[debian-lan-devel] [SCM] Debian-LAN development and packaging branch, master, updated. 0.8-3-gefcd4a3
Andreas B. Mundt
andi at debian.org
Sun Mar 17 21:13:12 UTC 2013
The following commit has been merged in the master branch:
commit efcd4a38a862d14e447bed7600f379b652336551
Author: Andreas B. Mundt <andi at debian.org>
Date: Sun Mar 17 22:02:07 2013 +0100
Minor fixes and improvements.
* Make sure '/etc/hosts' is not modified. (The removed line turned
up in FAI 4.0.X, but spoils the system on softupdates, as the
domain is not detected by idmapd anymore.)
* Delegate kerberos credentials when ssh'ing.
* Wording in debian/control.
diff --git a/debian/control b/debian/control
index 15b2d45..2e7a8c3 100644
--- a/debian/control
+++ b/debian/control
@@ -15,8 +15,8 @@ Suggests: fai-server
Description: FAI config space for the Debian-LAN system
The Debian-LAN (Debian Local Area Network) project makes running
Debian in a local area network easy without loosing flexibility.
- It may be used by schools, (university-) work groups, associations
- and small enterprises.
+ It may be used by schools, work groups, associations and small
+ enterprises.
.
Debian-LAN uses FAI (Fully Automatic Installation) to install and
configure all machines in the network.
diff --git a/fai/config/scripts/CLIENT_A/10-kerberize b/fai/config/scripts/CLIENT_A/10-kerberize
index 5250ad8..bbc1698 100755
--- a/fai/config/scripts/CLIENT_A/10-kerberize
+++ b/fai/config/scripts/CLIENT_A/10-kerberize
@@ -8,6 +8,10 @@ control:
editfiles:
any::
{ ${target}/etc/ssh/sshd_config
- ## Kerberize ssh:
+ ## Kerberize sshd:
ReplaceAll "#GSSAPIAuthentication no" With "GSSAPIAuthentication yes"
}
+ { ${target}/etc/ssh/ssh_config
+ ## Kerberize ssh:
+ ReplaceAll "^ *GSSAPIDelegateCredentials no" With " GSSAPIDelegateCredentials yes"
+ }
diff --git a/fai/config/scripts/FAIBASE/10-misc b/fai/config/scripts/FAIBASE/10-misc
index 6394ad2..5ed10e5 100755
--- a/fai/config/scripts/FAIBASE/10-misc
+++ b/fai/config/scripts/FAIBASE/10-misc
@@ -9,8 +9,6 @@ cp -f /usr/share/zoneinfo/${TIMEZONE} $target/etc/localtime
if [ -n "$IPADDR" ]; then
ifclass DHCPC || ainsl -s /etc/hosts "$IPADDR $HOSTNAME.$DOMAIN $HOSTNAME"
-else
- ifclass DHCPC && ainsl -s /etc/hosts "127.0.0.1 $HOSTNAME"
fi
fcopy -iM /etc/hosts /etc/motd
diff --git a/fai/config/scripts/SERVER_A/40-kerberize b/fai/config/scripts/SERVER_A/40-kerberize
index 5250ad8..bbc1698 100755
--- a/fai/config/scripts/SERVER_A/40-kerberize
+++ b/fai/config/scripts/SERVER_A/40-kerberize
@@ -8,6 +8,10 @@ control:
editfiles:
any::
{ ${target}/etc/ssh/sshd_config
- ## Kerberize ssh:
+ ## Kerberize sshd:
ReplaceAll "#GSSAPIAuthentication no" With "GSSAPIAuthentication yes"
}
+ { ${target}/etc/ssh/ssh_config
+ ## Kerberize ssh:
+ ReplaceAll "^ *GSSAPIDelegateCredentials no" With " GSSAPIDelegateCredentials yes"
+ }
--
Debian-LAN development and packaging
More information about the debian-lan-devel
mailing list