[Bcfg2] Nouveau paquet, nouvelle config

Ignore-this: 67cdee8f32d7581493d12617ddc97bc2
Bcfg2 a subi deux releases, qui ont pas mal changé les "normes".

Les balises suivntes sont remplacées :

<ConfigFile> ---------------------------> <Path type="file">
<Directory>  ---------------------------> <Path type="directory">
<SymLink>    ---------------------------> <Path type="symlink">
etc

Pour les fichiers python, désormais, on utilise plus
<ConfigFile>, mais <Python>

darcs-hash:20121211100127-b6762-f146f4460e9713cb59a25c33a08b551c5280f3b2.gz
This commit is contained in:
Pierre-Elliott Bécue 2012-12-11 11:01:27 +01:00
parent 1158615de0
commit d10a8a0672
60 changed files with 252 additions and 266 deletions

View file

@ -7,7 +7,7 @@ header("Fichier de configuration de bcfg2")
if has("bcfg2-server"):
@[server]
%repository = "/var/lib/bcfg2"
%plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,DebAutoPkg,Probes,DBStats"
%plugins = "Metadata,Bundler,Base,SSHbase,Cfg,Rules,Python,Packages,Probes,DBStats"
%svn = "no"
@

View file

@ -1,6 +1,6 @@
# -*- coding: utf-8; mode: python -*-
header("Les modifications locales sont à placer dans le fichier /etc/fstab.local")
header("Les modifications locales sont a placer dans le fichier /etc/fstab.local")
def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
print ("%s %s %s %s %d %d" %
@ -8,16 +8,16 @@ def mnt(fs, mntpoint, type, options=[], dump=0, pass_=0):
(options and ",".join(options)) or "defaults",
dump, pass_))
@# Les définitions classiques
@# Les definitions classiques
mnt("proc", "/proc", "proc")
mnt("shm", "/dev/shm", "tmpfs")
@# Les définitions locales
@# Les definitions locales
print metadata.Probes["fstab_local"]
if has("nfs"):
@# Le nfs
mnt("daath.adm.crans.org:/usr/scripts", "/usr/scripts", "nfs", ["rw"])
if has("home-permanent"):
# Pour ceux qui accèdent beaucoup aux homes on monte tout le /home
# Pour ceux qui accedent beaucoup aux homes on monte tout le /home
mnt("fx.adm.crans.org:/home-adh", "/home", "nfs", ["rw"]);

View file

@ -9,5 +9,5 @@ header("Acces a la base ldap")
@# This file should be world readable but not world writable.
@BASE dc=crans, dc=org
%URI "%s" % ldap_socket
print "URI %s" % ldap_socket
@#TLS_CACERT /etc/ssl/certs/CAcrans.pem

View file

@ -181,4 +181,4 @@ def adm6(interface):
Probe_Mac = metadata.Probes["mac"].split('\n')
If_Mac = dict(zip(Probe_Mac[:-1:2], Probe_Mac[1::2]))
exec metadata.Probes["interfaces_local"]
exec(str(metadata.Probes["interfaces_local"]))

View file

@ -7,6 +7,11 @@ header("Configuration du sudo")
if has("users"):
@Defaults:ALL tty_tickets
if has("wheezy"):
addit = ":ALL"
else:
addit = ""
@Defaults env_keep += "DARCS_EMAIL"
@# Host alias specification
@ -26,43 +31,43 @@ elif has("2B"):
@# Cmnd alias specification
@# User privilege specification
@root ALL=(ALL) ALL
@NOUNOUS ALL=(ALL) ALL
print "root ALL=(ALL%s) ALL" % (addit)
print "NOUNOUS ALL=(ALL%s) ALL" % (addit)
if has("2B"):
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/tools/who2b.py
print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/tools/who2b.py" % (addit)
if has("users"):
@# Les modérateurs ont le whos
@MODEROS ALL=(respbats) /usr/scripts/gestion/whos.py
print "MODEROS ALL=(respbats%s) /usr/scripts/gestion/whos.py" % (addit)
@# Câbleurs
@RESPBATS ALL=(respbats) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py
@RESPBATS ALL=(respbats) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py
@RESPBATS ALL=(respbats) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py
@RESPBATS ALL=(respbats) /usr/scripts/gestion/ressuscite.py
print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/gest_crans.py,/usr/scripts/gestion/chgpass.py" % (addit)
print "RESPBATS ALL=(respbats%s) /usr/scripts/admin/mail_invalide/mail_invalide.py, /usr/scripts/admin/controle_tresorier.py, /usr/scripts/admin/controle_tresorier2.py, /usr/scripts/admin/controle_tresorier3.py" % (addit)
print "RESPBATS ALL=(respbats%s) NOPASSWD: /usr/scripts/gestion/whos.py,/usr/scripts/utils/chambre.py,/usr/scripts/stats_cableurs.py,/usr/scripts/gestion/tools/whokfet.py" % (addit)
print "RESPBATS ALL=(respbats%s) /usr/scripts/gestion/ressuscite.py" % (addit)
@# Bureau
@BUREAU ALL=(respbats) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py
print "BUREAU ALL=(respbats%s) /usr/scripts/admin/controle_charte_MA.py, /usr/scripts/admin/menage_cableurs.py" % (addit)
@# intranet
@respbats ALL=(USERS) NOPASSWD: /usr/scripts/gestion/config_mail.py
@respbats ALL=(root) NOPASSWD: /usr/local/bin/quota
print "respbats ALL=(USERS%s) NOPASSWD: /usr/scripts/gestion/config_mail.py" % (addit)
print "respbats ALL=(root%s) NOPASSWD: /usr/local/bin/quota" % (addit)
@# Génération de codes impression pour les imprimeurs
@IMPRIMEURS ALL=(root) /usr/scripts/impression/gen_code.py
print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/gen_code.py" % (addit)
@# Redémarrage de l'intranet pour les imprimeurs
@IMPRIMEURS ALL=(root) /usr/scripts/impression/redemarre_intranet.sh
print "IMPRIMEURS ALL=(root%s) /usr/scripts/impression/redemarre_intranet.sh" % (addit)
@# Un chsh pour tout le monde
@ALL ALL=(respbats) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami
print "ALL ALL=(respbats%s) /usr/scripts/gestion/chsh.py, NOPASSWD:/usr/local/bin/ldap_whoami" % (addit)
@# Quotas
@ALL ALL=NOPASSWD:/usr/local/bin/quota.sh
print "ALL ALL=(respbats%s) NOPASSWD:/usr/local/bin/quota.sh" % (addit)
if has('arpwatch'):
@# arpwatch
@arpwatch ALL=(arpwatch) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py
print "arpwatch ALL=(arpwatch%s) NOPASSWD:/usr/scripts/surveillance/arpwatch_sendmail.py" % (addit)
# Inclusion de fichier locaux
@#includedir /etc/sudoers.d