What I currently do is to have a admin account for each group that I have on the server. Say for instance teachers, grades 1-3, grades 4-6 etc. Say for instance I need to deploy a application to the teachers. I login to the teachers account and put a icon on that desktop. I then run a deploy script if I want it to show immediately. The deploy script copies over the .kde directory and the .mozilla directory in each teachers home directory. This also occurs once a day for all groups at midnight as scheduled by a cron job. Even if a student has messed with a setting this stuff will revert back at midnight. If I want to refresh all desktop settings for a group I run the deploy script and it will revert everyone right back immediately.
I do not run LTSP but my environment is thin client and nearly the same. I would see no reason that it would not work the same under a LTSP deployment. Cliff Baeseman Greenheck Fan Corporation Linux Systems Administrator -----Original Message----- From: Simon Haynes To: [EMAIL PROTECTED] Sent: 12/18/03 7:36 PM Subject: [Ltsp-discuss] Locking down terminals I've been trying to find an elegant solution to this, and I think it's time I asked for help :-) The LTSP setup is in a primary school, and I need to lock down the terminals so the kids can't change anything at all. I've practically memorised the kiosk guide and the Linux Magazine article here (http://www.linux-mag.com/2002-11/kde_01.html), but neither seem to discuss the setup I'm after. First, I've set up 16 users called ws001 to ws016. These represent terminals, and the names and ip numbers are in /etc/hosts. I've enabled the autologin, so when a terminal is switched on it gets a username from its DHCP-supplied IP address, and goes straight to the desktop. So far, so good. (If they log out they get a kdm screen listing ws001 to ws016, but I'll sort that out later) I've set up a user called ws000, and my goal is to be able to use this one to edit settings. I've tried all kinds of trickery with $KDEHOME and creating softlinks from $HOME/.kde/shared/config to /home/kde-shared/config and softlinks from kdeglobals etc etc. Is there a simple way? The Linux Magazine article talks about mounting KDEHOME on an NFS share, but that's not going to work for local terminals. I could duplicate the whole KDE path in a shared location, but that's overkill. What I must avoid is hand-editing config files in each of 16 user folders ;-) I've written a script which adds new users and duplicates/renames the ws000 folder for them (preserving all settings) I had this all set up at one stage, by using [$i] here and there, by hiding all the menu items, but suddenly 15 of the terminals are displaying the full KDE menu again, while one of them (ws016) shows the limited set I want. I deleted the ws015 home folder and copied the ws016 over, and ws015 STILL shows the full menu set! That's where I'm stuck, because that really makes no sense to me. If anyone has a guide, or a 'this is what I did', that would be really helpful. I need to lock out everything if possible, from Konqueror to desktop editing, etc. etc. Cheers Simon ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net