IRC chat logs for #ltsp on irc.libera.chat (webchat)


Channel log from 22 June 2016   (all times are UTC)

00:05professor^ubuntu has joined IRC (professor^ubuntu!b1833100@gateway/web/freenode/ip.177.131.49.0)
00:05adrianorg has left IRC (adrianorg!~adrianorg@187.58.152.178, Ping timeout: 276 seconds)
00:06adrianorg has joined IRC (adrianorg!~adrianorg@187.58.152.178)
00:06professor^ubuntu has left IRC (professor^ubuntu!b1833100@gateway/web/freenode/ip.177.131.49.0, Client Quit)
00:49Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 276 seconds)
00:59Phantomas has left IRC (Phantomas!~ftsamis@ubuntu/member/phantomas, Quit: Leaving.)
01:25GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Remote host closed the connection)
01:48uXuss has joined IRC (uXuss!~uXus@213.130.11.51)
01:49uXus has left IRC (uXus!~uXus@217.77.222.72, Ping timeout: 276 seconds)
01:49uXuss is now known as uXus
02:32Freejack has joined IRC (Freejack!~Freejack@unaffiliated/freejack)
03:53championofcyrodi has joined IRC (championofcyrodi!~Charles@c-71-62-74-255.hsd1.va.comcast.net)
05:09mikkel has joined IRC (mikkel!~mikkel@mail.dlvs.dk)
05:18
<alkisg>
(04:59:38 μμ) sebd_: alkisg: http://www.cpubenchmark.net/cpu.php?cpu=Intel+Atom+N2800+%40+1.86GHz => 625 ; this is what we have here (with 2 Go RAM) - should I use them as fat clients too ?
05:18
==> yup, you should use them as fat clients
05:19
The threshold depends on a lot of stuff, and for new clients I usually propose CPU at least 1000, and recommented at least 2000, but compared to thin clients, even a fat client with score=500 or lower is better
05:20
(05:07:26 μμ) sebd: it might not make a big difference, they rarely play fullscreen videos
05:20
==> even scrolling a window can produce hundreds of mbps of traffic
05:20
It's not only about videos
05:36ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz)
05:45championofcyrodi has left IRC (championofcyrodi!~Charles@c-71-62-74-255.hsd1.va.comcast.net, Quit: Leaving.)
05:46vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving)
06:02Fenuks has joined IRC (Fenuks!~Fenuks@91.192.173.88)
06:11
<sebd>
ok
06:29kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:c01c:8816:4a96:c875, Ping timeout: 264 seconds)
06:47kjackal has joined IRC (kjackal!~quassel@onopfy.static.otenet.gr)
06:47
<sebd>
I would like to enforce password renewal at login : when the password of a user is expired, a "change password" form should appear at session start and the user should be required to enter a new password to be able to access anything else. How should I implement that ?
06:47Fenuks|2 has joined IRC (Fenuks|2!~Fenuks@91.192.173.88)
06:48lmds__ has joined IRC (lmds__!~lmds@tui.pi-et-ro.net)
06:48
<sebd>
I looked into LDM, pam and XSession. Users have thin and fat LTSP clients with XFCE desktop env.
06:48
I found no "standard" solution yet
06:50adrianor1 has joined IRC (adrianor1!~adrianorg@187.58.152.178)
06:51zama_ has joined IRC (zama_!~zama@unaffiliated/stryx/x-3871776)
06:57uXuss has joined IRC (uXuss!~uXus@217.77.222.72)
07:02jerryc has joined IRC (jerryc!~pppingme@cpe-24-166-191-156.kc.res.rr.com)
07:04Fenuks has left IRC (Fenuks!~Fenuks@91.192.173.88, *.net *.split)
07:04uXus has left IRC (uXus!~uXus@213.130.11.51, *.net *.split)
07:04adrianorg has left IRC (adrianorg!~adrianorg@187.58.152.178, *.net *.split)
07:04zama has left IRC (zama!~zama@unaffiliated/stryx/x-3871776, *.net *.split)
07:04lmds_ has left IRC (lmds_!~lmds@tui.pi-et-ro.net, *.net *.split)
07:04pppingme has left IRC (pppingme!~pppingme@unaffiliated/pppingme, *.net *.split)
07:04uXuss is now known as uXus
07:04zama_ is now known as zama
07:06vmlintu has joined IRC (vmlintu!~vmlintu@a91-153-33-91.elisa-laajakaista.fi)
07:07
<alkisg>
sebd: that will be possible in ltsp 6, which will be ditching ldm in favor of pam
07:08
Its development is not going fast though; maybe help or motivation is needed...
07:08
You could of course also script it into the existing ldm, in case ltsp 6 takes a very long time to arrive... :)
07:18jerryc has left IRC (jerryc!~pppingme@cpe-24-166-191-156.kc.res.rr.com, Quit: Leaving)
07:21
<sebd>
alkisg: ok I can work on that part (pam as a replacement for ldm, sounds good)
07:21
<alkisg>
sebd: do you have programming experience?
07:22
<sebd>
yes alkisg
07:22* sebd bzr branch lp:ltsp
07:22
<alkisg>
Most of the related code is in the ldm branch, not ltsp
07:22
<sebd>
ok
07:22
<alkisg>
sbalneav has already developed the pam modules that we want to use
07:23
So the next thing is to try to integrate those
07:23
I.e. you don't even need to look at the ldm code at all
07:23vmlintu has left IRC (vmlintu!~vmlintu@a91-153-33-91.elisa-laajakaista.fi, Ping timeout: 250 seconds)
07:23
<sebd>
ok
07:23
<alkisg>
https://code.launchpad.net/~sbalneav/+branches?field.category=REGISTERED&field.category-empty-marker=1&field.lifecycle=CURRENT&field.lifecycle-empty-marker=1&field.sort_by=most+recently+changed+first&field.sort_by-empty-marker=1
07:24
lp:~sbalneav/ltsp/libpam-sshauth is the main thing
07:24
Try to initiate a chat with sbalneav and vagrantc
07:24
<sebd>
ok
07:28pppingme has joined IRC (pppingme!~pppingme@unaffiliated/pppingme)
07:40Softeisbieger has joined IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de)
07:55eu^1721610050 has joined IRC (eu^1721610050!6d1ac53c@gateway/web/freenode/ip.109.26.197.60)
07:55
<eu^1721610050>
Hi guys,
07:56
when i'm launching epoptes, it crashes
07:56
i'm behind the epoptes server
07:56
<alkisg>
distro/version/message?
07:57Statler has joined IRC (Statler!~Georg@p5DD6FE64.dip0.t-ipconnect.de)
07:57
<alkisg>
(message, if you run it via the command line, or if you try to upload the crashdump...)
07:57
<eu^1721610050>
debian 32bits jessie, lxde,
07:57
no message, i just want to lauch the GUI
07:57
it runs like 2 sec, and stop
07:57
<alkisg>
Can you try running it from the command line? epoptes
07:58
Also, is it 0.5.8-1~bpo8+1 ? dpkg -l epoptes
07:58
<eu^1721610050>
0.5.7.1
07:59
the users of the computer are not allowed to do command line
07:59
only root can
07:59
<alkisg>
Is the user part of the epoptes group?
07:59
<eu^1721610050>
oh, wait, i'll try something
08:00
<alkisg>
(err how were you able to disallow the users from running lxterminal?!)
08:00
<eu^1721610050>
ok for command line
08:01
(ldap config)
08:02
<alkisg>
I don't know how to disable alt+ctrl+t or navigating to lxterminal with an ldap config, it sounds strange to me...
08:02
OK run it from the command line and tell me the crash output
08:02
Also, the output of: id
08:02
...so that we see if the user is part of the epoptes group
08:03
<eu^1721610050>
an error occured while connecting : 13
08:03
yes, the user is part of epoptes group
08:03
<alkisg>
That means that either the epoptes service isn't running, or the user isn't a member of the epoptes group
08:03
<eu^1721610050>
i 've to copy by hand the message, be patient ^^
08:04
<alkisg>
ps aux | grep epoptes ==> is something like this running?
08:04
/usr/bin/python /usr/bin/twistd --pidfile /var/run/epoptes.pid --logfile /var/log/epoptes.log epoptes
08:06
<eu^1721610050>
root 1118 0.0 1.3 29660 24112 ? S 11:50 0:00 /usr/bin/python /usr/bin/twistd --pidfile /var/run/epoptes.pid --logfile /var/log/epoptes.log epoptes MYUSER 1408 99.2 0.2 5340 3656 ? R 11:51 14:28 socat openssl-connect:server:789,cafile=/etc/epoptes/server.crt,interval=60,forever EXEC:bash -c \"exec -a epoptes-client sh\" MYUSER 1828 0.0 0.1 4580 2068 pts/2 S+ 12:05 0:00 grep epoptes
08:07
the original error
08:07
<alkisg>
eu^1721610050: do you mind if you share your screen with me? It makes troubleshooting 10 times faster...
08:08
<eu^1721610050>
I can't âste it
08:08
<alkisg>
!vnc-dide
08:08
<ltsp>
vnc-dide: To share your screen with me, run this: sudo apt-get --yes install x11vnc; x11vnc -connect srv1-dide.ioa.sch.gr - this is a reverse connection, it doesn't need port forwarding etc.
08:08
<alkisg>
(you already have x11vnc installed, due to epoptes)
08:08
<eu^1721610050>
ok
08:08
<alkisg>
So just this, from the terminal, as the user: x11vnc -connect srv1-dide.ioa.sch.gr
08:09
<eu^1721610050>
22/06/2016 12:08:35 reverse_connect: srv1-dide.ioa.sch.gr failed
08:09
<alkisg>
Can you ping srv1-dide.ioa.sch.gr ?
08:09
<eu^1721610050>
I'll configure my firewall (open every ports)
08:12
<alkisg>
The user is not part of the epoptes group
08:12
<eu^1721610050>
?
08:13
<alkisg>
You need to specify that to your pam, ldap, whatever you use, so that "id" says that he is
08:13
See the output of "id"
08:14
I don't know pam very well, but I imagine that you disabled the "unix" pam
08:14
You only have ldap, without unix
08:15
<eu^1721610050>
Yep
08:15
<alkisg>
So you either need to add the unix pam, or add an epoptes group to your ldap
08:15
<eu^1721610050>
So, i need to activate unix
08:15
<alkisg>
The result should be that "id" also says "epoptes"
08:16
<eu^1721610050>
ok
08:16
i'll try that....
08:16
<alkisg>
Newer epoptes versions have better messages, that old one doesn't have a good message
08:16
0.5.10 tells you 'access denied, check if the user is part of the epoptes group' graphically as well as in the console
08:16
<eu^1721610050>
It worked yesterday,
08:17
<alkisg>
What changed since yesterday?
08:17
<eu^1721610050>
nothing, i've just turned off the computer
08:18
<alkisg>
Maybe you changed something 3 days ago or longer, and it took effect on reboot
08:18
It's a socket permissions issue, it's not really related to the epoptes code
08:18
<eu^1721610050>
ok
08:18
thanks for your help
08:19
<alkisg>
You're welcome
08:19eu^1721610050 has left IRC (eu^1721610050!6d1ac53c@gateway/web/freenode/ip.109.26.197.60, Quit: Page closed)
08:27Phantomas has joined IRC (Phantomas!~ftsamis@ubuntu/member/phantomas)
10:10kjackal_ has joined IRC (kjackal_!~quassel@onopfy.static.otenet.gr)
10:10kjackal has left IRC (kjackal!~quassel@onopfy.static.otenet.gr, Read error: Connection reset by peer)
10:37lbssousa has joined IRC (lbssousa!~lbssousa@177.143.57.143)
10:45vmlintu has joined IRC (vmlintu!~vmlintu@37-219-255-163.nat.bb.dnainternet.fi)
10:54robb_nl has joined IRC (robb_nl!~robb_nl@ip-80-236-222-152.dsl.scarlet.be)
11:00GodFather has joined IRC (GodFather!~rcc@96.92.43.9)
11:14Fenuks|2 is now known as Fenuks
11:20kjackal_ has left IRC (kjackal_!~quassel@onopfy.static.otenet.gr, Ping timeout: 240 seconds)
11:51Faith has joined IRC (Faith!~paty_@unaffiliated/faith)
11:54robb_nl has left IRC (robb_nl!~robb_nl@ip-80-236-222-152.dsl.scarlet.be, Quit: I'm gone, bye bye)
12:15kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0)
12:19adrianor1 is now known as adrianorg
12:21GodFather has left IRC (GodFather!~rcc@96.92.43.9, Ping timeout: 244 seconds)
12:39vmlintu has left IRC (vmlintu!~vmlintu@37-219-255-163.nat.bb.dnainternet.fi, Ping timeout: 258 seconds)
12:46Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 244 seconds)
12:49Hyperbyte has left IRC (Hyperbyte!jan@middelkoop.cc, Ping timeout: 244 seconds)
12:51Freejack has joined IRC (Freejack!~Freejack@unaffiliated/freejack)
12:56Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc)
13:30ben_roose has joined IRC (ben_roose!~roose@roose.cs.wichita.edu)
13:50mikkel has left IRC (mikkel!~mikkel@mail.dlvs.dk, Quit: Leaving)
14:49
<sebd>
I would like to test the current LTSP development code on my own laptop. I cannot do that on real physical PCs because I just do not have them always with me and I move from one network to the other everyday.
14:50
What virtualisation system should I use to run latest unstable LTSP ?
14:50
<quinox>
I managed to boot a virtual client from our real server using QEMU + a NIC firmware
14:51
I have yet to boot my virtual client from a dockered server instance - should be possible, but haven't tried it yet
14:52Fenuks has left IRC (Fenuks!~Fenuks@91.192.173.88, Ping timeout: 264 seconds)
14:52
<||cw>
I've used kvm for server and client, but vbox and vmplayer should also work fine
14:52
<sebd>
Docker for the server and qemu for the client, is it how the LTSP developers do as well ?
14:53
<||cw>
if you only want VM clients, a vm NAT network is fine, but if you want physical clients too, that gets more tricky if you change networks
14:54
sebd: the VM tech doesn't really matter, linux and PXE is supported well enough on all of them
14:55
<sebd>
I do not need to serve real physical clients for now
14:55
<||cw>
oh, if you do a NAT, disables the built in DHCP server on it
14:57
<sebd>
qemu, docker, kvm, vbox, vmplayer ... which one is the simplest ? I'll have to investigate (I don't know any)
14:58
<quinox>
I don't think docker is particularly easy
14:59
<sebd>
is vmplayer VMWare Player ? I will not use it as it is not free software (as in freedom). One eliminated.
15:01root has joined IRC (root!578abe9f@gateway/web/freenode/ip.87.138.190.159)
15:01
<root>
adfgasdfhz
15:01
adfbgsdgh#ä
15:01
qwertz
15:01root is now known as Guest26730
15:02
<||cw>
o_O
15:05
<sebd>
I guess vbox means VirtualBox. Does not seem totally free either but it is in debian, which is easier for me.
15:09GodFather has joined IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net)
15:09
<||cw>
my kvm was via proxmox, but that's a dedicated system for production. you should be able to do it with virt-manager if you want a desktop GUI
15:10
I use that for my windows VM
15:10
vbox is easier
15:11
<sebd>
Debian package qemu-system-x86 description looks good for a client PC emulation
15:13
oh I did not know virt-manager either.
15:15
virt-manager with kvm under it looks like a sane choice for me
15:15
I'll try that
15:36Softeisbieger has left IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de, Ping timeout: 246 seconds)
16:38Fenuks has joined IRC (Fenuks!~Fenuks@95.191.253.62)
17:38vmlintu has joined IRC (vmlintu!~vmlintu@dsl-jnsbrasgw2-58c07e-86.dhcp.inet.fi)
17:51kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0, Ping timeout: 264 seconds)
18:13kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0)
18:46toliou has joined IRC (toliou!2e0c06cc@gateway/web/freenode/ip.46.12.6.204)
18:48toliou has left IRC (toliou!2e0c06cc@gateway/web/freenode/ip.46.12.6.204, Client Quit)
18:49GodFather has left IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net, Ping timeout: 246 seconds)
19:13Fenuks has left IRC (Fenuks!~Fenuks@95.191.253.62, Ping timeout: 260 seconds)
20:02lbssousa has left IRC (lbssousa!~lbssousa@177.143.57.143, Quit: Leaving)
20:20Statler has left IRC (Statler!~Georg@p5DD6FE64.dip0.t-ipconnect.de, Remote host closed the connection)
20:28vmlintu has left IRC (vmlintu!~vmlintu@dsl-jnsbrasgw2-58c07e-86.dhcp.inet.fi, Ping timeout: 244 seconds)
20:42Faith has left IRC (Faith!~paty_@unaffiliated/faith, Quit: Leaving)
21:06ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving)
21:11kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0, Ping timeout: 260 seconds)
21:44GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com)
23:11ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, Remote host closed the connection)
23:46GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Ping timeout: 246 seconds)