On Wed, Jan 08, 2014 at 01:57:01PM -0600, Luis A. Guzmán García wrote:
> El mar, 07-01-2014 a las 23:42 -0800, Vagrant Cascadian escribió:
> > On Wed, Jan 08, 2014 at 12:29:32AM -0600, Luis A. Guzmán García wrote:
> So, to be clear. If i understand correctly, 
> If i set a bunch of users and passwds inside the subnet range (on
> lts.conf), LDM will pick randomly to start a session with that user and
> password.

DHCP will give a random or semi-random IP address within that range, and LDM
will use an account based on the IP address given.

 
> > Then create the users, copy the keys into place, lock down the key files 
> > (edit
> > ARCH and TYPE at least):
> > 
> >   pubkey=/opt/ltsp/ARCH/root/.ssh/id_TYPE.pub
> >   auth_keys_dir=/var/lib/custom/authorized_keys/
> >   for u in $(seq 20 250); do
> >       u="ltsp${u}"
> >       key=${auth_keys_dir}/${u}
> >       adduser --disabled-password --no-create-home  --gecos ,,, ${u}
> >       cp ${pubkey} ${key}
> >       chown root:${u} ${key}
> >       chmod 0640 ${key}
> >   done
>     ^                         ^
>     ^ Where should i put this ^, as shell script, chroot, lts.conf, 
> common-auth?

It's a script to be run from the server. adjust the "seq" line for your ip
address ranges, or anything else appropriate to your configuration. It assumes
each user has their own group with the same groupname as the username. I also
use a slightly more complicated setup which restricts which IP address each
login can come from, since it's a shared ssh key.


> > There are many other details of things you *could* try, but that's the basic
> > configuration that's worked reasonably well for me.
> > 
> Lastly how do you/the user handle saving the files or data achieved
> while using the client before that session is over?

They don't, in fact, we wipe them out completely on each login with another LDM
hook. They're basically kiosks with a full desktop.

For data persistance, we have accounts that are set up with passwords, and use
the guestlogin feature rather than autologin. Users with accounts type in their
username/password, and users without accounts get a temporary login clicking on
the "Login as Guest" button.


live well,
  vagrant

Attachment: signature.asc
Description: Digital signature

------------------------------------------------------------------------------
CenturyLink Cloud: The Leader in Enterprise Cloud Services.
Learn Why More Businesses Are Choosing CenturyLink Cloud For
Critical Workloads, Development Environments & Everything In Between.
Get a Quote or Start a Free Trial Today. 
http://pubads.g.doubleclick.net/gampad/clk?id=119420431&iu=/4140/ostg.clktrk
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to