Re: Diskless and Kerberos

2012-05-27 Thread Petter Reinholdtsen
[Giorgio Pioda] > Right yesterday I've setup an ltsp server and I've seen the home > on the client are mounted via ssh. I'm missing something? No idea, but I know that sshfs fail several of the test I made to verify that a file system is usable as a home directory. See http://people.skolelinux.or

Re: Diskless and Kerberos

2012-05-27 Thread Giorgio Pioda
Just a ltsp newbe question > Except that ssh-fuse is not usable as a home directory. rename is not > atomic, and umask is not properly handled. Both can cause problems. :) Right yesterday I've setup an ltsp server and I've seen the home on the client are mounted via ssh. I'm missing something?

Re: Diskless and Kerberos

2012-05-26 Thread Petter Reinholdtsen
[Giorgio Pioda] > Well, if an alien machine sniff it, the attacker is well blocked at > level of user auth. In principle machine auth is not so important as > user auth since we are protecting homedirs and not services. Yes, the home directory mount would be easier if only the user auth was neede

Re: Diskless and Kerberos

2012-05-23 Thread Giorgio Pioda
Hi On Wed, May 23, 2012 at 09:55:54AM +0200, Mike Gabriel wrote: > Hi Giorgio, > > On Mi 23 Mai 2012 09:26:33 CEST Giorgio Pioda wrote: > > >last night I got a half a cent idea for Diskless stations Kerberization. > > > >What about exporting the chroot / file sistem containing a single > >/etc/k

Re: Diskless and Kerberos

2012-05-23 Thread Mike Gabriel
Hi Giorgio, On Mi 23 Mai 2012 09:26:33 CEST Giorgio Pioda wrote: last night I got a half a cent idea for Diskless stations Kerberization. What about exporting the chroot / file sistem containing a single /etc/krb5.keytab containing all the nfs/disklessclients entries... The single diskless

Diskless and Kerberos

2012-05-23 Thread Giorgio Pioda
Hi, last night I got a half a cent idea for Diskless stations Kerberization. What about exporting the chroot / file sistem containing a single /etc/krb5.keytab containing all the nfs/disklessclients entries... The single diskless unit should get its hostname via dhcp (assigned from MAC) and the