May 2005 - openSUSE Edu - openSUSE Mailing Lists

Network migration starting with squid.. help
by Alan Loughlin 11 May '05

11 May '05

Hi, We currently run a proprietary only network consisting of 5 servers with 2 acting as files servers and dc's, 1 a antivirus server and successmaker server, 1 running sql and pass and the last running ISA with surfcontrol. I would like to move over to Linux for the most of my network, but due to the existing constraints of Successmaker and PASS, I cant do a lot, unless you have any suggestions. I do know Pearson are investigating cross platform capabilities. Anyway, my licensing is up for surfcontrol soon and I want to try if squid or similar can do the job. I know of dansguardian and squidguard, but don't know if there any good. My main question is what Linux distro shall I go for and what caching and filtering solution will do what isa and surfcontrol do? I have a hardware firewall, so the firewall features in isa are not needed. I do require ad compatibility with transparent authentication. Real time monitoring/monitoring would be good too. I've looked at censornet, but was not impressed because of i.e. always asking for authentication. Also, if I decide to move to Linux, how can you customise and lock down the desktop environment. We have decent pc's here, so a way to do this without ltsp would be handy. Thank you for your time Alan -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.308 / Virus Database: 266.11.7 - Release Date: 09/05/2005

3 3

Re: [suse-linux-uk-schools] Network migration starting with squid.. help
by Thomas Adam 10 May '05

10 May '05

--- Alan Loughlin <loughlina(a)swalcliffepark.co.uk> wrote: > My main question is what Linux distro shall I go for and what caching > and > filtering solution will do what isa and surfcontrol do? I'd go with censornet, myself ... > I've looked at censornet, but was not impressed because of i.e. > always > asking for authentication. Oh? You'd have to be more specific as to which parts are constantly requiring authentication. I'm sure it can be fixed. > Also, if I decide to move to Linux, how can you customise and lock > down the > desktop environment. We have decent pc's here, so a way to do this > without > ltsp would be handy. "Lock down"? What do you mean by that? Hmm, let's see. There's no such thing as "the" desktop environemnt -- there's a whole plethora [1] of them. As to which one you get as standard (if at all) depends on which distribution you pick. Either way, you can bet your bottom penny that it'll be one of either KDE [2] or GNOME [3]. Customising either of those requires that you're able to use a mouse, essentially. As to making such changes non-persistent, you would have to ensure that for any dot-files and dot-directories within the $USER's $HOME are set to read-only. You'd also have to change the ownership of the file to something different as well. Since we don't know which distro nor which desktop manager you'll be using, specific information will be scetchy at best. Note that whilst it is entirely possible to get a desktop environment to read from a system-wide location (/etc/X11/*, for instance, as most DEs tend to) -- that wouldn't negate a user being able to then customise things in their $HOME directory -- so supplying a default set of files, and locking them out would still have to take place. For KDE this tends to be ~/.kde{,2} (as a directory) and for GNOME: ~/.gnome -- Thomas Adam [1] http://www.xwinman.org [2] http://www.kde.org [3] http://www.gnome.org "The Linux Weekend Mechanic" -- http://linuxgazette.net "TAG Editor" -- http://linuxgazette.net "<shrug> We'll just save up your sins, Thomas, and punish you for all of them at once when you get better. The experience will probably kill you. :)" -- Benjamin A. Okopnik (Linux Gazette Technical Editor) ___________________________________________________________ How much free photo storage do you get? Store your holiday snaps for FREE with Yahoo! Photos http://uk.photos.yahoo.com

1 0

Re: [suse-linux-uk-schools] locking OO
by Thomas Adam 09 May '05

09 May '05

--- Paul Taylor <ptaylor(a)uklinux.net> wrote: > Hi: > > Does anyone know how to prevent students from changing the proxy > settings in > OO once it is installed on a network? Sure -- write protect all of the $USER's OO.o installation files -- wherever that is on Windows. -- Thomas Adam "The Linux Weekend Mechanic" -- http://linuxgazette.net "TAG Editor" -- http://linuxgazette.net "<shrug> We'll just save up your sins, Thomas, and punish you for all of them at once when you get better. The experience will probably kill you. :)" -- Benjamin A. Okopnik (Linux Gazette Technical Editor) ___________________________________________________________ How much free photo storage do you get? Store your holiday snaps for FREE with Yahoo! Photos http://uk.photos.yahoo.com

1 0

locking OO
by Paul Taylor 09 May '05

09 May '05

Hi: Does anyone know how to prevent students from changing the proxy settings in OO once it is installed on a network? Paul -- De omnibus dubitandum

1 0

Pam_mount on SuSe 9.1
by Rob Keeling 06 May '05

06 May '05

I am trying to install SuSE 9.1 as a workstation in a NT 4 Domain network. The default suse 9.1 install installed winbind etc, and configured them allowing me to log on to ssh with a NT username and password. I now want to configure pam_mount to mount a subdirectory of the unix home directory as the NT home directory. I had configured this on an old SuSE 8.1 box, so I think /etc/pam_mount.conf should be OK. However, having added auth and session lines for pam_mount into /etc/pam.d/sshd I can only get to the stage that in /var/log/messages I see pam_mount: error trying to retrieve authtok from auth code How do I enable pam_mount? My /etc/pam.d/sshd file is as follows #%PAM-1.0 auth required pam_unix2.so set_secrpc auth required pam_nologin.so auth required pam_env.so auth optional pam_mount.so use_first_pass account required pam_unix2.so account required pam_nologin.so password required pam_pwcheck.so password required pam_unix2.so use_first_pass use_authtok session required pam_unix2.so # trace or debug session required pam_limits.so session optional pam_mount.so use_first_pass # Enable the following line to get resmgr support for # ssh sessions (see /usr/share/doc/packages/resmgr/README.SuSE) #session optional pam_resmgr.so fake_ttyname Thanks Rob Keeling -- I love deadlines. I love the whooshing noise they make as they go by. - Douglas Adams

13 27