00:05 | professor^ubuntu has joined IRC (professor^ubuntu!b1833100@gateway/web/freenode/ip.177.131.49.0) | |
00:05 | adrianorg has left IRC (adrianorg!~adrianorg@187.58.152.178, Ping timeout: 276 seconds) | |
00:06 | adrianorg has joined IRC (adrianorg!~adrianorg@187.58.152.178) | |
00:06 | professor^ubuntu has left IRC (professor^ubuntu!b1833100@gateway/web/freenode/ip.177.131.49.0, Client Quit) | |
00:49 | Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 276 seconds) | |
00:59 | Phantomas has left IRC (Phantomas!~ftsamis@ubuntu/member/phantomas, Quit: Leaving.) | |
01:25 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Remote host closed the connection) | |
01:48 | uXuss has joined IRC (uXuss!~uXus@213.130.11.51) | |
01:49 | uXus has left IRC (uXus!~uXus@217.77.222.72, Ping timeout: 276 seconds) | |
01:49 | uXuss is now known as uXus | |
02:32 | Freejack has joined IRC (Freejack!~Freejack@unaffiliated/freejack) | |
03:53 | championofcyrodi has joined IRC (championofcyrodi!~Charles@c-71-62-74-255.hsd1.va.comcast.net) | |
05:09 | mikkel has joined IRC (mikkel!~mikkel@mail.dlvs.dk) | |
05:18 | <alkisg> (04:59:38 μμ) sebd_: alkisg: http://www.cpubenchmark.net/cpu.php?cpu=Intel+Atom+N2800+%40+1.86GHz => 625 ; this is what we have here (with 2 Go RAM) - should I use them as fat clients too ?
| |
05:18 | ==> yup, you should use them as fat clients
| |
05:19 | The threshold depends on a lot of stuff, and for new clients I usually propose CPU at least 1000, and recommented at least 2000, but compared to thin clients, even a fat client with score=500 or lower is better
| |
05:20 | (05:07:26 μμ) sebd: it might not make a big difference, they rarely play fullscreen videos
| |
05:20 | ==> even scrolling a window can produce hundreds of mbps of traffic
| |
05:20 | It's not only about videos
| |
05:36 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
05:45 | championofcyrodi has left IRC (championofcyrodi!~Charles@c-71-62-74-255.hsd1.va.comcast.net, Quit: Leaving.) | |
05:46 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
06:02 | Fenuks has joined IRC (Fenuks!~Fenuks@91.192.173.88) | |
06:11 | <sebd> ok
| |
06:29 | kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:c01c:8816:4a96:c875, Ping timeout: 264 seconds) | |
06:47 | kjackal has joined IRC (kjackal!~quassel@onopfy.static.otenet.gr) | |
06:47 | <sebd> I would like to enforce password renewal at login : when the password of a user is expired, a "change password" form should appear at session start and the user should be required to enter a new password to be able to access anything else. How should I implement that ?
| |
06:47 | Fenuks|2 has joined IRC (Fenuks|2!~Fenuks@91.192.173.88) | |
06:48 | lmds__ has joined IRC (lmds__!~lmds@tui.pi-et-ro.net) | |
06:48 | <sebd> I looked into LDM, pam and XSession. Users have thin and fat LTSP clients with XFCE desktop env.
| |
06:48 | I found no "standard" solution yet
| |
06:50 | adrianor1 has joined IRC (adrianor1!~adrianorg@187.58.152.178) | |
06:51 | zama_ has joined IRC (zama_!~zama@unaffiliated/stryx/x-3871776) | |
06:57 | uXuss has joined IRC (uXuss!~uXus@217.77.222.72) | |
07:02 | jerryc has joined IRC (jerryc!~pppingme@cpe-24-166-191-156.kc.res.rr.com) | |
07:04 | Fenuks has left IRC (Fenuks!~Fenuks@91.192.173.88, *.net *.split) | |
07:04 | uXus has left IRC (uXus!~uXus@213.130.11.51, *.net *.split) | |
07:04 | adrianorg has left IRC (adrianorg!~adrianorg@187.58.152.178, *.net *.split) | |
07:04 | zama has left IRC (zama!~zama@unaffiliated/stryx/x-3871776, *.net *.split) | |
07:04 | lmds_ has left IRC (lmds_!~lmds@tui.pi-et-ro.net, *.net *.split) | |
07:04 | pppingme has left IRC (pppingme!~pppingme@unaffiliated/pppingme, *.net *.split) | |
07:04 | uXuss is now known as uXus | |
07:04 | zama_ is now known as zama | |
07:06 | vmlintu has joined IRC (vmlintu!~vmlintu@a91-153-33-91.elisa-laajakaista.fi) | |
07:07 | <alkisg> sebd: that will be possible in ltsp 6, which will be ditching ldm in favor of pam
| |
07:08 | Its development is not going fast though; maybe help or motivation is needed...
| |
07:08 | You could of course also script it into the existing ldm, in case ltsp 6 takes a very long time to arrive... :)
| |
07:18 | jerryc has left IRC (jerryc!~pppingme@cpe-24-166-191-156.kc.res.rr.com, Quit: Leaving) | |
07:21 | <sebd> alkisg: ok I can work on that part (pam as a replacement for ldm, sounds good)
| |
07:21 | <alkisg> sebd: do you have programming experience?
| |
07:22 | <sebd> yes alkisg
| |
07:22 | * sebd bzr branch lp:ltsp | |
07:22 | <alkisg> Most of the related code is in the ldm branch, not ltsp
| |
07:22 | <sebd> ok
| |
07:22 | <alkisg> sbalneav has already developed the pam modules that we want to use
| |
07:23 | So the next thing is to try to integrate those
| |
07:23 | I.e. you don't even need to look at the ldm code at all
| |
07:23 | vmlintu has left IRC (vmlintu!~vmlintu@a91-153-33-91.elisa-laajakaista.fi, Ping timeout: 250 seconds) | |
07:23 | <sebd> ok
| |
07:23 | <alkisg> https://code.launchpad.net/~sbalneav/+branches?field.category=REGISTERED&field.category-empty-marker=1&field.lifecycle=CURRENT&field.lifecycle-empty-marker=1&field.sort_by=most+recently+changed+first&field.sort_by-empty-marker=1
| |
07:24 | lp:~sbalneav/ltsp/libpam-sshauth is the main thing
| |
07:24 | Try to initiate a chat with sbalneav and vagrantc
| |
07:24 | <sebd> ok
| |
07:28 | pppingme has joined IRC (pppingme!~pppingme@unaffiliated/pppingme) | |
07:40 | Softeisbieger has joined IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de) | |
07:55 | eu^1721610050 has joined IRC (eu^1721610050!6d1ac53c@gateway/web/freenode/ip.109.26.197.60) | |
07:55 | <eu^1721610050> Hi guys,
| |
07:56 | when i'm launching epoptes, it crashes
| |
07:56 | i'm behind the epoptes server
| |
07:56 | <alkisg> distro/version/message?
| |
07:57 | Statler has joined IRC (Statler!~Georg@p5DD6FE64.dip0.t-ipconnect.de) | |
07:57 | <alkisg> (message, if you run it via the command line, or if you try to upload the crashdump...)
| |
07:57 | <eu^1721610050> debian 32bits jessie, lxde,
| |
07:57 | no message, i just want to lauch the GUI
| |
07:57 | it runs like 2 sec, and stop
| |
07:57 | <alkisg> Can you try running it from the command line? epoptes
| |
07:58 | Also, is it 0.5.8-1~bpo8+1 ? dpkg -l epoptes
| |
07:58 | <eu^1721610050> 0.5.7.1
| |
07:59 | the users of the computer are not allowed to do command line
| |
07:59 | only root can
| |
07:59 | <alkisg> Is the user part of the epoptes group?
| |
07:59 | <eu^1721610050> oh, wait, i'll try something
| |
08:00 | <alkisg> (err how were you able to disallow the users from running lxterminal?!)
| |
08:00 | <eu^1721610050> ok for command line
| |
08:01 | (ldap config)
| |
08:02 | <alkisg> I don't know how to disable alt+ctrl+t or navigating to lxterminal with an ldap config, it sounds strange to me...
| |
08:02 | OK run it from the command line and tell me the crash output
| |
08:02 | Also, the output of: id
| |
08:02 | ...so that we see if the user is part of the epoptes group
| |
08:03 | <eu^1721610050> an error occured while connecting : 13
| |
08:03 | yes, the user is part of epoptes group
| |
08:03 | <alkisg> That means that either the epoptes service isn't running, or the user isn't a member of the epoptes group
| |
08:03 | <eu^1721610050> i 've to copy by hand the message, be patient ^^
| |
08:04 | <alkisg> ps aux | grep epoptes ==> is something like this running?
| |
08:04 | /usr/bin/python /usr/bin/twistd --pidfile /var/run/epoptes.pid --logfile /var/log/epoptes.log epoptes
| |
08:06 | <eu^1721610050> root 1118 0.0 1.3 29660 24112 ? S 11:50 0:00 /usr/bin/python /usr/bin/twistd --pidfile /var/run/epoptes.pid --logfile /var/log/epoptes.log epoptes MYUSER 1408 99.2 0.2 5340 3656 ? R 11:51 14:28 socat openssl-connect:server:789,cafile=/etc/epoptes/server.crt,interval=60,forever EXEC:bash -c \"exec -a epoptes-client sh\" MYUSER 1828 0.0 0.1 4580 2068 pts/2 S+ 12:05 0:00 grep epoptes
| |
08:07 | the original error
| |
08:07 | <alkisg> eu^1721610050: do you mind if you share your screen with me? It makes troubleshooting 10 times faster...
| |
08:08 | <eu^1721610050> I can't âste it
| |
08:08 | <alkisg> !vnc-dide
| |
08:08 | <ltsp> vnc-dide: To share your screen with me, run this: sudo apt-get --yes install x11vnc; x11vnc -connect srv1-dide.ioa.sch.gr - this is a reverse connection, it doesn't need port forwarding etc.
| |
08:08 | <alkisg> (you already have x11vnc installed, due to epoptes)
| |
08:08 | <eu^1721610050> ok
| |
08:08 | <alkisg> So just this, from the terminal, as the user: x11vnc -connect srv1-dide.ioa.sch.gr
| |
08:09 | <eu^1721610050> 22/06/2016 12:08:35 reverse_connect: srv1-dide.ioa.sch.gr failed
| |
08:09 | <alkisg> Can you ping srv1-dide.ioa.sch.gr ?
| |
08:09 | <eu^1721610050> I'll configure my firewall (open every ports)
| |
08:12 | <alkisg> The user is not part of the epoptes group
| |
08:12 | <eu^1721610050> ?
| |
08:13 | <alkisg> You need to specify that to your pam, ldap, whatever you use, so that "id" says that he is
| |
08:13 | See the output of "id"
| |
08:14 | I don't know pam very well, but I imagine that you disabled the "unix" pam
| |
08:14 | You only have ldap, without unix
| |
08:15 | <eu^1721610050> Yep
| |
08:15 | <alkisg> So you either need to add the unix pam, or add an epoptes group to your ldap
| |
08:15 | <eu^1721610050> So, i need to activate unix
| |
08:15 | <alkisg> The result should be that "id" also says "epoptes"
| |
08:16 | <eu^1721610050> ok
| |
08:16 | i'll try that....
| |
08:16 | <alkisg> Newer epoptes versions have better messages, that old one doesn't have a good message
| |
08:16 | 0.5.10 tells you 'access denied, check if the user is part of the epoptes group' graphically as well as in the console
| |
08:16 | <eu^1721610050> It worked yesterday,
| |
08:17 | <alkisg> What changed since yesterday?
| |
08:17 | <eu^1721610050> nothing, i've just turned off the computer
| |
08:18 | <alkisg> Maybe you changed something 3 days ago or longer, and it took effect on reboot
| |
08:18 | It's a socket permissions issue, it's not really related to the epoptes code
| |
08:18 | <eu^1721610050> ok
| |
08:18 | thanks for your help
| |
08:19 | <alkisg> You're welcome
| |
08:19 | eu^1721610050 has left IRC (eu^1721610050!6d1ac53c@gateway/web/freenode/ip.109.26.197.60, Quit: Page closed) | |
08:27 | Phantomas has joined IRC (Phantomas!~ftsamis@ubuntu/member/phantomas) | |
10:10 | kjackal_ has joined IRC (kjackal_!~quassel@onopfy.static.otenet.gr) | |
10:10 | kjackal has left IRC (kjackal!~quassel@onopfy.static.otenet.gr, Read error: Connection reset by peer) | |
10:37 | lbssousa has joined IRC (lbssousa!~lbssousa@177.143.57.143) | |
10:45 | vmlintu has joined IRC (vmlintu!~vmlintu@37-219-255-163.nat.bb.dnainternet.fi) | |
10:54 | robb_nl has joined IRC (robb_nl!~robb_nl@ip-80-236-222-152.dsl.scarlet.be) | |
11:00 | GodFather has joined IRC (GodFather!~rcc@96.92.43.9) | |
11:14 | Fenuks|2 is now known as Fenuks | |
11:20 | kjackal_ has left IRC (kjackal_!~quassel@onopfy.static.otenet.gr, Ping timeout: 240 seconds) | |
11:51 | Faith has joined IRC (Faith!~paty_@unaffiliated/faith) | |
11:54 | robb_nl has left IRC (robb_nl!~robb_nl@ip-80-236-222-152.dsl.scarlet.be, Quit: I'm gone, bye bye) | |
12:15 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0) | |
12:19 | adrianor1 is now known as adrianorg | |
12:21 | GodFather has left IRC (GodFather!~rcc@96.92.43.9, Ping timeout: 244 seconds) | |
12:39 | vmlintu has left IRC (vmlintu!~vmlintu@37-219-255-163.nat.bb.dnainternet.fi, Ping timeout: 258 seconds) | |
12:46 | Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 244 seconds) | |
12:49 | Hyperbyte has left IRC (Hyperbyte!jan@middelkoop.cc, Ping timeout: 244 seconds) | |
12:51 | Freejack has joined IRC (Freejack!~Freejack@unaffiliated/freejack) | |
12:56 | Hyperbyte has joined IRC (Hyperbyte!jan@middelkoop.cc) | |
13:30 | ben_roose has joined IRC (ben_roose!~roose@roose.cs.wichita.edu) | |
13:50 | mikkel has left IRC (mikkel!~mikkel@mail.dlvs.dk, Quit: Leaving) | |
14:49 | <sebd> I would like to test the current LTSP development code on my own laptop. I cannot do that on real physical PCs because I just do not have them always with me and I move from one network to the other everyday.
| |
14:50 | What virtualisation system should I use to run latest unstable LTSP ?
| |
14:50 | <quinox> I managed to boot a virtual client from our real server using QEMU + a NIC firmware
| |
14:51 | I have yet to boot my virtual client from a dockered server instance - should be possible, but haven't tried it yet
| |
14:52 | Fenuks has left IRC (Fenuks!~Fenuks@91.192.173.88, Ping timeout: 264 seconds) | |
14:52 | <||cw> I've used kvm for server and client, but vbox and vmplayer should also work fine
| |
14:52 | <sebd> Docker for the server and qemu for the client, is it how the LTSP developers do as well ?
| |
14:53 | <||cw> if you only want VM clients, a vm NAT network is fine, but if you want physical clients too, that gets more tricky if you change networks
| |
14:54 | sebd: the VM tech doesn't really matter, linux and PXE is supported well enough on all of them
| |
14:55 | <sebd> I do not need to serve real physical clients for now
| |
14:55 | <||cw> oh, if you do a NAT, disables the built in DHCP server on it
| |
14:57 | <sebd> qemu, docker, kvm, vbox, vmplayer ... which one is the simplest ? I'll have to investigate (I don't know any)
| |
14:58 | <quinox> I don't think docker is particularly easy
| |
14:59 | <sebd> is vmplayer VMWare Player ? I will not use it as it is not free software (as in freedom). One eliminated.
| |
15:01 | root has joined IRC (root!578abe9f@gateway/web/freenode/ip.87.138.190.159) | |
15:01 | <root> adfgasdfhz
| |
15:01 | adfbgsdgh#ä
| |
15:01 | qwertz
| |
15:01 | root is now known as Guest26730 | |
15:02 | <||cw> o_O
| |
15:05 | <sebd> I guess vbox means VirtualBox. Does not seem totally free either but it is in debian, which is easier for me.
| |
15:09 | GodFather has joined IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net) | |
15:09 | <||cw> my kvm was via proxmox, but that's a dedicated system for production. you should be able to do it with virt-manager if you want a desktop GUI
| |
15:10 | I use that for my windows VM
| |
15:10 | vbox is easier
| |
15:11 | <sebd> Debian package qemu-system-x86 description looks good for a client PC emulation
| |
15:13 | oh I did not know virt-manager either.
| |
15:15 | virt-manager with kvm under it looks like a sane choice for me
| |
15:15 | I'll try that
| |
15:36 | Softeisbieger has left IRC (Softeisbieger!~Softeisbi@ip-62-143-13-166.hsi01.unitymediagroup.de, Ping timeout: 246 seconds) | |
16:38 | Fenuks has joined IRC (Fenuks!~Fenuks@95.191.253.62) | |
17:38 | vmlintu has joined IRC (vmlintu!~vmlintu@dsl-jnsbrasgw2-58c07e-86.dhcp.inet.fi) | |
17:51 | kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0, Ping timeout: 264 seconds) | |
18:13 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0) | |
18:46 | toliou has joined IRC (toliou!2e0c06cc@gateway/web/freenode/ip.46.12.6.204) | |
18:48 | toliou has left IRC (toliou!2e0c06cc@gateway/web/freenode/ip.46.12.6.204, Client Quit) | |
18:49 | GodFather has left IRC (GodFather!~rcc@75-145-237-204-Michigan.hfc.comcastbusiness.net, Ping timeout: 246 seconds) | |
19:13 | Fenuks has left IRC (Fenuks!~Fenuks@95.191.253.62, Ping timeout: 260 seconds) | |
20:02 | lbssousa has left IRC (lbssousa!~lbssousa@177.143.57.143, Quit: Leaving) | |
20:20 | Statler has left IRC (Statler!~Georg@p5DD6FE64.dip0.t-ipconnect.de, Remote host closed the connection) | |
20:28 | vmlintu has left IRC (vmlintu!~vmlintu@dsl-jnsbrasgw2-58c07e-86.dhcp.inet.fi, Ping timeout: 244 seconds) | |
20:42 | Faith has left IRC (Faith!~paty_@unaffiliated/faith, Quit: Leaving) | |
21:06 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
21:11 | kjackal has left IRC (kjackal!~quassel@2a02:587:3117:9e00:640d:7a23:509d:c4c0, Ping timeout: 260 seconds) | |
21:44 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
23:11 | ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, Remote host closed the connection) | |
23:46 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Ping timeout: 246 seconds) | |