The automatic test of the installation in Debian Edu is very good to have to detect problems with the system. It run on the first boot in test installations (installs using a *-test repository), and try to ensure that all services and setup is as it should be.
I've added heaps of more tests to detect the problems I have found during my work on the Squeeze version, and been able to fix some of them. But some remains, and I am sure there are also heaps of undetected problems yet to find. :) Anyway, to give you an idea of the errors currently detected, and ask for help, here is the output from 'grep error: /var/log/installer/debian-edu-install-testsute': error: ./cups: URL 'https://www:631/' is not working. error: ./cups: URL 'https://localhost:631/' is not working. error: ./ldap-client: Not only one PAM module of krb5, ldap and sss is enabled error: ./ldap-client: LDAP cert checking turned off in /etc/ldap/ldap.conf error: ./ldap-client: LDAP cert checking turned off in /etc/nslcd.conf error: ./taskpkgs: Package jackd in task education-workstation is not installed! The cups issues is some SSL certificate problem. Both firefox and wget refuses to visit the https entry point. The first ldap-client issue is caused by nslcd, and can either be fixed by changing nslcd, adding code to our installer to purge libpam-ldapd during installation or by switching to libnss-sss (require sssd to get support for netgroups - expected to show up in 30-60 days). The two certificate problems with LDAP are just symptoms, and not the real problem. The real problem is that neither ldapsearch nor nslcd is able to do certificate checking with the self signed certificate with have given the LDAP server. Because of this, certificate checking is turned off, but we really should find a way to turn it on again to ensure the clients talk to the correct LDAP server. The last problem is caused by the jackd transition going in progress, but can also be said to be caused by tasksel using aptitude and not apt-get to install packages, as apt-get is able to install jackd1 to fulfill the jackd dependency, while aptitude refuses to install jackd at all. I hope the jackd transition is finished soon, as people are working actively to fix the remaining issues. Anyway, would be nice if someone have time to look at the SSL/TLS issues with cups and slapd, and see if we can get encryption working. I got one suggestion to use the gnutls tools to generate the certificate instead of the openssl tools we use at the moment, but have not investigated how to do that nor if it work. Happy hacking, -- Petter Reinholdtsen -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected] Archive: http://lists.debian.org/[email protected]
