00:20 | ogra_ has left IRC (ogra_!~ogra_@p5098ed03.dip0.t-ipconnect.de, Ping timeout: 260 seconds) | |
00:20 | ogra_ has joined IRC (ogra_!~ogra_@p5098ed03.dip0.t-ipconnect.de) | |
00:42 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Ping timeout: 258 seconds) | |
01:42 | <sbalneav> vagrantc, alkisg: configdir= command line option added.
| |
01:43 | Check latest push
| |
02:02 | * vagrantc checks | |
02:05 | <vagrantc> sbalneav: compiles fine! :)
| |
02:06 | <sbalneav> good
| |
02:06 | And yeah, libnss-external needs to be linked with the -lutil library
| |
02:06 | lemme check why...
| |
02:08 | No, it's not libnss-extrafiles that needs -lutil, it's libpam-external
| |
02:08 | <vagrantc> sbalneav: not that it's a problem, but ./src/util.c: GPL (v2 or later)
| |
02:08 | <sbalneav> nss-external doesn't rely on anything else.
| |
02:08 | ok, lemme fix it
| |
02:08 | <vagrantc> sbalneav: i think it is itself a shared library
| |
02:09 | <sbalneav> yes, same as pam-external
| |
02:09 | <vagrantc> (the or later) gives plenty of flexibility
| |
02:09 | <sbalneav> No, I'll fix it so it's the same as the others.
| |
02:09 | <vagrantc> for some reason, pam-external doesn't trigger the security warnings
| |
02:09 | maybe it's got an exclusion for pam modules
| |
02:09 | <sbalneav> consistency is the hobgoblin of little minds :D
| |
02:12 | vagrantc: libnss-external updated
| |
02:16 | <vagrantc> sbalneav: these are the lintian issues it mentions: https://paste.debian.net/713342/
| |
02:16 | dunno if they make more sense to you... i think it's a packagers job
| |
02:18 | sbalneav: but those packages are nearly ready for me to test ... then i'll just need the various scripts
| |
02:21 | <sbalneav> Hm, not sure I know how to fix those either. :(
| |
02:21 | If you can poke someone you know, and they tell you I need to do something, lemme know, and I can add it.
| |
02:22 | I can't provide an option for a "configdir=" like I can for ...
| |
02:23 | ok, from now on, we're going to refer to libpam-external as lpe and libnss-external as lne :D
| |
02:23 | So I can't provide a configdir= option for lne like I can for lpe
| |
02:29 | <vagrantc> so that's pretty much stuck with the hard-coded directory?
| |
02:29 | <sbalneav> Yeah, you can either modify a config file, or change some links in a dir
| |
02:29 | 6 of one, 1/2 dozen of the other
| |
02:30 | Nothing's cast in stone, if we come up with something better before freeze...
| |
02:30 | ;)
| |
02:31 | <vagrantc> not sure why, but i think a one-liner configuration file might be a nice option
| |
02:32 | /etc/nss-external.conf and/or /etc/nss-external/nss-external.conf ... something like that
| |
02:32 | <sbalneav> ok, well, I can look at that tomorrow
| |
02:32 | <vagrantc> maybe alkisg has *opinions*
| |
02:32 | <sbalneav> I assume all it will contain is *just* a path
| |
02:33 | i.e. contents of /etc/nss-externel.conf is "/somepath"
| |
02:33 | <vagrantc> sbalneav: right ... or confdif=/path/to/nss-external/dir
| |
02:33 | <sbalneav> Then I gotta write a parser :D
| |
02:33 | <vagrantc> just in case you ever find a reason to use something else
| |
02:33 | fair enough
| |
02:34 | <sbalneav> We'll start with just the path :D
| |
02:34 | If we need more options, I'll write the parser later :D
| |
02:34 | <vagrantc> early enough that breaking compatibility won't hurt anyone
| |
02:35 | sbalneav: so, i get the impression this is together enough for me to start testing this... ? :)
| |
02:37 | <sbalneav> Yes.
| |
02:38 | you can easily test lne
| |
02:38 | grab that nssexternal-multifile script
| |
02:39 | ln -s /path/to/multifile /etc/nss-external/passwd
| |
02:39 | ln -s /path/to/multifile /etc/nss-external/group
| |
02:39 | mkdir /var/lib/nss-multifile/passwd
| |
02:39 | mkdir -p /var/lib/nss-multifile/passwd (sorry)
| |
02:39 | mkdir -p /var/lib/nss-multifile/group
| |
02:40 | Then, just drop any number of passwd(5) or group(5) formatted files in the var/lib dirs
| |
02:40 | so:
| |
02:40 | goofybutt:x:6666:6666:A goofy user:/home/goofybutt:/bin/bash
| |
02:40 | put that in /var/lib/nss-multifile/passwd/goofybutt
| |
02:41 | (name doesn't matter)
| |
02:41 | getent passwd goofybutt
| |
02:41 | et voila
| |
03:01 | <vagrantc> i have to configure /etc/nsswitch.conf, too
| |
03:05 | <sbalneav> ah, right
| |
03:05 | put "external" at the end after compat
| |
03:05 | <vagrantc> but that's just adding "external"
| |
03:05 | right
| |
03:05 | <sbalneav> Did it work?
| |
03:05 | <vagrantc> yup!
| |
03:06 | <sbalneav> \o/
| |
03:08 | <vagrantc> so libpam-external is a bit more involved
| |
03:08 | <sbalneav> little
| |
03:08 | :)
| |
03:08 | And I'm about ready for bed :D
| |
03:09 | <vagrantc> but only slightly more complicated than libpam-sshauth, no?
| |
03:09 | <sbalneav> Got time tomorrow?
| |
03:09 | <vagrantc> not sure, but hopefully :)
| |
03:09 | <sbalneav> ok I'll be on all day
| |
03:09 | I'll write up a testing doc first thing when I get in in the morning.
| |
04:48 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
04:50 | rac has joined IRC (rac!71148af6@gateway/web/freenode/ip.113.20.138.246) | |
04:52 | <rac> i try configurastion LTSP Thin Client on ubuntu 16.04lts, but on ltsp client booting error TFTP
| |
04:52 | can help me ?
| |
04:59 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
05:04 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Ping timeout: 258 seconds) | |
05:33 | kjackal has joined IRC (kjackal!~quassel@athedsl-4547229.home.otenet.gr) | |
06:04 | <quinox> what error precisely?
| |
06:45 | kjackal has left IRC (kjackal!~quassel@athedsl-4547229.home.otenet.gr, Ping timeout: 260 seconds) | |
07:02 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
07:08 | kjackal has joined IRC (kjackal!~quassel@onopfy.static.otenet.gr) | |
07:55 | mikkel has joined IRC (mikkel!~mikkel@mail.dlvs.dk) | |
08:08 | rac has left IRC (rac!71148af6@gateway/web/freenode/ip.113.20.138.246, Quit: Page closed) | |
08:34 | railr has joined IRC (railr!29a246ea@gateway/web/freenode/ip.41.162.70.234) | |
08:34 | <railr> hi guys
| |
08:35 | I'd like to ask how I can put make my terminals use 16bit colour and lower resolution on an ubuntu server?
| |
08:36 | <alkisg> !lts.conf
| |
08:36 | <ltsp> lts.conf: (#1) http://manpages.ubuntu.com/lts.conf, or (#2) lts.conf manpage is available in the ltsp-docs package
| |
08:36 | <alkisg> railr: the manpage is there, but by default the color depth *is* 16 bit for thin clients
| |
08:37 | <railr> okay thankyou alkisg :)
| |
08:38 | <alkisg> The directives are X_COLOR_DEPTH=16, or X_SMART_COLOR_DEPTH=False
| |
08:39 | But you don't need them as 16 bit is the default in Ubuntu
| |
08:39 | For lower resolution, you need XRANDR_MODE_0="1024x768"
| |
08:43 | <railr> okay, I'm adding that to /lib/boot/tftpboot/ltsp/i386/lts.conf
| |
08:43 | is that correct?
| |
08:44 | <alkisg> It's /var/lib/tftpboot, not /lib/boot
| |
08:44 | Which ubuntu version are you using?
| |
08:44 | <railr> sorry, yes made a mistake
| |
08:44 | <alkisg> And which desktop environment
| |
08:44 | <railr> ubuntu server 16.04
| |
08:44 | well that's what I'm deciding on
| |
08:44 | <alkisg> What are your client specs, cpu/ram?
| |
08:45 | <railr> let me get those for you
| |
08:46 | we're using a system 3650 m5 as the server and we're running about 4 virtual servers.
| |
08:46 | off of it
| |
08:47 | <alkisg> !learn setup as Please describe your setup so that we can propose better solutions for you. Server and client CPU (exact model) and RAM, how many clients, gigabit switch or not, desired desktop environment etc.
| |
08:47 | <ltsp> The operation succeeded.
| |
08:48 | <alkisg> So if you have this cpu, it's a really good server: http://www.cpubenchmark.net/cpu.php?cpu=Intel+Xeon+E5-2640+%40+2.50GHz
| |
08:48 | <railr> yes the server is very good. Let me get the client specs for you
| |
09:02 | Softeisbieger has joined IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de) | |
09:15 | <railr> I'm going to change some config options in lts.conf and let you know how it goes.
| |
09:16 | right now the thin client spec is pretty average, 2gigs ram, cpu is a n2808 - 2 cores 1.58ghz each
| |
09:18 | <alkisg> http://www.cpubenchmark.net/cpu.php?cpu=Intel+Celeron+N2808+%40+1.58GHz
| |
09:19 | With 983 score, it's best to use those as ltsp fat clients, not thin clients
| |
09:19 | I suggest trying this how-to:
| |
09:19 | !ltsp-pnp | echo railr:
| |
09:19 | <ltsp> railr: ltsp-pnp: ltsp-pnp is an alternative (upstream) method to maintain LTSP installations for thin and fat clients that doesn't involve chroots: https://help.ubuntu.com/community/UbuntuLTSP/ltsp-pnp
| |
09:53 | <railr> thanks alkisg
| |
10:01 | <alkisg> You're welcome
| |
10:43 | lbssousa has joined IRC (lbssousa!~lbssousa@177.143.15.165) | |
10:50 | kjackal has left IRC (kjackal!~quassel@onopfy.static.otenet.gr, Ping timeout: 246 seconds) | |
11:07 | GodFather has joined IRC (GodFather!~rcc@96.92.43.9) | |
11:10 | professor^LE5LAB has joined IRC (professor^LE5LAB!bb0c3e22@gateway/web/freenode/ip.187.12.62.34) | |
11:12 | GodFather has left IRC (GodFather!~rcc@96.92.43.9, Client Quit) | |
11:12 | GodFather has joined IRC (GodFather!~rcc@96.92.43.9) | |
11:13 | GodFather has left IRC (GodFather!~rcc@96.92.43.9, Remote host closed the connection) | |
11:15 | GodFather has joined IRC (GodFather!~rcc@96.92.43.9) | |
11:36 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:bda6:6790:9982:cf67) | |
11:52 | Faith has joined IRC (Faith!~paty_@unaffiliated/faith) | |
13:03 | GodFather has left IRC (GodFather!~rcc@96.92.43.9, Ping timeout: 276 seconds) | |
13:33 | robb_nl has joined IRC (robb_nl!~robb_nl@62.235.97.225) | |
13:51 | robb_nl has left IRC (robb_nl!~robb_nl@62.235.97.225, Quit: I'm gone, bye bye) | |
13:54 | ben_roose has joined IRC (ben_roose!~roose@roose.cs.wichita.edu) | |
14:17 | mikkel has left IRC (mikkel!~mikkel@mail.dlvs.dk, Quit: Leaving) | |
14:55 | railr has left IRC (railr!29a246ea@gateway/web/freenode/ip.41.162.70.234, Quit: Page closed) | |
15:34 | Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 244 seconds) | |
15:54 | Softeisbieger has left IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de, Remote host closed the connection) | |
16:37 | robb_nl has joined IRC (robb_nl!~robb_nl@62.235.97.225) | |
16:53 | GodFather has joined IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net) | |
17:09 | GodFather has left IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net, Ping timeout: 276 seconds) | |
17:20 | Faith has left IRC (Faith!~paty_@unaffiliated/faith, Ping timeout: 276 seconds) | |
17:20 | Faith has joined IRC (Faith!~paty_@143.107.231.49) | |
17:45 | Leolo_2 has left IRC (Leolo_2!~fil@24-54-31-128.mg.cgocable.ca, Ping timeout: 252 seconds) | |
17:55 | gehidore is now known as man | |
17:56 | man is now known as gehidore | |
17:59 | Faith has left IRC (Faith!~paty_@143.107.231.49, Changing host) | |
17:59 | Faith has joined IRC (Faith!~paty_@unaffiliated/faith) | |
18:06 | Faith has left IRC (Faith!~paty_@unaffiliated/faith, Ping timeout: 250 seconds) | |
18:07 | Faith has joined IRC (Faith!~paty_@200.144.182.219) | |
18:13 | Faith has left IRC (Faith!~paty_@200.144.182.219, Ping timeout: 264 seconds) | |
18:17 | robb_nl has left IRC (robb_nl!~robb_nl@62.235.97.225, Ping timeout: 252 seconds) | |
18:29 | Faith has joined IRC (Faith!~paty_@143.107.231.49) | |
18:32 | kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:bda6:6790:9982:cf67, Quit: No Ping reply in 180 seconds.) | |
18:34 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:c85:73fb:4e42:f7e0) | |
19:07 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
19:38 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
19:43 | robb_nl has joined IRC (robb_nl!~robb_nl@62.235.97.225) | |
19:53 | <sbalneav> Hmm, so pam_external works to log into lightdm, but the nss_external causes it to fail.
| |
19:53 | Gotta figure out why.
| |
20:01 | robb_nl has left IRC (robb_nl!~robb_nl@62.235.97.225, Quit: I'm gone, bye bye) | |
20:05 | lbssousa has left IRC (lbssousa!~lbssousa@177.143.15.165, Quit: Leaving) | |
21:03 | <sbalneav> hmmm, something's up with nss-external. This evening, I think I'll re-write it from popen to using simple fork/exec and pipes
| |
21:08 | <quinox> just wondering, does your project help LTSP+TOTP in any way?
| |
21:09 | <sbalneav> Well, seeing as how I'm an LTSP developer.... I'd hope so :D
| |
21:09 | Faith has left IRC (Faith!~paty_@143.107.231.49, Quit: Leaving) | |
21:09 | <sbalneav> With any luck, the stuff I'm writing will be the basis for LTSP6
| |
21:11 | <quinox> sure, but I'm wondering about TOTP specifically
| |
21:12 | We've got it enabled for nearly everything right now, and LTSP is one of the last remaining systems that don't require it
| |
21:12 | <sbalneav> Not sure what totp is
| |
21:12 | <quinox> ah sorry
| |
21:12 | time-based one-time password
| |
21:12 | when logging in you have to provide a username, password and TOTP
| |
21:13 | the TOTP changes every 30 seconds, and it's based on a shared secret value
| |
21:13 | <sbalneav> Is it a pam module?
| |
21:13 | <quinox> yes
| |
21:14 | <sbalneav> Then yes, it will help, since we're planning on ditching ldm and just using lightdm, with the pam modules I'm writing.
| |
21:14 | So you'd just integrate that into the pam stack if you wanted it.
| |
21:15 | <quinox> sweet
| |
21:48 | ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, Remote host closed the connection) | |
22:05 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
22:31 | <sbalneav> vagrantc: There's some kind of bug with nss-external
| |
22:31 | with the login program, I can login with pam-external and nss-external
| |
22:32 | with lightdm I can login with pam-external and files
| |
22:32 | I can't with pam-external and nss-external
| |
22:32 | So I'm still debugging :(
| |
22:32 | <vagrantc> oh well
| |
22:33 | sbalneav: so, we could not use nss-external and switch back to libnss-extrafiles if needed?
| |
22:38 | <sbalneav> right
| |
22:38 | but I ain't licked yet :D
| |
22:41 | <vagrantc> of course!
| |
22:41 | * vagrantc is just trying to keep a mental image of how all this is pieced together and what parts replace what | |