variety of networks.
All network-specific information and used IP addresses are collected
in class/SERVER_A.var
Hi Giorgio and others,
On Mon, Apr 09, 2012 at 11:21:37AM +0200, Giorgio Pioda wrote:
> In my case is not a matter of randomizing.
>
> We have an internal 10.x.x.x/23 provided by the
> national telecom and we are not able to
> change the subnet, otherwise we would collide
> with other schools.
>
Hi Giorgio,
On Sun, Apr 08, 2012 at 12:01:19PM +0200, Giorgio Pioda wrote:
>
> >
> > Providing a setup without the mainerver acting as gateway ( issue 2) )
> > is planed for Setup_B.
> >
>
> Teased to see it soon :-)
>
Done.
Here it is:
http://lists.alioth.debian.org/pipermail/debian-lan-
Hi,
On Sun, Apr 08, 2012 at 11:13:40AM +0200, Giorgio Pioda wrote:
>
> Debian LAN is indeed interesting, simpler approach tha Edu. But I see some
> blocking missing features.
>
> 1) Subnet switch to an arbitrary 10.x.x.x/24 or even better 10.x.x.x/23 and
> also 192.169.x.x networks
>
It shouldn't
ian.org/DebianLAN/bootstrap>
--
--
A N D R E A S B. M U N D T
GPG key: 4096R/617B586D 2010-03-22 Andreas B. Mundt--
Andreas B. Mundt--
signature.asc
Description: Digital signature
Forwarded message, as I forgot to cc the debian-edu list:
On Tue, Mar 20, 2012 at 10:00:43PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > Just remove the "-maxlife" option completely. Use something like:
> >
> > kadmin.local -q "add_po
On Tue, Mar 20, 2012 at 10:00:43PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > Just remove the "-maxlife" option completely. Use something like:
> >
> > kadmin.local -q "add_policy -minlength 4 -minclasses 2 user"
>
> What
ng
> Petter Reinholdtsen
>
>
>
> --
> To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
> Archive: http://lists.debian.org/20120320200454.gf18...@lo
Hi,
On Sat, Feb 11, 2012 at 09:17:13AM +0100, Giorgio Pioda wrote:
[...]
>
> Now I'm hanging with the autofs question. I have to test again but
> it seems that only Ubuntu 1004 have a good implementation; all other
> suffers, like debian wheezy, the fact that autofs starts to early
> in boot pha
Hi all,
On Fri, Feb 10, 2012 at 10:20:57PM +0100, Petter Reinholdtsen wrote:
>
> I assume netdevice is for routers and switches, not for Linux hosts.
> If this is wrong, please tell me and we can easiliy change this.
IIRC I used netdevice for all machines that do not serve any services
to the n
On Sun, Feb 05, 2012 at 10:51:08PM +0100, Petter Reinholdtsen wrote:
>
> [Andreas B. Mundt]
> > How long? I think entering the username triggers autofs (to read the
> > user's configuration, for example which desktop he want's to start by
> > default). What if
Hi,
On Sun, Feb 05, 2012 at 05:25:20PM +0100, Giorgio Pioda wrote:
> > The script executed right after authentication copies the user's
> > Kerberos ticket to the file krb5cc_diskless which is owned by root.
> > This ticket will be picked up by gssd to create the security context
> > needed. Ho
Hi Giorgio,
On Sat, Feb 04, 2012 at 10:17:23AM +0100, Giorgio Pioda wrote:
> I got Ubuntu running, nice. But IMHO it shouldn't. I don't understand
> the black magic I've produced by myself, about the nfs/client kerberos
> granting.
>
> I didn't copy nor generate any krb5.keytab for the nfs/clien
Hi Helge,
On Fri, Feb 03, 2012 at 05:36:01PM +0100, Helge Kreutzmann wrote:
> On Thu, Jan 19, 2012 at 10:21:27PM -0400, David Prévot wrote:
> > You are noted as the last translator of the translation for
> > debian-edu-doc. The English template has been changed, and now some messages
> > are marke
Hi,
On Fri, Jan 27, 2012 at 11:14:04PM +0100, Giorgio Pioda wrote:
>
> your solution seems more or less an unavoidable hack.
>
> Nice would be to tell Kerberos to avoid service check and control
> only user ID.
>
> What about this:
>
> http://docs.oracle.com/cd/E19963-01/html/821-1456/setup-14
Hi,
On Fri, Jan 27, 2012 at 09:19:21PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
[...]
>
> > The script executed right after authentication copies the user's
> > Kerberos ticket to the file krb5cc_diskless which is owned by root.
> > This ticket will b
Hi everybody!
Since quite some time we have been thinking about how to make
kerberized NFSv4 mounting of home directories work with diskless
clients, where no machine credentials (keytab) are available.
It was mentioned [1] that using "-n" for gssd on the diskless client
might help, however thi
Hi Mike,
On Sun, Sep 04, 2011 at 09:57:25PM +0200, Mike Gabriel wrote:
>
> Also: on diskless workstations the preseeding values for krb5-config
> do not all ,,arrive'', only the default_realm is set, but not the
> INTERN = {} server definitions... That's why I chose
> cfengine in the first place..
user debian-edu@lists.debian.org
usertag 638157 + debian-edu
thanks
On Thu, Aug 18, 2011 at 10:52:18AM +0200, Mike Gabriel wrote:
> Hi all,
>
> is it intended that current diskless workstations in Skolelinux do
> not use kerberized NFSv4?
>
Hi,
it looks like kerberization does not work with
Hi Thomas,
On Sun, Jul 24, 2011 at 08:10:47PM +0200, Thomas Koch wrote:
> the Debian-Edu talk tomorrow on debconf will overlap with the ZSH Skills-
> Exchange session... :-(
Luckily not tomorrow, but on thursday ... :-)
> So I read the documentation and throw out some questions here:
>
> * Co
Hi all,
right now I started preparing the slides for the DebConf talks I
registered:
http://penta.debconf.org/dc11_schedule/events/744.en.html
http://penta.debconf.org/dc11_schedule/events/779.en.html
The talks are "bof's" i.e. "open discussions" and although I
registered both of them, this does
Hi Marius,
On Sat, Jul 02, 2011 at 11:06:20PM +0200, Marius Kotsbak wrote:
> On 02. juli 2011 15:43, Andreas B. Mundt wrote:
> > usually this happens when the home directory cannot be mounted.
> >
> > Did you add the diskless machine in GOa and run ldap2bind afte
tags 632464 + moreinfo unreproducible
thanks
Hi,
usually this happens when the home directory cannot be mounted.
Did you add the diskless machine in GOa and run ldap2bind after that?
Whenever I tested that (and added the machine correctly to LDAP),
things worked fine here.
Best regard
tags 631357 + pending
# fixed in svn
thanks
Looks as if the devices get other names today. Fixed in svn, hopefully
there are no other changes necessary, but resizing worked again after
applying the fix.
--
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of "unsubsc
Package: debian-edu-config
Severity: normal
User: debian-edu@lists.debian.org
UserTags: debian-edu
Hi,
unfortuntelly, it looks like debian-edu-fsautoresize does not work at
all for d-e-squeeze:
root@tjener:~# debian-edu-fsautoresize -vn
Checking / [/dev/mapper/vg_system-root]
A: 983704 90
Dear Nigel,
On Wed, Jun 22, 2011 at 09:39:20AM +0900, Nigel Barker wrote:
>
> I have some concerns about browsers that might affect other schools,
>
[...]
> So it seems that browsers are expected to be updated every few months
> nowadays! It might not be possible to even complete a school year
Hi,
I added some code in svn that starts a process in the background which
hopefully creates some entropy by trigering disk read/write:
+TMPFILE=`mktemp`
+
+## Start process in the background:
+egrep 'ab' /etc/* >> $TMPFILE 2>&1 &
+
+# lifetime 10 years
$opensslbin req -new -x509 -nodes -sha1
Hi,
I tried to find the reason for the remaining errors reported by the
testsuite (Terminalserver DVD installation):
error: can not find SSL certificate for http://www,
error: Unable to download
http://ftp.skolelinux.org/debian/dists/squeeze/main/installer-i386/current/images/netboot/netboot.t
Hi,
On Wed, Jun 15, 2011 at 02:54:40PM +0200, Holger Levsen wrote:
> > I had to revert some modifications concerning krb5-config, as it was
> > not possible to login at all on other machines. I suggest to postpone
> > these modifications until wheezy. The same is valid for NFSv4 with
> > sec=kr
Hi all,
On Tue, Jun 07, 2011 at 01:35:19AM +0200, Holger Levsen wrote:
> The big result of the meeting:
>
> - Beta1 release - codename "no more nice to have"
> - known problems: windows clients cannot join the samba domain
>
> --endquote ---
>
> afaik the installation also "hangs at the end" a
Hi,
On Mon, Jun 13, 2011 at 07:36:16PM +0200, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > check_kernel_status fails with UNKNOWN. This is not due to a newer
> > kernel, the lenny stuff works for squeeze, and the script gives the
> > correct answer when calle
On Mon, Jun 13, 2011 at 07:14:29PM +0200, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > An error is reported by nagios although anything is OK.
>
> Which error? I know of one such error, and its reason is probably not
> what you suggested.
check_kernel_status fails with
Package: sitesummary-client
Severity: important
User: debian-edu@lists.debian.org
Usertags: debian-edu
An error is reported by nagios although anything is OK. The reason seems to be
the wrong-placed nagios-nrpe-commands.cfg, (see subject.) From the source of
nagios-nrpe-2.12 (debian/patches/03_s
Hi,
On Mon, Jun 06, 2011 at 11:11:12PM +0200, Mike Gabriel wrote:
> last night I have looked into Samba+LDAP+GOsa. The realization about
> that part for Debian Edu/Skolelinux is: if we want flawless und
> fluent Windows integration in Debian Edu (yes, we want that!!!) then
> there is still a bunc
Hi,
On Mon, May 30, 2011 at 01:26:16PM +0200, Holger Levsen wrote:
> On Montag, 30. Mai 2011, Holger Levsen wrote:
> > meet for dinner sounds like a great plan! 20oo?
>
> I suggest either "frank & frei" which is located close to the city center (S-
> Bahn Sternschanze) or the "Schachcafe" which
Hi Volker,
On Tue, May 17, 2011 at 08:10:27PM +0200, Volker Cordes wrote:
> Do I have to register the clients somewhere? I changed /etc/exports to
> allow mounts from 192.168.0.0/24 because I still haven't installed the
> netgroups plugin.
>
I would expect that if you don't use the netgroups in
Hi all,
an update after the latest DVD build:
On Mon, May 09, 2011 at 08:40:02PM +0200, Andreas B. Mundt wrote:
>
> * kdm is missing after the installation. (?!)
>
kdm is installed and works again.
The netgroups plugin is not yet installed by default.
Installation steps:
> apti
Hi,
On Tue, May 10, 2011 at 11:56:22AM +0200, Holger Levsen wrote:
> On Montag, 9. Mai 2011, Andreas B. Mundt wrote:
> > after installing a debian-edu squeeze tjener from the latest DVD, I am
> > happy to announce that it looks like debian-edu is kind of feature
> > comple
Hi Volker,
On Tue, May 10, 2011 at 07:32:08PM +0200, Volker Cordes wrote:
> I just installed debian edu based on squeeze and need some help with
> configuring the things I need. It would be great if you could point
> me to some documentation or answer my questions directly.
>
> So here is how fa
Hi all,
after installing a debian-edu squeeze tjener from the latest DVD, I am
happy to announce that it looks like debian-edu is kind of feature
complete. However, there is still some work to do:
* kdm is missing after the installation. (?!)
Here is how to test the latest installation. After lo
Hi,
On Thu, May 05, 2011 at 10:16:19PM +0200, Holger Levsen wrote:
> On Donnerstag, 5. Mai 2011, Andreas B. Mundt wrote:
> > Are you going to be there too? Does anybody plan to give a
> > presentation about debian-edu? I think we should at least have some
> > kind of open
Hi everybody,
yesterday I registered for debconf11. Unfortunatelly, I am not able to
be there from the beginning, but probably I'll turn up on Wednesday.
Are you going to be there too? Does anybody plan to give a
presentation about debian-edu? I think we should at least have some
kind of open d
Hi,
On Mon, May 02, 2011 at 08:07:25PM +0200, Thomas Koch wrote:
> Philipp Huebner:
> > On 02/05/11 17:52, Thomas Koch wrote:
> > > to be seriously lacking behind Debian releases.
> >
> > To be honest - so does Debian Edu ;)
> Well, I should have made this more clear: They are currently in the re
Hi,
On Thu, Apr 28, 2011 at 09:40:37AM +0200, Frank Weißer wrote:
>
> I can login to gosa as admin with root-password but don't see any
> possibility to add users, groups, machines or anything else. Is my
> installation broken or how have i to administrate tjener?
>
Log in as 'super-admin', n
Hi Frank,
On Tue, Apr 26, 2011 at 10:33:52PM +0200, Frank Weißer wrote:
> I just tried to install a pure tjener from >
> ftp://ftp.skolelinux.org/cd-squeeze-test-amd64-i386-netinst/debian-edu-amd64-i386-NETINST-1.iso
>
> date 17.04.2011 and get 10.0.2.2/255.255.254.0 as its network configuration.
Hi,
On Mon, Mar 28, 2011 at 01:01:52PM +0100, Holger Levsen wrote:
> I'm wondering who/how many would be joining a developer meeting May in
> Hamburg?
I am rather busy right now (and probably in May again), but I would
try to join you in any case.
> The goal I would like to work on is the r
Hi,
On Fri, Mar 11, 2011 at 05:20:47PM +0100, Andreas Schockenhoff wrote:
> in /etc/init.d/update-hostname we try to set the hostname for the
> workstations from DNS Server.
>
> This can not work because Networkmanager is not started.
Strange, it works nicely here (latest DVD installation)
Hi all,
while working on the DHCP-setup I accidentally met the
isc-dhcp-relay package which can be used to relay DHCP requests. For
example, we could use it instead of running dhcp-servers on the
terminal-servers.
Is there a reason we don't use the relay method but stand-alone
dhcp-servers? (Tje
Hi all,
unfortunatelly it looks like we have a little problem with the
DNS/GOsa setup.
In skolelinux, we have at least two networks: The 10.0.2.-net called
main-net and the 192.168.-nets. However, both networks are part of the
"intern" domain.
Now we need a zone to handle these networks. I pre
Hi Petter,
thanks for your comment.
On Fri, Feb 25, 2011 at 01:31:19PM +0100, Petter Reinholdtsen wrote:
> > * Move DNS resolution of 'ltspserver' from ldap to static files, as
> > the thin clients' subnet is not a subdomain that should be managed
> > in GOsa.
>
> Eh, of course it should.
Hi,
when installing the workstation profile (I tested this in combination
with the ltsp-server-profile), the network-manager package seems to
spoil the installed system.
First, it removes the dhcp interface by adding '#NetworkManager#' in
front of the relevant line in /etc/network/interfaces:
a
Hi all,
a short update from my side:
On Sat, Feb 19, 2011 at 06:22:54PM +0100, Andreas Schockenhoff wrote:
> a new hint. dns seams to works also on a workstation now.
>
> ldapsearch -xZWD
> 'uid=super-admin,ou=People,dc=skole,dc=skolelinux,dc=no'
>
> Works on tjener and on the diskless worksta
Hi,
On Sat, Feb 19, 2011 at 12:33:33PM +0100, Andreas Schockenhoff wrote:
> Hi,
>
> On Sat, 2011-02-19 at 12:21 +0100, Andreas B. Mundt wrote:
> > > But exim seems to be broken no mail delivery to root.
> >
> > Right. Hmm. Permissins on /root seem not to allo
Hello,
On Sat, Feb 19, 2011 at 08:42:04AM +0100, Andreas Schockenhoff wrote:
> On Fri, 2011-02-18 at 23:39 +0100, Andreas B. Mundt wrote:
> > > May be it is a gosa to ldap problem because tjeners dns seams to be OK.
> >
> > See above, ldap2bind ?! (A cron job does thi
Hi,
On Sat, Feb 19, 2011 at 08:14:03AM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > Hmm, I don't know how to fix this. To me it looks a bit like
> > sacrificing a clear and common DNS setup in favor of a very special
> > setup (for which I don't k
Hi,
On Fri, Feb 18, 2011 at 11:24:44PM +0100, Andreas Schockenhoff wrote:
> On Fri, 2011-02-18 at 16:46 +0100, Andreas B. Mundt wrote:
> > I installed a combined server and a workstation. I can start a
> > diskless machine and log in. The hostname is like the one I set in
> &
Hi Petter,
thanks for your reply:
On Fri, Feb 18, 2011 at 07:54:42PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > Can you elaborate a bit on the scripts that provide this
> > configurations?
>
> See the postinst of the sssd package.
>
> > Would it be
Hi,
On Tue, Feb 15, 2011 at 11:18:05PM +0100, Christian Kuelker wrote:
> On 02/15/2011 07:31 PM, Andreas B. Mundt wrote:
> > I think the best way to do the migration is completely independent of
> > all changes I proposed:
>
> > * Prepare a list (csv) of all user fo
Hi Petter,
I guess your help is needed on this issue ...
On Fri, Feb 18, 2011 at 12:09:04PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > Is there a problem with that I've missed?
>
> I might be mistaken, but I believe the sssd setup script will actually
>
X-Debbugs-Cc: vagr...@debian.org
Hi,
On Wed, Feb 16, 2011 at 09:59:44PM +0100, Wolfgang Schweer wrote:
> On Mi, 16 Feb 2011, Andreas B. Mundt wrote:
>
> > to get Diskless Clients work with Kerberos we first have to find a way
> > to modify the entires in /etc/hosts.
> >
Hi,
first, thanks for starting the tests!
On Fri, Feb 18, 2011 at 10:00:55AM +0100, Andreas Schockenhoff wrote:
> On Wed, 2011-02-16 at 23:10 +0100, Andreas B. Mundt wrote:
> > I am happy to report that the latest test-DVD of our forthcoming
> > debian-edu-squeeze release is re
On Thu, Feb 17, 2011 at 06:03:02PM +0100, Petter Reinholdtsen wrote:
>
> [Andreas B. Mundt]
> > Remove duplicate A-records from DNS configuration to make sure the
> > reverse address mapping needed for reliably issuing a Kerberos service
> > ticket works. To move services
Hi all,
I am happy to report that the latest test-DVD of our forthcoming
debian-edu-squeeze release is ready for testing. It includes Kerberos
user (and mail) authorization, GOsa as LDAP admin tool and bind as
DNS. The home directory is distributed via NFSv4.
You can rsync your DVD with:
rsync
Hi,
to get Diskless Clients work with Kerberos we first have to find a way
to modify the entires in /etc/hosts.
Currently, there is an entry:
10.0.2.2 server
which spoils Kerberos (error messages about for example
ldap/server@INTERN service tickets not being available).
I tried to find a
Hey,
concerning the netgroups in GOsa, here's a collections of stuff that
might help as a starter:
Very basic draft patch (no creation of any netgroups, just adding
machines to existig ones):
http://lists.debian.org/debian-edu/2010/04/msg00124.html>
Comment from Cajus:
https://oss.goni
Hi again,
some more (and partially general) thoughts ...
On Tue, Feb 15, 2011 at 12:40:31PM +0100, Christian Kuelker wrote:
> On 02/15/2011 11:18 AM, Petter Reinholdtsen wrote:
> > I believe we should leave it unchanged unless we have a good reason to
> > change it.
>
> Every change in an LDAP D
Hi Jonas,
On Mon, Feb 14, 2011 at 09:33:12PM +0100, Jonas Smedegaard wrote:
> Just stumbled across the package slapd-smbk5pwd, which is also
> available in Debian Squeeze.
>
> Could those of you knowledgeable in Samba and Kerberos check it out?
>
> Seems potentially beneficial to use (and disab
On Tue, Feb 15, 2011 at 11:18:25AM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > I don't know why ou=group was chosen,
>
> It was selected because it is the proposal in the only known document
> proposing a standardized LDAP structure, the draft available from
Hi,
in the process of overhauling the ldap tree, I am thinking about
renaming ou=group to ou=groups in order to better reflect the plural
form.
I don't know why ou=group was chosen, perhaps because the expired and
in the meantime deleted RFC2307bis used ou=group in an example. I
cannot imagine t
Hi Mike,
On Tue, Jan 11, 2011 at 11:20:15PM +0100, Mike Gabriel wrote:
> On So 09 Jan 2011 10:29:52 CET "Andreas B. Mundt" wrote:
> >On Sat, Jan 08, 2011 at 11:41:42PM +0100, Mike Gabriel wrote:
> >[...]
> >>Here is what I will do next:
> >>
> >>
Hi Petter,
I don't want to discuss the technical points, but:
On Sun, Jan 09, 2011 at 10:40:18PM +0100, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > So I conclude, that the current DNS setup, as a mixture of ldap
> > objects prepared for bind with extra attribu
Hi again,
concerning the strange results which I accused to multiple A-records,
I found something new. I started to doubt our powerdns setup and
modifying it in ldap got annoying, so I switched on to bind instead[1].
After that, asking for DNS lookups changed. PowerDNS:
r...@tjener:~# host 10
Hi,
On Sun, Jan 09, 2011 at 12:15:34AM +0100, Mike Gabriel wrote:
> I have a question about testing Debian Edu squeeze, esp. changes to
> Debian Edu SVN that concern the installation process of Debian Edu.
>
> Currently, if I want to test changes to Debian Edu, esp. the
> installation process, I
1 - 100 of 215 matches
Mail list logo