-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 23 Mar 2022 12:28:00 +0100
Source: debian-edu-config
Architecture: source
Version: 2.11.56+deb11u4
Distribution: bullseye
Urgency: medium
Maintainer: Debian Edu Developers <debian-edu@lists.debian.org>
Changed-By: Mike Gabriel <sunweaver@debian.org>
Closes: 613167 815042 971780 1002014 1002018 1002019 1003560 1003727 1004605 1005352 1005841 1006362 1006375 1006604 1008067
Changes:
debian-edu-config (2.11.56+deb11u4) bullseye; urgency=medium
.
[ Wolfgang Schweer ]
* etc/exim4/exim-ldap-server-v4.conf: Accept incoming mail from internal
network sent to root@<mynetwork-names>. (Closes: #1003727).
* Use mktemp instead of deprecated tempfile, adjust:
- etc/X11/Xsession-debian-edu
- sbin/debian-edu-update-netblock
- share/debian-edu-config/tools/gosa-sync
- testsuite/postoffice
(Closes: #1005352).
.
[ Mike Gabriel ]
* share/d-e-c/tools/gosa-modify-host: Only create Kerberos host and service
principals if they don't yet exist. (Closes: #1002014).
* share/d-e-c/tools/gosa-create-host: Fix copy+paste flaw in comment.
* share/debian-edu-config/tools/setup-freeradius-server: Fix integer
comparison in run-by-root check. Script was not executable fully (not even
as root).
* debian/debian-edu-config.fetch-ldap-cert: Drop retrieval of
Debian-Edu_rootCA from this script. This now is the task of the
fetch-rootca-cert script. (Closes: #971780).
* debian/debian-edu-config.fetch-rootca-cert: Ensure proper symlinking of
Debian-Edu_rootCA.crt in /usr/local/share/ca-certificates/ to
Debian-Edu_rootCA.crt in /etc/ssl/ca-certificates. Forced symlinking is
required, because earlier versions of the fetch-ldap-cert init script put
Debian-Edu_rootCA.crt into /etc/ssl/ca-certificates/ as a file. Forced
symlinking replaces files by the wanted symlink. The -n option (no-
dereference) is required to make sure we don't follow any already existing
symlink. (This relates to #971780).
* share/debian-edu-config/tools/update-proxy-from-wpad:
- Fix typo (wrong protocol) in APT proxy config creation.
- Create a Debian Edu specific proxy configuration in /etc/apt/apt.conf.d/
named 03debian-edu-config rather than meddling with /etc/apt/apt.conf
directly. Clean up any earlier meddling from apt.conf, as well. (Closes:
#1003560).
* share/debian-edu-config/tools/{update-proxy-from-wpad,wpad-extra}:
- Don't fail if proxy update is not possible, only send warnings to stderr
and syslog. Don't source wpad-extra script, execute it instead and capture
stdout. (Closes: #1008067).
* sbin/update-hostname-from-ip:
- Simply if-then-else-clauses, reduce number of exit calls, don't exit with
non-zero exitcode. Improve syslog messages if things fail. (Closes:
#1006604).
* share/debian-edu-config/tools/setup-roaming: Assure libsss-sudo is installed
on Roaming Workstation. (Closes: #1004605).
* share/debian-edu-config/tools/gosa-remove: Capture removals of GOsa² user
templates and ignore them. (Closes: #815042).
* ldap-schemas/: Update schema files from Debian's latest GOsa² list of
schemas.
* share/debian-edu-config/tools/clean-up-host-keytabs: Don't fail
on Kerberos principal removal.
* etc/cups/cups-browsed-debian-edu.conf:
- Let TJENER's print queues appear on Debian Edu clients, use same
print queue names on clients as on TJENER. (Closes: #1005841).
* sbin/debian-edu-pxeinstall:
- Don't append 'ipappend 2' to the kernel boot cmdline anymore as it
confuses systemd when booting into the installed system. This resolves
the graphical.target not coming up on Debian Edu workstations that got
installed via the PXE/network based Debian Installer method. (Closes:
#1006362).
- Silence stderr output if the artwork theme lacks a plymouth subfolder.
This can be silently ignored and should not trouble Debian Edu admins.
* Support krb5i on Diskless Workstations (aka LTSP FAT Clients):
- ldap-bootstrap/netgroup.ldif: Add diskless-workstation-hosts NIS netgroup
during LDAP bootstrap.
- debian/debian-edu-config.{postinst,postrm}: Create non-privileged
debian-edu system user account on Debian Edu mainserver (for distribution
of host keytabs to diskless workstations aka LTSP fat clients).
- share/debian-edu-config/tools/: Add update-dlw-krb5-keytabs script and
call it (with delay) from gosa-modify-host hook script. (Closes: #613167,
#1002018).
* Move /etc/debian-edu/host-keytabs/* to /var/lib/debian-edu/host-keytabs/
and replace directory /etc/debian-edu/host-keytabs by a symlink. (Closes:
#1002019).
* share/debian-edu-config/squid.conf:
- Prefer DNSv4 lookups over DNSv6. Debian Edu does not yet fully support
IPv6 and many schools still use IPv4 primarily. This gives a great
performance boost to squid installations if IPv6 internet is not fully
available for whatever reason. (Closes: #1006375).
* share/debian-edu-config/tools/list-gosa-systems:
- Drop immature list-gosa-systems script again that got sneaked in via
upload of 2.11.56+deb11u3. We apologize for the noise.
Checksums-Sha1:
3f4a5404376a7972f8b63c367c47d78d8ef7bb75 1987 debian-edu-config_2.11.56+deb11u4.dsc
804f0ec5ee0fbef2e6293fd6917da2c632219ea1 351788 debian-edu-config_2.11.56+deb11u4.tar.xz
ac2740503ca9e3ae1f70dcc66375c18b5e0b502b 6291 debian-edu-config_2.11.56+deb11u4_source.buildinfo
Checksums-Sha256:
bae20489d7e2840feb3b0418166855478ebff781e9f9e769d740300dcecbe540 1987 debian-edu-config_2.11.56+deb11u4.dsc
94a1e453e4c151db31afd0c5d2fd339fb9d3658bed05702f3975783bae5a89e6 351788 debian-edu-config_2.11.56+deb11u4.tar.xz
581442cb8d0529a2cccc16853b52e52f0357b1b2ce3f5d83042de2ae53474baa 6291 debian-edu-config_2.11.56+deb11u4_source.buildinfo
Files:
b9fb75a6d5861c0e3306fa45e21864bc 1987 misc optional debian-edu-config_2.11.56+deb11u4.dsc
47e5ed3e98e42845eac1aa488a610cd0 351788 misc optional debian-edu-config_2.11.56+deb11u4.tar.xz
70138f585bf690a7285e75c534a4e340 6291 misc optional debian-edu-config_2.11.56+deb11u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJJBAEBCAAzFiEEm/uu6GwKpf+/IgeCmvRrMCV3GzEFAmK/aQ0VHHN1bndlYXZl ckBkZWJpYW4ub3JnAAoJEJr0azAldxsxE90P/3YDYEf9rNLQaoVydcWPB4S0NnTX linHAvr5SCSK+lSOr/nGqiTNdLRyz9IJhwDAIbxK7Ud4m0EpzvXB7vTLRx8ggFti rQ7R6o5+H7wrsc0LzYJywOqs9+YBakY1gbflg9k86kYfCyAX9jYvSENPU9r7Kn3P XGR0ltgO52k4ZH+5Cf3AkqI9PhpvVI2urYFk7LWfhZ1pEIfPA+k9zNdTa+5VmL9r tJ3GnFeGyoJTE8/h+W0N5+13Y9WbE1FIz5SjOpabctJgv7+I5Wy/YT9DxmeSiGho sWY9AIsbu99sde16EejZ9U55ZUSV3C5jXc3vzerM/8/5seDlIDBHWDNpCoej5HoJ A5u+ZAXaONDV4W2wxoCSLPDRgz+vRdiAeDI/Cg4lvGD8bnlKWtnu2T1njOiHbxkW YRXyAVCw7VrnneL2t7WFODUTNRMYpVkSHIwtN3UkxMP1vCc/JKThZ7nHwViLC/TF FUdk43MYwcgQeGzEhUyTD8Ah6m68ERNGpWxwgWrYeTNYtu52nMOd1LHv+evHO7mk 1kbYBRUqUh2SarAy2VO5EOEglBOL0uAmUNLfhGgEDbSMdVirzSsjLU/mqmT/Jbra x70kikOtyQoYWfu9UTkwQOwXgVDNEZdMyGhyL7TO0K/wFWe4IAa1DyYTjETGv3Qz yYoNMjczRzcLKEcV
=pPjG
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)