[debian-edu-commits] [Git][debian-edu/debian-edu-config][master] Ship PAM group.conf for workstations

[Mike Gabriel (@sunweaver)]

Mike Gabriel pushed to branch master at Debian Edu / debian-edu-config


Commits:
de18a627 by Guido Berhoerster at 2023-09-07T18:43:30+00:00
Ship PAM group.conf for workstations

LDAP users should be members of several system groups on networked (roaming)
workstations.

- - - - -


3 changed files:

- Makefile
- + cf3/cf.pam
- cf3/promises.cf


Changes:

=====================================
Makefile
=====================================
@@ -68,6 +68,7 @@ CF3FILES = \
 	cf.ldapserver \
 	cf.ldapclient \
 	cf.bind \
+	cf.pam \
 	cf.pxeinstall \
 	cf.ntp \
 	cf.samba \


=====================================
cf3/cf.pam
=====================================
@@ -0,0 +1,14 @@
+bundle agent editline_pam_group
+{
+vars:
+
+  "default_groups"   string => "*;*;*;Al0000-2400;audio,bluetooth,cdrom,dip,floppy,netdev,plugdev,scanner,video";
+
+files:
+
+  debian.(workstation|roaming).installation::
+
+    "/etc/security/group.conf"
+      create => "true",
+      edit_line => append_if_no_line("$(default_groups)");
+}


=====================================
cf3/promises.cf
=====================================
@@ -34,6 +34,7 @@ body common control
                           editline_bind,
                           editline_ldapserver,
                           editline_ldapclient,
+                          editline_pam_group,
                           editline_syslog,
                           adduser,
                           apache2,
@@ -93,6 +94,7 @@ body common control
                   "debian-edu/cf.ldapserver",
                   "debian-edu/cf.ldapclient",
                   "debian-edu/cf.ntp",
+                  "debian-edu/cf.pam",
                   "debian-edu/cf.pxeinstall",
                   "debian-edu/cf.squid",
                   "debian-edu/cf.sshd",



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/de18a627339a8d976114aba23803ee31260c37ef

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/de18a627339a8d976114aba23803ee31260c37ef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230907/e39f9c53/attachment-0001.htm>