More.

diff --git a/blog/draft/2012-03-skolelinux-wheezy.txt b/blog/draft/2012-03-skolelinux-wheezy.txt
index d520b358f7e34b6a28a6407569597164985c4dbd..2b4e920dbb537e5b88d6b40ab3de0a5daa585f17 100644 (file)
--- a/blog/draft/2012-03-skolelinux-wheezy.txt
+++ b/blog/draft/2012-03-skolelinux-wheezy.txt
@@ -32,6 +32,11 @@ at least try to enable it for these services:
   <li>ssh for admins and users to save a password prompt.</li>
 </ul></li>
 
   <li>ssh for admins and users to save a password prompt.</li>
 </ul></li>
 

+<li>When we move GOsa to use Kerberos instead of LDAP bind to
+authenticate users, we should try to block or at least limit access to
+use LDAP bind for authentication, to ensure Kerberos is used when it
+is intended, and nothing fall back to using the less safe LDAP bind</li>
+

 <li>Merge debian-edu-config and debian-edu-install.  The split made
 sense when d-e-install did a lot more, but these days it is just an
 inconvenience when we update the debconf preseeding values.</li>
 <li>Merge debian-edu-config and debian-edu-install.  The split made
 sense when d-e-install did a lot more, but these days it is just an
 inconvenience when we update the debconf preseeding values.</li>


@@ -83,8 +88,6 @@ MIT Kerberos plugin in C to get this.</li>
 <li>and probably more?</li>
 <ul></li>
 
 <li>and probably more?</li>
 <ul></li>
 

- - remove/limit ldap bind authentication
-

 <li>Some hardware need external firmware to work properly.  This is
 mostly the case for WiFi network cards, but there are some other
 examples too.  For popular laptops to work out of the box, such
 <li>Some hardware need external firmware to work properly.  This is
 mostly the case for WiFi network cards, but there are some other
 examples too.  For popular laptops to work out of the box, such


@@ -95,10 +98,6 @@ command line script to do this (one for the running system, another
 for the LTSP chroot).</li>
 
 
 for the LTSP chroot).</li>
 
 

- - Complete exam mode support by adding Squid filtering
-
- - Provide surf board / touch screen desktop
-

 <li>In Squeeze, we provide KDE, Gnome and LXDE as desktop options.  We
 should extend the list to Xfce and Sugar, and preferably find a way to
 install several and allow the admin or the user to select which one to
 <li>In Squeeze, we provide KDE, Gnome and LXDE as desktop options.  We
 should extend the list to Xfce and Sugar, and preferably find a way to
 install several and allow the admin or the user to select which one to


@@ -110,5 +109,10 @@ tagging in Debian to ensure it represent all the useful educational
 packages, and extend the tool to allow it to use packagekit to install
 new applications with a simple mouse click.</li>
 
 packages, and extend the tool to allow it to use packagekit to install
 new applications with a simple mouse click.</li>
 

+ - Complete exam mode support by adding Squid filtering
+
+ - Provide surf board / touch screen desktop
+

  - add out of the box setup for italc/controlaula/epoptes
  - add out of the box setup for italc/controlaula/epoptes

+

 </li>
 </li>