editfiles:

  debian::

        # The file /etc/adduser.conf control local user creation.
        # For setting up a Debian Edu/Skolelinux server it is recommend
        # to start with a local user on a workstation (that might even be 
        # tjener itself with additional workstation role).
        #
        # For local user creation we want to make sure that local users
        # do not have conflicting uidNumbers, gidNumber with those in LDAP.

        # Patch /etc/adduser.conf
        { /etc/adduser.conf

            # FIRST_UID, LAST_UID for non-LDAP users is 500-999
            ReplaceAll 'FIRST_UID=1000' With 'FIRST_UID=500'
            ReplaceAll 'LAST_UID=29999' With 'LAST_UID=999'

            # FIRST_GID, LAST_GID for non-LDAP groups is 500-999
            ReplaceAll 'FIRST_GID=1000' With 'FIRST_GID=500'
            ReplaceAll 'LAST_GID=29999' With 'LAST_GID=999'

            # local users' homes have permissions 0700
            ReplaceAll 'DIR_MODE=0755' With 'DIR_MODE=0700'
        }


