Re: r74053 - in trunk/src/debian-edu-config: cf debian etc/bind ldap-bootstrap

[Andreas B. Mundt]

Hi Mike,

On Sun, Sep 04, 2011 at 09:57:25PM +0200, Mike Gabriel wrote:

 Also: on diskless workstations the preseeding values for krb5-config
 do not all ,,arrive'', only the default_realm is set, but not the
 INTERN = {servers} server definitions... That's why I chose
 cfengine in the first place...
 

The INTERN = {servers} is only needed if you want to use kadmin on
that machine.  Authentication works fine without, the information is
fetched from DNS.

Best regards,   

 Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110905085041.GB4333@flashgordon

Re: r74053 - in trunk/src/debian-edu-config: cf debian etc/bind ldap-bootstrap

[Mike Gabriel]

Hi Andi,

On So 04 Sep 2011 21:26:40 CEST Andreas B. Mundt wrote:



I think this should be done by preseeding:

  krb5-config krb5-config/dns_for_default boolean true

We have:

  krb5-config krb5-config/dns_for_default boolean false

in debian-edu-install/preseed-values/defaults.networked, i.e. we
should change this.  I have a setup with Kerberos clients running fine
here with only preseeding krb5-config.
Adding 'allow_weak_crypto = true' was needed for NFS (which should be
in place already).


I think you are right, but I have just shortly looked in the  
krb5-config package and it does not open up to me immediately. There  
are quite a few variables for krb5-config package.


If you have a running setup, do you think you could commit the needed  
changes? That would be great.


Also: on diskless workstations the preseeding values for krb5-config  
do not all ,,arrive'', only the default_realm is set, but not the  
INTERN = {servers} server definitions... That's why I chose cfengine  
in the first place...


Greets,
Mike


--

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb


pgpuwMOF7ZQxL.pgp
Description: Digitale PGP-Unterschrift