[debian-edu-commits] [Debian Wiki] Update of "DebianEdu/Status/Buster" by WolfgangSchweer

[Debian Wiki]

Dear Wiki user,

You have subscribed to a wiki page or wiki category on "Debian Wiki" for change notification.

The "DebianEdu/Status/Buster" page has been changed by WolfgangSchweer:
https://wiki.debian.org/DebianEdu/Status/Buster?action=diff&rev1=18&rev2=19

Comment:
move GOsa encryption issue  to 'fiexed+done'

   * {{{wget -q https://d-i.debian.org/daily-images/amd64/daily/netboot/mini.iso}}}
    * Add {{{modules=debian-edu-install-udeb}}} and {{{desktop=xfce}}} (or mate, gnome, kde) as additional kernel params; also, if profile 'LTSP server' is wanted, add {{{ltsp-client-builder/use_cdrom=false}}}. If running a dedicated apt caching proxy, you can add {{{ltsp-client-builder/build-client-opts="--http-proxy=http://<IP>:<port>"}}} as well.
    * Even if deselected, the LTSP installation step is reported as 'failed'; see: DebianBug:888583. Workaround: When the Debian Edu profile screen is shown, open up a Debian Installer shell and run 'rm /var/lib/dpkg/info/kbd-chooser.*' 
-  * GOsa² access to LDAP is broken. This happens because password decryption doesn't work; see DebianBug:892546. Workaround: After booting the main server for the first time, run:
- {{{
- cp /etc/gosa/gosa.conf.orig /etc/gosa/gosa.conf
- cat /dev/null > /etc/gosa/gosa.secrets
- service apache2 reload
- }}}
- Please note that this change disables gosa-admin password encryption (GOsa² ->   LDAP connection); the generated (random) password is used in this case.
  
  == Known problems we want to fix ==
  
@@ -48, +41 @@

  
  == Fixed + done (related packages migrated to buster or unstable) ==
  
+  * GOsa² access to LDAP is broken. This happens because password decryption doesn't work; see DebianBug:892546. Workaround: After booting the main server for the first time, run:
+ {{{
+ cp /etc/gosa/gosa.conf.orig /etc/gosa/gosa.conf
+ cat /dev/null > /etc/gosa/gosa.secrets
+ service apache2 reload
+ }}}
+ Please note that this change disables gosa-admin password encryption (GOsa² ->   LDAP connection); the generated (random) password is used in this case.
+ 
-   * Installation is broken since PHP7.2 has entered testing. This happens because  mcrypt support has been removed from PHP while gosa-encrypt-password depends on it; see DebianBug:889811. Workaround: While the Debian Installer is busy installing software, open up a shell and use 'nano target/usr/bin/ldap-debian-edu-install' to replace {{{gosa-encrypt-passwords > /dev/null}}} with {{{#gosa-encrypt-passwords > /dev/null}}} and to add the line {{{touch /etc/gosa/gosa.secrets}}} below the commented one. Please note that this change disables password encryption to access the GOsa² web interface; use only for testing.
+  * Installation is broken since PHP7.2 has entered testing. This happens because  mcrypt support has been removed from PHP while gosa-encrypt-password depends on it; see DebianBug:889811. Workaround: While the Debian Installer is busy installing software, open up a shell and use 'nano target/usr/bin/ldap-debian-edu-install' to replace {{{gosa-encrypt-passwords > /dev/null}}} with {{{#gosa-encrypt-passwords > /dev/null}}} and to add the line {{{touch /etc/gosa/gosa.secrets}}} below the commented one. Please note that this change disables password encryption to access the GOsa² web interface; use only for testing.
  
   * The usbstick ISO image should allow installations including the 'LTSP server' profile without internet connection; atm about 300 MiB need to be downloaded. This happens right after the base system has been installed successfully in the LTSP chroot, later in the process packages are fetched again from the mounted image. [Reason was that the first part (when the 'debian-edu-install' package gets installed) has been moved to LTSP client build stage 'install)' where the CDROM and required mounts are not yet available. Moving this part to 'after-install)' (or all parts to 'finalization)' like it has been before commit 57a5c24f) allows to use '/media/cdrom' throughout. Also, '-o acquire::check-valid-until=0' needs to be added to APT_GET_OPTS to be really able to use '/media/cdrom' als local file type repo.] See: DebianBug:867271, fixed in Buster (d-e-c commits 2278d78b and 5c1b880d).