Re: IRC meeting
Hi, On Dienstag, 8. Juni 2010, Daniel Hess wrote: So I've set up a doodle poll to find a date and a time for another meeting. Please go to http://doodle.com/d8cbmgrt38b69tb6 and indicate which date+time works for you. Could you tell us which timezone the poll uses? CEST. I'm a bit surprised that this poll doesnt support different timezones. I've seen doodle-polls where one can vote in ones own timezone and also cast traffic-light votes (green, yellow, red) instead of yes+no as this poll has. cheers, Holger signature.asc Description: This is a digitally signed message part.
Draft script to migrate LDAP entries from Etch to Lenny
Bjarne at Skolelinux Drift asked me how to migrate the LDAP database
from Etch to Lenny, and one approach I would like to test is to write
a script that connects to both LDAP databases, and let it read from
one and insert into another.
I've written a draft script, but am unsure if there is more than
users, groups, netgroups and automounts that should be copied, and if
there are some transformations that should be done on the LDAP
objects. User, group and netgroup objects seem to be identical in
Etch and Lenny, but I am unsure if other objects have changed.
Perhaps instead just all objects not already in the Lenny database
should be copied instead of limiting it to only some objectclasses?
Anyway, here is a draft script. Completely untested, and with
hardcoded host names and password strings. I very much welcome
feedback on the approach.
#!/usr/bin/perl
#
# Script to migrate LDAP objects from a Debian Edu Etch database to an
# Lenny database.
#
# The user and group objects in Etch and Lenny are identical, so no
# editing is required to migrate these.
#
# http://quark.humbug.org.au/publications/ldap/ldap_tut.html
use strict;
use warnings;
use Net::LDAP;
use Data::Dumper;
my $etchserver = localhost; # drift.slxdrift.no
my $lennyserver = localhost;
my $base = dc=skole,dc=skolelinux,dc=no;
my $manager = cn=admin,ou=People,$base;
my $password = 'secret';
my $uid = test;
my $ldapetch = Net::LDAP-new($etchserver)
or die Can't bind to ldap server $etchserver: $!\n;
$ldapetch-bind;
my $ldaplenny = Net::LDAP-new($lennyserver)
or die Can't bind to ldap: $!\n;
$ldaplenny-start_tls();
$ldaplenny-bind(
dn = $manager,
password = $password,
);
migrate_users($ldapetch, $ldaplenny);
migrate_groups($ldapetch, $ldaplenny);
$ldaplenny-unbind;
$ldapetch-unbind;
sub copy_ldap_objects {
my ($ldapetch, $ldaplenny, $filter) = @_;
my($mesg) = $ldapetch-search( base = $base, filter = $filter);
$mesg-code die $mesg-error;
foreach my $entry ($mesg-all_entries) {
$entry-dump;
# print Dumper($entry);
my $dn = $entry-dn;
my $filter = ((objectclass=posixAccount)(dn=$dn));
print F: $filter $dn\n;
my $mesg = $ldaplenny-search( base = $base, filter = $filter);
my $exist = 0 $mesg-count;
if (!$exist) {
#my $result = $entry-update($ldaplenny);
#$result-code warn failed to add entry: , $result-error;
print Want to add LDAP object:\n;
$entry-dump;
} else {
print Object for $dn exist, not adding\n;
}
}
}
sub migrate_users {
my ($ldapetch, $ldaplenny) = @_;
copy_ldap_objects($etchldap, $lennyldap, '(objectclass=posixAccount)');
}
sub migrate_groups {
my ($ldapetch, $ldaplenny) = @_;
copy_ldap_objects($etchldap, $lennyldap, '(objectclass=posixGroup)');
}
sub migrate_netgroups {
my ($ldapetch, $ldaplenny) = @_;
copy_ldap_objects($etchldap, $lennyldap, '(objectclass=nisNetgroup)');
}
sub migrate_automounts {
my ($ldapetch, $ldaplenny) = @_;
copy_ldap_objects($etchldap, $lennyldap, '(objectclass=automount)');
}
Happy hacking,
--
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100609120515.gf18...@login1.uio.no
Re: Getting d-i to find firmware on the CD generated by debian-cd
On Thu, May 27, 2010 at 03:17:08PM +0100, Steve McIntyre wrote: On Sat, May 22, 2010 at 06:58:52PM +0200, Petter Reinholdtsen wrote: I've added code into debian-cd to generate images with firmware on the first CD. Add FORCE_FIRMWARE=1 in CONF.sh. I've also tweaked the build scripts so that we'll start generating them. I can see that I've got all the firmware debs in /firmware in the ISO, but I don't see any feedback to suggest that the installer is picking up on them. Test images available at http://cdimage.debian.org/cdimage/daily-builds/sid_d-i/20100527-7/i386/iso-cd/firmware-testing-i386-netinst.iso http://cdimage.debian.org/cdimage/daily-builds/sid_d-i/20100527-7/amd64/iso-cd/firmware-testing-amd64-netinst.iso in case anybody else wants to help testing them. I've still got a couple more things to decide about these new firmware-included images even once we've got these working: * where exactly to put them on cdimage (for now they're alongside the normal images) * how to describe them in the README on the disc. For now I've added: This disc includes non-free firmware files to make installation easier on some systems. See http://wiki.debian.org/Firmware for more details. but I'm open to suggestions for something better. No responses yet. Anyone??? -- Steve McIntyre, Cambridge, UK.st...@einval.com ...In the UNIX world, people tend to interpret `non-technical user' as meaning someone who's only ever written one device driver. -- Daniel Pead -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100609121627.gb6...@einval.com
Bug#584109: marked as done (libpam-mklocaluser)
Your message dated Wed, 9 Jun 2010 18:01:17 +0200 with message-id 20100609160117.ga20...@login2.uio.no and subject line Re: Bug#584109: libpam-mklocaluser has caused the Debian Bug report #584109, regarding libpam-mklocaluser to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 584109: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=584109 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ---BeginMessage--- Package: libpam-mklocaluser Version: 0.3 Severity: important User: debian-edu@lists.debian.org UserTags: debian-edu Today, the pam module check if the user logging in have a home directory in /home/ before createing a local user. This can some times lead to cron jobs doing for example 'su nobody' to create a duplicate user for nobody with a home directory in /home/. The pam module should be changed to make sure the user logging in is not listed in /etc/passwd before creating a local user and a local home directory. Happy hacking, -- Petter Reinholdtsen ---End Message--- ---BeginMessage--- Version: 0.4 [Petter Reinholdtsen] The pam module should be changed to make sure the user logging in is not listed in /etc/passwd before creating a local user and a local home directory. This was fixed in version 0.4, but we forgot to close this bug. Happy hacking, -- Petter Reinholdtsen ---End Message---
RE: Draft script to migrate LDAP entries from Etch to Lenny
[Petter Reinholdtsen - Wednesday, June 09, 2010 3:05 PM] ... to migrate the LDAP database from Etch to Lenny... I've written a draft script, but am unsure if there is more than users, groups, netgroups and automounts that should be copied, and if there are some transformations that should be done on the LDAP objects. User, group and netgroup objects seem to be identical in Etch and Lenny, but I am unsure if other objects have changed. Hi, perhaps the wiki page on Etch upgrade to Lenny would help, though kind of the other way around. http://wiki.debian.org/DebianEdu/Documentation/Lenny/Upgrades Happy hacking, Yourself, Odd. -- To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/375babd1be9245c88a8b72f29c9d6...@static00
