00:00 | <andygraybeal> it's just a keyboard, mouse, video and then usb filesystems.. these things are serving.. nothign fancy.. the work is done back on your server
| |
00:00 | * ball nods | |
00:00 | <ball> We need some stronger servers too, but that'll have to wait.
| |
00:01 | <andygraybeal> if you need to have special graphical configurations, that is all done inside of lts.conf -- it will normally auto-configure just fine! and you don't need to touch your lts.conf
| |
00:01 | just make sure you disable that stupid compiz crap
| |
00:01 | <ball> Do I have an lts.conf file for each terminal, each type of terminal or just one per host?
| |
00:01 | <andygraybeal> and your good.
| |
00:02 | lts.conf is global... you can get nutty and have workstation configs in their... but i don't recommend it unless you need it if you have many workstations.
| |
00:02 | what i'm getting at is i bet you'd be fine without any customization.
| |
00:03 | <ball> andygraybeal: I look forward to trying this.
| |
00:03 | <andygraybeal> that is the beauty of this system.. it scales well without a lot of configuration.
| |
00:04 | managing it is a breeze.. you install your applications on the server... what 10 minutes time at most...... and it's like you spent two nights upgrading the whole office. to a new office suite :)
| |
00:04 | oh and you never again forget that one workstation off in the closet that the temp uses like twice a month!
| |
00:05 | <ball> I never do anyway ...I /am/ the temp ;-)
| |
00:05 | Well, I've been here 13 years
| |
00:06 | ...but I'm part-time now.
| |
00:08 | <TheMatrix3000> ha, well at my office i am THE server admin
| |
00:08 | out of an IT department of 5
| |
00:08 | I am the IT Help Desk
| |
00:08 | the System Admin
| |
00:08 | the Network Admin
| |
00:08 | and the User Admin
| |
00:09 | everyone else are developers
| |
00:09 | lol
| |
00:09 | funny part is we are an Inc 500 company 3 years in a row
| |
00:09 | * ball is the I.T. department | |
00:09 | <TheMatrix3000> haha
| |
00:10 | <ball> We have about ten desktop PCs, one server (HP ML110) and a few random NetBSD boxen
| |
00:10 | ...and printers and things, obviously.
| |
00:10 | <TheMatrix3000> well, the developers develop code for our interfaces for the company
| |
00:10 | im not a programmer
| |
00:10 | oh yea, internally we have 7 servers
| |
00:10 | * ball misses coding | |
00:10 | <TheMatrix3000> including a vmware server
| |
00:10 | and about 70 pcs
| |
00:10 | 60 of which are thin clients
| |
00:11 | <ball> Is vmware the hypervisor? ESXi?
| |
00:11 | <TheMatrix3000> yea
| |
00:11 | ESXi
| |
00:11 | it's pretty nice
| |
00:11 | i use it for OpenLDAP
| |
00:11 | <ball> Do you find that fairly reliable?
| |
00:11 | <TheMatrix3000> and for the intranet site
| |
00:11 | yes
| |
00:11 | i haven't had it crash yet
| |
00:11 | <ball> I've considered buying that.
| |
00:11 | <TheMatrix3000> its free
| |
00:11 | <andygraybeal> i'm an idiot, so i started using zentyal.. for ldap initially.. but now i'm using it for mail server too
| |
00:12 | <TheMatrix3000> ESXi is free
| |
00:12 | leio_ has left IRC (leio_!~leio@gentoo/developer/leio, Quit: No Ping reply in 180 seconds.) | |
00:12 | <TheMatrix3000> dude, i hated Zentyal, it wouldn't populate our intranet site and ticket system for SSO
| |
00:12 | <andygraybeal> oh and i use kvm... so is kvm not a hypervisor? i'm so confused.
| |
00:12 | <TheMatrix3000> i was pissed
| |
00:12 | leio has joined IRC (leio!~leio@gentoo/developer/leio) | |
00:12 | <ball> TheMatrix3000: Do Vmware have something that could achieve the fail-over that we're looking for?
| |
00:12 | <andygraybeal> hah what ticket system?
| |
00:12 | <ball> (glue to stick two servers together)?
| |
00:13 | <TheMatrix3000> lol, when you have 70 computers...eek
| |
00:13 | i am using OS Ticket right now
| |
00:13 | and about to implement OTRS
| |
00:13 | * ball is not havening tickets | |
00:13 | <andygraybeal> TheMatrix3000, i'm using RT
| |
00:13 | <TheMatrix3000> cause I need to start a database for Asset Management
| |
00:13 | by request of our CFO
| |
00:13 | and for PCI compliance it helps
| |
00:14 | <andygraybeal> does OTRS handle assets that aren't IT related?
| |
00:14 | <TheMatrix3000> i dont know
| |
00:14 | im just responsible for IT assets
| |
00:14 | <andygraybeal> do you have to deal with a payment system?
| |
00:14 | <TheMatrix3000> monitors computers servers
| |
00:14 | yes
| |
00:14 | its how people pay us
| |
00:14 | lol
| |
00:14 | <andygraybeal> what monitoring system do you use?
| |
00:14 | <TheMatrix3000> we meet PCI at the colo
| |
00:14 | i don't know the details
| |
00:14 | that was there before I was hired
| |
00:15 | I think we are PCI-4
| |
00:15 | if i remember correctly
| |
00:15 | <ball> Is PCI a HIPPA thing?
| |
00:15 | <andygraybeal> hippa is medical, pci is payment system
| |
00:15 | <TheMatrix3000> https://www.pcisecuritystandards.org/
| |
00:16 | * ball never heard of it, but then I rarely get paid. | |
00:16 | <andygraybeal> are you in the states?
| |
00:16 | <TheMatrix3000> if you sell something and make a lot of business and use or store customer information you need to meet a pci compliance
| |
00:16 | * ball nods | |
00:16 | <TheMatrix3000> i am yes
| |
00:16 | <ball> I am now, yes.
| |
00:16 | Ah, we don't have customers.
| |
00:17 | <TheMatrix3000> you know best buy right?
| |
00:17 | they need to meet PCI compliance
| |
00:17 | they are prolly PCI-1
| |
00:17 | Kroger also is another
| |
00:17 | there are many
| |
00:17 | oh I forgot my other title
| |
00:17 | im also the Security Analyst
| |
00:17 | lol
| |
00:17 | <ball> TheMatrix3000: I am aware of Best Buy.
| |
00:17 | <TheMatrix3000> handling network security here
| |
00:18 | <ball> We don't have much in the way of security
| |
00:18 | ...but then people wander in-and-out of the office all the time.
| |
00:18 | <TheMatrix3000> lol
| |
00:19 | for teh first time im implementing SSO to help stop people from using 123456 as a password
| |
00:19 | and using LDAP for authentication to most of our systems
| |
00:19 | including our LTSP servers
| |
00:19 | and NFS shares
| |
00:20 | * ball wouldn't know where to start with LDAP | |
00:20 | <andygraybeal> ball, me neither, that' why i am using zentyal
| |
00:20 | <Parker955> make it so people can't use "password" either
| |
00:20 | :p
| |
00:20 | <TheMatrix3000> lol
| |
00:20 | try using FusionDirectory
| |
00:21 | it is amazing
| |
00:21 | started by some developers from the GOSA project
| |
00:21 | it's my favorite thing in the world
| |
00:22 | they even have a script to install the ldifs for you
| |
00:22 | do a /join #fusiondirectory
| |
00:22 | they will help you get started
| |
00:22 | they also have a site with a wiki
| |
00:22 | i was working on some documentation for it
| |
00:24 | <mistik1> fusion directory?
| |
00:24 | <TheMatrix3000> yep
| |
00:25 | its a web interface management for openldap
| |
00:25 | <mistik1> I've not played with ldap in years
| |
00:25 | <TheMatrix3000> also can handle restricting ssh access
| |
00:25 | and all kinds of stuff
| |
00:25 | <mistik1> interesting
| |
00:25 | <TheMatrix3000> ah figured it out
| |
00:25 | <ball> Pity it has to have a Web interface.
| |
00:25 | <TheMatrix3000> i can do redundancy on LTSP with rsync
| |
00:25 | <ball> Why is it that everything these days wants to be a Web server?
| |
00:25 | <TheMatrix3000> no it doesn't have to have one
| |
00:26 | i actually have a server that only has LDAP on it
| |
00:26 | the Fusion Directory web interface is on my webserver
| |
00:26 | completely seperate peice of hardware
| |
00:26 | for good reason
| |
00:28 | <andygraybeal> TheMatrix3000, that sounds bad ass
| |
00:28 | TheMatrix3000, i wish i knew about it earlier
| |
00:28 | oh man i ewven love their logo, dandilion
| |
00:28 | omg, it's brand new
| |
00:29 | <mistik1> too bad its written in php
| |
00:29 | <andygraybeal> well i'll keep my eye on it.
| |
00:29 | <TheMatrix3000> lol
| |
00:29 | it's not really new
| |
00:29 | look at GOSA
| |
00:29 | * andygraybeal looks up gosa | |
00:29 | <TheMatrix3000> the developers forked it from GOSA this year because of how GOSA wouldn't produce much documentation
| |
00:30 | so a few developers left and took the code and promised to make it open and easier for developers to make addons etc
| |
00:31 | ione thing to keep in mind though
| |
00:31 | as you increase the amount of services within your organization teh complexity goes up
| |
00:32 | you must meep in mind that if your ldap server fails, users cannot login
| |
00:32 | if your nfs server fails people won't have their home directories
| |
00:32 | <andygraybeal> zentyal i have some replication
| |
00:32 | <TheMatrix3000> so plan for redundancy
| |
00:32 | <andygraybeal> er yea, redundancy
| |
00:32 | <TheMatrix3000> yes, it does
| |
00:32 | but it doesn't store all the information on each servers ldap
| |
00:32 | use an ldap browser and look and compare
| |
00:33 | there are differences
| |
00:33 | <andygraybeal> gah blasted.
| |
00:33 | <TheMatrix3000> hence why i stopped using zentyal
| |
00:33 | <mistik1> Cant you simply setup slaves of whichever ldap server it uses?
| |
00:33 | <TheMatrix3000> i couldn't point joomla to grab the mail attribute from ldap on teh master
| |
00:33 | yes
| |
00:33 | you can
| |
00:33 | that's what im doing now
| |
00:34 | <andygraybeal> with zentyal i have slaves setup
| |
00:34 | <TheMatrix3000> but zentyal isn't an identical slave
| |
00:34 | <andygraybeal> aah okay
| |
00:34 | <TheMatrix3000> hence why i got mad at it
| |
00:34 | <andygraybeal> yes.
| |
00:34 | <TheMatrix3000> cause it didn't copy my entire ldap database
| |
00:34 | <andygraybeal> yes, i don't know if i like it or not.. but i'm using it
| |
00:34 | <TheMatrix3000> it basically grabbed users and that was it
| |
00:35 | it's simple though
| |
00:35 | <andygraybeal> i don't know as much as you do, so i can't compare.
| |
00:35 | <TheMatrix3000> Zentyal is super simple, but my requirements surpassed the ability of Zentyal
| |
00:36 | <andygraybeal> aight, i think i'm out for the day..
| |
00:36 | <TheMatrix3000> later
| |
00:36 | <andygraybeal> yea, nice talking
| |
00:36 | <TheMatrix3000> it was
| |
00:40 | anyone here using rsync on ltsp?
| |
00:43 | MorningSon has joined IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com) | |
00:44 | leio has left IRC (leio!~leio@gentoo/developer/leio, Read error: Operation timed out) | |
00:50 | leio has joined IRC (leio!~leio@gentoo/developer/leio) | |
01:09 | nubae has joined IRC (nubae!~nubae@148.Red-2-138-240.dynamicIP.rima-tde.net) | |
01:18 | ball has left IRC (ball!~ball@client-208-124-120-99.consolidated.net, Quit: leaving) | |
01:30 | abeehc has joined IRC (abeehc!~bob@2001:1938:1a3:0:216:41ff:fe2c:9b3c) | |
01:30 | Lns has joined IRC (Lns!~Lns@76-191-128-251.dsl.dynamic.sonic.net) | |
01:30 | Lns has joined IRC (Lns!~Lns@pdpc/supporter/professional/lns) | |
01:36 | Lns has left IRC (Lns!~Lns@pdpc/supporter/professional/lns) | |
01:42 | TheMatrix3000 has left IRC (TheMatrix3000!~TheMatrix@rrcs-70-61-255-226.central.biz.rr.com) | |
01:48 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
01:49 | nubae has left IRC (nubae!~nubae@148.Red-2-138-240.dynamicIP.rima-tde.net, Changing host) | |
01:49 | nubae has joined IRC (nubae!~nubae@opensuse/member/nubae) | |
01:50 | <alkisg> nubae: hey man, how are you?
| |
01:52 | <nubae> yeah not too bad
| |
01:52 | u
| |
01:52 | just got flamed out of a channel
| |
01:53 | am surprised... that hasn't happened to me ever I think
| |
01:53 | <alkisg> Everything's fine here :) nubae.com has been down for a while...
| |
01:53 | <nubae> and to believe it was because I wanted to help improve their distro
| |
01:53 | <alkisg> Haha
| |
01:53 | which one? opensuse?
| |
01:53 | <nubae> really
| |
01:54 | ltsplogbot is up though or is that someone elses
| |
01:54 | <alkisg> No idea... we're trying to get the logs to irclogs.ltsp.org, in the official domain
| |
01:54 | <nubae> hmmmm so just site
| |
01:54 | <alkisg> jammcq will do that tomorrow, for now the logs are there: http://www.middelkoop.cc/~ltspbot/
| |
01:55 | <nubae> let me see it was working a week or so a go
| |
01:55 | <alkisg> But we're missing the last 4 months, maybe you have them on your server?
| |
01:55 | <nubae> weird
| |
01:55 | <alkisg> He have from 2006 to 2011/03/07, if you have from March to now you'd fill the missing bits :)
| |
01:58 | <nubae> wow something bad must happened to httpd
| |
01:58 | eveerything else is fine
| |
02:02 | back
| |
02:02 | hmmmmm
| |
02:02 | apache just blew
| |
02:03 | no explanation
| |
02:03 | well take a look its up now
| |
02:03 | last 4 months should be there
| |
02:03 | wow, truly weird
| |
02:04 | u could have emailed :p
| |
02:04 | <alkisg> I thought you'd have seen your whole site's down :D
| |
02:04 | <nubae> actuallly i should have the system email me
| |
02:04 | was away
| |
02:05 | <alkisg> Ah nice, all the logs are there. Do you mind if we host them in irclogs.ltsp.org? He have older years too, sbalneav sent them, since 2006
| |
02:05 | But we're missing the months from march to june, if you could send those...
| |
02:05 | <nubae> 2 weeks go by, u dont always notice if everything else is going
| |
02:06 | no problem, but u do the leg work
| |
02:06 | <alkisg> Sure, just the raw log files would be fine
| |
02:06 | <nubae> u want the bot 2?
| |
02:06 | <alkisg> No we have that up and running
| |
02:06 | <nubae> ok
| |
02:06 | well
| |
02:06 | <alkisg> http://www.middelkoop.cc/~ltspbot/ for a demo
| |
02:06 | It does both factoids + logs
| |
02:07 | <nubae> believe me when i tell u its a mess in there.... several years of ltsp logs
| |
02:07 | day or even hours by hours
| |
02:07 | <alkisg> No no, not all of them, just the last 4 months
| |
02:07 | <nubae> let me get it ready for ya next couple days
| |
02:08 | i know... then u'll have to do some bash or perl magic
| |
02:08 | <alkisg> Also, *if* you want, you could have a redirect from nubae.com/logs to irclogs.ltsp.org, for google to pick up their new location
| |
02:08 | <nubae> yeah lets do that
| |
02:08 | <alkisg> Right, I already did that with sbalneav's logs, the format wasn't correct
| |
02:09 | <nubae> give me a day, its late here
| |
02:09 | cant think
| |
02:09 | <alkisg> He had names like 22-Sun-2011.log, and unfortunately that contained 2 or even 3 days from the same year
| |
02:09 | <nubae> straight
| |
02:09 | need
| |
02:09 | <alkisg> I had to separate them into 2-3 files
| |
02:09 | <nubae> sleep
| |
02:09 | <alkisg> No problem, don't worry.
| |
02:09 | <nubae> ok talk later, thanks for noticing the site downage
| |
02:18 | benonsoftware has joined IRC (benonsoftware!~benonsoft@unaffiliated/benonsoftware) | |
02:18 | <benonsoftware> !ops
| |
02:18 | <ltsp> benonsoftware: I do not know about 'ops', but I do know about these similar topics: 'o'
| |
02:19 | benonsoftware has left IRC (benonsoftware!~benonsoft@unaffiliated/benonsoftware) | |
02:19 | testing_ has joined IRC (testing_!2eb05ade@gateway/web/freenode/ip.46.176.90.222) | |
02:21 | <alkisg> !learn ops as To find out who has op in an irc channel, the command is: /msg chanserv access #channel list
| |
02:21 | <ltsp> alkisg: The operation succeeded.
| |
02:23 | testing_ has left IRC (testing_!2eb05ade@gateway/web/freenode/ip.46.176.90.222, Client Quit) | |
02:40 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.) | |
03:23 | MorningSon has left IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com, Quit: WeeChat 0.3.0) | |
03:25 | nubae has left IRC (nubae!~nubae@opensuse/member/nubae, Ping timeout: 255 seconds) | |
03:38 | nubae has joined IRC (nubae!~nubae@247.Red-79-159-28.staticIP.rima-tde.net) | |
03:39 | MorningSon has joined IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com) | |
03:40 | MorningSon has left IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com, Client Quit) | |
03:42 | MorningSon has joined IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com) | |
04:41 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
04:50 | MorningSon has left IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com, Ping timeout: 264 seconds) | |
05:08 | ball has joined IRC (ball!~shari@c-50-129-25-121.hsd1.il.comcast.net) | |
05:25 | mistik1 has left IRC (mistik1!mistik1@unaffiliated/mistik1, Ping timeout: 264 seconds) | |
05:25 | mistik1 has joined IRC (mistik1!mistik1@unaffiliated/mistik1) | |
05:47 | LoveStorm has left IRC (LoveStorm!Stoka@217.18.70.231, Ping timeout: 276 seconds) | |
06:06 | Parker955 is now known as Parker955_Away | |
06:48 | ball has left IRC (ball!~shari@c-50-129-25-121.hsd1.il.comcast.net, Quit: to sleep, perchance to code...) | |
06:49 | LoveStor- has joined IRC (LoveStor-!Storm@217.18.70.231) | |
08:49 | mistik1 has left IRC (mistik1!mistik1@unaffiliated/mistik1, Ping timeout: 252 seconds) | |
08:49 | mistik1 has joined IRC (mistik1!mistik1@unaffiliated/mistik1) | |
09:29 | dobber has joined IRC (dobber!~dobber@213.169.45.222) | |
10:31 | rickogden has left IRC (rickogden!~rickogden@146-87-65-81.salford.ac.uk, Quit: rickogden) | |
11:35 | jammcq has joined IRC (jammcq!~jam@70-91-230-209-BusName-Michigan.hfc.comcastbusiness.net) | |
11:35 | <jammcq> good morning friends
| |
11:35 | Hyperbyte: hey, nice job on the IRC logs
| |
11:36 | <alkisg> Hi jammcq :)
| |
11:36 | Let's change the topic and make it official :P
| |
11:36 | <jammcq> yeah, I agree
| |
11:36 | <alkisg> Btw shortening the docs url to "docs.ltsp.org", even if it's just a redirect, would be nice too
| |
11:37 | <jammcq> umm, I dunno where to set that
| |
11:37 | the docs redirect
| |
11:38 | <alkisg> First, type: /topic LTSP-5 is the current version that you should be using. Check out Ubuntu, Debian and Fedora for awesome integration. Gentoo is getting very close and openSUSE has kiwi-ltsp. IRC logs at: http://irclogs.ltsp.org, LTSP Docs: http://docs.ltsp.org
| |
11:38 | (you have the rights to set channel topic)
| |
11:38 | Then, create another cname for docs.ltsp.org and point them to Hyperbyte's server again,
| |
11:38 | <jammcq> ah, that could work
| |
11:38 | <alkisg> And Hyperbyte will create a small page with an http redirect in his server, which will redirect to the sf wiki
| |
11:39 | <jammcq> yeah, /topic I can handle
| |
11:40 | So I'll set a CNAME for docs.ltsp.org and point it to ltspdocs.middelkoop.cc
| |
11:41 | does that sound about right?
| |
11:41 | <alkisg> Now, Hyperbyte's interested in making much more out of the ltsp.org site, if he's allowed to - but I'll let you 2 talk about those yourselves, I was mainly interested about the irc logs :)
| |
11:41 | Just middelkoop.cc will do
| |
11:41 | No need for "ltspdocs" in front of it
| |
11:41 | <jammcq> but middelkoop.cc doesn't resolve to an IP address, does it?
| |
11:41 | <alkisg> It does, it has an A record
| |
11:41 | <jammcq> oh, it does
| |
11:42 | it only doesn't if I type 'middlekoop.cc' :)
| |
11:42 | <alkisg> Hehe :D
| |
11:42 | <jammcq> should I change the irclogs cname too?
| |
11:42 | <alkisg> Yup
| |
11:50 | ChanServ sets mode: +o jammcq | |
11:50 | jammcq changes topic to "LTSP-5 is the current version that you should be using. Check out Ubuntu, Debian and Fedora for awesome integration. Gentoo is getting very close and Opensuse has kiwi-ltsp. IRC logs at: http://irclogs.ltsp.org, LTSP Docs: http://docs.ltsp.org" | |
11:52 | <jammcq> Hyperbyte will need to configure something so that docs.ltsp.org works
| |
11:52 | <alkisg> Yeah he'll make a vhost and a php redirect there, np
| |
11:52 | Thanks jammcq, you rock :)
| |
11:52 | <jammcq> heh, no prob
| |
11:53 | <alkisg> If you can hang around a bit more, I think Hyperbyte wanted to talk to you about adding more features to ltsp.org
| |
11:53 | <jammcq> alkisg: we may be changing the dates of BTS. It seems that UDS has changed their date, pushing it back a week
| |
11:53 | so to make it easier for our international travelers, we'll possibly push BTS back a week too
| |
11:54 | <alkisg> I think I'll only be able to come if I get a UDS sponsorship, so I prefer if BTS is right next/before UDS. So no problem from me
| |
11:54 | <jammcq> I'll be around all morning, but I may not be focusing on the channel, so if he wants to talk to me, it may take several minutes for me to see it
| |
11:54 | <alkisg> OK
| |
11:55 | <Hyperbyte> Hey jammcq :)
| |
11:55 | <jammcq> hey, there he is
| |
11:55 | nice job on the irclogs
| |
11:55 | <alkisg> Yup, the official ltsp.org web designer :D
| |
11:55 | <Hyperbyte> Thanks :)
| |
11:56 | Can I /msg you for a bit?
| |
11:56 | <jammcq> sure
| |
11:56 | ChanServ sets mode: -o jammcq | |
12:24 | LoveStor- has left IRC (LoveStor-!Storm@217.18.70.231, Ping timeout: 250 seconds) | |
12:43 | garymc has joined IRC (garymc!~chatzilla@host81-139-157-61.in-addr.btopenworld.com) | |
12:51 | LoveStor- has joined IRC (LoveStor-!Stoka@217.18.70.231) | |
12:55 | rickogden has joined IRC (rickogden!~rickogden@146-87-65-81.salford.ac.uk) | |
13:02 | garymc has left IRC (garymc!~chatzilla@host81-139-157-61.in-addr.btopenworld.com, Quit: ChatZilla 0.9.87 [Firefox 5.0.1/20110707182747]) | |
13:05 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.) | |
13:10 | MorningSon has joined IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com) | |
13:52 | MorningSon has left IRC (MorningSon!~MorningSo@cpe-70-117-27-48.satx.res.rr.com, Quit: WeeChat 0.3.0) | |
14:01 | rickogden has left IRC (rickogden!~rickogden@146-87-65-81.salford.ac.uk, Quit: rickogden) | |
14:10 | Hyperbyte has left IRC (Hyperbyte!jan@middelkoop.cc, Ping timeout: 252 seconds) | |
14:14 | jammcq has left IRC (jammcq!~jam@70-91-230-209-BusName-Michigan.hfc.comcastbusiness.net, Quit: leaving) | |
14:25 | garymc has joined IRC (garymc!~chatzilla@host81-139-157-61.in-addr.btopenworld.com) | |
14:30 | dead_inside has joined IRC (dead_inside!~dead_insi@76.75.3.174) | |
14:33 | garymc has left IRC (garymc!~chatzilla@host81-139-157-61.in-addr.btopenworld.com, Quit: ChatZilla 0.9.87 [Firefox 5.0.1/20110707182747]) | |
14:37 | <dead_inside> wow the topic has changed
| |
14:39 | its weird though that docs.ltsp.org does not go to ltsp documentation
| |
14:47 | ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, Excess Flood) | |
14:48 | ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de) | |
14:59 | Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc) | |
15:02 | ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, Excess Flood) | |
15:02 | ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de) | |
15:06 | mikkel has joined IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk) | |
15:08 | <Hyperbyte> Quite offtopic, but if anyone is wondering what it looks like when a 294 meter high radio broadcast tower collapses in the Netherlands due to fire, this is it:
| |
15:08 | http://www.youtube.com/watch?v=oLYdNnA3XUU
| |
15:17 | Gadi has joined IRC (Gadi!~romm@ool-18bbe47a.static.optonline.net) | |
15:17 | <knipwim> wow, totally missed that one!
| |
15:19 | staffencasa has joined IRC (staffencasa!~staffenca@128-193-147-240.oregonstate.edu) | |
15:22 | shawnp0wers has joined IRC (shawnp0wers!~Adium@linuxjournal/staff/shawnp0wers) | |
15:49 | dgroos has joined IRC (dgroos!~dgroos@63.225.132.145) | |
16:16 | layus has left IRC (layus!c1be900b@gateway/web/freenode/ip.193.190.144.11, Quit: Page closed) | |
16:22 | dobber has left IRC (dobber!~dobber@213.169.45.222, Remote host closed the connection) | |
16:41 | nivardus has joined IRC (nivardus!~bgoble@unaffiliated/nivardus) | |
16:47 | ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, Ping timeout: 240 seconds) | |
16:48 | ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de) | |
16:49 | Parker955_Away is now known as Parker955 | |
17:05 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
17:06 | <alkisg> Hyperbyte: reminder to create an apache vhost and a simple php script that does an http redirect from http://docs.ltsp.org to http://sourceforge.net/apps/mediawiki/ltsp/index.php?title=Main_Page
| |
17:25 | drdata has joined IRC (drdata!~drdata@tw2.udallas.edu) | |
17:36 | drdata has left IRC (drdata!~drdata@tw2.udallas.edu, Quit: drdata) | |
17:36 | drdata has joined IRC (drdata!~drdata@tw2.udallas.edu) | |
17:40 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Remote host closed the connection) | |
17:41 | ogra_ has left IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de, Excess Flood) | |
17:42 | ogra_ has joined IRC (ogra_!~ogra@p5098ed03.dip0.t-ipconnect.de) | |
17:52 | staffencasa has left IRC (staffencasa!~staffenca@128-193-147-240.oregonstate.edu, Read error: Connection reset by peer) | |
17:57 | Trixboxer has joined IRC (Trixboxer!~Trixboxer@office.supportdepartment.net) | |
17:57 | <Hyperbyte> alkisg, done. Did it via RewriteRule directly from apache.
| |
18:31 | roasted has joined IRC (roasted!~jason@206.82.22.190) | |
18:32 | <roasted> Hi. If I have 2 nics in my server and LTSP is running dhcp, if I plug in both ports without bonding will it somehow balance traffic on its own?
| |
18:32 | or would it be useless?
| |
18:32 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Remote host closed the connection) | |
18:32 | komunista has joined IRC (komunista!~slavko@adsl-195-098-011-061.dynamic.nextra.sk) | |
18:34 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
18:38 | <Hyperbyte> roasted, without bonding the nics will have two different IP addresses, won't they?
| |
18:52 | <roasted> Hyperbyte, I was thinking of putting each NIC IP to be one apart, like 10.52.11.1 and 10.52.11.2
| |
18:52 | Hyperbyte, and both of those IP's would be within the same scope, with 11.1 handing out the IPs
| |
18:53 | I just wonder if 11.2 would handle traffic or if 11.2 would be ignored and 11.1 take the full brunt of *everything
| |
18:53 | *
| |
19:16 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
19:21 | roasted has left IRC (roasted!~jason@206.82.22.190, Ping timeout: 255 seconds) | |
19:24 | * Hyperbyte shrugs | |
19:25 | nubae has left IRC (nubae!~nubae@247.Red-79-159-28.staticIP.rima-tde.net, Quit: Leaving) | |
19:37 | <alkisg> Hyperbyte: how did you say you got the guest login working? It was you, wasn't it?
| |
19:38 | <Hyperbyte> Guest login?
| |
19:38 | Oh, you mean the mandatory profile thing?
| |
19:38 | Or temporary profile?
| |
19:39 | Because guest login is easy, via LDM_GUESLOGIN=True and LDM_USERNAME and LDM_PASSWORD
| |
19:39 | But I think you know that already
| |
19:40 | <alkisg> The temporary profile thing
| |
19:40 | I think LDM_GUESTLOGIN is a bit of misnomer in ltsp
| |
19:41 | <Hyperbyte> Hehe
| |
19:41 | Well, I ended up creating one guest account per client, as you suggested
| |
19:41 | And configured lts.conf with the correct per-client account details
| |
19:42 | All the accounts are configured to have their home in /misc/<username>/ although you could do it with /home/ as well, I just chose to seperate it
| |
19:42 | <alkisg> Good idea
| |
19:42 | <Hyperbyte> Then I configured autofs on the /misc/<usernames>/ folder
| |
19:42 | File /etc/auto.misc, gast1 -fstype=tmpfs,size=50M,rw :tmpfs
| |
19:42 | Whenever the home directory for the guest is accessed, a new tmpfs is mounted there...
| |
19:43 | <alkisg> 50M? Isn't that too low? I thought firefox cache is 50M...
| |
19:43 | <Hyperbyte> When I booted Firefox it was 35M
| |
19:43 | I gave it 15M room
| |
19:43 | Remember there's not really gonna be a cache, not between sessions anyways.
| |
19:43 | <alkisg> I think while surfing firefox is keeping cache, and the default cache size is 50 M
| |
19:43 | So if a client surfs for e.g. half an hour, he surely will exceed that
| |
19:44 | <Hyperbyte> That's a possibility yeah
| |
19:44 | Well it could be more. :P
| |
19:44 | It's a number...
| |
19:44 | <alkisg> That's why I was thinking of using a real home instead of a tmpfs...
| |
19:44 | <Hyperbyte> Yeah, but then you need some way to wipe it.
| |
19:44 | <alkisg> Also a tmpfs would limit the number of user accounts
| |
19:44 | <Hyperbyte> tmpfs does that automatically.
| |
19:44 | <alkisg> Wiping at login/logout, preferably via pam
| |
19:44 | <Hyperbyte> That's why I chose tmpfs.
| |
19:45 | <alkisg> Personally i'd prefer on login, so that I would have the user data stored on the server, in case something malicious was reported
| |
19:45 | So I wouldn't even wipe on logout
| |
19:46 | <Hyperbyte> I don't need their home dirs to find out what they did (proxy, network monitoring)
| |
19:46 | <alkisg> Any how-to for autofs on ubuntu?
| |
19:46 | <Hyperbyte> It's easy
| |
19:46 | Surprisingly easy
| |
19:46 | <alkisg> Will this do? https://help.ubuntu.com/community/Autofs
| |
19:46 | <Hyperbyte> apt-get install autofs (duh)
| |
19:47 | Make autofs start on boot
| |
19:47 | Edit /etc/auto.master... there you can specify a directory, a configuration and a timeout for the mount. E.g: /misc /etc/auto.misc --timeout=60
| |
19:47 | This reads /etc/auto.misc for mountpoints in the /misc dir
| |
19:48 | Then in /etc/auto.misc you can put gast1 -fstype=tmpfs,size=100M,rw :tmpfs
| |
19:48 | Where 'gast1' is the directory in /misc and :tmpfs is the mountpoint
| |
19:48 | Sorry, not the mountpoint, the block device
| |
19:48 | Or partition
| |
19:48 | Or whatever you call it.
| |
19:48 | If you then cd /misc/gast1 it mounts tmpfs on there.
| |
19:49 | <alkisg> Wait, so gast1 is relative to the user home folder?
| |
19:49 | Ah, it mounts on access?
| |
19:49 | <Hyperbyte> Yeah
| |
19:49 | autofs = automatically mount filesystems
| |
19:49 | <alkisg> And when does it unmount it? Automatically when file handles are closed?
| |
19:49 | <Hyperbyte> If you're not going the tmpfs way, you don't need it
| |
19:50 | 21:47 <Hyperbyte> Edit /etc/auto.master... there you can specify a directory, a configuration and a timeout for the mount. E.g: /misc /etc/auto.misc --timeout=60
| |
19:50 | :)
| |
19:50 | <alkisg> So timeout is for after all file handles are closed... neat
| |
19:50 | <Hyperbyte> I chose mounting tmpfs using autofs, so I wouldn't ever have to worry about guest files appearing on my filesystem
| |
19:51 | Because wherever you're gonna put the guest home dir, they need write access for .X* files
| |
19:51 | Which means they need write access to their entire home dir, which means they can do all kinds of funky crap on your server. tmpfs and autofs gave me a nice way of limiting storage, wiping it and making sure they couldn't touch the harddisk.
| |
19:52 | It does use some ram of course, but only when the clients are logged in.
| |
19:53 | <alkisg> It's a good idea, I just don't think it would suit anyone. E.g. if you want to give 500 MB tmpfs to 20 users, you're gonna need lots of RAM
| |
19:53 | Also, in some cases keeping some directories would be handy, some teachers have asked for that
| |
19:54 | <Hyperbyte> It suits me, because I only have 1 or 2 guests logged in max, at very sparse occassions.
| |
19:54 | <alkisg> And, you don't prohibit them from using the disk anyway, since they can write to /tmp, right?
| |
19:54 | <Hyperbyte> alkisg, that is true.
| |
19:55 | But for me it's for the students or volunteers who sometimes visit our office to do some work.
| |
19:55 | It's only 1 or 2 simultaneous max, and I don't want to see any trace of them or their files whatsoever. So tmpfs suits me best.
| |
19:55 | * alkisg is intrigued by the automatic mounting of autofs though... I bet I'll find other use cases for this in the future | |
19:56 | <Hyperbyte> Heh... I once did it for enabling employees to upload big files to our website
| |
19:56 | Like brochures, which they send to a printer (as in, printshop)
| |
19:56 | They can't mail it, so it needs to upload.
| |
19:57 | <alkisg> Btw, is the gdm guest session Ubuntu-specific is it there on other distros too?
| |
19:57 | <Hyperbyte> I mounted some public dir on the website via NFS on the local server, via autofs.
| |
19:57 | <alkisg> If it's not Ubuntu specific, we might be able to have ltsp use that for guest sessions
| |
19:57 | /usr/share/gdm/guest-session/guest-session-launch
| |
19:57 | <Hyperbyte> So they click a folder to upload to the webserver, the server mounts NFS, and then presents the freshly NFS mounted folder. I always liked the autofs concept. :)
| |
19:58 | <alkisg> Yeah it sound very handy
| |
19:58 | <Hyperbyte> Haven't tried guest sessions. Not sure if it exists in Fedora.
| |
19:58 | Seems like an Ubuntu thing
| |
19:59 | There's a third party Fedora hosted project that does it, according to Google https://fedorahosted.org/guest-account/
| |
19:59 | <alkisg> Step 1. "Apply gdm-guestlogin.patch to GDM"
| |
20:00 | Not for mass use yet, it seams
| |
20:00 | <Hyperbyte> No
| |
20:00 | But I think it's very likely LTSP and Fedora will part ways anyways.
| |
20:00 | How does Ubuntu's guest account work?
| |
20:01 | It creates a temporary account I guess?
| |
20:01 | <alkisg> I don't know all the bits. It creates a temporary account, spawns a second X server, and logs in there
| |
20:01 | And the guest can't access /home/otherusers
| |
20:02 | <Hyperbyte> I don't think anyone can access another users' home dir, right?
| |
20:02 | <alkisg> It's a little unstable too, especially now with KMS, 2 X servers frequently crash
| |
20:02 | By default, all have read access
| |
20:02 | (in debian/ubuntu, don't know about other distros)
| |
20:02 | <Hyperbyte> Ubuntu gives users read access to everyone's home dir by default? :O
| |
20:03 | That's..... wow.
| |
20:03 | <alkisg> Yeah, but of course not for personal folders
| |
20:03 | That was the default for a long time, afaik
| |
20:03 | That's how finger etc worked
| |
20:03 | <Hyperbyte> Fedora doesn't, never has.
| |
20:03 | <alkisg> .plan and other ancient unix staff
| |
20:04 | E.g. up until the last version of gdm, it looked in $HOME/face.png for the user picture to display on the login screen
| |
20:04 | <Hyperbyte> mhm
| |
20:04 | Well Fedora's user dir default is drwx------
| |
20:05 | <alkisg> Yeah I just tried on the bot server: umask => 0002 on fedora, 0022 on ubuntu
| |
20:06 | <Hyperbyte> All home dirs and user accounts are created on my Fedora NIS/NFS server... so I'd no idea.
| |
20:06 | But that's pretty different.
| |
20:16 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Quit: Leaving.) | |
20:45 | komunista has left IRC (komunista!~slavko@adsl-195-098-011-061.dynamic.nextra.sk, Quit: Leaving.) | |
21:28 | garymc has joined IRC (garymc!~chatzilla@host86-176-88-19.range86-176.btcentralplus.com) | |
21:58 | drdata has left IRC (drdata!~drdata@tw2.udallas.edu, Ping timeout: 258 seconds) | |
21:59 | Gadi has left IRC (Gadi!~romm@ool-18bbe47a.static.optonline.net) | |
22:08 | abeehc has left IRC (abeehc!~bob@2001:1938:1a3:0:216:41ff:fe2c:9b3c, Ping timeout: 258 seconds) | |
22:09 | abeehc has joined IRC (abeehc!~bob@d50-98-57-46.bchsia.telus.net) | |
22:15 | mikkel has left IRC (mikkel!~mikkel@80-71-132-15.u.parknet.dk, Quit: Leaving) | |
22:28 | Parker955 is now known as Parker955_Away | |
22:31 | Parker955_Away is now known as Parker955 | |
22:57 | dead_inside has left IRC (dead_inside!~dead_insi@76.75.3.174, Quit: Leaving...) | |
22:58 | garymc has left IRC (garymc!~chatzilla@host86-176-88-19.range86-176.btcentralplus.com, Quit: ChatZilla 0.9.87 [Firefox 5.0.1/20110707182747]) | |
23:06 | Trixboxer has left IRC (Trixboxer!~Trixboxer@office.supportdepartment.net, Quit: "Achievement is not the end, its the beginning of new journey !!!") | |
23:06 | mistik1 has left IRC (mistik1!mistik1@unaffiliated/mistik1, Ping timeout: 240 seconds) | |
23:06 | mistik1 has joined IRC (mistik1!mistik1@unaffiliated/mistik1) | |