Bug#891277: stretch-pu: package debian-edu-config/1.929+deb9u1
Package: release.debian.org
Severity: normal
Tags: stretch
User: release.debian.org@packages.debian.org
Usertags: pu
Hi,
please consider accepting the following changes to debian-edu-config into
Debian stretch.
+ [ Wolfgang Schweer ]
+ * Rewrite wpad-extract tool to be independent from KDE related files.
+ (Closes: #888829).
-> Fix http proxy environment settings derived from WPAD. In Debian Edu, WPAD
is used to configure browsers for internet access through a web proxy.
Services that can't use WPAD directly, but rely on http_proxy,
https_proxy and ftp_proxy env vars (os some such) get configured through
the update-proxy-from-wpad script which relies on the currently broken
wpad-extract script.
+ * Adjust Samba configuration. Allow joining of Windows 10 clients to the
+ Samba NT4-style domain. (Closes: #864663).
-> Config change to support Windows 10 clients by the Debian Edu main
server (aka TJENER)..
+ [ Mike Gabriel ]
+ * debian/control: Drop libproxy-tools, add libpacparser1. (as part of
+ fixing #888829).
Part of the wpad-extract rewrite.
+ * Chromium: Pre-configure Chromium Webbrowser system-wide to auto-detect the
+ http proxy settings via WPAD (plus locking the proxy settings dialog for
+ users). (Closes: #891262).
Lock down Chromium proxy settings by providing a system wide setting.
This is important to Debian Edu workstations that have chromium
installed. In Debian Edu environments, it is crucial to have control over
the browser's proxy settings and override them by system defaults and
don't allow the user to tinker with them.
Thanks a lot for taking a look at this stretch-pu,
Mike (on behalf of the Debian Edu team)
-- System Information:
Debian Release: 9.3
APT prefers stable
APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru debian-edu-config-1.929/debian/changelog debian-edu-config-1.929+deb9u1/debian/changelog
--- debian-edu-config-1.929/debian/changelog 2017-05-31 21:21:14.000000000 +0200
+++ debian-edu-config-1.929+deb9u1/debian/changelog 2018-02-23 23:11:10.000000000 +0100
@@ -1,3 +1,20 @@
+debian-edu-config (1.929+deb9u1) stretch; urgency=medium
+
+ [ Wolfgang Schweer ]
+ * Rewrite wpad-extract tool to be independent from KDE related files.
+ (Closes: #888829).
+ * Adjust Samba configuration. Allow joining of Windows 10 clients to the
+ Samba NT4-style domain. (Closes: #864663).
+
+ [ Mike Gabriel ]
+ * debian/control: Drop libproxy-tools, add libpacparser1. (as part of
+ fixing #888829).
+ * Chromium: Pre-configure Chromium Webbrowser system-wide to auto-detect the
+ http proxy settings via WPAD (plus locking the proxy settings dialog for
+ users). (Closes: #891262).
+
+ -- Mike Gabriel <sunweaver@debian.org> Fri, 23 Feb 2018 23:11:10 +0100
+
debian-edu-config (1.929) unstable; urgency=medium
[ Wolfgang Schweer ]
diff -Nru debian-edu-config-1.929/debian/control debian-edu-config-1.929+deb9u1/debian/control
--- debian-edu-config-1.929/debian/control 2017-05-31 21:21:14.000000000 +0200
+++ debian-edu-config-1.929+deb9u1/debian/control 2018-02-23 23:11:10.000000000 +0100
@@ -34,8 +34,8 @@
libio-socket-ssl-perl,
libnet-ldap-perl,
libnet-netmask-perl,
+ libpacparser1,
libpam-python,
- libproxy-tools,
libproxy1-plugin-kconfig,
libproxy1-plugin-mozjs,
libproxy1-plugin-networkmanager,
diff -Nru debian-edu-config-1.929/etc/chromium/policies/managed/chromium-networked-prefs debian-edu-config-1.929+deb9u1/etc/chromium/policies/managed/chromium-networked-prefs
--- debian-edu-config-1.929/etc/chromium/policies/managed/chromium-networked-prefs 1970-01-01 01:00:00.000000000 +0100
+++ debian-edu-config-1.929+deb9u1/etc/chromium/policies/managed/chromium-networked-prefs 2018-02-23 23:11:10.000000000 +0100
@@ -0,0 +1,3 @@
+{
+ "ProxyMode": "auto_detect",
+}
diff -Nru debian-edu-config-1.929/etc/samba/smb-debian-edu.conf debian-edu-config-1.929+deb9u1/etc/samba/smb-debian-edu.conf
--- debian-edu-config-1.929/etc/samba/smb-debian-edu.conf 2017-05-31 21:21:14.000000000 +0200
+++ debian-edu-config-1.929+deb9u1/etc/samba/smb-debian-edu.conf 2018-02-23 23:11:10.000000000 +0100
@@ -32,6 +32,7 @@
# configure as NT4-style PDC
server role = classic primary domain controller
+ server max protocol = NT1
acl allow execute always = true
# server string/NT Description field
diff -Nru debian-edu-config-1.929/Makefile debian-edu-config-1.929+deb9u1/Makefile
--- debian-edu-config-1.929/Makefile 2017-05-31 21:21:14.000000000 +0200
+++ debian-edu-config-1.929+deb9u1/Makefile 2018-02-23 23:11:10.000000000 +0100
@@ -92,6 +92,7 @@
debian-edu/nightkill.conf \
default/munin-node \
default/ldap2zone \
+ chromium/policies/managed/chromium-networked-prefs \
cfengine/cfservd.conf \
cfengine/update.conf \
cfengine/inputs/cfagent.conf \
diff -Nru debian-edu-config-1.929/share/debian-edu-config/tools/wpad-extract debian-edu-config-1.929+deb9u1/share/debian-edu-config/tools/wpad-extract
--- debian-edu-config-1.929/share/debian-edu-config/tools/wpad-extract 2017-05-31 21:21:14.000000000 +0200
+++ debian-edu-config-1.929+deb9u1/share/debian-edu-config/tools/wpad-extract 2018-02-23 23:11:10.000000000 +0100
@@ -1,28 +1,15 @@
#!/bin/bash
-
#
# Detect proxy URL via WPAD
#
-# Author: Mike Gabriel
+# Author: Wolfgang Schweer
# License: GNU General Public License v2 or later
-# This new and very short wpad-extract script is a replacement
-# for the old (before squeeze) libjavascript-perl based wpad-extract
-# script. This version uses libproxy-tools to retrieve the
-# proxy URL and thus is much shorter then its predecessor.
-
-# Trick the KDE4 config backend to use the settings there to load the
-# WPAD setting. See also bug #644373.
+# This version uses pactester from package libpacparser1.
# Look up one of the www.debian.org IP addresses to avoid hanging on
# DNS if the skolelinux machines are not connected to the Internet.
-proxy_url=$(KDE_FULL_SESSION=foo \
- KDEDIRS=/usr/share/debian-edu/networked-kde3 \
- proxy http://130.89.148.14 2>/dev/null | cut -d" " -f1)
+proxy_url=$(curl -s http://wpad/wpad.dat | pactester -p - \
+ -u http://130.89.148.14 | awk '{print $2}' | cut -d';' -f1)
+echo http_proxy=http://$proxy_url
-# make sure direct:// urls do not make it through to the system config
-case "$proxy_url" in
- http:*|https:*)
- echo http_proxy=$proxy_url
- ;;
-esac
Reply to: