debian-edu-config (0.415) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Change LTSP build rules to use a network based APT source when
    build LTSP chroot with amd64 netinst CD, as the CD is missing the
    i386 binaries needed.
  * Remove cfengine rule to update /etc/default/update-hostname.  It
    is now handled by preseeding.  Solves skolelinux bug #1228.

  [ Daniel Hess ]
  * For network based LTSP build on amd64 change build rules:
    . Set option_mirror_value instead of MIRROR and add
      option_extra_mirror_value for skolelinux/local packages.
    . Set local as component for exta_mirror and remove it for all other
      mirrors.
    . Add the Debian-Edu archive key as in debian-edu-archive-keyring to
      the apt-keys list, so it is available when the Release file is checked.
    . Check for http_proxy set to "high" and unset it, if it is.
      This seems to be a bug with debconf, which returns always "high" after
      the debconf priority (which is high) was been read.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 20 Jul 2007 17:08:03 +0200

debian-edu-config (0.414) unstable; urgency=low

  [ Daniel Heß ]
  * Add suffix for group mappings to samba config. Allow samba to add
    groupmapping existing groups in the slapd config. This restores the
    old behaviour from when groupmaps where stored external.
  * Add Samba groupmap information to "admins" group when loading root.ldif
    in ldap-debian-edu-install. (Closes skolelinux bug #1223)
  * Include "displayName" attribute in the groupmap. This is not required
    for it to work, but it's displayed in Windows and is less confusing
    this way.

  [ Petter Reinholdtsen ]
  * Remove cfengine rule to edit /etc/opera6rc.fixed and other
    references to Opera.  Opera is no longer included.
  * Add more debug output to ldap-debian-edu-install.
  * Disable editing of /etc/inputrc, as testing show that it is no
    longer needed to support 8-bit characters in bash.
  * Remove bogus calls to db_go in debian-edu-config.postinst.

  [ Holger Levsen ]
  * Modified /etc/lsb-release to only include DISTRIB_DESCRIPTION.

 -- Petter Reinholdtsen <pere@debian.org>  Wed, 18 Jul 2007 00:26:20 +0200

debian-edu-config (0.413) unstable; urgency=low

  [ Ronny Aasen and Petter Reinholdtsen ]
  * Fixed a bug in cfengine's ltsp_arch variable, that broke the
    installer.  Based on patch from Klaus Ade Johnstad.  Fixes
    skolelinux bug #1196.

  [ Klaus Ade Johnstad ]
  * Fixed typo introduced in fix for skolelinux bug #1196
  * Fixed tail according to new syntax, 's/tail +/tail -n +/g'
    in /usr/sbin/ltsp-make-client
  * Fixed bug #1220, typo in lts.conf

  [ Petter Reinholdtsen ]
  * Update ltsp testsuite to use i386 on amd64 systems to fix
    skolelinux bug #1200.
  * Fixed debian-edu-etc-svk initialization using expect, and
    improved the script to a point where it is working properly.
  * Make it possible to enable debian-edu-etc-svk by preseeding
    debian-edu-config/etc-in-svk, and include cronjob for updating
    the svk state of /etc/.  Depend on svk and expect to make
    sure the needed packages are installed.
  * Make sure init.d/start-wlan is not executed during package
    installation, as it can kill the network connection on laptops.
  * Change init.d/fetch-ldap-cert to extract the server certificate
    using the SSL protocol, instead of downloading it over HTTP.
  * Correct ldap-tools/mkslapdcert to extract the server certificate
    (and no the public key) and make it available for download, as this
    is the file needed by clients interested in verifying the SSL
    connection to the LDAP server.
  * Rewrite ldap.conf to use the downloaded LDAP server certificate to
    verify the connection, trying to make it possible to disable the
    'TLS_REQCERT never' setting to enforce this.  It is not yet
    working, so the 'TLS_REQCERT never' is still needed.  This is
    related to skolelinux bug 1211.
  * Move stray client side LDAP configuration from cf.ldapserver
    to the more correct cf.ldapclient.
  * Remove kdm theme cfengine rules.  They are no longer needed.
  * Renamed the 'update' command in debian-edu-etc-svk to commit.
    The old command still work, but will be removed in the future.
  * Add proposed APT sources in the LTSP chroot as well.  Related to
    skolelinux bug #1168.
  * Remove code in mkslapdcert to make the LDAP SSL certificate
    available from the web server.  It is no longer needed when
    fetch-ssl-cert can fetch it directly from the LDAP server.
    Make sure to only try to download the certificate if it
    is mentioned in the LDAP config.
  * Modify cfengine rule for editing /etc/libnss-ldap.conf and
    /etc/pam_ldap.conf to avoid editing if the host setting already is
    present.
  * Improve usage information printed by debian-edu-fsautoresize.
  * Extend testsuite/taskpkgs to detect if a package in a task is
    missing.
  * Update cfengine rule for /etc/hosts.allow to also allow access
    from 10.0.2.0/23 to tftp and portmap, making sure diskless
    workstation boots get access.
  * Allow 127.0.0.1 NFS mount privileges to the LTSP chroot, to
    get qemu testing to work out of the box.
  * Updates in ltsp-make-client:
    - General cleanup and convert it to use aptitude
      instead of apt-get to track manually installed packages.
    - Make sure it installs debian-edu-archive-keyring, and
    - fetches the LDAP SSL certificate.
    - Add code verify that enoug disk space is available in
      /opt/ltsp/$arch before starting.  Using 4096 MiB as the limit.
    - Add code to make sure /var/lib/dbus and /media is writable
      by dbus.  Solves skolelinux bug #1180.
    - Stop installing usbmount.  It does not work at the moment,
      and is not needed when udev/hal is working.
  * Specify SCREEN_07=ldm in lts.conf to make sure ldm is still
    enabled on thin clients after ltsp-make-clients installed
    kdm.  Solves skolelinux bug #1210.

  [ Steffen Joeris ]
  * Include debian-edu-etc-svk under the SBIN programs in the Makefile
    to make sure it is included in the binary package
  * Make sure that the start page translations are in sync with the
    English page (Closes skolelinux bug #1156)
   - Include updated Spanish start page
    Thanks to José L. Redrejo
   - Include initial Russian start page
    Thanks to Yuri Kozlov
   - Include updated German start page
    Thanks to Ludger Sicking
   - Include updated French start page
    Thanks to Xavier Oswald
   - Include updated Norwegian start page
    Thanks to Frode Jemtland
   - Include updated Dutch start page
    Thanks to Thijs Kinkhorst
  * Delete old obsolete directories from the old kde-profile
  * Add kgeography, gcompris, gimp and stopmotion to the students
    desktop (See skolelinux bug #1199)
  * Make sure that the standard kde start menu is recognized and avoid
    having an empty menu (Closes skolelinux bug #1199)
  * Remove obsolete desktop-directories dir from students kiosk mode
  * Change slapd-etch_debian-edu.conf to allow the members of the admin
    group to perform their administrative privileges
    (Closes skolelinux bug #1146)
  * Uncomment code in debian-edu-etc-svk to call aptitude, because the
    dependencies are already solved via Depends field and it would
    cause the installer to fail (Closes skolelinux bug #1205)
    Thanks to Daniel Heß
  * Remove dependency against debianutils as this package is essential
  * Make sure that Makefile clean call will honour failures
  * Remove some kde restrictions from the kiosk mode, only keep the
    rule that students are not allowed to start a new session and can't
    become root via kde. Thanks to Klaus Ade Johnstad for some advice
  * Include configuration file for adept_notifer to tell the application
    not to start during login (Closes skolelinux bug: #1151)

  [ Daniel Heß ]
  * Let cupsd listen on /var/run/cups/cups.sock for connections from
    local clients like the KDE printer ui (Closes skolelinux bug #1207)
  * Change slapd (ldap) config to restrict jradmins from changing the
    passwords of users with higher privileges (members of the admins group,
    smbadmin and the rootdn). This could had been used to set new passwords
    and gain access to accounts with higher privileges.
    Many thanks to Steffen Joeris for helping to implement this.

 -- Steffen Joeris <white@debian.org>  Thu, 12 Jul 2007 21:53:16 +0200

debian-edu-config (0.412) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Remove init.d/loadcpufreq, as the functionality is moved
    to the cpufrequtils package.
  * Add new pam.d/common-auth-debian-edu activated on standalone
    installations to make sure console users is given access to
    local devices.
  * Remove obsolete pam.d files not used since woody.
  * Provide access to the scanner group for users on the console.
    Based on patch to user-setup in Ubuntu.
  * Make default /usr/share/debian-edu-config/fsautoresizetab and
    include it in the package.
  * Change quoting in the dhcpd.conf editing in sbin/ltsp-make-client
    to try to get it working with bash (Related to Skolelinux bug #1060).
  * Install localization-config in ltsp-make-client, and run it after
    the packages are installed, trying to fix skolelinux bug #1127.
  * Make sure all pxe booting clients use the same path to pxelinux.0
    in dhcpd.conf.
  * Remove support for etherboot/non-pxe boot in dhcpd.conf.  Those
    with such network cards will have to add it manually.
  * Make sure the munin server is treated as a munin client when
    collecting information to get the new sitesummary integration
    working out of the box.  Change how munin-client.conf is updated
    to get the cfengine rule working.
  * Drop the fuse group from the list of groups assiged to console users,
    and make it a group assigned to all logged in users on thin clients,
    to make it easier to enable local device access on thin clients.
  * Make sure kderc is updated to enable the special desktop icons
    for the root user and the members of the admins group.
  * Make sure /var/www/index.html.?? files uses relative URLs when possible,
    and use the symbolic www DNS name instead of tjener.
  * Modified squid to access SSL on port 631, and change all links to Cups
    to use https on this port.
  * Change ldap-tools/mkslapdcert to secure the directory where the
    certificate is created before creating the certificate, and make
    the public key available in a separate file to make it easier to
    copy it to the clients.
  * Create init.d script fetch-ldap-cert to download after apache starts
    the LDAP SSL certificate on clients when they boot, unless it already
    is downloaded.
  * Rename ESERVER to the correct ESPEAKER in the desktop-profile trigger
    for thin client sound settings in KDE.  Fixes skolelinux bug #1183.
  * Add fuse to /etc/modules on thin-client-servers, to make sure
    local device access work out of the box when enabled.  Fixes
    skolelinux bug #1184.
  * Enable sound on LTSP thin clients by default, and let those who want
    silent clients disable it by changing to SOUND=N in lts.conf, instead
    of the other way around.
  * Add 000-arch-detection plugin for ltsp-build-client, to install i386
    LTSP chroot on amd64 machines.  Fixes skolelinux bug #1195.
  * Remove obsolete/renamed scripts cfengine-skolelinux, skolelinux-hd-warn,
    skolelinux-restart-services and skolelinux-test-install.  The rename
    was done in 2004, so documentation should be updated by now.
  * Enable local device access on LTSP thin clients by default.
  * Rename cfengine variable de_arch to ltsp_arch, to make it more obvious
    what the variable is used for.  Change its content to i386 on amd64.

  [ Ronny Aasen ]
  * Remove the timeout on nbd-server, it removed the swapfile from the
    client while it's running.
  * Cleanup the slapd config file. Rename from sarge to etch. And
    update the cf script to match. And remove the old woody file from
    the package.
  * Added sambaNextRid to smbadmin's acl. needed in order to join
    machines to the domain.
  * Added ldap-users.pl with dependencies from webmin 1.180, used by
    samba to create machine accounts in ldap.
  * Edited smbaddclient.pl to use the provided ldap-users.pl, and not
    webmin.
  * Added configfile to support the links to debian-edu-doc made from
    the local webpage.
  * Added script to cleanup the ltsp network swapdir daily (Closes
    Skolelinux Bug #1169)
  * Added script nbdquery. shows ports in use by nbd-client on ltsp clients
  * Changed nbdswapd-cleanup to use nbdquery on the ltsp clients, and edited
    cf.ltsp to activate nbdquery on the ltsp clients
  * Add dependency on lsof
  * Added nbdquery to the makefile

  [ Holger Levsen ]
  * Relabeled descriptions to say "all $foo in the institution"
    instead of "...school"

  [ Klaus Ade Johnstad ]
  * Small fix of comments in dhcpd.conf
  * Removed Norwegian comments in dhcpd.conf
  * Removed unneeded stanzas for ltsp-clients

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 16 Jun 2007 15:17:06 +0100

debian-edu-config (0.411) unstable; urgency=low

  [ Steffen Joeris ]
  * Remove icons from the kiosk desktop for student users which relate
    to uninstalled software (Closes Skolelinux Bug #1140)
  * Remove obsolete kiosk-profile directory as it is now divided into
    individual directories
  * Allow students to run a shell and the kde command execution
  * Include the kiosk mode for root
   - Give root the tjener desktop icon to call the internal webpage
   - Update Makefile and add the tjener.desktop file
   - Update debian-edu-config.postinst to generate additional config
     entry for the root kiosk mode

  [ Petter Reinholdtsen ]
  * Add the fuse group to the list of groups assigned during login, trying to get
    LTSP local device access working out of the box.
  * Avoid hardcoding the IP address on the default apache web page.
  * Avoid hardcoding IP addresses in the nagios config.  This will
    cause problem in case DNS is unavailable, but make it easier to
    change IP subnet.
  * Add pam-foreground as an optional pam session module, to get
    /var/run/console/ populated with information needed by dbus
    to give special privileges to users on the console.
  * Edit /etc/security/group.conf to set up local device access
    to local users for all profiles, not just standalone and
    workstation.
  * Remove unused directory /etc/kde2/kdm from package.
  * Correct URL to popularity-contest in the default web page.
  * Drop the popularity-context section in the default web page,
    as it is part of the default install now.
  * Add group description to the LDAP groups missing it
    (Closes skolelinux bug #1132).
  * Add new init.d script loadcpufreq based on scripts found in the
    powernowd package in Ubuntu to load the required cpufreq kernel
    modules, and edit /etc/default/cpufrequtils to enable ondemand
    cpu scaling to save power.
  * Change install rule to fail on errors copying files.
  * Add LC_ALL=C in bin/update-hostname-from-ip to make sure the
    output format is known.
  * Use the service name in tjener.desktop, to make it easier
    to use a different DNS domain.
  * Modify cf.ltsp to not export /var/opt/ltsp/swapfiles.  Swap is
    done using nbd and not nfs now.
  * Removed obsolete cf/cf.sarge-installation-cleanup and cf/cf.devfsd.
  * Avoid hardcoding DNS domain name on the web page.  Use relative
    links where it is possible.
  * New script sbin/debian-edu-fsautoresize making it easier to resize LVM
    volumes.  Add depend on libfilesys-df-perl to get it working.
  * Minor cleanup related to the init.d/nbd-poll script.

  [ Bart Cornelis (cobaco) ]
  * Added Dutch translation

  [ Holger Levsen ]
  * Added myself to uploaders.
  * added catalan translation, thanks to René Mérou
    <ochominutosdearco@gmail.com>
  * converted /var/www/index.html.?? files to unicode (Closes: Skolelinuxbug
    #1142)

  [ Ronny Aasen ]
  * Added configuration for network swap out of the default install.
    (Closes Skolelinux bug #1087)
  * Generate random nagios password at installation time (Closes skolelinux
    bug #1119)
  * Edit testsuite/bind9-dns to support bind9-host
  * Edit ltsp-make-client to include preseeds for popularity-contest.
  * Edit ltsp-make-client to prevent starting a second instance of all deamons
    in the chroot.
  * Make a working resolv.conf for the ltsp thin clients. (Closes Skolelinux
    bug #1073)
  * Provide debian's default DB_CONFIG before making the ldap DB's, shameless
    rip from slapd.postinst. (Closes Skolelinux bug #1150)
  * Renamed index.html.nb to index.html.no (Closes Skolelinux bug #1148)
  * Changed links on nagios to https.
  * Added a variable in cfengine, and replaced i386 in cf scripts.
  * Added support for bind9-host to update-hostname-from-ip.
  * Cleaning up cf.exim, mail should own /var/lib/maildirs
  * New syntax in authldaprc (Closes Skolelinux bug #1163)
  * Added slbackup-php in the webpage
  * Added a /debian-edu-doc to the webpage
  * Added subtree_check on exports made by ltsp-make-client (Closes Skolelinux
    bug #1167)
  * Forcing the use of encryption on cups administration pages.
  * Dropped developer pages, we use the wiki. on the webpage.
  * Updated the url for the mailinglists. On the webpage.
  * Make nbd-server save in the correct swapfile dir. avoid creating large files in
    /tmp (Closes Skolelinux bug #1169)

  [ Finn-Arne Johansen ]
  * Prepared for better integration with resolvconf

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 27 May 2007 08:47:19 +0200

debian-edu-config (0.410) unstable; urgency=low

  [ Patrick Winnertz ]
  *Include wpad for autoconfiguring the proxy for clients.

  [ Steffen Joeris ]
  * Correct the path to the kiosk profile in /etc/kderc
  * Remove unneeded .desktop files from the applications and Desktop sections
    for kiosk profile as these are not on the CD
  * Adding first version of the kpanel for the student kiosk profile
    which includes some generic directories and the some of the current
    applications
  * Remove webmin check from testsuite scripts as we do not have webmin
    anymore and this always reports an error after the installation
  * Drop the ispell-dict-default script from the testsuite as we are no
    longer distributing the education-desktop-other metapackage on the
    first CD due to space limits and therefore no longer including the
    various dictionaries and make sure that bogus error messaging after
    the installation is avoided
  * Do not perform the bind9-dns check after installation in case a
    standalone profile will be installed
  * Only perform network check for showmount if nfs-common is installed
    and therefore exclude the Standalone profile from this check
  * Disable all syslog checks on Standalone profile as it is not setup
  * Add myelf to uploaders
  * Add information about kiosk mode students to README
  * Drop cf.apache script and make sure that cf.apache2 script is
    installed
  * Include Spanish debconf translation (Closes: #407474)
    thanks to Javier Ruano
  * Include initial Portuguese debconf translation (Closes: #414060)
    thanks to Ricardo Silva

  [ Petter Reinholdtsen ]
  * Extend filesystem test to report ext3 file systems without the
    resize_inode feature.

  [ Ronny Aasen ]
  * disable cf.apache since we are installing apache2 now.
  * configure apache2 userdir with our homedir location
  * provide a new apache2 default sitefile, showing our frontpage and correct
    hostmaster email address.
  * provide a new apache2 ssl default sitefile, using a selfsigned cert.
  * modified debian/rules to use a debian-edu-config.links file
  * using cf.apache2 to enable userdir and  ssl modules.
  * using cf.apache2 to disable the debian stock default site, and enable our
    own ssl and regular default site files
  * Deleted webmin from our web frontpage
  * Added link to sitesummary on our web frontpage
  * fixed link to nagios on web frontpage
  * Added experimental nagios2 configuration /etc/nagios2/debian-edu
  * Added and enabeled cfengine script cf.nagios2
  * mount nfs with the tcp argument in automounter ldap
  * Add lwat to the local homepage
  * Add append_domain to squid.conf, to fix broken resolv on non FQDN
  * Make Nagios ignore space checks on special filesystems
  * Trying to remove the spare freespace partition properly, in cf.fstab
  * Update testsuite/timezone, /etc/localtime is not a symlink anymore.
  * alter the way we configure bind9, to avoid breaking on bind
    reconfiguration

  [ Finn-Arne Johansen ]
  * chown /var/lib/ldap to openldap after slapadd has been run as root

 -- Steffen Joeris <white@debian.org>  Fri,  9 Mar 2007 19:22:09 +1100

debian-edu-config (0.409) unstable; urgency=low

  [ Luk Claes ]
  * Added myself to uploaders.

  [ Petter Reinholdtsen ]
  * Adjust cfengine test for detecting etch, to look for '4.0' and not
    'testing', to match the current version.
  * Change testsuite/bind9-dns to not report missing Internet
    connectivity as an error.
  * Change testsuite/ispell-dict-default to handle locales with UTF-8 or
    other non-ISO-8859-1 charmaps properly.

 -- Luk Claes <luk@debian.org>  Wed, 22 Nov 2006 22:31:59 +0100

debian-edu-config (0.408) unstable; urgency=low

  [ Ronny Aasen ]
  * Add authorative to dhcp configuration
  * reordering cf.ldapclient fixes libnss-ldap
  * Modify cf.ntp to support setting the clock on startup
  * Add /etc/lsb-release with some initial values. This should remove the need
    to preseed ltsp with --dist since lsb-release should function as expected
  * remove cf.popcon from the makefile. since cf.popcon is removed
  * added ltsp plugin in order to configure ltsp pxelinnux to use usplash
  * added nosuid to /tmp in cf.fstab
  * creates /opt/ltsp/i386/etc/ltsp/update-kernels.conf tru cf.ltsp
    this enables usplash in ltsp booting clients

  [ Steffen Joeris ]
  * Include French translation for debconf questions (Closes: #392190)
    Thanks to Guilhelm Panaget
  * Delete apt settings for woody and sarge, to clean up a bit
  * Delete old kdesktoprc for the kiosk profile
  * Make sure that the kiosk profile is installed in a hierachic order
  * Include new desktop icon framework for the debian_edu_pupils
  * Update the package build to honor the new kiosk files
  * Include German translation for debconf questions (Closes: #396383)
    Thanks to Helge Kreutzmann
  * Add special desktop restrictions to the debian_edu_pupils kiosk
    mode
  * Add the first customized kmenu for the debian_edu_pupils kiosk
    profile which is divided into the disciplines

  [ Petter Reinholdtsen]
  * Enable esd sound in KDE for thin client users by adding a new desktop
    profile thin-client for all users with LTSP_CLIENT and ESERVER set
    in the environment.
  * Modify default pam.d/common-auth to use pam_group, to make it easier
    to provide local device access to the user logged into the console.
    Rewrite pam_group config to include more groups and also work on
    tty1-9 logins.  Activate it on thin-client-server installs, as well
    as workstation and standalone installs.

  [ Morten Werner Olsen ]
  * Removing all traces of bind8.

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 19 Nov 2006 13:56:08 +0100

debian-edu-config (0.407) unstable; urgency=low

  [ Ronny Aasen ]
  * Modify cf.ldapclient, Altering libnss-ldap default bind policy to soft
  * Added commented volatile sources for etch to cf.apt
  * modify cf.fstab, to delete the dummy freespace logical volume
  * fix the regex matcing /tmp  in cf.fstab
  * updated www.uio.no ip address in testsuite
  * dont run debian-edu-ltsp, we use ltsp-client-builder

  [ Petter Reinholdtsen ]
  * Correct exit code and output handling in update-hostname-from-ip.
  * Drop code to edit /etc/defaults/ntpdate.  It is no longer needed.
  * Moved testing of network settings from debian-edu-install to
    testsuite/network.
  * Add DNS alias sitesummary.intern for the sitesummary collector.

  [ Steffen Joeris ]
  * Include Czech translation for debconf questions (Closes: #391475)
    Thanks to Miroslav Kure

 -- Petter Reinholdtsen <pere@debian.org>  Wed,  4 Oct 2006 13:50:48 +0200

debian-edu-config (0.406) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Use 'tail -n +3' instead of 'tail +3' in ntp test, to avoid warning.
  * Make dash test more robust.
  * Update test to detect missing webmin and report that.
  * Correct syslog UDP activation code to edit /etc/default/syslogd,
    not /etc/default/sysklogd.
  * Fix typo in webmin test script.
  * Modify testsuite/kde to accept execute bit on /etc/kde3/kioslaverc.
    No idea why the file is executable, but we only need to check if it is
    readable for all.
  * Correct testsuite/webcache to not test a non-proxying connection to
    squid.  It does not, and should not, work.
  * Add testsuite/ltsp to detect if the LTSP chroot is installed on
    the thin client server.
  * Modify ntp test to check if /etc/default/ntpdate have syntax errors.
  * Change init.d/update-hostname to use the LSB log functions and to
    not print anything when VERBOSE=no.  Add depends on lsb-base.
  * Removed useless chkconfig line from init.d scripts.

  [ Steffen Joeris ]
  * Mark update-hostname debconf question as internal and fix
    typo at enable-nat question (Closes: #388062)
  * Fix typo in update-hostname debconf question to make sure lintian
    is happy
  * Change hash commenting for /etc/default/ntpdate file, because
    current code breaks configuration for main-server(only), because
    of if-clause
  * Remove mime-types from cf.mime-support which are already merged into
    the mime-support package and write bugreport against mime-support
    for the rest to make sure we can remove cf.mime-support soon

  [ Ronny Aasen ]
  * Added cf.fstab, purpose is to add /tmp as tmpfs in fstab
  * Modify dhcp configuration to look for pxelinux.0 in the correct location
  * ldm fail if Xsession is not executable, edit cf.ltsp to make sure
    /etx/X11/Xsession is +x

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 24 Sep 2006 17:26:20 +0200

debian-edu-config (0.405) unstable; urgency=low

  [ Patrick Winnertz ]
  * Removed obsolete alternative dependency on cfengine, because it
    is going to be removed from debian.

  [ Petter Reinholdtsen ]
  * Rewrite base-config test to no longer report the missing
    dbootstrap_settings as an error.  It is not present on etch.
  * Adjust syslog cfengine rule to enable UDP listening on etch.
  * Adjust webserver test to accept as a success both either apache2
    or apache running.
  * Update debian-edu-ltsp to work with both old and new version of
    ltsp-server.  Change default dist from sarge to etch, and add
    new option --dist to make it easier to change it.
  * New test 'dash' to check that /bin/sh points to dash, not bash.
  * Remove cfengine rule to set GreetString in kdmrc.  Leave this to
    debian-edu-artwork.  Use debian-edu-artwork script to enable KDM
    theme.
  * Updated LSB header for the init.d scripts.

  [ Steffen Joeris ]
  * Cleanup the cf scripts and remove cf.shell and cf.webmin entries
    and adjust the Makefile
  * Deactivate slbackup configuration part via cfengine for combo servers
    as it is merged into the installer,
  * Add dh_link to debian/rules and use it for linking the ldapdump
    script into the needed slbackup directory and deactivate the
    generation via cfengine
    merge it into the installer
  * Move the enable-nat part for the thin-client-server into the
    postinst script and deactivate the cf.nat cfengine call
  * Start the debian-edu-config.prerm script and make sure that the
    enable-nat init script is called if nat is enabled
  * Remove the cf.issue file as we don't use it anymore
  * Change code for enable-nat script to make it compliant with policy
    and use the code snipplet from dh_installinit
  * Add debconf template to ask if enable-nat should be activated or not
    (Closes: #365140)
  * Start the debian-edu-config.config script for the debconf question
  * Include code into debian-edu-config.postinst script to avoid starting
    enable-nat script if debconf boolean is false
  * Add po-debconf to Build-Depends-Indep as we need it for the debconf
    templates
  * Start the po files for the debconf templates
  * Add code to debian-edu-config.postinst to start the kde kiosk
    profiles for debian-edu which creates basic configuration for
    the /etc/kderc and the /etc/kde-user-profile as a mapping file

  [ Ronny Aasen ]
  * Avoid touching the conffile named.conf of bind9, instead give it the
    option -c filename in the non conffile /etc/default/bind9
  * Edit cf.ldapserver and slapd-sarge_debian-edu.conf to try to run
    slapd as the default openldap user.
    (Closes Skolelinux Bug #1112)
  * Fixed wrong dist variable in debian-edu-ltsp, blocked execution
  * Workaround for a bug in ltsp-build-client.
  * add --accept-unsigned-package, since our cd is not signed yet.
  * add a workaround for bug #375077 to avoid the long lookuptimes
    that occure after the cfengine run edits nsswitch.conf.
  * PXElinux in etch have changed it needs next-server and
    root-path options in dhcp now.
  * incresed editfilesize in cfengine.conf, squid'c config was larger
    then the previous value.
  * make debian-edu-pxelinux.cfg use syslinux from the chroot
  * pxelinux don't like symlinks. copied pxelinux and images instead
    since hardlinks dont work across devices
  * added the mandatory nfs export flag for subtree_check or not
  * remove debian-edu-pxelinux.cfg from cf.ltsp 
    instead call ltsp-server from debian-edu-ltsp

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 17 Sep 2006 17:13:00 +0200

debian-edu-config (0.404) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Remove the cron job bin/filehandle_ctl.sh.  It is no longer needed
    with linux 2.6 kernels.
  * Comment out cf.shell, as the same setting can be activated
    using preseeding now.
  * Update standards-version from 3.6.2 to 3.7.2.  No change needed.
  * Add depend on ${misc:Depends} to get a debconf dependency for the
    hidden debconf question available for preseeding.

  [ Steffen Joeris ]
  * Change build-depends-indep to build-depends as debhelper is needed
    during the clean target
  * Increase debhelper level to 4
  * Remove obsolete calls for conffiles in Makefile
  * Cleanup debian/rules to remove the obsolete calls too
  * Adding md5sum file for package
  * Change DESTDIR to package name instead of tmp to adjust packaging
    to current debhelper level

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 20 Aug 2006 23:27:54 +0200

debian-edu-config (0.403) unstable; urgency=low

  [ Steffen Joeris ]
  * Update sources.list and adjust it for etch as non-US is gone
  * Remove cf.webmin as webmin is gone
  * Remove obsolete cf.shorewall
  * Remove obsolete cf.kdm_hdwarn as kde is doing this check now
  * Remove obsolete cf.udev as we are configuring the rights
    for the sound device via pam (Closes: #370350)
  * Remove obsolete cf.amanda as we are using other backup methods (Closes:
    #370393)
  * Fix configuration of squid.conf in cf.squid
  * Adjust path for dhcpd.conf in cfrunhosts.pl
  * Adjust Makefile because of removed files
  * Fix configuration for authldaprc in cf.imap

  [ Frode Jemtland ]
  * Translated norwegian comment in cfengine.conf to english. Fixed
    skolelinux bug #1088

  [ Ronny Aasen ]
  * Removed webmin from ltspserver profile cfengine run.

  [ Bart Cornelis (cobaco) ]
  * Use desktop-profiles instead of debian-edu specific script to set up the
    kde-profiles (Fixes skolelinux bug #1005).

  [ Petter Reinholdtsen ]
  * Correct LSB dependency info in resize_lvm init.d script.

 -- Petter Reinholdtsen <pere@debian.org>  Fri,  4 Aug 2006 19:36:49 +0200

debian-edu-config (0.402) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Update the resize_lvm init.d script:
    - use MiB instead of LVM PE as size unit.
    - Make sure it is installed in rcS.d/
    - Make sure it isn't started during install nor upgrade.
    - Rename variable MOUNTPOINT to DEVNAME to reflect its content.
    - Use lvextend instead of lvresize to be compatible with LVM 1.x.
      Thanks to Finn-Arne for this idea.
    - Do not include the resize_lvm default file in the package, to
      avoid upgrade problems on installations where it is modified.
  * Update standards-version from 3.6.1 to 3.6.2.

  [ Finn-Arne Johansen ]
  * Added resize_lvm init-script
  * Treat sarge and etch as !woody to simplify scripting with cfengine
  * Keep the slapd config from sarge (not renaming it to "*-!woody_*")
  * Added etch templates for sources.list (maybe it's not needed)

 -- Petter Reinholdtsen <pere@debian.org>  Wed, 19 Apr 2006 22:50:02 +0200

debian-edu-config (0.401) unstable; urgency=low

  [ Petter Reinholdtsen ]
  * Fix syntax error in boot_xconf.  (Closes: #343457)
  * Achnowledge old upload. (Closes: #301565)
  * Modified the ltsp-make-client script used for building diskless
    workstations:
    - Modify code to rename rc#.d symlinks instead of removing them,
      to avoid them to reappear after an upgrade.
    - Reinsert init.d scripts ifupdown and networking when building
      diskless workstation, to make sure the loopback network interface is
      enabled.
    - Make sure to only update /etc/exports once when executing
      ltsp-make-client several times.
    - Move network interface name into variable to make it easier to
      change.
    - Use the apt location of ltsp-server instead of ltsp-client to
      detect the apt source to use, as the latter might not be
      installed nor available on the server.
    - Add /opt/ltsp instead of /opt/ltsp/i386 to /etc/exports, to be
      compatible with the update done by the ltsp package itself.
  * Add dependency on host to make sure init.d/update-hostname work.

 -- Petter Reinholdtsen <pere@debian.org>  Thu, 23 Mar 2006 13:08:44 +0100

debian-edu-config (0.400) unstable; urgency=low

  [ Patrick Winnertz ]
  * Changed symlink of /bin/sh from /bin/ash to /bin/dash
  * Added shellcommands section in cf.shell in order to invoke dpkg-divert
    --add /bin/sh (Closes Skolelinux Bug #1041)

  [ Benjamin Sonntag ]
  * Added manpages for some binaries in this package. Also added a mechanism
    in Makefile so that /bin /sbin and ldapprograms manpages are autodetected
    and installed too.
  * Added file for backdoor in /etc/default (still disabled by default, but
    useful to know how to fill it)
  * Added documentation in README file for samba ssh and apache.
  * Corrected lintian warning on xboot_conf not having restart and
    reload cases.
  * Added CFBINFILES to Makefile so that cfd and cfrunhosts.pl are now
    executables.

  [ Steffen Joeris ]
    * Distribution umask only in /etc/profile
        (Closes Skolelinux Bug #996)
    * Disable connection settings in courier-imap
      so that the cf.imap is running and the
      courier-imap is not running by default
      (Closes Skolelinux Bug #998)
    * change ntp-configuration to not use pool.ntp.org
      and let the clients search for ntp.intern
      (Closes Skolelinux Bug #1024)
    * Dropping kmail preconfiguration
      (Closes Skolelinux Bug #550 and #1017)
    * Also remove conffiles for kmail from
      /usr/share/debian-edu/* and update Makefile
    * still providing sound permission changes for devfs if someone
      still uses kernel24
    * update Makefile for cf.udev

  [ Henning Sprang ]
  * Now configuring NTP with cfengine (cf/cf.ntp).
    (Closes Skolelinux bug #1024)

  [ Bjorn Ove Grotan ]
  * Fixed typo in tools/jrpasswd

  [ Ragnar Wisloff ]
  * Added example of settings for serial mouse to lts.conf. Fixes #584.

  [ Finn-Arne Johansen ]
  * Fixed typo in when creating pxelinux config for old ltsp
  * Added permissions to set timestamps when passwords was changed
  * Display menu for pxebooting devices if more than one netbooting
    solution is installed
  * Set PATH for ldapdump.sh to properly stop/start slapd.
    (Closes Skolelinux bug #1000)
  * Cleaned up the dependencies of debian-edu-config, only include the
    necesarry packages for installing this package.
  * added HOST variable for talking to the ldap-server
  * Set the correct permission on samba passwords.
    (Closes Skolelinux bug #1007)
  * Added support for doing a netbased installation of ltsp in debian-edu
  * Added support for installing ltsp in another location than /opt/ltsp/i386
  * Extended/rewritten script for creating diskless/stateless workstations
  * Split up the configuration of courier imap, should close
    skolelinux bug #998
  * Added dependency to ng-utils (should close Skolelinux bug #1033)
  * Stopped imap from running on a unencrypted port
  * Removed positive test for imap2 (unencrypted port)
    (closes Skolelinux #1038)
  * Added commented out cfengine code to set up access to local devices
    when logged in via kdm on non-server
    (alternativ fix for Skolelinux #974)
  * Added sample definition for shared folder in samba
  * Added sample config for usbmount
  * Added sample config for pam_mount on stateless clients
  * Added script for making stateless workstations to the package,
    should be ready for testing
  * Added workaround for missing background.png in ltsp-themes
    (Skolelinux #1035)
  * Set up mozilla-firefox to use kprinter and A4 as default. Thanks to
    Klaus Ade Johnstad for finding the bug (and the solution)
    (Closes Skolelinux #1042)
  * use pam_group instead of manipulating the devices to get access to
    local devices
  * ldap-debian-edu-install needs to use bash for now
  * Dont test for a running squid on a thin-client-server. Thanks to
    Ole-Anders Andreassen for finding this bug (Closes Skoleliux #1054)
  * Add support for detecting Arch in debian-edu-ltsp
    (Closes Skolelinux #1055)
  * Modified slapd-sarge-debian-edu.conf to allow jradmins to change
    passwords, and admins to add user
  * Dont use bash on diskless workstation, since it breaks
    ltsp-client-setup (Closes Skolelinux #1059)
  * Removed extra "-e" in ltsp-make-client breaking dhcpd.conf
    (Closes Skolelinux #1060)
  * No need to allow users to read their own encrypted samba password
  * Need to allow samba root to update nextID, and to search the samba
    Attributes (Closes Skolelinux #1061)
  * Define wins server in dhcp, to allow windows clients to resolv the
    samba domain (Closes Skolelinux #1067)

  [ Patrice Neff ]
  * Added support for using cfengine server
  * Enabled configuration of the sysstat system
  * Cleaned up the test for squid
  * Cleaned up test for XFS
  * Included libnet-ldap-perl required by some of the ldap-tools
  * Added a Spanish translation of the index page at var/www/index.html.es
  * Allow port 10000 in Squid configuration (so that Webmin is accessible)

  [ Morten Werner Olsen ]
  * Removing /etc/skel/.kde/share/config from debian/dirs.
  * Removing all references to /etc/default/ntp-servers (isn't owned by
    any packages).
  * Cleaning up cf/cf.ntp and commenting out all references to
    pool.ntp.org and using 127.127.1.0 as default for main-server (as
    NTP will understand that is using the local clock as reference).
  * Fix /etc/default/ntpdate for non-Main-server's (point to ntp).
  * Fixing Finn-Arne's email-address in the 0.397 changelog entry
    (prevents lintian-error).
  * Disabling the xfree-test that assume that xfree86 is started.
  * Disabling the kdm-tests that assumes that kdm is started.
  * Now defaulting to not sending any Nagios-mails.
  * Change my email-address in the Uploaders-field. :)

  [ Andreas Schuldei ]
  * making slapd use ipv4 only in cf.ldapserver (for uml testframework, where
    long timeouts occure when probing for ipv6 stuff)

  [ Frode Jemtland ]
  * Found a updated version of debian-edu-config/bin/debian-edu-ltsp in one of
    my test servers. This seemd to me to be a improvment to get disk less
    workstations to work, with ltsp. Probably need more files from this
    installation to get it to work
  * Updated the index.html.en and index.html.de with a plea to install the
    popcon package
  * Added a German var/www/index.html.de by Ralf Gesellensetter
  * Updated rest of the index files to have a link to the German translation
  * Changed special norwegian characters to html codes

  [ Bart Cornelis (cobaco) ]
  * Added var/www/index.html.nl with a Dutch translation of the default page.
  * Updated the other index.html pages to have a link to the Dutch version
  * Added dutch index.html in the Makefile script

 -- Morten Werner Olsen <werner@debian.org>  Sat,  4 Mar 2006 19:33:13 +0100
 

debian-edu-config (0.399) unstable; urgency=low

  [ Bjorn Ove Grotan ]
  * Added administrative password-change utility (tools/jrpasswd)

  [ Morten Werner Olsen ]
  * Added LDAP-database dump script (tools/ldapdump.sh)
  * Added etc/slbackup/pre.d to debian/dirs
  * Added a cfengine-hook that symlinks the tools/ldapdump.sh into
    /etc/slbackup/pre.d/ (fixes debian-edu bug #923)
  * Fixed the permissions on the config-file (pxelinux.cfg/config) for
    PXE-booting.
  * Updated cf/cf.kdm to get a little bit more interesting background for
    the login-screen.
  * Added myself as uploader.
  * Deliver mail to root as the mail-user (not root). This prevented mail
    for root to be delivered.

  [ Petter Reinholdtsen ]
  * Fix typo in testsuite/webcache, using correct argument to find.
  * Close stdin/stdout when restarting the wlan to avoid hanging on
    first time installs.
  * Add LSB init.d headers to document boot time dependencies.
  * Use new script debian-edu-ltsp to build LTSP environment
    using the new LTSP debian packages.
  * Make sure missing sound card don't give a warning dialog box.
  * Make sure testsuite/php is no longer used.  We do not
    install PHP any more.
  * Only run testsuite/{ldap-server,webmin,webserver} on Main-Server
    installs.
  * Only run testsuite/{ldap-client,ntp,webcache} on Main-Server,
    Workstation and Thin-Client-Server installs.
  * Only run testsuite/dhcpd on Main-Server and Thin-Client-Server
    installs.
  * Only report missing kdm and X server as information when running
    the testsuite, as these are started after this point in the
    installation sequence.
  * Start on script ltsp-make-client to convert a LTSP thin client
    chroot to a more complete client installation.

  [ Maximilian Wilhelm ]
  * Added exim4 LDAP configuration for server and client
    (Closes: #276769)

  [ Finn-Arne Johansen ]
  * Added firefox proxy, cache and printer config
  * Fixed detection of 2.4-kernel
  * Included the munin cfengine script, and fixed the munin script
  * Made cfengine-debian-edu work with both cfengine and cfengine2
  * Better detection of group "installation"
  * Replaced all occurences in chengine of "installasjon" with
    "installation"
  * Disabled FifoDir for kdm on non-standalone, to prevent shutdown from
    a logged in session
  * Disabled shutdown from non-local display for kdm (fixes debian-edu
    bug #949)
  * Updateded /etc/samba/slapaddclient.pl because tdbdump is relocated
  * Set up automounting via ldap
  * Disabled listing of hashed password to unauthenticated users
    (fixes debian-edu bug #945)
  * Gave smbadmin access to the Machine Subtree (fixes debian-edu bug #950)
  * Installation script for lessdisks thin client is availible, but does
    not run by default
  * Set up ldap users on lessdisks clients
  * Set a more suited certificate for the postoffice (Closes: #301288)
  * Fixed Typo preventing hidden home dir mounting from Windows server
    Thanks to Bernt Johnsen AFK for discovering
  * Close debconf fd before init-script runs, prevents initscripts
    from runing cleanly (Fixes debian-edu bug: #301565)
  * Made nightkill a bit more quiet
  * Made debian-edu-config Replace,Conflict and Provide ncs
    (fixes debian-edu bug #975)
  * Fixed missing translation from installasjon -> installation in cf.cups
    (Fixes debian-edu bug: #967)
  * Disabled ldap idletimeout, since kdm fails to set up a new connection
  * tftpboot files are moved from /tftpboot into /var/lib/tftpboot,
    rewritten dhcpd.conf, and added script debian-edu-pxelinux.cfg to
    help maintain pxelinux.cfg/default (Partly closes: #905)
  * Fixed typo in tools/ldapdump.sh to remove error-message
  * Added support for using /usr/share/d-e-c/tools/passwd as non-root user
  * Fixed permission on samba passwords for ldap

  [ Ragnar Wisloff ]
  * Corrected cfengine edit line for USE_XFS in cf.ltsp to make LTSP
  * Changed permissions on /etc/skel/.kde/share/config/kmailrc to make
    only user readable. (Fixes debian-edu bug #887)
  * Added cf.sysstat which enables the sysstat system
  * Added Nagios config files and amended cf.nagios to fit. (Fixes
    debian-edu bug #953 and #954).
  * Fixed missing logos from NAgios package.
  * Added UserDir config to cf.apache. Fixes debian-edu bug #639.

  [ Frode Jemtland ]
  * Corrected errors about php4 in cf.apache
  * Updated information about ServerAdmin in cf.apache
  * Added language support for nb, no and nn in cf.apache
  * Commented out mime type nb in cf.apache
  * Fixes skolelinux bug: #938 and #864
  * Added files to /var/www: index.html.nb, index.html.en,
    logo-trans.png, skl-ren_css.css. Fixes debian-edu bug: #942.
  * Fixed typos in html files.

  [ Andreas Schuldei ]
  * extending ldap-debian-edu-install to deal with cases where /etc/shadow
    does not exist (for uml test installations)

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 11 Dec 2005 21:00:32 +0100

debian-edu-config (0.398) unstable; urgency=low

  * Finn-Arne Johansen
    - Added common-auth|account|passwd-ldap-debian-edu for ldap
      authentication, Tried to enable it for Sarge only
      (Closes: #275031).
    - Added detection of sarge in lessdisks-chroot.
    - Added conf-files for winbind/ads authentication, with dummy variables
    - Added pam_env to common session to support /etc/environment
    - better detection of woody/sarge
    - fixed kdm to not show userlist on sarge (Closes: #294048)
    - fixed kdm to allow root logins on server console (Closes: #294047)
    - moved dbootstrap_settings on sarge, to prevent cfengine from detect a
      clean installation if run again
    - Remove custom Xsession, to get kdm to honour
      /etc/alternatives/x-session-manager
    - Rewrite of debian-edu-restart-services
    - Added test for samba to debian-edu-test-install
    - Make sure ldap is stopped during ldap-debian-edu-install
    - Added new imapd.pem for courier-imap-ssl certificate
    - fixed some ACL stuff in ldap-schema/lis.schema to make it work
    - Disabled devfsd for 2.6 kernels (use udev instead)
    - changed slapd-debian-edu.conf -> slapd-sarge_debian-edu.conf to
      support slapd 2.2
    - Moved skript for setting up X in lessdisks ws at boot from d-e-install
      (also updated)
    - Replaced cfengine with cfengine2
    - sett correct path to cfagent
  * Bart Cornelis
    - Set up proxy + kmail when inside a debian-edu network.
  * Petter Reinholdtsen
    - Get PCI reporting working in Sarge.
  * Bjørn Ove Grøtan
    - Updated norEduPerson.schema
  * Andreas Schuldei
    - add writeableBy for ACL usage to ldap-schema/lis.schema

 -- Andreas Schuldei <andreas@debian.org>  Sat,  4 Jun 2005 21:36:07 +0200

debian-edu-config (0.397) unstable; urgency=high

  * Andreas Schuldei
    - added afs entries to the named zone files
  * Finn-Arne Johansen
    - Changed samba into using tls instead of ldaps
    - Changed test for services in inetd.conf, not lines containing the
      name of service (Closes: #288912)
  * Klaus Ade Johnstad
    -Removed a space, to avoid errormessage "bad substitution"
     when running /usr/bin/debian-edu-hd-warn

 -- Finn-Arne Johansen <finnarne@bzz.no>  Thu,  6 Jan 2005 11:48:33 +0100

debian-edu-config (0.396) unstable; urgency=low

  * Correct code to make sure /etc/kde[23]/kioslaverc.  It need to
    create the file if it missing, as the 'files' section is executed
    before the 'shellcommands' section.
  * Remove share/debian-edu/common/share/config/kioslaverc.  Not all
    profiles uses a proxy (standalone does not), so KDE should not
    always use a proxy.
  * Move editing of /etc/ldap/ldap.conf from cf.ldapclient to
    cf.ldapserver where it belongs, and where it can be part of the
    cfengine rules already editing the file.
  * Do the same editing of /etc/ldap/ldap.conf in woody and sarge, as
    the rules were similar enough, and seem to differ only for
    historical reasons.

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 23 Oct 2004 20:43:23 +0200

debian-edu-config (0.395) unstable; urgency=low

  * Finn-Arne Johansen
    - Set Thin client nfs-access to be async
    - Added, but deactivated code to set nscd cache size
    - Updated ldap initialisation to set up group mapping from unix
      group admins to samba group "Domain Admins" (fixes skolelinux
      bug #812)
    - Updated format for slapd.conf to specify both ldap and ldaps as
      service
    - Added pointer to certificate file on sarge server install
    - Set ldap clients to never check certificate
    - Updated samba.schema to support sambaPasswordHistory
    - Added test for squid spool dir ownership
    - Added host definition for ldap-clients
  * Klaus Ade Johnstad
    - Added some more host-templates in dhcpd-debian-edu.conf,
      and some space between the lines, to avoid some gruff
      in the comment fields in webmin-dhcp.
  * Petter Reinholdtsen
    - Add test to detect errors with /etc/kde[23]/kioslaverc.
    - Make sure /etc/kde[23]/kioslaverc is readable by all.
  * Maximilian Wilhelm
    - Complete rewrite of /etc/group to LDAP migration script.

 -- Joey Hess <joeyh@debian.org>  Tue,  5 Oct 2004 16:29:20 -0400

debian-edu-config (0.394) unstable; urgency=low

  * Finn-Arne Johansen
    - Fixed bashism in detection of workstation profile in cfengine.conf
    - Added slapdconfig for sarge (bdb backend, commented out for now)
    - Changed ldap-bootstrap script to support exim4, and nonexisting samba
    - Added support for sarge in cfengine.conf
    - Fixed squid config for sarge
    - Fixed slapd Database setup for sarge
    - Changed detection of ltspserver profile
  * Petter Reinholdtsen
    - Correct xfree86 test.  It should no longer report errors on
      Main-server installs.
    - Enable postinst code to handle debconf preseeding for
      init.d/update-hostname.  It is now working as it should.
    - Document some problems with init.d/open-backdoor.
    - Make sure open-backdoor print a message when it is enabled.
  * Maximilian Wilhelm
    - Added ldap base dn to client config
    - Added CNAME kerberos for tjener to db.intern
    - Localized debian-edu-hd-warn correctly and added chech if X is running

 -- Petter Reinholdtsen <pere@debian.org>  Sun,  8 Aug 2004 13:28:30 +0200

debian-edu-config (0.393) unstable; urgency=low

  * Andreas Schuldei
    - Remove unnecessary and wrong lines from the autofs.ldif. objectclasses
      OU and automoutMap can not be in the same ldap entry, with stricter
      checking as in openldap 2.1.X.
  * Finn-Arne Johansen
    - Remove path from temporary filename for ldap-user-clean-attic.sh.
      (Fixes skolelinux bug #786)
  * Petter Reinholdtsen
    - Add debconf template install rule.
    - Add quotes (") around the value stored in
      /etc/default/update-hostname to make sure it is a valid sh-script
      even if the value is junk.

 -- Petter Reinholdtsen <pere@debian.org>  Thu, 17 Jun 2004 10:16:04 +0200

debian-edu-config (0.392) woody; urgency=low

  * Petter Reinholdtsen
    - Change xfree86 test to only warn if X isn't running.  X is
      started after the test is executed, so it isn't really an error.
    - Make it possible to configure init.d/update-hostname at install
      time using an hidden debconf value.
    - Restart bind before ntpd, as ntpd need to look up 'ntp' in DNS.
  * Finn-Arne Johansen
    - Added ldap-user-clean-attic.sh to the command line ldap tools
    - Changed number of imap clients allowd to connect from same host
      (closes: #459)

 -- Petter Reinholdtsen <pere@debian.org>  Mon, 14 Jun 2004 09:27:02 +0200

debian-edu-config (0.391) woody; urgency=low

  * Finn-Arne Johansen
    - Improved a workaround for bug #286 in skolelinux, #156332 in debian
      to ensure that the dhcp server is restartable after installation

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 12 Jun 2004 22:06:24 +0200

debian-edu-config (0.390) woody; urgency=low

  * Petter Reinholdtsen
    - Only test XFree86, kdm and xfs if it is supposed to
      be installed (!Main-Server).
    - Insert code in debian-edu-restart-services to force dhcpd
      restart as a workaround for skolelinux bug #286.  Not sure if it
      works, but it is better to have this code here instead of in
      debian-edu-install.
    - Add test to check if host 'ldap', 'ntp', 'syslog' and 'webcache'
      is reachable.
    - Started in README on highlevel description of the configuration
      changes done.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 11 Jun 2004 00:04:30 +0200

debian-edu-config (0.389) unstable; urgency=low

  * Finn-Arne Johansen
    - Fetch sambasid for PDC instead of domain.
  * Petter Reinholdtsen
    - Rewrote samba-debian-edu-admin script to make timeout length a
      variable, and to fetch hostname short form only once.
    - Remove trailing space from line ends and the
      samba-debian-edu-admin file.

 -- Petter Reinholdtsen <pere@debian.org>  Thu,  3 Jun 2004 18:07:44 -0300

debian-edu-config (0.388) unstable; urgency=low

  * Finn-Arne Johansen
    - Set smaller cache size for mozilla
    - Fixed type and missing entries in mozilla proxy settings

 -- Petter Reinholdtsen <pere@debian.org>  Mon, 31 May 2004 01:53:18 -0300

debian-edu-config (0.387) unstable; urgency=low

  * Finn-Arne Johansen
    - Fixed some missing samba objects to the ldap tree.
    - Changed procedure to fetch sambaSID.
    - Updated Makefile to include cf.mozilla.
    - Tries to take up the network interface before fetching sambaSID.
    - Changed samba-debian-edu-admin to ensure that sambaSID is
      availible when needed.
    - Disabled samba password change.
    - Disabled samba root access to shared resources.
    - Added sample entry for assigning static ip to workstations,
      (fixes SL #750).

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 28 May 2004 14:36:35 -0300

debian-edu-config (0.386) unstable; urgency=medium

  * Finn-Arne Johansen
      - Updated slapd.conf to limit the write access of smbadmin

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 21 May 2004 23:36:04 +0200

debian-edu-config (0.385) unstable; urgency=medium

  * Petter Reinholdtsen
    - Change webmin test to check the config file before checking if
      the server is listening to the correct port.  Also changed it to
      not die on the first error, but to do all checks before setting
      the return code.
  * Finn-Arne Johansen
    - Changed DHCP lease time.
    - Moved samba clients to a subtree under ou=People.
  * Andreas Schuldei
    - Make the retrival of the machine group dynamic in
      etc/samba/smbaddclient.pl.

 -- Petter Reinholdtsen <pere@debian.org>  Thu, 20 May 2004 22:28:22 +0200

debian-edu-config (0.384) unstable; urgency=low

  * Finn-Arne Johansen
    - Changed config of samba, and rewritten smbaddclient.pl script to
      ease the adding of NT clients.
    - Removed nss_base_passwd from libnss-ldap.conf to allow use of
      ou=machines for samba clients.
    - Added config for mozilla to use webcache, and kprinter.
  * Petter Reinholdtsen
    - Reinsert nss_base_passwd into libnss-ldap.conf, as it might have
      unwanted side effects, like removed users and machines showing
      up as existing users.
    - Add test for webmin allow line in /etc/webmin/miniserv.conf.

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 15 May 2004 19:44:45 +0200

debian-edu-config (0.383) unstable; urgency=low

  * adding organisational unit Machines to root.ldif for samba.

 -- Andreas Schuldei <andreas@debian.org>  Wed,  5 May 2004 21:38:39 +0200

debian-edu-config (0.382) unstable; urgency=low

  * Finn-Arne Johansen
    - Added missing samba-debian-edu-install script
  * Andreas Schuldei
    - performance tuning for slapd: adding some indices and keeping the db in
      RAM

 -- Andreas Schuldei <andreas@debian.org>  Wed, 28 Apr 2004 19:12:41 +0200

debian-edu-config (0.381) unstable; urgency=low

  * Finn-Arne Johansen
    - Added config for samba 3.0
  * Petter Reinholdtsen
    - Only create samba LDAP config on first time install.

 -- Andreas Schuldei <andreas@debian.org>  Wed, 28 Apr 2004 17:27:13 +0200

debian-edu-config (0.380) unstable; urgency=low

  * Petter Reinholdtsen
    - Fix typo in cf.webmin.  The file is called /etc/webmin/config,
      not /etc/webmin/config.conf.
    - Add cfengine rule in cf.webmin to rewrite
      /etc/webmin/dhcpd/config to use dhcp version 3 instead of
      version 2. (Fixes skolelinux bug #666)
    - Renamed every file using 'skolelinux' prefix and postfix, to
      using 'debian-edu' instead.  Added compatibility wrapper scripts
      to avoid breaking installation while changing.  This will break
      existing installations, but is needed to be done before we
      stabilise for consistency.

 -- Petter Reinholdtsen <pere@debian.org>  Mon, 26 Apr 2004 20:09:52 +0200

debian-edu-config (0.379) unstable; urgency=low

  * Remove cf.mkinitrd from the include list in cfengine.conf too.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 23 Apr 2004 23:30:09 +0200

debian-edu-config (0.378) unstable; urgency=low

  * Klaus Ade Johnstad
    - Changed the warning/explanation in 10skolelinux-one-login-per-host
      from Norwegian into English.
  * Petter Reinholdtsen
    - Changed webmin configuration to use PAM for authentication,
      removing the need to keep a separate user database in webmin.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 23 Apr 2004 00:06:47 +0200

debian-edu-config (0.377) unstable; urgency=low

  * Petter Reinholdtsen
    - Add test taskpkgs to check if the correct task packages are
      installed.
  * Klaus Ade Johnstad
    - Added the special forwarders need for Skoleetaten i Oslo, in
      named-bind9.conf
    - Added the correct path to the dhcp3 script, in
      dhcpd-skolelinux.conf

 -- Petter Reinholdtsen <pere@debian.org>  Tue, 20 Apr 2004 00:07:37 +0200

debian-edu-config (0.376) unstable; urgency=low

  * Petter Reinholdtsen
    - Do not edit /usr/X11R6/lib/X11/xkb/rules/xfree86.lst any more,
      as we are using XFree86 4.2 now, and the changes are already there.
    - Rewrite edit rule for xfree86.lst in cf.locales to insert the same
      text as is used in XFree86 4.2.
    - Remove cf.mkinitrd, as DELAY=0 is the default in debian-installer.
    - Remove edit rule for /etc/network/interfaces from cf.ldap, as this
      file is updated correctly by debian-edu-profile-udeb in d-i now.
    - Modify update-ini-file to add a section if the ini-file only consist
      of comments.  (Skolelinux bug #633)

 -- Petter Reinholdtsen <pere@debian.org>  Thu, 15 Apr 2004 00:09:12 +0200

debian-edu-config (0.375) unstable; urgency=low

  * Andreas Schuldei
    - Renamed the 'guest' group to 'none' and the 'jnadmin' group
      to 'jradmin' in root.ldif.
    - Adding an attic OU for deleted users, and added an attic
      capability flag in root.ldif.
  * Petter Reinholdtsen
    - Add missing newline at the end of ldap-bootstrap/root.ldif.

 -- Petter Reinholdtsen <pere@debian.org>  Wed, 14 Apr 2004 10:00:19 +0200

debian-edu-config (0.374) unstable; urgency=low

  * Petter Reinholdtsen
    - Report output from rpcinfo -p when testing the network status.
  * Andreas Schuldei
    - Adding a default class to root.ldif, removing the generic age
      group.
  * Finn-Arne Johansen
    - Modified password script to allow changing of admin password.
      (fixes skolelinux #236)
  * Ragnar Wisloff
    - Added nagios to list of services to restart.

 -- Petter Reinholdtsen <pere@debian.org>  Thu,  1 Apr 2004 22:34:09 +0200

debian-edu-config (0.373) unstable; urgency=low

  * Petter Reinholdtse
    - Change /etc/exports rule for /skole/tjener/home0 to only
      export to selected host netgroups by default.
  * Bjørn Ove Grøtan
    - Commented out indexing of eduPerson-related parts in slapd.conf
      since we're not using EduPerson.schema yet.

 -- Petter Reinholdtsen <pere@debian.org>  Tue, 30 Mar 2004 23:31:31 +0200

debian-edu-config (0.372) unstable; urgency=low

  * Petter Reinholdtsen
    - Improve the mail content sent from init.d/report-reboot.
    - Avoid restarting init.d/report-reboot on installs and
      upgrades. (Closes: #240776)
    - Do not use EduPerson.schema yet.
    - Make sure debian-edu-mailcap is installed without execute bit.
  * Ragnar Wisloff
    - Fixed typos in cf.nagios

 -- Petter Reinholdtsen <pere@debian.org>  Mon, 29 Mar 2004 21:35:47 +0200

debian-edu-config (0.371) unstable; urgency=low

  * Bjørn Ove Grøtan
    - Add norEduPerson.schema to the package.
  * Petter Reinholdtsen
    - Make sure to install EduPerson.schema and norEduPerson.schema,
      to get slapd to start. (Fixes Skolelinux bug #664)
    - Make sure newly added scripts in /usr/share/ are installed
      with execute bit.
    - Make sure /etc/init.d/report-reboot is a conffile.

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 28 Mar 2004 22:50:44 +0200

debian-edu-config (0.370) unstable; urgency=low

  * Finn-Arne Johansen
    - Adding script to change users password in ldap (also samba)
    - Moved nice to have script from /usr/sbin/ into /usr/share...
    - Added code to set umask when logging in with kdm
    - Added the script located in share into the Makefile
  * Petter Reinholdtsen
    - Updated testsuite/dhcpd to check dhcpd version 3.

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 27 Mar 2004 16:57:14 +0100

debian-edu-config (0.369) unstable; urgency=low

  * Bjørn Ove Grøtan
    - adding ACL for smbadmin and performance tuning
  * Petter Reinholdtsen
    - Add workaround for apache problem in skolelinux-restart-services.
      This should make sure the missing apache parent process is
      worked around.  (Skolelinux bug #636)
  * Ragnar Wisloff
    - Changed cf.nagios to use forced symlinks

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 27 Mar 2004 11:58:23 +0100

debian-edu-config (0.368) unstable; urgency=low

  * Petter Reinholdtsen
    - Add new init.d script report-reboot, which can send
      an email when a server boots.
    - Implement 'status' argument to init.d/open-backdoor,
      reporting if the SSH backdoor is running or not.
    - Add Finn-Arne Johansen as uploader.
    - Remove all '.#*' files in clean target, to make sure this
      cruft do not make it into the source package.

 -- Petter Reinholdtsen <pere@debian.org>  Mon, 15 Mar 2004 22:19:29 +0100

debian-edu-config (0.367) unstable; urgency=low

  * Replaced dhcp with dhcp3-server in skolelinux-restart-services, should fix
    #286 and #421

 -- Finn-Arne Johansen <faj@bzz.no>  Thu,  4 Mar 2004 20:50:19 +0100

debian-edu-config (0.366) unstable; urgency=low

  * Fixed config for dhcp3

 -- Finn-Arne Johansen <faj@bzz.no>  Wed,  3 Mar 2004 22:27:21 +0100

debian-edu-config (0.365) unstable; urgency=low

  * changed distribution from UNRELEASED to unstable

 -- Andreas Schuldei <andreas@debian.org>  Wed,  3 Mar 2004 17:15:44 +0100

debian-edu-config (0.364) unstable; urgency=low

  * Rune Nordbøe Skillingstad
    - Package now conflicts debian-edu-install <= 0.616. (Closes: #235734)
  * Petter Reinholdtsen
    - Restart autofs at the end of the install, to make sure the new
      configuration is used.

 -- Rune Nordbøe Skillingstad <runesk@linpro.no>  Tue,  2 Mar 2004 09:20:24 +0100

debian-edu-config (0.363) unstable; urgency=low

  * Finn-Arne Johansen
    - Added /etc/mailcap
    - Added /etc/dhcp3/dhcp-skolelinux.conf
  * Petter Reinholdtsen
    - Make sure to include cf.nagios in the package.
    - Removed cf.modules as it is unused now.
    - Add missing quote character in cf.apache. (Closes: #235537)
  * Rune Nordbøe Skillingstad
    - Restart nscd
    - Fixed bug: /etc/dhcp3 was not created in install in Makefile
    - Moved /etc/mailcap to /lib/mime/packages/debian-edu-mailcap and using
      update-mime in postinst script
    - Package now depends on mime-support.

 -- Petter Reinholdtsen <pere@debian.org>  Mon,  1 Mar 2004 17:28:06 +0100

debian-edu-config (0.362) unstable; urgency=low

  * Ragnar Wisløff
    - Added cf.nagios and changes to cfengine.conf to include cf.nagios
  * Rune Nordbøe Skillingstad
    - Moved mime.types from cf.apache to cf.mime-support
    - Added rewriting of apache to cf.apache

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 29 Feb 2004 17:06:43 +0100

debian-edu-config (0.361) unstable; urgency=low

  * Rune Nordbøe Skillingstad
    - Fixed wrong loggin in bind9 configuration
    - Moved restarting of services from cf-files to
      skolelinux-restart-services
    - Moved skolelinux-test-install and skolelinux-restart-services
      here from debian-edu-install
    - No more initializing of LDAP if data exists
  * Ragnar Wisløff
    - Changed default kernel for thin clients to PXE

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 29 Feb 2004 15:42:13 +0100

debian-edu-config (0.360) unstable; urgency=low

  * Alex Brasetvik
    - New netgroups infrastructure.
  * Petter Reinholdtsen
    - Get rid of warning message if the user isn't allowed access to
      the sound device (artsmessagerc) and dialog box on initial login
      asking about default configuration (kpersonalizerrc).
    - Avoid confusing users about the disabled ssh tunneling
      script. (Closes: #233174)
  * Rune Nordbøe Skillingstad
    - Added ltsp network in acl for squid
    - Changed to use bind9

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 28 Feb 2004 17:42:09 +0100

debian-edu-config (0.359) unstable; urgency=low

  * Make sure /etc/default/update-hostname is created when needed.
  * Move named configuration from /etc/bind/ to /etc/bind/debian-edu/,
    to reduce the chance of a name conflict with existing zone
    files.  (Closes: #232805)

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 15 Feb 2004 15:43:26 +0100

debian-edu-config (0.358) unstable; urgency=low

  * Petter Reinholdtsen
    - Convert init.d/start-wlan to POSIX sh notation.
    - Make sure init.d/update-hostname is enabled for all profiles
      except the main-server profile.
  * Bart Cornelis
    - Changed occurences of devel@skolelinux.no to debian-edu@l.d.o
      everywhere.
  * Finn-Arne Johansen
    - Include sbin/logoutkill.sh and sbin/nightkill.sh in
      the package.

 -- Petter Reinholdtsen <pere@debian.org>  Sun, 15 Feb 2004 11:18:37 +0100

debian-edu-config (0.357) unstable; urgency=low

  * Make sure it is safe to run 'init.d/enable-nat start' several times.

 -- Petter Reinholdtsen <pere@debian.org>  Sat,  7 Feb 2004 20:49:18 +0100

debian-edu-config (0.356) unstable; urgency=low

  * Petter Reinholdtsen
    - Return 0 and not 5 from init.d scripts if the service is
      unavailable to avoid errors in Debian.  The LSM specify 5 as the
      return value, but this give warnings from invoke-rc.d in Debian
      Woody.
    - Fix typo in init.d/enable-nat.
    - Make sure init.d/update-hostname is disabled by default.
    - Avoid error message from mii-tool in init.d/start-wlan.

 -- Petter Reinholdtsen <pere@debian.org>  Sat,  7 Feb 2004 20:27:39 +0100

debian-edu-config (0.355) unstable; urgency=low

  * Petter Reinholdtsen
    - Improve init.d/ltspnet-nat, making sure it enables IPv4
      forwarding if it isn't enabled already.
    - Improve Linux Software Base complience for all init.d scripts.
    - Include init.d/backdoor and init.d/wlan in package.
    - Use dh_installinit to install and enable init.d scripts.  This
      gets rid of some lintian warnings

 -- Petter Reinholdtsen <pere@debian.org>  Sat,  7 Feb 2004 19:53:48 +0100

debian-edu-config (0.354) unstable; urgency=low

  * Petter Reinholdtsen
    - Improve init.d/ltspnet-nat.  Add 'restart' and 'status'
      arguments.  Make it possible to override the default
      configuration using /etc/default/ltspnet-nat.
    - Add depends on iptables as init.d/ltspnet-nat need it.

 -- Petter Reinholdtsen <pere@debian.org>  Sat,  7 Feb 2004 10:07:46 +0100

debian-edu-config (0.353) unstable; urgency=medium

  * Petter Reinholdtsen
    - Make sure bin/update-ini-file handle missing files by creating
      them first, and then leave it to Config::IniFiles to update the
      content.
    - Change Build-Depends to Build-Depends-Indep as this package is
      architecture 'all'.
    - Add Andreas Schuldei as uploader.

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 31 Jan 2004 20:19:56 +0100

debian-edu-config (0.352) unstable; urgency=medium

  * Petter Reinholdtsen
    - Jump to version number to 0.352 make sure it is higher than the
      version used in Skolelinux / Woody (0.351.skolelinux.#).
    - Fixed several syntax errors in ldap-bootstrap/root.ldif: All
      lisAclGroups needed a 'member' attribute, the Variables object
      was listed twice, and the cn and dn of object 'juadmins' was not
      the same.
    - Made sure all groups are object class posixGroup.
    - Reordered objectClass specifiers to make sure all objects use
      the same order; top, RFC-standardized groups, and site-specific
      groups.
    - Make sure ldap-skolelinux-install exit on first error, to try to
      detect if it fail.
    - Rewrite update-ini-file from using libconfig-ini-perl to using
      libconfig-inifiles-perl, to get a dependency which exist both in
      Woody and Sarge.
  * Per Harald Westby
    - cf.apache adds entries for OpenOffice.org document types
      to /etc/mime.types
  * Finn-Arne Johansen
    - Added scripts to remove stray processes.  One for logout
      (logoutkill.sh), and one for a nightly cron task (nightkill.sh).
    - Added script apt-get-update-files-download that gives somewhat a
      better message whenever there is new packages waiting to be
      installed.

 -- Petter Reinholdtsen <pere@debian.org>  Fri, 30 Jan 2004 22:46:09 +0100

debian-edu-config (0.1) unstable; urgency=low

  * Initial upload, based on the current Skolelinux version 0.350-7.

 -- Petter Reinholdtsen <pere@debian.org>  Sat, 17 Jan 2004 16:00:09 +0100
