headers
jam | 1 May 2004 03:36
Favicon

Re: internet access

Hi

> I'm thinking that Varun needs his users to have browser access to pages 
> on the local server, but he doesn't want them browsing the internet
> 
> So far, nobody has addressed that problem.
> 
> Jim McQuillan
> jam@...
> 
> 
> On Thu, 29 Apr 2004, Jim Glutting wrote:
> 
> > Hi Varun,
> >        It you use a window manager like icewm, there are no icons
> > on the desktop.  All programs are launched from the Start menu
> > or the taskbar.  You control what goes on the Start menu thru a
> > text file, and only put the references to programs that you want
> > them to have.  So if you don't put a browser on the menu, they
> > cannot run an internet browser.

I guess that you have some really hard fiddling to do!

If you run a browser on the server you want unrestricted access
If you run a browser on the server (using an LTSP terminal) you want restricted
access

The only thing I can imagine is DISPLAY based restrictions, and browser 
wrapper scripts
OR
(Continue reading)

Permalink | Reply | 0 comments |
headers
Varun | 1 May 2004 04:33

Re: internet access

Kai Wollweber wrote:

>Ken Cobler wrote:
>  
>
>>Varun wrote:
>>    
>>
>>>Hello,
>>>       I want to put my ltsp4 server and squid proxy server
>>>on the same machine.
>>>I want internet access only for non ltsp clients.
>>>I want no ltsp clients to have internet access.
>>>      
>>>
>
>  
>
>>2) Route all internet requests through the squid proxy server.  Put the
>>LTSP workstations in a specific IP address range.  Reject requests
>>inside squid for the specific IP address range of the LTSP workstations.
>>
>>3) Disable default gateway for the LTSP workstations.  No gateway, no
>>access to the Internet.
>>    
>>
>
>2) and 3) will not work because its the server which runs the browser processes 
>for the LTSP clients, so you need to disable access from the server to any 
>destinations port 80. On the other hand squid itself needs just this connection.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Justin Mills | 1 May 2004 13:11
Picon

Ltsp-4 : Fatal server error

Hi there

Last night i downloaded ltsp-4 via the wget command as per the websites 
instructions ( and downloaded "all" ).

I finally got the dhcp etc etc working, and the client is booting via 
the ethernet-boot-disk, everything works upto the following ...

XF86Config: /tmp/XF86Config.1
(**) stands for supplied, (--) stands for probed/default values.
warning: No FontPath sepecified using compiled-in default
.... .... ....

Fatal server error:
Yoou must specify a keyboard in XF86Config ......

I have downloaded the 'build_x3_cfg' as per the instructions on the 
ltsp-4-errata page, but still comes up with the same error!

Anyone with some suggestions.

Thanx in advance Justin.

-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
(Continue reading)

Permalink | Reply | 1 comment |
headers
Cornelius Weiß | 1 May 2004 17:32
Picon

kmix and esd

Most of us presumably  are glad that ESD ist supportet by KDE3.2.
The only missing thin might be that kmxi isn't able to handle esd devices.

I don't know if this is helpfull, but you might wish to vote vor this feature 
beeing implemented in kmix on 

http://bugs.kde.org/show_bug.cgi?id=77580

cu
cornelius weiß

-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE. 
http://ads.osdn.com/?ad_id149&alloc_id66&op=click
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net
Permalink | Reply | 0 comments |
headers
jam | 2 May 2004 05:41
Favicon

Re: internet access (Varun)

Hi

> >>>Hello,
> >>>       I want to put my ltsp4 server and squid proxy server
> >>>on the same machine.
> >>>I want internet access only for non ltsp clients.
> >>>I want no ltsp clients to have internet access.
> >>>      
> >>>
> >
> >  
> >
> >>2) Route all internet requests through the squid proxy server.  Put the
> >>LTSP workstations in a specific IP address range.  Reject requests
> >>inside squid for the specific IP address range of the LTSP workstations.
> >>
> >>3) Disable default gateway for the LTSP workstations.  No gateway, no
> >>access to the Internet.
> >>    
> >>
> >
> >2) and 3) will not work because its the server which runs the browser processes 
> >for the LTSP clients, so you need to disable access from the server to any 
> >destinations port 80. On the other hand squid itself needs just this connection.
> >
> >You should have a packet filter (iptables) allowing squid as the only user to connect 
> >to the internet. You can redirect all other connections from port 80 to 
> >squid's input port 3128. Doing this you get a transparent proxy and do not need to 
> >configure any browser.
> >
(Continue reading)

Permalink | Reply | 0 comments |
headers
jam | 2 May 2004 06:25

Re: internet access

On Fri, 30 Apr 2004, Jason Young wrote:

> Guys,
> 
> Just one last thing.  With the Squid-based solution that would seem to
> work, but requires configuration of proxy settings on the browser, would

Actually, Squid can be setup as a "transparent proxy", meaning no 
browser config is needed.

Jim.

> performing a chown & chmod of the user's "prefs.js" file in their
> mozilla folders with a script, rendering it non-writable by the users
> work?  I'm admittedly no more than a power-user when it comes to Linux,
> so I don't know what the possible ramifications of this approach would
> be, but I tried it on a machine at home & it appeared to work.
> 
> - Jason
> 
>  
> On Thu, 2004-04-29 at 23:54, jam@... wrote:
> > On Thu, 29 Apr 2004, Jason Young wrote:
> > 
> > > Jim,
> > > 
> > > I might be mistaken, but couldn't Varun apply any needed filters on
> > > Shorewall to achieve this; for instance, applying an accept rule on port
> > > 80 for the IP address of his local Web server while denying all other
> > > destination IPs?
(Continue reading)

Permalink | Reply | 0 comments |
headers
jam | 2 May 2004 06:31

Re: Ltsp-4 : Fatal server error

On Sat, 1 May 2004, Justin Mills wrote:

> Hi there
> 
> Last night i downloaded ltsp-4 via the wget command as per the websites 
> instructions ( and downloaded "all" ).
> 
> I finally got the dhcp etc etc working, and the client is booting via 
> the ethernet-boot-disk, everything works upto the following ...
> 
> XF86Config: /tmp/XF86Config.1
> (**) stands for supplied, (--) stands for probed/default values.
> warning: No FontPath sepecified using compiled-in default
> .... .... ....
> 
> Fatal server error:
> Yoou must specify a keyboard in XF86Config ......
> 
> 
> I have downloaded the 'build_x3_cfg' as per the instructions on the 
> ltsp-4-errata page, but still comes up with the same error!

Double check where you put the script, and make sure it's executable, 
and has the correct name.

Jim McQuillan
jam@...

> 
> Anyone with some suggestions.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Jesper K. Pedersen | 2 May 2004 12:46
Picon

<shift><backspace> kills the X server in 3.0.9

I have just noticed that when pressing the shift and backspace key you
kill the X server as if you are performing a <ctrl><alt><backspace> (the
X "zap" funtion).
Is that a bug or a feature - and is it possible to disable it?
I have already disabled the X zap function in my XF86Config

Please note that each LTSP client has its own XF86Config-CLIENTNAME
configuration where I have a section disabling the zap function which I
manage by doing a "XF86CONFIG_FILE = XF86Config-CLIENTNAME" in the
lts.conf configuration file.
In each XF86Config filere there is a section saying:

Section "ServerFlags"
        Option "DontZap" "true"
EndSection

Which is tested and I am not able to "zap" the server using
<ctrl><alt><backspace>

Any input is greatly appreciated.

Best regards,
Jesper K. Pedersen
--
Carpe Aptenodytes!

-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Varun | 2 May 2004 15:33

Re: internet access

Lanman wrote:

>>>
>>> Um, Can't you just install a third network card to solve this? There 
>>> were some great solutions in this thread, most of which would work 
>>> very well if you had 3 NIC's instead of two.
>>>
>>> NIC #1 (eth0) could be used for your Internet connection,
>>>
>>> NIC #2 (eth1) could be used for the LTSP Terminals,
>>>
>>> NIC #3 (eth2) cold be used for the normal systems.
>>>
>>> That would allow you to configure their respective access to the 
>>> Internet via subnets, allowing yo to use IPTables and Squid for all 
>>> connected systems.
>>>
>>> HTH
>>>
>>> Lanman
>>

>>> I should have clarified the idea.
>>
>
> 1) Accept all connections from eth1 (network segment which you could
>    name as "LTSP" in Shorewall) to "FW" - (Virtual segment created by
>    Shorewall itself),
> 2) Accept all connections from eth2 (network segment which you could
>    call "MyLan" in Shorewall) to "FW" - (Virtual segment also created by
(Continue reading)

Permalink | Reply | 0 comments |
headers
cliebow | 2 May 2004 14:51

python and Teach.py

This section of Teach.py seems to allow running a program..however nothing
seems to happen
  def runVnc(self):
	" Run vnc as a student "
	#self.run("vncviewer -passwd /usr/local/share/passwd server:99")
        self.run("ssh 10.10.10.254")
How can i tie the button provided in Teach.py to run a command of my choice

chuck

_______________________________________________
K12OSN mailing list
K12OSN <at> redhat.com
https://www.redhat.com/mailman/listinfo/k12osn
For more info see <http://www.k12os.org>
Permalink | Reply | 0 comments |

Gmane