[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/pam_group] Ship PAM group.conf for workstations

[Guido Berhörster (@gber)]

Guido Berhörster pushed to branch personal/gber/pam_group at Debian Edu / debian-edu-config


Commits:
9e2678d3 by Guido Berhoerster at 2023-09-07T08:08:43+02:00
Ship PAM group.conf for workstations

LDAP users should be members of several system groups on networked (roaming)
workstations.

- - - - -


3 changed files:

- Makefile
- + cf3/cf.pam
- cf3/promises.cf


Changes:

=====================================
Makefile
=====================================
@@ -68,6 +68,7 @@ CF3FILES = \
 	cf.ldapserver \
 	cf.ldapclient \
 	cf.bind \
+	cf.pam \
 	cf.pxeinstall \
 	cf.ntp \
 	cf.samba \


=====================================
cf3/cf.pam
=====================================
@@ -0,0 +1,14 @@
+bundle agent editline_pam_group
+{
+vars:
+
+  "default_groups"   string => "*;*;*;Al0000-2400;audio,bluetooth,cdrom,dip,floppy,netdev,plugdev,scanner,video";
+
+files:
+
+  debian.(workstation|roaming).installation::
+
+    "/etc/security/group.conf"
+      create => "true",
+      edit_line => append_if_no_line("$(default_groups)");
+}


=====================================
cf3/promises.cf
=====================================
@@ -34,6 +34,7 @@ body common control
                           editline_bind,
                           editline_ldapserver,
                           editline_ldapclient,
+                          editline_pam_group,
                           editline_syslog,
                           adduser,
                           apache2,
@@ -93,6 +94,7 @@ body common control
                   "debian-edu/cf.ldapserver",
                   "debian-edu/cf.ldapclient",
                   "debian-edu/cf.ntp",
+                  "debian-edu/cf.pam",
                   "debian-edu/cf.pxeinstall",
                   "debian-edu/cf.squid",
                   "debian-edu/cf.sshd",



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/9e2678d347da87d3453019fed218c7a3fc7bf85a

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/9e2678d347da87d3453019fed218c7a3fc7bf85a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230907/524ba9eb/attachment-0001.htm>