fuss-server (12.0.69) unstable; urgency=medium

  * Revision of fuss-dump.sh script for upgrade to FUSS13

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Feb 2026 11:20:59 +0100

fuss-server (12.0.68) unstable; urgency=medium

  * Fixed typo on print reporting script name

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 10 Feb 2026 19:13:00 +0100

fuss-server (12.0.67) unstable; urgency=medium

  [ Paolo Dongilli ]
  * restrictmoderate is not enough; commented out CNAMEs in db.rpz

  [ Simone Piccardi ]
  * Adding script to generate printing reports

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 06 Feb 2026 11:01:09 +0100

fuss-server (12.0.66) unstable; urgency=medium

  [ Elena Grandi ]
  * Add a script to install glpi on a non-managed machine.

  [ Paolo Dongilli ]
  * Changed restrict.youtube.com to restrictmoderate.youtube.com in db.rpz

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 21 Jan 2026 17:49:32 +0100

fuss-server (12.0.65) unstable; urgency=medium

  * New version for the CUPS accounting data script

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 09 Jan 2026 17:47:50 +0100

fuss-server (12.0.64) unstable; urgency=medium

  * Adding support to save CUPS print accounting data

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 08 Jan 2026 16:05:51 +0100

fuss-server (12.0.63) unstable; urgency=medium

  * Version correction for conditional GPLI agent configuration

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 08 Jan 2026 15:17:44 +0100

fuss-server (12.0.62) unstable; urgency=medium

  * Adding conditional GPLI agent configuration depending on zone

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 08 Jan 2026 15:12:35 +0100

fuss-server (12.0.61) unstable; urgency=medium

  * Increase NFS kernel threads when CPU are available to improve performance

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 16 Dec 2025 17:14:58 +0100

fuss-server (12.0.60) unstable; urgency=medium

  * Configure bind to force safesearch on google (see #987)
  * Enable extended CUPS logging for accounting

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 12 Dec 2025 14:12:41 +0100

fuss-server (12.0.59) unstable; urgency=medium

  * Fixed script to create missing directories for personal html pages

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 02 Dec 2025 16:10:29 +0100

fuss-server (12.0.58) unstable; urgency=medium

  * Support for optional enabling of personal html pages
  * Added script to create missing directories for personal html pages

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 27 Nov 2025 16:48:44 +0100

fuss-server (12.0.57) unstable; urgency=medium

  [ Elena Grandi ]
  * Allow access to tldr.sh without proxy auth.
  * Delete old kerberos keys when adding a new one.

  [ Simone Piccardi ]
  * Remove unavailable easyrsa option on certificate creation
  * Add rsyslog role to receive auth.log from fuss-client

  [ Paolo Dongilli ]
  * Add files to delete in home-cleanup-weekly

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 27 Nov 2025 10:15:36 +0100

fuss-server (12.0.56) unstable; urgency=medium

  * Adding Subject Alterntive Names to certificates
  * Corrections to cert-renew.sh script

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 03 Oct 2025 11:27:21 +0200

fuss-server (12.0.55) unstable; urgency=medium

  * Serve boot images via http instead of tftp for better performance.

 -- Elena Grandi <elena@truelite.it>  Tue, 30 Sep 2025 10:36:21 +0200

fuss-server (12.0.54) unstable; urgency=medium

  * Fix script extension on cron entry for SSL certificare renewal

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 15 Sep 2025 10:46:17 +0200

fuss-server (12.0.53) unstable; urgency=medium

  * Missing script extension on cron entry for SSL certificare renewal

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 15 Sep 2025 10:26:14 +0200

fuss-server (12.0.52) unstable; urgency=medium

  * Corrections to cron.d configs to setup both PATH and jobs

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 11 Sep 2025 11:44:55 +0200

fuss-server (12.0.51) unstable; urgency=medium

  * Removed daily mail on missing fuss-server upgrade

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 11 Sep 2025 10:30:04 +0200

fuss-server (12.0.50) unstable; urgency=medium

  * Adding argument to cert-renew.sh to force renew before expiring
  * Set a 5 years default duration for SSL certificates
  * Added monthly cron to check and renew LDAP SSL certificates

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 10 Sep 2025 15:17:48 +0200

fuss-server (12.0.49) unstable; urgency=medium

  [ Elena Grandi ]
  * Use the name devices instead of alien for the relevant wifi network.

  [ Simone Piccardi ]
  * Added NTP access for WiFi Devices network
  * Ensure that /etc/cluster is present 
  * Added scripts cert-renew.sh to renew LDAP SSL certificates

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 09 Sep 2025 15:31:00 +0200

fuss-server (12.0.48) unstable; urgency=medium

  * Serve /var/www/fuss-data-conf also as a windows share.
  * Publish the pGina installer for windows machines.

 -- Elena Grandi <elena@truelite.it>  Fri, 01 Aug 2025 11:20:23 +0200

fuss-server (12.0.47) unstable; urgency=medium

  [ Simone Piccardi ]
  * Adding support for alien interface configuration

 -- Elena Grandi <elena@truelite.it>  Tue, 29 Jul 2025 10:47:20 +0200

fuss-server (12.0.46) unstable; urgency=medium

  [ Simone Piccardi ]
  * Improved firewall rules for alien network

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 28 Jul 2025 17:41:50 +0200

fuss-server (12.0.45) unstable; urgency=medium

  [ Simone Piccardi ]
  * Adding support for alien network

  [ Elena Grandi ]
  * New fuss-zone values: Mini-BZ and IC-IlariaAlpi-MI
  * Make sure that fuss-archive-keyring is installed.

 -- Elena Grandi <elena@truelite.it>  Tue, 08 Jul 2025 11:16:16 +0200

fuss-server (12.0.44) unstable; urgency=medium

  * Correction to have 8006 and 10020 as squid HTTPs allowed ports

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 31 Mar 2025 16:16:06 +0200

fuss-server (12.0.43) unstable; urgency=medium

  * Added dates on bash history
  * Firewall review in comments and installed defaults
  * Added Airwave server access on firewall for ProvBZ zone
  * Removed pam_mkhomedir configs, unused and unneeded
  * Added 8006 and 20000 to HTTPs allowed ports from squid

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 26 Mar 2025 17:38:07 +0100

fuss-server (12.0.42) unstable; urgency=medium

  [ Elena Grandi ]
  * Add the dialup permission for users (needed by e.g. arduino).
  * Update the syntax doc for firewall-allowed-wan-host-services.

  [ Simone Piccardi ]
  * added firewall-default-added-rules for generic rules valid for anyone
  * use lineinfile for defaults in firewall config files

 -- Elena Grandi <elena@truelite.it>  Wed, 05 Mar 2025 10:28:46 +0100

fuss-server (12.0.41) unstable; urgency=medium

  * Fix firewall script for allowed_wan_host_services

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 03 Mar 2025 14:57:55 +0100

fuss-server (12.0.40) unstable; urgency=medium

  * Store access and proxy logs for up to one year.
  * Also run the freeradius role in the upgrade playbook when captive portal
    is configured.

 -- Elena Grandi <elena@truelite.it>  Thu, 20 Feb 2025 13:39:22 +0100

fuss-server (12.0.39) unstable; urgency=medium

  * Add configuration for HashKnownHosts no in /etc/ssh_config.d/
  * Added scripts to find/remove duplicated entries in known_hosts

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 04 Feb 2025 13:26:32 +0100

fuss-server (12.0.38) unstable; urgency=medium

  * Added wpad on DHCP config for wifi network

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 23 Jan 2025 13:12:59 +0100

fuss-server (12.0.37) unstable; urgency=medium
 
  [ Claudio Cavalli ]
  * Added home-cleanup-weekly script 

  [ Paolo ]
  * Add ccze as useful base package.
  * Correct double echo in users-delete.sh.

  [ Simone Piccardi ]
  * Enabled SMB3 protocol in Samba config
  * Remove proxy auth on WiFi (only), we rely on Radius auth
  * Process cp-common role on upgrade before octofussd

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Fri, 10 Jan 2025 00:16:25 +0100


fuss-server (12.0.36) unstable; urgency=medium

  * Install etherwake to turn clients on remotely.
  * Fix in cleanvar.sh: do not clean mailboxes that are already empty.

 -- Elena Grandi <elena@truelite.it>  Thu, 14 Nov 2024 12:40:37 +0100

fuss-server (12.0.35) unstable; urgency=medium

  * Correction for a bug on squid configuration

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Sep 2024 13:58:53 +0200

fuss-server (12.0.34) unstable; urgency=medium

  * Cleaned renmants of squid-deb-proxy
  * Added http://proxy/ to free access websites
  * Commented some firewall WiFi debug logging filling kernel logs
  * Add correct PATH to cron.d for keytabclean.sh

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Sep 2024 10:12:44 +0200

fuss-server (12.0.33) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removing deprecation warning
  * Use fuss_zone to configure relay server for missing upgrade notification

  [ Elena Grandi ]
  * Add a new variable fuss_zone to allow custom settings.
  * Allow clients to connect to CUPS using the "proxy" name.
  * Ask for the fuss_zone when running fuss-server, with a default of Prov-BZ.

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 05 Aug 2024 17:19:19 +0200

fuss-server (12.0.32) unstable; urgency=medium

  * Add /root/bin to fuss-dump.sh script
  * Add support for missing fuss-server upgrade notification

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 24 Jul 2024 13:23:32 +0200

fuss-server (12.0.31) unstable; urgency=medium

  * Added script and cron setup to cleanup keytabs
  * Slighty change on scheduling for cleanup scripts

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 25 Jun 2024 13:47:44 +0200

fuss-server (12.0.30) unstable; urgency=medium

  * Fix bug to delete local user when also present on LDAP

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 10 Jun 2024 09:45:00 +0200

fuss-server (12.0.29) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed obsolete scripts
  * Put all added SSH config on /etc/ssh/sshd_config.d/
  * Revised fuss-dump.sh script
  * Setup a saner .bashrc for root

  [ Elena Grandi ]
  * Use ansible.utils.ipaddr instead of the deprecated ipaddr. close #988

  [ Simone Piccardi ]
  * Added cleanvar.sh script on cron daily

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 04 Jun 2024 16:40:19 +0200

fuss-server (12.0.28) unstable; urgency=medium

  * Remove existing kerberos keys when (re-)connecting a client.

 -- Elena Grandi <elena@truelite.it>  Thu, 30 May 2024 13:32:25 +0200

fuss-server (12.0.27) unstable; urgency=medium

  * Changed script permissions 

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 29 May 2024 16:47:49 +0200

fuss-server (12.0.26) unstable; urgency=medium

  * Added new script to remove kerberos keys from a client list

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 29 May 2024 16:26:33 +0200

fuss-server (12.0.25) unstable; urgency=medium

  [ Marco Marinello ]
  * Add file to load custom iptables rules
  * Check if DNS and DHCP key are equal, otherwise fail

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Mar 2024 18:59:08 +0100

fuss-server (12.0.24) unstable; urgency=medium

  * Modified prevent duplication in /etc/exports file  

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 06 Mar 2024 18:22:29 +0100

fuss-server (12.0.23) unstable; urgency=medium
                                                                                
  [ Claudio Cavalli ]                                                           
  * Added new script to delete PCs from a print queue                           
                                                                                
  [ Paolo Dongilli ]                                                            
  * Added in CLEAN_LIST Singleton* files created by Google Chrome and Chromium

  [ Marco Marinello ]
  * Adequate handling of LM/NT Password lines in freeradius config
  * Add file to load custom iptables rules (#992)

  [ Claudio Cavalli ]
  * Prevent duplication in /etc/exports file

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Wed, 06 Mar 2024 17:13:25 +0100

fuss-server (12.0.22) unstable; urgency=medium

  [ Paolo Dongilli ]
  * Added url for firmware updates.

  [Marco Marinello]
  * Ask for password confirmation when configuring fuss server
  * Fixed typos

 -- Paolo <dongilli@fuss.bz.it>  Wed, 14 Feb 2024 14:59:35 +0100

fuss-server (12.0.20) unstable; urgency=medium

  * Updated scripts folder

 -- Claudio Cavalli <ccavalli@fuss.bz.it>  Fri, 13 Oct 2023 17:10:12 +0200

fuss-server (12.0.19) unstable; urgency=medium

  * Version bump 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Sep 2023 17:07:16 +0200

fuss-server (12.0.18) unstable; urgency=medium

  [ Marco Marinello ]
  * Implement new variables for samba and web proxy overrides

  [ Paolo Dongilli ]
  * Added freeradius parameter to allow MS-CHAPv2 authentication 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 22 Sep 2023 16:52:27 +0200

fuss-server (12.0.17) unstable; urgency=medium

  * Set SSH daemon listening addressfamily to inet on non-IPv6 servers
  * Disable clamav-clamonacc.service

 -- Marco Marinello <mmarinello@fuss.bz.it>  Wed, 02 Aug 2023 09:14:50 +0200

fuss-server (12.0.16) unstable; urgency=medium

  [ Marco Marinello ]
  * Save fuss-backup configuration in fuss-dump.

  [ Paolo Dongilli ]
  * Added fuss-backup to be installed by common role.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Mon, 05 Jun 2023 08:56:13 +0200

fuss-server (12.0.15) unstable; urgency=medium

  [Paolo Dongilli]
  * Added python3-pexpect as dependency.

  [Marco Marinello]
  * Set EASYRSA_BATCH=1 in EasyRSA environment
  * Add whole /opt to files handled by fuss-backup
  * Restore freeradius role
  * Edit isc-dhcp-server configuration to only announce proxy (option 252) on LAN interface
  * Avoid inter-client communications on WLAN net by sending /32 subnet via DHCP
  * Automatically advertise correct subet mask via DHCP when vendor-class-identifier is ArubaInstantAP
  * Revise firewall to log outgoing traffic from WLAN net

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Wed, 31 May 2023 19:22:09 +0200

fuss-server (12.0.14) unstable; urgency=medium

  * Corrected certificate creation which needs interaction.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Wed, 31 May 2023 18:45:00 +0200

fuss-server (12.0.13) unstable; urgency=medium

  * Configure apt-cacher-ng to tunnel HTTPS connections.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Mon, 08 May 2023 19:40:49 +0200

fuss-server (12.0.12) unstable; urgency=medium

  * Changed SSH_ORIGINAL_COMMAND.

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 05 May 2023 17:35:25 +0200

fuss-server (12.0.11) unstable; urgency=medium

  * More corrections for forget_client script
  * Corrections to home-cleanup script

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 23 Mar 2023 12:09:12 +0100

fuss-server (12.0.10) unstable; urgency=medium

  * Reworked forget_client script to fully remove client principals
  * Added ocs-agent-inst playbook to configure OCS agent on a server

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 16 Mar 2023 18:41:43 +0100

fuss-server (12.0.9) unstable; urgency=medium

  * Test release for new wifi network management
  * Removed coova-chilli, we will use just proxy authentication
  * Removed freeradius, now no more needed
  * Added IP configuration for ethernet interface facing wifi
  * Revert slapd to use CRYPT-SHA512 as freeradius is no more needed
  * Add DHCP configuration for wifi interface also
  * Use correct reverse zone for internal network

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 20 Feb 2023 15:30:48 +0100

fuss-server (12.0.8) unstable; urgency=medium

  [ Elena Grandi ]
  * Move all configuration defaults to files in /usr/share/fuss-server, go
    back to using /etc/fuss-server/fuss-server-defaults.yaml as the file for
    custom settings.

  [ Simone Piccardi ]
  * Adding use of WPAD in captive portal, force use of proxy blocking outside
    connections to http and https
  * Corrections to freeradius role to support custom timeouts
  * Setup slapd to use SSHA512 as CRYPT-SHA512 is not supported by radius

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 10 Feb 2023 15:20:16 +0100

fuss-server (12.0.7) unstable; urgency=medium

  * Updated apache2 role for use of php 8.2 

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 26 Jan 2023 09:51:41 +0100

fuss-server (12.0.6) unstable; urgency=medium

  * Updated mpwchange script for of LDAP admin password new management
  * Setup LDAP password to use CRYPT-SHA512 instead of SSHA
  * Removed unneeded LDAP ACL for admin user in new config
  * Adding variable to set RADIUS idle_timeout for captive portal

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Jan 2023 11:15:15 +0100

fuss-server (12.0.5) unstable; urgency=medium

  * Splitted e2guardian config in to a task file to support making it optional
  * Put squid fuss-server specific configs in a separated file
  * Added missing endscript on octofussd role logrotate.d files
  * Moved dhcp-reservations to /etc/dhcp/ to make apparmor happy
  * Copied DDNS TSIG key to /etc/dhcp/ to make apparmor happy

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 18 Jan 2023 14:55:36 +0100

fuss-server (12.0.4) unstable; urgency=medium

  * Correct bug on SSH configs in a separated file 

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 12 Jan 2023 12:14:26 +0100

fuss-server (12.0.3) unstable; urgency=medium

  * Added libpam-pwquality to replace deprecated libpam-cracklib
  * Added tasks to install apt-cacher-ng in role web_proxy
  * Moved to a separate unused file tasks to install squid-deb-proxy
  * Use apt-cacher-ng on fuss-server itself
  * Re-enable fuss-manager install
  * Put fuss-server specific SSH configs in a separated file

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 11 Jan 2023 18:05:39 +0100

fuss-server (12.0.2) unstable; urgency=medium

  * Correction to bind role to work also with cloud-init images

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 09 Jan 2023 16:16:29 +0100

fuss-server (12.0.1) unstable; urgency=medium

  [ Elena Grandi ]
  * Fix only upgrading the captive portal if it is configured.

  [ Simone Piccardi ]
  * Immediatly restart bind9 after configuration when passing to IPv4

 -- Elena Grandi <elena@truelite.it>  Wed, 04 Jan 2023 14:13:35 +0100

fuss-server (12.0.0) unstable; urgency=medium

  [ Elena Grandi ]
  * Explicitely install netcat-traditional instead of netcat (as per the
    buster default).
  * Removed python-ipaddr (in the stdlib as ipaddress from python 3.3)
  * Temporarily removed atop (not in testing).
  * Removed libpam-cracklib, deprecated upstream, and we're managing the
    password changes elsewhere.
  * Removed uses of python-gnome2, no longer available.
  * Removed gosa-schema (not in testing).
  * Removed python-smbpasswd, no longer in Debian.
  * Installed python3-ldap instead of python-ldap.
  * Temporarily disable squid-deb-proxy (not in testing).
  * Updated configuration for ntp to apply to ntpsec.
  * Work around issues with easy-rsa (#1016759 in Debian).

  [ Simone Piccardi ]
  * Providing directly Samba3 schema for slapd
  * Define rootdn/rootpw in slapd.conf avoiding cn=admin on database
  * Adding protocols indications in smb.conf for PDC compatibility
  * Use tsig-keygen to create DDNS key for DHCP and BIND
  * Use php-fpm for webpasswd, removing obsolete mod_php
  * Update dnsreserv.py script for new TSIG key management
  * Temporarily disable fuss-manager role

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 03 Jan 2023 14:44:36 +0100

fuss-server (10.0.48) unstable; urgency=medium

  * By default boot the clients from disk even when they try to boot from the
    network.

 -- Elena Grandi <elena@truelite.it>  Wed, 23 Nov 2022 11:16:24 +0100

fuss-server (10.0.47) unstable; urgency=medium

  * Fix for a wpad regression.

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 26 Oct 2022 13:58:24 +0200

fuss-server (10.0.46) unstable; urgency=medium

  [ Elena Grandi ]
  * Do not use the proxy for the localnet in wpad
  * Rotate logs for octofussd and octofuss-client. refs: #943, #785
  * Compress logs for e2guardian.
  * Added the forget_client script to forget clients on the server.

  [ Simone Piccardi ]
  * added children-startup=3 for squid unix_group external_acl
  * changed permission for dstats.log e2guardian log file

 -- Elena Grandi <elena@truelite.it>  Tue, 25 Oct 2022 10:06:27 +0200

fuss-server (10.0.45) unstable; urgency=medium

  * Also upgrade the captive portal if it is installed. refs: #977
  * Install and configure squid-deb-proxy.

 -- Elena Grandi <elena@truelite.it>  Thu, 30 Jun 2022 11:28:07 +0200

fuss-server (10.0.44) unstable; urgency=medium

  * Step for preparing coova-chilli role to use WPAD

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 09 Jun 2022 10:17:52 +0200

fuss-server (10.0.43) unstable; urgency=medium

  * Revised coova-chilli role for WPAD, available from 1.6+fuss10+1
  * Correct typo in e2guardian configuration (mostly unused)
  * Added mask on smb.conf, see #978
  * Added post-up config for CP interface see #980

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 31 May 2022 10:44:08 +0200

fuss-server (10.0.42) unstable; urgency=medium

  [ Marco Marinello ]
  * Add scripts to create links for roaming profile

  [ Paolo ]
  * Enlarged standard max-block-size (512 B) used by tftpd to 1468 B. This is necessary to overcome problems while network-booting Clonezilla with some specific RealTek network devices (driver r8168) available e.g. in computer model HP ProDesk 405 G6.

 -- Paolo <dongilli@fuss.bz.it>  Wed, 25 May 2022 10:51:05 +0200

fuss-server (10.0.41) testing; urgency=critical

  * Fix "restart chilli" handler

 -- Marco Marinello <mmarinello@fuss.bz.it>  Fri, 21 Jan 2022 09:33:08 +0100

fuss-server (10.0.40) testing; urgency=critical

  * Further mitigations to allow password login via ssh
  * Add root ssh (authorized) keys / known hosts to fuss-dump.sh

 -- Marco Marinello <mmarinello@fuss.bz.it>  Sat, 15 Jan 2022 15:34:04 +0100

fuss-server (10.0.39) unstable; urgency=medium

  * Allow ssh password authentication

 -- Marco Marinello <mmarinello@fuss.bz.it>  Mon, 10 Jan 2022 15:42:34 +0100

fuss-server (10.0.38) unstable; urgency=medium

  * Replaced /etc/exports template with lineinfile
    Avoid breaking compatibility with FUSS LAMP
  * Preferred IPv4 also in squid dns configuration

 -- Marco Marinello <mmarinello@fuss.bz.it>  Thu, 06 Jan 2022 12:45:38 +0100

fuss-server (10.0.37) unstable; urgency=medium

  * Added new repos in the standard proxy exclusion list
  * First implementation of Windows Roaming Profile
  * Set an higher priority to fuss-server.yaml on fuss-server-defaults.yaml:
    now variables can be override via the first file so that the second one can always be updated via apt
  * Network manager is stopped and disabled if present on create
  * Restored copy of freeradius default site with limitation to "wifi" group members
  * Disabled IPv6 per default

 -- Marco Marinello <mmarinello@fuss.bz.it>  Tue, 28 Dec 2021 16:33:32 +0100

fuss-server (10.0.36) unstable; urgency=medium

  * Added netdev to perms group in octofuss.conf. 

 -- Paolo Dongilli <dongilli@fuss.bz.it>  Fri, 08 Oct 2021 18:08:07 +0200

fuss-server (10.0.35) unstable; urgency=medium

  [ Paolo Dongilli ]
  * Corrected wrong text wrapping in file pxelinux-default.

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Jul 2021 11:32:05 +0200

fuss-server (10.0.34) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed from dumped tar fuss-server-defaults.yaml

  [ Paolo Dongilli ]
  * Corrections to fuss-fucc configuration.

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Jul 2021 10:01:31 +0200

fuss-server (10.0.33) unstable; urgency=medium

  [ Elena Grandi ]
  * Make the time of the home cleanup cron configurable.

  [ Simone Piccardi ]
  * Added name to cron cleanup script to avoid duplication
  * Cleanup of misc role tasks 

 -- Elena Grandi <elena@truelite.it>  Wed, 07 Jul 2021 10:09:48 +0200

fuss-server (10.0.32) unstable; urgency=medium

  [ Simone Piccardi ]
  * Adding cron home cleanup script
  * Added coova-chilli network split (static and dynamic)
  * Reworked coova-chilli restart

 -- Elena Grandi <elena@truelite.it>  Tue, 08 Jun 2021 10:43:11 +0200

fuss-server (10.0.31) unstable; urgency=medium

  [ Simone Piccardi ]
  * Updating man page

  [ Elena Grandi ]
  * build the manpage while building the package.

 -- Elena Grandi <elena@truelite.it>  Thu, 04 Mar 2021 14:11:58 +0100

fuss-server (10.0.30) unstable; urgency=medium

  [ Elena Grandi ]
  * Fix bug #972 when crosschecking hotspot configuration.

 -- Elena Grandi <elena@truelite.it>  Mon, 18 Jan 2021 10:13:09 +0100

fuss-server (10.0.29) unstable; urgency=medium

  [ Simone Piccardi ]
  * Forcing bind to use IPv4 address instead of IPv6
  * Adding detectportal.firefox.com to firefox acl on squid
  * Up to 10240 the file descriptor limit for squid
  * Raise to 8192 the file descriptor limit for e2guardian
  * Raise to 1024 the httpworkers for e2guardian

  [ Elena Grandi ]
  * Setup rotation of /var/log/e2guardian/dstats.log.

 -- Elena Grandi <elena@truelite.it>  Fri, 11 Dec 2020 12:47:31 +0100

fuss-server (10.0.28) unstable; urgency=medium

  [ Simone Piccardi ]
  * Correction for a name error on dump and restore script

 -- Elena Grandi <elena@truelite.it>  Tue, 01 Dec 2020 10:47:25 +0100

fuss-server (10.0.27) unstable; urgency=medium

  [ Simone Piccardi ]
  * Some corrections for the restore script
  * Adding Kerberos keytab to dumped files
  * Adding messages to dump script and changed dump directory
  * Adding an octonet restart (via flush_handlers) before setting password

 -- Elena Grandi <valhalla@debian.org>  Fri, 27 Nov 2020 10:21:34 +0100

fuss-server (10.0.26) unstable; urgency=medium

  * Improvements to the dump/restore scripts

 -- Elena Grandi <elena@truelite.it>  Wed, 18 Nov 2020 14:37:52 +0100

fuss-server (10.0.25) unstable; urgency=medium

  [ Simone Piccardi ]
  * Removed old and unused dansguardian2 role
  * Added initial draft of server dump/restore scripts
  * Added dnsreserv.py script to put reservation names into DNS

  [ Elena Grandi ]
  * Forbid passwords that contain just numbers

 -- Elena Grandi <elena@truelite.it>  Tue, 17 Nov 2020 14:33:59 +0100

fuss-server (10.0.24) unstable; urgency=medium

  * Added bluetooth to perms group in octofuss.conf.

 -- Elena Grandi <elena@truelite.it>  Fri, 25 Sep 2020 13:49:06 +0200

fuss-server (10.0.23) unstable; urgency=medium

  * Moving from nscd to unscd

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 21 Aug 2020 18:47:06 +0200

fuss-server (10.0.22) unstable; urgency=medium

  * Typo fix.

 -- Elena Grandi <elena@truelite.it>  Mon, 08 Jun 2020 11:54:33 +0200

fuss-server (10.0.21) unstable; urgency=medium

  * Remove configuration files from /etc/skel; migrated to fuss-client.
  * Further fixes for the TFTP server.

 -- Elena Grandi <elena@truelite.it>  Mon, 08 Jun 2020 10:36:11 +0200

fuss-server (10.0.20) unstable; urgency=medium

  * Fixes for the TFTP server

 -- Elena Grandi <elena@truelite.it>  Thu, 04 Jun 2020 10:31:38 +0200

fuss-server (10.0.19) unstable; urgency=medium

  * Configure TFTP to also serve files for efi boot.

 -- Elena Grandi <elena@truelite.it>  Thu, 28 May 2020 15:51:41 +0200

fuss-server (10.0.18) unstable; urgency=medium

  * Configure user-dirs-update-gtk in /etc/skel

 -- Elena Grandi <elena@truelite.it>  Wed, 27 May 2020 12:40:26 +0200

fuss-server (10.0.17) unstable; urgency=medium

  * Enable default-ssl vhost

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 19 May 2020 15:29:22 +0200

fuss-server (10.0.16) unstable; urgency=medium

  * Add a custom gnome-keyring-secrets.desktop to /etc/skel

 -- Elena Grandi <elena@truelite.it>  Thu, 14 May 2020 10:54:35 +0200

fuss-server (10.0.15) unstable; urgency=medium

  * Reworked resolv.conf template for cloud-init compatibility
  * Reworked webpasswd to manage also non student password change

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 06 Apr 2020 16:55:33 +0200

fuss-server (10.0.14) unstable; urgency=medium

  * Set the real BASEDN for fuss-manager, not a specific one.
  * Make e2guardian listen on all interfaces (needed for captive portal)
  * Corrections for coova-chilli firewall
  * Use tun0 address for proxy and DNS 
  * added local.conf file for coova-chilli
  * added configurations for wpad.dat and ssl redir

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 31 Mar 2020 12:50:18 +0200

fuss-server (10.0.13) unstable; urgency=medium

  * Missing configuration change and added wrong package name

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 02 Mar 2020 18:02:05 +0100

fuss-server (10.0.12) unstable; urgency=medium

  [ Elena Grandi ]
  * Install missing packages left in TODO
  * Retrieve version from the installed package.

  [ Simone Piccardi ]
  * Correction for e2guardian configuration, force forwarding to squid

 -- Elena Grandi <elena@truelite.it>  Wed, 05 Feb 2020 08:42:56 +0100

fuss-server (10.0.11) unstable; urgency=medium

  * Enable arpwatch on the internal interfaces

 -- Elena Grandi <elena@truelite.it>  Tue, 04 Feb 2020 11:45:41 +0100

fuss-server (10.0.10) unstable; urgency=medium

  * Added script chguserpwd.sh to change password to an user

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 27 Jan 2020 15:22:38 +0100

fuss-server (10.0.9) unstable; urgency=medium

  * Fixes to pxelinux configuration

 -- Elena Grandi <elena@truelite.it>  Wed, 22 Jan 2020 14:28:27 +0100

fuss-server (10.0.8) unstable; urgency=medium

  * Remove old role “pxe-server” superseded by fuss-fucc.
  * Fixes to the fuss-fucc role.

 -- Elena Grandi <elena@truelite.it>  Fri, 03 Jan 2020 12:51:47 +0100

fuss-server (10.0.7) unstable; urgency=medium

  * Configure xscreensaver in /etc/skel
  * Install fuss-fucc and configure the server for it

 -- Elena Grandi <elena@truelite.it>  Mon, 23 Dec 2019 14:29:49 +0100

fuss-server (10.0.6) unstable; urgency=medium

  * Write fuss-manager configuration in the right location

 -- Elena Grandi <elena@truelite.it>  Thu, 05 Dec 2019 09:30:47 +0100

fuss-server (10.0.5) unstable; urgency=medium

  * Bugfixes for python3
  * Fixes to the fuss-manager configuration

 -- Elena Grandi <elena@truelite.it>  Wed, 04 Dec 2019 14:34:41 +0100

fuss-server (10.0.4) unstable; urgency=medium

  [ Simone Piccardi ]
  * porting of captive portal completed
  * captive portal refactoring: no more tinyproxy
  * captive portal refactoring: using a single e2guardian instance

  [ Elena Grandi ]
  * Updated Standards-Version
  * Use python3 for fuss-server
  * Install fuss-manager

 -- Elena Grandi <elena@truelite.it>  Fri, 22 Nov 2019 14:20:33 +0100

fuss-server (10.0.3) unstable; urgency=medium

  [ Elena Grandi ]
  * Update packaging: debhelper-compat, Standards-Version etc.

  [ Simone Piccardi ]
  * added script to propagate user network permission
  * correction to kdc.conf to avoid kdc using TCP port 88 used by kadmin
  * explicit enable of octofussd unit

 -- Elena Grandi <elena@truelite.it>  Fri, 30 Aug 2019 14:36:54 +0200

fuss-server (10.0.2) unstable; urgency=medium

  [ Elena Grandi ]
  * Create basic LDAP groups.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 30 Aug 2019 13:51:36 +0200

fuss-server (10.0.1) unstable; urgency=medium

  [ Simone Piccardi ]
  * Update proxy rules

 -- Elena Grandi <elena@truelite.it>  Tue, 27 Aug 2019 12:00:53 +0200

fuss-server (10.0.0) unstable; urgency=medium

  [ Simone Piccardi ]
  * Update to buster

 -- Elena Grandi <elena@truelite.it>  Mon, 19 Aug 2019 12:34:38 +0200

fuss-server (8.0.41) unstable; urgency=medium

  * Fix blocking of windows devices from squid. refs: #775
  * Save version and timestamp as an ansible local fact. refs: #738
  * Set the default policy for printers as retry-job. refs: #795
  * Configure screen for root.

 -- Elena Grandi <elena@truelite.it>  Mon, 20 May 2019 14:21:11 +0200

fuss-server (8.0.40) unstable; urgency=medium

  [ Simone Piccardi ]
  * Add AP management scripts

  [ Elena Grandi ]
  * New installed packages: sshpass and expect

 -- Elena Grandi <elena@truelite.it>  Tue, 12 Mar 2019 10:59:53 +0100

fuss-server (8.0.39) unstable; urgency=medium

  [ Simone Piccardi ]
  * Fix idempotency bug for named.conf.options

  [ Elena Grandi ]
  * Install octofuss-client on the server
  * Install cups and printer drivers

 -- Elena Grandi <elena@truelite.it>  Tue, 05 Mar 2019 10:56:31 +0100

fuss-server (8.0.38) unstable; urgency=medium

  [ Elena Grandi ]
  * Fix loading of named.added.conf.local

 -- Elena Grandi <elena@truelite.it>  Thu, 06 Dec 2018 09:31:24 +0100

fuss-server (8.0.37) unstable; urgency=medium

  [Simone Piccardi]
  * Add squid-added-repo.conf for custom squid configuration.

  [Elena Grandi]
  * Install etckeeper.
  * Add named.added.conf.local for custom bind configuration.
  * Added dhcpd-added.conf for custom dhcpd configuration.
  * Make the DHCP lease time configurable in fuss-server-defaults.yaml

 -- Elena Grandi <elena@truelite.it>  Mon, 03 Dec 2018 10:22:14 +0100

fuss-server (8.0.36) unstable; urgency=medium

  * Modification from FUSS Server course of 25-10-2018, see #656

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 25 Oct 2018 12:00:08 +0200

fuss-server (8.0.35) unstable; urgency=medium

  * Modify chilli up firewall rules for access from server to wifi
  * Avoid removing bind .jnl files, using instead rndc sync -clean
  * Better management of upgrade and cp subcommand

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 21 Sep 2018 14:00:39 +0200

fuss-server (8.0.34) unstable; urgency=medium

  [ Elena Grandi ]
  * Preseed nslcd not to check certificates

  [ Simone Piccardi ]
  * Correct scripts to avoid problems with comments in /etc/ldap/ldap.conf
  * Adding check for forbidden chars in master password, see #603

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 19 Sep 2018 15:45:07 +0200

fuss-server (8.0.33) unstable; urgency=medium

  * Improve client key generation

 -- Elena Grandi <elena@truelite.it>  Mon, 23 Jul 2018 11:11:47 +0200

fuss-server (8.0.32) unstable; urgency=medium

  * Configure limited root access via key for fuss-client.

 -- Elena Grandi <elena@truelite.it>  Tue, 17 Jul 2018 13:45:19 +0200

fuss-server (8.0.31) unstable; urgency=medium

  * Added script to change the master fuss password.

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 17 Jul 2018 13:17:08 +0200

fuss-server (8.0.30) unstable; urgency=medium

  * added scripts to package, removing obsoleted one, and added some packages

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 11 Jun 2018 19:29:10 +0200

fuss-server (8.0.29) unstable; urgency=medium

  * refs #409 - added bchemnet.com to squid exclusion list

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 11 Sep 2017 16:54:40 +0200

fuss-server (8.0.28) unstable; urgency=medium

  * Non-maintainer upload.
  * refs #400 - added videolan to squid exclusion list

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 08 Sep 2017 15:37:05 +0200

fuss-server (8.0.27) unstable; urgency=medium

  * correction to dansguardian domain whitelist. refs: #389

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 01 Sep 2017 12:17:46 +0200

fuss-server (8.0.26) unstable; urgency=medium

  [Elena Grandi]
  * Allow passwordless access to the local net (squid). refs: #356

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 31 Aug 2017 14:23:05 +0200

fuss-server (8.0.25) unstable; urgency=medium

  [Elena Grandi]
  * Raise forward_max_tries to access outlook.com via squid. refs: #385

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 31 Aug 2017 10:20:14 +0200

fuss-server (8.0.24) unstable; urgency=medium

  * Further fixes to /etc/hosts.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 24 Aug 2017 14:30:33 +0200

fuss-server (8.0.23-1) unstable; urgency=medium

  * Fix default domain in /etc/hosts.
  * Force lowercase domain in /etc/krb5.conf.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 23 Aug 2017 14:51:40 +0200

fuss-server (8.0.22-1) unstable; urgency=medium

  * Enable unconditional access to the local network on the proxy. Refs: #356
  * Disable caching of local resources. Refs: #356

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 28 Jul 2017 12:00:27 +0200

fuss-server (8.0.21-1) unstable; urgency=medium

  [Elena Grandi]
  * Fix allow-recursion in case of a captive portal. refs: #358

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 27 Jul 2017 11:00:24 +0200

fuss-server (8.0.20-1) unstable; urgency=medium

  [Elena Grandi]
  * Captive portal: only allow access to users in the wifi group.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 11 Jul 2017 11:35:21 +0200

fuss-server (8.0.19-1) unstable; urgency=medium

  [Elena Grandi]
  * Fix password changing with webpasswd

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 06 Jul 2017 17:03:36 +0200

fuss-server (8.0.18-1) unstable; urgency=medium

  [Elena Grandi]
  * Fix internet access limitations with squid

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 04 Jul 2017 11:10:02 +0200

fuss-server (8.0.17-1) unstable; urgency=medium

  [Elena Grandi]
  * Configure nslcd to allow changing user passwords with passwd

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 27 Jun 2017 11:25:07 +0200

fuss-server (8.0.16-1) unstable; urgency=medium

  [Elena Grandi]
  * Removed useless read that was growing /etc/krb5.keytab too fast.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 23 Jun 2017 14:12:49 +0200

fuss-server (8.0.15-1) unstable; urgency=medium

  * Fixed WPAD content refs #305

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 22 Jun 2017 10:56:30 +0200

fuss-server (8.0.14-1) unstable; urgency=medium

  [Elena Grandi]
  * Add documentation as a comment to /etc/fuss-server/dhcp-reservations
  * Add authoritative option to the dhcp server. refs: #242
  * Allow sudo users to read the generated client keytab. refs: #285
  * Fix localhost netmask in wpad.dat. refs: #305

  [Simone Piccardi]
  * Preseed samba update. refs: #271
  * Adding forced latin1 -> utf8 conversion for LDAP helper use. refs: #294

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 16 Jun 2017 15:16:59 +0200

fuss-server (8.0.13-1) unstable; urgency=medium

  * Avoid filters nthash and lmhash fails when given a numeric only password

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 18 May 2017 19:12:15 +0200

fuss-server (8.0.12-1) unstable; urgency=medium

  [Elena Grandi]
  * Remove acl mount option from /home as it is now the the default.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 15 May 2017 10:50:40 +0200

fuss-server (8.0.11-1) unstable; urgency=medium

  [Elena Grandi]
  * Configure isc dhcp to use standard ddns

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 26 Apr 2017 14:47:55 +0200

fuss-server (8.0.10-2) unstable; urgency=medium

  * More corrections to /etc/dhcp/dhcpd.conf for reverse PTR updates

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 18 Apr 2017 16:50:58 +0200

fuss-server (8.0.10-1) unstable; urgency=medium

  * Fix /etc/dhcp/dhcpd.conf setup for reverse PTR updates

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 18 Apr 2017 15:24:35 +0200

fuss-server (8.0.9-1) unstable; urgency=medium

  [Elena Grandi]
  * Improve dhcp/pxe configuration

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 12 Apr 2017 10:15:09 +0200

fuss-server (8.0.8-1) unstable; urgency=medium

  [Elena Grandi]
  * Fix missing pxe-server default
  * Prevent duplicate entries for jessie-backports

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 11 Apr 2017 11:44:54 +0200

fuss-server (8.0.7-1) unstable; urgency=medium

  * Actually fix wpad.dat

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 22 Mar 2017 14:43:38 +0100

fuss-server (8.0.6-1) unstable; urgency=medium

  [Elena Grandi]
  * Fix wpad.dat

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 22 Mar 2017 14:09:03 +0100

fuss-server (8.0.5-1) unstable; urgency=medium

  * Support for NFS + Kerberos.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 10 Mar 2017 10:15:09 +0100

fuss-server (8.0.4-1) unstable; urgency=medium

  * New handling of preseeded packages.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 03 Mar 2017 18:35:01 +0100

fuss-server (8.0.3-1) unstable; urgency=medium

  * refs #203

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 03 Mar 2017 10:40:32 +0100

fuss-server (8.0.2-1) unstable; urgency=medium

  * PXE server preseeding fixes

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 02 Mar 2017 10:37:04 +0100

fuss-server (8.0.1-1) unstable; urgency=medium

  * New upstream release
  * new command fuss-server test to check configuration after create
  * pxe configuration
  * new command fuss-server cp integrates the features of the old fuss-cp

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 01 Mar 2017 11:11:59 +0100

fuss-server (8.0-8) UNRELEASED; urgency=medium

  [ Christopher R. Gabriel ]
  * New version bump for Debian Jessie port

  [ Elena Grandi ]
  * Conversion to ansible


  [ Christopher R. Gabriel ]
  * Apache fixes
  * Proxy pac fixes
  * Dep fixes by Elena

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 30 Dec 2016 11:25:59 +0100

fuss-server (7.0.14) wheezy; urgency=medium

  * added control to avoid some chars in the password (interference with sed expressions)

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 16 Jul 2014 14:54:54 +0200

fuss-server (7.0.13) wheezy; urgency=medium

  * better handling of configuration after a purge/create cycle

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 11 Jul 2014 15:32:08 +0200

fuss-server (7.0.12) wheezy; urgency=medium

  * apache config modifications
  * added archive.canonical.com to squid whitelist

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 07 Jul 2014 12:47:00 +0200

fuss-server (7.0.11) wheezy; urgency=medium

  * correct wrong cleanup in .profile

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 04 Jul 2014 17:06:12 +0200

fuss-server (7.0.10) wheezy; urgency=medium

  * correct bug on Samba schema for create after purge
  * better .profile in /etc/skel
  * defining an upgrade action for future releases

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 03 Jul 2014 12:25:39 +0200

fuss-server (7.0.9) wheezy; urgency=medium

  * version bump for release

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 23 Jun 2014 13:26:41 +0200

fuss-server (7.0.8) wheezy; urgency=medium

  * add some new dependecies
  * add a profile script for client language setting
  * add an .ldapvirc for root (preconfigured to use admin on LDAP tree)

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 19 Jun 2014 12:55:45 +0200

fuss-server (7.0.7) wheezy; urgency=medium

  * add a .xprofile script to /etc/skel/

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 13 Jun 2014 19:00:53 +0200

fuss-server (7.0.6) wheezy; urgency=medium

  * default password expiration in smbldap-tools is set to student value.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 30 May 2014 15:26:48 +0200

fuss-server (7.0.5) wheezy; urgency=medium

  * added web console for students password change by Christopher
  * reworked apache configuration

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 07 May 2014 17:11:53 +0200

fuss-server (7.0.4) wheezy; urgency=medium

  * more on making fuss-server.conf not readable
  * correction on smbldap-populate for missing user

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 06 May 2014 19:50:32 +0200

fuss-server (7.0.2) wheezy; urgency=medium

  * Update Samba config, ensure fuss-server.conf is not readable

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 06 May 2014 12:21:56 +0200

fuss-server (7.0.1) wheezy; urgency=medium

  * Using native package number

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 05 May 2014 19:31:21 +0200

fuss-server (7.0-1) wheezy; urgency=medium

  * First wheezy release

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 05 May 2014 14:56:55 +0200

fuss-server (6.0-9) squeeze; urgency=low

  * Correzioni ed aggiornamenti allo script mpwchange.sh

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 11 Nov 2013 14:09:39 +0100

fuss-server (6.0-8) squeeze; urgency=low

  * Correction for a squid log name (useragent.log)

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 25 Jun 2013 12:06:15 +0200

fuss-server (6.0-7) squeeze; urgency=low

  * Removed set -e from firewall script
  * Added error print on wrong hostnames in firewall-denied-lan-hosts

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 13 May 2013 15:11:02 +0200

fuss-server (6.0-6) squeeze; urgency=low

  * Added IP logging for squid

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 12 Jun 2012 16:10:25 +0200

fuss-server (6.0-5) squeeze; urgency=low

  * Enable access for other software repositories (Oracle Java)
  * Remove generic access to port 443
  * Remove generic access to port 123 (use NTP on the server)
  * Use group sshaccess to enable ssh for selected users
  * Remove overwriting of common-* file (now managed by pam-auth-update)

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 31 May 2012 16:55:26 +0200

fuss-server (6.0-4) squeeze; urgency=low

  * Enable access for ttf-mscorefonts-installer font download via proxy

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 28 May 2012 19:06:49 +0200

fuss-server (6.0-3) squeeze; urgency=low

  * Other default settings for firewall and proxy

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 25 May 2012 17:17:26 +0200

fuss-server (6.0-2) squeeze; urgency=low

  * Added some defaults for web navigation as requested.
  * OS Check on windows, denying access.

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 15 May 2012 18:07:11 +0200

fuss-server (6.0-1) squeeze; urgency=low

  * Correct version number.

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 12 Apr 2012 16:52:07 +0200

fuss-server (5.0-1) squeeze; urgency=low

  * Initial squeeze port

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 30 Mar 2012 18:12:36 +0200

fuss-server (4.0-11) lenny; urgency=low

  * New firewall and config for Captive Portal

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 25 Jan 2012 14:38:41 +0100

fuss-server (4.0-10) lenny; urgency=low

  * Removed apt-listbugs dep to avoid CDD building failure

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 18 Mar 2010 11:21:33 +0100

fuss-server (4.0-9) lenny; urgency=low

  * fixed wrong deps

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 07 Sep 2009 16:56:50 +0200

fuss-server (4.0-8) lenny; urgency=low

  * adding some checks on interfaces (if these are configured)
  * correct some bugs introduced by 4.0-7

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 22 Jun 2009 15:54:32 +0200

fuss-server (4.0-7) lenny; urgency=low

  * avoid localization problems in the fuss-server script
  * avoid stopping dansguardian if not running (so no misleading message
    is printed)

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 22 Jun 2009 14:14:49 +0200

fuss-server (4.0-6) lenny; urgency=low

  * http proxy access to the server itself enabled, close #371

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 18 Jun 2009 16:50:53 +0200

fuss-server (4.0-5) lenny; urgency=low

  * No start of virus scan on dansguardian, close #368
  * Squid excption for firefox addons and components, close #398
  * Avoid break on aliased interfaces (still no management)
  * Firewall script got LSB comments

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 18 Jun 2009 15:10:57 +0200

fuss-server (4.0-4) lenny; urgency=low

  * Set certificates expiration to 20 year for the CA and to 10 year for the
    server
  * Added some more messages for error and purge

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 16 Jun 2009 12:38:13 +0200

fuss-server (4.0-3) lenny; urgency=low

  * git sync

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 15 Jun 2009 15:46:44 +0200

fuss-server (4.0-2) lenny; urgency=low

  * First test package

 -- Simone Piccardi <piccardi@truelite.it>  Thu, 11 Jun 2009 17:07:21 +0200

fuss-server (4.0-1) lenny; urgency=low

  * Initial lenny port

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 18 May 2009 12:03:18 +0200

fuss-server (2.0.20-1) etch; urgency=low

  * new CA.sh with new certificate default
  * added a new script to renew SSL certificates (cert-renew.sh)

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu, 23 Oct 2008 11:14:53 +0200

fuss-server (2.0.19-1) etch; urgency=low

  * added 'octofuss-client' server edition, with a dedicated daily cron job

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 04 Feb 2008 14:40:11 +0100

fuss-server (2.0.18-1) etch; urgency=low

  * New defaul configurations

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue,  4 Sep 2007 15:29:46 +0000

fuss-server (2.0.17-1) etch; urgency=low

  * Added LDAP cleaning script by Simone Piccardi <piccardi@truelite.it>
  * Fixed --system args for 'internet' privilege group

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Sun,  2 Sep 2007 17:54:32 +0000

fuss-server (2.0.16-1) etch; urgency=low

  * Managed to have the haldaemon user always in hardware related groups

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Wed, 29 Aug 2007 15:10:59 +0200

fuss-server (2.0.15-1) etch; urgency=low

  * Corrections to access a local repository from squid
  * Corrections to use an Unix group for the internet access

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 24 Jul 2007 16:56:39 +0200

fuss-server (2.0.14-1) etch; urgency=low

  * New upstream release
  * Octofussd distributes user privileges to requesting clients.

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon,  2 Jul 2007 15:16:43 +0200

fuss-server (2.0.13-1) etch; urgency=low

  * New upstream release
  * Setting ACL only on ext2 and ext3 filesystem

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 27 Jun 2007 15:14:23 +0200

fuss-server (2.0.12-2) etch; urgency=low

  * Aggiunti script di supporto per pulizia GCONF e LDAP

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 26 Jun 2007 15:18:45 +0200

fuss-server (2.0.11-1) etch; urgency=low

  * New upstream release
  * sizelimit unlimited on slapd.conf
  * correction on libnss-ldap.conf and pam_ldap.conf
  * more check on libnss-ldap.conf and pam_ldap.conf client versions

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 25 Jun 2007 18:32:16 +0200

fuss-server (2.0.10-1) etch; urgency=low

  * Aggiornamenti firewall

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Fri, 22 Jun 2007 13:07:33 +0200

fuss-server (2.0.9-1) etch; urgency=low

  * New upstream release
  * new name scheme for SSL certificate files
  * removing remnant of old fuss-server

 -- Simone Piccardi <piccardi@truelite.it>  Wed, 20 Jun 2007 19:03:24 +0200

fuss-server (2.0.8-1) etch; urgency=low

  * New upstream relaese
  * force input of configuration variables,
  * install a new version of the service scripts capable to autoconfigure LDAP
    parameters using the configuration files.
  * new format for fuss-server.conf, use single quote

 -- Simone Piccardi <piccardi@truelite.it>  Mon, 18 Jun 2007 14:49:18 +0200

fuss-server (2.0.7-1) etch; urgency=low

  * New upstream relaese: fix some problems with samba schema
    installation.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 15 Jun 2007 14:52:13 +0200

fuss-server (2.0.6-1) etch; urgency=low

  * New upstream release: input verification, new backup system for
    previous configurations

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 12 Jun 2007 19:10:59 +0200

fuss-server (2.0.5-2) etch; urgency=low

  * Added some dependencies

 -- Simone Piccardi <piccardi@truelite.it>  Tue, 12 Jun 2007 15:27:12 +0200

fuss-server (2.0.5-1) etch; urgency=low

  * New upstream release - daemons fixes

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Tue, 12 Jun 2007 11:34:45 +0200

fuss-server (2.0.4-1) etch; urgency=low

  * New upstream release

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 11 Jun 2007 19:03:13 +0200

fuss-server (2.0.3-1) etch; urgency=low

  * New upstream release

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Mon, 11 Jun 2007 10:58:43 +0200

fuss-server (2.0.2-1) etch; urgency=low

  * New upstream release
  * octofuss integration

 -- Christopher R. Gabriel <cgabriel@truelite.it>  Thu,  7 Jun 2007 18:21:49 +0200

fuss-server (2.0-1) etch; urgency=low

  * Initial release.

 -- Simone Piccardi <piccardi@truelite.it>  Fri, 01 Jun 2007 23:35:17 +0200
