[Bcfg2] Nouveau paquet, nouvelle config
Ignore-this: 67cdee8f32d7581493d12617ddc97bc2 Bcfg2 a subi deux releases, qui ont pas mal changé les "normes". Les balises suivntes sont remplacées : <ConfigFile> ---------------------------> <Path type="file"> <Directory> ---------------------------> <Path type="directory"> <SymLink> ---------------------------> <Path type="symlink"> etc Pour les fichiers python, désormais, on utilise plus <ConfigFile>, mais <Python> darcs-hash:20121211100127-b6762-f146f4460e9713cb59a25c33a08b551c5280f3b2.gz
This commit is contained in:
parent
1158615de0
commit
d10a8a0672
60 changed files with 252 additions and 266 deletions
|
@ -7,7 +7,7 @@ header("Fichier de configuration de bcfg2")
|
|||
if has("bcfg2-server"):
|
||||
@[server]
|
||||
%repository = "/var/lib/bcfg2"
|
||||
%plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,DebAutoPkg,Probes,DBStats"
|
||||
%plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,Packages,Probes,DBStats"
|
||||
%svn = "no"
|
||||
|
||||
@
|
||||
|
|
|
@ -1,6 +1,6 @@
|
|||
# -*- coding: utf-8; mode: python -*-
|
||||
|
||||
header("Les modifications locales sont à placer dans le fichier /etc/fstab.local")
|
||||
header("Les modifications locales sont a placer dans le fichier /etc/fstab.local")
|
||||
|
||||
def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
|
||||
print ("%s %s %s %s %d %d" %
|
||||
|
@ -8,16 +8,16 @@ def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
|
|||
(options and ",".join(options)) or "defaults",
|
||||
dump, pass_))
|
||||
|
||||
@# Les définitions classiques
|
||||
@# Les definitions classiques
|
||||
mnt("proc", "/proc", "proc")
|
||||
mnt("shm", "/dev/shm", "tmpfs")
|
||||
|
||||
@# Les définitions locales
|
||||
@# Les definitions locales
|
||||
print metadata.Probes["fstab_local"]
|
||||
|
||||
if has("nfs"):
|
||||
@# Le nfs
|
||||
mnt("daath.adm.crans.org:/usr/scripts", "/usr/scripts", "nfs", ["rw"])
|
||||
if has("home-permanent"):
|
||||
# Pour ceux qui accèdent beaucoup aux homes on monte tout le /home
|
||||
# Pour ceux qui accedent beaucoup aux homes on monte tout le /home
|
||||
mnt("fx.adm.crans.org:/home-adh", "/home", "nfs", ["rw"]);
|
||||
|
|
|
@ -9,5 +9,5 @@ header("Acces a la base ldap")
|
|||
@# This file should be world readable but not world writable.
|
||||
|
||||
@BASE dc=crans, dc=org
|
||||
%URI "%s" % ldap_socket
|
||||
print "URI %s" % ldap_socket
|
||||
@#TLS_CACERT /etc/ssl/certs/CAcrans.pem
|
||||
|
|
|
@ -181,4 +181,4 @@ def adm6(interface):
|
|||
Probe_Mac = metadata.Probes["mac"].split('\n')
|
||||
If_Mac = dict(zip(Probe_Mac[:-1:2], Probe_Mac[1::2]))
|
||||
|
||||
exec metadata.Probes["interfaces_local"]
|
||||
exec(str(metadata.Probes["interfaces_local"]))
|
||||
|
|
|
@ -7,6 +7,11 @@ header("Configuration du sudo")
|
|||
if has("users"):
|
||||
@Defaults:ALL tty_tickets
|
||||
|
||||
if has("wheezy"):
|
||||
addit = ":ALL"
|
||||
else:
|
||||
addit = ""
|
||||
|
||||
@Defaults env_keep += "DARCS_EMAIL"
|
||||
|
||||
@# Host alias specification
|
||||
|
@ -26,43 +31,43 @@ elif has("2B"):
|
|||
@# Cmnd alias specification
|
||||
|
||||
@# User privilege specification
|
||||
@root ALL=(ALL) ALL
|
||||
@NOUNOUS ALL=(ALL) ALL
|
||||
print "root ALL=(ALL%s) ALL" % (addit)
|
||||
print "NOUNOUS ALL=(ALL%s) ALL" % (addit)
|
||||
|
||||
if has("2B"):
|
||||
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/tools/who2b.py
|
||||
print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/tools/who2b.py" % (addit)
|
||||
|
||||
if has("users"):
|
||||
@# Les modérateurs ont le whos
|
||||
@MODEROS ALL=(respbats) /usr/scripts/gestion/whos.py
|
||||
print "MODEROS ALL=(respbats%s) /usr/scripts/gestion/whos.py" % (addit)
|
||||
|
||||
@# Câbleurs
|
||||
@RESPBATS ALL=(respbats) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py
|
||||
@RESPBATS ALL=(respbats) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py
|
||||
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py
|
||||
@RESPBATS ALL=(respbats) /usr/scripts/gestion/ressuscite.py
|
||||
print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py" % (addit)
|
||||
print "RESPBATS ALL=(respbats%s) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py" % (addit)
|
||||
print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py" % (addit)
|
||||
print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/ressuscite.py" % (addit)
|
||||
|
||||
@# Bureau
|
||||
@BUREAU ALL=(respbats) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py
|
||||
print "BUREAU ALL=(respbats%s) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py" % (addit)
|
||||
|
||||
@# intranet
|
||||
@respbats ALL=(USERS) NOPASSWD: /usr/scripts/gestion/config_mail.py
|
||||
@respbats ALL=(root) NOPASSWD: /usr/local/bin/quota
|
||||
print "respbats ALL=(USERS%s) NOPASSWD: /usr/scripts/gestion/config_mail.py" % (addit)
|
||||
print "respbats ALL=(root%s) NOPASSWD: /usr/local/bin/quota" % (addit)
|
||||
|
||||
@# Génération de codes impression pour les imprimeurs
|
||||
@IMPRIMEURS ALL=(root) /usr/scripts/impression/gen_code.py
|
||||
print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/gen_code.py" % (addit)
|
||||
|
||||
@# Redémarrage de l'intranet pour les imprimeurs
|
||||
@IMPRIMEURS ALL=(root) /usr/scripts/impression/redemarre_intranet.sh
|
||||
print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/redemarre_intranet.sh" % (addit)
|
||||
|
||||
@# Un chsh pour tout le monde
|
||||
@ALL ALL=(respbats) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami
|
||||
print "ALL ALL=(respbats%s) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami" % (addit)
|
||||
@# Quotas
|
||||
@ALL ALL=NOPASSWD:/usr/local/bin/quota.sh
|
||||
print "ALL ALL=(respbats%s) NOPASSWD:/usr/local/bin/quota.sh" % (addit)
|
||||
|
||||
if has('arpwatch'):
|
||||
@# arpwatch
|
||||
@arpwatch ALL=(arpwatch) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py
|
||||
print "arpwatch ALL=(arpwatch%s) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py" % (addit)
|
||||
|
||||
# Inclusion de fichier locaux
|
||||
@#includedir /etc/sudoers.d
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue