Task: Main-server
Section: metapackages
Architecture: any
Test-edu-profile: Main-Server
Description: Debian Edu main server packages
 A metapackage containing dependencies for packages required on all
 main server installations in the Debian Edu Blend.

Depends:     education-networked
Why:         Packages which should be present on all networked
             skolelinux machines
Responsible: Petter Reinholdtsen
NeedConfig:  no

Depends:     iptables
Ignore:      shorewall
Why:         Needed to set up firewalling rules using netfilter in 2.4.x
Responsible: Lars Bahner
NeedConfig:  yes - set up default firewall rules

Depends:     avahi-daemon, libnss-mdns
Suggests:    avahi-discover, mdns-scan, avahi-autoipd
Why:         Packages needed for dynamic service location, network
             configuration and print server discovery
Responsible: Mike Gabriel
NeedConfig:  ?

Depends:     bind9 | pdns-backend-ldap
Suggests:    nslint, dnswalk, dlint
Why:         DNS server for the local clients. Depend on both so that pdns-backend-ldap can be kept on upgrades
Responsible: Holger Levsen
NeedConfig:  yes - set a few well known DNS names, and more.

Depends:     ldap2zone | pdns-recursor
Why:         Convert DNS information from ldap to bind zone file every hour and on reboots. Depend on both so that pdns-backend-ldap can be kept on upgrades.
Responsible: Andreas B. Mundt
NeedConfig:  yes - touch the corresponding bind zone file

Depends:     isc-dhcp-server-ldap, pxelinux, syslinux-common, \
             debian-installer-9-netboot-i386 | debian-installer-8-netboot-i386, \
             debian-installer-9-netboot-amd64 | debian-installer-8-netboot-amd64, \
             atftpd | tftpd-hpa
Recommends:  memtest86+
Why:         Automatic distribution of IP addresses to the clients,
             and enable PXE install.
Responsible: Petter Reinholdtsen
NeedConfig:  yes - set local IP range, DNS name and default routing

Depends:     slapd, openssl
Why:         Allow LDAP user authentication and centralized administration.
Responsible: Rune Nordbøe Skillingstad
NeedConfig:  yes - generate certificates for ssl/tls support

Depends:     dovecot-imapd
Suggests:    dovecot-pop3d
Why:         The users use imap to get mail from the "postoffice"
Responsible: Andreas B. Mundt
NeedConfig:  yes

Depends:     dovecot-gssapi
Why:         Needed for Kerberos authentication.
Responsible: Wolfgang Schweer
NeedConfig:  yes

Depends:     exim4-daemon-heavy
Avoid:       courier-mta, deliver, maildrop, masqmail, nullmailer, sendmail, \
             sendmail-base, sendmail-bin, sendmail-cf, postfix, \
             hula-mta, esmtp, esmtp-run, nbsmtp, ssmtp, msmtp-mta
Why:         A smtp daemon with support for ldap.  Avoid all the other SMTP
             servers.
Responsible: Maximilian Wilhelm
NeedConfig:  yes

Depends:     links
Why:         To be able to access web without a gui. Quite
             good text-mode browser.
Responsible: Patrick Winnertz
NeedConfig:  no

Depends:     nfs-kernel-server | nfs-server, samba, samba-common-bin, \
             makepasswd, tdb-tools, smbclient
Suggests:    samba-doc
Why:         Make home directory available on each client using NFS and SMB
Responsible: ?
NeedConfig:  yes - specify which directories to distribute and configure
             samba to use LDAP

Depends:     apache2
Suggests:    apache2-doc, webalizer
Why:         Internal webserver
Responsible: ?
NeedConfig:  ?

Depends:     squid
Suggests:    calamaris, squidguard, sarg
Why:         Speed up web browsing and reduce network load.
Responsible: Petter Reinholdtsen
NeedConfig:  yes

Suggests:    dsh
Why:         Distributed shell.  Make it easier to administrate many
	     machines.
Responsible: Petter Reinholdtsen
NeedConfig:  maybe - configure host groups

Depends:     ntp
Why:         Make sure the server supports a local clock.  The configuration
             is done using cfengine.
Responsible: Petter Reinholdtsen
NeedConfig:  yes - set NTP server (client: ntp.intern, server: ntp.somewhere)

Depends:     slbackup, slbackup-php
Why:         The backup system, and it's admin tool.
Responsible: Ronny Aasen
NeedConfig:  yes - debconf (only the slbackup package)

Avoid:       telnetd, ftpd
Why:         The servers we want to exclude.  All really insecure services
             should be listed.
Responsible: Petter Reinholdtsen
NeedConfig:  no

Depends:     munin
Why:         Needed to see what happens
Responsible: Finn-Arne Johansen
NeedConfig:  yes, done automatically by preseeding sitesummary

Depends:     icinga, monitoring-plugins-standard, \
             nagios-nrpe-plugin
Why:         System and network monitoring with web UI (replacing nagios3)
Responsible: Wolfgang Schweer
NeedConfig:  yes, done via preseeding: icingaadmin password, enable cgi.

Depends:     sitesummary
Suggests:    ocsinventory-server, ocsinventory-reports, default-mysql-client
Why:         Keep track of all the machines in the skolelinux network
Responsible: Petter Reinholdtsen
NeedConfig:  no

Depends:     gosa, gosa-schema, gosa-plugin-samba, gosa-plugin-ldapmanager, \
             gosa-plugin-sudo, gosa-plugin-sudo-schema, \
             gosa-plugin-dhcp, gosa-plugin-dhcp-schema, \
             gosa-plugin-dns, gosa-plugin-dns-schema, \
             smbldap-tools, \
             gosa-help-en, gosa-help-de, gosa-help-fr, gosa-help-nl, \
             gosa-plugin-netgroups, \
             gosa-plugin-goto
Why:         GOsa packages and schema-files for the LDAP-GUI.
Responsible: Andreas B. Mundt
NeedConfig:  yes

Ignore:      koha
Homepage:    http://www.koha.org/
WNPP:        389876
Why:         Library database system, might be useful for schools.  Koha
             is part of the Suse Edu distro, so I add it here to track
             it in Debian Edu.
Responsible: Petter Reinholdtsen
NeedConfig:  no

Depends:     krb5-kdc, krb5-admin-server, krb5-kdc-ldap, libsasl2-modules-gssapi-mit
Why:         Kerberos KDC server packages, needed to set up a Kerberos Key
             Distribution Server.
Responsible: Petter Reinholdtsen
NeedConfig:  Yes - configure realm and the LDAP server as backend

Recommends:  libapache2-mod-auth-kerb
Why:         Apache module for Kerberos authentication on web services.
             See <URL: http://www.itefix.no/i2/node/11683 > for a recipe.
Responsible: Petter Reinholdtsen
NeedConfig:  Yes, individual services like Nagios need to use the apache module

Suggests:    krb5-doc, libsasl2-modules-ldap
Why:         Additional Kerberos packages
Responsible: Petter Reinholdtsen
NeedConfig:  No
