IRC chat logs for #ltsp on irc.libera.chat (webchat)
Channel log from 18 November 2022 (all times are UTC)
| 00:41 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20, Quit: leaving) | |
| 01:00 | we6jbo has joined IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-0cbe-7ae7-5396-2554.res6.spectrum.com) | |
| 03:25 | we6jbo has left IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-0cbe-7ae7-5396-2554.res6.spectrum.com, Remote host closed the connection) | |
| 06:03 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20) | |
| 07:00 | woernie has joined IRC (woernie!~werner@p5b2962ea.dip0.t-ipconnect.de) | |
| 07:03 | ricotz has joined IRC (ricotz!~ricotz@ubuntu/member/ricotz) | |
| 08:10 | <NickolayZaytsev[> <alkisg> "Just create a session script, it..." <- I have spent a couple hours for searching for ‘lightdm custom session script’, but with no luck. There was only solutions for autologin or executing some extra scripts right after the user logged in. Can’t find any solution with customizing login screens.
| |
| 08:10 | I’m really new in Linux stuff and I don’t understand, how it will help me in my case. Maybe you have some example link in your bookmarks?
| |
| 08:10 | From the other side, I have tried to use a «libpam-google-authenticatior» without LTSP from the link, that you advised me before: https://www.digitalocean.com/community/tutorials/how-to-set-up-multi-factor-authentication-for-ssh-on-ubuntu-20-04. And it works in a proper way: the user now needs to fill extra field with validation code before his/her can be logged in.
| |
| 08:10 | But the problem comes up, when I try to add LTSP. In my case I wanna protect both: DM login screen and ssh login process. So if I add OTP PAM module to the /etc/pam.d/sshd in order to protect ssh connections on the host machine, DM login from thin client fails with error «Incorrect Login» with right password before the verification code field is expected to comes up.
| |
| 08:10 | My question is: Am I able to change login flow for ssh connections on host machine with adding extra PAM modules, or LTSP doesn’t expect that, because tries to establish ssh connection (ssh -X) with users login and pass?
| |
| 08:15 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:20, Quit: leaving) | |
| 08:38 | <alkisg> Nickolay Zaytsev: did you manually add the pam module?
| |
| 08:38 | Pastebin the contents of /etc/pam.d from a booted ltsp client
| |
| 08:40 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Ping timeout: 255 seconds) | |
| 08:59 | <NickolayZaytsev[> <alkisg> "Pastebin the contents of /etc/..." <- I haven't access to the ltsp client at the moment. I'll do it, when I'll come back home today.... (full message at <https://libera.ems.host/_matrix/media/v3/download/libera.chat/0c33229115a824093a9e7cebebd8e0a72659874f>)
| |
| 09:18 | <alkisg> The instructions from digitalocean are wrong. If you do things manually, then you should also do the ltsp modifications manually, as you're breaking pam-auth-update
| |
| 09:18 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 09:27 | <NickolayZaytsev[> <alkisg> "The instructions from digitaloce..." <- Ok. I'll try to dive into pam-auth-update, how it works
| |
| 10:43 | we6jbo has joined IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-3b42-50b3-a4e4-1694.res6.spectrum.com) | |
| 12:57 | we6jbo has left IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-3b42-50b3-a4e4-1694.res6.spectrum.com, Ping timeout: 260 seconds) | |
| 13:09 | we6jbo has joined IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-75f8-658a-b98f-71d1.res6.spectrum.com) | |
| 14:06 | Myrddin has joined IRC (Myrddin!~Myrddin@178.19.149.28) | |
| 14:08 | <Myrddin> Hello folks! I've a little problem with dhcp and pfsense... i can't push ipxe menu to pxe netboot client
| |
| 14:08 | ltsp works with isc dhcp server on ubuntu sever
| |
| 14:08 | but i would to configure pfsense
| |
| 14:09 | so: if i use isc the netboot client starts, loads ipxe menu then loads initrd and so on
| |
| 14:10 | if i use pfsense (and i give ltsp.ipxe in default boot rom) it hangs after brings ip
| |
| 14:10 | suggestion?
| |
| 14:40 | Myrddin has left IRC (Myrddin!~Myrddin@178.19.149.28, Ping timeout: 260 seconds) | |
| 14:44 | Myrddin has joined IRC (Myrddin!~Myrddin@178.19.149.28) | |
| 14:45 | <Myrddin> sorry i've been disconnected, any reply?
| |
| 15:17 | Johnn has joined IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com) | |
| 15:19 | <Johnn> Hello! Can someone explain to me the syntax of "ltsp image /,,/boot,subdir=boot,,/opt,subdir=opt". I'm having trouble understanding this. I tried "ltsp image /,,/home,subdir=home" because I have constructed my /home folder to reside in a separate partition on a separate harddrive /dev/sdb
| |
| 15:19 | Why do we use two commas in the arg string
| |
| 15:22 | <alkisg> Johnn: home isn't included in the image; it's accessed via sshfs
| |
| 15:23 | The documentation is in `man ltsp ipxe`, advanced image sources section; the two commands separate the mounts points, while the single comma separates the parameters
| |
| 15:25 | <Johnn> Great, thank you alkisg
| |
| 15:36 | Myrddin has left IRC (Myrddin!~Myrddin@178.19.149.28, Ping timeout: 260 seconds) | |
| 15:54 | Johnn has left IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com, Quit: Client closed) | |
| 16:00 | nrtriana[m] has left IRC (nrtriana[m]!~nrtrianam@2001:470:69fc:105::2:826c, Quit: You have been kicked for being idle) | |
| 16:28 | Johnn has joined IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com) | |
| 16:29 | <Johnn> Hi again. Anyone that has encountered issues with PXE booting? Tried on two computers now, enabling everything required for netbooting but I get an error message on both computers claiming "No Boot Filename Received"
| |
| 16:51 | <alkisg> Johnn: did you run ltsp dnsmasq?
| |
| 16:53 | Myrddin: search the ltsp discussions for pfsense
| |
| 16:54 | You can either use the default proxydhcp mode, without configuring pfsense at all, or do this: https://github.com/ltsp/ltsp/discussions/760#discussioncomment-3858807
| |
| 16:57 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Remote host closed the connection) | |
| 16:59 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 17:05 | we6jbo has left IRC (we6jbo!~we6jbo@2603-8001-5b43-4000-75f8-658a-b98f-71d1.res6.spectrum.com, Ping timeout: 256 seconds) | |
| 17:09 | Vercas69 has joined IRC (Vercas69!~Vercas@gateway/tor-sasl/vercas) | |
| 17:10 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Quit: Ping timeout (120 seconds)) | |
| 17:10 | Vercas69 is now known as Vercas6 | |
| 18:00 | vagrantc has joined IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:40) | |
| 18:08 | woernie has left IRC (woernie!~werner@p5b2962ea.dip0.t-ipconnect.de, Remote host closed the connection) | |
| 19:27 | Johnn has left IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com, Ping timeout: 260 seconds) | |
| 19:29 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Quit: Ping timeout (120 seconds)) | |
| 19:32 | Johnn has joined IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com) | |
| 19:37 | <Johnn> alkisg Sorry for my late response. Yes I did run dnsmasq, and in this scenario my network topology exists of a switch with one port used by my router connected to the internet, and one port used by ltsp server and one by a client machine.
| |
| 20:00 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 20:19 | <alkisg> Johnn: what's the output of this, on your ltsp server? ip a | nc termbin.com 9999
| |
| 20:19 | <Johnn> https://termbin.com/mwrwz
| |
| 20:20 | <alkisg> Johnn: and this: sudo /usr/lib/klibc/bin/ipconfig -n eno2 | nc termbin.com 9999
| |
| 20:21 | <Johnn> https://termbin.com/9460
| |
| 20:21 | <alkisg> And this: grep -r range= /etc/dnsmasq.d | nc termbin.com 9999
| |
| 20:21 | <Johnn> https://termbin.com/ko27
| |
| 20:22 | <alkisg> Looks OK; now run: sudo journalctl -fu dnsmasq
| |
| 20:23 | Then boot the client, then check if you actually see something in the dnsmasq output
| |
| 20:23 | Dec 15 13:26:10 alkis dnsmasq-dhcp[18229]: PXE(enp2s0) 74:d4:35:e9:cf:5a proxy
| |
| 20:23 | You should see something like that ^
| |
| 20:24 | <Johnn> No, I see no mention of PXE in the output
| |
| 20:24 | It ends with" Started dnsmasq - A lightweight DHCP and caching DNS server. "
| |
| 20:25 | <alkisg> Then either dnsmasq has some other misconfiguration unrelated to ltsp, or your router is mean and doesn't allow the dhcp requests and offers to be broadcasted
| |
| 20:25 | Do you have a switch handy?
| |
| 20:25 | <Johnn> I do have a switch yes
| |
| 20:25 | <alkisg> OK try to put router, server and client to the switch
| |
| 20:25 | <Johnn> My network topology consists of a router connected to a switch, that switch connects to server and client
| |
| 20:25 | <alkisg> And of course the router to the internet
| |
| 20:26 | Is that switch a cisco one?
| |
| 20:26 | <Johnn> It's a D-Link switch
| |
| 20:27 | <alkisg> Well everything seems in order yet it doesn't work :D
| |
| 20:27 | Do you have virtualbox installed?
| |
| 20:27 | Do test with a VM client first?
| |
| 20:27 | *to
| |
| 20:27 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Remote host closed the connection) | |
| 20:27 | <Johnn> I have not, I've never actually tried using a VM machine before.
| |
| 20:28 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 20:28 | <alkisg> Do you mind sharing your screen, to resolve this faster?
| |
| 20:28 | <Johnn> I'm on Ubuntu 22.04 if that makes a difference. Has LTSP been tested with latest Ubuntu?
| |
| 20:28 | <alkisg> Yes most schools here use ubuntu 22.04
| |
| 20:29 | If you boot the client with an operating system, can it access the internet?
| |
| 20:29 | <Johnn> Well, I have no way of testing right now as it only has a corporate Windows OS with a locked account. But I could always try launching Ubuntu in live mode to see
| |
| 20:30 | I'll get on it in parallell
| |
| 20:30 | <alkisg> If you don't mind sharing your screen, we could also test with a virtualbox VM client
| |
| 20:30 | (or you can do it yourself, it's not hard...)
| |
| 20:32 | <Johnn> I'm not comfortable sharing my screen. But I can try setting that up, any hint as to where to start?
| |
| 20:32 | <alkisg> You download and install virtualbox from there: https://www.virtualbox.org/wiki/Linux_Downloads
| |
| 20:33 | Then you create a VM with bridged networking to eno2, and then you boot it with boot.ipxe.org/ipxe.iso
| |
| 20:37 | Ah another test you could do is to connect the client directly to eno3 (another NIC), and set the IP of eno3 to 192.168.67.1
| |
| 20:37 | Then the ltsp server itself plays the role of the dhcp server
| |
| 20:39 | <Johnn> Okay that is a good thing I can try, then I will have to run `ltsp dnsmasq --proxy-dhcp=0` and `ltsp image /` again correct?
| |
| 20:39 | <alkisg> No, neither
| |
| 20:40 | Btw run a `find /etc/dnsmasq.d/` to make sure you only have ltsp-dnsmasq.conf there, and no other files from network-manager or libvirt that confuse dnsmasq
| |
| 20:40 | oh207 has joined IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net) | |
| 20:41 | <Johnn> There's only one file yeah
| |
| 20:56 | I have confirmed the computer had access when connected to internet. Does `sudo ip addr add 192.168.67.1/24 dev eno3`set the IP adress to a static one?
| |
| 20:59 | <alkisg> No, that's a temporary one; don't you have network-manager to set up a static one?
| |
| 20:59 | <Johnn> Working without GUI at the moment
| |
| 21:00 | <alkisg> What are you using, network-manager, netplan, systemd-networkd, ifupdown?
| |
| 21:00 | Ah, do you have UFW running? If so stop it
| |
| 21:00 | (the firewall)
| |
| 21:01 | <Johnn> I will shut down UFW ok
| |
| 21:01 | I have netplan accessible, comes with Ubuntu I guess
| |
| 21:02 | <alkisg> So I guess systemd-networkd underneath
| |
| 21:02 | OK just try your initial configuration without ufw
| |
| 21:02 | <Johnn> Ok
| |
| 21:02 | <alkisg> If you had ufw running, it probably caused the issues we saw
| |
| 21:03 | <Johnn> It works!!
| |
| 21:04 | Wow. I suppose this was because I was preparing to allow SSH connection from internet for me to maintain the server later remote. So I guess in setting that up I enabled it if it wasn't already enabled on startup
| |
| 21:05 | How do you secure your servers without UFW? Seems like it's dangerous to leave it out in the open?
| |
| 21:07 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Remote host closed the connection) | |
| 21:12 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 21:14 | <alkisg> You can block external traffic without blocking lan traffic
| |
| 21:26 | oh207 has left IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net, Quit: Konversation terminated!) | |
| 21:27 | oh207 has joined IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net) | |
| 21:35 | Johnn has left IRC (Johnn!~Johnn@46-162-67-128.cust.bredband2.com, Ping timeout: 260 seconds) | |
| 21:39 | vagrantc has left IRC (vagrantc!~vagrant@2600:3c01:e000:21:7:77:0:40, Quit: leaving) | |
| 22:29 | oh207 has left IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net, Quit: Konversation terminated!) | |
| 22:29 | oh207 has joined IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net) | |
| 22:41 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Ping timeout: 255 seconds) | |
| 22:45 | ricotz has left IRC (ricotz!~ricotz@ubuntu/member/ricotz, Quit: Leaving) | |
| 22:50 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 22:50 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Remote host closed the connection) | |
| 22:53 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 23:03 | Vercas6 has left IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas, Ping timeout: 255 seconds) | |
| 23:05 | Vercas6 has joined IRC (Vercas6!~Vercas@gateway/tor-sasl/vercas) | |
| 23:28 | oh207 has left IRC (oh207!~oh207@pool-72-69-11-48.nycmny.fios.verizon.net, Ping timeout: 248 seconds) | |