[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/pam_group] 2 commits: Silence exim4 warnings in logfile

[Mike Gabriel (@sunweaver)]

Mike Gabriel pushed to branch personal/gber/pam_group at Debian Edu / debian-edu-config


Commits:
da8c1dd3 by Guido Berhoerster at 2023-09-07T14:57:16+02:00
Silence exim4 warnings in logfile

The lack of keep_environment in the exim4 configuration for clients leads to
continuous warnigs in the logfile:

Warning: purging the environment.
Suggested action: use keep_environment.

Setting it to an empty values (which is the default) silences that.

- - - - -
de18a627 by Guido Berhoerster at 2023-09-07T18:43:30+00:00
Ship PAM group.conf for workstations

LDAP users should be members of several system groups on networked (roaming)
workstations.

- - - - -


4 changed files:

- Makefile
- + cf3/cf.pam
- cf3/promises.cf
- etc/exim4/exim-ldap-client-v4.conf


Changes:

=====================================
Makefile
=====================================
@@ -68,6 +68,7 @@ CF3FILES = \
 	cf.ldapserver \
 	cf.ldapclient \
 	cf.bind \
+	cf.pam \
 	cf.pxeinstall \
 	cf.ntp \
 	cf.samba \


=====================================
cf3/cf.pam
=====================================
@@ -0,0 +1,14 @@
+bundle agent editline_pam_group
+{
+vars:
+
+  "default_groups"   string => "*;*;*;Al0000-2400;audio,bluetooth,cdrom,dip,floppy,netdev,plugdev,scanner,video";
+
+files:
+
+  debian.(workstation|roaming).installation::
+
+    "/etc/security/group.conf"
+      create => "true",
+      edit_line => append_if_no_line("$(default_groups)");
+}


=====================================
cf3/promises.cf
=====================================
@@ -34,6 +34,7 @@ body common control
                           editline_bind,
                           editline_ldapserver,
                           editline_ldapclient,
+                          editline_pam_group,
                           editline_syslog,
                           adduser,
                           apache2,
@@ -93,6 +94,7 @@ body common control
                   "debian-edu/cf.ldapserver",
                   "debian-edu/cf.ldapclient",
                   "debian-edu/cf.ntp",
+                  "debian-edu/cf.pam",
                   "debian-edu/cf.pxeinstall",
                   "debian-edu/cf.squid",
                   "debian-edu/cf.sshd",


=====================================
etc/exim4/exim-ldap-client-v4.conf
=====================================
@@ -13,6 +13,10 @@
 
 LOCALHOST = 127.0.0.1/8
 
+# intentialnally empty (the default value) in order to prevent
+# constant warning messages in the log file
+keep_environment =
+
 # These options specify the Access Control Lists (ACLs) that
 # are used for incoming SMTP messages - after the RCPT and DATA
 # commands, respectively.



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/9e2678d347da87d3453019fed218c7a3fc7bf85a...de18a627339a8d976114aba23803ee31260c37ef

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/9e2678d347da87d3453019fed218c7a3fc7bf85a...de18a627339a8d976114aba23803ee31260c37ef
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230907/cdb4e086/attachment-0001.htm>