IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 2 November 2021 (all times are UTC)
| 01:28 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:21:21:0:100e, Quit: leaving) | |
| 01:28 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:21:21:0:100e, Quit: leaving) | |
| 07:15 | woernie has joined IRC (woernie!~werner@p5b296c2c.dip0.t-ipconnect.de) | |
| 07:15 | woernie has joined IRC (woernie!~werner@p5b296c2c.dip0.t-ipconnect.de) | |
| 07:48 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 07:48 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 12:20 | danboid has joined IRC (danboid!~dan@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net) | |
| 12:20 | danboid has joined IRC (danboid!~dan@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net) | |
| 12:22 | <danboid> In this samba/AD guide, the author puts a domain admin password in clear text into a file ('that only root can read')
| |
| 12:22 | https://github.com/ltsp/ltsp/wiki/LTSP-and-Samba-Windows-NT-Domain
| |
| 12:23 | Shouldn't that be fixable with something like mkpasswd or sha1pass?#
| |
| 12:23 | <alkisg> danboid: feel free to update the wiki; most authors usually create a page and then don't update it
| |
| 12:22 | <danboid> In this samba/AD guide, the author puts a domain admin password in clear text into a file ('that only root can read')
| |
| 12:22 | https://github.com/ltsp/ltsp/wiki/LTSP-and-Samba-Windows-NT-Domain
| |
| 12:23 | Shouldn't that be fixable with something like mkpasswd or sha1pass?#
| |
| 12:23 | <alkisg> danboid: feel free to update the wiki; most authors usually create a page and then don't update it
| |
| 12:23 | By collaboration, it can become better...
| |
| 12:23 | By collaboration, it can become better...
| |
| 12:28 | <danboid> I don't actually know the right solution here tbh
| |
| 12:28 | Maybe gpg can be used?
| |
| 12:28 | I don't actually know the right solution here tbh
| |
| 12:28 | Maybe gpg can be used?
| |
| 12:29 | but it needs to be decrtpted using a script some how
| |
| 12:29 | instead of having to manually enter a password
| |
| 12:31 | Another thing that ca be done is to make the script a hidden file in a hidden dir, that helps a little bit
| |
| 12:29 | but it needs to be decrtpted using a script some how
| |
| 12:29 | instead of having to manually enter a password
| |
| 12:31 | Another thing that ca be done is to make the script a hidden file in a hidden dir, that helps a little bit
| |
| 12:31 | I should look at how Ubuntu do it
| |
| 12:32 | Thety have AD support in the installer now
| |
| 12:31 | I should look at how Ubuntu do it
| |
| 12:32 | Thety have AD support in the installer now
| |
| 12:37 | alkisg, What do you use for auth on your LTSP network?
| |
| 12:37 | alkisg, What do you use for auth on your LTSP network?
| |
| 12:48 | <alkisg> Plain sshfs or sssd/ldap
| |
| 12:48 | <danboid> Yeah we need at least LDAP
| |
| 12:48 | <alkisg> Plain sshfs or sssd/ldap
| |
| 12:48 | <danboid> Yeah we need at least LDAP
| |
| 12:49 | Have you written a guide to setting up LTSP for sssd/ldap. What is sssd?
| |
| 12:50 | Samba single sign on?
| |
| 12:50 | I've found this but it looks quite involved
| |
| 12:50 | https://ubuntu.com/server/docs/samba-openldap-backend
| |
| 12:49 | Have you written a guide to setting up LTSP for sssd/ldap. What is sssd?
| |
| 12:50 | Samba single sign on?
| |
| 12:50 | I've found this but it looks quite involved
| |
| 12:50 | https://ubuntu.com/server/docs/samba-openldap-backend
| |
| 12:51 | <alkisg> sssd is the client part that does everything, even ad. It's also what Ubuntu uses
| |
| 12:51 | No I didn't write any how-tos
| |
| 12:52 | <danboid> Apparentky the proper way to deal with samba passwords is with smbldap-tools
| |
| 12:52 | <alkisg> There's also SSO with kerberus
| |
| 12:51 | sssd is the client part that does everything, even ad. It's also what Ubuntu uses
| |
| 12:51 | No I didn't write any how-tos
| |
| 12:52 | <danboid> Apparentky the proper way to deal with samba passwords is with smbldap-tools
| |
| 12:52 | <alkisg> There's also SSO with kerberus
| |
| 12:54 | <danboid> So do you think a lot of the steps in that previous link aren't required to do a half decent job of using AD with LTSP?
| |
| 12:54 | So do you think a lot of the steps in that previous link aren't required to do a half decent job of using AD with LTSP?
| |
| 12:59 | OK so this is probably more what we want:
| |
| 12:59 | https://c-nergy.be/blog/?p=16472
| |
| 12:59 | A guide to setting up sssd-ad
| |
| 12:59 | OK so this is probably more what we want:
| |
| 12:59 | https://c-nergy.be/blog/?p=16472
| |
| 12:59 | A guide to setting up sssd-ad
| |
| 13:04 | <alkisg> I haven't read that wiki page at all
| |
| 13:04 | I haven't read that wiki page at all
| |
| 13:13 | <danboid> Migt be worth us editing it ti say sssd-ad or sssd-ldap would be a more professional solution
| |
| 13:13 | Migt be worth us editing it ti say sssd-ad or sssd-ldap would be a more professional solution
| |
| 13:14 | More fully featured
| |
| 13:14 | Less hacky, whatever
| |
| 13:14 | More fully featured
| |
| 13:14 | Less hacky, whatever
| |
| 13:43 | Maybe not
| |
| 13:43 | https://c-nergy.be/blog/?p=16472
| |
| 13:43 | Maybe not
| |
| 13:43 | https://c-nergy.be/blog/?p=16472
| |
| 13:45 | That guide says you must configure the hostname and then join the machine to a domain. I don't see how that could work for a chrootless LTSP image where the hostname varies on each boot/machine
| |
| 13:45 | Maybe it can be used regardless?
| |
| 13:45 | That guide says you must configure the hostname and then join the machine to a domain. I don't see how that could work for a chrootless LTSP image where the hostname varies on each boot/machine
| |
| 13:45 | Maybe it can be used regardless?
| |
| 13:46 | alkisg, Why do you use sssd-ldap instead of openldap client?
| |
| 13:46 | alkisg, Why do you use sssd-ldap instead of openldap client?
| |
| 14:27 | <quinox> you can use whatever you want
| |
| 14:27 | this is all on top of LTSP, you can configure it any way you like
| |
| 14:27 | you can use whatever you want
| |
| 14:27 | this is all on top of LTSP, you can configure it any way you like
| |
| 14:30 | I myself use openldap client connecting to a linux LDAP server; I don't have AD, although you can connect openldap to AD LDAP just fine.
| |
| 14:30 | I myself use openldap client connecting to a linux LDAP server; I don't have AD, although you can connect openldap to AD LDAP just fine.
| |
| 14:32 | I once looked into Kerberos, it's definitely something on my wishlist but the complexity made me decide to postpone it for now
| |
| 14:32 | I once looked into Kerberos, it's definitely something on my wishlist but the complexity made me decide to postpone it for now
| |
| 14:36 | <alkisg> danboid: sssd also combines caching etc; and it makes installation/configuration much simpler
| |
| 14:36 | danboid: sssd also combines caching etc; and it makes installation/configuration much simpler
| |
| 14:37 | There are some discussions on github/ltsp about this as well. E.g. if joining ad requires saving some state, it can be stored on the server and copied to the appropriate dirs on ltsp boot
| |
| 14:38 | <danboid> Link please?
| |
| 14:37 | <alkisg> There are some discussions on github/ltsp about this as well. E.g. if joining ad requires saving some state, it can be stored on the server and copied to the appropriate dirs on ltsp boot
| |
| 14:38 | <danboid> Link please?
| |
| 14:42 | <alkisg> For sssd? They have some documentation in the ubuntu wiki about it
| |
| 14:42 | For sssd? They have some documentation in the ubuntu wiki about it
| |
| 14:44 | But it's really just an apt install and editing a little .conf file
| |
| 14:44 | But it's really just an apt install and editing a little .conf file
| |
| 14:47 | <danboid> The Ubuntu wiki guide for sssd-ad should work with LTSP's changing hostnames?
| |
| 14:48 | <alkisg> I didn't use the ad page; there was a page just for the sssd client part
| |
| 14:48 | It's been a year though, maybe they changed it
| |
| 14:47 | <danboid> The Ubuntu wiki guide for sssd-ad should work with LTSP's changing hostnames?
| |
| 14:48 | <alkisg> I didn't use the ad page; there was a page just for the sssd client part
| |
| 14:48 | It's been a year though, maybe they changed it
| |
| 15:28 | <vsuojanen> danboid look at sssd.io. it's redhat support or maintained good place for sssd.
| |
| 15:28 | danboid look at sssd.io. it's redhat support or maintained good place for sssd.
| |
| 16:49 | <danboid> Thanks!
| |
| 16:49 | Thanks!
| |
| 16:53 | danboid has left IRC (danboid!~dan@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Quit: Leaving) | |
| 16:53 | danboid has left IRC (danboid!~dan@cpc127016-macc4-2-0-cust104.1-3.cable.virginm.net, Quit: Leaving) | |
| 22:59 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
| 22:59 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |