Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Berend De Schouwer
On Thu, 2002-03-07 at 18:19, Jason A. Pattie wrote: > John Cuzzola wrote: > > >*** A possible solution may be to create a VPN(IPSEC) betweeen the client > >and the server. Allow the home directory to be mounted only through the > >VPN. > > > A very good solution and one that is not too hefty to i

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Berend De Schouwer
On Thu, 2002-03-07 at 19:34, Hans Ekbrand wrote: > On Thu, Mar 07, 2002 at 10:19:52AM -0600, Jason A. Pattie wrote: > > John Cuzzola wrote: > > > > >*** A possible solution may be to create a VPN(IPSEC) betweeen the client > > >and the server. Allow the home directory to be mounted only through t

Re: [Ltsp-discuss] VMWare

2002-03-07 Thread Jo
What's the use of doing that? I must be missing something somewhere. Jo _ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP h

[Ltsp-discuss] Help with XDM/KDM/GDM

2002-03-07 Thread peter rundle
My workstations are no longer displaying the XDM login dialog. They only have the grey x-server screen and X cursor. If I init 3 then init 5 the server the XDM login comes back but as soon as a user logs out of the workstation the grey x-server returns but no XDM login dialog. If I frop the wo

Re: [Ltsp-discuss] VMWare

2002-03-07 Thread Matthew S. Vesperman
Thanks I will try that out! Matthew S. Vesperman StarSoft Computer Systems http://www.sscompsys.com - Original Message - From: <[EMAIL PROTECTED]> To: "Matthew S. Vesperman" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Thursday, March 07, 2002 08:08 pm Subject: Re: [Ltsp-discus

Re: [Ltsp-discuss] VMWare

2002-03-07 Thread jam
Hello Matthew, You need an Etherboot floppy bootable image. Go to http://www.Rom-o-matic.net and generate one. I think it was pcnet32 that I used. Once you get that image, store it in your vmware directory and when you setup the vmware session, tell it you have a floppy drive, but you need to

[Ltsp-discuss] VMWare

2002-03-07 Thread Matthew S. Vesperman
How do I configure VMware 3.0 so I can use it as an LTSP diskless workstation? Matthew S. Vesperman StarSoft Computer Systems http://www.sscompsys.com _ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:

[Ltsp-discuss] LTSP 3.0 and Thinknic thinclient?

2002-03-07 Thread Michael Williams
Hey, I sure could use those docs. Are they here yet? Michael -- Michael Williams Instructional Technology Haywood County Schools 216 Charles St. Clyde, NC 28721 http://www.k12linux.org (828) 627-8314

[Ltsp-discuss] loadkeys keymap

2002-03-07 Thread Michael Sullens
Hello ltsp-discuss, I am trying to set up a Point Of Sale system on LTSP 3.0, RH 7.0. The POS requires that I load a keymap before running the software on the console at the workstaion. When I run loadkeys KEYMAP.MAP i get the message "failed to bind string xxx to function yyy" quit a few times

Re: [Ltsp-discuss] can't ls in directory >90,000 files

2002-03-07 Thread Alessandro Selli
Il giorno Thu, 7 Mar 2002, Alexander Perry così ha scritto: |From: Alexander Perry <[EMAIL PROTECTED]> |To: [EMAIL PROTECTED] |Date: Thu, 07 Mar 2002 08:43:59 -0800 |Subject: [Ltsp-discuss] can't ls in directory >90,000 files | |There is a "-U" option on 'ls' that disables the sort and may be muc

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread David Johnston
"Michael H.Collins" wrote: > David Johnston wrote: > "Michael H.Collins" wrote: >>>What is that user doing in the building, and or how is he allowed to >>> bring a laptop in from the outside and plug it in. This is the bad >>> security i see. >>Michael, you are right that there is no substitute f

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Michael H . Collins
There is security and then there is security I guess. The military tried to teach me that an evolution is either secure or it is not. In your scenario there a complete lack of security as I see it. I know what you are talking about even if I cannot call it secure. On Thu, 07 Mar 2002 15:30:52

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread David Johnston
"Michael H.Collins" wrote: > > What is that user doing in the building, and or how is he allowed to > bring a laptop in from the outside and plug it in. This is the bad > security i see. > > Homie don't play dat. Michael, you are right that there is no substitute for physical security. Howeve

Re: [Ltsp-discuss] Two questions. At least one dumb.

2002-03-07 Thread Johannes Berth
* Bill Weir <[EMAIL PROTECTED]> [07.03.02 18:41]: > 1. Dumb question: I was trying to answer a question on the list, but I can't > figure out how to reply without cutting and pasting manually into Outlook > and sending a fresh message. I get the digest version so this is painful. > What do you all

Re: [Ltsp-discuss] local device support

2002-03-07 Thread Wouter DeBacker
Jason, Mail=mail and web=web. Therefore, no HTML in a mailing list ... please _ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional

Re: [Ltsp-discuss] Two questions. At least one dumb.

2002-03-07 Thread Claas Anders Rathje
On Thu, 7 Mar 2002 09:41:26 -0800 "Bill Weir" <[EMAIL PROTECTED]> wrote: > 1. Dumb question: I was trying to answer a question on the list, but I > can't figure out how to reply without cutting and pasting manually into > Outlook and sending a fresh message. I get the digest version so this is >

[Ltsp-discuss] xchooser

2002-03-07 Thread Randall Craig
When I setup Xaccess on the server to do indirect X queries using xchooser and do a indirect X session on the thin client. I get a message that I don't have permission to use the display. I can however still get an XDM session even though I am getting this error. I am using SuSE 7.3 with KDM.

[Ltsp-discuss] Booting Windows 98 with Etherboot

2002-03-07 Thread Patrick Regnouf
Pff it's really as far to simple as Tokyo is from New York ... (I know this sentence does not make much sense butt bear with me ...) (Doesn't really matter, in fact never been to either place anyway ;-) Started by a real need to find a way to give my daughter a cheap computer to play some gam

[Ltsp-discuss] Two questions. At least one dumb.

2002-03-07 Thread Bill Weir
Hi, 1. Dumb question: I was trying to answer a question on the list, but I can't figure out how to reply without cutting and pasting manually into Outlook and sending a fresh message. I get the digest version so this is painful. What do you all use to reply to messages? 2. Perhaps dumb question:

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Hans Ekbrand
On Thu, Mar 07, 2002 at 10:19:52AM -0600, Jason A. Pattie wrote: > John Cuzzola wrote: > > >*** A possible solution may be to create a VPN(IPSEC) betweeen the client > >and the server. Allow the home directory to be mounted only through the > >VPN. > > > A very good solution and one that is not t

[Ltsp-discuss] can't ls in directory >90,000 files

2002-03-07 Thread Alexander Perry
> On a more general note, I have a directory on my linux server which has > over 90,000 files. when I do a dir | wc -l I receive a number of >46,000 > (which I take to be >90,000 files since dir gives me 2 columns of file > names. > However, I can't ls. I have waited for up to 15 minutes. C

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread John Cuzzola
On Thu, 7 Mar 2002, Jason A. Pattie wrote: > John Cuzzola wrote: > > >*** A possible solution may be to create a VPN(IPSEC) betweeen the client > >and the server. Allow the home directory to be mounted only through the > >VPN. > > > A very good solution and one that is not too hefty to implement

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Adam Williams6
>>After contemplating the matter for a while, I still think it is a >>serious security risk. As far as I know there is no password >>authenication involved with NFS, so you only have to a) bind to a low >>port and b) use the same UID on the client as the user that has files >>on the NFS share that

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Jason A. Pattie
John Cuzzola wrote: >*** A possible solution may be to create a VPN(IPSEC) betweeen the client >and the server. Allow the home directory to be mounted only through the >VPN. > A very good solution and one that is not too hefty to implement. However, how to you store "securely" the secret keys f

Re: [Ltsp-discuss] Writing to named piped over NFS

2002-03-07 Thread Jason A. Pattie
Does this help, maybe? http://freshmeat.net/projects/tcppipe/ Jason Bechtel wrote: >> Date: Wed, 6 Mar 2002 12:57:35 -0600 (CST) >> From: Lachlan Dunlop <[EMAIL PROTECTED]> >> >> Before moving my application to ltsp thin clients, it has been working >> great! With the touchscreen connected to

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Jason A. Pattie
Hans Ekbrand wrote: >On Thu, Mar 07, 2002 at 11:34:43AM +0100, Romme wrote: > >>Some of the security risks described can be managed >>by keeping a list of 'known' mac-adresses on the >>server. >>This list can then be used by dhcpd, but also by >>iptables to filter on mac-address. >> > >That's a g

[Fwd: Re: [Ltsp-discuss] Writing to named piped over NFS]

2002-03-07 Thread Dave Shiels
Original Message Subject: Re: [Ltsp-discuss] Writing to named piped over NFS Date: Thu, 07 Mar 2002 06:25:35 -0700 From: Dave Shiels <[EMAIL PROTECTED]> To: Lachlan Dunlop <[EMAIL PROTECTED]> References: <[EMAIL PROTECTED]> Lachlan Dunlop wrote: > > Hello, > > Well my touch

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread John Cuzzola
> After contemplating the matter for a while, I still think it is a > serious security risk. As far as I know there is no password > authenication involved with NFS, so you only have to a) bind to a low > port and b) use the same UID on the client as the user that has files > on the NFS share that

Re: [Ltsp-discuss] can't ls in directory >90,000 files

2002-03-07 Thread Sean Buck
Title: Re: [Ltsp-discuss] can't ls in directory >90,000 files I have a system running on RH 7.1 that is a monitoring station for 12 network video cameras.  Each of the cameras uploads a jpg image every 2-3 seconds to their own directory on the server.  On the server itself, I have a kylix cgi

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Julius Szelagiewicz
Hans, you are not wrong. if security is a very big concern, use samba instead of nfs. samba will do just about any authentication you want since it can be compiled to use PAM (Pluggable Authentication Module). julius On Thu, 7 Mar 2002, Hans Ekbrand wrote: > On Wed, Mar 06, 2002 at 12:02

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Hans Ekbrand
On Thu, Mar 07, 2002 at 08:41:33AM -0600, Michael H. Collins wrote: > What is that user doing in the building, and or how is he allowed to > bring a laptop in from the outside and plug it in. This is the bad > security i see. You probably missed the beginning of this thread. It was about using L

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Michael H . Collins
What is that user doing in the building, and or how is he allowed to bring a laptop in from the outside and plug it in. This is the bad security i see. Homie don't play dat. $Now, consider a malicious user, who has prepared his laptop at home, $plugs it in to the local network, uses the same i

[Ltsp-discuss] NFS security issues

2002-03-07 Thread Jason Bechtel
LTSPers, Following up the discussion on rw NFS and security issues... If you must use remotely-mounted/centrally-located directories in a hostile environment, might I recommend AFS instead of NFS. AFS allows for user-level authentication using Kerberos. It was formerly proprietary, but afte

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Hans Ekbrand
On Thu, Mar 07, 2002 at 11:34:43AM +0100, Romme wrote: > Some of the security risks described can be managed > by keeping a list of 'known' mac-adresses on the > server. > This list can then be used by dhcpd, but also by > iptables to filter on mac-address. That's a good idea. It makes the descri

Re: [Ltsp-discuss] Writing to named piped over NFS

2002-03-07 Thread Jason Bechtel
> Date: Wed, 6 Mar 2002 12:57:35 -0600 (CST) > From: Lachlan Dunlop <[EMAIL PROTECTED]> > > Before moving my application to ltsp thin clients, it has been working > great! With the touchscreen connected to the serial port on the > server (but it is very limiting). > > So I have connected my tou

[Ltsp-discuss] launching rdesktop on ltsp 3.0

2002-03-07 Thread Alberto Brosich
I'm interested to use some ltsp client as windows terminal using rdesktop. I looked for wilisystem patch but it's for ltsp 2.x. Any suggest about where do modifications in rc.local and what kind of modifications? Structure of rc.local is modified in ltsp 3.0. I think about a flexible solution: usi

Re: [Ltsp-discuss] xserver does not start?

2002-03-07 Thread Fathi Ben Nasr
Check if you have installed the XFree86-xfs package (rpm -q XFree86-xfs) and if so make sure if you have in your /etc/X11/fs/config a line like the following "alternate-servers = yourserver:7100". This will set your xfs to listen to tcp/ip clients. morten a écrit : > I have installed LTS that i

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Romme
Some of the security risks described can be managed by keeping a list of 'known' mac-adresses on the server. This list can then be used by dhcpd, but also by iptables to filter on mac-address. grtx, Johan Romme. At 10:00 7-3-2002 +0100, Hans Ekbrand wrote: >After contemplating the matter for a

Re: [Ltsp-discuss] rw NFS and security.

2002-03-07 Thread Hans Ekbrand
On Wed, Mar 06, 2002 at 12:02:04AM +0100, Hans Ekbrand wrote: > On Tue, Mar 05, 2002 at 05:26:58PM -0500, Julius Szelagiewicz wrote: > > On Tue, 5 Mar 2002, Hans Ekbrand wrote: > > > I was not thinking on system security, but the security you would want > > > to grant the *users*, e.g. that no cra