Eilert | 1 Feb 2006 09:45
Picon
Favicon

How to load ltspinfod

Morning folks,

I'm trying to get the ltspinfo thing running, but for example I get such 
answers:

# ltspinfo -h ws051 --shutdown
Couldn't open connection to ws051:9200: Invalid argument

This leads me to the few wiki indications saying I'd have to start the 
ltspinfod on each client.

The question is: How? :-)

Thanks for your help!

Rolf

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Peter Billson | 1 Feb 2006 13:38

Re: How to load ltspinfod

Rolf,
   From the wiki: http://wiki.ltsp.org/twiki/bin/view/Ltsp/LtspinfoTips

In order to shutdown a LTSP client, do the following
     * Edit lts.conf and add ALLOW_SHUTDOWN = Y

Pete Billson
-- 
http://www.elbnet.com
ELB Internet Service, Inc.
Web Design, Computer Consulting, Internet Hosting

Eilert wrote:
> Morning folks,
> 
> I'm trying to get the ltspinfo thing running, but for example I get such 
> answers:
> 
> # ltspinfo -h ws051 --shutdown
> Couldn't open connection to ws051:9200: Invalid argument
> 
> This leads me to the few wiki indications saying I'd have to start the 
> ltspinfod on each client.
> 
> The question is: How? :-)
> 
> Thanks for your help!
> 
> Rolf
> 
(Continue reading)

Eilert | 1 Feb 2006 15:57
Picon
Favicon

Re: How to load ltspinfod

Peter Billson schrieb:

> Rolf,
>   From the wiki: http://wiki.ltsp.org/twiki/bin/view/Ltsp/LtspinfoTips
>
> In order to shutdown a LTSP client, do the following
>     * Edit lts.conf and add ALLOW_SHUTDOWN = Y
>
> Pete Billson

Yes, Peter, but you got me wrong. Sorry, forgot to mention that OF 
COURSE I've put this into lts.conf before :-)

Nevertheless, it doesn't do what it's supposed to, but instead gives the 
error message.

Any other idea?

Rolf

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

(Continue reading)

Joe Auerbach | 1 Feb 2006 16:38
Favicon

limiting website useage

I suspect, given the number of schools using ltsp, that I'm not the 
first one to need to do this, but here goes.

We are implementing ltsp on a much larger scale here at work and the 
collectors (I work at a collection agency) will need net access to go to 
various skiptracing sites (white pages, yellow pages, etc) but we'd like 
to prevent them from going to any other sites (you know . . . THOSE 
sites, but I think the idea is to have an allow list rather than a block 
list and to just assume that sites are blocked by default).

How have some of you set this up?  It would be easier if every user had 
their own /etc/hosts file, i think, but they all share one.  And I want 
to limit them individually (so the legal department, for example, has 
broader access than the collectors).

Thoughts?

--

-- 

joe auerbach
systems administrator
pcb / rossman and co
614-523-4150
JoeA@...

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
(Continue reading)

Roy Souther | 1 Feb 2006 17:00

Re: limiting website useage

I set up a network that would only allow people to access a short list of sites. I did this by removing the DNS from the DHCPD so that no client could resolve any URL. Then I statically added the IP addresses and the URL's to the /etc/hosts file. That is the easiest way to do it. It is not a 100% block because they could still use IP addresses to get to any site. Most people are not skill full enough to use an IP address to get to web sites so.

If you think people would use an IP address to get around this then you need to use iptables to block access to every thing and then grant access to just the few sites you want to allow. That is a little more work. Hard to post an example if I don't know more about your topology.

Firefox has a kiosk mode. It may have a way to do a white list like you want and maybe more features you have not thought of.

On Wed, 2006-02-01 at 10:38 -0500, Joe Auerbach wrote:
I suspect, given the number of schools using ltsp, that I'm not the first one to need to do this, but here goes. We are implementing ltsp on a much larger scale here at work and the collectors (I work at a collection agency) will need net access to go to various skiptracing sites (white pages, yellow pages, etc) but we'd like to prevent them from going to any other sites (you know . . . THOSE sites, but I think the idea is to have an allow list rather than a block list and to just assume that sites are blocked by default). How have some of you set this up? It would be easier if every user had their own /etc/hosts file, i think, but they all share one. And I want to limit them individually (so the legal department, for example, has broader access than the collectors). Thoughts?

Royce Souther
www.SiliconTao.com
Let Open Source help your business move beyond.

For security this message is digitally authenticated by GnuPG.



Jim McQuillan | 1 Feb 2006 16:36

Re: How to load ltspinfod

Rolf,

what version of LTSP are you using?

ltspinfod came with LTSP-4.0, and it should ALWAYS be running, 
regardless of whether 'ALLOW_SHUTDOWN' is set or not.  Setting 
'ALLOW_SHUTDOWN' simply enables additional capabilies of ltspinfod.

Try setting 'SCREEN_01 = shell', and reboot the client.  Then, do  'ps 
-e' and see if you find the ltspinfod process is running.

Jim McQuillan
jam@...

Eilert wrote:
> Peter Billson schrieb:
>
>> Rolf,
>>   From the wiki: http://wiki.ltsp.org/twiki/bin/view/Ltsp/LtspinfoTips
>>
>> In order to shutdown a LTSP client, do the following
>>     * Edit lts.conf and add ALLOW_SHUTDOWN = Y
>>
>> Pete Billson
>
> Yes, Peter, but you got me wrong. Sorry, forgot to mention that OF 
> COURSE I've put this into lts.conf before :-)
>
> Nevertheless, it doesn't do what it's supposed to, but instead gives 
> the error message.
>
> Any other idea?
>
> Rolf
>
>
>
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log 
> files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> _____________________________________________________________________
> Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
>      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
> For additional LTSP help,   try #ltsp channel on irc.freenode.net

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Cindy Murdock | 1 Feb 2006 16:51

Re: limiting website useage

You can do this with squid, too.  I have several thin clients on our 
network that are limited just to certain websites.  They each have a 
whitelist of allowable sites, and everything else is blocked.  It can be 
done by IP or username.  You could enable squid transparently on your 
network to force all traffic to go through squid.  You can use dhcp to 
control the IP addresses.

Cindy

-- 
_________________________
Cindy Murdock
Network Administrator
Meadville Public Library | Crawford County Federated Library System
meadvillelibrary.org | ccfls.org

Joe Auerbach wrote:
> I suspect, given the number of schools using ltsp, that I'm not the 
> first one to need to do this, but here goes.
> 
> We are implementing ltsp on a much larger scale here at work and the 
> collectors (I work at a collection agency) will need net access to go to 
> various skiptracing sites (white pages, yellow pages, etc) but we'd like 
> to prevent them from going to any other sites (you know . . . THOSE 
> sites, but I think the idea is to have an allow list rather than a block 
> list and to just assume that sites are blocked by default).
> 
> How have some of you set this up?  It would be easier if every user had 
> their own /etc/hosts file, i think, but they all share one.  And I want 
> to limit them individually (so the legal department, for example, has 
> broader access than the collectors).
> 
> Thoughts?
> 

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Jeff Kinz | 1 Feb 2006 16:44

Re: limiting website useage

On Wed, Feb 01, 2006 at 10:38:03AM -0500, Joe Auerbach wrote:
> I suspect, given the number of schools using ltsp, that I'm not the 
> first one to need to do this, but here goes.
> 
> We are implementing ltsp on a much larger scale here at work and the 
> collectors (I work at a collection agency) will need net access to go to 
> various skiptracing sites (white pages, yellow pages, etc) but we'd like 
> to prevent them from going to any other sites (you know . . . THOSE 
> sites, but I think the idea is to have an allow list rather than a block 
> list and to just assume that sites are blocked by default).
> 
> How have some of you set this up?  It would be easier if every user had 
> their own /etc/hosts file, i think, but they all share one.  And I want 
> to limit them individually (so the legal department, for example, has 
> broader access than the collectors).

Use a proxy like squid. has all the flexibility and power you need, is
fast and efficient.  the hosts file idea is just not a good idea.
Maintaining it will prove to be very labor intensive and its vulnerable
to more attacks from individuals within your company.

Oh, and limit the lawyers to only the pest extermination sites... :-)

-- 
Jeff Kinz, Emergent Research, Hudson, MA.
speech recognition software may have been used to create this e-mail

"The greatest dangers to liberty lurk in insidious encroachment by men
of zeal, well-meaning but without understanding." - Brandeis

To think contrary to one's era is heroism. But to speak against it is
madness. -- Eugene Ionesco

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Roy Souther | 1 Feb 2006 17:33

Re: limiting website useage

Some people talk about running Firefox locally on the client. In my multi-net server I have the ltsp rc.sysinit script generate a custom /etc/hosts file for each client. Using both a local Firefox and a custom hosts file would do that.

Like Jeff said this could be a lot of work, unless you are only needing to do this for a small number of clients and it never changes, as I would expect would be the case in a law office. I would never do this in a school or other large network.


On Wed, 2006-02-01 at 11:13 -0500, Joe Auerbach wrote:
That sounds like an excellent solution, but since this is ltsp, is there a way ot have a hosts file for each workstation, or will they all nessisarily run off the central /etc/hosts?

Roy Souther wrote:
I set up a network that would only allow people to access a short list of sites. I did this by removing the DNS from the DHCPD so that no client could resolve any URL. Then I statically added the IP addresses and the URL's to the /etc/hosts file. That is the easiest way to do it. It is not a 100% block because they could still use IP addresses to get to any site. Most people are not skill full enough to use an IP address to get to web sites so.

If you think people would use an IP address to get around this then you need to use iptables to block access to every thing and then grant access to just the few sites you want to allow. That is a little more work. Hard to post an example if I don't know more about your topology.

Firefox has a kiosk mode. It may have a way to do a white list like you want and maybe more features you have not thought of.

On Wed, 2006-02-01 at 10:38 -0500, Joe Auerbach wrote:
I suspect, given the number of schools using ltsp, that I'm not the first one to need to do this, but here goes. We are implementing ltsp on a much larger scale here at work and the collectors (I work at a collection agency) will need net access to go to various skiptracing sites (white pages, yellow pages, etc) but we'd like to prevent them from going to any other sites (you know . . . THOSE sites, but I think the idea is to have an allow list rather than a block list and to just assume that sites are blocked by default). How have some of you set this up? It would be easier if every user had their own /etc/hosts file, i think, but they all share one. And I want to limit them individually (so the legal department, for example, has broader access than the collectors). Thoughts?

Royce Souther
www.SiliconTao.com
Let Open Source help your business move beyond.

For security this message is digitally authenticated by GnuPG.






-- joe auerbach systems administrator pcb / rossman and co 614-523-4150 JoeA-9y2FTvk76rRBDgjK7y7TUQ@public.gmane.org

Royce Souther
www.SiliconTao.com
Let Open Source help your business move beyond.

For security this message is digitally authenticated by GnuPG.



Richard Bos | 1 Feb 2006 20:11
X-Face
Picon
Picon
Favicon

Re: limiting website useage

Op woensdag 1 februari 2006 16:44, schreef Jeff Kinz:
> Use a proxy like squid. has all the flexibility and power you need, is
> fast and efficient.

Have a look at clark connect.  It provides squid and dansguardian, it's easy 
to install and comes with a nice user interface.

--

-- 
Richard Bos
Without a home the journey is endless

-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net


Gmane