Re: Debian Edu Buster manual: another round of translation updates
Hi Rafael,
Rafael Rivas schreef op wo 10-04-2019 om 08:34 [-0600]:
> Hi Frans,
>
> I'm currently working offline the translation, not sure how much it
> can be changed since the one i downloaded to work (March 4th) with
> the current version. If there is no significant difference, i'll
> continue to working on it and send to the list with my advances next
> week.
Great.
>
> If the changes are bigger, then please provide me the new .po file to
> work on it.
If I would send you a new es.po file (as it can be found in debian-edu-
doc git repo) compiled against the most recent .pot file, all your work
so far would be lost.
Better would be that I send you the most recent .pot and that you
recompile your so far translated .po file against it.
This is the relevant command for you to use:
$ msgmerge -U <your so far translated .po file> <brand new .pot file>
Please find attached the most recent .pot
I hope this helps.
If not, I am willing to do this for you. But then you should send me
your so far translated .po.
--
Kind regards,
Frans Spiesschaert
# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Free Software Foundation, Inc.
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: PACKAGE VERSION\n"
"POT-Creation-Date: 2019-04-06 10:33+0000\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#. type: Attribute 'lang' of: <article>
msgid "en"
msgstr ""
#. type: Content of: <article><articleinfo><title>
msgid "Debian Edu / Skolelinux Buster 10+edu0 Manual 2019-05-01"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Manual for Debian Edu 10+edu0 Codename Buster"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/23-Tjener-Login.png"
msgstr ""
#. type: Content of: <article><section><para><inlinemediaobject><textobject><phrase>
msgid "Debian Edu login"
msgstr ""
#. type: Content of: <article><section><para>
msgid "This is the manual for the Debian Edu Buster 10+edu0 release."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The version at <ulink url=\"http://wiki.debian.org/DebianEdu/Documentation/";
"Buster\"/> is a wiki and updated frequently."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"<link linkend=\"Translations\">Translations</link> are part of the "
"<computeroutput>debian-edu-doc</computeroutput> package which can be "
"installed on a webserver, and is available <ulink url=\"https://jenkins.";
"debian.net/userContent/debian-edu-doc/\">online</ulink>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "About Debian Edu and Skolelinux"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Debian Edu aka Skolelinux is a Linux distribution based on Debian providing "
"an out-of-the box environment of a completely configured school network."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The chapters about <link linkend=\"Requirements\">hardware and network "
"requirements</link> and about the <link linkend=\"Architecture"
"\">architecture</link> contain basic environment details."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"After installation of a main server all services needed for a school network "
"are set up and the system is ready to be used. Only users and machines need "
"to be added via GOsa², a comfortable Web-UI, or any other LDAP editor. A "
"netbooting environment using PXE has also been prepared, so after initial "
"installation of the main server from CD, Blu-ray disc or USB flash drive all "
"other machines can be installed via the network, this includes \"roaming "
"workstations\" (ones that can be taken away from the school network, usually "
"laptops or netbooks) as well as PXE booting for diskless machines like "
"traditional thin clients."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Several educational applications like GeoGebra, Kalzium, KGeography, GNU "
"Solfege and Scratch are included in the default desktop setup, which can be "
"extended easily and almost endlessly via the Debian universe."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Some history and why two names"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<ulink url=\"http://www.skolelinux.org\";>Skolelinux</ulink> is a Linux "
"distribution created by the Debian Edu project. As a <ulink url=\"http://";
"wiki.debian.org/DebianPureBlends\">Debian Pure Blends</ulink> distribution "
"it is an official <ulink url=\"http://www.debian.org\";>Debian</ulink> "
"subproject."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"What this means for your school is that Skolelinux is a version of Debian "
"providing an out-of-the box environment of a completely configured school-"
"network."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The Skolelinux project in Norway was founded on July 2nd 2001 and about the "
"same time Raphaël Hertzog started Debian-Edu in France. Since 2003 both "
"projects are united, but both names stayed. \"Skole\" and "
"(Debian-)\"Education\" are just two well understood terms in these regions."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The main target group in Norway initially were schools serving the 6-16 "
"years age bracket. Today the system is in use in several countries around "
"the world, with most installations in Norway, Spain, Germany and France."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Architecture"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"This section of the document describes the network architecture and services "
"provided by a Skolelinux installation."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Network"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/Debian_Edu_Network_Buster.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "The Debian Edu network topology"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The figure is a sketch of the assumed network topology. The default setup of "
"a Skolelinux network assumes that there is one (and only one) main server, "
"while allowing the inclusion of both normal workstations and LTSP servers "
"(with associated thin clients and/or diskless workstations). The number of "
"workstations can be as large or small as you want (starting from none to a "
"lot). The same goes for the LTSP servers, each of which is on a separate "
"network so that the traffic between the clients and the LTSP server doesn't "
"affect the rest of the network services. LTSP is explained in detail in "
"<link linkend=\"NetworkClients\">the related HowTo</link> chapter."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The reason that there can only be one main server in each school network is "
"that the main server provides DHCP, and there can be only one machine doing "
"so in each network. It is possible to move services from the main server to "
"other machines by setting up the service on another machine, and "
"subsequently updating the DNS configuration, pointing the DNS alias for that "
"service to the right computer."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In order to simplify the standard setup of Skolelinux, the Internet "
"connection runs over a separate router, also called gateway. See the <link "
"linkend=\"Requirements--Internet_router\">Internet router</link> chapter for "
"details how to set up such a gateway if it is not possible to configure an "
"existing one as needed."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "The default network setup"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"DHCP on the main server serves the 10.0.0.0/8 network, providing a PXE boot "
"menu where you can choose whether to install a new server/workstation, boot "
"a thin client or a diskless workstation, run memtest, or boot from the local "
"hard disk."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This is designed to be modified; for details, see <link linkend="
"\"NetworkClients--Configuring_the_PXE_menu\">the related HowTo</link> "
"chapter."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"DHCP on the LTSP servers only serves a dedicated network on the second "
"interface (192.168.0.0/24 and 192.168.1.0/24 are preconfigured options) and "
"should seldom need to be changed."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "The configuration of all subnets is stored in LDAP."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Main server (tjener)"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A Skolelinux network needs one main server (also called \"tjener\" which is "
"Norwegian and means \"server\") which per default has the IP address "
"10.0.2.2 and is installed by selecting the Main Server profile. It's "
"possible (but not required) to also select and install the LTSP Server and "
"Workstation profiles in addition to the Main Server profile."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Services running on the main server"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"With the exception of the control of the thin clients, all services are "
"initially set up on one central computer (the main server). For performance "
"reasons, the LTSP server(s) should be separate (though it is possible to "
"install both the Main Server and LTSP Server profiles on the same machine). "
"All services are allocated a dedicated DNS-name and are offered exclusively "
"over IPv4. The allocated DNS name makes it easy to move individual services "
"from the main server to a different machine, by simply stopping the service "
"on the main server, and changing the DNS configuration to point to the new "
"location of the service (which should be set up on that machine first, of "
"course)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To ensure security all connections where passwords are transmitted over the "
"network are encrypted, so no passwords are sent over the network as plain "
"text."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Below is a table of the services that are set up by default in a Skolelinux "
"network and the DNS name of each service. If possible all configuration "
"files will refer to the service by name (without the domain name) thus "
"making it easy for schools to change either their domain (if they have an "
"own DNS domain) or the IP addresses they use."
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Table of services</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Service description</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Common name</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">DNS service name</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Centralised Logging"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "rsyslog"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "syslog"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Domain Name Service"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "DNS (BIND)"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "domain"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Automatic Network Configuration of Machines"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "DHCP"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "bootps"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Clock Synchronisation"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "NTP"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ntp"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Home Directories via Network File System"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "SMB / NFS"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "homes"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Electronic Post Office"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "IMAP (Dovecot)"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "postoffice"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Directory Service"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "OpenLDAP"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ldap"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "User Administration"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "GOsa²"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "---"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Web Server"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Apache/PHP"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "www"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Central Backup"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "sl-backup, slbackup-php"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "backup"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Web Cache"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Proxy (Squid)"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "webcache"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Printing"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "CUPS"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ipp"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Secure Remote Login"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "OpenSSH"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ssh"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Automatic Configuration"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "CFEngine"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "cfengine"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "LTSP Server/s"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "LTSP"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ltsp"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Network Block Device Server"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "NBD"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid ""
"Machine and Service Surveillance with Error Reporting, plus Status and "
"History on the Web. Error Reporting by email"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Munin, Icinga and Sitesummary"
msgstr ""
#. type: Content of: <article><section><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "sitesummary"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Personal files for each user are stored in their home directories, which are "
"made available by the server. Home directories are accessible from all "
"machines, giving users access to the same files regardless of which machine "
"they are using. The server is operating system agnostic, offering access via "
"NFS for Unix clients, SMB for Windows and Macintosh clients."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"By default email is set up for local delivery (i.e. within the school) only, "
"though email delivery to the wider Internet may be set up if the school has "
"a permanent Internet connection. Clients are set up to deliver mail to the "
"server (using 'smarthost'), and users can <link linkend=\"Users--Using_email"
"\">access their personal mail</link> through IMAP."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"All services are accessible using the same username and password, thanks to "
"the central user database for authentication and authorisation."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To increase performance on frequently accessed sites a web proxy that caches "
"files locally (Squid) is used. In conjunction with blocking web-traffic in "
"the router this also enables control of Internet access on individual "
"machines."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Network configuration on the clients is done automatically using DHCP. All "
"types of clients can be connected to the private 10.0.0.0/8 subnet and will "
"get according IP addresses; LTSP clients should be connected to the "
"corresponding LTSP server via the separate subnet 192.168.0.0/24 (this is to "
"ensure that the network traffic of the LTSP clients doesn't interfere with "
"the rest of the network services)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Centralised logging is set up so that all machines send their syslog "
"messages to the server. The syslog service is set up so that it only accepts "
"incoming messages from the local network."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"By default the DNS server is set up with a domain for internal use only (*."
"intern), until a real (\"external\") DNS domain can be set up. The DNS "
"server is set up as caching DNS server so that all machines on the network "
"can use it as the main DNS Server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Pupils and teachers have the ability to publish websites. The web server "
"provides mechanisms for authenticating users, and for limiting access to "
"individual pages and subdirectories to certain users and groups. Users will "
"have the ability to create dynamic web pages, as the web server will be "
"programmable on the server side."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Information on users and machines can be changed in one central location, "
"and is made accessible to all computers on the network automatically. To "
"achieve this a centralised directory server is set up. The directory will "
"have information on users, user groups, machines, and groups of machines. To "
"avoid user confusion there won't be any difference between file groups, "
"mailing lists, and network groups. This implies that groups of machines "
"which are to form network groups will use the same namespace as user groups "
"and mailing lists."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Administration of services and users will mainly be via the web, and follow "
"established standards, functioning well in the web browsers which are part "
"of Skolelinux. The delegation of certain tasks to individual users or user "
"groups will be made possible by the administration systems."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In order to avoid certain problems with NFS, and to make it simpler to debug "
"problems, the different machines need synchronised clocks. To achieve this "
"the Skolelinux server is set up as a local Network Time Protocol (NTP) "
"server, and all workstations and clients are set up to synchronise with the "
"server. The server itself should synchronise its clock via NTP against "
"machines on the Internet, thus ensuring the whole network has the correct "
"time."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Printers are connected where convenient, either directly onto the main "
"network, or connected to a server, workstation or LTSP server. Access to "
"printers can be controlled for individual users according to the groups they "
"belong to; this will be achieved by using quota and access control for "
"printers."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "LTSP server(s)"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A Skolelinux network can have many LTSP servers (which we called \"thin "
"client servers\" in releases before Stretch), which are installed by "
"selecting the LTSP Server profile."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The LTSP servers are set up to receive syslog from thin clients and "
"workstations, and forward these messages to the central syslog recipient."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Please note:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Thin clients are using the programs installed on the server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Diskless workstations are using the programs installed in the server's LTSP "
"chroot."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"For LTSP clients a more lightweight desktop environment should be used; this "
"can be set at installation time, see the <link linkend=\"Installation--"
"Desktop_choice\">Installation chapter</link> for details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The client root filesystem is provided using NBD (Network Block Device). "
"After each modification to the LTSP chroot the related NBD image has to be "
"re-generated; run <computeroutput>ltsp-update-image</computeroutput> on the "
"LTSP server."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Thin clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A thin client setup enables ordinary PCs to function as (X-)terminals. This "
"means that the machine boots directly from the server using PXE without "
"using the local client hard drive. The thin client setup used is that of the "
"Linux Terminal Server Project (LTSP)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Thin clients are a good way to make use of older, weaker machines as they "
"effectively run all programs on the LTSP server. This works as follows: the "
"service uses DHCP and TFTP to connect to the network and boot from the "
"network. Next, the file system is mounted from the LTSP server using NBD, "
"and finally the X Window System is started. The display manager (LDM) "
"connects to the LTSP server via SSH with X-forwarding. This way all data is "
"encrypted on the network."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Diskless workstations"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For diskless workstations the terms \"stateless workstations\", \"lowfat "
"clients\" or \"half-thick clients\" are also used. For the sake of clarity "
"this manual sticks to the term \"diskless workstations\"."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A diskless workstation runs all software on the PC without a locally "
"installed operating system. This means that client machines boot directly "
"from the server's hard drive without running software installed on a local "
"hard drive."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Diskless workstations are an excellent way of reusing older (but powerful) "
"hardware with the same low maintenance cost as with thin clients. Software "
"is administered and maintained on the server with no need for local "
"installed software on the clients. Home directories and system settings are "
"stored on the server too."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Networked clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The term \"networked clients\" is used in this manual to refer to both thin "
"clients and diskless workstations, as well as computers running Mac OS or "
"Windows."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Administration"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"All the Linux machines that are installed with the Skolelinux installer will "
"be administrable from a central computer, most likely the server. It will be "
"possible to log in to all machines via SSH, and thereby have full access to "
"the machines. As root one needs to run <computeroutput>kinit</"
"computeroutput> first to get a Kerberos TGT."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"All user information is kept in an LDAP directory. Updates of user accounts "
"are made against this database, which is used by the clients for user "
"authentication."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Installation"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Currently there are two kinds of installation media images: netinst and BD. "
"Both images can also be booted from USB sticks."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The aim is to be able to install a server from any type of medium once, and "
"install all other clients over the network by booting from the network."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Only the netinstall image needs access to the Internet during installation."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The installation should not ask any questions, with the exception of desired "
"language (e.g. Norwegian Bokmål, Nynorsk, Sami) and machine profile (main "
"server, workstation, LTSP server, ...). All other configuration will be set "
"up automatically with reasonable values, to be changed from a central "
"location by the system administrator subsequent to the installation."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "File system access configuration"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Each Skolelinux user account is assigned a section of the file system on the "
"file server. This section (home directory) contains the user's configuration "
"files, documents, email and web pages. Some of the files should be set to "
"have read access for other users on the system, some should be readable by "
"everyone on the Internet, and some should not be accessible for reading by "
"anyone but the user."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To ensure that all disks that are used for user directories or shared "
"directories can be uniquely named across all the computers in the "
"installation, they can be mounted as <computeroutput>/skole/host/directory/</"
"computeroutput>. Initially, one directory is created on the file server, "
"<computeroutput>/skole/tjener/home0/</computeroutput>, in which all the user "
"accounts are created. More directories may then be created when needed to "
"accommodate particular user groups or particular patterns of usage."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To enable shared access to files under the normal UNIX permissions system, "
"users need to be in supplementary shared groups (such as \"students\") as "
"well as the personal primary group that they're in by default. If users have "
"an appropriate umask to make newly created items group-accessible (002 or "
"007), and if the directories they're working in are setgid to ensure the "
"files inherit the correct group-ownership, the result is controlled file "
"sharing between the members of a group."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The initial access settings for newly created files are a matter of policy. "
"The Debian default umask is 022 (which would not allow group-access as "
"described above), but Debian Edu uses a default of 002 - meaning that files "
"are created with read access for everybody, which can later be removed by "
"explicit user action. This can alternatively be changed (by editing "
"<computeroutput>/etc/pam.d/common-session</computeroutput>) to a umask of "
"007 - meaning read access is initially blocked, necessitating user action to "
"make them accessible. The first approach encourages knowledge sharing, and "
"makes the system more transparent, whereas the second method decreases the "
"risk of unwanted spreading of sensitive information. The problem with the "
"first solution is that it is not apparent to the users that the material "
"they create will be accessible to all other users. They can only detect this "
"by inspecting other users' directories and seeing that their files are "
"readable. The problem with the second solution is that few people are likely "
"to make their files accessible, even if they do not contain sensitive "
"information and the content would be helpful to inquisitive users who want "
"to learn how others have solved particular problems (typically configuration "
"issues)."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Requirements"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"There are different ways of setting up a Skolelinux solution. It can be "
"installed on just one standalone PC, or as a region-wide solution at many "
"schools operated centrally. This flexibility makes a huge difference to the "
"configuration of network components, servers and client machines."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Hardware requirements"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The purpose of the different profiles is explained in the <link linkend="
"\"Architecture\">network architecture</link> chapter."
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><itemizedlist><listitem><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/alert.png"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para><inlinemediaobject><textobject><phrase>
msgid "/!\\"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If LTSP is intended to be used, take a look at the <ulink url=\"https://wiki.";
"debian.org/LTSP/Ltsp%20Hardware%20Requirements\">LTSP Hardware Requirements "
"wiki page</ulink>."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"The computers running Debian Edu / Skolelinux must have either 32 bit "
"(Debian architecture 'i386', oldest supported processors are 686 class ones) "
"or 64 bit (Debian architecture 'amd64') x86 processors."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"At least 12 GiB RAM for 30 thin clients and 20 GiB RAM for 50-60 thin "
"clients are recommended for the main and LTSP server profiles."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Thin clients with only 256 MiB RAM and 400 MHz are possible, though more RAM "
"and faster processors are recommended."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Swapping over the network is automatically enabled for LTSP clients; the "
"swap size is 512 MiB, and if you need more you can tune this by editing "
"<computeroutput>/etc/ltsp/nbdswapd.conf</computeroutput> on tjener to set "
"the SIZE variable."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"If your diskless workstations have hard drives, it is recommended to use "
"them for swap as it is a lot faster than network swapping."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"For workstations, diskless workstations and standalone systems, 1500 MHz and "
"1024 MiB RAM are the absolute minimum requirements. For running modern "
"webbrowsers and LibreOffice at least 2048 MiB RAM is recommended."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"On workstations with little RAM the spell checker might cause LibreOffice to "
"hang if the swap space is also too small. If this happens frequently the "
"spell checker can be disabled by system administrators."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"The minimum disk space requirements depend on the profile which is installed:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"combined main server + LTSP server: 70 GiB (plus additional space for user "
"accounts)."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LTSP server: 50 GiB."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "workstation or standalone: 30 GiB."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"LTSP servers need two network cards when using the default network "
"architecture:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "eth0 is connected to the main network (10.0.0.0/8),"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"eth1 is used for serving LTSP clients (192.168.0.0/24 as default), but <link "
"linkend=\"NetworkClients--Use_a_different_LTSP_client_network\">others are "
"possible</link>."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Laptops are movable workstations, so they have the same requirements as "
"workstations."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Hardware known to work"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A list of tested hardware is provided at <ulink url=\"http://wiki.debian.org/";
"DebianEdu/Hardware/\"/> . This list is not nearly complete"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/smile.png"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para><inlinemediaobject><textobject><phrase>
msgid ":)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<ulink url=\"http://wiki.debian.org/InstallingDebianOn\"/> is an effort to "
"document how to install, configure and use Debian on some specific hardware, "
"allowing potential buyers to know if that hardware is supported and existing "
"owners to know how get the best out of that hardware."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"An excellent database of hardware supported by Debian is online at <ulink "
"url=\"http://kmuto.jp/debian/hcl/\"/>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Requirements for network setup"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Default Setup"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "When using the default network architecture, these rules apply:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "You need exactly one main server, the tjener."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "You can have hundreds of workstations on the main network."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"You can have a lot of LTSP servers on the main network; two different "
"subnets are preconfigured (DNS, DHCP) in LDAP, more could be added."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"You can have hundreds of thin clients and/or diskless workstations on each "
"LTSP server network."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"You can have hundreds of other machines which will have dynamic IP addresses "
"assigned."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "For access to the Internet you need a router/gateway (see below)."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Internet router"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A router/gateway, connected to the Internet on the external interface and "
"running on the IP address 10.0.0.1 with netmask 255.0.0.0 on the internal "
"interface, is needed to connect to the Internet."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The router should not run a DHCP server, it can run a DNS server, though "
"this is not needed and will not be used."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In case you already have a router but are unable to configure it like needed "
"(not allowed to, technical reasons), a system with two network interfaces "
"could be turned into a gateway if the Debian Edu 'Minimal' profile is "
"installed."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "After the installation:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Adjust the /etc/network/interfaces file."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Change the hostname permanently to 'gateway'."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Enable IP forwarding and NAT for the 10.0.0.0/8 network."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "As an option install a firewall and / or a traffic shaping tool."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/sh\n"
" # Turn a system with profile 'Minimal' into a gateway/firewall. \n"
" #\n"
" sed -i 's/auto eth0/auto eth0 eth1/' /etc/network/interfaces\n"
" sed -i '/eth1/ s/dhcp/static/' /etc/network/interfaces\n"
" echo 'address 10.0.0.1' >> /etc/network/interfaces\n"
" echo 'netmask 255.0.0.0' >> /etc/network/interfaces\n"
" hostname -b gateway\n"
" hostname > /etc/hostname \n"
" service networking stop\n"
" service networking start\n"
" sed -i 's#NAT=#NAT=\"10.0.0.0/8\"#' /etc/default/enable-nat \n"
" service enable-nat restart\n"
" # You might want a firewall (shorewall or ufw) and traffic shaping.\n"
" #apt update\n"
" #apt install shorewall\n"
" # or\n"
" #apt install ufw\n"
" #apt install wondershaper"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you need something for an embedded router or accesspoint we recommend "
"using <ulink url=\"http://openwrt.org\";>OpenWRT</ulink>, though of course "
"you can also use the original firmware. Using the original firmware is "
"easier; using OpenWRT gives you more choices and control. Check the OpenWRT "
"webpages for a list of <ulink url=\"http://wiki.openwrt.org/toh/start";
"\">supported hardware</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is possible to use a different network setup (there is a <ulink url="
"\"http://wiki.debian.org/DebianEdu/HowTo/ChangeIpSubnet\";>documented "
"procedure</ulink> to do this), but if you are not forced to do this by an "
"existing network infrastructure, we recommend against doing so and recommend "
"you stay with the default <link linkend=\"Architecture\">network "
"architecture</link>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Installation and download options"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Where to find additional information"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"We recommend that you read or at least take a look at the <ulink url="
"\"http://www.debian.org/releases/buster/releasenotes\";>release notes for "
"Debian Buster</ulink> before you start installing a system for production "
"use. There is more information about the Debian Buster release available in "
"its <ulink url=\"http://www.debian.org/releases/buster/installmanual";
"\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Please give Debian Edu/Skolelinux a try, it should just work."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para><inlinemediaobject><textobject><phrase>
msgid ":-)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is recommended, though, to read the chapters about <link linkend="
"\"Requirements\">hardware and network requirements</link> and about the "
"<link linkend=\"Architecture\">architecture</link> before starting to "
"install a main server."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Be sure to also read the <link linkend=\"GettingStarted\">getting started</"
"link> chapter of this manual, as it explains how to log in for the first "
"time."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Download the installation media for Debian Edu 10+edu0 Codename Buster"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"All the Buster images are still under development - check <ulink url="
"\"https://wiki.debian.org/DebianEdu/Status/Buster\"/> if you are unsure "
"whether Buster has officially been released."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "amd64 or i386"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<computeroutput>amd64</computeroutput> and <computeroutput>i386</"
"computeroutput> are the names of two Debian architectures for x86 CPUs, both "
"are or have been build by AMD, Intel and other manufacturers. "
"<computeroutput>amd64</computeroutput> is a 64-bit architecture and "
"<computeroutput>i386</computeroutput> is a 32-bit architecture. New "
"installations today should be done using <computeroutput>amd64</"
"computeroutput>. <computeroutput>i386</computeroutput> should only be used "
"for old hardware."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "netinst iso images for amd64 or i386"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The netinst iso image can be used for installation from CD/DVD and USB flash "
"drives and is available for two Debian architectures: amd64 or i386. As the "
"name implies, internet access is required for the installation."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Once Buster has been released these images will be available for download "
"from:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://get.debian.org/cdimage/release/current/amd64/iso-cd/\"/>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://get.debian.org/cdimage/release/current/i386/iso-cd/\"/>"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "BD iso images for i386 or amd64"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This ISO image is approximately 5 GB large and can be used for installation "
"of amd64 or i386 machines, also without access to the Internet. Like the "
"netinst image it can be installed on USB flash drives or disk media of "
"sufficient size."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://get.debian.org/cdimage/release/current/amd64/iso-bd/\"/>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://get.debian.org/cdimage/release/current/i386/iso-bd/\"/>"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Verification of downloaded image files"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Detailed instructions for verifying these images are part of the <ulink url="
"\"https://www.debian.org/CD/faq/index.en.html#verify\";>Debian-CD FAQ</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Sources"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Sources are available from the Debian archive at the usual locations, "
"several media are linked on <ulink url=\"http://get.debian.org/cdimage/";
"release/current/source/\"/>"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Request a CD / DVD by mail"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"For those without a fast Internet connection, we can offer a CD or DVD sent "
"for the cost of the CD or DVD and shipping. Just send an email to <ulink url="
"\"mailto:cd@skolelinux.no\";>cd@skolelinux.no</ulink> and we will discuss the "
"payment details (for shipping and media)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Remember to include the address you want the CD or DVD to be sent to in the "
"email."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Installing Debian Edu"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"When you do a Debian Edu installation, you have a few options to choose "
"from. Don't be afraid; there aren't many. We have done a good job of hiding "
"the complexity of Debian during the installation and beyond. However, Debian "
"Edu is Debian, and if you want there are more than 57,000 packages to choose "
"from and a billion configuration options. For the majority of our users, our "
"defaults should be fine. Please note: if LTSP is intended to be used, choose "
"a lightweight desktop environment."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Main server installation scenarios"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"Typical school or home network with Internet access through a router "
"providing DHCP:"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Installation of a main server is possible, but after reboot there will be no "
"internet access (due to primary network interface IP 10.0.2.2/8)."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"See the <link linkend=\"Requirements--Internet_router\">Internet router</"
"link> chapter for details how to set up a gateway if it is not possible to "
"configure an existing one as needed."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Connect all components like shown in the <link linkend=\"Architecture--"
"Network\">architecture</link> chapter."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"The main server should have Internet connection once bootet the first time "
"in the correct environment."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"Typical school or institution network, similar to the one above, but with "
"proxy use required."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Add 'debian-edu-expert' to the kernel command line; see further below for "
"details how this is done."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Some additional questions must be answered, the proxy server related one "
"included."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"Network with router/gateway IP 10.0.0.1/8 (which does not provide a DHCP "
"server) and Internet access:"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"As soon as the automatic network configuration fails (due to missing DHCP), "
"choose manual network configuration."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Enter 10.0.2.2/8 as host IP"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Enter 10.0.0.1 as gateway IP"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Enter 8.8.8.8 as nameserver IP unless you know better"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid "The main server should just work after the first boot."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "Offline (no Internet connection):"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid "Use the BD ISO image."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid "Make sure all (real/virtual) network cables are unplugged."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Choose 'Do not configure the network at this time' (after DHCP failed to "
"configure the network and you pressed 'Continue')."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Update the system once bootet the first time in the correct environment with "
"Internet access."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Desktop choice"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"KDE and GNOME both have good language support, but too big a footprint for "
"both older computers and for LTSP clients."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"MATE is lighter than the two above, but is missing good language support for "
"several countries."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "LXDE has the smallest footprint and supports 35 languages."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"LXQt is a lightweight desktop (language support similar to LXDE) with a more "
"modern look and feel (based on Qt just like KDE)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Xfce has a slightly bigger footprint than LXDE but a very good language "
"support (106 languages)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Debian Edu as an international project has chosen to use Xfce as the default "
"desktop; see below how to set a different one."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Modular installation"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"When installing a system with profile <emphasis>Workstation</emphasis> "
"included, a lot of education related programs are installed. To install only "
"the basic profile, remove the <emphasis>desktop=xxxx</emphasis> kernel "
"command line param before starting the installation; see further below for "
"details how this is done. This allows one to install a site specific system "
"and could be used to speed up test installations."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Please note: If you want to install a desktop afterwards, don't use the "
"Debian Edu meta-packages like e.g. <ulink url=\"https://packages.debian.org/";
"stable/education-desktop-mate#\">education-desktop-mate</ulink> because "
"these would pull in all education related programs; rather install e.g. "
"<ulink url=\"https://packages.debian.org/stable/task-mate-desktop#\";>task-"
"mate-desktop</ulink> instead. One or more of the new school level related "
"meta-packages <emphasis>education-preschool</emphasis>, <emphasis>education-"
"primaryschool</emphasis>, <emphasis>education-secondaryschool</emphasis>, "
"<emphasis>education-highschool</emphasis> could be installed to match the "
"use case."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"For details about Debian Edu meta-packages, see the <ulink url=\"https://";
"blends.debian.org/edu/tasks/\">Debian Edu packages overview</ulink> page."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Installation types and options"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis>Installer boot menu on 64-bit Hardware</emphasis>"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/01-Installer_64bit_boot_menu.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "64-bit Installer boot menu"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Graphical install</emphasis> uses the GTK "
"installer where you can use the mouse."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis role=\"strong\">Install</emphasis> uses text mode."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Advanced options ></emphasis> gives a sub menu "
"with more detailed options to choose."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Help</emphasis> gives some hints on using the "
"installer; see screenshot below."
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/01a-Installer_64bit_advanced_options.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "64-bit Installer advanced options screen 1"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Back..</emphasis> brings back to the main menu."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Graphical expert install</emphasis> gives access "
"to all available questions, mouse usable."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Graphical rescue mode</emphasis> makes this "
"install medium become a rescue disk for emergency tasks."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Graphical automated install</emphasis> needs a "
"preseed file."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Expert install</emphasis> gives access to all "
"available questions in text mode."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Rescue mode</emphasis> text mode; makes this "
"install medium become a rescue disk for emergency tasks."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Automated install</emphasis> text mode; needs a "
"preseed file."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis>Help screen</emphasis>"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/01c-Installer_help.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Installer help screen"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This Help screen is self explaining and enables the <F>-keys on the "
"keyboard for getting more detailed help on the topics described."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis>Add or change boot parameters for installations</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In both cases, boot options can be edited by pressing the TAB key in the "
"boot menu; the screenshot shows the command line for <emphasis role=\"strong"
"\">Graphical install</emphasis>."
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/01b-Installer_64bit_command_line.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Edit command line options"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"You can use an existing HTTP proxy service on the network to speed up the "
"installation of the main server profile from CD. Add e.g. "
"<computeroutput>mirror/http/proxy=http://10.0.2.2:3128</computeroutput> as "
"an additional boot parameter."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"If you have already installed the main server profile on a machine, further "
"installations should be done via PXE, as this will automatically use the "
"proxy of the main server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"To install the <emphasis role=\"strong\">GNOME</emphasis> desktop instead of "
"the default <emphasis role=\"strong\">Xfce</emphasis> desktop, replace "
"<computeroutput>xfce</computeroutput> with <computeroutput>gnome</"
"computeroutput> in the <computeroutput>desktop=xfce</computeroutput> "
"parameter."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"To install the <emphasis role=\"strong\">LXDE</emphasis> desktop instead, "
"use <computeroutput>desktop=lxde</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"To install the <emphasis role=\"strong\">LXQt</emphasis> desktop instead, "
"use <computeroutput>desktop=lxqt</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"To install the <emphasis role=\"strong\">KDE Plasma</emphasis> desktop "
"instead, use <computeroutput>desktop=kde</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"And to install the <emphasis role=\"strong\">MATE</emphasis> desktop "
"instead, use <computeroutput>desktop=mate</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "The installation process"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Remember the <ulink url=\"http://wiki.debian.org/DebianEdu/Documentation/";
"Buster/Requirements\">system requirements</ulink> and make sure you have at "
"least two network cards (NICs) if you plan on setting up an LTSP server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Choose a language (for the installation and the installed system)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Choose a location which normally should be the location where you live."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Choose a keyboard keymap (the country's default is usually fine)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Choose profile(s) from the following list:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "<emphasis role=\"strong\">Main Server</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"This is the main server (tjener) for your school providing all services pre-"
"configured to work out of the box. You must install only one main server per "
"school! This profile does not include a graphical user interface. If you "
"want a graphical user interface, then select Workstation or LTSP Server in "
"addition to this one."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis role=\"strong\">Workstation</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"A computer booting from its local hard drive, and running all software and "
"devices locally like an ordinary computer, except that user logins are "
"authenticated by the main server, where the users' files and desktop profile "
"are stored."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "<emphasis role=\"strong\">Roaming workstation</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Same as workstation but capable of authentication using cached credentials, "
"meaning it can be used outside the school network. The users' files and "
"profiles are stored on the local disk. For single user notebooks and laptops "
"this profile should be selected and not 'Workstation' or 'Standalone' as "
"suggested in earlier releases."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "<emphasis role=\"strong\">LTSP Server</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"A thin client (and diskless workstation) server, is called an LTSP server. "
"Clients without hard drives boot and run software from this server. This "
"computer needs two network interfaces, a lot of memory, and ideally more "
"than one processor or core. See the chapter about <link linkend="
"\"NetworkClients\">networked clients</link> for more information on this "
"subject. Choosing this profile also enables the workstation profile (even if "
"it is not selected) - an LTSP server can always be used as a workstation, "
"too."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "<emphasis role=\"strong\">Standalone</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"An ordinary computer that can function without a main server (that is, it "
"doesn't need to be on the network). Includes laptops."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "<emphasis role=\"strong\">Minimal</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"This profile will install the base packages and configure the machine to "
"integrate into the Debian Edu network, but without any services and "
"applications. It is useful as a platform for single services manually moved "
"out from the main-server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The <emphasis role=\"strong\">Main Server</emphasis>, <emphasis role=\"strong"
"\">Workstation</emphasis> and <emphasis role=\"strong\">LTSP Server</"
"emphasis> profiles are preselected. These profiles can be installed on one "
"machine together if you want to install a so called <emphasis>combined main "
"server</emphasis>. This means the main server will be an LTSP server and "
"also be used as a workstation. This is the default choice, since we assume "
"most people will install <link linkend=\"Installation--"
"Installation_over_the_network_.28PXE.29_and_booting_diskless_clients\">via "
"PXE</link> afterwards. Please note that you must have 2 network cards "
"installed in a machine which is going to be installed as a combined main "
"server or as an LTSP server to become useful after the installation."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Say \"yes\" or \"no\" to automatic partitioning. Be aware that saying \"yes"
"\" will destroy all data on the hard drives! Saying \"no\" on the other hand "
"will require more work - you will need to make sure that the required "
"partitions are created and are big enough."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Please say \"yes\" to submitting information to <ulink url=\"https://popcon.";
"debian.org/\"/> to allow us to know which packages are popular and should be "
"kept for future releases. Although you don't have to, it is a simple way "
"for you to help."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Wait. If the selected profiles include LTSP Server then the installer will "
"spend quite some time at the end, \"Finishing the installation - Running "
"debian-edu-profile-udeb...\""
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"After giving the root password, you will be asked to create a normal user "
"account \"for non-administrative tasks\". For Debian Edu this account is "
"very important: it is the account you will use to manage the Skolelinux "
"network."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The password for this user <emphasis role=\"strong\">must</emphasis> have a "
"length of <emphasis role=\"strong\">at least 5 characters</emphasis> - "
"otherwise login will not be possible (even though a shorter password will be "
"accepted by the installer)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Be happy"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Notes on some characteristics"
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "A note on notebooks"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Most likely you will want to use the 'Roaming workstation' profile (see "
"above). Be aware that all data is stored locally (so take some extra care "
"over backups) and login credentials are cached (so after a password change, "
"logins may require your old password if you have not connected your laptop "
"to the network and logged in with the new password)."
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "A note on USB flash drive / Blu-ray disc image installs"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"After you install from the USB flash drive / Blu-ray disc image, "
"<computeroutput>/etc/apt/sources.list</computeroutput> will only contain "
"sources from that image. If you have an Internet connection, we strongly "
"suggest adding the following lines to it so that available security updates "
"can be installed:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"deb http://deb.debian.org/debian/ buster main \n"
"deb http://security.debian.org/ buster/updates main"
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "A note on CD installs"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"A netinst installation (which is the type of installation our CD provides) "
"will fetch some packages from the CD and the rest from the net. The amount "
"of packages fetched from the net varies from profile to profile but stays "
"below a gigabyte (unless you choose to install all possible desktops). Once "
"you have installed the main-server (whether a pure main-server or combi-"
"server does not matter), further installation will use its proxy to avoid "
"downloading the same package several times from the net."
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Notes on LTSP Server installations using only Thin-Clients"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Providing the kernel boot parameter <computeroutput>edu-skip-ltsp-make-"
"client</computeroutput> makes it possible to skip one step which converts "
"the LTSP chroot from a thin-client chroot into a combined thin-client/"
"diskless workstation chroot."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"This is useful in certain situations, such as if you want a pure thin client "
"chroot or if there is already a diskless chroot on another server, which can "
"be rsynced. For these situations skipping this step will cut down the "
"installation time considerably."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Except for the longer installation time there is no harm in always creating "
"combined chroots, which is why this is done by default."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Installation using USB flash drives instead of CD / Blu-ray discs"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Since the Squeeze release it is possible to directly copy the CD/DVD/BD "
"<computeroutput>.iso</computeroutput> images to a USB flash drive (also "
"known as \"USB sticks\") and boot from them. Simply execute a command like "
"this, just adapting the file and device names to your needs:"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<computeroutput>sudo dd if=debian-edu-amd64-XXX.iso of=/dev/sdX bs=1024</"
"computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Depending on which image you choose, the USB flash drive will behave just "
"like a CD or Blu-ray disc."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Installation over the network (PXE) and booting diskless clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For this installation method it is required that you have a running main "
"server. When clients boot via the main network, a new PXE menu with "
"installer and boot selection options is displayed. If PXE installation fails "
"with an error message claiming a XXX.bin file is missing, then most probably "
"the client's network card requires nonfree firmware. In this case the Debian "
"Installer's initrd must be modified. This can be achieved by executing the "
"command: <computeroutput>/usr/share/debian-edu-config/tools/pxe-addfirmware "
"</computeroutput> on the server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This is how the PXE menu looks with the <emphasis role=\"strong\">Main-"
"Server</emphasis> profile only:"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/30-Main-Server-GRUB_Boot_menu-PXE.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "width=400"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This is how the PXE menu looks with the <emphasis role=\"strong\">Main "
"Server</emphasis> and <emphasis role=\"strong\">LTSP Server</emphasis> "
"profiles:"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/28-Diskless-WS-GRUB_Boot_menu-PXE.png"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To install a desktop environment of your choice instead of the default one, "
"press TAB and edit the kernel boot options (like explained above)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This setup also allows diskless workstations and thin clients to be booted "
"on the main network. Unlike workstations, diskless workstations don't have "
"to be added to LDAP with GOsa², but can be, for example if you want to force "
"the hostname."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"More information about network clients can be found in the <link linkend="
"\"NetworkClients\">Network clients HowTo</link> chapter."
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Modifying PXE installations"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"The PXE installation uses a debian-installer preseed file, which can be "
"modified to ask for more packages to install."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"A line like the following needs to be added to <computeroutput>tjener:/etc/"
"debian-edu/www/debian-edu-install.dat</computeroutput>"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "d-i pkgsel/include string my-extra-package(s)"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"The PXE installation uses <computeroutput>/var/lib/tftpboot/debian-edu/"
"install.cfg</computeroutput> and the preseeding file in <computeroutput>/etc/"
"debian-edu/www/debian-edu-install.dat</computeroutput>. These files can be "
"changed to adjust the preseeding used during installation, to avoid more "
"questions when installing over the net. Another way to achieve this is to "
"provide extra settings in <computeroutput>/etc/debian-edu/pxeinstall.conf</"
"computeroutput> and <computeroutput>/etc/debian-edu/www/debian-edu-install."
"dat.local</computeroutput> and to run <computeroutput>/usr/sbin/debian-edu-"
"pxeinstall</computeroutput> to update the generated files."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Further information can be found in the <ulink url=\"http://www.debian.org/";
"releases/buster/installmanual\">manual of the Debian Installer</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"To disable or change the use of the proxy when installing via PXE, the lines "
"containing <computeroutput>mirror/http/proxy</computeroutput>, "
"<computeroutput>mirror/ftp/proxy</computeroutput> and "
"<computeroutput>preseed/early_command</computeroutput> in "
"<computeroutput>tjener:/etc/debian-edu/www/debian-edu-install.dat </"
"computeroutput> need to be changed. To disable the use of a proxy when "
"installing, put '#' in front of the first two lines, and remove the "
"\"<computeroutput>export http_proxy=\"http://webcache:3128\";; </"
"computeroutput>\" part from the last one."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Some settings can not be preseeded because they are needed before the "
"preseeding file is downloaded. These are configured in the PXElinux-based "
"boot arguments available from <computeroutput>/var/lib/tftproot/debian-edu/"
"install.cfg</computeroutput>. Language, keyboard layout and desktop are "
"examples of such settings."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Custom images"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Creating custom CDs, DVDs or Blu-ray discs can be quite easy since we use "
"the <ulink url=\"http://wiki.debian.org/DebianInstaller/\";>Debian Installer</"
"ulink>, which has a modular design and other nice features. <ulink url="
"\"http://wiki.debian.org/DebianInstaller/Preseed\";>Preseeding</ulink> allows "
"you to define answers to the questions normally asked."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"So all you need to do is to create a preseeding file with your answers (this "
"is described in the appendix of the Debian Installer manual) and <ulink url="
"\"http://wiki.debian.org/DebianInstaller/Modify/CD\";>remaster the CD/DVD</"
"ulink>."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Screenshot tour"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The text mode and the graphical installation are functionally identical - "
"only the appearance is different. The graphical mode offers the opportunity "
"to use a mouse, and of course looks much nicer and more modern. Unless the "
"hardware has trouble with the graphical mode, there is no reason not to use "
"it."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"So here is a screenshot tour through a graphical 64-bit Main Server + "
"Workstation + LTSP Server installation and how it looks at the first boot of "
"the main server, a PXE boot on the workstation network and on the LTSP "
"client network:"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "01-Installer_64bit_boot_menu.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/02-select_a_language.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "02-select_a_language.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/03-select_your_location.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "03-select_your_location.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/04-Configure_the_keyboard.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "04-Configure_the_keyboard.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/05-Detect_and_mount_CD-ROM.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "05-Detect_and_mount_CD-ROM.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/06-Load_installer_components_from_CD.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "06-Load_installer_components_from_CD.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/07-Detect_network_hardware.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "07-Detect_network_hardware.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/08-Choose_Debian_Edu_profile.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "08-Choose_Debian_Edu_profile.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/09-Really_use_the_automatic_partitioning_tool.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "09-Really_use_the_automatic_partitioning_tool.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/10-Really_use_the_automatic_partitioning_tool-Yes.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "10-Really_use_the_automatic_partitioning_tool-Yes.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/11-Participate_in_the_package_usage_survey.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "11-Participate_in_the_package_usage_survey.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/12-Set_up_users_and_passwords.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "12-Set_up_users_and_passwords.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/12a-Set_up_users_and_passwords.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "12a-Set_up_users_and_passwords.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/12b-Set_up_users_and_passwords.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "12b-Set_up_users_and_passwords.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/12c-Set_up_users_and_passwords.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "12c-Set_up_users_and_passwords.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/12d-Setting-up-the-partitioner.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "12d-Setting-up-the-partitioner.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/13-Install+the+base+system.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "13-Install the base system.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/14-Select_and_install_software.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "14-Select_and_install_software.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/17-Select_and_install_software.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "17-Select_and_install_software.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/18-Build+LTSP+chroot.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "18-Build LTSP chroot.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/19-Install_the_GRUB_boot_loader_on_a_hard_disk.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "19-Install_the_GRUB_boot_loader_on_a_hard_disk.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/20-Finish_the_Installation.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "20-Finish_the_Installation.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/21-Finish_the_Installation-Installation_complete.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "21-Finish_the_Installation-Installation_complete.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/22-Tjener_GRUB_boot_menu.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "22-Tjener_GRUB_boot_menu.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "tjener Lightdm Login"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/26-Tjener-Xfce_Desktop_Browser.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Xfce and Browser"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/27-Tjener-Xfce_Desktop.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Xfce Desktop"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "28-Diskless-WS-GRUB_Boot_menu-PXE.png"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/29-Diskless-WS-LDM_Login.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Diskless Workstation Login"
msgstr ""
#. type: Content of: <article><section><title>
msgid "Getting started"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Minimum steps to get started"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"During installation of the main server a first user account was created. In "
"the following text this account will be referenced as \"first user\". This "
"account is special, as there's no Samba account (can be added via GOsa²), "
"the home directory permission is set to 700 (so <computeroutput>chmod o+x ~</"
"computeroutput> is needed to make personal web pages accessible), and the "
"first user can use <computeroutput>sudo</computeroutput> to become root."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"See the information about Debian Edu specific <link linkend=\"Architecture--"
"File_system_access_configuration\">file system access configuration</link> "
"before adding users; adjust to your site's policy if needed."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"After the installation, the first things you need to do as first user are:"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid "Log into the server."
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid "Add users with GOsa²."
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid ""
"Add workstations with GOsa² - thin-client and diskless workstation can be "
"used directly without this step."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Adding users and workstations is described in detail below, so please read "
"this chapter completely. It covers how to perform these minimum steps "
"correctly as well as other stuff that everybody will probably need to do."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"There is additional information available elsewhere in this manual: the "
"<link linkend=\"Features\">New features in Buster</link> chapter should be "
"read by everyone who is familiar with previous releases. And for those "
"upgrading from a previous release, make sure to read the <link linkend="
"\"Upgrades\">Upgrades</link> chapter."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If generic DNS traffic is blocked out of your network and you need to use "
"some specific DNS server to look up internet hosts, you need to tell the DNS "
"server to use this server as its \"forwarder\". Update /etc/bind/named.conf."
"options and specify the IP address of the DNS server to use."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The <link linkend=\"HowTo\">HowTo</link> chapter covers more tips and tricks "
"and some frequently asked questions."
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Debian Edu Xfce desktop"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"There are several services running on the main server which can be managed "
"via a web management interface. We'll describe each service below."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Introduction to GOsa²"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"GOsa² is a web based management tool that helps to manage some important "
"parts of your Debian Edu setup. With GOsa² you can manage (add, modify, or "
"delete) these main groups:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Group Administration"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "NIS Netgroup Administrator"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Machine Administration"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "DNS Administration"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "DHCP Administration"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"For GOsa² access you need the Skolelinux main server and a (client) system "
"with a web browser installed which can be the main server itself if it was "
"installed as a so called combined server (Main Server + LTSP Server + "
"Workstation profiles). If all of the mentioned before is not available, see: "
"<link linkend=\"Administration--"
"Installing_a_graphical_environment_on_the_main-server_to_use_GOsa.2BALI-"
"\">Installing a graphical environment on the main-server to use GOsa²</link>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"From a web browser use the URL <ulink url=\"https://www/gosa\"/> for GOsa² "
"access, and log in as the first user."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"If you are using a new Debian Edu Buster machine, the site certificate will "
"be known by the browser."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Otherwise, you will get an error message about the SSL certificate being "
"wrong. If you know you are alone on your network, just tell the browser to "
"accept it and ignore that."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"For general information on GOsa² have a look at: <ulink url=\"https://oss.";
"gonicus.de/labs/gosa/wiki/documentation\"/>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "GOsa² Login plus Overview"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/gosa2_overview.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "GOsa² overview page after login as the first user"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "After logging in to GOsa² you will see the overview page of GOsa²."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Next, you can choose a task in the menu or click any of the task icons on "
"the overview page. For navigation, we recommend using the menu on the left "
"side of the screen, as it will stay visible there on all administration "
"pages offered by GOsa²."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In Debian Edu, account, group, and system information is stored in an LDAP "
"directory. This data is used not only by the main server, but also by the "
"(diskless) workstations, the LTSP servers and the Windows machines on the "
"network. With LDAP, account information about students, teachers, etc. only "
"needs to be entered once. After information has been provided in LDAP, the "
"information will be available to all systems on the whole Skolelinux network."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"GOsa² is an administration tool that uses LDAP to store its information and "
"provide a hierarchical department structure. To each \"department\" you can "
"add user accounts, groups, systems, netgroups, etc. Depending on the "
"structure of your institution, you can use the department structure in GOsa²/"
"LDAP to transfer your organisational structure into the LDAP data tree of "
"the Debian Edu main server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A default Debian Edu main server installation currently provides two "
"\"departments\": Teachers and Students, plus the base level of the LDAP "
"tree. Student accounts are intended to be added to the \"Students\" "
"department, teachers to the \"Teachers\" department; systems (servers, "
"Skolelinux workstations, Windows machines, printers etc.) are currently "
"added to the base level. Find your own scheme for customising this "
"structure. (You can find an example how to create users in year groups, with "
"common home directories for each group in the <ulink url=\"https://wiki.";
"debian.org/DebianEdu/Documentation/Buster//HowTo/"
"AdvancedAdministration#User_Customisations_with_GOsa.2BALI-\">HowTo/"
"AdvancedAdministration</ulink> chapter of this manual.)"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Depending on the task that you want to work on (manage users, manage groups, "
"manage systems, etc.) GOsa² presents you with a different view on the "
"selected department (or the base level)."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "User Management with GOsa²"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"First, click on \"Users\" in the left navigation menu. The right side of the "
"screen will change to show a table with department folders for \"Students\" "
"and \"Teachers\" and the account of the GOsa² Administrator (the first "
"created user). Above this table you can see a field called <emphasis>Base</"
"emphasis> that allows you to navigate through your tree structure (move your "
"mouse over that area and a drop-down menu will appear) and to select a base "
"folder for your intended operations (e.g. adding a new user)."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Adding users"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Next to that tree navigation item you can see the \"Actions\" menu. Move "
"your mouse over this item and a submenu appears on screen; choose \"Create\" "
"here, and then \"User\". You will be guided by the user creation wizard."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The most important thing to add is the template (newstudent or newteacher) "
"and the full name of your user (see image)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"As you follow the wizard, you will see that GOsa² generates a username "
"automatically based on the real name. It automatically chooses a username "
"that doesn't exist yet, so multiple users with the same full name are not a "
"problem. Note that GOsa² can generate invalid usernames if the full name "
"contains non-ASCII characters."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"If you don't like the generated username you can select another username "
"offered in the drop-down box, but you do not have a free choice here in the "
"wizard. (If you want to be able to edit the proposed username, open "
"<computeroutput>/etc/gosa/gosa.conf</computeroutput> with an editor and add "
"<computeroutput>allowUIDProposalModification=\"true\"</computeroutput> as an "
"additional option to the \"location definition\".)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"When the wizard has finished, you are presented with the GOsa² screen for "
"your new user object. Use the tabs at the top to check the completed fields."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"After you have created the user (no need to customise fields the wizard has "
"left empty for now), click on the \"Ok\" button in the bottom-right corner."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"As the last step GOsa² will ask for a password for the new user. Type that "
"in twice and then click \"Set password\" in the bottom-right corner."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Some characters may not be allowed as part of the password."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If all went well, you can now see the new user in the user list table. You "
"should now be able to log in with that username on any Skolelinux machine "
"within your network."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Search, modify and delete users"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/filterbox.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Filterbox"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To modify or delete a user, use GOsa² to browse the list of users on your "
"system. On the middle of the screen you may open the \"Filter\" box, a "
"search tool provided by GOsa². If you don't know the exact location of your "
"user account in your tree, change to the base level of the GOsa²/LDAP tree "
"and search there with the option marked \"Search in subtrees\"."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"When using the \"Filter\" box, results will immediately appear in the middle "
"of the text in the table list view. Every line represents a user account and "
"the items farthest to the right on each line are little icons that provide "
"actions for you: edit user, lock account, set password and remove user."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A new page will show up where you can directly modify information about the "
"user, change the password of the user and modify the list of groups the user "
"belongs to."
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/edit_user.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Editing user data"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Set passwords"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The students can change their own passwords by logging into GOsa² with their "
"own usernames. To ease the access of GOsa², an entry called Gosa is provided "
"in the desktop's System (or System settings) menu. A logged-in student will "
"be presented with a very minimal version of GOsa² that only allows access to "
"the student's own account data sheet and to the set-password dialog."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Teachers logged in under their own usernames have special privileges in "
"GOsa². They are shown a more privileged view of GOsa², and can change the "
"passwords for all student accounts. This may be very handy during class."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "To administratively set a new password for a user"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "search for the user to be modified, as explained above"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"click on the key symbol at the end of the line that the username is shown in"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"on the page subsequently presented you can set a new password chosen by "
"yourself"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/change_password_administratively.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Set user password"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Beware of security implications due to easy to "
"guess passwords!</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Advanced user management"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"It is possible to mass-create users with GOsa² by using a CSV file, which "
"can be created with any good spreadsheet software (for example "
"<computeroutput>localc</computeroutput>). At least, entries for the "
"following fields have to be provided: uid, last name (sn), first name "
"(givenName) and password. Make sure that there are no duplicate entries in "
"the uid field. Please note that the check for duplicates must include "
"already existing uid entries in LDAP (which could be obtained by executing "
"<computeroutput>getent passwd | grep tjener/home | cut -d\":\" -f1</"
"computeroutput> on the command line)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"These are the format guidelines for such a CSV file (GOsa² is quite "
"intolerant about them):"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Use \",\" as field separator"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Do not use quotes"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The CSV file <emphasis role=\"strong\">must not</emphasis> contain a header "
"line (of the sort that normally contains the column names)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The order of the fields is not relevant, and can be defined in GOsa² during "
"the mass import"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "The mass import steps are:"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "click the \"LDAP Manager\" link in the navigation menu on the left"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "click the \"Import\" tab in the screen on the right"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"browse your local disk and select a CSV file with the list of users to be "
"imported"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"choose an available user template that should be applied during mass import "
"(such as NewTeacher or NewStudent)"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "click the \"Import\" button in the bottom-right corner"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"It's a good idea to do some tests first, preferably using a CSV file with a "
"few fictional users, which can be deleted later."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Same applies to the password management module, which allows to reset a lot "
"of passwords using a CSV file or to re-generate new passwords for users "
"belonging to a special LDAP subtree."
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/reset_passwords.png"
msgstr ""
#. type: Content of: <article><section><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Reset passwords"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Group Management with GOsa²"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/create_group.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "create group"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/list_groups.png"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "The management of groups is very similar to the management of users."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"You can enter a name and a description per group. Make sure that you choose "
"the right level in the LDAP tree when creating a new group."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"By default, the appropriate Samba group isn't created. If you forgot to "
"check the Samba group option during group creation, you can modify the group "
"later on."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Adding users to a newly created group takes you back to the user list, where "
"you most probably would like to use the filter box to find users. Check the "
"LDAP tree level, too."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The groups entered in the group management are also regular unix groups, so "
"you can use them for file permissions too."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Group Management on the command line"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"# List existing group mapping between UNIX and Windows groups.\n"
"net groupmap list\n"
"\n"
"# Add your new or otherwise missing groups:\n"
"net groupmap add unixgroup=NEW_GROUP type=domain ntgroup=\"NEW_GROUP\"\\\n"
" comment=\"DESCRIPTION OF NEW GROUP\""
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Machine Management with GOsa²"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Machine management basically allows you to manage all networked devices in "
"your Debian Edu network. Every machine added to the LDAP directory using "
"GOsa² has a hostname, an IP address, a MAC address and a domain name (which "
"is usually \"intern\"). For a fuller description of the Debian Edu "
"architecture see the <link linkend=\"Architecture\">architecture</link> "
"chapter of this manual."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Diskless workstations and thin-clients work out-of-the-box when connected to "
"the main network. Only workstations with disks <emphasis role=\"strong"
"\">have to</emphasis> be added with GOsa², but all <emphasis role=\"strong"
"\">can</emphasis>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To add a machine, use the GOsa² main menu, systems, add. You can use an IP "
"address/hostname from the preconfigured address space 10.0.0.0/8. Currently "
"there are only two predefined fixed addresses: 10.0.2.2 (tjener) and "
"10.0.0.1 (gateway). The addresses from 10.0.16.20 to 10.0.31.254 (roughly "
"10.0.16.0/20 or 4000 hosts) are reserved for DHCP and are assigned "
"dynamically."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To assign a host with the MAC address 52:54:00:12:34:10 a static IP address "
"in GOsa² you have to enter the MAC address, the hostname and the IP; "
"alternatively you might click the <computeroutput>Propose ip</"
"computeroutput> button which will show the first free fixed address in "
"10.0.0.0/8, most probably something like 10.0.0.2 if you add the first "
"machine this way. It may be better to first think about your network: for "
"example you could use 10.0.0.x with x>10 and x<50 for servers, and "
"x>100 for workstations. Don't forget to activate the just added system. "
"With the exception of the main server all systems will then have a matching "
"icon."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If the machines have booted as thin clients/diskless workstations or have "
"been installed using any of the networked profiles, the "
"<computeroutput>sitesummary2ldapdhcp</computeroutput> script can be used to "
"automatically add machines to GOsa². For simple machines it will work out of "
"the box, for machines with more than one mac address the actually used one "
"has to be chosen, <computeroutput>sitesummary2ldapdhcp -h</computeroutput> "
"shows usage information. Please note, that the IP addresses shown after "
"usage of <computeroutput>sitesummary2ldapdhcp</computeroutput> belong to the "
"dynamic IP range. These systems can then be modified to suit your network: "
"rename each new system, activate DHCP and DNS, add it to netgroups (see "
"screenshot below for recommended netgroups), reboot the system afterwards. "
"The following screenshots show how this looks in practice:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"root@tjener:~# sitesummary2ldapdhcp -a -i ether-22:11:33:44:55:ff\n"
"info: Create GOsa machine for am-2211334455ff.intern [10.0.16.21] id ether-22:11:33:44:55:ff.\n"
"\n"
"Enter password if you want to activate these changes, and ^c to abort.\n"
"\n"
"Connecting to LDAP as cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no\n"
"enter password: ********\n"
"root@tjener:~#"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/gosa_systems_list.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "GOsa² systems listing"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/gosa_systems_host_details.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Host details"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/gosa_systems_edit_host.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Modify host"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/gosa_systems_add_netgroup.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "Add netgroup"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A cronjob updating DNS runs every hour; <computeroutput>su -c ldap2bind</"
"computeroutput> can be used to trigger the update manually."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Search and delete machines"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Searching for and deleting machines is quite similar to searching for and "
"deleting users, so that information is not repeated here."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Modify existing machines / Netgroup management"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"After adding a machine to the LDAP tree using GOsa², you can modify its "
"properties using the search functionality and clicking on the machine name "
"(as you would with users)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The format of these system entries is similar to the one you already know "
"from modifying user entries, but the fields mean different things in this "
"context."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For example, adding a machine to a <computeroutput>NetGroup</computeroutput> "
"does not modify the file access or command execution permissions for that "
"machine or the users logged in to that machine; instead it restricts the "
"services that machine can use on your main-server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The default installation provides the <computeroutput>NetGroups</"
"computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "cups-queue-autoflush-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "cups-queue-autoreenable-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "fsautoresize-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "ltsp-server-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "netblock-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "printer-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "server-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "shutdown-at-night-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "shutdown-at-night-wakeup-hosts-blacklist"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "winstation-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "workstation-hosts"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Currently the <computeroutput>NetGroup</computeroutput> functionality is "
"used for"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "NFS."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"The home directories are exported by the main-server to be mounted by the "
"workstations and the LTSP servers. For security reasons, only hosts within "
"the workstation-hosts, ltsp-server-hosts and server-hosts "
"<computeroutput>NetGroups</computeroutput> can mount the exported NFS "
"shares. So it is rather important to remember to configure these kinds of "
"machines properly in the LDAP tree using GOsa² and to configure them to use "
"static IP addresses from LDAP."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Remember to configure workstations and LTSP servers properly with GOsa², or "
"your users won't be able to access their home directories. Diskless "
"workstations and thin clients don't use NFS, so they don't need to be "
"configured."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "fs-autoresize"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Edu machines in this group will automatically resize LVM partitions "
"that run out of space."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "shutdown at night"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Edu machines in this group will automatically shut down at night to "
"save energy."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "CUPS (cups-queue-autoflush-hosts and cups-queue-autoreenable-hosts)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Edu machines in these groups will automatically flush all print "
"queues every night, and re-enable any disabled print queue every hour."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Edu machines in this group will be allowed to connect to machines "
"only on the local network. Combined with web proxy restrictions this might "
"be used during exams."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Another important part of machine configuration is the 'Samba host' flag (in "
"the 'Host information' area). If you plan to add existing Windows systems to "
"the Skolelinux Samba domain, you need to add the Windows host to the LDAP "
"tree and set this flag to be able to join the Windows host to the domain. "
"For more information about adding Windows hosts to the Skolelinux network "
"see the <link linkend=\"NetworkClients--"
"Connecting_Windows_machines_to_the_network_.2BAC8_Windows_integration"
"\">HowTo/NetworkClients</link> chapter of this manual."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Printer Management"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"For Printer Management point your web browser to <ulink url=\"https://";
"www:631\"/>. This is the normal CUPS management interface where you can add/"
"delete/modify your printers and can clean up the printing queue. By default "
"only root is allowed but this can be changed: Open /etc/cups/cups-files.conf "
"with an editor and add one or more valid group names matching your site "
"policy to the line containing <computeroutput>SystemGroup lpadmin</"
"computeroutput>. Existing GOsa² groups that might be used are "
"<computeroutput>gosa-admins</computeroutput> and <computeroutput>printer-"
"admins</computeroutput> (both with the first user as member), "
"<computeroutput>teachers</computeroutput> and <computeroutput>jradmins</"
"computeroutput> (no members after installation)."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Use printers attached to workstations"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The package <emphasis>p910nd</emphasis> is installed by default on a system "
"with the <emphasis>Workstation</emphasis> profile."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Edit <computeroutput>/etc/default/p910nd</computeroutput> like this (USB "
"printer):"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "P910ND_OPTS=\"-f /dev/usb/lp0\""
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "P910ND_START=1"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Configure the printer using the web interface <computeroutput>https://www.";
"intern:631</computeroutput>; choose network printer type "
"<computeroutput>AppSocket/HP JetDirect</computeroutput> (for all printers "
"regardless of brand or model) and set <computeroutput>socket://<"
"workstation ip>:9100</computeroutput> as connection URI."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Clock synchronisation"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The default configuration in Debian Edu is to keep the clocks on all "
"machines synchronous but not necessarily correct. NTP is used to update the "
"time. The clocks will be synchronised with an external source by default. "
"This can cause machines to keep the external Internet connection open if it "
"is created when used."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"If you use dialup or ISDN and pay per minute, you want to change this "
"default setting."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"To disable synchronisation with an external clock, the file /etc/ntp.conf on "
"the main-server and all clients and LTSP chroots need to be modified. Add "
"comment (\"#\") marks in front of the <computeroutput>server</"
"computeroutput> entries. After this, the NTP server needs to be restarted "
"by running <computeroutput>/etc/init.d/ntp restart</computeroutput> as "
"root. To test if a machine is using the external clock sources, run "
"<computeroutput>ntpq -c lpeer</computeroutput>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Extending full partitions"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Because of a possible bug with automatic partitioning, some partitions might "
"be too full after installation. To extend these partitions, run "
"<computeroutput>debian-edu-fsautoresize -n</computeroutput> as root. See "
"the \"Resizing Partitions\" HowTo in the <link linkend=\"Administration--"
"Resizing_Partitions\">administration HowTo chapter</link> for more "
"information."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Maintenance"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Updating the software"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This section explains how to use <computeroutput>apt-get upgrade</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Using <computeroutput>apt-get</computeroutput> is really simply. To update a "
"system you need to execute two commands on the command line as root: "
"<computeroutput>apt-get update</computeroutput> (which updates the lists of "
"available packages) and <computeroutput>apt-get upgrade</computeroutput> "
"(which upgrades the packages for which an upgrade is available)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is also a good idea to upgrade using the C locale to get English output "
"which in cases of problems is more likely to produce results in search "
"engines."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"LC_ALL=C apt-get update ; LC_ALL=C ltsp-chroot apt-get update\n"
"LC_ALL=C apt-get upgrade -y\n"
"LC_ALL=C ltsp-chroot -m apt-get upgrade -y\n"
"ltsp-update-kernels # If a new kernel was installed\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is important to run <computeroutput>ltsp-update-kernels</computeroutput> "
"if a new kernel was installed in the LTSP chroot, to keep the kernel and "
"kernel modules in sync. The kernel is handed out via TFTP when the machine "
"does PXE boot, and the kernel modules are fetched from the LTSP chroot."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Run <computeroutput>ltsp-update-image</computeroutput> to re-generate the "
"NBD image(s)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is also a good idea to install <computeroutput>cron-apt</computeroutput> "
"and <computeroutput>apt-listchanges</computeroutput> and configure them to "
"send mail to an address you are reading."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<computeroutput>cron-apt</computeroutput> will notify you once a day via "
"email about any packages that can be upgraded. It does not install these "
"upgrades, but does download them (usually in the night), so you don't have "
"to wait for the download when you do <computeroutput>apt-get upgrade</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Automatic installation of updates can be done easily if desired, it just "
"needs the <computeroutput>unattended-upgrades</computeroutput> package to be "
"installed and configured as described on <ulink url=\"https://wiki.debian.";
"org/UnattendedUpgrades\">wiki.debian.org/UnattendedUpgrades</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<computeroutput>apt-listchanges</computeroutput> can send new changelog "
"entries to you via email, or alternatively display them in the terminal when "
"running <computeroutput>apt</computeroutput> or <computeroutput>apt-get</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Keep yourself informed about security updates"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Running <computeroutput>cron-apt</computeroutput> as described above is a "
"good way to learn when security updates are available for installed "
"packages. Another way to stay informed about security updates is to "
"subscribe to the <ulink url=\"http://lists.debian.org/debian-security-";
"announce/\">Debian security-announce mailinglist</ulink>, which has the "
"benefit of also telling you what the security update is about. The downside "
"(compared to <computeroutput>cron-apt</computeroutput>) is that it also "
"includes information about updates for packages which aren't installed."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Backup Management"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"For backup management point your browser to <ulink url=\"https://www/";
"slbackup-php\"/>. Please note that you need to access this site via SSL, "
"since you have to enter the root password there. If you try to access this "
"site without using SSL it will fail."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Note: the site will only work if you temporarily allow ssh root login on the "
"backup server (main server 'tjener' by default)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"By default tjener will back up <computeroutput>/skole/tjener/home0</"
"computeroutput>, <computeroutput>/etc/</computeroutput>, <computeroutput>/"
"root/.svk</computeroutput> and LDAP to /skole/backup which is under the LVM. "
"If you only want to have spare copies of things (in case you delete them) "
"this setup should be fine for you."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Be aware that this backup scheme doesn't protect you from failing hard "
"drives."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to back up your data to an external server, a tape device or "
"another hard drive you'll have to modify the existing configuration a bit."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to restore a complete folder, your best option is to use the "
"command-line:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"$ sudo rdiff-backup -r <date> \\\n"
" /skole/backup/tjener/skole/tjener/home0/user \\\n"
" /skole/tjener/home0/user_<date>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This will leave the content from <computeroutput>/skole/tjener/home0/user</"
"computeroutput> for <computeroutput><date></computeroutput> in the "
"folder <computeroutput>/skole/tjener/home0/user_<date></computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to restore a single file, then you should be able to select the "
"file (and the version) from the web interface, and download only that file."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to get rid of older backups, choose \"Maintenance\" in the menu "
"on the backup page and select the oldest snapshot to keep:"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/slbackup-php_maintenance.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "slbackup-php Maintenance"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Server Monitoring"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Munin"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The Munin trend reporting system is available from <ulink url=\"https://www/";
"munin/\"/>. It provides system status measurement graphs on a daily, "
"weekly, monthly and yearly basis, and provides the system administrator with "
"help when looking for bottlenecks and the source of system problems."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The list of machines being monitored using Munin is generated automatically, "
"based on the list of hosts reporting to sitesummary. All hosts with the "
"package munin-node installed are registered for Munin monitoring. It will "
"normally take one day from a machine being installed until Munin monitoring "
"starts, because of the order the cron jobs are executed. To speed up the "
"process, run <computeroutput>sitesummary-update-munin</computeroutput> as "
"root on the sitesummary server (normally the main server). This will update "
"the <computeroutput>/etc/munin/munin.conf</computeroutput> file."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The set of measurements being collected is automatically generated on each "
"machine using the <computeroutput>munin-node-configure</computeroutput> "
"program which probes the plugins available from <computeroutput>/usr/share/"
"munin/plugins/</computeroutput> and symlinks the relevant ones to "
"<computeroutput>/etc/munin/plugins/</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Information about Munin is available from <ulink url=\"http://munin-";
"monitoring.org/\"/>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Icinga"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Icinga system and service monitoring is available from <ulink url=\"https://";
"www/icinga/\"/>. The set of machines and services being monitored is "
"automatically generated using information collected by the sitesummary "
"system. The machines with the profile Main-server and LTSP-server receive "
"full monitoring, while workstations and thin clients receive simple "
"monitoring. To enable full monitoring on a workstation, install the "
"<computeroutput>nagios-nrpe-server</computeroutput> package on the "
"workstation."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The username is <computeroutput>icingaadmin</computeroutput> and the default "
"password is <computeroutput>skolelinux</computeroutput>. For security "
"reasons, avoid using the same password as root. To change the password you "
"can run the following command as root:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "htpasswd /etc/icinga/htpasswd.users icingaadmin"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"By default Icinga does not send email. This can be changed by replacing "
"<computeroutput>notify-by-nothing</computeroutput> with <computeroutput>host-"
"notify-by-email</computeroutput> and <computeroutput>notify-by-email</"
"computeroutput> in the file <computeroutput>/etc/icinga/sitesummary-template-"
"contacts.cfg</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The Icinga configuration file used is <computeroutput>/etc/icinga/"
"sitesummary.cfg</computeroutput>. The sitesummary cron job generates "
"<computeroutput>/var/lib/sitesummary/icinga-generated.cfg</computeroutput> "
"with the list of hosts and services to monitor."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Extra Icinga checks can be put in the file <computeroutput>/var/lib/"
"sitesummary/icinga-generated.cfg.post</computeroutput> to get them included "
"in the generated file."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Information about Icinga is available from <ulink url=\"https://www.icinga.";
"com/\"/> or in the <computeroutput>icinga-doc</computeroutput> package."
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Common Icinga warnings and how to handle them"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid "Here are instructions on how to handle the most common Icinga warnings."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><title>
msgid "DISK CRITICAL - free space: /usr 309 MB (5% inode=47%):"
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"The partition (/usr/ in the example) is too full. There are in general two "
"ways to handle this: (1) remove some files or (2) increase the size of the "
"partition. If the partition is /var/, purging the APT cache by calling "
"<computeroutput>apt-get clean</computeroutput> might remove some files. If "
"there is more room available in the LVM volume group, running the program "
"<computeroutput>debian-edu-fsautoresize</computeroutput> to extend the "
"partitions might help. To run this program automatically every hour, the "
"host in question can be added to the <computeroutput>fsautoresize-hosts</"
"computeroutput> netgroup."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><title>
msgid "APT CRITICAL: 13 packages available for upgrade (13 critical updates)."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"New package are available for upgrades. The critical ones are normally "
"security fixes. To upgrade, run 'apt-get upgrade && apt-get dist-"
"upgrade' as root in a terminal or log in via ssh to do the same. On LTSP "
"servers, remember to also update the LTSP chroot using <computeroutput>ltsp-"
"chroot apt-get update && ltsp-chroot apt-get upgrade</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"If you do not want to manually upgrade packages and trust Debian to do a "
"good job with new versions, you can configure <computeroutput>unattended-"
"upgrades</computeroutput> to automatically upgrade all new packages every "
"night. This will not upgrade the LTSP chroots."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"To upgrade the LTSP chroot, one can use <computeroutput>ltsp-chroot apt-get "
"update && ltsp-chroot apt-get upgrade</computeroutput>. On 64-bit "
"servers, one will have to add <computeroutput>-a i386</computeroutput> as an "
"argument to ltsp-chroot. It is a good idea to update the chroot when "
"updating the host system."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><title>
msgid ""
"WARNING - Reboot required : running kernel = 2.6.32-37.81.0, installed "
"kernel = 2.6.32-38.83.0"
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"The running kernel is older than the newest installed kernel, and a reboot "
"is required to activate the newest installed kernel. This is normally "
"fairly urgent, as new kernels normally show up in Debian Edu to fix security "
"issues."
msgstr ""
#. type: Content of: <article><section><section><section><section><section><title>
msgid "WARNING: CUPS queue size - 61"
msgstr ""
#. type: Content of: <article><section><section><section><section><section><para>
msgid ""
"The printer queues in CUPS have a lot of jobs pending. This is most likely "
"because of a unavailable printer. Disabled print queues are enabled every "
"hour on hosts that are member of the <computeroutput>cups-queue-autoreenable-"
"hosts</computeroutput> netgroup, so for such hosts no manual action should "
"be required. The print queues are emptied every night on hosts that are "
"member of the <computeroutput>cups-queue-autoflush-hosts</computeroutput> "
"netgroup. If a host have a lot of jobs in their queue, consider adding this "
"host to one or both of these netgroups."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Sitesummary"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Sitesummary is used to collect information from each computer and submit it "
"to the central server. The information collected is available in "
"<computeroutput>/var/lib/sitesummary/entries/</computeroutput>. Scripts in "
"<computeroutput>/usr/lib/sitesummary/</computeroutput> are available to "
"generate reports."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"A simple report from sitesummary without any details is available from "
"<ulink url=\"https://www/sitesummary/\"/>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Some documentation on sitesummary is available from <ulink url=\"http://wiki.";
"debian.org/DebianEdu/HowTo/SiteSummary\"/>"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "More information about Debian Edu customisations"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"More information about Debian Edu customisations useful for system "
"administrators can be found in the <link linkend=\"Administration"
"\">Administration Howto chapter</link> and in the <link linkend="
"\"AdvancedAdministration\">Advanced administration Howto chapter</link>"
msgstr ""
#. type: Content of: <article><section><title>
msgid "Upgrades"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Before reading this upgrade guide, please note that live updates to your "
"production servers are carried out at your own risk. <emphasis role=\"strong"
"\">Debian Edu/Skolelinux comes with ABSOLUTELY NO WARRANTY, to the extent "
"permitted by applicable law.</emphasis>"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Please read this chapter and the <link linkend=\"Features\">New features in "
"Buster</link> chapter of this manual completely before attempting to upgrade."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "General notes on upgrading"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Upgrading Debian from one distribution to the next is generally rather easy. "
"For Debian Edu this is unfortunately not yet true as we modify configuration "
"files in ways we shouldn't. (See Debian bug <ulink url=\"https://bugs.debian.";
"org/311188#\">311188</ulink> for more information.) Upgrading is still "
"possible but may require some work."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In general, upgrading the servers is more difficult than the workstations "
"and the main-server is the most difficult to upgrade. The diskless machines "
"are easy, as their chroot environment can be deleted and recreated, if you "
"haven't modified it. If you have, the chroot is basically a workstation "
"chroot anyway, so rather easy to upgrade."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to be sure that after the upgrade everything works as before, "
"you should test the upgrade on a test system or systems configured the same "
"way as your production machines. There you can test the upgrade without risk "
"and see if everything works as it should."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Make sure to also read the information about the current Debian Stable "
"release in its <ulink url=\"http://www.debian.org/releases/stable/";
"installmanual\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It may also be wise to wait a bit and keep running Oldstable for a few weeks "
"longer, so that others can test the upgrade and document any problems they "
"experience. The Oldstable release of Debian Edu will receive continued "
"support for some time after the next Stable release, but when Debian <ulink "
"url=\"http://www.debian.org/security/faq#lifespan\";>ceases support for "
"Oldstable</ulink>, Debian Edu will necessarily do the same."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Upgrades from Debian Edu Stretch"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Be prepared: make sure you have tested the upgrade from Stretch in a test "
"environment or have backups ready to be able to go back."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Please note that the following recipe applies to a default Debian Edu main "
"server installation (desktop=xfce, profiles Main Server, Workstation, LTSP "
"Server). (For a general overview concerning stretch to buster upgrade, see: "
"<ulink url=\"https://www.debian.org/releases/buster/releasenotes\"/>)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Don't use X, use a virtual console, log in as root."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If <computeroutput>apt</computeroutput> finishes with an error, try to fix "
"it and/or run <computeroutput>apt -f install</computeroutput> and then "
"<computeroutput>apt -y full-upgrade</computeroutput> once again."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Upgrading the main server"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Start by making sure the current system is up-to-date:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt update\n"
"apt full-upgrade"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Cleanup the package cache:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "apt clean"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Make sure you have enough disk space. On both <emphasis>/usr</emphasis> and "
"<emphasis>/var</emphasis> about 5 GiB free space will be needed temporarily. "
"See the related <link linkend=\"Administration--Resizing_Partitions\">manual "
"chapter</link> for more information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Prepare and start the upgrade to Buster:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"sed -i 's/stretch/buster/g' /etc/apt/sources.list\n"
"export LC_ALL=C # optional (to get English output)\n"
"apt update\n"
"apt purge atftpd # needed because tftpd will be installed\n"
"apt install libcurl4 # needed to replace libcurl3\n"
"apt install apache2 # needed first to avoid additional work later on\n"
"apt full-upgrade"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"apt-list-changes: be prepared for a lot of NEWS to read; press <"
"return> to scroll down, <q> to leave the pager. Please note that "
"the GOsa² information is wrong (due to Debian bug <ulink url=\"https://bugs.";
"debian.org/925138#\">925138</ulink>), see below how to adjust the password "
"encryption properly. All information will be mailed to root so that you can "
"read it again (using <emphasis>mailx</emphasis> or <emphasis>mutt</"
"emphasis>)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Read all debconf information carefully, choose 'keep your currently-"
"installed version' unless stated differently below; in most cases hitting "
"return will be fine."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "restart services: Choose yes."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "ntp: Choose N."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "smb"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "dovecot"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "grub"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Apply and adjust configuration:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "cf-agent -I -D installation"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Get the new Debian Edu Buster artwork:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "apt install debian-edu-artwork-buster"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Enable PHP 7.3 support:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt purge php7.0*\n"
"a2enmod php7.3\n"
"a2enconf php7.3-cgi\n"
"service apache2 restart"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Adjust GOsa² access (changed encryption method):"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "backup /etc/gosa/gosa.conf.orig"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"replace the long (hashed) password in /etc/gosa/gosa.conf with the short "
"(random) password from /etc/gosa/gosa.conf.orig (for both "
"<emphasis>adminPassword</emphasis> and <emphasis>snapshotAdminPassword</"
"emphasis>)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "remove /etc/gosa/gosa.secrets"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "run <computeroutput>gosa-encrypt-passwords</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "run <computeroutput>service apache2 reload</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "After reboot, do some more cleanup:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt purge linux-image-4.9.0-*\n"
"apt purge linux-headers-4.9.0-*\n"
"apt --purge autoremove"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Check if the upgraded system works:"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Reboot; log in as first user and test"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "if the GOsa² gui is working,"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "if one is able to connect LTSP clients and workstations,"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "if one can add/remove a netgroup membership of a system,"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "if one can send and receive internal email,"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "if one can manage printers,"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "and if other site specific things are working."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Upgrading a workstation"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Do all the basic things like on the main-server and without doing the things "
"not needed."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Upgrading LTSP chroots"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Make sure you have enough disk space. LTSP uses Network Block Device (NBD). "
"The NBD image file size is about 4 GiB (default installation). If the image "
"is updated, another 4 GiB for a temporary file are needed."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Also please note that the default LTSP architecture was i386 for Stretch. "
"See below how to create a chroot for 64-bit-PCs (amd64)."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"ltsp-chroot -m -a i386 apt update\n"
"ltsp-chroot -m -a i386 apt -y full-upgrade\n"
"sed -i 's/stretch/buster/g' /opt/ltsp/i386/etc/apt/sources.list\n"
"ltsp-chroot -m -a i386 apt update\n"
"ltsp-chroot -m -a i386 apt -y full-upgrade\n"
"ltsp-chroot -m -a i386 apt -f install\n"
"ltsp-chroot -m -a i386 apt -y full-upgrade"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Cleaning up:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "ltsp-chroot -m -a i386 apt --purge autoremove"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Update LTSP support on the server side:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"ltsp-update-kernels\n"
"ltsp-update-sshkeys\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To save disk space, <computeroutput>ltsp-update-image -n</computeroutput> "
"could be used instead; see <computeroutput>man ltsp-update-image</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Recreating an LTSP chroot"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"On the LTSP server(s) the LTSP chroot could also be recreated. The new "
"chroot will still support both thin-clients and diskless workstations. "
"Please note: As of Buster, the LTSP chroot arch defaults to the one used for "
"the server side."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Remove <computeroutput>/opt/ltsp/i386</computeroutput> (or <computeroutput>/"
"opt/ltsp/amd64</computeroutput>, depending on your setup). If you have "
"enough diskspace, consider backing it up."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"See <computeroutput>ltsp-build-client --help</computeroutput> and "
"<computeroutput>ltsp-build-client --extra-help</computeroutput> for more "
"information about options. The file <emphasis>/etc/ltsp/ltsp-build-client."
"conf</emphasis> contains some useful (commented) options."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Recreate the chroot by running <computeroutput>ltsp-build-client</"
"computeroutput> as root."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Add additional LTSP chroot to support 64-bit-PC clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "At least 20 GiB additional disk space on /opt is required."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Run \"ltsp-build-client --arch amd64\" to create chroot and NBD image."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Use \"ldapvi -ZD '(cn=admin)'\" to replace <computeroutput>i386</"
"computeroutput> with <computeroutput>amd64</computeroutput> (dhcp statements "
"in LDAP for one dedicated network)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Run \"service isc-dhcp-server restart\"."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Edit /etc/debian-edu/pxeinstall.conf (set ltsparch=amd64)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Run 'debian-edu-pxeinstall' to regenerate the PXE menu."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Run 'service nbd-service restart' to serve the new NBD file."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid ""
"Upgrades from older Debian Edu / Skolelinux installations (before Stretch)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To upgrade from any older release, you will need to upgrade to the Stretch "
"based Debian Edu release first, before you can follow the instructions "
"provided above. Instructions are given in the <ulink url=\"https://wiki.";
"debian.org/DebianEdu/Documentation/Stretch#\">Manual for Debian Edu Stretch</"
"ulink> about how to upgrade to Stretch from the previous release, Jessie. "
"Likewise the Jessie manual describes how to upgrade from Wheezy."
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTo"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid ""
"HowTos for <link linkend=\"Administration\">general administration</link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid ""
"HowTos for <link linkend=\"AdvancedAdministration\">advanced administration</"
"link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid "HowTos for <link linkend=\"Desktop\">the desktop</link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid "HowTos for <link linkend=\"NetworkClients\">networked clients</link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid "HowTos for <link linkend=\"Samba\">Samba</link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid "HowTos for <link linkend=\"TeachAndLearn\">teaching and learning</link>"
msgstr ""
#. type: Content of: <article><section><itemizedlist><listitem><para>
msgid "HowTos for <link linkend=\"Users\">users</link>"
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTos for general administration"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The <link linkend=\"GettingStarted\">Getting Started</link> and <link "
"linkend=\"Maintenance\">Maintenance</link> chapters describe how to get "
"started with Debian Edu and how to do the basic maintenance work. The howtos "
"in this chapter have some more \"advanced\" tips and tricks."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid ""
"Configuration history: tracking /etc/ using the git version control system"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"With the introduction of <computeroutput>etckeeper</computeroutput> in "
"Debian Edu Squeeze (previous versions used <computeroutput>etcinsvk</"
"computeroutput> which was removed from Debian), all files in "
"<computeroutput>/etc/</computeroutput> are tracked using <ulink url=\"http://";
"www.git-scm.com/\">git</ulink> as a version control system."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This makes it possible to see when a file is added, changed and removed, as "
"well as what was changed if the file is a text file. The git repository is "
"stored in <computeroutput>/etc/.git/</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Every hour, any changes are automatically recorded, allowing configuration "
"history to be extracted and reviewed."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To look at the history, the command <computeroutput>etckeeper vcs log</"
"computeroutput> is used. To check the differences between two points in "
"time, a command like <computeroutput>etckeeper vcs diff </computeroutput> "
"can be used."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"See the output of <computeroutput>man etckeeper</computeroutput> for more "
"information."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "List of useful commands:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"etckeeper vcs log\n"
"etckeeper vcs status\n"
"etckeeper vcs diff\n"
"etckeeper vcs add .\n"
"etckeeper vcs commit -a\n"
"man etckeeper"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Usage examples"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"On a freshly installed system, try this to see all changes done since the "
"system was installed:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "etckeeper vcs log"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "See which files are currently not tracked and which are not up-to-date:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "etckeeper vcs status"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To manually commit a file, because you don't want to wait up to an hour:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "etckeeper vcs commit -a /etc/resolv.conf"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Resizing Partitions"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In Debian Edu, all partitions other than the <computeroutput>/boot/</"
"computeroutput> partition are on logical LVM volumes. With Linux kernels "
"since version 2.6.10, it is possible to extend partitions while they are "
"mounted. Shrinking partitions still needs to happen while the partition is "
"unmounted."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is a good idea to avoid creating very large partitions (over, say, "
"20GiB), because of the time it takes to run <computeroutput>fsck</"
"computeroutput> on them or to restore them from backup if the need arises. "
"It is better, if possible, to create several smaller partitions than one "
"very large one."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The helper script <computeroutput>debian-edu-fsautoresize</computeroutput> "
"is provided to make it easier to extend full partitions. When invoked, it "
"reads the configuration from <computeroutput>/usr/share/debian-edu-config/"
"fsautoresizetab</computeroutput>, <computeroutput>/site/etc/fsautoresizetab</"
"computeroutput> and <computeroutput>/etc/fsautoresizetab</computeroutput>. "
"It then proposes to extend partitions with too little free space, according "
"to the rules provided in these files. If run with no arguments, it will "
"only show the commands needed to extend the file system. The argument "
"<computeroutput>-n</computeroutput> is needed to actually execute these "
"commands to extend the file systems."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The script is executed automatically every hour on every client listed in "
"the <computeroutput>fsautoresize-hosts</computeroutput> netgroup."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"When the partition used by the Squid proxy is resized, the value for cache "
"size in <computeroutput>etc/squid/squid.conf</computeroutput> needs to be "
"updated as well. The helper script <computeroutput>/usr/share/debian-edu-"
"config/tools/squid-update-cachedir</computeroutput> is provided to do this "
"automatically, checking the current partition size of <computeroutput>/var/"
"spool/squid/</computeroutput> and configuring Squid to use 80% of this as "
"its cache size."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Logical Volume Management"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Logical Volume Management (LVM) enables resizing the partitions while they "
"are mounted and in use. You can learn more about LVM from the <ulink url="
"\"http://www.tldp.org/HOWTO/LVM-HOWTO/\";>LVM HowTo</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To extend a logical volume manually you simply tell the "
"<computeroutput>lvextend</computeroutput> command how large you want it to "
"grow to. For example, to extend home0 to 30GiB you use the following "
"commands:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"lvextend -L30G /dev/vg_system/skole+tjener+home0\n"
"resize2fs /dev/vg_system/skole+tjener+home0"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "To extend home0 by additional 30GiB, you insert a '+' (-L+30G)"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Installing a graphical environment on the main-server to use GOsa²"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you (probably accidentally) installed a pure main-server profile and "
"don't have a client with a web-browser handy, it's easy to install a minimal "
"desktop on the main server using this command sequence in a (non-graphical) "
"shell as the user you created during the main server's installation (first "
"user):"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"$ sudo apt update\n"
" $ sudo apt install education-desktop-xfce lightdm\n"
" ### after installation, run 'sudo service lightdm start' \n"
" ### login as first user"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Using ldapvi"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<ulink url=\"http://www.lichteblau.com/ldapvi/manual/\";>ldapvi</ulink> is a "
"tool to edit the LDAP database with a normal text editor on the commandline."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "The following needs to be executed:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "ldapvi --ldap-conf -ZD '(cn=admin)'"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Note: <computeroutput>ldapvi</computeroutput> will use whatever is the "
"default editor. By executing <computeroutput>export EDITOR=vim</"
"computeroutput> in the shell prompt one can configure the environment to get "
"a vi clone as editor."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To add an LDAP object using ldapvi, use object sequence number with the "
"string <computeroutput>add</computeroutput> in front of the new LDAP object."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Warning: <computeroutput>ldapvi</computeroutput> is a very powerful tool. Be "
"careful and don't mess up the LDAP database, same warning applies for "
"JXplorer."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Kerberized NFS"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Using Kerberos for NFS to mount home directories is a security feature. The "
"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
"server and workstation increases with the security level, <emphasis>krb5i</"
"emphasis> might be a good choice."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"For new systems added with GOsa², Kerberos host keytab files are generated "
"automatically."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To create one for a system already configured with GOsa², login on the main "
"server as root and run"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
"possible for systems of type <emphasis>workstations</emphasis>, "
"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
"do for diskless workstations."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "How to enable it"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis role=\"strong\">Main server</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "login as root"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
"emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
"existing entries for /srv/*; make sure they look like this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"/srv/nfs4 gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
"/srv/nfs4/home0 gss/krb5i(rw,sync,no_subtree_check)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "run <computeroutput>exportfs -r</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
"krb5i</emphasis> is active for both entries."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "login as root."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
"computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Standardskriver"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This tool allows to set the default printer depending on location, machine, "
"or group membership. For more information, see <computeroutput>/usr/share/"
"doc/standardskriver/README.md</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The configuration file <computeroutput>/etc/standardskriver.cfg</"
"computeroutput> has to be provided by the admin, see <computeroutput>/usr/"
"share/doc/standardskriver/examples/standardskriver.cfg</computeroutput> as "
"an example."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "JXplorer, an LDAP GUI"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you prefer a GUI to work with the LDAP database, check out the "
"<computeroutput>jxplorer</computeroutput> package, which is installed by "
"default. To get write access connect like this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"host: ldap.intern\n"
"port: 636\n"
"Security level: ssl + user + password\n"
"User dn: cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "ldap-createuser-krb, a command-line tool"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<computeroutput>ldap-createuser-krb</computeroutput> is a small command line "
"tool to create LDAP users and set their passwords in Kerberos. It's mostly "
"useful for testing, though."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Using stable-updates"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Since the Squeeze release in 2011, Debian has included packages formerly "
"maintained in volatile.debian.org in the <ulink url=\"http://wiki.debian.org/";
"StableUpdates\">stable-updates suite</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"While you can use stable-updates directly, you don't have to: stable-updates "
"are pushed into the stable suite regularly when stable point releases are "
"done, which roughly happens every two months."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Using backports to install newer software"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"You are running Debian Edu because you prefer the stability of Debian Edu. "
"It runs great; there is just one problem: sometimes software is a little bit "
"more outdated than you like. This is where backports.debian.org steps in."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Backports are recompiled packages from Debian testing (mostly) and Debian "
"unstable (in a few cases only, e.g. security updates), so they will run "
"without new libraries (wherever this is possible) on a stable Debian "
"distribution like Debian Edu. <emphasis role=\"strong\">We recommend you to "
"pick out individual backports which fit your needs, and not to use all "
"backports available there.</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Using backports is simple:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"echo \"deb http://deb.debian.org/debian/ buster-backports main\" >> /etc/apt/sources.list\n"
"apt-get update"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"After which one can install backported packages easily, the following "
"command will install a backported version of <emphasis>tuxtype</emphasis>:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "apt-get install -t buster-backports tuxtype"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Backports are automatically updated (if available) just like other packages. "
"Like the normal archive, backports has three sections: main, contrib and non-"
"free."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Upgrading with a CD or similar image"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If you want to upgrade from one version to another (for example from Buster "
"10.1+edu0 to 10.3+edu1) but you do not have Internet connectivity, only "
"physical media, follow these steps:"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Insert the CD / DVD / Blu-ray disc / USB flash drive and use the apt-cdrom "
"command:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "apt-cdrom add"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "To quote the apt-cdrom(8) man page:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"apt-cdrom is used to add a new CD-ROM to APTs list of available sources. apt-"
"cdrom takes care of determining the structure of the disc as well as "
"correcting for several possible mis-burns and verifying the index files."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"It is necessary to use apt-cdrom to add CDs to the APT system, it cannot be "
"done by hand. Furthermore each disk in a multi-CD set must be inserted and "
"scanned separately to account for possible mis-burns."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Then run these two commands to upgrade the system:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt-get update\n"
"apt-get upgrade"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Automatic cleanup of leftover processes"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<computeroutput>killer</computeroutput> is a perl script that gets rid of "
"background jobs. Background jobs are defined as processes that belong to "
"users who are not currently logged into the machine. It's run by cron job "
"once an hour."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Automatic installation of security upgrades"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<computeroutput>unattended-upgrades</computeroutput> is a Debian package "
"which will install security (and other) upgrades automatically. If "
"installed, the package is preconfigured to install security upgrades. The "
"logs are available in <computeroutput>/var/log/unattended-upgrades/</"
"computeroutput>; also, there are always <computeroutput>/var/log/dpkg.log</"
"computeroutput> and <computeroutput>/var/log/apt/</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Automatic shutdown of machines during the night"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is possible to save energy and money by automatically turning client "
"machines off at night and back on in the morning. The package will try to "
"turn off the machine every hour on the hour from 16:00 in the afternoon, but "
"will not turn it off if it seems to have users. It will try to tell the "
"BIOS to turn on the machine around 07:00 in the morning, and the main-server "
"will try to turn on machines from 06:30 by sending wake-on-lan packets. "
"These times can be changed in the crontabs of individual machines."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Some considerations should be kept in mind when setting this up:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"The clients should not be shut down when someone is using them. This is "
"ensured by checking the output from <computeroutput>who</computeroutput>, "
"and as a special case, checking for the LDM ssh connection command to work "
"with LTSP thin clients."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"To avoid blowing electrical fuses, it is a good idea to make sure all "
"clients do not start at the same time."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"There are two different methods available to wake up clients. One uses a "
"BIOS feature and requires a working and correct hardware clock, as well as a "
"motherboard and BIOS version supported by <computeroutput>nvram-wakeup</"
"computeroutput>; the other requires clients to have support for wake-on-lan, "
"and the server to know about all the clients that need to be woken up."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "How to set up shutdown-at-night"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"On clients that should turn off at night, touch <computeroutput>/etc/"
"shutdown-at-night/shutdown-at-night</computeroutput>, or add the hostname "
"(that is, the output from '<computeroutput>uname -n</computeroutput>' on the "
"client) to the netgroup \"shutdown-at-night-hosts\". Adding hosts to the "
"netgroup in LDAP can be done using the <computeroutput>GOsa²</"
"computeroutput> web tool. The clients might need to have wake-on-lan "
"configured in the BIOS. It is also important that the switches and routers "
"used between the wake-on-lan server and the clients will pass the WOL "
"packets to the clients even if the clients are turned off. Some switches "
"fail to pass on packets to clients that are missing in the ARP table on the "
"switch, and this blocks the WOL packets."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To enable wake-on-lan on the server, add the clients to <computeroutput>/etc/"
"shutdown-at-night/clients</computeroutput>, with one line per client, IP "
"address first, followed by MAC address (ethernet address), separated by a "
"space; or create a script <computeroutput>/etc/shutdown-at-night/clients-"
"generator</computeroutput> to generate the list of clients on the fly."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Here is an example <computeroutput>/etc/shutdown-at-night/clients-generator</"
"computeroutput> for use with sitesummary:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/sh\n"
" PATH=/usr/sbin:$PATH\n"
" export PATH\n"
" sitesummary-nodes -w"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"An alternative if the netgroup is used to activate shutdown-at-night on "
"clients is this script using the netgroup tool from the <computeroutput>ng-"
"utils</computeroutput> package:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/sh\n"
" PATH=/usr/sbin:$PATH\n"
" export PATH\n"
" netgroup -h shutdown-at-night-hosts"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Access Debian-Edu servers located behind a firewall"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To access machines behind a firewall from the Internet, consider installing "
"the package <computeroutput>autossh</computeroutput>. It can be used to set "
"up an SSH tunnel to a machine on the Internet that you have access to. From "
"that machine, you can access the server behind the firewall via the SSH "
"tunnel."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid ""
"Installing additional service machines for spreading the load from main-"
"server"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In the default installation, all services are running on the main-server, "
"tjener. To simplify moving some to another machine, there is a "
"<emphasis>minimal</emphasis> installation profile available. Installing with "
"this profile will lead to a machine, which is part of the Debian Edu "
"network, but which doesn't have any services running (yet)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"These are the required steps to setup a machine dedicated to some services:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"install the <emphasis>minimal</emphasis> profile using the <emphasis>debian-"
"edu-expert</emphasis> boot-option"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "install the packages for the service"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "configure the service"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "disable the service on main-server"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "update DNS (via LDAP/GOsa²) on main-server"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "HowTos from wiki.debian.org"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"FIXME: The HowTos from <ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/";
"\"/> are either user- or developer-specific. Let's move the user-specific "
"HowTos over here (and delete them over there)! (But first ask the authors "
"(see the history of those pages to find them) if they are fine with moving "
"the howto and putting it under the GPL.)"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/AutoNetRespawn\"/>"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/BackupPC\"/>"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/ChangeIpSubnet\"/>"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/SiteSummary\"/>"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/Squid_LDAP_Authentication";
"\"/>"
msgstr ""
#. type: Content of: <article><section><title>
msgid "Advanced administration howto"
msgstr ""
#. type: Content of: <article><section><para>
msgid "In this chapter advanced administration tasks are described."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "User Customisations with GOsa²"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Create Users in Year Groups"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In this example we want to create users in year groups, with common home "
"directories for each group (home0/2014, home0/2015, etc). We want to create "
"the users by csv import."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis>(as root on the main server) </emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Make the necessary year group directories"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "mkdir /skole/tjener/home0/2014"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "<emphasis>(as first user in Gosa)</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Department"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Main menu: goto 'Directory structure', click the 'Students' department. The "
"'Base' field should show '/Students'. From the drop box 'Actions' choose "
"'Create'/'Department'. Fill in values for Name (2014) and Description fields "
"(students graduating in 2014), leave the Base field as is (should be '/"
"Students'). Save it clicking 'Ok'. Now the new department (2014) should show "
"up below /Students. Click it."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Group"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Choose 'Groups' from the main menu; 'Actions'/Create/Group. Enter group name "
"(leave 'Base' as is, should be /Students/2014) and click the check box left "
"of 'Samba group'. 'Ok' to save it."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Template"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Choose 'users' from the main menu. Change to 'Students' in the Base field. "
"An Entry <computeroutput>NewStudent</computeroutput> should show up, click "
"it. This is the 'students' template, not a real user. As you'll have to "
"create such a template (to be able to use csv import for your structure) "
"based on this one, notice all entries showing up in the Generic, POSIX and "
"Samba tabs, maybe take screenshots to have information ready for the new "
"template."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Now change to /Students/2014 in the Base field; choose Create/Template and "
"start to fill in your desired values, first the Generic tab (add your new "
"2014 group under Group Membership, too), then add POSIX and Samba account."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Import users"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Choose your new template when doing csv import; testing it with a few users "
"is recommended."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Other User Customisations"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Creating folders in the home directories of all users"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"With this script the administrator can create a folder in each user's home "
"directory and set access permissions and ownership."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In the example shown below with group=teachers and permissions=2770 a user "
"can hand in an assignment by saving the file to the folder \"assignments\" "
"where teachers are given write access to be able to make comments."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/bash\n"
" home_path=\"/skole/tjener/home0\"\n"
" shared_folder=\"assignments\"\n"
" permissions=\"2770\"\n"
" created_dir=0\n"
" for home in $(ls $home_path); do\n"
" if [ ! -d \"$home_path/$home/$shared_folder\" ]; then\n"
" mkdir $home_path/$home/$shared_folder\n"
" chmod $permissions $home_path/$home/$shared_folder\n"
" #set the right owner and group\n"
" #\"username\" = \"group name\" = \"folder name\"\n"
" user=$home\n"
" group=teachers\n"
" chown $user:$group $home_path/$home/$shared_folder\n"
" ((created_dir+=1))\n"
" else\n"
" echo -e \"the folder $home_path/$home/$shared_folder already exists.\\n\"\n"
" fi\n"
" done\n"
" echo \"$created_dir folders have been created\""
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Easy access to USB drives and CD-ROMs/DVDs"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"When users insert a USB drive or a DVD / CD-ROM into a (diskless) "
"workstation, a popup window appears asking what to do with it, just like in "
"any other normal installation."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"When users insert a USB drive or a DVD / CD-ROM into a thin client there is "
"only a notify-window showing up for a few seconds. The media is "
"automatically mounted and it is possible to access it browsing to the /media/"
"$user folder. This is quite difficult for many non experienced users."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"It is possible to have the default KDE \"Plasma\" file manager Dolphin "
"showing up if KDE \"Plasma\" (or LDXE, if installed in parallel to KDE "
"\"Plasma\") is in use as desktop environment. To configure this, simply "
"execute <computeroutput>/usr/share/debian-edu-config/ltspfs-mounter-kde "
"enable</computeroutput> on the terminal server. (When using GNOME, device "
"icons will be placed on the desktop allowing easy access)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In addition the following script could be used to create the symlink \"media"
"\" for all users in their home folder for easy access to USB drives, CD-"
"ROM / DVD or whatever media is connected to the thin client. This might come "
"in handy if users want to edit files directly on their plugged in media."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/bash\n"
" home_path=\"/skole/tjener/home0\"\n"
" shared_folder=\"media\"\n"
" permissions=\"775\"\n"
" created_dir=0;\n"
" for home in $(ls $home_path); do\n"
" if [ ! -d \"$home_path/$home/$shared_folder\" ]; then\n"
" ln -s /media/$home $home_path/$home/$shared_folder\n"
" ((created_dir+=1))\n"
" else\n"
" echo -e \"the folder $home_path/$home/$shared_folder already exists.\\n\"\n"
" fi\n"
" done\n"
" echo \"$created_dir folders has been created\""
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "A warning about removable media on LTSP servers"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Warning: When inserted into an LTSP server USB drives and other removable "
"media cause popup messages on remote LTSP clients."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"If remote users acknowledge the popup or use pmount from the console, they "
"can even mount the removable devices and access the files."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Use a dedicated storage server"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Take these steps to set up a dedicated storage server for user home "
"directories and possibly other data."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Add a new system of type <computeroutput>server</computeroutput> using GOsa² "
"as outlined in the <link linkend=\"GettingStarted--"
"Machine_Management_with_GOsa.2BALI-\">Getting started</link> chapter of this "
"manual."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"This example uses 'nas-server.intern' as the server name. Once 'nas-server."
"intern' is configured, check if the NFS export points on the new storage "
"server are exported to the relevant subnets or machines:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"root@tjener:~# showmount -e nas-server\n"
" Export list for nas-server:\n"
" /storage 10.0.0.0/8\n"
" root@tjener:~#"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Here everything on the backbone network is granted access to the /storage "
"export. (This could be restricted to netgroup membership or single IP "
"addresses to limit NFS access like it is done in the tjener:/etc/exports "
"file.)"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Add automount information about 'nas-server.intern' in LDAP to allow all "
"clients to automatically mount the new export on request."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"This can't be done using GOsa², because a module for automount is missing. "
"Instead, use ldapvi and add the required LDAP objects using an editor."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"<computeroutput>ldapvi --ldap-conf -ZD '(cn=admin)' -b ou=automount,dc=skole,"
"dc=skolelinux,dc=no</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"When the editor shows up, add the following LDAP objects at the bottom of "
"the document. (The \"/&\" part in the last LDAP object is a wild card "
"matching everything 'nas-server.intern' exports, removing the need to list "
"individual mount points in LDAP.)"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"add cn=nas-server,ou=auto.skole,ou=automount,dc=skole,dc=skolelinux,dc=no\n"
" objectClass: automount\n"
" cn: nas-server\n"
" automountInformation: -fstype=autofs --timeout=60 ldap:ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no\n"
"\n"
" add ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no\n"
" objectClass: top\n"
" objectClass: automountMap\n"
" ou: auto.nas-server\n"
"\n"
" add cn=/,ou=auto.nas-server,ou=automount,dc=skole,dc=skolelinux,dc=no\n"
" objectClass: automount\n"
" cn: /\n"
" automountInformation: -fstype=nfs,tcp,rsize=32768,wsize=32768,rw,intr,hard,nodev,nosuid,noatime nas-server.intern:/&"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Add the relevant entries in tjener.intern:/etc/fstab, because tjener.intern "
"does not use automount to avoid mounting loops:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Create the mount point directories using <computeroutput>mkdir</"
"computeroutput>, edit '/etc/fstab' as adequate and run <computeroutput>mount "
"-a</computeroutput> to mount the new resources."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Enable access in case diskless workstations are used. This is a special "
"case, because sshfs is used instead of NFS and automount:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Create the mount point directories in the LTSP diskless client's root "
"(default <computeroutput>/opt/ltsp/i386/</computeroutput>) as well."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Add a line containing 'LOCAL_APPS_EXTRAMOUNTS=/storage' to <computeroutput>/"
"opt/ltsp/i386/etc/lts.conf</computeroutput> (example)."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Create a link in each user's home dir like 'ln -s /storage Storage' to help "
"users find the resources."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Now users should be able to access the files on 'nas-server.intern' directly "
"by just visiting the '/tjener/nas-server/storage/' directory using any "
"application on any workstation, LTSP thin client or LTSP server, and "
"visiting ~/Storage in case an LTSP diskless client is used."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Restrict ssh login access"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "There are several ways to restrict ssh login, some are listed here."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Setup without LTSP clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If no LTSP clients are used a simple solution is to create a new group (say "
"<computeroutput>sshusers</computeroutput>) and to add a line to the "
"machine's /etc/ssh/sshd_config file. Only members of the "
"<computeroutput>sshusers</computeroutput> group will then be allowed to ssh "
"into the machine from everywhere."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Managing this case with GOsa is quite simple:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Create a group <computeroutput>sshusers</computeroutput> on the base level "
"(where already other system management related groups like "
"<computeroutput>gosa-admins</computeroutput> show up)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Add users to the new group <computeroutput>sshusers</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Add <computeroutput>AllowGroups sshusers</computeroutput> to /etc/ssh/"
"sshd_config."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Execute <computeroutput>service ssh restart</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Setup with LTSP clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The default LTSP client setup uses ssh connections to the LTSP server. So a "
"different approach using PAM is needed."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Enable pam_access.so in the LTSP server's /etc/pam.d/sshd file."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Configure /etc/security/access.conf to allow connections for (sample) users "
"alice, jane, bob and john from everywhere and for all other users only from "
"the internal networks by adding these lines:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"+ : alice jane bob john : ALL\n"
"+ : ALL : 10.0.0.0/8 192.168.0.0/24 192.168.1.0/24\n"
"- : ALL : ALL\n"
"#"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If only dedicated LTSP servers are used, the 10.0.0.0/8 network could be "
"dropped to disable internal ssh login access. Note: someone connecting his "
"box to the dedicated LTSP client network(s) will gain ssh access to the LTSP "
"server(s) as well."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "A note for more complex setups"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If LTSP clients were attached to the backbone network 10.0.0.0/8 (combi "
"server or LTSP cluster setup) things would be even more complicated and "
"maybe only a sophisticated DHCP setup (in LDAP) checking the vendor-class-"
"identifier together with appropriate PAM configuration would allow to "
"disable internal ssh login."
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTos for the desktop"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Set up a multi-language desktop environment"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "To support multiple languages these commands need to be run:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Run <computeroutput>dpkg-reconfigure locales</computeroutput> (as root) and "
"choose the languages (UTF-8 variants)."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Run these commands as root to install the related packages:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt update\n"
"/usr/share/debian-edu-config/tools/install-task-pkgs\n"
"/usr/share/debian-edu-config/tools/improve-desktop-l10n"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Users will then be able to choose the language via the Lightdm display "
"manager before logging in; this applies to Xfce, LXDE and LXQt. GNOME and "
"KDE both come with their own internal region and language configuration "
"tools, use these. MATE uses the Arctica greeter on top of Lightdm whithout a "
"language chooser. Run <computeroutput>apt purge arctica-greeter</"
"computeroutput> to get the stock Lightdm greeter."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If LTSP diskless clients are used the above steps need to be done inside the "
"LTSP chroot as well. LDM supports all desktop environments. First use "
"<emphasis>Preferences</emphasis> to choose the language, then login."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Playing DVDs"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"libdvdcss is needed for playing most commercial DVDs. For legal reasons it's "
"not included in Debian (Edu). If you are legally allowed to use it, you can "
"build your own local packages using the <computeroutput>libdvd-pkg</"
"computeroutput> Debian package; make sure <computeroutput>contrib</"
"computeroutput> is enabled in <computeroutput>/etc/apt/sources.list</"
"computeroutput>."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"apt update\n"
"apt install libdvd-pkg"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Answer the debconf questions, then run <computeroutput>dpkg-reconfigure "
"libdvd-pkg</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Handwriting fonts"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The package <computeroutput>fonts-linex</computeroutput> (which is installed "
"by default) installs the font \"Abecedario\" which is a nice handwriting "
"font for kids. The font has several forms to be used with kids: dotted, and "
"with lines."
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTos for networked clients"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Introduction to thin clients and diskless workstations"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/idea.png"
msgstr ""
#. type: Content of: <article><section><section><para><inlinemediaobject><textobject><phrase>
msgid "(!)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Default for new Debian Edu Buster installations: LTSP clients are using the "
"same architecture as the LTSP server, i.e. 64-bit-PC (aka amd64) or 32-bit-"
"PC (aka i386)."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Please keep in mind to use the correct architecture for all commands "
"referred to below."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"One generic term for both thin clients and diskless workstations is "
"<emphasis>LTSP client</emphasis>. <ulink url=\"http://ltsp.org\";>LTSP is the "
"Linux Terminal Server Project</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "<emphasis role=\"strong\">Thin client</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A thin client setup enables an ordinary PC to function as an (X-)terminal, "
"where all software runs on the LTSP server. This means that this machine "
"boots via PXE without using a local client hard drive."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "<emphasis role=\"strong\">Diskless workstation</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A diskless workstation runs all software locally. The client machines boot "
"directly from the LTSP server without a local hard drive. Software is "
"administered and maintained on the LTSP server (inside of the LTSP chroot), "
"but it runs on the diskless workstation. Home directories and system "
"settings are stored on the server too. Diskless workstations are an "
"excellent way of reusing older (but powerful) hardware with the same low "
"maintenance cost as with thin clients."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"LTSP defines 320MB as the default minimum amount of RAM for diskless "
"workstations. If the amount of RAM is less, the machine will boot as thin "
"client. The related LTSP parameter is <computeroutput>FAT_RAM_THRESHOLD</"
"computeroutput> with the default value 300. So if (for example) the clients "
"should only boot as diskless workstations if they have 1 GB RAM, add "
"<computeroutput>FAT_RAM_THRESHOLD=1000</computeroutput> to lts.conf (or set "
"this in LDAP). Unlike workstations diskless workstations run without any "
"need to add them with GOsa², because LDM is used to login and connect to the "
"LTSP server."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "<emphasis role=\"strong\">LTSP client firmware</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"LTSP client boot will fail if the client's network interface requires a non-"
"free firmware. A PXE installation can be used for troubleshooting problems "
"with netbooting a machine; if the Debian Installer complains about a missing "
"XXX.bin file then non-free firmware has to be added to the initrd used by "
"LTSP clients."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "In this case execute the following commands on an LTSP server."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"# First get information about firmware packages\n"
"apt-get update && apt-cache search ^firmware-\n"
"\n"
"# Decide which package has to be installed for the network interface(s). \n"
"# Most probably this will be firmware-linux-nonfree.\n"
"# Things have to take effect in the LTSP chroot for architecture amd64.\n"
"ltsp-chroot -a amd64 apt-get update\n"
"ltsp-chroot -d -a amd64 apt-get -y -q install <package name>\n"
"\n"
"# copy the new initrd to the server's tftpboot directory and update the NBD image.\n"
"ltsp-update-kernels\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"As a shorter alternative -- installing all available firmware and updating "
"the tftpboot directory -- you could execute:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "LTSP client type selection"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Each LTSP server has two ethernet interfaces: one configured in the main "
"10.0.0.0/8 subnet (which is shared with the main server), and another "
"forming a local 192.168.0.0/24 subnet (a separate subnet for each LTSP "
"server)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"On the main subnet the complete PXE menu is provided; the separate subnet "
"for each LTSP server allows only diskless and thin LTSP client selection."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Using the default PXE menu on the main subnet 10.0.0.0/8, a machine could be "
"started as diskless workstation or thin client. By default clients in the "
"separate subnet 192.168.0.0/24 will run as diskless workstations if the "
"amount of RAM is sufficient. If all clients in this LTSP client subnet "
"should run as thin clients, the following has to be done."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"(1)Open the file /opt/ltsp/amd64/etc/ltsp/update-kernels.conf with an editor\n"
"and replace the line\n"
"CMDLINE_LINUX_DEFAULT=\"init=/sbin/init-ltsp quiet\"\n"
"with\n"
"CMDLINE_LINUX_DEFAULT=\"init=/sbin/init-ltsp LTSP_FATCLIENT=False quiet\"\n"
"(2)Execute 'ltsp-chroot -a amd64 /usr/share/ltsp/update-kernels'\n"
"(3)Execute 'ltsp-update-kernels'\n"
"(4)Execute 'ltsp-update-image'"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Configuring the PXE menu"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The PXE configuration is generated using the script <computeroutput>debian-"
"edu-pxeinstall</computeroutput>. It allows some settings to be overridden "
"using the file <computeroutput>/etc/debian-edu/pxeinstall.conf</"
"computeroutput> with replacement values."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Configuring the PXE installation"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The PXE installation option is by default available to anyone able to PXE "
"boot a machine. To password protect the PXE installation options, a file "
"<computeroutput>/var/lib/tftpboot/menupassword.cfg</computeroutput> can be "
"created with content similar to this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "MENU PASSWD $4$NDk0OTUzNTQ1NTQ5$7d6KvAlVCJKRKcijtVSPfveuWPM$"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The password hash should be replaced with an MD5 hash for the desired "
"password."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The PXE installation will inherit the language, keyboard layout and mirror "
"settings from the settings used when installing the main-server, and the "
"other questions will be asked during installation (profile, popcon "
"participation, partitioning and root password). To avoid these questions, "
"the file <computeroutput>/etc/debian-edu/www/debian-edu-install.dat</"
"computeroutput> can be modified to provide preselected answers to debconf "
"values. Some examples of available debconf values are already commented in "
"<computeroutput>/etc/debian-edu/www/debian-edu-install.dat</computeroutput>. "
"Your changes will be lost as soon as <computeroutput>debian-edu-pxeinstall</"
"computeroutput> is used to recreate the PXE-installation environment. To "
"append debconf values to <computeroutput>/etc/debian-edu/www/debian-edu-"
"install.dat</computeroutput> during recreation with <computeroutput>debian-"
"edu-pxeinstall</computeroutput>, add the file <computeroutput>/etc/debian-"
"edu/www/debian-edu-install.dat.local</computeroutput> with your additional "
"debconf values."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"More information about modifying PXE installations can be found in the <link "
"linkend=\"Installation--Modifying_PXE_installations\">Installation</link> "
"chapter."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Adding a custom repository for PXE installations"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For adding a custom repository add something like this to <computeroutput>/"
"etc/debian-edu/www/debian-edu-install.dat.local</computeroutput>:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#add the skole projects local repository\n"
"d-i apt-setup/local1/repository string http://example.org/debian stable main contrib non-free\n"
"d-i apt-setup/local1/comment string Example Software Repository\n"
"d-i apt-setup/local1/source boolean true\n"
"d-i apt-setup/local1/key string http://example.org/key.asc";
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
"computeroutput> once."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Changing the PXE menu on a combined (main and LTSP) server"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The PXE menu allows network booting of LTSP clients, the installer and other "
"alternatives. The file <computeroutput>/var/lib/tftpboot/pxelinux.cfg/"
"default</computeroutput> is used by default if no other file in that "
"directory matches the client, and out of the box it is set to link to "
"<computeroutput>/var/lib/tftpboot/debian-edu/default-menu.cfg</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If all clients should boot as diskless workstations instead of getting the "
"full PXE menu, this can be implemented by changing the symlink:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "ln -s /var/lib/tftpboot/debian-edu/default-diskless.cfg /var/lib/tftpboot/pxelinux.cfg/default"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If all clients should boot as thin clients instead, change the symlink like "
"this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "ln -s /var/lib/tftpboot/debian-edu/default-thin.cfg /var/lib/tftpboot/pxelinux.cfg/default"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"See also the PXELINUX documentation at <ulink url=\"http://syslinux.zytor.";
"com/wiki/index.php/PXELINUX\"/> ."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Separate main and LTSP server"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For performance and security considerations it might be desired to set up a "
"separate main server which doesn't act as LTSP server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To have ltspserver00 serve diskless workstations on the main (10.0.0.0/8) "
"network, when the main server is not a combined server, follow these steps:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"copy the <computeroutput>ltsp</computeroutput> directory from "
"<computeroutput>/var/lib/tftpboot</computeroutput> on ltspserver00 to the "
"same directory on the main server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"copy <computeroutput>/var/lib/tftpboot/debian-edu/default-diskless.cfg</"
"computeroutput> to the same directory on the main server."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"edit <computeroutput>/var/lib/tftpboot/debian-edu/default-diskless.cfg</"
"computeroutput> to use the IP address of ltspserver00; the following example "
"uses 10.0.2.10 for the IP address of ltspserver00 on the main network:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "DEFAULT ltsp/amd64/vmlinuz initrd=ltsp/amd64/initrd.img nfsroot=10.0.2.10:/opt/ltsp/amd64 init=/sbin/init-ltsp boot=nfs ro quiet ipappend 2"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"set the symlink in <computeroutput>/var/lib/tftpboot/pxelinux.cfg</"
"computeroutput> on the main server to point to <computeroutput>/var/lib/"
"tftpboot/debian-edu/default-diskless.cfg</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"As an alternative, you could use <computeroutput>ldapvi</computeroutput>, "
"search for 'next server tjener' and replace tjener with ltspserver00."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Use a different LTSP client network"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"192.168.0.0/24 is the default LTSP client network if a machine is installed "
"using the LTSP profile. If lots of LTSP clients are used or if different "
"LTSP servers should serve both i386 and amd64 chroot environments the second "
"preconfigured network 192.168.1.0/24 could be used as well. Edit the file "
"<computeroutput>/etc/network/interfaces</computeroutput> and adjust the eth1 "
"settings accordingly. Use <computeroutput>ldapvi</computeroutput> or any "
"other LDAP editor to inspect DNS and DHCP configuration."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Add LTSP chroot to support 32-bit-PC clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"In case LTSP server and chroot are 64-bit-PC, it is still possible to "
"support older 32-bit systems. At least 20 GiB additional disk space on /opt "
"would be required."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Run <computeroutput>ltsp-build-client --arch i386</computeroutput> to create "
"chroot and NBD image."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Use <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput> to replace "
"<computeroutput>amd64</computeroutput> with <computeroutput>i386</"
"computeroutput> (dhcp statements in LDAP for one dedicated network)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Run <computeroutput>service isc-dhcp-server restart</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Run <computeroutput>service nbd-service restart</computeroutput> to serve "
"the new NBD file."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Changing network settings"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The debian-edu-config package comes with a tool which helps in changing the "
"network from 10.0.0.0/8 to something else. Have a look at <computeroutput>/"
"usr/share/debian-edu-config/tools/subnet-change</computeroutput>. It is "
"intended for use just after installation on the main server, to update LDAP "
"and other files that need to be edited to change the subnet."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Note that changing to one of the subnets already used elsewhere in Debian "
"Edu will not work. 192.168.0.0/24 and 192.168.1.0/24 are already set up as "
"LTSP client networks. Changing to these subnets will require manual editing "
"of configuration files to remove duplicate entries."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"There is no easy way to change the DNS domain name. Changing it would "
"require changes to both the LDAP structure and several files in the main "
"server file system. There is also no easy way to change the host and DNS "
"name of the main server (tjener.intern). To do so would also require "
"changes to LDAP and files in the main-server and client file system. In "
"both cases the Kerberos setup would have to be changed, too."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "LTSP in detail"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "LTSP client configuration in LDAP (and lts.conf)"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To configure specific LTSP clients with particular features, you can add "
"settings in LDAP or edit the file <computeroutput>/opt/ltsp/amd64/etc/lts."
"conf</computeroutput>. Please note that <computeroutput>ltsp-update-image</"
"computeroutput> has to be run after each change to lts.conf. The image "
"update isn't needed if lts.conf is copied to the /var/lib/tftpboot/ltsp/"
"amd64/ directory."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"We recommend to configure clients in LDAP (and not edit <computeroutput>lts."
"conf</computeroutput> directly, however, configuration webforms for LTSP are "
"currently not available in GOsa², you have to use a plain LDAP browser/"
"explorer or <computeroutput>ldapvi</computeroutput>), as this makes it "
"possible to add and/or replace LTSP servers without loosing (or having to "
"redo) configuration."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The default values in LDAP are defined in the "
"<computeroutput>cn=ltspConfigDefault,ou=ltsp,dc=skole,dc=skolelinux,dc=no</"
"computeroutput> LDAP object using the <computeroutput>ltspConfig</"
"computeroutput> attribute. One can also add host specific entries in LDAP."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Run <computeroutput>man lts.conf</computeroutput> to have a look at "
"available configuration options (see <computeroutput>/usr/share/doc/ltsp/"
"LTSPManual.html</computeroutput> for detailed information about LTSP)."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"The default values are defined under <computeroutput>[default]</"
"computeroutput>; to configure one client, specify it in terms of its MAC "
"address or IP address like this: <computeroutput>[192.168.0.10]</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Example: To make the thin client ltsp010 use 1280x1024 resolution, add "
"something like this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"[192.168.0.10]\n"
"X_MODE_0 = 1280x1024\n"
"X_HORZSYNC = \"60-70\"\n"
"X_VERTREFRESH = \"59-62\""
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "somewhere below the default settings."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To force the use of a specific xserver on an LTSP client, set the "
"<computeroutput>XSERVER</computeroutput> variable. For example:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"[192.168.0.11]\n"
"XSERVER = nvidia"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If a thin client comes up with a black screen the use of a specific color "
"depth might help. For example:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"[192.168.0.12]\n"
"X_COLOR_DEPTH=16"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Depending on what changes you make, it may be necessary to restart the "
"client."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To use IP addresses in <computeroutput>lts.conf</computeroutput> you need to "
"add the client MAC address to your DHCP server. Otherwise you should use the "
"client MAC address directly in your <computeroutput>lts.conf</"
"computeroutput> file."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Force all LTSP clients to use LXDE as default desktop environment"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Make sure that LXDE is installed on the LTSP server; then add these lines "
"below <computeroutput>[default]</computeroutput> in \"lts.conf\":"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"LDM_SESSION=LXDE\n"
"LDM_FORCE_SESSION=true"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Desktop autoloader"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"This tool preloads the default Desktop environment (and programs of your "
"choice). It is only useful for diskless clients. The setup is site specific, "
"also some technical skills are required."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Read about it: run <computeroutput>ltsp-chroot cat /usr/share/doc/desktop-"
"autoloader/README.Debian</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"At least two files need to be edited. Available <editor> choices are: "
"vi, nano, mcedit."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"run <computeroutput>ltsp-chroot <editor> /etc/cron.d/desktop-"
"autoloader</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"run <computeroutput>ltsp-chroot <editor> /etc/default/desktop-"
"autoloader</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If the setup is complete, update the NBD image running <computeroutput>ltsp-"
"update-image</computeroutput> and test it."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Load-balancing LTSP servers"
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Part 1"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"It is possible to set up the clients to connect to one of several LTSP "
"servers for load-balancing. This is done by providing <computeroutput>/opt/"
"ltsp/amd64/usr/share/ltsp/get_hosts</computeroutput> as a script printing "
"one or more servers for LDM to connect to. In addition to this, each LTSP "
"chroot needs to include the SSH host key for each of the servers."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"First of all, you must choose one LTSP server to be the load-balancing "
"server. All the clients will PXE-boot from this server and load the "
"Skolelinux image. After the image is loaded, LDM chooses which server to "
"connect to by using the \"get_hosts\" script. You will decide later how this "
"is done."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"The load-balancing server must be announced to the clients as the \"next-"
"server\" via DHCP. As DHCP configuration is in LDAP, modifications have to "
"be done there. Use <computeroutput>ldapvi --ldap-conf -ZD '(cn=admin)'</"
"computeroutput> to edit the appropriate entry in LDAP. (Enter the main "
"server's root password at the prompt; if VISUAL isn't set, the default "
"editor will be nano.) Search for a line reading "
"<computeroutput>dhcpStatements: next-server tjener</computeroutput> Next-"
"server should be the IP address or hostname of the server you chose to be "
"the load-balancing server. If you use hostname you must have a working DNS. "
"Remember to restart the DHCP service."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Now you have to move your clients from the 192.168.0.0 network to the "
"10.0.0.0 network; attach them to the backbone network instead of the network "
"attached to the LTSP server's second network card. This is because when you "
"use load-balancing, the clients need direct access to the server chosen by "
"LDM. If you leave your clients on the 192.168.0.0 network, all of the "
"clients' traffic will go through that server before it reaches the chosen "
"LDM server."
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Part 2"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Now you have to make a \"get_hosts\" script which generates a list of server "
"names for LDM to connect to. The parameter LDM_SERVER overrides this script. "
"In consequence, this parameter must not be defined if the get_hosts is going "
"to be used. The get_hosts script writes on the standard output each server "
"IP address or host name, in random order."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid "Edit \"/opt/ltsp/amd64/etc/lts.conf\" and add something like this:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "MY_SERVER_LIST = \"xxxx xxxx xxxx\""
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Replace xxxx with either the IP addresses or hostnames of the servers as a "
"space-separated list. Then, put the following script in <computeroutput>/opt/"
"ltsp/amd64/usr/lib/ltsp/get_hosts</computeroutput> on the server you chose "
"to be the load-balancing server."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/bash\n"
" # Randomise the server list contained in MY_SERVER_LIST parameter\n"
" TMP_LIST=\"\"\n"
" SHUFFLED_LIST=\"\"\n"
" for i in $MY_SERVER_LIST; do\n"
" rank=$RANDOM\n"
" let \"rank %= 100\"\n"
" TMP_LIST=\"$TMP_LIST\\n${rank}_$i\"\n"
" done\n"
" TMP_LIST=$(echo -e $TMP_LIST | sort)\n"
" for i in $TMP_LIST; do\n"
" SHUFFLED_LIST=\"$SHUFFLED_LIST $(echo $i | cut -d_ -f2)\"\n"
" done\n"
" echo $SHUFFLED_LIST"
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Part 3"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"Now that you've made the \"get_hosts\" script, it's time to make the SSH "
"host key for the LTSP chroots. This can be done by making a file containing "
"the content of <computeroutput>/opt/ltsp/amd64/etc/ssh/ssh_known_hosts</"
"computeroutput> from all the LTSP servers that will be load-balanced. Save "
"this file as <computeroutput>/etc/ltsp/ssh_known_hosts.extra</"
"computeroutput> on all load-balanced servers. The last step is very "
"important because ltsp-update-sshkeys runs every time a server is booted, "
"and <computeroutput>/etc/ltsp/ssh_known_hosts.extra</computeroutput> is "
"included if it exists."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"If you save your new host file as <computeroutput>/opt/ltsp/amd64/etc/ssh/"
"ssh_known_hosts</computeroutput>, it will be erased when you reboot the "
"server."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"There are some obvious weaknesses with this setup. All clients get their "
"image from the same server, which causes high loads on the server if many "
"clients are booted at the same time. Also, the clients require that server "
"to be always available; without it they cannot boot or get an LDM server. "
"Therefore this setup is very dependent on one server, which isn't very good."
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid "Your clients should now be load-balanced!"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Sound with LTSP clients"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"LTSP thin clients use networked audio to pass audio from the server to the "
"clients."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "LTSP diskless workstations handle audio locally."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Use printers attached to LTSP clients"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Attach the printer to the LTSP client machine (both USB and parallel port "
"are supported)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Configure this machine to run a printer in lts.conf (default location: "
"<computeroutput>/opt/ltsp/amd64/etc/lts.conf</computeroutput>), see the LTSP "
"manual <computeroutput>/usr/share/doc/ltsp/LTSPManual.html#printer</"
"computeroutput> for details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Configure the printer using the web interface <computeroutput>https://";
"www:631</computeroutput> on the main server; choose network printer type "
"<computeroutput>AppSocket/HP JetDirect</computeroutput> (for all printers "
"regardless of brand or model) and set <computeroutput>socket://<LTSP "
"client ip>:9100</computeroutput> as connection URI."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Use NFS instead of NBD"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "To speed up customizing and testing an LTSP chroot NFS could be used."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"# Switch from NBD --> NFS:\n"
"sed -i 's/default ltsp-NBD/default ltsp-NFS' /opt/ltsp/$(dpkg --print-architecture)/boot/pxelinux.cfg/ltsp\n"
"sed -i 's/ontimeout ltsp-NBD/ontimeout ltsp-NFS/' /opt/ltsp/$(dpkg --print-architecture)/boot/pxelinux.cfg/ltsp\n"
"ltsp-update-kernels"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"# Switch from NFS --> NBD:\n"
"ltsp-update-image \n"
"sed -i 's/default ltsp-NFS/default ltsp-NBD' /opt/ltsp/$(dpkg --print-architecture)/boot/pxelinux.cfg/ltsp\n"
"sed -i 's/ontimeout ltsp-NFS/ontimeout ltsp-NBD/' /opt/ltsp/$(dpkg --print-architecture)/boot/pxelinux.cfg/ltsp\n"
"ltsp-update-kernels"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Upgrading the LTSP environment"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"It is useful to upgrade the LTSP environment with new packages fairly often, "
"to make sure security fixes and improvements are made available. To "
"upgrade, run these commands as user root on each LTSP server:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"ltsp-chroot -a amd64 # this does \"chroot /opt/ltsp/amd64\" and more, ie it also prevents daemons from being started\n"
"apt update\n"
"apt upgrade\n"
"apt full-upgrade\n"
"exit\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><section><section><title>
msgid "Installing additional software in the LTSP environment"
msgstr ""
#. type: Content of: <article><section><section><section><section><para>
msgid ""
"To install additional software for an LTSP client you must perform the "
"installation inside the chroot of the LTSP server."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"ltsp-chroot -a amd64\n"
"## optionally, edit the sources.list:\n"
"#editor /etc/apt/sources.list\n"
"apt update\n"
"apt install $new_package\n"
"exit\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Slow login and security"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Skolelinux has added several security features on the client network "
"preventing unauthorised superuser access, password sniffing, and other "
"tricks which may be used on a local network. One such security measure is "
"secure login using SSH, which is the default with LDM. This can slow down "
"some client machines which are more than about fifteen years old, with as "
"little as a 160 MHz processor and 32 MB RAM. Although it's not recommended, "
"you can add a line to <computeroutput>/opt/ltsp/amd64/etc/lts.conf</"
"computeroutput> containing:"
msgstr ""
#. type: CDATA
#, no-wrap
msgid "LDM_DIRECTX=True"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"<emphasis role=\"strong\">Warning</emphasis>: The above protects initial "
"login, but all activities after that use unencrypted networked X. Passwords "
"(except the initial one) will travel in cleartext over the network, as well "
"as anything else."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Note: Since such fifteen-year-old thin clients may also have trouble running "
"newer versions of LibreOffice and Firefox due to pixmap caching issues, you "
"may consider running thin clients with at least 128 MB RAM, or upgrade the "
"hardware, which will also give you the benefit of being able to use them as "
"diskless workstations."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Connecting Windows machines to the network / Windows integration"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Joining a domain"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"For Windows clients the Windows domain \"SKOLELINUX\" is available to be "
"joined. A special service called Samba, installed on the main server, "
"enables Windows clients to store profiles and user data, and also "
"authenticates the users during the login."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Joining a domain with a Windows client requires the steps described in the "
"<link linkend=\"Samba\">Debian Edu Buster Samba Howto</link>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Windows will sync the profiles of domain users on every Windows login and "
"logout. Depending on how much data is stored in the profile, this could take "
"some time. To minimise the time needed, deactivate things like local cache "
"in browsers (you can use the Squid proxy cache installed on the main server "
"instead) and save files into the H: volume rather than under \"My Documents"
"\"."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Remote Desktop"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Choosing the LTSP server profile or the combined server profile also "
"installs the <emphasis>xrdp</emphasis> and <emphasis>x2goserver</emphasis> "
"packages."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Xrdp"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Xrdp uses the Remote Desktop Protocol to present a graphical login to a "
"remote client. Microsoft Windows users can connect to the LTSP server "
"running xrdp without installing additional software - they simply start a "
"Remote Desktop Connection on their Windows machine and connect."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Additionally, xrdp can connect to a VNC server or another RDP server."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Xrdp comes without sound support; to compile the required modules this "
"script could be used."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"#!/bin/bash\n"
" # Script to compile / recompile xrdp PulseAudio modules.\n"
" # The caller needs to be root or a member of the sudo group.\n"
" # Also, /etc/apt/sources.list must contain a valid deb-src line.\n"
" set -e\n"
" if [[ $UID -ne 0 ]] ; then \n"
" if ! groups | egrep -q sudo ; then\n"
" echo \"ERROR: You need to be root or a sudo group member.\"\n"
" exit 1\n"
" fi\n"
" fi\n"
" if ! egrep -q ^deb-src /etc/apt/sources.list ; then\n"
" echo \"ERROR: Make sure /etc/apt/sources.list contains a deb-src line.\"\n"
" exit 1\n"
" fi\n"
" TMP=$(mktemp -d)\n"
" PULSE_UPSTREAM_VERSION=\"$(dpkg-query -W -f='${source:Upstream-Version}' pulseaudio)\"\n"
" XRDP_UPSTREAM_VERSION=\"$(dpkg-query -W -f='${source:Upstream-Version}' xrdp)\"\n"
" sudo apt -q update\n"
" # Get sources and build dependencies:\n"
" sudo apt -q install dpkg-dev\n"
" cd $TMP\n"
" apt -q source pulseaudio xrdp\n"
" sudo apt -q build-dep pulseaudio xrdp\n"
" # For pulseaudio 'configure' is all what is needed:\n"
" cd pulseaudio-$PULSE_UPSTREAM_VERSION/\n"
" ./configure\n"
" # Adjust pulseaudio modules Makefile (needs absolute path)\n"
" # and build the pulseaudio modules.\n"
" cd $TMP/xrdp-$XRDP_UPSTREAM_VERSION/sesman/chansrv/pulse/\n"
" sed -i 's/^PULSE/#PULSE/' Makefile\n"
" sed -i \"/#PULSE_DIR/a \\\n"
" PULSE_DIR = $TMP/pulseaudio-$PULSE_UPSTREAM_VERSION\" Makefile\n"
" make\n"
" # Copy modules to Pulseaudio modules directory, adjust rights.\n"
" sudo cp *.so /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/\n"
" sudo chmod 644 /usr/lib/pulse-$PULSE_UPSTREAM_VERSION/modules/module-xrdp*\n"
" # Restart xrdp, now with sound enabled.\n"
" sudo service xrdp restart"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "X2Go"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"X2Go enables you to access a graphical desktop on the LTSP server over both "
"low bandwidth and high bandwidth connections from a PC running Linux, "
"Windows or Mac OS X. Additional software is needed on the client side, see "
"the <ulink url=\"https://wiki.x2go.org/doku.php/doc:installation:x2goclient";
"\">x2go wiki</ulink> for more information."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Please note that the <computeroutput>killer</computeroutput> package should "
"best be removed on the LTSP server if X2Go is used, see <ulink url=\"https://";
"bugs.debian.org/890517#\">890517</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Available Remote Desktop clients"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<computeroutput>freerdp-x11</computeroutput> is installed by default and is "
"capable of RDP and VNC."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"RDP - the easiest way to access Windows terminal server. An alternative "
"client package is <computeroutput>rdesktop</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"VNC client (Virtual Network Computer) gives access to Skolelinux remotely. "
"An alternative client package is <computeroutput>xvncviewer</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<computeroutput>x2goclient</computeroutput> is a graphical client for the "
"X2Go system (not installed by default). You can use it to connect to running "
"sessions and start new sessions."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://wiki.debian.org/DebianEdu/HowTo/CitrixApps\";>Citrix ICA "
"client HowTo</ulink> to access Windows terminal server from Skolelinux."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Samba in Debian Edu"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Please read the information provided on the Samba wiki about supported "
"Windows versions, needed registry patches and other procedures before "
"proceeding."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"<ulink url=\"https://wiki.samba.org/index.php/";
"Joining_a_Windows_Client_or_Server_to_a_Domain\"/>"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"<ulink url=\"https://wiki.samba.org/index.php/";
"Required_Settings_for_Samba_NT4_Domains\"/>"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Samba has been fully prepared for use as an NT4-style domain controller. "
"After a machine has joined the domain, this machine can be fully managed "
"with GOsa²."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Getting Started"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This documentation presumes that you have installed the Debian Edu main "
"server and also a Debian Edu workstation. We presume that you have already "
"created some users that can login and use the Debian Edu workstation. We "
"also presume that you have a Windows workstation at hand, so you can test "
"access to the Debian Edu main server from a Windows machine."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"After installation of the Debian Edu main server the Samba host \\\\TJENER "
"should be visible in your Windows Network Neighbourhood. Debian Edu's "
"Windows domain is SKOLELINUX. Use a Windows machine (or a Linux system with "
"smbclient) to browse your Windows/Samba network environment."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid "START -> Run command"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid "enter \\\\TJENER and press return"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid ""
"-> a Windows Explorer window should open and show the netlogon share on \\"
"\\TJENER, and maybe printers you already have configured for printing under "
"Unix/Linux (CUPS queues)."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Accessing files via Samba"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Student and teacher user accounts that have been configured via GOsa² should "
"be able to authenticate against \\\\TJENER\\HOMES or \\\\TJENER\\<"
"username> and access their home directories even with Windows machines "
"<emphasis role=\"strong\">not</emphasis> joined to the Windows SKOLELINUX "
"domain."
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"enter \\\\TJENER\\HOMES or \\\\TJENER\\<username> and press return"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"enter your login credentials (username, password) in the authentication "
"dialog window that appears"
msgstr ""
#. type: Content of: <article><section><section><section><orderedlist><listitem><para>
msgid ""
"-> a Windows Explorer window should open and show files and folders in "
"your Debian Edu home directory."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"By default only the [homes] and the [netlogon] shares are exported; further "
"share examples for students and teachers can be found in <computeroutput>/"
"etc/samba/smb-debian-edu.conf</computeroutput> on your Debian Edu main "
"server."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Domain Membership"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To use Samba on TJENER as a domain controller, your network's Windows "
"workstations have to join the SKOLELINUX domain provided by the Debian Edu "
"main server."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The first thing you have to do is to enable the SKOLELINUX\\Administrator "
"account. This account is not intended for day-to-day usage; its current main "
"purpose is to add Windows machines to the SKOLELINUX domain. To enable this "
"account log on to TJENER as the first user (created during main server "
"installation) and run this command:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "$ sudo smbpasswd -e Administrator"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The password of SKOLELINUX\\Administrator has been preconfigured during the "
"main server's installation. Please use the system's root account when "
"authenticating as SKOLELINUX\\Administrator."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Once you are done with your administrative work make sure to disable the "
"SKOLELINUX\\Administrator account again:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "$ sudo smbpasswd -d Administrator"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Windows hostname"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Make sure your Windows machine has the name that you want to use in the "
"SKOLELINUX domain. If not, rename it first (and then reboot). The NetBIOS "
"host name of the Windows machine will later on be used in GOsa² and cannot "
"be changed there (without breaking the domain membership for this machine)."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "First Domain Logon"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Debian Edu ships some logon scripts that pre-configure the Windows user "
"profile on first logon. When logging on to a Windows workstation that has "
"joined the SKOLELINUX domain for the first time the following tasks are run:"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid ""
"copy the user's Firefox profile to a separate location and register that "
"with Mozilla Firefox on Windows"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid "set up Web-Proxy and start page in Firefox"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid "set up Web-Proxy and start page in IE"
msgstr ""
#. type: Content of: <article><section><section><orderedlist><listitem><para>
msgid ""
"add a MyHome icon to the Desktop that points to drive H: and opens Windows "
"Explorer on double-click"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Other tasks are run on every logon. For further information on this, please "
"refer to the <computeroutput>/etc/samba/netlogon</computeroutput> folder on "
"your Debian Edu main server."
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTos for teaching and learning"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"All Debian packages mentioned in this section can be installed by running "
"<computeroutput>apt install <package></computeroutput> (as root)."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Teaching Programming"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<ulink url=\"https://packages.debian.org/stable/education-development#";
"\">stable/education-development</ulink> is a meta package depending on a lot "
"of programming tools. Please note that almost 2 GiB of disk space is needed "
"if this package is installed. For more details (maybe to install only a few "
"packages), see the <ulink url=\"https://blends.debian.org/edu/tasks/";
"development\">Debian Edu Development packages</ulink> page."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Monitoring pupils"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">Warning</emphasis>: make sure you know the status "
"of the laws about monitoring and restricting computer users' activities in "
"your jurisdiction."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Some schools use control tools like <ulink url=\"https://packages.debian.org/";
"stable/epoptes#\">Epoptes</ulink> or <ulink url=\"https://packages.debian.";
"org/stable//veyon-configurator#\">Veyon</ulink> to supervise their students. "
"See also: <ulink url=\"http://www.epoptes.org\";>Epoptes Homepage</ulink> and "
"<ulink url=\"http://www.veyon.io\";>Veyon Homepage</ulink>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "To get full Epoptes support, these steps are required."
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"# Run on a combi server (and on each additional ltsp server):\n"
"apt update\n"
"apt install epoptes\n"
"ltsp-chroot -m --arch amd64 apt update\n"
"ltsp-chroot -m --arch amd64 apt install epoptes-client\n"
"ltsp-chroot -m --arch amd64 apt install ssvnc\n"
"ltsp-chroot -m --arch amd64 sed -i 's/test -f/#test -f/' /etc/init.d/epoptes-client \n"
"ltsp-chroot -m --arch amd64 sed -i 's/grep -qs/#grep -qs/' /etc/init.d/epoptes-client \n"
"# If diskspace matters, use 'ltsp-update-image -n' instead.\n"
"ltsp-update-image"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Restricting pupils' network access"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Some schools use <ulink url=\"https://packages.debian.org/stable/squidguard#";
"\">Squidguard</ulink> or <ulink url=\"https://packages.debian.org/stable/";
"dansguardian#\">Dansguardian</ulink> to restrict Internet access."
msgstr ""
#. type: Content of: <article><section><title>
msgid "HowTos for users"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Changing passwords"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Every user should change her or his password by using GOsa². To do so, just "
"use a browser and go to <computeroutput>https://www/gosa/</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Using GOsa² to change the password ensures that passwords for Kerberos "
"(krbPrincipalKey), LDAP (userPassword) and Samba (sambaNTPassword and "
"sambaLMPassword) are the same."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Changing passwords using PAM is working also at the GDM login prompt, but "
"this will only update the Kerberos password, and not the Samba and GOsa² "
"(LDAP) password. So after you changed your password at the login prompt, you "
"really should also change it using GOsa²."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Java"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Running standalone Java applications"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Standalone Java applications are supported out of the box by the OpenJDK "
"Java runtime."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Using email"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"All users can send and receive mails within the internal network; "
"certificates are provided to allow TLS secured connections. To allow mail "
"outside the internal network, the administrator needs to configure the "
"mailserver <computeroutput>exim4</computeroutput> to suit the local "
"situation, starting with <computeroutput>dpkg-reconfigure exim4-config</"
"computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Every user who wants to use Thunderbird needs to configure it as follows. "
"For a user with username jdoe the internal email address is <ulink url="
"\"mailto:jdoe@postoffice.intern\";>jdoe@postoffice.intern</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Thunderbird"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Start Thunderbird"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Click 'Skip this and use my existing email'"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Enter your email address"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Don't enter your password as Kerberos single sign on will be used"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Click 'Continue'"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"For both IMAP and SMTP the settings should be 'STARTTLS' and 'Kerberos/"
"GSSAPI'; adjust if not detected automatically"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Click 'Done'"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Obtaining a Kerberos ticket to read email on diskless workstations"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If working on a diskless workstation, you don't have a Kerberos TGT by "
"default. To get one, click the credentials button in the system tray. Enter "
"your password and the ticket will be granted."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Volume control"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"On thin clients, <computeroutput>pavucontrol</computeroutput> or "
"<computeroutput>alsamixer</computeroutput> (but not <computeroutput>kmix</"
"computeroutput>) can be used to change audio volume."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"On other machines (workstations, LTSP servers, and diskless workstations), "
"<computeroutput>kmix</computeroutput> or <computeroutput>alsamixer</"
"computeroutput> can be used."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Contribute"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Contribute locally"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Currently there are local teams in Norway, Germany, the region of "
"Extremadura in Spain, Taiwan and France. \"Isolated\" contributors and users "
"exist in Greece, the Netherlands, Japan and elsewhere."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The <link linkend=\"Support\">support chapter</link> has explanations and "
"links to localised resources, as <emphasis>contribute</emphasis> and "
"<emphasis>support</emphasis> are two sides of the same coin."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Contribute globally"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Internationally we are organised into various <ulink url=\"http://wiki.";
"debian.org/DebianEdu/Teams/\">teams</ulink> working on different subjects."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Most of the time, the <ulink url=\"http://lists.debian.org/debian-edu";
"\">developer mailing list</ulink> is our main medium for communication, "
"though we have monthly IRC meetings on #debian-edu on irc.debian.org and "
"even, less frequently, real gatherings, where we meet each other in person. "
"<ulink url=\"http://wiki.debian.org/DebianEdu/NewContributor\";>New "
"contributors</ulink> should read our <ulink url=\"http://wiki.debian.org/";
"DebianEdu/ArchivePolicy\"/>."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A good way to learn what is happening in the development of Debian Edu is to "
"subscribe to the <ulink url=\"https://alioth-lists.debian.net/cgi-bin/";
"mailman/listinfo/debian-edu-commits\">commit mailinglist</ulink>."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Documentation writers and translators"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This document needs your help! First and foremost, it is not finished yet: "
"if you read it, you will notice various FIXMEs within the text. If you "
"happen to know (a bit of) what needs to be explained there, please consider "
"sharing your knowledge with us."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The source of the text is a wiki and can be edited with a simple webbrowser. "
"Just go to <ulink url=\"http://wiki.debian.org/DebianEdu/Documentation/";
"Buster/\"/> and you can contribute easily. Note: a user account is needed to "
"edit the pages; you need to <ulink url=\"http://wiki.debian.org/";
"UserPreferences\">create a wiki user</ulink> first."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Another very good way to contribute and to help users is by translating "
"software and documentation. Information on how to translate this document "
"can be found in the <link linkend=\"Translations\">translations chapter</"
"link> of this book. Please consider helping the translation effort of this "
"book!"
msgstr ""
#. type: Content of: <article><section><title>
msgid "Support"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Volunteer based support"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "in English"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "<ulink url=\"http://wiki.debian.org/DebianEdu\"/>"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"https://lists.skolelinux.org/listinfo/admin-discuss\"/> - "
"support mailing list"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"#debian-edu on irc.debian.org - IRC channel, mostly development related; do "
"not expect real time support even though it frequently happens"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "in Norwegian"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"https://lists.skolelinux.org/listinfo/bruker\"/> - support "
"mailing list"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"https://lists.skolelinux.org/listinfo/linuxiskolen\"/> - "
"mailing list for the development member organisation in Norway (FRISK)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "#skolelinux on irc.debian.org - IRC channel to support Norwegian users"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "in German"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://lists.debian.org/debian-edu-german\"/> - support mailing "
"list"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"https://www.skolelinux.de\"/> - official German representation"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "#skolelinux.de on irc.debian.org - IRC channel to support German users"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "in French"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<ulink url=\"http://lists.debian.org/debian-edu-french\"/> - support mailing "
"list"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Professional support"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Lists of companies providing professional support are available from <ulink "
"url=\"http://wiki.debian.org/DebianEdu/Help/ProfessionalHelp\"/>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "New features in Debian Edu Buster"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "New features for Debian Edu 10+edu0 Codename Buster"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Installation changes"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"This is the first time Debian Edu installation images are available at "
"<ulink url=\"https://cdimage.debian.org\"/>, thus these are official Debian "
"images."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New version of debian-installer from Debian Buster, see its <ulink url="
"\"http://www.debian.org/releases/buster/installmanual\";>installation manual</"
"ulink> for more details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New artwork based on the <ulink url=\"https://wiki.debian.org/DebianArt/";
"Themes/futurePrototype#\">futurePrototype theme</ulink>, the default artwork "
"for Debian 10 Buster."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "New default desktop environment Xfce (replacing KDE)."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New CFEngine configuration management (replacing unmaintained package "
"cfengine2 with cfengine3); this is a major change, for details see <ulink "
"url=\"https://docs.cfengine.com\";>the official CFEngine documentation</"
"ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "The architecture of the LTSP chroot now defaults to the server one."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Software updates"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Everything which is new in Debian 10 Buster, eg:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Linux kernel 4.19"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Desktop environments KDE Plasma Workspace 5.14, GNOME 3.22, Xfce 4.12, LXDE "
"0.53, MATE 1.20"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Firefox 60.5 ESR and Chromium 72.0"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LibreOffice 6.1"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Educational toolbox GCompris 0.95"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Music creator Rosegarden 18.12"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "GOsa 2.74"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LTSP 5.18"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Buster includes more than 57000 packages available for installation."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"More information about Debian 10 Buster is provided in the <ulink url="
"\"http://www.debian.org/releases/buster/releasenotes\";>release notes</ulink> "
"and the <ulink url=\"http://www.debian.org/releases/buster/installmanual";
"\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Documentation and translation updates"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Translation updates for the templates used in the installer. These templates "
"are now available in 76 languages, of which 31 are fully translated. The "
"profile choice page is available in 29 languages, of which 19 are fully "
"translated."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The Debian Edu Buster Manual is fully translated to German, Italian, Danish, "
"Dutch, Norwegian Bokmål and Japanese."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Partly translated versions exist for French, Polish, Spanish, Simplified "
"Chinese and Traditional Chinese."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Other changes compared to the previous release"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "The BD ISO image can be used for offline installations again."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New school level related meta-packages <emphasis>education-preschool</"
"emphasis>, <emphasis>education-primaryschool</emphasis>, <emphasis>education-"
"secondaryschool</emphasis> and <emphasis>education-highschool</emphasis> are "
"available. None of them is installed by default."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Some packages rather belonging to preschool or primaryschool level (like "
"<emphasis>gcompris-qt</emphasis>, <emphasis>childsplay</emphasis>, "
"<emphasis>tuxpaint</emphasis> or <emphasis>tuxmath</emphasis>) are no longer "
"installed by default."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Site specific modular installation. It is now possible to install only those "
"educational packages that are actually wanted. See the <link linkend="
"\"Installation--Modular_installation\">installation</link> chapter for more "
"information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Site specific multi-language support. See the <link linkend=\"Desktop--"
"Set_up_a_multi-language_desktop_environment\">Desktop</link> chapter for "
"more information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "LXQt 0.14 is offered as a new choice for the desktop environment."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "New GOsa²-Plugin <emphasis>Password Management</emphasis>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Unusable options have been removed from the GOsa² web interface."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New netgroup available to exclude systems belonging to the <emphasis>shut-"
"down-at-night-hosts</emphasis> netgroup from being woken up."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New tool Standardskriver (Default printer). See the <link linkend="
"\"Administration--Standardskriver\">Administration</link> chapter for more "
"information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New tool Desktop-autoloader. It allows performance improvements for LTSP "
"diskless clients. See the <link linkend=\"NetworkClients--Desktop_autoloader"
"\">NetworkClients</link> chapter for more information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Improved TLS/SSL support inside the internal network. A RootCA certificate "
"is used to sign server certificates and user home directories are configured "
"to accept it at account creation time; besides Firefox ESR, also Chromium "
"and Konqueror can now use HTTPS without the need to allow insecure "
"connections."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Kerberized <emphasis>ssh</emphasis>. A password isn't needed anymore for "
"connections inside the internal network; root needs to run "
"<computeroutput>kinit</computeroutput> first to enable it."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Kerberized NFS. It is now possible to use more secure home directory access, "
"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
"link> chapter for more information."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</"
"computeroutput> with examples to make site specific changes easier."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Added configuration file <computeroutput>/etc/ltsp/ltsp-build-client.conf</"
"computeroutput> with examples to make site specific changes easier."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New tool <computeroutput>/usr/share/debian-edu-config/tools/edu-ldap-from-"
"scratch</computeroutput>. It allows to re-generate the LDAP data base just "
"like it has been right after the main server installation. The tool might "
"also be useful to make site specific changes easier."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"With <emphasis>X2Go server</emphasis> now available in Debian, the related "
"packages are now installed on all systems with Profile <emphasis>LTSP-"
"Server</emphasis>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Support for running Java applets in the Firefox ESR browser has been dropped "
"upstream."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Support for nonfree flash has been dropped from the Firefox ESR browser."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Like it has been before Stretch, Debian 10 doesn't install the "
"<computeroutput>unattended-upgrades</computeroutput> package by default, see "
"the <link linkend=\"Maintenance--Updating_the_software\">Maintenance</link> "
"chapter for more information about security upgrades."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Known issues"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"see <ulink url=\"https://wiki.debian.org/DebianEdu/Status/Buster#\";>the "
"Debian Edu Buster status page</ulink>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Copyright and authors"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"This document is written and copyrighted by Holger Levsen (2007, 2008, 2009, "
"2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019), Petter "
"Reinholdtsen (2001, 2002, 2003, 2004, 2007, 2008, 2009, 2010, 2012, 2014), "
"Daniel Heß (2007), Patrick Winnertz (2007), Knut Yrvin (2007), Ralf "
"Gesellensetter (2007), Ronny Aasen (2007), Morten Werner Forsbring (2007), "
"Bjarne Nielsen (2007, 2008), Nigel Barker (2007), José L. Redrejo Rodríguez "
"(2007), John Bildoy (2007), Joakim Seeberg (2008), Jürgen Leibner (2009, "
"2010, 2011, 2012, 2014), Oded Naveh (2009), Philipp Hübner (2009, 2010), "
"Andreas Mundt (2010), Olivier Vitrat (2010, 2012), Vagrant Cascadian (2010), "
"Mike Gabriel (2011), Justin B Rye (2012), David Prévot (2012), Wolfgang "
"Schweer (2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019), Bernhard Hammes "
"(2012) and Joe Hansen (2015) and is released under the GPL2 or any later "
"version. Enjoy!"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"If you add content to it, <emphasis role=\"strong\">please only do so if you "
"are the author. You need to release it under the same conditions</emphasis>! "
"Then add your name here and release it under the \"GPL v2 or any later "
"version\" licence."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Translation copyright and authors"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Spanish translation is copyrighted by José L. Redrejo Rodríguez (2007), "
"Rafael Rivas (2009, 2010, 2011, 2012, 2015) and Norman Garcia (2010, 2012, "
"2013) and is released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Bokmål translation is copyrighted by Petter Reinholdtsen (2007, 2012, "
"2014, 2015, 2016, 2017, 2018, 2019), Håvard Korsvoll (2007-2009), Tore "
"Skogly (2008), Ole-Anders Andreassen (2010), Jan Roar Rød (2010), Ole-Erik "
"Yrvin (2014, 2016, 2017), Ingrid Yrvin (2014, 2015, 2016, 2017), Hans Arthur "
"Kielland Aanesen (2014), Knut Yrvin (2014), FourFire Le'bard (2014), Stefan "
"Mitchell-Lauridsen (2014), Ragnar Wisløff (2014) and Allan Nordhøy (2018, "
"2019) and is released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The German translation is copyrighted by Holger Levsen (2007), Patrick "
"Winnertz (2007), Ralf Gesellensetter (2007, 2009), Roland F. Teichert (2007, "
"2008, 2009), Jürgen Leibner (2007, 2009, 2011, 2014), Ludger Sicking (2008, "
"2010), Kai Hatje (2008), Kurt Gramlich (2009), Franziska Teichert (2009), "
"Philipp Hübner (2009), Andreas Mundt (2009, 2010) and Wolfgang Schweer "
"(2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019) and is released under the "
"GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Italian translation is copyrighted by Claudio Carboncini (2007, 2008, "
"2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017, 2018, 2019) and "
"Beatrice Torracca (2013, 2014) and is released under the GPL v2 or any later "
"version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The French translation is copyrighted by Christophe Masson (2008), Olivier "
"Vitrat (2010), Cédric Boutillier (2012, 2013, 2014, 2015), Jean-Paul "
"Guilloneau (2012), David Prévot (2012), Thomas Vincent (2012) and the French "
"l10n team (2009, 2010, 2012) and is released under the GPL v2 or any later "
"version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Danish translation is copyrighted by Joe Hansen (2012, 2013, 2014, 2015, "
"2016, 2019) and is released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Dutch translation is copyrighted by Frans Spiesschaert (2014, 2015, "
"2016, 2017, 2018, 2019) and is released under the GPL v2 or any later "
"version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Japanese translation is copyrighted by victory (2016, 2017) and is "
"released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Polish translation is copyrighted by Stanisław Krukowski (2016, 2017) "
"and is released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Simplified Chinese translation is copyrighted by Ma Yong (2016, 2017, "
"2018), Boyuan Yang (2017) and Roy Zhang (2017) and is released under the GPL "
"v2 or any later version."
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"The Traditional Chinese translation is copyrighted by Louies (2019) and is "
"released under the GPL v2 or any later version."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Translations of this document"
msgstr ""
#. type: Content of: <article><section><para>
msgid ""
"Versions of this document translated into German, Italian, French, Danish, "
"Dutch, Norwegian Bokmål and Japanese are available. Incomplete translations "
"exist for Spanish, Polish and Simplified Chinese. There is an <ulink url="
"\"https://jenkins.debian.net/userContent/debian-edu-doc/\";>online overview "
"of shipped translations</ulink>."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "HowTo translate this document"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Translate using PO files"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"As in many free software projects, translations of this document are kept in "
"PO files. More information about the process can be found in "
"<computeroutput>/usr/share/doc/debian-edu-doc/README.debian-edu-buster-"
"manual-translations</computeroutput>. The Git repository (see below) "
"contains this file too. Take a look there and at the <ulink url=\"https://";
"wiki.debian.org/DebianEdu/Contribute/Translation/Conventions#\">language "
"specific conventions</ulink> if you want to help translating this document."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To commit your translations you need to be a member of the Salsa project "
"<computeroutput>debian-edu</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Then check out the <computeroutput>debian-edu-doc</computeroutput> source "
"using ssh access: <computeroutput>git clone git@salsa.debian.org:debian-edu/"
"debian-edu-doc.git</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If you only want to translate, you need to check out only a few files from "
"Git (which can be done anonymously). Please file a bug against the debian-"
"edu-doc package and attach the PO file to the <ulink url=\"http://bugs.";
"debian.org/debian-edu-doc\">bugreport</ulink>. See <ulink url=\"http://bugs.";
"debian.org\">instructions on how to submit bugs</ulink> for more information."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"You can check out the <computeroutput>debian-edu-doc</computeroutput> source "
"anonymously with the following command (you need to have the "
"<computeroutput>git</computeroutput> package installed for this to work):"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<computeroutput>git clone https://salsa.debian.org/debian-edu/debian-edu-doc.";
"git</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Then edit the file <computeroutput>documentation/debian-edu-buster/debian-"
"edu-buster-manual.$CC.po</computeroutput> (replacing $CC with your language "
"code). There are many tools for translating available; we suggest using "
"<computeroutput>lokalize</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Then you either commit the file directly to Git (if you have the rights to "
"do so) or send the file to the bugreport."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"To update your local copy of the repository use the following command inside "
"the <computeroutput>debian-edu-doc</computeroutput> directory:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "<computeroutput>git pull</computeroutput>"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Read /usr/share/doc/debian-edu-doc/README.debian-edu-buster-manual-"
"translations to find information how to create a new PO file for your "
"language if there isn't one yet, and how to update translations."
msgstr ""
#. <remark>
#. status ignore</remark>
#. type: Content of: <article><section><section><section><para>
msgid ""
"Please keep in mind that this manual is still under development, so don't "
"translate any string which contains \" FIXME\"."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Basic information about Salsa (the host where our Git repository is located) "
"and Git is available at <ulink url=\"https://wiki.debian.org/Salsa\"/>."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"If you are new to Git, look at the <ulink url=\"http://git-scm.com/book";
"\">Pro Git</ulink> book; it has a chapter on the <ulink url=\"http://git-scm.";
"com/book/en/Git-Basics-Recording-Changes-to-the-Repository\">recording "
"changes to the repository</ulink>. Also you might want to look at the "
"<computeroutput>gitk</computeroutput> package that provides a GUI for Git."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Translate online using a web browser"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"Some language teams have decided to translate via Weblate. See <ulink url="
"\"https://hosted.weblate.org/projects/debian-edu-documentation/debian-edu-";
"buster/\"/> for more information."
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid "Please report any problems."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Appendix A - The GNU General Public License"
msgstr ""
#. type: CDATA
#, no-wrap
msgid ""
"Note to translators: there is no need to translate the GPL license text.\n"
"Translations are available at https://www.gnu.org/licenses/old-licenses/gpl-2.0-translations.html.";
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Copyright (C) 2007-2018 Holger Levsen < <ulink url=\"mailto:holger@layer-";
"acht.org\">holger@layer-acht.org</ulink> > and others, see the <link "
"linkend=\"CopyRight\">Copyright chapter</link> for the full list of "
"copyright owners."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This program is free software; you can redistribute it and/or modify it "
"under the terms of the GNU General Public License as published by the Free "
"Software Foundation; either version 2 of the License, or (at your option) "
"any later version."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This program is distributed in the hope that it will be useful, but WITHOUT "
"ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or "
"FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for "
"more details."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"You should have received a copy of the GNU General Public License along with "
"this program; if not, write to the Free Software Foundation, Inc., 51 "
"Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "GNU GENERAL PUBLIC LICENSE"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "Version 2, June 1991"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, "
"Fifth Floor, Boston, MA 02110-1301, USA. Everyone is permitted to copy and "
"distribute verbatim copies of this license document, but changing it is not "
"allowed."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">0.</emphasis> This License applies to any program "
"or other work which contains a notice placed by the copyright holder saying "
"it may be distributed under the terms of this General Public License. The "
"\"Program\", below, refers to any such program or work, and a \"work based "
"on the Program\" means either the Program or any derivative work under "
"copyright law: that is to say, a work containing the Program or a portion of "
"it, either verbatim or with modifications and/or translated into another "
"language. (Hereinafter, translation is included without limitation in the "
"term \"modification\".) Each licensee is addressed as \"you\"."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Activities other than copying, distribution and modification are not covered "
"by this License; they are outside its scope. The act of running the Program "
"is not restricted, and the output from the Program is covered only if its "
"contents constitute a work based on the Program (independent of having been "
"made by running the Program). Whether that is true depends on what the "
"Program does."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">1.</emphasis> You may copy and distribute verbatim "
"copies of the Program's source code as you receive it, in any medium, "
"provided that you conspicuously and appropriately publish on each copy an "
"appropriate copyright notice and disclaimer of warranty; keep intact all the "
"notices that refer to this License and to the absence of any warranty; and "
"give any other recipients of the Program a copy of this License along with "
"the Program."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"You may charge a fee for the physical act of transferring a copy, and you "
"may at your option offer warranty protection in exchange for a fee."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">2.</emphasis> You may modify your copy or copies "
"of the Program or any portion of it, thus forming a work based on the "
"Program, and copy and distribute such modifications or work under the terms "
"of Section 1 above, provided that you also meet all of these conditions:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">a)</emphasis> You must cause the modified files to "
"carry prominent notices stating that you changed the files and the date of "
"any change."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">b)</emphasis> You must cause any work that you "
"distribute or publish, that in whole or in part contains or is derived from "
"the Program or any part thereof, to be licensed as a whole at no charge to "
"all third parties under the terms of this License."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">c)</emphasis> If the modified program normally "
"reads commands interactively when run, you must cause it, when started "
"running for such interactive use in the most ordinary way, to print or "
"display an announcement including an appropriate copyright notice and a "
"notice that there is no warranty (or else, saying that you provide a "
"warranty) and that users may redistribute the program under these "
"conditions, and telling the user how to view a copy of this License. "
"(Exception: if the Program itself is interactive but does not normally print "
"such an announcement, your work based on the Program is not required to "
"print an announcement.)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"These requirements apply to the modified work as a whole. If identifiable "
"sections of that work are not derived from the Program, and can be "
"reasonably considered independent and separate works in themselves, then "
"this License, and its terms, do not apply to those sections when you "
"distribute them as separate works. But when you distribute the same "
"sections as part of a whole which is a work based on the Program, the "
"distribution of the whole must be on the terms of this License, whose "
"permissions for other licensees extend to the entire whole, and thus to each "
"and every part regardless of who wrote it."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Thus, it is not the intent of this section to claim rights or contest your "
"rights to work written entirely by you; rather, the intent is to exercise "
"the right to control the distribution of derivative or collective works "
"based on the Program."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"In addition, mere aggregation of another work not based on the Program with "
"the Program (or with a work based on the Program) on a volume of a storage "
"or distribution medium does not bring the other work under the scope of this "
"License."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">3.</emphasis> You may copy and distribute the "
"Program (or a work based on it, under Section 2) in object code or "
"executable form under the terms of Sections 1 and 2 above provided that you "
"also do one of the following:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">a)</emphasis> Accompany it with the complete "
"corresponding machine-readable source code, which must be distributed under "
"the terms of Sections 1 and 2 above on a medium customarily used for "
"software interchange; or,"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">b)</emphasis> Accompany it with a written offer, "
"valid for at least three years, to give any third party, for a charge no "
"more than your cost of physically performing source distribution, a complete "
"machine-readable copy of the corresponding source code, to be distributed "
"under the terms of Sections 1 and 2 above on a medium customarily used for "
"software interchange; or,"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis role=\"strong\">c)</emphasis> Accompany it with the information "
"you received as to the offer to distribute corresponding source code. (This "
"alternative is allowed only for noncommercial distribution and only if you "
"received the program in object code or executable form with such an offer, "
"in accord with Subsection b above.)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The source code for a work means the preferred form of the work for making "
"modifications to it. For an executable work, complete source code means all "
"the source code for all modules it contains, plus any associated interface "
"definition files, plus the scripts used to control compilation and "
"installation of the executable. However, as a special exception, the source "
"code distributed need not include anything that is normally distributed (in "
"either source or binary form) with the major components (compiler, kernel, "
"and so on) of the operating system on which the executable runs, unless that "
"component itself accompanies the executable."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If distribution of executable or object code is made by offering access to "
"copy from a designated place, then offering equivalent access to copy the "
"source code from the same place counts as distribution of the source code, "
"even though third parties are not compelled to copy the source along with "
"the object code."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">4.</emphasis> You may not copy, modify, "
"sublicense, or distribute the Program except as expressly provided under "
"this License. Any attempt otherwise to copy, modify, sublicense or "
"distribute the Program is void, and will automatically terminate your rights "
"under this License. However, parties who have received copies, or rights, "
"from you under this License will not have their licenses terminated so long "
"as such parties remain in full compliance."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">5.</emphasis> You are not required to accept this "
"License, since you have not signed it. However, nothing else grants you "
"permission to modify or distribute the Program or its derivative works. "
"These actions are prohibited by law if you do not accept this License. "
"Therefore, by modifying or distributing the Program (or any work based on "
"the Program), you indicate your acceptance of this License to do so, and all "
"its terms and conditions for copying, distributing or modifying the Program "
"or works based on it."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">6.</emphasis> Each time you redistribute the "
"Program (or any work based on the Program), the recipient automatically "
"receives a license from the original licensor to copy, distribute or modify "
"the Program subject to these terms and conditions. You may not impose any "
"further restrictions on the recipients' exercise of the rights granted "
"herein. You are not responsible for enforcing compliance by third parties to "
"this License."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">7.</emphasis> If, as a consequence of a court "
"judgment or allegation of patent infringement or for any other reason (not "
"limited to patent issues), conditions are imposed on you (whether by court "
"order, agreement or otherwise) that contradict the conditions of this "
"License, they do not excuse you from the conditions of this License. If you "
"cannot distribute so as to satisfy simultaneously your obligations under "
"this License and any other pertinent obligations, then as a consequence you "
"may not distribute the Program at all. For example, if a patent license "
"would not permit royalty-free redistribution of the Program by all those who "
"receive copies directly or indirectly through you, then the only way you "
"could satisfy both it and this License would be to refrain entirely from "
"distribution of the Program."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"If any portion of this section is held invalid or unenforceable under any "
"particular circumstance, the balance of the section is intended to apply and "
"the section as a whole is intended to apply in other circumstances."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"It is not the purpose of this section to induce you to infringe any patents "
"or other property right claims or to contest validity of any such claims; "
"this section has the sole purpose of protecting the integrity of the free "
"software distribution system, which is implemented by public license "
"practices. Many people have made generous contributions to the wide range "
"of software distributed through that system in reliance on consistent "
"application of that system; it is up to the author/donor to decide if he or "
"she is willing to distribute software through any other system and a "
"licensee cannot impose that choice."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"This section is intended to make thoroughly clear what is believed to be a "
"consequence of the rest of this License."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">8.</emphasis> If the distribution and/or use of "
"the Program is restricted in certain countries either by patents or by "
"copyrighted interfaces, the original copyright holder who places the Program "
"under this License may add an explicit geographical distribution limitation "
"excluding those countries, so that distribution is permitted only in or "
"among countries not thus excluded. In such case, this License incorporates "
"the limitation as if written in the body of this License."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">9.</emphasis> The Free Software Foundation may "
"publish revised and/or new versions of the General Public License from time "
"to time. Such new versions will be similar in spirit to the present "
"version, but may differ in detail to address new problems or concerns."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"Each version is given a distinguishing version number. If the Program "
"specifies a version number of this License which applies to it and \"any "
"later version\", you have the option of following the terms and conditions "
"either of that version or of any later version published by the Free "
"Software Foundation. If the Program does not specify a version number of "
"this License, you may choose any version ever published by the Free Software "
"Foundation."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">10.</emphasis> If you wish to incorporate parts of "
"the Program into other free programs whose distribution conditions are "
"different, write to the author to ask for permission. For software which is "
"copyrighted by the Free Software Foundation, write to the Free Software "
"Foundation; we sometimes make exceptions for this. Our decision will be "
"guided by the two goals of preserving the free status of all derivatives of "
"our free software and of promoting the sharing and reuse of software "
"generally."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "<emphasis role=\"strong\">NO WARRANTY</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">11.</emphasis> BECAUSE THE PROGRAM IS LICENSED "
"FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT "
"PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE "
"COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM \"AS IS\" WITHOUT "
"WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT "
"LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A "
"PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF "
"THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE "
"COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"<emphasis role=\"strong\">12.</emphasis> IN NO EVENT UNLESS REQUIRED BY "
"APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY "
"OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED "
"ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, "
"INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO "
"USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING "
"RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE "
"OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR "
"OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "<emphasis role=\"strong\">END OF TERMS AND CONDITIONS</emphasis>"
msgstr ""
#. type: Content of: <article><section><title>
msgid "Appendix B - no Debian Edu Live CD/DVDs for Buster yet"
msgstr ""
#. type: Content of: <article><section><para>
msgid "Debian Edu Live CD/DVDs for Buster are not available at the moment."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Features of the Standalone image"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "XFCE desktop"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "All packages from the Standalone profile"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "All packages from the laptop task"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Features of the Workstation image"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "All packages from the Workstation profile"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Activating translations and regional support"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"To activate a specific translation, boot using <computeroutput>locale=ll_CC."
"UTF-8</computeroutput> as a boot option, where ll_CC.UTF-8 is the locale "
"name you want. To activate a given keyboard layout, use the "
"<computeroutput>keyb=KB</computeroutput> option where KB is the desired "
"keyboard layout. Here is a list of commonly used locale codes:"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Language (Region)</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Locale value</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "<emphasis role=\"strong\">Keyboard layout</emphasis>"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Norwegian Bokmål"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "nb_NO.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "no"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Norwegian Nynorsk"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "nn_NO.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "German"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "de_DE.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "de"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "French (France)"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "fr_FR.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "fr"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Greek (Greece)"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "el_GR.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "el"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Japanese"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "ja_JP.UTF-8"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "jp"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "Northern Sami (Norway)"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "se_NO"
msgstr ""
#. type: Content of: <article><section><section><informaltable><tgroup><tbody><row><entry><para>
msgid "no(smi)"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A complete list of locale codes is available in <computeroutput>/usr/share/"
"i18n/SUPPORTED</computeroutput>, but only the UTF-8 locales are supported by "
"the live images. Not all locales have translations installed, though. The "
"keyboard layout names can be found in /usr/share/keymaps/i386/."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Stuff to know"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "The password for the user is \"user\"; root has no password set."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Known issues with the image"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "There are no images yet"
msgstr ""
#. type: Attribute 'fileref' of: <article><section><section><itemizedlist><listitem><para><inlinemediaobject><imageobject><imagedata>
msgid "./images/sad.png"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para><inlinemediaobject><textobject><phrase>
msgid ":("
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Download"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"The image would be (but currently isn't) available via <ulink url=\"ftp://";
"ftp.skolelinux.org/cd-buster-live/\">FTP</ulink>, <ulink url=\"http://ftp.";
"skolelinux.org/cd-buster-live/\">HTTP</ulink> or rsync from "
"<computeroutput>ftp.skolelinux.org</computeroutput> under <computeroutput>cd-"
"buster-live/</computeroutput>."
msgstr ""
#. type: Content of: <article><section><title>
msgid "Appendix C - Features in older releases"
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "New features for Debian Edu 9+edu0 Codename Stretch released 2017-06-17"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New version of debian-installer from Debian Stretch, see its <ulink url="
"\"http://www.debian.org/releases/stretch/installmanual\";>installation "
"manual</ulink> for more details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The \"Thin-Client-Server\" profile has been renamed to \"LTSP-Server\" "
"profile."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New artwork based on the <ulink url=\"https://wiki.debian.org/DebianArt/";
"Themes/softWaves#\">\"soft Waves\" theme</ulink>, the default artwork for "
"Debian 9 Stretch."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Everything which was new in Debian 9 Stretch, eg:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Linux kernel 4.9"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Desktop environments KDE Plasma Workspace 5.8, GNOME 3.22, Xfce 4.12, LXDE "
"0.99.2, MATE 1.16"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"KDE Plasma Workspace is installed by default; to choose one of the others "
"see this manual."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Firefox 45.9 ESR and Chromium 59"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Iceweasel has been re-renamed to Firefox!"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Icedove has been re-renamed to Thunderbird and is now installed by default."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LibreOffice 5.2.6"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Educational toolbox GCompris 15.10"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Music creator Rosegarden 16.06"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "GOsa 2.7.4"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LTSP 5.5.9"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Debian Stretch includes more than 50000 packages available for installation."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"More information about Debian 9 Stretch is provided in the <ulink url="
"\"http://www.debian.org/releases/stretch/releasenotes\";>release notes</"
"ulink> and the <ulink url=\"http://www.debian.org/releases/stretch/";
"installmanual\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Translation updates for the templates used in the installer. These templates "
"are now available in 29 languages."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The Debian Edu Stretch Manual is fully translated to German, French, "
"Italian, Danish, Dutch, Norwegian Bokmål and Japanese. The Japanese "
"translation was newly added for Stretch."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Partly translated versions exist for Spanish, Polish and Simplified Chinese."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Icinga replaces Nagios as monitoring tool."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "kde-spectacle replaces ksnapshot as screenshot tool."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "The free flash player gnash is back again."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Plymouth is installed and activated by default, except for the 'Main Server' "
"and 'Minimal' profiles; pressing ESC allows to view boot and shutdown "
"messages."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Upon upgrade from Jessie the LDAP data base has to be adjusted. The sudoHost "
"value 'tjener' has to be replaced with 'tjener.intern' using GOsa² or an "
"LDAP editor."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The 32-bit PC support (known as the Debian architecture i386) now no longer "
"covers a plain i586 processor. The new baseline is the i686, although some "
"i586 processors (e.g. the \"AMD Geode\") will remain supported."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Debian 9 enables unattended upgrades (for security updates) by default for "
"new installations. This might cause a delay of about 15 minutes if a system "
"with a low uptime value is powered off."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"LTSP now uses NBD instead of NFS for the root filesystem. After each single "
"change to an LTSP chroot, the related NBD image must be regenerated "
"(<computeroutput>ltsp-update-image</computeroutput>) for the changes to take "
"effect."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Concurrent logins of the same user on LTSP server and LTSP thin client are "
"no longer allowed."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "New features for Debian Edu 8+edu0 Codename Jessie released 2016-07-02"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"read the release announcement on www.debian.org: <ulink url=\"https://www.";
"debian.org/News/2016/20160702.en.html\">Debian Edu / Skolelinux Jessie — a "
"complete Linux solution for your school</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"New version of debian-installer from Debian Jessie, see <ulink url=\"http://";
"www.debian.org/releases/jessie/installmanual\">installation manual</ulink> "
"for more details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Everything which is new in Debian 8 Jessie, eg:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Linux kernel 3.16.x"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Desktop environments KDE Plasma Workspace 4.11.13, GNOME 3.14, Xfce 4.10, "
"LXDE 0.5.6"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "new optional desktop environment: MATE 1.8"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "the browsers Iceweasel 31 ESR and Chromium 41"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LibreOffice 4.3.3"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Educational toolbox GCompris 14.12"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Music creator Rosegarden 14.02"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LTSP 5.5.4"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"new boot framework: systemd. More information is available in the Debian "
"<ulink url=\"https://wiki.debian.org/systemd\";>systemd wiki page</ulink> and "
"in the<ulink url=\"http://www.freedesktop.org/wiki/Software/systemd/";
"\">systemd manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Debian Jessie includes about 42000 packages available for installation."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"More information about Debian 8 Jessie is provided in the <ulink url="
"\"http://www.debian.org/releases/jessie/releasenotes\";>release notes</ulink> "
"and the <ulink url=\"http://www.debian.org/releases/jessie/installmanual";
"\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Two manual translations have been completed: Dutch and Norwegian Bokmål."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The Debian Edu Jessie Manual is fully translated to German, French, Italian, "
"Danish, Dutch and Norwegian Bokmål. A partly translated version exists for "
"Spanish."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis>squid</emphasis>: Shutdown and reboot of the main server takes "
"longer than before due to a new default setting "
"<computeroutput>shutdown_lifetime 30 seconds</computeroutput>. As an example "
"the delay could be set to 10 seconds by appending the line "
"<computeroutput>shutdown_lifetime 10 seconds</computeroutput> to "
"<computeroutput>/etc/squid3/squid.conf</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis>ssh</emphasis>: The root user is no longer allowed to login via "
"SSH with password. The old default <computeroutput>PermitRootLogin yes</"
"computeroutput> has been replaced with <computeroutput>PermitRootLogin "
"without-password</computeroutput>, so ssh-keys will still work."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis>slbackup-php</emphasis>: To be able to use the slbackup-php site "
"(which uses root logins via ssh), <computeroutput>PermitRootLogin yes</"
"computeroutput> has to be set temporarily in <computeroutput>/etc/ssh/"
"sshd_config</computeroutput>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"<emphasis>sugar</emphasis>: As the Sugar desktop was removed from Debian "
"Jessie, it is also not available in Debian Edu jessie."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "New features in Debian Edu 7.1+edu0 Codename Wheezy released 2013-09-28"
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "User visible changes"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Updated artwork and new Debian Edu / Skolelinux logo, visible during "
"installation, in the login screen and as desktop wallpaper."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"New version of debian-installer from Debian Wheezy, see <ulink url=\"http://";
"www.debian.org/releases/wheezy/installmanual\">installation manual</ulink> "
"for more details."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The DVD image was dropped, instead we added a USB flash drive / Blu-ray disc "
"image, which behaves like the DVD image, but is too big to fit on a DVD."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "Everything which is new in Debian Wheezy 7.1, eg:"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Linux kernel 3.2.x"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"Desktop environments KDE \"Plasma\" 4.8.4, GNOME 3.4, Xfce 4.8.6, and LXDE "
"0.5.5 (KDE \"Plasma\" is installed by default; to choose GNOME, Xfce or "
"LXDE: see manual.)"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Web browser Iceweasel 17 ESR"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LibreOffice 3.5.4"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "LTSP 5.4.2"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "CUPS print system 1.5.3"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Educational toolbox GCompris 12.01"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Music creator Rosegarden 12.04"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Image editor Gimp 2.8.2"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Virtual universe Celestia 1.6.1"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Virtual stargazer Stellarium 0.11.3"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Scratch visual programming environment 1.4.0.6"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid "Debian Wheezy includes about 37000 packages available for installation."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
msgid ""
"More information about Debian Wheezy 7.1 is provided in the <ulink url="
"\"http://www.debian.org/releases/wheezy/releasenotes\";>release notes</ulink> "
"and the <ulink url=\"http://www.debian.org/releases/wheezy/installmanual";
"\">installation manual</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"The Debian Edu Wheezy Manual is fully translated to German, French, Italian "
"and Danish. Partly translated versions exist for Norwegian Bokmål and "
"Spanish."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "LDAP related changes"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Slight changes to some objects and acls to have more types to choose from "
"when adding systems in GOsa. Now systems can be of type server, workstation, "
"printer, terminal or netdevice."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "Other changes"
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "New Xfce desktop task."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid "LTSP diskless workstations run without any configuration."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"On the dedicated client network of LTSP servers (default 192.168.0.0/24), "
"machines run by default as diskless workstations if they are powerful enough."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"GOsa gui: Now some options that seemed to be available, but are non "
"functional, are greyed out (or are not clickable). Some tabs are completely "
"hidden to the end user, others even to the GOsa admin."
msgstr ""
#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
msgid ""
"Using KDE \"Plasma\" on standalone and roaming workstations, at least "
"Konqueror, Chromium and Step sometimes fail to work out-of-the box when the "
"machines are used outside the backbone network, proxy use is required to use "
"the other network but no wpad.dat information is found. Workaround: Use "
"Iceweasel or configure the proxy manually."
msgstr ""
#. type: Content of: <article><section><section><title>
msgid "Historic information about older releases"
msgstr ""
#. type: Content of: <article><section><section><para>
msgid "The following Debian Edu releases were made further in the past:"
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Debian Edu 6.0.7+r1 Codename \"Squeeze\", released 2013-03-03."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Debian Edu 6.0.4+r0 Codename \"Squeeze\", released 2012-03-11."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Debian Edu 5.0.6+edu1 Codename \"Lenny\", released 2010-10-05."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Debian Edu 5.0.4+edu0 Codename \"Lenny\", released 2010-02-08."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid "Debian Edu \"3.0r1 Terra\", released 2007-12-05."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Debian Edu \"3.0r0 Terra\" released 2007-07-22. Based on Debian 4.0 Etch "
"released 2007-04-08."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Debian Edu 2.0, released 2006-03-14. Based on Debian 3.1 Sarge released "
"2005-06-06."
msgstr ""
#. type: Content of: <article><section><section><itemizedlist><listitem><para>
msgid ""
"Debian Edu \"1.0 Venus\" release 2004-06-20. Based on Debian 3.0 Woody "
"released 2002-07-19."
msgstr ""
#. type: Content of: <article><section><section><para>
msgid ""
"A complete and detailed overview about older releases is contained in <ulink "
"url=\"https://wiki.debian.org/DebianEdu/Documentation/Jessie/AppendixC";
"\">Appendix C of the Jessie manual</ulink>; or see the related release "
"manuals on the <ulink url=\"https://wiki.debian.org/DebianEdu/Documentation";
"\">release manuals page</ulink>."
msgstr ""
#. type: Content of: <article><section><section><section><title>
msgid "More information on even older releases"
msgstr ""
#. type: Content of: <article><section><section><section><para>
msgid ""
"More information on even older (pre-)releases can be found at <ulink url="
"\"http://developer.skolelinux.no/info/cdbygging/news.html\"/>."
msgstr ""
Reply to: