[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/fix-gosa-starttls] 2 commits: Allow root access to cups via SystemGroups

[Mike Gabriel (@sunweaver)]

Mike Gabriel pushed to branch personal/gber/fix-gosa-starttls at Debian Edu / debian-edu-config


Commits:
5f5b2ecb by Guido Berhoerster at 2023-08-10T08:31:12+02:00
Allow root access to cups via SystemGroups

root access is allowed in the default configuration and e.g. necessary for
services like debian-edu-cups-queue-autoflush.service to work.
Closes #1043397

- - - - -
08f4cf77 by Guido Berhoerster at 2023-08-10T07:07:40+00:00
Configure gosa not to use STARTTLS since TLS is already used

ldapTLS configures the use of STARTTLS, not TLS per se which is enabled by the
use of ldaps: protcol in URLs. Closes #1041322

- - - - -


2 changed files:

- etc/cups/cups-files-debian-edu.conf
- share/debian-edu-config/gosa.conf.template


Changes:

=====================================
etc/cups/cups-files-debian-edu.conf
=====================================
@@ -1,4 +1,4 @@
-SystemGroup lpadmin printer-admins
+SystemGroup root lpadmin printer-admins
 AccessLog /var/log/cups/access_log
 ErrorLog /var/log/cups/error_log
 PageLog /var/log/cups/page_log


=====================================
share/debian-edu-config/gosa.conf.template
=====================================
@@ -376,7 +376,7 @@
         mailUserCreation=""
         mailFolderCreation=""
         imapTimeout="10"
-        ldapTLS="true"
+        ldapTLS="false"
         honourIvbbAttributes="false"
         enableSnapshots="false"
         snapshotBase="ou=snapshots,dc=skole,dc=skolelinux,dc=no"



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/a575ca128df0ebef7276f3c68e6d50f0c5f7e774...08f4cf77dbc213529e225ab344f66da913797505

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/a575ca128df0ebef7276f3c68e6d50f0c5f7e774...08f4cf77dbc213529e225ab344f66da913797505
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230810/3a59285d/attachment-0001.htm>