[debian-edu-commits] [Git][debian-edu/debian-edu-config][personal/gber/init-fixup] 4 commits: Silence exim4 warnings in logfile

[Mike Gabriel (@sunweaver)]

Mike Gabriel pushed to branch personal/gber/init-fixup at Debian Edu / debian-edu-config


Commits:
da8c1dd3 by Guido Berhoerster at 2023-09-07T14:57:16+02:00
Silence exim4 warnings in logfile

The lack of keep_environment in the exim4 configuration for clients leads to
continuous warnigs in the logfile:

Warning: purging the environment.
Suggested action: use keep_environment.

Setting it to an empty values (which is the default) silences that.

- - - - -
de18a627 by Guido Berhoerster at 2023-09-07T18:43:30+00:00
Ship PAM group.conf for workstations

LDAP users should be members of several system groups on networked (roaming)
workstations.

- - - - -
8ccc22b8 by Guido Berhoerster at 2023-09-07T18:44:25+00:00
Rename dhclient hook in Makefile

Followup to commit 912fa538970efd7175481779a5bde71f6d14d530.

- - - - -
35d62a90 by Guido Berhoerster at 2023-09-07T18:44:25+00:00
Do not use command paths in maintainer scripts

Fix lintian warning introduced in commit
9a38129b8c9de16bf658bcdef4423410e4aaf686.

- - - - -


6 changed files:

- Makefile
- + cf3/cf.pam
- cf3/promises.cf
- debian/debian-edu-config.postrm
- debian/debian-edu-config.prerm
- etc/exim4/exim-ldap-client-v4.conf


Changes:

=====================================
Makefile
=====================================
@@ -68,6 +68,7 @@ CF3FILES = \
 	cf.ldapserver \
 	cf.ldapclient \
 	cf.bind \
+	cf.pam \
 	cf.pxeinstall \
 	cf.ntp \
 	cf.samba \
@@ -152,7 +153,7 @@ SYSCONFFILES = \
 SYSCONFSCRIPTS = \
 	dhcp/dhclient-exit-hooks.d/autofs-reload \
 	dhcp/dhclient-exit-hooks.d/wpad-proxy-update \
-	dhcp/dhclient-exit-hooks.d/fetch-ldap-cert \
+	dhcp/dhclient-exit-hooks.d/fetch-rootca-cert \
 	dhcp/dhclient-exit-hooks.d/hostname \
 	mklocaluser.d/20-debian-edu-config \
 	shutdown-at-night/clients-generator \


=====================================
cf3/cf.pam
=====================================
@@ -0,0 +1,14 @@
+bundle agent editline_pam_group
+{
+vars:
+
+  "default_groups"   string => "*;*;*;Al0000-2400;audio,bluetooth,cdrom,dip,floppy,netdev,plugdev,scanner,video";
+
+files:
+
+  debian.(workstation|roaming).installation::
+
+    "/etc/security/group.conf"
+      create => "true",
+      edit_line => append_if_no_line("$(default_groups)");
+}


=====================================
cf3/promises.cf
=====================================
@@ -34,6 +34,7 @@ body common control
                           editline_bind,
                           editline_ldapserver,
                           editline_ldapclient,
+                          editline_pam_group,
                           editline_syslog,
                           adduser,
                           apache2,
@@ -93,6 +94,7 @@ body common control
                   "debian-edu/cf.ldapserver",
                   "debian-edu/cf.ldapclient",
                   "debian-edu/cf.ntp",
+                  "debian-edu/cf.pam",
                   "debian-edu/cf.pxeinstall",
                   "debian-edu/cf.squid",
                   "debian-edu/cf.sshd",


=====================================
debian/debian-edu-config.postrm
=====================================
@@ -5,7 +5,7 @@ set -e
 case "$1" in
     remove)
         # Calling the init script during removal
-	if /usr/bin/systemctl list-unit-files -q enable-nat >/dev/null 2>&1 || \
+	if systemctl list-unit-files -q enable-nat >/dev/null 2>&1 || \
 	    [ -x "/etc/init.d/enable-nat" ] ; then
 	    if command -v invoke-rc.d >/dev/null ; then
 		invoke-rc.d enable-nat stop || exit $?


=====================================
debian/debian-edu-config.prerm
=====================================
@@ -5,7 +5,7 @@ set -e
 case "$1" in
     remove)
         # Calling the init script during removal
-	if /usr/bin/systemctl list-unit-files -q enable-nat >/dev/null 2>&1 || \
+	if systemctl list-unit-files -q enable-nat >/dev/null 2>&1 || \
 	    [ -x "/etc/init.d/enable-nat" ] ; then
 	    if command -v invoke-rc.d >/dev/null ; then
 		invoke-rc.d enable-nat stop || exit $?


=====================================
etc/exim4/exim-ldap-client-v4.conf
=====================================
@@ -13,6 +13,10 @@
 
 LOCALHOST = 127.0.0.1/8
 
+# intentialnally empty (the default value) in order to prevent
+# constant warning messages in the log file
+keep_environment =
+
 # These options specify the Access Control Lists (ACLs) that
 # are used for incoming SMTP messages - after the RCPT and DATA
 # commands, respectively.



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/880a06af9d5e5d68ebd9fbdd2781fcbbe07b49c1...35d62a9091001e1b12a6498da51976137644c0f6

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/880a06af9d5e5d68ebd9fbdd2781fcbbe07b49c1...35d62a9091001e1b12a6498da51976137644c0f6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20230907/08d85f3f/attachment-0001.htm>