[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/cf-serverd-config] 3 commits: Allow root access to cups via SystemGroups

[Mike Gabriel (@sunweaver)]

Mike Gabriel pushed to branch personal/gber/cf-serverd-config at Debian Edu / debian-edu-config


Commits:
5f5b2ecb by Guido Berhoerster at 2023-08-10T08:31:12+02:00
Allow root access to cups via SystemGroups

root access is allowed in the default configuration and e.g. necessary for
services like debian-edu-cups-queue-autoflush.service to work.
Closes #1043397

- - - - -
08f4cf77 by Guido Berhoerster at 2023-08-10T07:07:40+00:00
Configure gosa not to use STARTTLS since TLS is already used

ldapTLS configures the use of STARTTLS, not TLS per se which is enabled by the
use of ldaps: protcol in URLs. Closes #1041322

- - - - -
0401de82 by Guido Berhoerster at 2023-08-10T07:08:22+00:00
cf3/promises.cf: fix typo and allow connections from localhost and network

- - - - -


3 changed files:

- cf3/promises.cf
- etc/cups/cups-files-debian-edu.conf
- share/debian-edu-config/gosa.conf.template


Changes:

=====================================
cf3/promises.cf
=====================================
@@ -8,9 +8,9 @@
 body server control
 # Debian Edu specific
 {
-      allowconnects         => { "10.0.0.0.0/8" };
-      allowallconnects      => { "10.0.0.0.0/8" };
-      trustkeysfrom         => { "10.0.0.0.0/8" };
+      allowconnects         => { "127.0.0.1", "::1", "10.0.0.0/8" };
+      allowallconnects      => { "127.0.0.1", "::1", "10.0.0.0/8" };
+      trustkeysfrom         => { "127.0.0.1", "::1", "10.0.0.0/8" };
       maxconnections        => "15";
       denybadclocks         => "false";
       allowusers            => { "root" };


=====================================
etc/cups/cups-files-debian-edu.conf
=====================================
@@ -1,4 +1,4 @@
-SystemGroup lpadmin printer-admins
+SystemGroup root lpadmin printer-admins
 AccessLog /var/log/cups/access_log
 ErrorLog /var/log/cups/error_log
 PageLog /var/log/cups/page_log


=====================================
share/debian-edu-config/gosa.conf.template
=====================================
@@ -376,7 +376,7 @@
         mailUserCreation=""
         mailFolderCreation=""
         imapTimeout="10"
-        ldapTLS="true"
+        ldapTLS="false"
         honourIvbbAttributes="false"
         enableSnapshots="false"
         snapshotBase="ou=snapshots,dc=skole,dc=skolelinux,dc=no"



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/fc1de522a5a8973bf801b798b44d5659fd5589e3...0401de828aef813f5c63614355da067c419e4d84

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/fc1de522a5a8973bf801b798b44d5659fd5589e3...0401de828aef813f5c63614355da067c419e4d84
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230810/7564acc3/attachment-0001.htm>