00:50 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
01:10 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20, Quit: leaving) | |
05:36 | adrianorg has left IRC (adrianorg!~adrianorg@debian/adrianorg, Ping timeout: 250 seconds) | |
05:37 | adrianorg has joined IRC (adrianorg!~adrianorg@debian/adrianorg) | |
08:00 | jgee6 has left IRC (jgee6!~jgee@186.80.49.20, Ping timeout: 240 seconds) | |
08:05 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
08:17 | RolandStiebel[m] has joined IRC (RolandStiebel[m]!~stiebelma@2001:470:69fc:105::1:b67e) | |
08:42 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Ping timeout: 256 seconds) | |
08:48 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
09:35 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Ping timeout: 256 seconds) | |
09:43 | <RolandStiebel[m]> Hello there,... (full message at https://libera.ems.host/_matrix/media/r0/download/libera.chat/69e828d364f0617d1fc2b6c7605ded2c3d8c46ed)
| |
09:43 | Roland
| |
09:43 | * Hello there,... (full message at https://libera.ems.host/_matrix/media/r0/download/libera.chat/3c4f6a6f9f9c3e0bada8b6a655f6a4c46abbd411)
| |
09:49 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
09:49 | <alkisg> Hi Roland, I'll be able to answer in one hour if you can be online then
| |
10:41 | <RolandStiebel[m]> Hi Alkisg, I can be online, but not permanently present... I would be glad if we could try it nevertheless.
| |
10:49 | <alkisg> Roland Stiebel: regarding user management, you can go for openldap + ldap account manager, if you prefer that route
| |
10:50 | Another option is to use "ltsp manager". In Greece we're using "sch-scripts" for school management, and it has nice dialogs for csv import and for mass account creation, shared folders per group etc
| |
10:51 | A few years ago we internationalized an older version of it under the name of "ltsp-manager". Unfortunately the i18n version didn't gain much traction so we abandoned it, but it should still be very usable as a user manager for schools
| |
10:51 | In that scenario, there's no ldap involved, i.e. it's simpler
| |
10:52 | > When setting up the ltsp in a classroom, just like I did, the dhcp request goes “downstairs” to the opnsense, getting an ip address 10.3.x.x, but the ltsp-server does not give dhcpProxy information.
| |
10:53 | Can't you ask the network admin to avoid blocking proxydhcp in that switch?
| |
10:54 | The ltsp server can go to 10.3.x to be in the same subnet with the clients; you may even use it as a teacher computer
| |
10:54 | E.g. you could name each classroom "teacher pc" to be the "ltsp server for that classroom", which would result in a super simple setup
| |
10:56 | From what I understood, your clients already have windows on them. Which means you can install win32-loader, which then can load ipxe with an additional ipxe.pxe menu file, that will contain all the necessary information to reach the ltsp server. That's another option.
| |
12:04 | <RolandStiebel[m]> ltsp manager for user management sounds good. I will try this once ltsp is running
| |
12:05 | <alkisg> Roland Stiebel: the Greek documentation for the ltsp-manager (=sch-scripts) user creation functionality is there: https://ts.sch.gr/docs/linux/ltsp/users/
| |
12:05 | You can use google translate on that, and decide which scheme suits you best
| |
12:06 | <RolandStiebel[m]> great. thank you
| |
12:07 | > Can't you ask the network admin to avoid blocking proxydhcp in that switch?
| |
12:07 | no. for the next week I am the network administrator ;-)
| |
12:08 | s///
| |
12:08 | * > Can't you ask the network admin to avoid blocking proxydhcp in that switch?
| |
12:08 | no. for the next week I am the network administrator ;-)
| |
12:09 | so: yes, I will try to figure out what to change on that hp-machine
| |
12:09 | <alkisg> Roland Stiebel: what timezone are you in? Maybe you can ping me when you're in the lab, so that I can have a quick look
| |
12:10 | E.g. to watch the dnsmasq logs and see if the client dhcp requests reach the ltsp server or not
| |
12:11 | <RolandStiebel[m]> Germany, so 1 hour behind Greece
| |
12:13 | <alkisg> OK great. There's also debian-edu which supports ltsp if you prefer, but I haven't used it personally
| |
12:14 | They target larger schools with dedicated sysadmins, while in our solution we think the IT teacher is enough to maintain it
| |
12:14 | <RolandStiebel[m]> >From what I understood, your clients already have windows on them. Which means you can install win32-loader, which then can load ipxe with an additional ipxe.pxe menu file, that will contain all the necessary information to reach the ltsp server. That's another option.
| |
12:14 | That is right, but the windows PCs are manged by a windows server which I intend to switch off. Once this is done, they do not work anymore. But I could use ipxe-usb for testing
| |
12:15 | * > From what I understood, your clients already have windows on them. Which means you can install win32-loader, which then can load ipxe with an additional ipxe.pxe menu file, that will contain all the necessary information to reach the ltsp server. That's another option.
| |
12:15 | That is right, but the windows PCs are manged by a windows server which I intend to switch off. Once this is done, they do not work anymore. But I could use ipxe-usb for testing
| |
12:16 | <alkisg> I mean, if they have disks, you can put ipxe there
| |
12:16 | Powering off the windows server won't affect that
| |
12:16 | <RolandStiebel[m]> true
| |
12:17 | If I "get my school back" I will write ipxe onto the ssd and use the ssd as well, but for the testing time I should not alter the disks at all.
| |
12:18 | modifying the bios to boot from pxe first ist the best option for me
| |
12:18 | <alkisg> win32loader.exe is a windows app, that can be uninstalled from the control panel, but np, whatever suits you
| |
12:18 | Sure, if you can configure the switch that's the quickest and bestest option
| |
12:19 | <RolandStiebel[m]> Could you think of a "magic word" I have to look for at the switch?
| |
12:19 | <alkisg> You can also try to bring a small switch from home, to see if it works when you put your server and a client on that switch and before the hp switch; just for easier troubleshooting
| |
12:19 | Both your server and your clients were in the classroom, in the hp switch, right?
| |
12:20 | Is there a dedicated port for servers, on a separate vlan etc?
| |
12:20 | <RolandStiebel[m]> > Both your server and your clients were in the classroom, in the hp switch, right?
| |
12:21 | yes
| |
12:21 | next to each other, I took one PC to install ubuntu / ltsp
| |
12:21 | >Is there a dedicated port for servers, on a separate vlan etc?
| |
12:21 | <alkisg> And you did run `ltsp dnsmasq`
| |
12:22 | <RolandStiebel[m]> possible yes
| |
12:22 | <alkisg> If it was a "classroom pc" that you re-purposed as a server, then it wouldn't be in a dedicated port with a different vlan
| |
12:22 | <RolandStiebel[m]> true
| |
12:23 | <alkisg> Try to indeed bring a small switch with you, to make sure it works that way, so that you're 100% sure the issue is with the hp switch
| |
12:23 | <RolandStiebel[m]> ok, I will do that
| |
12:24 | unfortunatly there are two floors in between... So I have to carry some PCs to the server room...
| |
12:24 | <alkisg> So the small switch will get the server, a client, and an uplink to the hp switch
| |
12:24 | Wait, why do you need to leave the classroom, you moved the ltsp server to the server room?
| |
12:25 | <RolandStiebel[m]> sorry, there is a missunderstanding
| |
12:26 | I used one of the pcs as a ltsp server and the next one as a pxe client.
| |
12:26 | But the dhcp is offered from the opnsense in the server room
| |
12:26 | for both pcs
| |
12:26 | <alkisg> That shouldn't be an issue though
| |
12:26 | But why would you need to move a pc to the server room?
| |
12:27 | <RolandStiebel[m]> I think I do not understand where to put the switch
| |
12:27 | <alkisg> dhcp server <=> whatever <=> hp switch <=> small switch <=> ltsp client and server
| |
12:28 | So the small switch will have 3 cables: ltsp server, ltsp client, and uplink to the hp switch
| |
12:29 | <RolandStiebel[m]> ok, I see. Well this is done like this. there are two hp switches. One in the classroom, which works even if the optic fiber is plugged off and one connecting all the optic fibers from the different floors in the server room
| |
12:30 | The "gateway" option is done in the server-room-switch
| |
12:32 | <alkisg> A DHCP client broadcasts a DHCP request. A DHCP server broadcasts the answer, since the client doesn't yet have an IP. Dnsmasq sees the reply and answers "hey, I have a boot filename for you".
| |
12:32 | Which part do you think blocks the broadcast? I think a local small switch will tell us.
| |
12:33 | Anyway nap time, back in a couple of hours :)
| |
12:38 | <RolandStiebel[m]> thank you!
| |
14:35 | woernie has joined IRC (woernie!~werner@2001:9e8:e247:300:412:8bd:4652:267b) | |
14:54 | <alkisg> (back)
| |
16:54 | <RolandStiebel[m]> I will test all this stuff on monday. where do i find the dnsmask logs
| |
16:55 | and... if I just set the dhcp to give nextserver and filenma information, how do I switch off dnsmask completely?
| |
16:57 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
18:16 | <alkisg> Roland Stiebel: the command is `ltsp dnsmasq -r0 -p0`, but it's not a single filename anymore; it needs at least 4 filenames, for bios, uefi, ipxe and raspberry pi clients
| |
18:16 | So there's an "if / then" login involved, see the dnsmasq contents for details, or https://ltsp.org/advanced/isc-dhcp-server/
| |
20:38 | woernie has left IRC (woernie!~werner@2001:9e8:e247:300:412:8bd:4652:267b, Ping timeout: 250 seconds) | |
20:39 | woernie has joined IRC (woernie!~werner@230-240-142-46.pool.kielnet.net) | |
20:53 | bluejaypop has joined IRC (bluejaypop!~7f000001@user/josefig) | |
20:53 | bluejaypop has left IRC (bluejaypop!~7f000001@user/josefig) | |
20:53 | woernie has left IRC (woernie!~werner@230-240-142-46.pool.kielnet.net, Remote host closed the connection) | |
22:22 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
23:04 | jgee6 has joined IRC (jgee6!~jgee@186.80.49.20) | |