lp:debian/jessie/debian-edu-config

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

77. By Holger Levsen <email address hidden> on 2016-09-10

[ Wolfgang Schweer ]
* Take 2b2a657f from sid on cf/cf.ldapclient: don't purge libnss-mdns
  cause cups now needs mdns for automatic printer detection.
  (Closes: #825919).
* dhclient-exit-hooks.d/hostname: adjust for the case of a dedicated
  LTSP server. (Closes: #783087).
* Adjust ldap-tools/ldap-debian-edu-install to be compliant with systemd
  now that unit samba.service is masked (see #769714). (Closes: #826201).
* Move from Iceweasel to Firefox ESR: (Closes: #827448)
  - rename several files containing iceweasel and also the directory
    share/iceweasel.
  - replace iceweasel with firefox-esr in various files.
  - use '/etc/firefox-esr' as place for firefox preference files.
  - update Makefile.
  - Add code to cleanup iceweasel and firefox-esr related conffiles in
    postinst and preinst scripts.
  - Adjust testsuite/ltsp and testsuite/webserver as
    /etc/firefox-esr/cert_override.txt is no longer useful.
  - Adjust sbin/snakeoil-on-ice as only the /etc/skel location on the main
    server seems to be useful for the certificate override file.
  - Move debian-edu.js -> etc/firefox-esr/debian-edu.js as this is the
    location for syspref now.

[ Mike Gabriel ]
* Iceweasel -> Firefox transition: system-wide, non-configurable browser
  defaults now go into /usr/share/firefox-esr/browser/defaults/, not
  /usr/share/firefox/defaults/.
* Rename cf.firefox to cf.firefox-esr and make sure it operated on
 /etc/firefox-esr.
* firefox-networked-prefs.js: Fix configuration folder in comment.
* sbin/snake-on-ice: Rename /etc/firefox to /etc/firefox-esr. Only
  declare OVERRIDE_FILE once and then use it accordingly (instead
  of hard-coding /etc/firefox(-esr) several times. Use more quotes.
* debian/dirs: We ship /etc/firefox-esr, not /etc/firefox.
* kickoffrc: Use firefox-esr.desktop, rather than firefox.desktop.
* testsuite/ltsp: Check presence of cert_override.txt in /etc/firefox-esr/,
  rather than /etc/firefox/.
* testsuite/webserver: Dito (check presence of cert_override.txt in /etc/firefox-esr/,
  rather than /etc/firefox/).

[ Holger Levsen ]
* Move code to cleanup /usr/share/pam-configs/krb5 diversion from postinst
  to preinst to ease upgrades from old wheezy installations.
  (Closes: #779641)
* Adjust cf.krb5client to ensure that cfengine runs are idempotent.
  (Closes: #779642) - Patch taken from master branch from Wolfgang.

76. By Holger Levsen <email address hidden> on 2016-05-25

[ Petter Reinholdtsen ]
* Translation updates:
  - Updated Brazilian Portuguese translation for debconf questions
    (Closes: #785467). Translated by Adriano Rafael Gomes.

[ Mike Gabriel ]
* Add quotes around DNs when evoking kadmin.local in gosa-create and
  gosa-create-host. (Closes: #792042).
* debian-edu-fsautoresize: Always use mapper names instead of kernel names
  when detecting supported mount points. (Closes: #800651). Thanks
  to Wolfgang Schweer and Giorgio Pioda.
* gosa-sync: Test if a given user account actually is a Kerberos account. If
  not, don't try to set the Kerberos password for this account. (Closes:
  #798435).
* gosa-sync: Fix escaping double quotes and semicolons. (Closes: #794000).
* exim4 mainserver configuration: Allow Debian Edu clients on the default
  Debian Edu network to directly send mails to the main server (by white-
  listing the 10./8 network). This fixes console mailing and system mails
  on Debian Edu clients (Closes: #794602).
* Set configVersion="Managed-by-Debian-Edu" in gosa.conf. (Closes: #794189).
  This requires gosa (>= 2.7.4+reloaded2-1+deb8u2~) to be installed on the
  main server.
* wpad.dat: Use DIRECT connects for URL hosts being in network 127./8 and
  for hosts being in the .local domain. (Closes: #803911).
* GOsa: Add POSTLOCK and POSTUNLOCK hooks for GOsa password locking. These
  hook scripts (gosa-lock-user, gosa-unlock-user) take care of locking/
  unlocking the Kerberos part of user accounts. (Closes: #804207).
* Adapt to a code injection prevention fix in GOsa (starting with Debian
  package gosa 2.7.4+reloaded2-1+deb8u2): Don't mention the sambaHashHook
  parameter in gosa.conf anymore (as hashed passwords now have to be base64
  encoded). Already existing gosa.conf files on deployed servers should drop
  the sambaHashHook from the gosa.conf file, as well, once gosa is updated to
  the above referenced GOsa version.
* CUPS: Do hostname lookups, so https redirects are done to the FQDN of the
  CUPS server instead of to its IP address. (Closes: #805402).
* Improve gosa-lock-user, gosa-unlock-user: When logging success/failure,
  differentiate between non-existent and non-kerberized accounts.
* Don't create home dir and Kerberos principal for GOsa user template
  account. (Closes: #815040).

[ Wolfgang Schweer ]
* Adjust tools/subnet-change for squid3. (Closes: #800654)
* Fix XML syntax error in gosa.conf. (Closes: #820551).
* Add script sbin/debian-edu-nscd-netgroup-cache (workaround for #791562).

75. By Holger Levsen <email address hidden> on 2015-04-14

[ Holger Levsen ]
* testsuite/taskpkgs, kdm and network: drop tests for the Sugar profile as
  Sugar has been removed from Jessie, see #782504.

[ Wolfgang Schweer ]
* Remove Debian-custom/099-mount-cdrom cause this script might
  possibly conflict with ltsp-client-builder.udeb postinst.
  (Closes: #780740).
* Add Debian-custom/080-eatmydata to enable the usage of eatmydata
  as default for all possible LTSP installation methods. Partially
  addresses #781515.
* Add support for squid to squid3 migration:
  - Add share/debian-edu-config/tools/migrate-squid-to-squid3.
  - Adjust cf/cf.squid to run this script. (Closes: #779649).

74. By Holger Levsen <email address hidden> on 2015-02-03

[ Wolfgang Schweer ]
* Adjust sbin/debian-edu-pxeinstall to work with debian-installer-8:
  - replace 8.0 with 8 as di version number.
  - replace '--' with '---' as param delimiter. (Closes: #776763).

73. By Holger Levsen <email address hidden> on 2015-01-06

[ Wolfgang Schweer ]
* Adjust etc/X11/Xsession.d/09debian-edu-missing-home to make the
  script work with kdm now setting $HOME=/ if the user's home
  directory isn't available at login time (and before the script is
  executed). (Closes: #774392).
* etc/ldap/slapd-squeeze_debian-edu.conf: unset 'dbnosync' to avoid
  possible data loss. (Closes: #774610).

72. By Holger Levsen <email address hidden> on 2014-12-26

[ Debconf translation updates ]
* Spanish by Manuel "Venturi" Porras Peralta (Closes: #772143)

[ Wolfgang Schweer ]
* Configure dovecot-core SSL support:
  - cf/imap: Add shellcommand to create dovecot SSL certificate.
  - share/debian-edu-config/tools: Add a script named
    debian-edu-dovecot-create-cert which does what the name tells
    and configures SSL support. The script is based upon code from
    debian-lan-config, thanks to Andreas B. Mundt.
    The package dovecot-core used to setup SSL support but dropped
    it recently (Closes: #772163, #772162).

71. By Holger Levsen <email address hidden> on 2014-12-02

[ Petter Reinholdtsen ]
* Extend grub workaround to automatically handle /dev/vd*, /dev/hd*
  and /dev/xvd* in addition to /dev/sd*, allowing virtual machines
  using virtio, Xen and the old device names to install
  automatically too (Closes: #769559).
* Add new dhclient hook to work around bug #710490 where a race in
  autofs make it fail with slow DHCP servers (Closes: #769561).
* In LTSP setup, allow the purging of openvpn to fail (which happen if
  it is unknown to apt), to get LTSP installation working using the
  usbstick ISO (Closes: #770312).

[ Wolfgang Schweer ]
* testsuite/network: cover case that udev persistent network card rules
  file isn't written at all.
* Provide slbackup-php configuration file etc/slbackup-php/config.php.
  Without a proper configuration the backupserver default 'localhost'
  leads to errors if 'https://backup/slbackup-php' isn't called on the
  backupserver. (Previously the default was 'backup'; it was changed to
  'localhost' some time ago to make the package useable on vanilla
  Debian systems, but a config file for Debian Edu wasn't provided.)
  (Closes: #769806).
* sbin/debian-edu-pxeinstall: add 'mirror/http/mirror' (select entry)
  from the installed system to the preseed file to avoid manual
  selection during PXE installations. (Closes: #770302).

[ Petter Reinholdtsen ]
* Also set mirror/http/mirror when installing from DVD/USB stick.

70. By Petter Reinholdtsen <email address hidden> on 2014-10-24

* Make LTSP mirror editing more robust. Do not add corrupt APT source
  when no dist value is set and only add our local mirror if it exist.
* Add 30 second timeout and the number of tries to 3 in debian-edu-
  bless and ltsp script 000-arch-detection, to make sure blocked
  networks do not cause the installation to hang forever.
* Reduce the versioned dependency on education-tasks from (>= 1.808)
  to (>= 1.806), avoiding a LTSP installation problem when installing
  i386 packages with our test repository.
* Adjust 000-arch-detection LTSP script to set http_proxy from the APT
  setup before calling wget, in case the proxy is needed to reach the
  Internet.
* Correct check for bug #765577 (duplicate udev rules for network
  card) to also work when more than one network card is present in the
  machine.
* Implement script to remove duplicate udev network rules, to work
  around bug #765577. This avoid complete network failure on
  machines affected by this bug.
* Remove unused variable RUNXSERVER from the pre-pkgsel script.
* Tell grub in our pre-pkgsel script to use the disk device used by
  /boot, to work around bug #712907.

69. By Petter Reinholdtsen <email address hidden> on 2014-10-22

[ Petter Reinholdtsen ]
* Try to detect if bug #765577 cause network interfaces to get the
  wrong name in the network testsuite check.
* Raise dependency on education-tasks to (>= 1.808), to ensure we get
  the Jessie tasks.
* Use isenkram instead of discover to report packages to install for
  the current hardware in the hardware check in the test suite.
  Drop discover from dependencies.

[ Holger Levsen ]
* Drop debian-edu-config-gosa-netgroups binary package as our fork is now
  obsolete as the gosa-plugin-netgroups source package provides it.
  gosa-plugin-netgroups is depended upon in the relevant task in the
  debian-edu package.
* Drop debian/TODO.Squeeze, the content was obsolete anyway.
* Drop cf/cf.pdns, we switched backed to bind9. Cleanup the installed file
  in postinst too.
* Drop classes lenny and pdns in cf/cfengine.conf and lenny in cf/cf.kdm.
* Drop kde3 handling in cf/cf.kdm.
* Drop code from debian-edu-config.(preinst|postinst) handling upgrades
  from lenny area packages and earlier. Kept the squeeze stuff for people
  skipping a release. (Which is still unsupported but we can still be
  helpful.)
* Drop share/debian-edu-config/default-ltsp-client-setup which only
  consisted of a comment saying "Settings moved to
  /usr/share/ltsp/ltsp_config.d/. The content was removed for Squeeze
  on 2010-08-18, and the file should be dropped for squeeze+1."
* Drop dependency on base-files, which is of Priority: required.
* Drop (/etc/)insserv.conf.d/debian-edu-config which only modified pdns
  init and (/etc/)powerdns/pdns.d/pdns-debian-edu.conf. Add cleanup code in
  postinst for upgrades from previous versions.
* Remove kde3 handling code from
  share/ltsp/plugins/ltsp-build-client/Debian-custom/032-edu-pkgs.
* Drop the following files from ldap-bootstrap: dhcp.ldif, dhcp_hosts.ldif,
  dns_arpa.ldif, dns_ranges.ldif and dns_skole.ldif. As described in
  ldap-bootstrap/README.unused-ldifs (also removed from SCM now) they have
  been unused since January 2012. (Closes: #766200)

[ Wolfgang Schweer ]
* sbin/debian-edu-ltsp: add '--eatmydata' to ltsp-client-builder options.

68. By Petter Reinholdtsen <email address hidden> on 2014-10-20

[ Wolfgang Schweer ]
* ltsp-build-client/Debian-custom/032-edu-pkgs:
  - Purge package cups cause the package isn't needed for printing on
    thin clients and diskless workstations.
  - Purge all packages with status 'rc' by adding '--purge' to
    apt-get -y autoremove'.

[ Petter Reinholdtsen ]
* Adjust LTSP check in testsuite, to mount using hostname and not IP,
  now that libnss-myhostname is installed on the machines. This fixes
  the check result on machines not yet added to DNS.