View | Details | Raw Unified | Return to bug 47781
Collapse All | Expand All

(-)a/base/univention-server/conffiles/etc/cron.d/univention-server-backup (-1 / +1 lines)
 Lines 1-4    Link Here 
1
@%@UCRWARNING=# @%@
1
@%@UCRWARNING=# @%@
2
2
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
4
 0 1 * * * root /usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
4
@%@server/password/cron@%@	root	/usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
(-)a/base/univention-server/conffiles/etc/cron.d/univention-server-master (-1 / +1 lines)
 Lines 1-4    Link Here 
1
@%@UCRWARNING=# @%@
1
@%@UCRWARNING=# @%@
2
2
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
4
 0 1 * * * root /usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
4
@%@server/password/cron@%@	root	/usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
(-)a/base/univention-server/conffiles/etc/cron.d/univention-server-member (-1 / +1 lines)
 Lines 1-4    Link Here 
1
@%@UCRWARNING=# @%@
1
@%@UCRWARNING=# @%@
2
2
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
4
 0 1 * * * root /usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
4
@%@server/password/cron@%@	root	/usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
(-)a/base/univention-server/conffiles/etc/cron.d/univention-server-slave (-1 / +1 lines)
 Lines 1-4    Link Here 
1
@%@UCRWARNING=# @%@
1
@%@UCRWARNING=# @%@
2
2
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
3
PATH=/usr/sbin:/usr/bin:/sbin:/bin
4
 0 1 * * * root /usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
4
@%@server/password/cron@%@	root	/usr/sbin/jitter 600 /usr/lib/univention-server/server_password_change
(-)a/base/univention-server/debian/changelog (+6 lines)
 Lines 1-3    Link Here 
1
univention-server (13.0.0-7) unstable; urgency=low
2
3
  * Bug #47781: Make time for password change check configurable
4
5
 -- Philipp Hahn <hahn@univention.de>  Tue, 11 Sep 2018 15:06:25 +0200
6
1
univention-server (13.0.0-6) unstable; urgency=low
7
univention-server (13.0.0-6) unstable; urgency=low
2
8
3
  * Bug #47581: improved check when to trigger OX schema issue cleanup
9
  * Bug #47581: improved check when to trigger OX schema issue cleanup
(-)a/base/univention-server/debian/univention-role-server-common.univention-config-registry-variables (+6 lines)
 Lines 3-5   Description[de]=Das Password des Maschinenkontos (gespeichert in /etc/machine.se Link Here 
3
Description[en]=The password of the machine account is renewed regularly. This variable configures the rotation interval in days.
3
Description[en]=The password of the machine account is renewed regularly. This variable configures the rotation interval in days.
4
Type=int
4
Type=int
5
Categories=system-base
5
Categories=system-base
6
7
[server/password/cron]
8
Description[de]=Das Zeitpunkt für die Übperprüfung des Maschinenkontos auf Erneuerung. Die Konfiguration erfolgt in Cron-Syntax, siehe 'man 5 crontab'
9
Description[en]=The point in time for checking the machine account for renewal. The configuration is done in Cron syntax, see 'man 5 crontab'.
10
Type=str
11
Categories=service-ldap
(-)a/base/univention-server/debian/univention-server-backup.postinst (+1 lines)
 Lines 35-40   ldap/server/port?7389 Link Here 
35
ldap/server/type?slave
35
ldap/server/type?slave
36
server/password/interval?21
36
server/password/interval?21
37
server/role=domaincontroller_backup
37
server/role=domaincontroller_backup
38
server/password/cron?0 1 * * *
38
__UCR__
39
__UCR__
39
40
40
mkdir -p /var/lib/samba/netlogon/scripts/
41
mkdir -p /var/lib/samba/netlogon/scripts/
(-)a/base/univention-server/debian/univention-server-master.postinst (+1 lines)
 Lines 38-43   ldap/server/port?7389 Link Here 
38
ldap/server/type=master
38
ldap/server/type=master
39
server/password/interval?21
39
server/password/interval?21
40
server/role=domaincontroller_master
40
server/role=domaincontroller_master
41
server/password/cron?0 1 * * *
41
__UCR__
42
__UCR__
42
43
43
mkdir -p /var/lib/samba/netlogon/scripts/
44
mkdir -p /var/lib/samba/netlogon/scripts/
(-)a/base/univention-server/debian/univention-server-member.postinst (+1 lines)
 Lines 35-40   samba/share/home?no Link Here 
35
samba/share/netlogon?no
35
samba/share/netlogon?no
36
server/password/interval?21
36
server/password/interval?21
37
server/role=memberserver
37
server/role=memberserver
38
server/password/cron?0 1 * * *
38
__UCR__
39
__UCR__
39
40
40
#DEBHELPER#
41
#DEBHELPER#
(-)a/base/univention-server/debian/univention-server-slave.postinst (+1 lines)
 Lines 35-40   ldap/server/port?7389 Link Here 
35
ldap/server/type?slave
35
ldap/server/type?slave
36
server/password/interval?21
36
server/password/interval?21
37
server/role=domaincontroller_slave
37
server/role=domaincontroller_slave
38
server/password/cron?0 1 * * *
38
__UCR__
39
__UCR__
39
40
40
#DEBHELPER#
41
#DEBHELPER#
(-)a/doc/errata/staging/univention-server.yaml (-1 / +13 lines)
Line 0    Link Here 
0
- 
1
product: ucs
2
release: "4.3"
3
version: [2]
4
scope: ucs_4.3-0-errata4.3-2
5
src: univention-server
6
fix: 
7
desc: |
8
 This update addresses the following issue:
9
 * The machine account password is changed by default every 21 days. That
10
   check is by default performed nightly a 01:00 by a cron job. That point of
11
   time can now be configured through the new UCRV variable
12
   'server/password/cron'.
13
bug: [47781]

Return to bug 47781