Discussion:
[Ltsp-discuss] LTSP fat client with LDAP authentication
Ivan Mincik
2014-12-26 22:33:18 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,
I am using LTSP in Fat client mode, with LDAP authentication [1]. I
see, that LDM is still using SSH tunnel for authentication.

I am wondering how hard is to authenticate directly with LDAP server
without using SSH tunnel and optionally replace LDM with LightDM.
I am using Ubuntu 12.04.

Can somebody point me to right direction ?

1 -
https://github.com/imincik/gis-lab/blob/master/system/roles/client-desktop/files/static/system/ltsp/030-gislab-ldap


- --
Ivan Minčík
***@gmail.com GPG: 0x79529A1E
http://imincik.github.io/0x79529A1E.key
***@gista.sk GPG: 0xD714B02C
http://imincik.github.io/0xD714B02C.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUneIuAAoJEPfdLsR5UpoewE0H/1HR2vF+MNSSft12QaDszK9a
hDA0ZW5Jt2r/V++IIxIBsvjhE5RnymV3gYs0uY7OnBy7hH9e0G6BQtqHYtfIU+7p
LxPqhHWJJUj8kxB8BA1atRRrKrNEdKyzGqKBmGnRhkyHg+83y1TY3F65teGT6d+O
azfJX55ABm2lFOv8eMus4Rh0ibk80MCcFK1Vv12AnEC17n6X+tKp9Q76fvD3VhnE
wPUQfG8RwBLsf2P6GmPep83ey9+QjwxVMaXL8Xs/0y79dPmvpE/nhCjZkO0Eg0Wk
GQAKw/66DWhU2gtx1KQnyMmUEKcY10pZc63hV1hTD0KhFdTONmDNWoBuoGlKfkA=
=TP0w
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional
andrea biancalana
2014-12-29 14:18:35 UTC
Permalink
Post by Ivan Mincik
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi all,
I am using LTSP in Fat client mode, with LDAP authentication [1]. I
see, that LDM is still using SSH tunnel for authentication.
I am wondering how hard is to authenticate directly with LDAP server
without using SSH tunnel and optionally replace LDM with LightDM.
I am using Ubuntu 12.04.
Can somebody point me to right direction ?
it seems Lightdm doesn't authenticate vs LDAP server; may be you have to use gdm or kdm.

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net
Ivan Mincik
2014-12-29 20:40:29 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
il giorno Fri, 26 Dec 2014 23:33:18 +0100 Ivan Mincik
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi all, I am using LTSP in Fat client mode, with LDAP
authentication [1]. I see, that LDM is still using SSH tunnel for
authentication.
I am wondering how hard is to authenticate directly with LDAP
server without using SSH tunnel and optionally replace LDM with
LightDM. I am using Ubuntu 12.04.
Can somebody point me to right direction ?
it seems Lightdm doesn't authenticate vs LDAP server; may be you have to use gdm or kdm.
Andrea, thanks for this note.

- --
Ivan Min?ík
***@gmail.com GPG: 0x79529A1E
http://imincik.github.io/0x79529A1E.key
***@gista.sk GPG: 0xD714B02C
http://imincik.github.io/0xD714B02C.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUobw3AAoJEPfdLsR5UpoeWMYH/iT7pmz03vteXWnSJfX3CALu
YbHk8VBNyfARnS70inLEs14PRkmvUNuBH4qv1baezzYxovM7cIgvv+hUQVYa4857
3GsN9lgxPt+BrHV5Cq94639fvFGMD8CWAPP2WfYBqOKOFZwZUbfObvoEYigClkTn
X3+mpi6C8ktnaMepqNfcD1+10WU610sXSz6q2yc3jrpFHxZ8dNzXbYdf0EY9JqZw
ta+FePxsIX4dH47LT78+bo7NCY9dBgZQTundcR55aS+cz5soVBF0H0SdSGUcdsiX
ZvD3NEIksDxcTF/6rMlle/7ws23c8buzlJ1nMc/92oRXaVkfWfofIohuaF1Mdsc=
=7062
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net
Rob Owens
2014-12-29 21:35:43 UTC
Permalink
Post by Ivan Mincik
Post by andrea biancalana
it seems Lightdm doesn't authenticate vs LDAP server; may be you
have to use gdm or kdm.
Andrea, thanks for this note.
I am currently using Lightdm on a Debian system, and it authenticates
LDAP users. This is a standalone system -- not an LTSP client.

I would think anything would work to authenticate LDAP users, as long as
/etc/nsswitch.conf and /etc/pam.d/common-* are configured properly.

-Rob
andrea biancalana
2014-12-29 23:23:07 UTC
Permalink
Post by Rob Owens
Post by Ivan Mincik
Post by andrea biancalana
it seems Lightdm doesn't authenticate vs LDAP server; may be you
have to use gdm or kdm.
Andrea, thanks for this note.
I am currently using Lightdm on a Debian system, and it authenticates
LDAP users. This is a standalone system -- not an LTSP client.
I would think anything would work to authenticate LDAP users, as long as
/etc/nsswitch.conf and /etc/pam.d/common-* are configured properly.
-Rob
I've tried LightDM on Ubuntu 14.04 and Debian Jessie 2 or 3 months ago:

it may be I'd configure /etc/pam.d files; gdm (and kdm) doesn't need pam manual configuration.

Thanks

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net
Ivan Mincik
2014-12-30 13:33:07 UTC
Permalink
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
il giorno Mon, 29 Dec 2014 16:35:43 -0500 Rob Owens
Post by Rob Owens
Post by Ivan Mincik
Post by andrea biancalana
it seems Lightdm doesn't authenticate vs LDAP server; may be
you have to use gdm or kdm.
Andrea, thanks for this note.
I am currently using Lightdm on a Debian system, and it
authenticates LDAP users. This is a standalone system -- not an
LTSP client.
I would think anything would work to authenticate LDAP users, as
long as /etc/nsswitch.conf and /etc/pam.d/common-* are configured
properly.
-Rob
it may be I'd configure /etc/pam.d files; gdm (and kdm) doesn't
need pam manual configuration.
Yes, that can be a difference. Thank you both for your notes.

- --
Ivan Min?ík
***@gmail.com GPG: 0x79529A1E
http://imincik.github.io/0x79529A1E.key
***@gista.sk GPG: 0xD714B02C
http://imincik.github.io/0xD714B02C.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJUoqmTAAoJEPfdLsR5UpoeU1gH/1cPCC8joVgy+ae7e7zdyj3V
CLDbB1LkO7zawPql852wXwxxpHIf6/lv11ziPe6PdS2JEaUgNBvXCK7gfp+HvEP6
mQePu0WPlxYecjlnenUMyZ2I5FYBe5e3uUaffiojBFEGn1lskYWW1g4/FGyLlsjw
o3ewo/fkGiu+agWKpJLdGBevTO2Xu/3ouilrELd2HWAWKWhnVCZB7pMAj1Blk//M
k0OaPdUWqLI09bZ+hArUm9eAHeytcscRsCrlkogITlelm4n3XMVEF4YV2MBM+n8u
Y6jIHrO7BCZgwT49N8egQtyx6imvCgstHzos3weaIwO1BiFtXuOQi3XsIn6yfl4=
=Lp4M
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Dive into the World of Parallel Programming! The Go Parallel Website,
sponsored by Intel and developed in partnership with Slashdot Media, is your
hub for all things parallel software development, from weekly thought
leadership blogs to news, videos, case studies, tutorials and more. Take a
look and join the conversation now. http://goparallel.sourceforge.net
_____________________________________________________________________
Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto:
https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help, try #ltsp channel on irc.freenode.net
Loading...