Re: guest account and kerberos

2023-03-18 Thread Dashamir Hoxha
On Thu, Mar 16, 2023 at 5:41 PM Lorenzo Ceriani 
wrote:

> Hi,
> I am very happy of our new Debian-edu computer lab, everything is running
> smooth even if the machine are old enough.
> I have just some help requests:
> 1. I need a passwordless guest account on every client which erase all
> data on every login or logout (useful for doing national online exams) For
> the moment i created a local account with the same name on every client
> with adduser *** and then passwd -d ***.
> Still to do the erasing part, but for the moment it seems ok. Can this
> create problems with debian-edu?
>

It is not clear how you create those local accounts, so cannot say whether
they create any problem.

There is nothing in the debian-edu docs about guest accounts (yet).
However, debian-edu is based on the LTSP project, and there are some
blogs/discussions about guest accounts here and there. For example:
- http://www.m-opensolutions.com/ltsp-guest-accounts-and-mate-desktop-setup/
- https://dashohoxha.fs.al/ltsp-scenarios/#org3535561
- https://github.com/ltsp/ltsp/discussions/298

I have also used guest accounts in another similar context:
-
https://gitlab.com/docker-scripts/debian-desktop/-/blob/main/inject/setup-user-accounts.sh#L84

Maybe these can give some hints about how to develop your own solution.
If you find a suitable solution, please let us know how you did it.

Regards,
Dashamir



> 2. I would like to avoid that (kerberos?) dialog box that ofteh/always
> asks for a password after login. It confounds pupils... :-)
> Thanks in advance for your advice!
> L.
>
>


Re: no login on diskless-workstations

2023-03-18 Thread Dashamir Hoxha
On Wed, Mar 15, 2023 at 3:32 PM Frank Weißer  wrote:

>
> Saved /etc/network/interfaces during installation, since it gets
> replaced with a not working eth1 ip v6 address instead of 192.168.0.254/24
> .
> Restored /etc/network/interfaces before rebooting.
>

This looks suspicious to me. Why does it get replaced with a non-working IP?
Normally you should not have to do these steps (as far as I know).


> Waited after reboot, 'til RAID5 / x2go stuff stop being busy.
> Ran /usr/share/debian-edu-config/tools/subnet-change -n 192.168.250.0/24
> to change my subnet to the one, offered by our school board.
>

Normally the debian-edu network should be isolated from the rest of the
network (by placing it behind a router).
I am not sure whether that script works correctly.

Rebooted immediate
> Stopped service named and restarted after deleting /var/cache/bind/key*
> to get access the web
>
> What works:
> Log in on tjener as the user, set up during installation.
>
> What does not work:
> Log in as that user graphical on diskless workstations 192.168.250.130
> (hostname ltsp130) nor 192.168.0.22 (ltsp22)
> Changing to console 1 I can log in, getting
> 'No directory, logging in with HOME=/'
>
> /skole is mounted on both
>
> Why is /skole/tjener/home0 not?
>

Have you tried to update the image of diskless clients with:

`debian-edu-ltsp-install --diskless_workstation yes`

I am not sure, but maybe there are some changed configurations that need to
be propagated to these images.

Let us know how it goes.

Dashamir