[Bug 1453] New: unable to use custom xorg.conf in lts.conf

2010-05-12 Thread drift
http://bugs.skolelinux.org/show_bug.cgi?id=1453

   Summary: unable to use custom xorg.conf in lts.conf
   Product: Skolelinux
   Version: lenny-rc2
  Platform: All
OS/Version: Linux
Status: NEW
  Severity: normal
  Priority: P3
 Component: Configuration
AssignedTo: debian-edu@lists.debian.org
ReportedBy: sno...@jens1.no


created a xorg.conf in /opt/ltsp/i386/etc/X11/xorg.custom.conf

added in /opt/ltsp/i386/etc/lts.conf
[00:00:00:00:00:00]
   X_CONF = /etc/X11/xorg.custom.conf

But then client use the default /etc/X11/xorg.conf and no automatic
configuration


-- 
Configure bugmail: http://bugs.skolelinux.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/bug-1453...@http.bugs.skolelinux.org/



[Bug 1453] unable to use custom xorg.conf in lts.conf

2010-05-12 Thread drift
http://bugs.skolelinux.org/show_bug.cgi?id=1453





--- Comment #1 from Snorre Jensen sno...@jens1.no  2010-05-12 12:09:00 ---
edited /opt/ltsp/i386/usr/share/ltsp/ltsp-init-common
and replaced configure_x section with this:

configure_x() {
if boolean_is_true $CONFIGURE_X ; then
${CONFIGURE_X_COMMAND:-/usr/share/ltsp/configure-x.sh}
else
if [ -n ${X_CONF} ]  [ -f ${X_CONF} ]; then
echo Using customized xorg.conf
cp -v ${X_CONF} /etc/X11/xorg.conf
fi
fi
}

and now its working as expected :)
I don't know if it is the right way to fix this, but its working


-- 
Configure bugmail: http://bugs.skolelinux.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1oc8s9-00070q...@maintainer.skolelinux.no



Re: java applications on thinclients don't work smoothly

2010-05-12 Thread Philipp Huebner
Hi,


On 10.05.2010 23:54, Jonas Smedegaard wrote:
 On Fri, May 07, 2010 at 04:57:53PM +0200, Philipp Huebner wrote:
 
 Running java apps like
 http://phet.colorado.edu/simulations/sims.php?sim=Circuit_Construction_Kit_DC_Only


 on thinclients is a pain. It's so not performing at all, dragging
 objections or having animations running is worse than slow motion.

 It didn't matter which xserver I used - vesa, via, nv - they behaved
 all the same.

 Now the joke comes: using the thinclient as a diskless workstation
 makes the java app run perfectly smooth, but because it's a real
 thinclient and hence low on performance, the boot process took very
 long, apps took very long to show up, and playing youtube didn't
 nearly work fluently.
 
 Most likely this is related to use (or not) of shared memory (MIT-SHM). 
 As an example, Direct Rendering Interface (DRI) requires shared memory
 as I understand it.
 
 Diskless clients by design do not share memory. I suspect that you might
 get comparable speeds on lowfat clients even with locally executed
 applications, if you can tell them to disable use of MIT-SHM.
 
 For GTK applications like the Gimp you will pass the option --no-shm. 
 There are probably similar options for Qt-based applications.

Now you got me confused. Or maybe I got you confused first.

In my case Diskless workstations are slow because the hardware has only
little power.
As Thinclients they work fast, only certain pieces of software like
lazarus or java apps where bitmaps are moved around get stuck and
literally jump from the start to the end position - no smooth movement
possible.

At least for the java part I got a working solution:
http://lists.debian.org/debian-java/2010/05/msg00020.html


 P.S.
 
 It helps responding accurately if you more clearly emphasize what are
 the questions you raise, without wrapping them that much in complaints
 or frustrations of your experiences.

You're right, sorry. I wanted to describe the situation and didn't
notice it sounded rather whiny than objective.


Regards,
-- 
 .''`.   Philipp Huebner debala...@debian.org
: :'  :  pgp fp: 6719 25C5 B8CD E74A 5225  3DF9 E5CA 8C49 25E4 205F
`. `'`   HP: http://www.debalance.de, Skype: philipp-huebner
  `- ICQ: 235-524-440, Jabber: der_scha...@jabber.org



signature.asc
Description: OpenPGP digital signature


[Bug 1453] unable to use custom xorg.conf in lts.conf

2010-05-12 Thread drift
http://bugs.skolelinux.org/show_bug.cgi?id=1453


Philipp Huebner debala...@debian.org changed:

   What|Removed |Added

 CC||debala...@debian.org




--- Comment #2 from Philipp Huebner debala...@debian.org  2010-05-12 12:31:35 
---
Hi,

I can not confirm this bug.
I've been using that feature without any additional hacks.


-- 
Configure bugmail: http://bugs.skolelinux.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1oc9dz-0008ch...@maintainer.skolelinux.no



Re: java applications on thinclients don't work smoothly

2010-05-12 Thread Jonas Smedegaard

On Wed, May 12, 2010 at 12:43:41PM +0200, Philipp Huebner wrote:


On 10.05.2010 23:54, Jonas Smedegaard wrote:

On Fri, May 07, 2010 at 04:57:53PM +0200, Philipp Huebner wrote:


Running java apps like
http://phet.colorado.edu/simulations/sims.php?sim=Circuit_Construction_Kit_DC_Only


on thinclients is a pain.


[snip]


Most likely this is related to use (or not) of shared memory (MIT-SHM).


[snip]


Now you got me confused. Or maybe I got you confused first.

In my case Diskless workstations are slow because the hardware has only 
little power.

As Thinclients they work fast, only certain pieces of software like
lazarus or java apps where bitmaps are moved around get stuck and
literally jump from the start to the end position - no smooth movement
possible.

At least for the java part I got a working solution:
http://lists.debian.org/debian-java/2010/05/msg00020.html



P.S.

It helps responding accurately if you more clearly emphasize what are 
the questions you raise, without wrapping them that much in 
complaints or frustrations of your experiences.


You're right, sorry. I wanted to describe the situation and didn't 
notice it sounded rather whiny than objective.


Well, if you were simply describing a situation, not asking any 
questions, then no wonder my response is confusing.



 - Jonas

--
* Jonas Smedegaard - idealist  Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private


signature.asc
Description: Digital signature


Re: java applications on thinclients don't work smoothly

2010-05-12 Thread Philipp Huebner
Hi,

On 12.05.2010 12:57, Jonas Smedegaard wrote:
 Well, if you were simply describing a situation, not asking any
 questions, then no wonder my response is confusing.

the clear and exact question should have been: how can I improve the
problematic (java) behaviour when using ThinClients ?


Regards,
-- 
 .''`.   Philipp Huebner debala...@debian.org
: :'  :  pgp fp: 6719 25C5 B8CD E74A 5225  3DF9 E5CA 8C49 25E4 205F
`. `'`   HP: http://www.debalance.de, Skype: philipp-huebner
  `- ICQ: 235-524-440, Jabber: der_scha...@jabber.org



signature.asc
Description: OpenPGP digital signature


[Bug 1453] unable to use custom xorg.conf in lts.conf

2010-05-12 Thread drift
http://bugs.skolelinux.org/show_bug.cgi?id=1453





--- Comment #3 from Philipp Huebner debala...@debian.org  2010-05-12 14:51:04 
---
(In reply to comment #2)
 Hi,
 
 I can not confirm this bug.
 I've been using that feature without any additional hacks.
 

Forget that comment. I had forgotten that I previously upgraded the chroot to
squeeze.
At least I can say it's fixed in squeeze ;)


-- 
Configure bugmail: http://bugs.skolelinux.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are watching all bug changes.


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/e1ocboz-0006tq...@maintainer.skolelinux.no



password synchronization

2010-05-12 Thread Andreas B. Mundt
Hi Veli-Matti,

On Wed, May 05, 2010 at 04:41:41PM +0300, Veli-Matti Lintu wrote:
 ma, 2010-05-03 kello 21:47 +0200, Andreas B. Mundt kirjoitti:
 
  The critical point in using kerberos is the synchronization
  i.e. integration of all passwords: posix, samba and kerberos.
[...]
 We've been figuring out for a while what to do with this syncing problem
 and we just finished smbkrb5pwd for MIT kerberos. Its implementation
 differs from smbk5pwd for Heimdal, but the idea is to sync all the
 passwords at once when ldap password is changed. This is the first
 version and it still needs work, but if you are interested testing it,
 here are instructions on how to use it:
 
 http://www.opinsys.fi/en/smbkrb5pwd-password-syncing-for-openldap-mit-kerberos-and-samba
 
 smbkrb5pwd does not alter the kerberos ldap entries directly, but
 connects kadmind to do the work. This has pros and cons, but for us it
 seems to work nicely in test environments. The testing has been done on
 Ubuntu 10.04, but I cannot see why it wouldn't work in Debian also.

Many thanks for these links. I am currently investigating pros and
cons of the various methods used to achive synchronized passwords.
Do you know of any activities to get this package into mainline
Ubuntu/Debian?

Regards,

Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100512142204.ga7...@flashgordon



Re: [GOsa] gosa and debian-edu/skolelinux

2010-05-12 Thread Andreas B. Mundt
Hi Benoit,

On Tue, May 11, 2010 at 10:17:16PM +0200, Benoit Mortier wrote:
 Le Tuesday 11 May 2010 13:45:44 Andreas B. Mundt, vous avez écrit :

  Is there news concerning that issue?
 
 Yes i'am the one finishing the package in Debian 3.0 format, with all the 
 latest change and triggers ;-)
 
 Will be ready for end of the week, or maybe sooner ... depending on my 
 head and 3.0 version packaging ;-)
 
  Benoit, to test gosa some more, we need the package(s) in the debian
  repository. I committed most (some polishing might be needed) that is
  needed to use gosa in debian-edu-squeeze to debian-edu-config. As soon
  as the gosa package is available in testing people can start to have a
  closer look and test, criticize and flame or celebrate and give their
  ok to keep going on in that direction.
 
 Great will hurry to finish it.
 
  Can you give an estimate how long this may take? (We could start with
  something in experimental too if that helps. Perhaps it makes sense to
  have even non-perfect packages in the repositories anyway, to test
  some more and fix remaining bugs in the meantime).
 
 I promise i will be finished and ready to upload no later than friday
 

That sounds all great! Many thanks in advance. I am looking forward to
include and test your work. :)

Best regards,

 Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100512142848.gb7...@flashgordon



Re: password synchronization

2010-05-12 Thread Veli-Matti Lintu
ke, 2010-05-12 kello 16:22 +0200, Andreas B. Mundt kirjoitti:

 On Wed, May 05, 2010 at 04:41:41PM +0300, Veli-Matti Lintu wrote:
  ma, 2010-05-03 kello 21:47 +0200, Andreas B. Mundt kirjoitti:
  
   The critical point in using kerberos is the synchronization
   i.e. integration of all passwords: posix, samba and kerberos.
 [...]
  We've been figuring out for a while what to do with this syncing problem
  and we just finished smbkrb5pwd for MIT kerberos. Its implementation

 Many thanks for these links. I am currently investigating pros and
 cons of the various methods used to achive synchronized passwords.
 Do you know of any activities to get this package into mainline
 Ubuntu/Debian?

We haven't looked into getting it in mainline or in OpenLDAP yet as we
are still testing it. There have been some issues in multi-realm
kdc/kadmin setups, but those should be fixed now in the Launchpad
version. We should get out tools to setup ldap+kerberos and manage users
with the overlay really soon now. I hope to be able to think about
packaging after that.

Do you see any problems with the approach used in smbkrb5pwd?

Veli-Matti


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1273674798.3388.18.ca...@punajuuri.liitu.vm.opinsys.fi



Re: HowTo test gosa in debian-edu squeeze

2010-05-12 Thread Andreas Schockenhoff
Dear Andreas,

Am Dienstag, den 11.05.2010, 14:48 +0200 schrieb Andreas B. Mundt:
 As of today, compile debian-edu-config from svn and install it. 
Does this changes popup on the DVD 
cd-edu-testing-nolocal-dvd/debian-edu-amd64-i386-DVD-1.iso
in the next days?

regards Andreas 


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1273679231.9479.3.ca...@asc-edubunto.local.invalid



Re: HowTo test gosa in debian-edu squeeze

2010-05-12 Thread Andreas B. Mundt
Hello,

On Wed, May 12, 2010 at 05:47:11PM +0200, Andreas Schockenhoff wrote:
 Dear Andreas,
 
 Am Dienstag, den 11.05.2010, 14:48 +0200 schrieb Andreas B. Mundt:
  As of today, compile debian-edu-config from svn and install it. 
 Does this changes popup on the DVD 
 cd-edu-testing-nolocal-dvd/debian-edu-amd64-i386-DVD-1.iso
 in the next days?

First, a new debian-edu-config package has to be built and after that
it takes about 10 days until it will be available in testing and on
the dvd.

I suggest to wait at least until we have gosa available (promised to
happen this weekend, so 10 days later it'll be in testing).

Currently I work on the integration of kerberos too. So far, I have
prepared the script to create principals and the homedirs whenever a
user is created in gosa (postcreate hook): That works fine :). For
password synchronization some more work/ideas are needed; I'll probably
send a draft of the script to discuss that later.

I have also a nearly ready script to integrate the kdc-setup in the
installation, see here, 'will commit the latest version later:
http://svn.debian.org/wsvn/debian-edu/trunk/src/debian-edu-config/share/debian-edu-config/tools/kerberos-kdc-init?sc=1

The only thing missing is some password stuff (you need to enter the
root password for the kerberos master key which is not(?) available
during installation). For now, perhaps first use that script from the
command line after installation and then integrate it.

So, all in all anything works in principle, (I already created a user
in gosa, homedir and principle were created automatically; and I logged
out and in again with the new user using kerberos). To have all that out
of the the box, it'll probably take one more fixing round ;-). 

So to answer your question: As soon as I see a chance that most stuff
works and is committed to svn, I'll ask Holger or Petter to upload a
new package if that does not happen earlier anyway. Don't want to
promise anything, but it looks very promising at least to me!

Regards,

Andi


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100512163109.ga4...@flashgordon



ldap/gosa postcreation and kerberos password synchronization

2010-05-12 Thread Andreas B. Mundt
Hi all,

[first, congrats to the gosa-guys for their latest release ;-)]

I am currently thinking about how to handle the post-creation,
post-password-change and related stuff properly.

So far, I use the draft-script attached below which is run by the gosa
postcreation hook (www-data added to sudoers file) to handle all needs:

1.: A (posix) user is created in gosa: The script called as 
/usr/bin/sudo /usr/sbin/gosa-pp %uid 
creates homedir and corresponding principal with random
password. This works fine.   

2.: Now, the password for the new user is entered in gosa. I figured
out that the passwordHook=/usr/bin/sudo /usr/sbin/gosa-pp is
called with just the password as argument. Unfortunately there is
no uid attached, so I do not know how to set the attached password
for the user just(?) created. (Currently, the script tries to
create a homedir for a user with uid=password, so this has to be
fixed too.) 

3.: Assume, the user changes his password in gosa now. In this case
gosa-pp is called as:
gosa-pp uid oldpw newpw
As you see below, with root's almighty power the new password is
enforced, but there is no check if the old password is known by
the executing party.

Issue 3 can probably be solved by executing the change as the
principal the password corresponds to. But what about issue 2?

Are there any better solutions, hints and tips around? 
Thanks in advance,

Andi

Here's most of the gosa-pp script:

#!/bin/sh
[...]
NUMARGS=$#
PREFIX=/skole
HOSTNAME=$(hostname -s)
LDAPHOST=ldap
BASE=dc=skole,dc=skolelinux,dc=no
USERID=$1

case $NUMARGS in
  1)
## lookup user and create home directory and principal:
ldapsearch -xLLL -h $LDAPHOST
  ((uid=$USERID)(objectClass=posixAccount)) \
  cn homeDirectory gidNumber 2/dev/null | \
  while read KEY VALUE ; do 
case $KEY in 
  dn:) USERNAME= ; HOMEDIR= ; GROUPID= ; USERDN=dn=$VALUE ;;
  cn:) USERNAME=$VALUE ;;
  homeDirectory:) HOMEDIR=$VALUE ;;
  gidNumber:) GROUPID=$VALUE  ;;
  ) 
test $HOMEDIR || continue 
echo $HOMEDIR | grep -q ^$PREFIX/$HOSTNAME || continue
test -e $HOMEDIR  continue 
cp -r /etc/skel $HOMEDIR
chown -R $USERID:$GROUPID $HOMEDIR
kadmin.local -q add_principal -randkey -x $USERDN
  $USERID
logger -p notice Home directory \'$HOMEDIR\' and principal
  \'$USERID\' created. 
## send a welcome-email: 
cat  EOF | /usr/lib/sendmail $USERID
Subject: Welcome to the mail-system
[...]
EOF
;; 
esac 
  done
;;
  3)
USERDN=`ldapsearch -xLLL -h ldap
((uid=$USERID)(objectClass=posixAccount)) dn | sed s/: /=/`
OLDPW=$2
NEWPW=$3
## FIXME: make sure that $OLDPW is correct 
kadmin.local -q change_password -pw $NEWPW $USERID 1/dev/null
logger -p notice Password for \'$USERID\' changed.
;;
  *)
logger -p warning Invalid number of arguments for $0.
esac

exit 0


-- 
To UNSUBSCRIBE, email to debian-edu-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20100512172612.ga4...@flashgordon