"Debian Edu / Skolelinux Lenny 5.0.6+edu1 Manual"

noch unvollständige

deb http://ftp.debian.org/debian/ lenny main 
deb http://security.debian.org/ lenny/updates main 
deb http://ftp.skolelinux.org/skolelinux lenny local
d-i    pkgsel/include string my-extra-package(s)
Hinzugefügter Benutzer: Demo Benutzer
Benutzername: demuse
Passwort: etwasgeheimes
# Listen Sie die existierende Zuordnung zwischen UNIX und Windows Gruppen auf.
net groupmap list

# Fügen Sie Ihre neuen oder fehlenden Gruppen hinzu:
net groupmap add unixgroup=NEUE_GRUPPE type=domain ntgroup="NEUE_GRUPPE"\
                 comment="BESCHREIBUNG DER NEUEN_GRUPPE"
[2009]
ou = "ou=People,%base%"
objectClass = top posixAccount shadowAccount imapUser sambaSamAccount
homeDirectory = /skole/tjener/home0/2009/%username%
groups = none students 2009
loginShell = /bin/bash
mailMessageStore = /var/lib/maildirs/%username%
$ sudo rdiff-backup -r <date>  \
   /skole/backup/tjener/skole/tjener/home0/user \
   /skole/tjener/home0/user_<date>
htpasswd /etc/nagios3/htpasswd.users nagiosadmin
 tjener:~# invoke-rc.d slapd start
 Starting OpenLDAP: slapd - failed.
 The operation failed but no output was produced. For hints on what went
 wrong please refer to the system's logfiles (e.g. /var/log/syslog) or
 try running the daemon in Debug mode like via "slapd -d 16383" (warning:
 this will create copious output).

 Below, you can find the command line options used by this script to
 run slapd. Do not forget to specify those options if you
 want to look to debugging output:
 slapd -h 'ldap:/// ldaps:///' -g openldap -u openldap -f /etc/ldap/slapd.conf                     -4
 tjener:~# invoke-rc.d dhcp3-server start
 dhcpd self-test failed. Please fix the config file.
 The error was:
 Internet Systems Consortium DHCP Server V3.1.1
 Copyright 2004-2008 Internet Systems Consortium.
 All rights reserved.
 For info, please visit http://www.isc.org/sw/dhcp/
 /etc/dhcp3/dhcpd.conf line 2: semicolon expected.
 ldap-server "ldap"
             ^
 /etc/dhcp3/dhcpd.conf line 3: semicolon expected.
 ldap-port 389;
           ^
 /etc/dhcp3/dhcpd.conf line 4: semicolon expected.
 ldap-base-dn  "dc=skole,dc=skolelinux,dc=no"
               ^
 /etc/dhcp3/dhcpd.conf line 5: semicolon expected.
 ldap-dhcp-server-cn "dhcp"
                     ^
 /etc/dhcp3/dhcpd.conf line 6: semicolon expected.
 ldap-method dynamic;
            ^
 Configuration file errors encountered -- exiting
 invoke-rc.d: initscript dhcp3-server, action "start" failed.
 tjener:~# apt-get -q=2 update
 tjener:~# apt-get -q=2 install dhcp3-server-ldap
 tjener:~# invoke-rc.d dhcp3-server start
 dhcpd self-test failed. Please fix the config file.
 The error was:
 Internet Systems Consortium DHCP Server V3.1.1
 Copyright 2004-2008 Internet Systems Consortium.
 All rights reserved.
 For info, please visit http://www.isc.org/sw/dhcp/
 Connecting to LDAP server ldap:389
 Successfully logged into LDAP server ldap
 Cannot find host LDAP entry dhcp (&(objectClass=dhcpServer)(cn=dhcp))
 Configuration file errors encountered -- exiting
 invoke-rc.d: initscript dhcp3-server, action "start" failed.
 tjener:~# cd /usr/share/doc/dhcp3-server-ldap/
 tjener:/usr/share/doc/dhcp3-server-ldap# gunzip dhcpd-conf-to-ldap.pl.gz
 tjener:/usr/share/doc/dhcp3-server-ldap# chmod 0744 dhcpd-conf-to-ldap.pl
 tjener:/usr/share/doc/dhcp3-server-ldap#
 tjener:/usr/share/doc/dhcp3-server-ldap# ./dhcpd-conf-to-ldap.pl --server "dhcp" \
 >     --basedn "dc=skole,dc=skolelinux,dc=no" \
 >     --dhcpdn "cn=DHCP Config,dc=skole,dc=skolelinux,dc=no" \
 >     --conf "/etc/dhcp3/dhcpd-debian-edu.conf.dpkg-old" --ldif "/etc/ldap/migrate-dhcp.ldif"

 Creating LDAP Configuration with the following options:
        Base DN: dc=skole,dc=skolelinux,dc=no
        DHCP DN: cn=DHCP Config,dc=skole,dc=skolelinux,dc=no
        Server DN: cn=dhcp, dc=skole,dc=skolelinux,dc=no

 Done.
 tjener:/usr/share/doc/dhcp3-server-ldap#
 tjener:/usr/share/doc/dhcp3-server-ldap# cd /etc/ldap/
 tjener:/etc/ldap#
 tjener:/etc/ldap#
 tjener:/etc/ldap# # At this point it's recommended to view migrate-dhcp.ldif side by side
 tjener:/etc/ldap# # with dhcp.ldif and make some manual adjustments, before running:
 tjener:/etc/ldap#
 tjener:/etc/ldap# ldapadd -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
 >                         -f /etc/ldap/migrate-dhcp.ldif
 Enter LDAP Password:
 adding new entry "cn=dhcp, dc=skole,dc=skolelinux,dc=no"
 ....
 tjener:/etc/ldap#
 tjener:/etc/ldap# invoke-rc.d dhcp3-server start
  * Starting DHCP server dhcpd3                                            [ ok ]
 tjener:/etc/ldap#
 tjener:~# invoke-rc.d squid start
 * Starting Squid HTTP proxy squid
 2009/08/23 00:20:56| ACL name 'localnet' not defined!
 FATAL: Bungled squid.conf line 2577: http_access allow localnet
 Squid Cache (Version 2.7.STABLE3): Terminated abnormally.
 tjener:~# cd /etc/squid/
 tjener:/etc/squid# mv squid.conf etch-squid.conf
 tjener:/etc/squid# cp /usr/share/doc/squid/examples/squid.conf squid.conf
ldapsearch -xZLLLWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' -b 'ou=People,dc=skole,dc=skolelinux,dc=no' -s one '(&(objectClass=sambaSamAccount)(|(!(sambaPwdLastSet=*))(sambaPwdLastSet=0)))' uid  | less
ldapsearch -xZLLLWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' -b 'ou=People,dc=skole,dc=skolelinux,dc=no' -s one '(&(objectClass=sambaSamAccount)(!(sambaPwdLastSet=*)))' dn | sed '/.\+/a\changetype: modify\nadd:sambaPwdLastSet\nsambaPwdLastSet: 2\n-' > /etc/ldap/fixamba.ldif

ldapmodify -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
            -f /etc/ldap/fixamba.ldif
ldapsearch -xZLLLWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' -b 'ou=People,dc=skole,dc=skolelinux,dc=no' -s one '(&(objectClass=sambaSamAccount)(sambaPwdLastSet=0))' dn | sed '/.\+/a\changetype: modify\nreplace:sambaPwdLastSet\nsambaPwdLastSet: 2\n-' > /etc/ldap/fixamba.ldif

ldapmodify -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
           -f /etc/ldap/fixamba.ldif
;RFC2782
_ldap._tcp                      IN      SRV     0 100 389 tjener
_syslog._udp                    IN      SRV     0 100 514 tjener
 tjener:~# apt-get -q=2 update
 tjener:~# apt-get -q=2 install pdns-server pdns-recursor pdns-backend-ldap
 # PowerDNS index
 index associatedDomain         pres,eq,sub
 tjener:~# ldapadd -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
 >                 -f '/etc/ldap/dns_skole.ldif'
 tjener:~# ldapadd -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
 >                 -f '/etc/ldap/dns_arpa.ldif'
 tjener:/tmp# dpkg-deb -x pdns-backend-ldap_2.9.20-8+etch1_i386.deb \
 >                     pdns-backend-ldap_2.9.20
 tjener:/tmp# cp pdns-backend-ldap_2.9.20/usr/bin/zone2ldap /usr/bin/zone2ldap
 tjener:~# zone2ldap --basedn='ou=hosts,dc=skole,dc=skolelinux,dc=no' --layout=tree \
 >                   --named-conf='/etc/bind/debian-edu/named-bind9.conf' --resume \
 >               > /etc/ldap/skole-zone2ldap
 tjener:~# ldapadd -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no'
 Enter LDAP Password:
 dn: ou=hosts,dc=skole,dc=skolelinux,dc=no
 objectClass: organizationalUnit
 objectClass: domainRelatedObject
 ou: hosts
 associatedDomain: intern
 tjener:~# ldapmodify -xZWD 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no' \
 >                    -f /etc/ldap/skole-zone2ldap
 tjener:~# invoke-rc.d bind9 stop
 tjener:~# invoke-rc.d pdns start
 tjener:~# invoke-rc.d pdns-recursor start
etcinsvk diff
etcinsvk log
etcinsvk status
etcinsvk commit
etcinsvk ignore
etcinsvk diff -r6 | less
etcinsvk log | less
etcinsvk diff -rN | less
etcinsvk diff -r46 -r64 /etc/resolv.conf | less
( cd /etc && etcinsvk diff -r6 /etc/resolv.conf | patch -p0 -R )
etcinsvk commit /etc/resolv.conf
etcinsvk ignore /etc/path/to/file/to/be/ignored
lvextend -L30G /dev/vg_system/skole+tjener+home0 
resize2fs /dev/vg_system/skole+tjener+home0
ldapvi --host ldap -ZZ --bind simple --tls allow -D 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no'
ldapvi --ldap-conf -ZD '(cn=admin)'
echo "deb http://backports.debian.org/debian-backports lenny-backports main contrib non-free" >> /etc/apt/sources.list
apt-get update
mount /cdrom
apt-cdrom add -m
apt-get update
apt-get upgrade 
deb http://ftp.debian.org/debian/ lenny main contrib non-free
# apt-get update
# apt-get install sun-java6-plugin sun-java6-jre sun-java6-fonts
home_path="/skole/tjener/home0";
 shared_folder="arbeiten";
 permissions="2770";
 created_dir=0;
        for home in $(ls $home_path);do
        . if [ ! -d "$home_path/$home/$shared_folder" ]; then
        . mkdir $home_path/$home/$shared_folder
        chmod $permissions $home_path/$home/$shared_folder
. #set the right owner and group
  #"username" = "group name" = "folder name"
        user=$home
        group=teachers
        chown $user:$group $home_path/$home/$shared_folder
        ((created_dir+=1))
 else
  . echo -e "the folder $home_path/$home/$shared_folder already exists.\n"
 . fi
done
echo "$created_dir folders has been created"
home_path="/skole/tjener/home0"; shared_folder="Media"; permissions="775"; created_dir=0;
for home in $(ls $home_path); do
  if [ ! -d "$home_path/$home/$shared_folder" ]; then
    ln -s /media/$home $home_path/$home/$shared_folder ((created_dir+=1))
  else
    echo -e "the folder $home_path/$home/$shared_folder already exists.\n"
  fi
done
echo "$created_dir folders has been created"
 apt-get install killer
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  sitesummary-nodes -w
  #!/bin/sh
  PATH=/usr/sbin:$PATH
  export PATH
  netgroup -h shutdown-at-night-hosts
RHOST=admin.example.net
RPORT=1234
RUSER=backdoor
MENU PASSWD $4$NDk0OTUzNTQ1NTQ5$7d6KvAlVCJKRKcijtVSPfveuWPM$
export LTSPCHROOT=/opt/ltsp/i386/
cp -rv /etc/kde-profile/ $LTSPCHROOT/etc/
cp -v /etc/kderc $LTSPCHROOT/etc/
cp -v /etc/kde-user-profile $LTSPCHROOT/etc/
unset LTSPCHROOT
USETHEME="true"
THEME="/usr/share/apps/kdm/themes/debian-moreblue"
Package: flashplugin-nonfree
Pin: release a=lenny-backports
Pin-priority: 999
apt-get install libdvdcss2 w32codecs
# install the debian-keyring securily:
apt-get install debian-keyring
# fetch the debian-multimedia key insecurily:
gpg --keyserver pgpkeys.pca.dfn.de --recv-keys 1F41B907
# check securily if the key is correct and add it to the keyring used by apt if it is:
gpg --keyring /usr/share/keyrings/debian-keyring.gpg --check-sigs 1F41B907 && gpg --export 1F41B907 | apt-key add -
# add repository to sources.list - please check the homepages for mirrors!
echo "deb http://debian-multimedia.org lenny main" >> /etc/apt/sources.list
# update the list of available packages:
apt-get update
ln -s /var/lib/tftpboot/debian-edu/default-diskless.cfg /var/lib/tftpboot/pxelinux.cfg/default
ln -s /var/lib/tftpboot/debian-edu/default-thin.cfg /var/lib/tftpboot/pxelinux.cfg/default
/var/lib/tftpboot/ltsp/i386/pxelinux.cfg/default
 DEFAULT ltsp/i386/vmlinuz initrd=ltsp/i386/initrd.img nfsroot=10.0.2.10:/opt/ltsp/i386 boot=nfs ro quiet 3
ldapmodify -x -Z -W -D cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no -f ext_static.ldif
[192.168.0.10]
X_MODE_0 = 1280x1024
X_HORZSYNC = "60-70"
X_VERTREFRESH = "59-62"
subnet 10.0.2.0 netmask 255.255.254.0 {
        range 10.0.2.100 10.0.3.242;
        }
filename "/var/lib/tftpboot/ltsp/i386/pxelinux.0";
next-server xxx;
option root-path "/opt/ltsp/i386";
option log-servers ltspserver01;
use-host-decl-names on;
MY_SERVER_LIST = "xxxx xxxx xxxx"
# Randomize the server list contained in MY_SERVER_LIST parameter
TMP_LIST=""
SHUFFLED_LIST=""
for i in $MY_SERVER_LIST; do
rank=$RANDOM
let "rank %= 100"
TMP_LIST="$TMP_LIST\n${rank}_$i"
done
TMP_LIST=$(echo -e $TMP_LIST | sort)
for i in $TMP_LIST; do
SHUFFLED_LIST="$SHUFFLED_LIST $(echo $i | cut -d_ -f2)"
done
echo $SHUFFLED_LIST
chroot /opt/ltsp/i386
aptitude update
aptitude upgrade
aptitude dist-upgrade
exit
chroot /opt/ltsp/i386
## optionally, edit the sources.list:
#vim /etc/apt/sources.list
aptitude update
aptitude install $new_package
exit
LDM_DIRECTX=True
 X -query ltspserverXX
 X -query 192.168.0.254
 * # any host can get a login window
 sudo update-ini-file /etc/kde3/kdm/kdmrc Xdmcp Enable true
 sudo invoke-rc.d kdm restart
/usr/bin/net groupmap add unixgroup=students \
             type=domain ntgroup="students" \
             comment="Alle Schüler dieser Schulel"
logon path = ""
logon home = ""
apt-get install italc-client italc-master
Für Übersetzer: Die GPL muss nicht übersetzt werden. 

Art	Berechtigungen
Schüler	Einloggen und das System benutzen
Lehrer	Analog zu Schülern
jrAdmins	Das gleiche wie bei Lehrern, aber Sie können auch die Passwörter von anderen Benutzer ändern (ausser Administrator-Passwörter)
Administratoren	Administratoren haben weitreichende Rechte. Sie können Benutzer, Gruppen, Maschinen und Automounts hinzufügen, ändern oder löschen und Windows-Systeme in die Skolelinux Domäne einbinden.

Erste Adresse	Letzte Adresse	hostname
10.0.2.10	10.0.2.29	ltspserverxx
10.0.2.30	10.0.2.49	printerxx
10.0.2.50	10.0.2.99	staticxx

Sprache (Region)	Lokaler Wert	Tastaturbelegung (layout)
Norwegisches Bokmål	nb_NO.UTF-8	no
Norwegisches Nynorsk	nn_NO.UTF-8	no
Deutsch	de_DE.UTF-8	de
Französisch (Frankreich)	fr_FR.UTF-8	fr
Griechisch (Griechenland)	el_GR.UTF-8	el
Japanisch	ja_JP.UTF-8	jp
Nördliches Sami (Norwegen)	se_NO	no(smi)