IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 8 May 2019 (all times are UTC)
| 00:02 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
| 00:18 | GodFather has left IRC (GodFather!~rcc@143.59.184.72, Ping timeout: 246 seconds) | |
| 01:32 | nehemiah has joined IRC (nehemiah!~nehemiah@156.19.21.242) | |
| 02:57 | jgee4 has left IRC (jgee4!~jgee@190.159.118.121, Ping timeout: 248 seconds) | |
| 03:01 | jgee4 has joined IRC (jgee4!~jgee@190.159.118.121) | |
| 03:07 | jgee4 has left IRC (jgee4!~jgee@190.159.118.121, Ping timeout: 252 seconds) | |
| 03:11 | jgee4 has joined IRC (jgee4!~jgee@190.159.118.121) | |
| 03:15 | jgee4 has left IRC (jgee4!~jgee@190.159.118.121, Ping timeout: 252 seconds) | |
| 03:19 | jgee4 has joined IRC (jgee4!~jgee@190.159.118.121) | |
| 03:28 | jgee4 has left IRC (jgee4!~jgee@190.159.118.121, Ping timeout: 252 seconds) | |
| 04:11 | nehemiah has left IRC (nehemiah!~nehemiah@156.19.21.242, Ping timeout: 258 seconds) | |
| 04:25 | jgee4 has joined IRC (jgee4!~jgee@190.159.118.121) | |
| 04:27 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
| 04:32 | jgee4 has left IRC (jgee4!~jgee@190.159.118.121, Ping timeout: 252 seconds) | |
| 04:32 | nehemiah has joined IRC (nehemiah!~nehemiah@156.19.21.242) | |
| 04:34 | jgee4 has joined IRC (jgee4!~jgee@190.159.118.121) | |
| 04:41 | adrianorg has left IRC (adrianorg!~adrianorg@189.58.180.113.dynamic.adsl.gvt.net.br, Ping timeout: 252 seconds) | |
| 05:12 | adrianorg has joined IRC (adrianorg!~adrianorg@189.58.180.113.dynamic.adsl.gvt.net.br) | |
| 05:22 | woernie has joined IRC (woernie!~werner@p5B296A22.dip0.t-ipconnect.de) | |
| 05:34 | pppingme has left IRC (pppingme!~pppingme@unaffiliated/pppingme, Ping timeout: 250 seconds) | |
| 05:38 | vagrantc has left IRC (vagrantc!~vagrant@unaffiliated/vagrantc, Quit: leaving) | |
| 05:43 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 05:48 | woernie has left IRC (woernie!~werner@p5B296A22.dip0.t-ipconnect.de, Remote host closed the connection) | |
| 06:17 | SYS64738 has joined IRC (SYS64738!~jhonny5@159.213.93.166) | |
| 06:20 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3217:3b00:75de:36cf:bd8d:9150) | |
| 06:30 | kjackal has left IRC (kjackal!~quassel@2a02:587:3217:3b00:75de:36cf:bd8d:9150, Remote host closed the connection) | |
| 06:30 | kjackal has joined IRC (kjackal!~quassel@2a02:587:3217:3b00:75de:36cf:bd8d:9150) | |
| 06:33 | pppingme has joined IRC (pppingme!~pppingme@unaffiliated/pppingme) | |
| 06:38 | kjackal_v2 has joined IRC (kjackal_v2!~quassel@2a02:587:3204:1600:75de:36cf:bd8d:9150) | |
| 06:39 | kjackal has left IRC (kjackal!~quassel@2a02:587:3217:3b00:75de:36cf:bd8d:9150, Ping timeout: 258 seconds) | |
| 06:45 | kjackal_v2 has left IRC (kjackal_v2!~quassel@2a02:587:3204:1600:75de:36cf:bd8d:9150, Ping timeout: 258 seconds) | |
| 07:45 | woernie has joined IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de) | |
| 08:49 | statler has joined IRC (statler!~Georg@gwrz.lohn24.de) | |
| 10:31 | kjackal has joined IRC (kjackal!~quassel@2a02:587:311c:9d00:9d15:78a8:d703:6a71) | |
| 10:43 | GodFather has joined IRC (GodFather!~rcc@96-92-43-9-static.hfc.comcastbusiness.net) | |
| 10:53 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Remote host closed the connection) | |
| 11:56 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 12:01 | Faith has joined IRC (Faith!~Paty_@unaffiliated/faith) | |
| 12:11 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Quit: Leaving) | |
| 12:21 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
| 12:29 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Quit: Leaving) | |
| 12:34 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
| 12:55 | woernie has left IRC (woernie!~werner@p578bb7b6.dip0.t-ipconnect.de, Remote host closed the connection) | |
| 12:58 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Remote host closed the connection) | |
| 13:09 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
| 13:26 | copycat has joined IRC (copycat!bb953f00@gateway/web/freenode/ip.187.149.63.0) | |
| 13:27 | <copycat> hi good morning i have a question how can i make cups start on ltsp clients
| |
| 13:27 | cups wont start
| |
| 13:28 | <alkisg> copycat: cups usually runs, but the cups on the server is used
| |
| 13:28 | What's your goal? E.g. to share a printer on the client? From the server? Which one?
| |
| 13:29 | Also, is it a thin or a fat client?
| |
| 13:30 | Anyway, time to go, read these...
| |
| 13:30 | !printer
| |
| 13:30 | <ltsp> printer: Quick how-to: RCFILE_01="/usr/sbin/jetpipe /dev/usb/lp0 9100 &" in lts.conf, reboot client, then go to server's add printer dialog, and specify network printer → jetdirect → ltsp123.local
| |
| 13:30 | <copycat> i want to use and share a printer and is a fat client
| |
| 13:30 | <alkisg> !print
| |
| 13:30 | <ltsp> I do not know about 'print', but I do know about these similar topics: 'fatclient-printers', 'printer'
| |
| 13:30 | <alkisg> !fatclient-printers
| |
| 13:30 | <ltsp> fatclient-printers: You can publish printers on your network so that fat clients see them, by launching "system-config-printer" and selecting Server → Settings → Publish shared printers connected to this system
| |
| 13:31 | <copycat> thnks
| |
| 13:31 | <alkisg> I.e. the printer will be served by the server, so that it's easier to install drivers etc
| |
| 13:32 | np; later...
| |
| 14:01 | GodFather has left IRC (GodFather!~rcc@96-92-43-9-static.hfc.comcastbusiness.net, Ping timeout: 246 seconds) | |
| 14:21 | copycat has left IRC (copycat!bb953f00@gateway/web/freenode/ip.187.149.63.0, Ping timeout: 256 seconds) | |
| 14:42 | kjackal has left IRC (kjackal!~quassel@2a02:587:311c:9d00:9d15:78a8:d703:6a71, Remote host closed the connection) | |
| 14:46 | danboid has joined IRC (danboid!~ISDADS\sg@146.87.65.50) | |
| 14:47 | <danboid> I should be able to disable SSH password logins to our LTSP server yet still allow people to login to LTSP client machines with a password right?
| |
| 14:47 | <mwalters> my understanding is that LDM uses SSH to authenticate user logins
| |
| 14:48 | There might be a way to prevent "regular" SSH logins, but it's not immediately obvious to me
| |
| 14:48 | <danboid> Oh right. I wasn't sure how the two interoperated
| |
| 14:55 | So, I'm not sure what the optimum ssh config is then
| |
| 14:55 | I think what I want to do is use
| |
| 14:55 | <mwalters> awhat's your goal?
| |
| 14:56 | <danboid> Match Address 146.87.0.0/16
| |
| 14:56 | PasswordAuthentication yes
| |
| 14:56 | So that people on the LAN can login with a password
| |
| 14:56 | <mwalters> It should work that way "out of the box" on most distros
| |
| 14:56 | <danboid> but what do I set UsePAM to et
| |
| 14:58 | <mwalters> mine is "yes"
| |
| 14:59 | hold up... what's the goal? let people log into the clients via ssh?
| |
| 14:59 | or the server
| |
| 14:59 | <danboid> I'm trying to stop people logging onto our LTSP server using SSH passwords
| |
| 15:00 | keys only
| |
| 15:00 | <mwalters> I'm not certain that's possible
| |
| 15:00 | <danboid> but obvs we need to let users login with a password
| |
| 15:00 | <mwalters> without adjusting how people authenticate on the clients
| |
| 15:01 | <danboid> keys isn't goingto woprk for the clients
| |
| 15:01 | So the answer is no, an LTSP server must have SSH password login enabled then
| |
| 15:02 | alkisg, ^^4
| |
| 15:02 | <alkisg> danboid: eh, you can tell ldm to use keys; but this only makes sense if you someone already have them on the clients
| |
| 15:03 | *somehow
| |
| 15:03 | <danboid> alkisg, That sounds like a lot of work
| |
| 15:03 | <alkisg> For diskless clients, this doesn't make much sense, /home isn't there
| |
| 15:03 | <mwalters> can LDM access USB?
| |
| 15:03 | <alkisg> Unless your users carry a usb stick with them
| |
| 15:03 | <danboid> Yep, diskless clients
| |
| 15:03 | <mwalters> even in that scenario, I think you'd still want a passphrase depending on the environment
| |
| 15:04 | something you have (the usb key), something you know (a passphrase to decrypt the key?)
| |
| 15:05 | <alkisg> danboid: how were you planning to authenticate the users? how would you know it's one user and not another one?
| |
| 15:07 | <danboid> alkisg, The users all have passwords. I didn't know ldm was tied to SSH so I hoped to disabled SSH passwords, use keys for SSH and passwords for LTSP logins
| |
| 15:08 | <alkisg> I see. Well, ldm had to communicate the password to the server somehow; and ssh is one of the most safe ways to do that.
| |
| 15:08 | You can use listenaddress etc or iptables to limit access to lan, sure
| |
| 15:10 | <danboid> alkisg, Yes, I'll have to set up some firewall rules instead. Thanks!
| |
| 15:10 | <alkisg> np
| |
| 15:59 | danboid has left IRC (danboid!~ISDADS\sg@146.87.65.50, Remote host closed the connection) | |
| 16:08 | kjackal has joined IRC (kjackal!~quassel@2a02:587:311c:9d00:70ee:5f34:4c95:b67b) | |
| 16:25 | SYS64738 has left IRC (SYS64738!~jhonny5@159.213.93.166, Ping timeout: 244 seconds) | |
| 16:38 | ZAJDAN has left IRC (ZAJDAN!~zdenek@77.48.149.75, Quit: Konversation terminated!) | |
| 16:39 | ZAJDAN has joined IRC (ZAJDAN!~zdenek@77.48.149.75) | |
| 17:16 | adrianor1 has joined IRC (adrianor1!~adrianorg@187.113.219.107) | |
| 17:19 | adrianorg has left IRC (adrianorg!~adrianorg@189.58.180.113.dynamic.adsl.gvt.net.br, Ping timeout: 248 seconds) | |
| 17:57 | mgariepy has left IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy, Quit: Leaving) | |
| 17:58 | mgariepy has joined IRC (mgariepy!~mgariepy@ubuntu/member/mgariepy) | |
| 19:10 | <mwalters> I know this isn't ltsp specific, but how the hell do I trust a certificate on a client?
| |
| 19:11 | I've dropped the cert in /opt/ltsp/amd64/usr/share/ca-certificates and ran update-ca-certificates
| |
| 19:11 | (ran it from ltsp-chroom)
| |
| 19:11 | chroot, even
| |
| 19:12 | and updated the image
| |
| 19:14 | asdlfjkasdlkfj nvm
| |
| 19:43 | statler has left IRC (statler!~Georg@gwrz.lohn24.de, Remote host closed the connection) | |
| 20:01 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Remote host closed the connection) | |
| 20:13 | book` has left IRC (book`!~book`@68.ip-149-56-14.net, Ping timeout: 250 seconds) | |
| 20:15 | alkisg has left IRC (alkisg!~alkisg@ubuntu/member/alkisg, Ping timeout: 250 seconds) | |
| 20:15 | book` has joined IRC (book`!~book`@68.ip-149-56-14.net) | |
| 20:15 | alkisg has joined IRC (alkisg!~alkisg@ubuntu/member/alkisg) | |
| 20:20 | <mwalters> I guess there's no way to do it system wide, I need to modify everyone's nssdb by hand =/
| |
| 20:21 | ...which hilariously doesn't work with firefox... wasn't nss a mozilla project?
| |
| 20:28 | <quinox> artisinal certificates, installed by hand for the best performance - the craftmanship is overpowreing
| |
| 20:28 | <mwalters> organic, freerange, gluten free certificates
| |
| 20:29 | <quinox> seeing how MATE destroyed the homepage of both my Firefox and Chrome without me even using MATE I can only assume there must be fully automated way of adding more certs
| |
| 20:29 | <mwalters> I'm sure there is
| |
| 20:29 | but this is a problem for future mwalters
| |
| 20:29 | because now is the time to go get food and beer
| |
| 20:29 | * mwalters waves | |
| 20:29 | <quinox> excellent idea
| |
| 20:29 | cheers
| |
| 20:52 | Faith has left IRC (Faith!~Paty_@unaffiliated/faith, Quit: Leaving) | |
| 21:06 | vagrantc has joined IRC (vagrantc!~vagrant@unaffiliated/vagrantc) | |
| 21:29 | kjackal has left IRC (kjackal!~quassel@2a02:587:311c:9d00:70ee:5f34:4c95:b67b, Ping timeout: 258 seconds) | |