Changeset 658

Timestamp:

03/20/10 10:38:43 (23 months ago)

Author:

tschmitt

Message:

Adding Id and Rev property to all files

Location:

client/linuxmuster-client

Files:

• tags/0.9.13/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.13/share/mount.sh (modified) (1 prop)
• tags/0.9.13/share/umount.sh (modified) (1 prop)
• tags/0.9.14-3/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.14-3/share/mount.sh (modified) (1 prop)
• tags/0.9.14-3/share/umount.sh (modified) (1 prop)
• tags/0.9.14/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.14/share/mount.sh (modified) (1 prop)
• tags/0.9.14/share/umount.sh (modified) (1 prop)
• tags/0.9.15-0/share/copy-template.sh (modified) (1 prop)
• tags/0.9.15-0/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.15-0/share/mount.sh (modified) (1 prop)
• tags/0.9.15-0/share/umount.sh (modified) (1 prop)
• tags/0.9.15-1/share/copy-template.sh (modified) (1 prop)
• tags/0.9.15-1/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.15-1/share/mount.sh (modified) (1 prop)
• tags/0.9.15-1/share/umount.sh (modified) (1 prop)
• tags/0.9.3/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.3/share/mount.sh (modified) (1 prop)
• tags/0.9.3/share/umount.sh (modified) (1 prop)
• tags/0.9.8/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.8/share/mount.sh (modified) (1 prop)
• tags/0.9.8/share/umount.sh (modified) (1 prop)
• tags/0.9.9-2/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.9-2/share/mount.sh (modified) (1 prop)
• tags/0.9.9-2/share/umount.sh (modified) (1 prop)
• tags/0.9.9/share/helperfunctions.sh (modified) (1 prop)
• tags/0.9.9/share/mount.sh (modified) (1 prop)
• tags/0.9.9/share/umount.sh (modified) (1 prop)
• trunk/debian/changelog (modified) (1 diff)
• trunk/debian/postinst (modified) (1 diff)
• trunk/hardy/templates/etc/ldap.conf (modified) (2 diffs)
• trunk/hardy/templates/etc/libnss-ldap.conf (modified) (2 diffs)
• trunk/hardy/templates/etc/pam_ldap.conf (modified) (3 diffs)
• trunk/jaunty/templates/etc/ldap.conf (modified) (2 diffs)
• trunk/share/copy-template.sh (modified) (1 prop)
• trunk/share/helperfunctions.sh (modified) (1 prop)
• trunk/share/mount.sh (modified) (1 prop)
• trunk/share/umount.sh (modified) (1 prop)

client/linuxmuster-client/trunk/debian/changelog

@@ +1 @@
+linuxmuster-client (0.9.18-0) testing; urgency=low
+
+  * pam_ldap uses now start tls.
+
+ -- Thomas Schmitt <schmitt@lmz-bw.de>  Thu, 18 Mar 2010 23:33:30 +0100
+
 linuxmuster-client (0.9.17-1) testing; urgency=low
 

client/linuxmuster-client/trunk/debian/postinst

@@ -175 +175 @@
          fi
 
+  # fixing ldap.conf to ignore self signed server certificate with queries from localhost
+  conffile=/etc/ldap/ldap.conf
+  if ! grep -q "TLS_REQCERT never" $conffile &> /dev/null; then
+   echo "Fixing $conffile ..."
+   cp $conffile ${conffile}.dpkg-old
+   echo "TLS_REQCERT never" >> $conffile
+  fi
+
   # check for LINKDIRS variable, new in 0.9.16-1
   if ! grep -q LINKDIRS $USERCONFIG; then

client/linuxmuster-client/trunk/hardy/templates/etc/ldap.conf

@@ -258 +258 @@
 # OpenLDAP SSL mechanism
 # start_tls mechanism uses the normal LDAP port, LDAPS typically 636
-#ssl start_tls
+ssl start_tls
 #ssl on
 
@@ -266 +266 @@
 # /etc/openldap/ldap.conf using the TLS_REQCERT setting.  The default for
 # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes".
-#tls_checkpeer yes
+tls_checkpeer no
 
 # CA certificates for server certificate verification

client/linuxmuster-client/trunk/hardy/templates/etc/libnss-ldap.conf

@@ -267 +267 @@
 # OpenLDAP SSL mechanism
 # start_tls mechanism uses the normal LDAP port, LDAPS typically 636
-#ssl start_tls
+ssl start_tls
 #ssl on
 
@@ -275 +275 @@
 # /etc/openldap/ldap.conf using the TLS_REQCERT setting.  The default for
 # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes".
-#tls_checkpeer yes
+tls_checkpeer no
 
 # CA certificates for server certificate verification

client/linuxmuster-client/trunk/hardy/templates/etc/pam_ldap.conf

@@ -260 +260 @@
 # OpenLDAP SSL mechanism
 # start_tls mechanism uses the normal LDAP port, LDAPS typically 636
-#ssl start_tls
+ssl start_tls
 #ssl on
 
@@ -268 +268 @@
 # /etc/openldap/ldap.conf using the TLS_REQCERT setting.  The default for
 # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes".
-#tls_checkpeer yes
+tls_checkpeer n
 
 # CA certificates for server certificate verification
@@ -285 +285 @@
 # Use these, if your server requires client authentication.
 #tls_cert
-#tls_key
+#tls_keyo
 
 # Disable SASL security layers. This is needed for AD.

client/linuxmuster-client/trunk/jaunty/templates/etc/ldap.conf

@@ -259 +259 @@
 # OpenLDAP SSL mechanism
 # start_tls mechanism uses the normal LDAP port, LDAPS typically 636
-#ssl start_tls
+ssl start_tls
 #ssl on
 
@@ -267 +267 @@
 # /etc/openldap/ldap.conf using the TLS_REQCERT setting.  The default for
 # OpenLDAP 2.0 and earlier is "no", for 2.1 and later is "yes".
-#tls_checkpeer yes
+tls_checkpeer no
 
 # CA certificates for server certificate verification