[debian-edu-commits] [Git][debian-edu/debian-edu-config][master] 11 commits: Move from deprecated, unusable Samba NT4-style PDC role to standalone server one

Fri Oct 16 18:12:13 BST 2020

Wolfgang Schweer pushed to branch master at Debian Edu / debian-edu-config

Commits:
e1549e55 by Wolfgang Schweer at 2020-10-16T15:13:05+02:00
Move from deprecated, unusable Samba NT4-style PDC role to standalone server one

Drop all domain related files, adjust Makefile.

(Joining Windows clients to the domain now requires a Samba AD DC coming with its
own LDAP server. This isn't compatible with OpenLDAP, MIT Kerberos and Gosa².)

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
ee20dc96 by Wolfgang Schweer at 2020-10-16T15:14:10+02:00
Adjust etc/samba/smb-debian-edu.conf accordingly

The configuration file includes support for non-root user usershares and for a
site-specific override file.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
0f34f257 by Wolfgang Schweer at 2020-10-16T15:20:08+02:00
Add share/debian-edu-config/smb.conf.edu-site as override template file

Adjust Makefile accordingly.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
31267558 by Wolfgang Schweer at 2020-10-16T17:33:33+02:00
Add d/changelog for override template file

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
037ac944 by Wolfgang Schweer at 2020-10-16T17:47:01+02:00
Re-work LDAP bootstrap and configuration file

Move entries from ldap-bootstrap/samba.ldif to ldap-bootstrap/gosa.ldif
and ldap-bootstrap/root.ldif respectively, now that Samba isn't contained
in LDAP anymore.

Cleanup etc/ldap/slapd-debian-edu.conf from Samba related entries.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
69f4b310 by Wolfgang Schweer at 2020-10-16T17:59:35+02:00
Adjust share/debian-edu-config/gosa.conf.template

Remove Samba related tab to prevent it from showing up in the GUI.

Add sambaHashHook="" to prevent Samba password hashes showing up in LDAP for
security reasons.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
0d8ff81e by Wolfgang Schweer at 2020-10-16T18:22:32+02:00
Manage Samba accounts and sambashare group membership using GOsa² hooks

share/debian-edu-config/tools/gosa-create: Add user to sambashare group.

share/debian-edu-config/tools/gosa-sync:
Create a user Samba account and keep Samba and POSIX passwords in sync.

share/debian-edu-config/tools/gosa-lock-user: Also disable Samba account.

share/debian-edu-config/tools/gosa-unlock-user: Also enable Samba account..

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
e07809a1 by Wolfgang Schweer at 2020-10-16T18:30:50+02:00
Adjust share/debian-edu-config/tools/kerberos-kdc-init

Add code to manage first user Samba account and sambashare group membership.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
e6a3d9c7 by Wolfgang Schweer at 2020-10-16T18:47:00+02:00
Use Avahi to publish Samba shares in the local network.

This will also improve support for macOS using systems.

Add share/debian-edu-config/avahi.smb.service configuration file.

cf3/cf.samba: Conditionally copy the service.file to the right place.

Also create the Samba usershares directory with proper rights.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
86821359 by Wolfgang Schweer at 2020-10-16T18:54:34+02:00
Adjust share/debian-edu-config/tools/edu-ldap-from-scratch

Reflect the Samba related changes.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
84c12a5b by Wolfgang Schweer at 2020-10-16T19:10:45+02:00
debian/control: Adjust Description field.

Use https://blends.debian.org/edu as homepage.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -

30 changed files:

- Makefile
- cf3/cf.samba
- debian/changelog
- debian/control
- etc/ldap/slapd-debian-edu.conf
- − etc/samba/netlogon/1stlogon/1stlogon.bat
- − etc/samba/netlogon/_default_/default.bat
- − etc/samba/netlogon/config/get_time.bat
- − etc/samba/netlogon/config/penguin.bat
- − etc/samba/netlogon/config/setglobals.bat
- − etc/samba/netlogon/config/standarddrives-students.bat
- − etc/samba/netlogon/config/standarddrives-teachers.bat
- − etc/samba/netlogon/debian-edu-login.bat
- − etc/samba/netlogon/install/shortcut.vbs
- − etc/samba/netlogon/logon-admins.bat
- − etc/samba/netlogon/logon-jradmins.bat
- − etc/samba/netlogon/logon-students.bat
- − etc/samba/netlogon/logon-teachers.bat
- − etc/samba/netlogon/mozilla/firefox/prefs.js
- − etc/samba/netlogon/mozilla/mkmozapd.bat
- − etc/samba/netlogon/mozilla/profiles.ini.FIREFOX
- − etc/samba/netlogon/mozilla/profiles.ini.THUNDERBIRD
- − etc/samba/netlogon/registry/proxy-ie/proxy-settings-hkcu.reg
- − etc/samba/netlogon/win7+samba_domain-membership/DownloadWinRessourceKits.bat
- − etc/samba/netlogon/win7+samba_domain-membership/README_Win7-Domain-Membership.txt
- − etc/samba/netlogon/win7+samba_domain-membership/SeSystemTimePrivilege.bat
- − etc/samba/netlogon/win7+samba_domain-membership/Win7_Samba3DomainMember.reg
- − etc/samba/samba-domain-policy.ldif
- etc/samba/smb-debian-edu.conf
- − etc/samba/smbaddclient.sh

The diff was not included because it is too large.

View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/1bcbbd951a0c541a164daad0e653172ca4dda0fd...84c12a5b00084f8297a20f2a7258bcfaf4b71931

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/1bcbbd951a0c541a164daad0e653172ca4dda0fd...84c12a5b00084f8297a20f2a7258bcfaf4b71931
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20201016/ee373693/attachment.html>