+<li>We need to rewrite our package installation framework, as tasksel
+changed from using tasksel tasks to using meta packages (aka packages
+with dependencies like our education-* packages), and our installation
+system depend on tasksel tasks in
+/usr/share/tasksel/debian-edu-tasks.desc for package
+installation.</li>
+
+<li>Enable Kerberos login for more services. Now with the Kerberos
+foundation in place, we should use it to get single sign on with more
+services, and avoiding unneeded password / login questions. We should
+at least try to enable it for these services:
+<ul>
+
+ <li>CUPS for admins to add/configure printers and users when using
+ quotas.</li>
+ <li>Nagios for admins checking the system status.</li>
+ <li>GOsa for admins updating LDAP and users changing their passwords.</li>
+ <li>LDAP for admins updating LDAP.</li>
+ <li>Squid for users when exam mode / filtering is active.</li>
+ <li>ssh for admins and users to save a password prompt.</li>
+
+</ul></li>
+
+<li>When we move GOsa to use Kerberos instead of LDAP bind to
+authenticate users, we should try to block or at least limit access to
+use LDAP bind for authentication, to ensure Kerberos is used when it
+is intended, and nothing fall back to using the less safe LDAP bind</li>
+
+<li>Merge debian-edu-config and debian-edu-install. The split made
+sense when d-e-install did a lot more, but these days it is just an
+inconvenience when we update the debconf preseeding values.</li>
+
+<li>Fix partman-auto to allow us to abort the installation before
+touching the disk if the disk is too small. This is
+<a href="http://bugs.debian.org/653305">BTS report #653305</a> and the
+d-i developers are fine with the patch and someone just need to apply
+it and upload. After this is done we need to adjust
+debian-edu-install to use this new hook.</li>
+
+<li>Adjust to new LTSP framework (boot time config instead of install
+time config). LTSP changed its design, and our hooks to install
+packages and update the configuration is most likely not going to work
+in Wheezy.
+
+<li>Consider switching to NBD instead of NFS for LTSP root, to allow
+the Kernel to cache files in its normal file cache, possibly speeding
+up KDE login on slow networks.</li>
+
+<li>Make it possible to create expired user passwords that need to
+change on first login. This is useful when handing out password on
+paper, to make sure only the user know the password. This require
+fixes to the PAM handling of kdm and gdm.</li>
+
+<li>Make GUI for adding new machines automatically from sitesummary.
+The current command line script is not very friendly to people most
+familiar with GUIs. This should probably be integrated into GOsa to
+have it available where the admin will be looking for it..</li>
+
+<li>We should find way for Nagios to check that the DHCP service
+actually is working (as in handling out IP addresses). None of the
+Nagios checks I have found so far have been working for me.</li>
+
+<li>We should switch from libpam-nss-ldapd to sssd for all profiles
+using LDAP, and not only on for roaming workstations, to have less
+packages to configure and consistent setup across all profiles.</li>
+
+<li>We should configure Kerberos to update LDAP and Samba password
+when changing password using the Kerberos protocol. The hook was
+requested in <a href="http://bugs.debian.org/588968">BTS report
+#588968</a> and is now available in Wheezy. We might need to write a
+MIT Kerberos plugin in C to get this.</li>
+
+<li>We should clean up the set of applications installed by default.
+<ul>
+
+<li>reduce the number of chemistry visualisers</li>
+<li>consider dropping xpaint</li>
+<li>and probably more?</li>
+</ul></li>
+
+<li>Some hardware need external firmware to work properly. This is
+mostly the case for WiFi network cards, but there are some other
+examples too. For popular laptops to work out of the box, such
+firmware need to be installed from non-free, and we should provide
+some GUI to do this. Ubuntu already have this implemented, and we
+could consider using their packages. At the moment we have some
+command line script to do this (one for the running system, another
+for the LTSP chroot).</li>
+
+
+<li>In Squeeze, we provide KDE, Gnome and LXDE as desktop options. We
+should extend the list to Xfce and Sugar, and preferably find a way to
+install several and allow the admin or the user to select which one to
+use.</li>
+
+<li>The golearn tool from the goplay package make it easy to check out
+interesting educational packages. We should work on the package
+tagging in Debian to ensure it represent all the useful educational
+packages, and extend the tool to allow it to use packagekit to install
+new applications with a simple mouse click.</li>
+
+<li>The Squeeze version got half a exam solution already in place,
+with the introduction of iptable based network blocking, but for it to
+be a complete exam solution the Squid proxy need to enable
+filtering/blocking as well when the exam mode is enabled. We should
+implement a way to easily enable this for the schools that want it,
+instead of the "it is documented" method of today.</li>
+
+<li>A feature used in several schools is the ability for a teacher to
+"take over" the desktop of individual or all computers in the room.
+There are at least three implementations,
+<a href="italc.sourceforge.net/">italc</a>,
+<a href="http://www.itais.net/help/en/">controlaula</a> og
+<a href="http://www.epoptes.org/">epoptes</a> and we should pick one of
+them and make it trivial to set it up in a school. The challenges is
+how to distribute crypto keys and how to group computers in one room
+and how to set up which machine/user can control the machines in a
+given room.</li>
+
+<li>Tablets and surf boards are getting more and more popular, and we
+should look into providing a good solution for integrating these into
+the Debian Edu network. Not quite sure how. Perhaps we should
+provide a installation profile with better touch screen support for
+them, or add some sync services to allow them to exchange
+configuration and data with the central server. This should be
+investigated.</li>
+
+</ul></p>
+
+<p>I guess we will discover more as we continue to work on the Wheezy
+version.</p>
+</description>
+ </item>
+
+ <item>
+ <title>Litt statistikk fra Offentlig Elektronisk postjournal</title>
+ <link>http://people.skolelinux.org/pere/blog/Litt_statistikk_fra_Offentlig_Elektronisk_postjournal.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Litt_statistikk_fra_Offentlig_Elektronisk_postjournal.html</guid>
+ <pubDate>Sun, 10 Jun 2012 20:30:00 +0200</pubDate>
+ <description><p>De siste månedene har jeg sammen med andre i NUUG jobbet med å
+gjøre det enklere å få innsyn i offentlige dokumenter, og dette
+inkluderer å gjøre postjournaler enklere tilgjengelig for maskinell
+analyse og søk. I den forbindelse tok jeg i dag å tittet litt på
+<a href="http://www.oep.no/">Offentlig Elektronisk Postjournal
+(OEP)</a>, FAD/DIFIs fellesløsning for departementer og statlige
+etater.</p>
+
+<p>Her er antall oppføringer pr. måned det siste året,
+<a href="https://api.scraperwiki.com/api/1.0/datastore/sqlite?format=htmltable&name=postliste-oep&query=select%20strftime(%22%25Y-%25m%22%2C%20%60recordpublishdate%60)%20as%20oeppubmonth%2C%20count(*)%20from%20%60swdata%60%20group%20by%20oeppubmonth%20order%20by%20oeppubmonth">summert
+opp</a> ved hjelp av
+<a href="https://scraperwiki.com/scrapers/postliste-oep/">en
+Scraperwiki-database</a>. Merk at denne Scraperwikien har
+ytelsesproblemer pga. mengden data. </p>
+
+<p><table border="1">
+<tr><th>Måned</th><th>Antall</th></tr>
+<tr><td>2011-07</td><td>164355</td></tr>
+<tr><td>2011-08</td><td>153662</td></tr>
+<tr><td>2011-09</td><td>173134</td></tr>
+<tr><td>2011-10</td><td>170665</td></tr>
+<tr><td>2011-11</td><td>198409</td></tr>
+<tr><td>2011-12</td><td>175908</td></tr>
+<tr><td>2012-01</td><td>206875</td></tr>
+<tr><td>2012-02</td><td>202862</td></tr>
+<tr><td>2012-03</td><td>204225</td></tr>
+<tr><td>2012-04</td><td>207931</td></tr>
+<tr><td>2012-05</td><td>223754</td></tr>
+</table></p>
+
+<p>Det er også interessant å se hvor ofte ulike etater sender inn sine
+journaloppføringer til OEP. OEP inneholder en liste med sist
+innrapporteringsdato for alle som sender til OEP, og ved å se når og
+hvor ofte det blir sendt inn fra etatene kan
+<a href="https://api.scraperwiki.com/api/1.0/datastore/sqlite?format=htmltable&name=postliste-oep-deliverydates&query=select%20agency%2C%0A(julianday(datetime('now'))%20-%20%0A%20julianday(min(%60deliverydate%60)))%2Fcount(*)%20as%20dayfreq%2C%0A%20count(*)%0Afrom%20%60swdata%60%20group%20by%20agency%20order%20by%20dayfreq%20desc">frekvensen
+beregnes</a>. Her er bunnlista, dvs. de som leverer sjeldnere enn hver 10.
+dag beregnet fra
+<a href="https://scraperwiki.com/scrapers/postliste-oep-deliverydates/">en
+Scraperwiki-database</a>:</p>
+
+<p><table border="1">
+
+<tr> <th>Etat</th> <th>Frekvens</th> <th>Leveringer</th> </tr>
+<tr> <td>Norges geologiske undersøkelse</td> <td>83.7527546296</td> <td>1</td> </tr>
+<tr> <td>Medietilsynet</td> <td>33.7527546296</td> <td>1</td> </tr>
+<tr> <td>Departementenes servicesenter</td> <td>23.8763773148</td> <td>2</td> </tr>
+<tr> <td>Kunnskapsdepartementet</td> <td>15.8763773148</td> <td>2</td> </tr>
+<tr> <td>Kompetansesenter for distriktsutvikling</td> <td>15.3763773148</td> <td>2</td> </tr>
+<tr> <td>Toll- og avgiftsdirektoratet</td> <td>15.3763773148</td> <td>2</td> </tr>
+<tr> <td>Fredskorpset</td> <td>12.5842515432</td> <td>3</td> </tr>
+<tr> <td>Statens legemiddelverk</td> <td>12.1881886574</td> <td>4</td> </tr>
+<tr> <td>Utlendingsnemnda</td> <td>11.5842515432</td> <td>3</td> </tr>
+<tr> <td>Politidirektoratet</td> <td>10.9175848765</td> <td>3</td> </tr>
+<tr> <td>Skattedirektoratet</td> <td>10.9175848765</td> <td>3</td> </tr>
+<tr> <td>Statens innkrevingssentral</td> <td>10.5842515432</td> <td>3</td> </tr>
+<tr> <td>Barne-, ungdoms- og familiedirektoratet</td> <td>10.2509182099</td> <td>3</td> </tr>
+<tr> <td>Kunst i offentlige rom</td> <td>10.2509182099</td> <td>3</td> </tr>
+
+</table></p>
+
+<p>En kan beregne lignende frekvenser ved å sammenligne
+journalføringsdato med publiseringsdato for hver enkelt oppføring i
+OEP, men den lenken legger jeg ikke ved her for å unngå at
+søkemotorroboter begynner å overbelaste Scraperwiki-databasen.</p>
+
+<p>Jeg har spurt Norges geologiske undersøkelse om hvorfor de leverer
+så sjelden, og det kommer av at de har problemer etter oppgradering av
+arkivsystemet sitt og jobber med å fikse det slik at de kan gå tilbake
+til å levere hver uke. Har ikke undersøkt noen av de andre.</p>
+</description>
+ </item>
+
+ <item>
+ <title>TV with face recognition, for improved viewer experience</title>
+ <link>http://people.skolelinux.org/pere/blog/TV_with_face_recognition__for_improved_viewer_experience.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/TV_with_face_recognition__for_improved_viewer_experience.html</guid>
+ <pubDate>Sat, 9 Jun 2012 22:00:00 +0200</pubDate>
+ <description><p>Slashdot got a story about Intel planning a
+<a href="http://entertainment.slashdot.org/story/12/06/09/0012247/intel-to-launch-tv-service-with-facial-recognition-by-end-of-the-year">TV
+with face recognition</a> to recognise the viewer, and it occurred to
+me that it would be more interesting to turn it around, and do face
+recognition on the TV image itself. It could let the viewer know who
+is present on the screen, and perhaps look up their credibility,
+company affiliation, previous appearances etc for the viewer to better
+evaluate what is being said and done. That would be a feature I would
+be willing to pay for.</p>
+
+<p>I would not be willing to pay for a TV that point a camera on my
+household, like the big brother feature apparently proposed by Intel.
+It is the telescreen idea fetched straight out of the book
+<a href="http://gutenberg.net.au/ebooks01/0100021.txt">1984 by George
+Orwell</a>.</p>
+</description>
+ </item>
+
+ <item>
+ <title>Web service to look up HP and Dell computer hardware support status</title>
+ <link>http://people.skolelinux.org/pere/blog/Web_service_to_look_up_HP_and_Dell_computer_hardware_support_status.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Web_service_to_look_up_HP_and_Dell_computer_hardware_support_status.html</guid>
+ <pubDate>Wed, 6 Jun 2012 23:15:00 +0200</pubDate>
+ <description><p>A few days ago
+<a href="http://people.skolelinux.org/pere/blog/SOAP_based_webservice_from_Dell_to_check_server_support_status.html">I
+reported how to get</a> the support status out of Dell using an
+unofficial and undocumented SOAP API, which I since have found out was
+<a href="http://lists.us.dell.com/pipermail/linux-poweredge/2012-February/045959.html">discovered
+by Daniel De Marco in february</a>. Combined with my web scraping
+code for HP, Dell and IBM
+<a href="http://people.skolelinux.org/pere/blog/Checking_server_hardware_support_status_for_Dell__HP_and_IBM_servers.html">from
+2009</a>, I got inspired and wrote
+<a href="https://views.scraperwiki.com/run/computer-hardware-support-status/">a
+web service</a> based on Scraperwiki to make it easy to look up the
+support status and get a machine readable result back.</p>
+
+<p>This is what it look like at the moment when asking for the JSON
+output:
+
+<blockquote><pre>
+% GET <a href="https://views.scraperwiki.com/run/computer-hardware-support-status/?format=json&vendor=Dell&servicetag=2v1xwn1">https://views.scraperwiki.com/run/computer-hardware-support-status/?format=json&vendor=Dell&servicetag=2v1xwn1</a>
+supportstatus({"servicetag": "2v1xwn1", "warrantyend": "2013-11-24", "shipped": "2010-11-24", "scrapestamputc": "2012-06-06T20:26:56.965847", "scrapedurl": "http://143.166.84.118/services/assetservice.asmx?WSDL", "vendor": "Dell", "productid": ""})
+%
+</pre></blockquote>
+
+<p>It currently support Dell and HP, and I am hoping for help to add
+support for other vendors. The python source is available on
+Scraperwiki and I welcome help with adding more features.</p>
+</description>
+ </item>
+
+ <item>
+ <title>Kommentar til artikkel i Adresseavisa som omtaler FiksGataMi</title>
+ <link>http://people.skolelinux.org/pere/blog/Kommentar_til_artikkel_i_Adresseavisa_som_omtaler_FiksGataMi.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Kommentar_til_artikkel_i_Adresseavisa_som_omtaler_FiksGataMi.html</guid>
+ <pubDate>Sat, 2 Jun 2012 19:30:00 +0200</pubDate>
+ <description><p>Jeg oppdaget nylig en
+<a href="http://www.adressa.no/nyheter/trondheim/article1831198.ece">artikkel
+i Adresseavisa</a> i Trondheim som nevner FiksGataMi, og der Trondheim
+kommune ser ut til å fortelle at de ikke følger forvaltningslovens
+krav ved mottak av meldinger sendt inn via FiksGataMi. La derfor
+nettopp inn denne kommentaren til artikkelen:<p>
+
+<p><blockquote>
+
+<p>Her er en liten faktaoppdatering om FiksGataMi-tjenesten, da noen
+ser ut til å ha misforstått hvordan den fungerer.</p>
+
+<p>FiksGataMi er et privat initiativ opprettet og drevet av
+medlemsforeningen NUUG. FiksGataMi tar imot meldinger om feil i
+offentlig infrastruktur, og sender meldingen skriftlig videre på vegne
+av innmelder til aktuell aktør i det offentlige, det være seg kommune,
+fylke eller vegvesenregion. Offentlig etat blir valgt ut fra
+geografisk plassering og kategori valgt av innsender. Offentlige
+etater er i følge forvaltningsloven pliktig å følge opp og besvare
+skriftlige henvendelser, og hvis noen av mottakerne ikke gjør dette
+kan en klage på lovbrudd i det offentlige. FiksGataMi fungerer dermed
+som en slags epostklient for innbyggerne der kopi av innsendte
+meldinger gjøres tilgjengelig og knyttes til kartplassering for enkel
+gjenfinning. Å sende inn nye problemrapporter via FiksGataMi er
+dermed ikke avhengig av at kommunen aktivt må følge med på meldinger
+hos FiksGataMi, da de får dem tilsendt på sine offisielle
+epostmottakspunkter. Hvorvidt noe blir fikset og om innbyggerne er
+opp til mottaker av meldingene. For Trondheim kommune er
+mottaksadressen bydrift.vegdrift@trondheim.kommune.no, en adresse jeg
+inntil jeg leste denne artikkelen trodde ble håndtert i henhold til
+forvaltningslovens krav.</p>
+
+<p>Kan ellers fortelle at 57 kommuner lenker til FiksGataMi fra sine
+nettsider, og at 37 % (4182 av 11266 ) av problemrapportene sendt inn
+via FiksGataMi er markert som løst i løsningen. Trondheim kommune har
+fått tilbud om å få rapportene levert på datamaskinlesbart format i
+stedet for epost, men har ikke takket ja så langt.</p>
+
+<p>Vennlig hilsen Petter Reinholdtsen, en av NUUG-folkene bak FiksGataMi.no</p>
+
+</blockquote></p>
+
+<p>Det høres for meg ut som om innbyggerne i Trondheim burde klage på
+kommunens potensielle lovbrudd.</p>
+</description>
+ </item>
+
+ <item>
+ <title>Debian Edu interview: Mike Gabriel</title>
+ <link>http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Mike_Gabriel.html</link>
+ <guid isPermaLink="true">http://people.skolelinux.org/pere/blog/Debian_Edu_interview__Mike_Gabriel.html</guid>
+ <pubDate>Sat, 2 Jun 2012 15:00:00 +0200</pubDate>
+ <description><p>Back in 2010, Mike Gabriel showed up on the
+<a href="http://www.skolelinux.org/">Debian Edu and Skolelinux</a>
+mailing list. He quickly proved to be a valuable developer, and
+thanks to his tireless effort we now have Kerberos integrated into the
+<a href="http://www.debian.org/News/2012/20120311.html">Debian Edu
+Squeeze</a> version.</p>
+
+<p><strong>Who are you, and how do you spend your days?</strong></p>
+
+<p>My name is Mike Gabriel, I am 38 years old and live near Kiel,
+Schleswig-Holstein, Germany. I live together with a wonderful partner
+(Angela Fuß) and two own children and two bonus children (contributed
+by Angela).</p>
+
+<p>During the day I am part-time employed as a system administrator
+and part-time working as an IT consultant. The consultancy work
+touches free software topics wherever and whenever possible. During
+the nights I am a free software developer. In the gaps I also train in
+becoming an osteopath.</p>
+
+<p>Starting in 2010 we (Andreas Buchholz, Angela Fuß, Mike Gabriel)
+have set up a free software project in the area of Kiel that aims at
+introducing free software into schools. The project's name is
+"IT-Zukunft Schule" (IT future for schools). The project links IT
+skills with communication skills.</p>
+
+<p><strong>How did you get in contact with the Skolelinux/Debian Edu
+project?</strong></p>
+
+<p>While preparing our own customised Linux distribution for
+"IT-Zukunft Schule" we were repeatedly asked if we really wanted to
+reinvent the wheel. What schools really need is already available,
+people said. From this impulse we started evaluating other Linux
+distributions that target being used for school networks.</p>
+
+<p>At the end we short-listed two approaches and compared them: a
+commercial Linux distribution developed by a company in Bremen,
+Germany, and Skolelinux / Debian Edu. Between 12/2010 and 03/2011 we
+went to several events and met people being responsible for marketing
+and development of either of the distributions. Skolelinux / Debian
+Edu was by far much more convincing compared to the other product that
+got short-listed beforehand--across the full spectrum. What was most
+attractive for me personally: the perspective of collaboration within
+the developmental branch of the Debian Edu project itself.</p>
+
+<p>In parallel with this, we talked to many local and not-so-local
+people. People teaching at schools, headmasters, politicians, data
+protection experts, other IT professionals.</p>
+
+<p>We came to two conclusions:</p>
+
+<p>First, a technical conclusion: What schools need is available in
+bits and pieces here and there, and none of the solutions really fit
+by 100%. Any school we have seen has a very individual IT setup
+whereas most of each school's requirements could mapped by a standard
+IT solution. The requirement to this IT solution is flexibility and
+customisability, so that individual adaptations here and there are
+possible. In terms of re-distributing and rolling out such a
+standardised IT system for schools (a system that is still to some
+degree customisable) there is still a lot of work to do here
+locally. Debian Edu / Skolelinux has been our choice as the starting
+point.</p>
+
+<p>Second, a holistic conclusion: What schools need does not exist at
+all (or we missed it so far). There are several technical solutions
+for handling IT at schools that tend to make a good impression. What
+has been missing completely here in Germany, though, is the enrolment
+of people into using IT and teaching with IT. "IT-Zukunft Schule"
+tries to provide an approach for this.</p>
+
+<p>Only some schools have some sort of a media concept which explains,
+defines and gives guidance on how to use IT in class. Most schools in
+Northern Germany do not have an IT service provider, the school's IT
+equipment is managed by one or (if the school is lucky) two (admin)
+teachers, most of the workload these admin teachers get done in there
+spare time.</p>
+
+<p>We were surprised that only a very few admin teachers were
+networked with colleagues from other schools. Basically, every school
+here around has its individual approach of providing IT equipment to
+teachers and students and the exchange of ideas has been quasi
+non-existent until 2010/2011.</p>