00:23 | stgraber has left IRC (stgraber!~stgraber@ubuntu/member/stgraber, Quit: maintenance (kernel update)) | |
00:35 | stgraber has joined IRC (stgraber!~stgraber@ubuntu/member/stgraber) | |
02:59 | adrianorg has left IRC (adrianorg!~adrianorg@186.215.22.164, Ping timeout: 276 seconds) | |
03:00 | adrianorg has joined IRC (adrianorg!~adrianorg@179.187.31.13.dynamic.adsl.gvt.net.br) | |
03:04 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Ping timeout: 264 seconds) | |
03:19 | telex has left IRC (telex!teletype@94.247.40.156, Remote host closed the connection) | |
05:07 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
05:11 | ||cw has left IRC (||cw!~chrisw@unaffiliated/cw/x-1182934, Ping timeout: 276 seconds) | |
05:39 | ||cw has joined IRC (||cw!~chrisw@unaffiliated/cw/x-1182934) | |
06:09 | adrianorg has left IRC (adrianorg!~adrianorg@179.187.31.13.dynamic.adsl.gvt.net.br, Ping timeout: 252 seconds) | |
06:11 | adrianorg has joined IRC (adrianorg!~adrianorg@179.187.26.94.dynamic.adsl.gvt.net.br) | |
06:44 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
07:13 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
07:20 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
07:55 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
07:58 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
08:03 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
08:06 | <tarzeau> is lts.conf LDM_USERNAME=one and LDM_PASSWORD not there allowed and working, when using ssh with keys?
| |
08:22 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
08:22 | ||cw has left IRC (||cw!~chrisw@unaffiliated/cw/x-1182934, Ping timeout: 260 seconds) | |
08:27 | ||cw has joined IRC (||cw!~chrisw@unaffiliated/cw/x-1182934) | |
08:31 | robb_nl has joined IRC (robb_nl!~robb_nl@ip-62-235-223-169.dsl.scarlet.be) | |
08:39 | Statler has joined IRC (Statler!~Georg@p54BFB5EC.dip0.t-ipconnect.de) | |
09:10 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
09:14 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
09:15 | robb_nl has left IRC (robb_nl!~robb_nl@ip-62-235-223-169.dsl.scarlet.be, Quit: I'm gone, bye bye) | |
09:29 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
09:33 | Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, Ping timeout: 260 seconds) | |
09:35 | Freejack has joined IRC (Freejack!~Freejack@unaffiliated/freejack) | |
09:48 | julienfayad has joined IRC (julienfayad!~julienfay@77.42.205.8) | |
10:00 | <vsuojanen> tarzeau: which ssh keys are you talking about? if I have up to date information ldm is not used if setting up client keys
| |
10:03 | julienfayad has left IRC (julienfayad!~julienfay@77.42.205.8, Quit: julienfayad) | |
10:06 | <vsuojanen> on the other hand LDM_USERNAME and LDM_PASSWORD are commonly for autologin
| |
10:46 | <tarzeau> so there's no way to have no cleartext password?
| |
10:46 | the point is i have one user (called kiosk) that needs to autologin
| |
10:46 | (for info displays and other things)
| |
10:47 | and i'd like to get rid of the local user (which i have to care about twice, since we have two ltsp servers)
| |
10:47 | there's one option of using glusterfs for that user home, or i'd migrate the user to our ldap users
| |
10:47 | but the cleartext password in lts.conf prevents the migration
| |
10:51 | budgee has left IRC (budgee!~root@static.210.94.47.78.clients.your-server.de, Ping timeout: 252 seconds) | |
10:52 | budgee has joined IRC (budgee!~root@static.210.94.47.78.clients.your-server.de) | |
11:00 | <vsuojanen> if you are setting up autologin and use the upstream ltsp screen.d/kiosk (e.x. SCREEN_07=kiosk) why would you care about the password if it's used as info display (without any other things). normal trusted users are always on the servers
| |
11:05 | imo get read of the local user and use kiosk session. it cleanups automatically and creates a new session every time the kiosk session exits
| |
11:10 | julienfayad has joined IRC (julienfayad!~julienfay@46.19.196.171) | |
11:54 | Faith has joined IRC (Faith!~paty_@unaffiliated/faith) | |
12:56 | boj__ has joined IRC (boj__!3d0c2373@gateway/web/freenode/ip.61.12.35.115) | |
12:57 | <boj__> Can someone advise whether i can use LTSP for commercial purpose ?
| |
13:12 | <sebd> boj__: what do you mean with "for commercial purpose" ? LTSP is free (as in "free speech"). It is free enough to be included in Debian.
| |
13:15 | boj__ has left IRC (boj__!3d0c2373@gateway/web/freenode/ip.61.12.35.115, Quit: Page closed) | |
14:38 | ben_roose has joined IRC (ben_roose!~roose@roose.cs.wichita.edu) | |
15:01 | Statler has left IRC (Statler!~Georg@p54BFB5EC.dip0.t-ipconnect.de, Ping timeout: 264 seconds) | |
15:15 | Statler has joined IRC (Statler!~Georg@p54BFB112.dip0.t-ipconnect.de) | |
15:41 | spectra has left IRC (spectra!~spectra@debian/developer/spectra, *.net *.split) | |
15:41 | highvoltage has left IRC (highvoltage!~highvolta@ubuntu/member/highvoltage, *.net *.split) | |
15:41 | budgee has left IRC (budgee!~root@static.210.94.47.78.clients.your-server.de, *.net *.split) | |
15:41 | ogra_ has left IRC (ogra_!~ogra_@p5098ed03.dip0.t-ipconnect.de, *.net *.split) | |
15:41 | vsuojanen has left IRC (vsuojanen!~valtteri@83-136-248-31.uk-lon1.host.upcloud.com, *.net *.split) | |
15:41 | TatankaT has left IRC (TatankaT!~tim@193.190.253.114, *.net *.split) | |
15:41 | Parker955_Away has left IRC (Parker955_Away!~parker@2607:5300:60:8425::2d62:a8e6, *.net *.split) | |
15:41 | cyberorg has left IRC (cyberorg!~cyberorg@opensuse/member/Cyberorg, *.net *.split) | |
15:41 | quinox has left IRC (quinox!~quinox@ghost.qtea.nl, *.net *.split) | |
15:41 | teknkik has left IRC (teknkik!tek@kapsi.fi, *.net *.split) | |
15:41 | sutula has left IRC (sutula!~sutula@207-118-144-4.dyn.centurytel.net, *.net *.split) | |
15:41 | lmds__ has left IRC (lmds__!~lmds@tui.pi-et-ro.net, *.net *.split) | |
15:41 | sebd has left IRC (sebd!~seb@ldd.lo.ldd.fr, *.net *.split) | |
15:41 | tarzeau has left IRC (tarzeau!~alex@mail.aiei.ch, *.net *.split) | |
15:41 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, *.net *.split) | |
15:41 | gehidore has left IRC (gehidore!~username@unaffiliated/man, *.net *.split) | |
15:41 | Statler has left IRC (Statler!~Georg@p54BFB112.dip0.t-ipconnect.de, *.net *.split) | |
15:41 | Faith has left IRC (Faith!~paty_@unaffiliated/faith, *.net *.split) | |
15:41 | zerkalo has left IRC (zerkalo!myricae@ny1.hashbang.sh, *.net *.split) | |
15:41 | stgraber has left IRC (stgraber!~stgraber@ubuntu/member/stgraber, *.net *.split) | |
15:41 | cor_geeks_eadthe has left IRC (cor_geeks_eadthe!~cor@cpe-76-92-215-174.kc.res.rr.com, *.net *.split) | |
15:41 | K0HAX has left IRC (K0HAX!~michael@shellhost.home.englehorn.com, *.net *.split) | |
15:41 | ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, *.net *.split) | |
15:41 | Freejack has left IRC (Freejack!~Freejack@unaffiliated/freejack, *.net *.split) | |
15:41 | sbalneav has left IRC (sbalneav!~sbalneav@wnpgmb0311w-ds01-165-236.dynamic.mtsallstream.net, *.net *.split) | |
15:41 | book` has left IRC (book`!~book`@68.ip-149-56-14.net, *.net *.split) | |
15:41 | ||cw has left IRC (||cw!~chrisw@unaffiliated/cw/x-1182934, *.net *.split) | |
15:41 | bennabiy has left IRC (bennabiy!~bennabiy@unaffiliated/bennabiy, *.net *.split) | |
15:41 | lee has left IRC (lee!~lee@loathe.ms, *.net *.split) | |
15:41 | ben_nabiy has left IRC (ben_nabiy!~bennabiy@unaffiliated/bennabiy, *.net *.split) | |
15:41 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, *.net *.split) | |
15:41 | bitchecker has left IRC (bitchecker!~bitchecke@31.131.20.132, *.net *.split) | |
15:41 | maldridge has left IRC (maldridge!~maldridge@69.13.217.92, *.net *.split) | |
15:41 | pppingme has left IRC (pppingme!~pppingme@unaffiliated/pppingme, *.net *.split) | |
15:41 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, *.net *.split) | |
15:41 | yanu has left IRC (yanu!~yanu@178-116-58-90.access.telenet.be, *.net *.split) | |
15:41 | zama has left IRC (zama!~zama@unaffiliated/stryx/x-3871776, *.net *.split) | |
15:41 | julienfayad has left IRC (julienfayad!~julienfay@46.19.196.171, *.net *.split) | |
15:41 | zamba has left IRC (zamba!marius@flage.org, *.net *.split) | |
15:41 | riddle has left IRC (riddle!riddle@us.yunix.net, *.net *.split) | |
15:41 | _longines has left IRC (_longines!~longines@static.183.80.201.138.clients.your-server.de, *.net *.split) | |
15:41 | vlt has left IRC (vlt!~nobody@lvps87-230-93-209.dedicated.hosteurope.de, *.net *.split) | |
15:51 | ltsp has joined IRC (ltsp!bot@ltsp.org) | |
16:03 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
16:23 | sutula has joined IRC (sutula!~sutula@207-118-160-47.dyn.centurytel.net) | |
16:32 | gp_alt has joined IRC (gp_alt!~gp@104-14-168-137.lightspeed.rcsntx.sbcglobal.net) | |
16:44 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
16:46 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
16:47 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Remote host closed the connection) | |
16:51 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
17:19 | ben_nabiy has left IRC (ben_nabiy!~bennabiy@unaffiliated/bennabiy, Quit: http://www.yellowdeli.com) | |
17:19 | julienfayad has left IRC (julienfayad!~julienfay@46.19.196.171, Ping timeout: 244 seconds) | |
17:21 | julienfayad has joined IRC (julienfayad!~julienfay@37.209.255.12) | |
17:21 | <julienfayad> and also wondering, when is the fstab line of the lts.conf file invoked ? When the client boots up or when the user logs in ?
| |
17:25 | Finally, if fstab is invoked after the user logs in, can I mention a user specific directory for the mount folder ?
| |
17:26 | Like something in /home/{username}/Documents/{NFS Share} ?
| |
17:31 | <vagrantc> julienfayad: FSTAB_* should be loaded at boot
| |
17:32 | <julienfayad> so no way to mount inside the /home/{username} directory
| |
17:32 | <vagrantc> julienfayad: so, the answer to your second question is "no, not any built-in feature of LTSP will do that"
| |
17:32 | <julienfayad> thanks vagrantc for the heads up
| |
17:32 | <vagrantc> you could write a hook for LDM to do that at login
| |
17:33 | <julienfayad> well that won’t cut it, since fstab would have been called already
| |
17:33 | so it would crash (because mountpoints need to be created before the mount command is called)
| |
17:33 | basically what comes to my mind now
| |
17:33 | is to do the following
| |
17:34 | <vagrantc> you could write a hook for LDM to do that at login
| |
17:34 | <julienfayad> you mean to invoke the mount command too ?
| |
17:34 | and then not using the fstab ?
| |
17:35 | <vagrantc> right
| |
17:35 | <julienfayad> well that would need much more work, as I’ll also need to pick the services to authorize on the clients
| |
17:35 | because adding the fstab in the lts.conf (with nfs mount type) automagically authorize nfs required services
| |
17:36 | refering to ltsp-client-core: /usr/share/ltsp/init-ltsp.d/50-rm-system-services
| |
17:36 | but what about doing it like that:
| |
17:36 | <vagrantc> init-ltsp.d is run very early in the boot process
| |
17:36 | <julienfayad> 1. Create the mount points in the ltsp server (I’m using pnp)
| |
17:37 | 2. add the mount instruction to these mount points in the fstab
| |
17:37 | 3. Invoke a LDM hook at login that would symlink these folders to the user Documents folder
| |
17:37 | would that work ?
| |
17:38 | <vagrantc> so, the filesystem is always mounted, and the user just has a symlink to their portion of it?
| |
17:38 | <julienfayad> well it will be mounted by fstab
| |
17:38 | * vagrantc is not impressed by the nuance | |
17:38 | <julienfayad> which I could customize per machine according to what I understood from how lts.conf works
| |
17:39 | <vagrantc> but yes, presuming you did it right, that could work
| |
17:39 | although i don't see why you don't just have the LDM hook do the right thing.
| |
17:39 | if you've already got to write a hook that handles a symlink, you may as well do everything there
| |
17:40 | <julienfayad> because that would mean an extra step (at least that’s how I perceive it)
| |
17:40 | yet I might end up doing a mix of both
| |
17:40 | I have some folders that are to be mounted for all clients
| |
17:40 | and some others that are specific
| |
17:40 | so i might use an LDM hook for these very specific mounts
| |
17:40 | any place where these LDM hooks are documented ?
| |
17:41 | <vagrantc> i don't see why the ldm hook can't handle all of the steps
| |
17:41 | <julienfayad> it could, but an extra step would be to enable the NFS required services one by one in the lts.conf file
| |
17:42 | <vagrantc> not really any documentation, no
| |
17:42 | <julienfayad> where are they would automatically be included from the moment I add at least one nfs mount in the fstab of the lts.conf file
| |
17:42 | which I find a bit more clean
| |
17:42 | (I know that might sound scilly though… :-) )
| |
17:42 | <vagrantc> but you can look at all the other ldm hooks in /usr/share/ldm/rc.d ... if my memory serves
| |
17:42 | <julienfayad> ok great
| |
17:43 | thanks vagrantc
| |
17:43 | as usual you’re always here to help, that’s greatly appreciated
| |
17:43 | vagrantc++
| |
17:43 | <vagrantc> there are multiple phases
| |
17:43 | <julienfayad> not documented neither ?
| |
17:43 | <vagrantc> so you probably need to case your code to only run in the appropriate phases
| |
17:46 | julienfayad: read ldm-script, which has some comments about the various phases
| |
17:47 | <julienfayad> where is it located ?
| |
17:48 | <vagrantc> dpkg -S ldm-script
| |
17:48 | <julienfayad> Thanks!
| |
18:13 | <alkisg> julienfayad: if you want to fool 50-rm-system-services to keep the nfs services, you can put FSTAB_KEEP_NFS_SERVICES="# nfs dummy entry" or something like that
| |
18:14 | Then with an LDM hook, as vagrantc says, you can run a mount command as root, right after the user authentication and before the user session is started
| |
18:14 | Btw, what will that mount command look like? Is it a per user, authenticated nfs mount?
| |
18:15 | julienfayad has left IRC (julienfayad!~julienfay@37.209.255.12, Quit: julienfayad) | |
18:19 | <maldridge> I was doing something similar with fat clients, to the best of my understanding, the mount is done by the machine with a machine identity, but then a user's identity is used to actually do anything with the mount
| |
18:21 | bennabiy has left IRC (bennabiy!~bennabiy@unaffiliated/bennabiy, Remote host closed the connection) | |
19:07 | Statler has left IRC (Statler!~Georg@p54BFB112.dip0.t-ipconnect.de, Remote host closed the connection) | |
19:26 | GodFather has left IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com, Quit: Ex-Chat) | |
19:26 | GodFather has joined IRC (GodFather!~rcc@96-35-101-212.dhcp.bycy.mi.charter.com) | |
19:32 | * vagrantc doubts the user's identity will work, because LDM doesn't really roperly configure the user locally | |
19:38 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
19:55 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
20:07 | gehidore is now known as alad | |
20:07 | alad is now known as man | |
20:07 | man is now known as gehidore | |
20:54 | adrianorg has left IRC (adrianorg!~adrianorg@179.187.26.94.dynamic.adsl.gvt.net.br, Ping timeout: 252 seconds) | |
20:55 | adrianorg has joined IRC (adrianorg!~adrianorg@177.132.218.44) | |
21:00 | Faith has left IRC (Faith!~paty_@unaffiliated/faith, Quit: Leaving) | |
21:01 | adrianorg has left IRC (adrianorg!~adrianorg@177.132.218.44, Ping timeout: 260 seconds) | |
21:02 | adrianorg has joined IRC (adrianorg!~adrianorg@189.58.182.103.dynamic.adsl.gvt.net.br) | |
21:38 | ben_roose has left IRC (ben_roose!~roose@roose.cs.wichita.edu, Remote host closed the connection) | |
22:06 | adrianorg has left IRC (adrianorg!~adrianorg@189.58.182.103.dynamic.adsl.gvt.net.br, Ping timeout: 260 seconds) | |
22:07 | adrianorg has joined IRC (adrianorg!~adrianorg@177.18.171.153) | |
22:53 | adrianorg has left IRC (adrianorg!~adrianorg@177.18.171.153, Ping timeout: 240 seconds) | |
23:00 | adrianorg has joined IRC (adrianorg!~adrianorg@177.134.58.220) | |
23:10 | julienfayad has joined IRC (julienfayad!~julienfay@94.187.113.127) | |
23:14 | <julienfayad> hi alkisg, the mount command would be something like mount -t nfs -o sec=krb5 server:/path /localpath
| |