Univention Bugzilla – Bug 31995
UCC: squid settings
Last modified: 2014-01-08 11:11:29 CET
The squid server has to be configured on the UCS@school slave/singlemaster for use in conjunction with UCC clients (e.g. turn kerberos support on). +++ This bug was initially created as a clone of Bug #31905 +++ The UCC client should use the UCS@school HTTP proxy. The proxy should be configured automatically for all applications. It has to be checked if the UCC client is able to perform a transparent proxy authentication with the user credentials. Currently the UCS@school proxy only support BASIC and NTLM authentication.
These settings should be added to the UCS@school-meta-package ucs-school-ucc-integration.
Added univention-squid-kerberos to branches/ucs-3.1/ucs-school-r2 (fork from release 3.1-1), removed package dependency to univention-samba4 and add "joinscript_save_current_version" for non-samba4 environments. Created a Bug 32011 for merge to UCS 3.2. Added dependencies to univention-squid-kerberos and univention-squid (>= next_errata_version) to ucs-school-ucc-integration. The join script 40ucs-school-ucc-integration.inst now sets squid/krb5auth?true in samba4 environments to enable squid negotiate.
(In reply to Felix Botner from comment #2) > Added univention-squid-kerberos to branches/ucs-3.1/ucs-school-r2 (fork from > release 3.1-1) OK > removed package dependency to univention-samba4 OK > add "joinscript_save_current_version" for non-samba4 environments. OK > Created a Bug 32011 for merge to UCS 3.2. OK > Added dependencies to univention-squid-kerberos and univention-squid (>= > next_errata_version) to ucs-school-ucc-integration. OK > The join script > 40ucs-school-ucc-integration.inst now sets squid/krb5auth?true in samba4 > environments to enable squid negotiate. OK Is a call_joinscript 98univention-squid-samba4.inst in the univention-squid-kerberos postinst required? Changelog is missing.
(In reply to Florian Best from comment #3) > > Is a call_joinscript 98univention-squid-samba4.inst in the > univention-squid-kerberos postinst required? No > > Changelog is missing. added changelog entry
(In reply to Felix Botner from comment #4) > (In reply to Florian Best from comment #3) > > > > Is a call_joinscript 98univention-squid-samba4.inst in the > > univention-squid-kerberos postinst required? > > No > > > > > Changelog is missing. > > added changelog entry OK
Remove "ucr set squid/krb5auth?true" from the join script, at this time the samba4 join script was not executed and the samba4 test always fails. We only document the activation of squid kerberos.
removed
(In reply to Felix Botner from comment #7) > removed OK: Skript OK: Changelog ucs-school-ucc-integration (1.0.6-1) unstable; urgency=low * do not set squid/krb5auth in ucc join script (Bug #31995) → VERIFIED
UCS@school 3.1 R2-1 has been released: http://download.univention.de/doc/release-notes-ucsschool-3.1-rev2-1.pdf If this error occurs again, please use "Clone This Bug".