Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - JaseP

Pages: 1 2 [3] 4 5 ... 36
31
Users / Re: Konsole item in computing menu,... help please...
« on: September 12, 2012, 05:45:42 am »
Exploring options & Follow-up question:

I've determined that NIS and local user logins can coexist on a system,... Especially, on a PXE boot the biggest issue is how to map the local user "/home" account properly with NFS. Not simple, but certainly less convoluted than what I was considering in my previous post...

Is everyone so attached to NIS login for what would be, essentially, a bolt-on addition/convenience that you would reject a "dummy" local user account, considering that might be the least amount of change to the system and more easily removable?!

I'm not all about the easy way, over the right way, but this looks like an area where to do it, the easy way gets it done, while the right way ends up standing in line (in que, for the Brits,... ) waiting to cash a check...

32
Users / Re: Konsole item in computing menu,... help please...
« on: September 11, 2012, 10:21:33 pm »
Hmmm,...

I'm thinking of a solution based on remote forwarding from the Core to the MD, and ssh-ing back to the MD (or even another MD),... But, I haven't thought it through enough to explain it correctly or figure out if it will even work... And I don't think it will resolve the issue of trying not to run a graphical terminal as root without password.

I'll keep working on it...

33
Users / Re: Konsole item in computing menu,... help please...
« on: September 11, 2012, 04:47:39 pm »
Alright, I didn't know that. Thanks. I'll have to take a look at that and how it affects launching xterm with with or without login support (e.g. there are certain xterm options that are not compatible with one another, like; xterm -ls and xterm -e, so I need to look at and understand NIS, and how it works, better)...

34
Users / Re: Konsole item in computing menu,... help please...
« on: September 11, 2012, 04:31:34 pm »
I didn't see them on the list of user accounts when I checked the /etc/passwd file on the MD. I did notice them when I did the same on the Core. But, I'll check again (tonight, maybe)... Maybe I missed/overlooked them...

If they are only accessible by ssh-ing to the Core,... I'd have to use ssh forwarding to go from the MD, to the Core and back to the MD, adding a layer of complication. Plus,... when using xterm -ls, I don't know if the minimal user environment that I would need to define would interfere with anything set in those user accounts (which, given my luck, it would).


35
Users / Re: Can Not gain Access To FreePBX Setup
« on: September 11, 2012, 04:08:44 pm »
I would love to read about all of this,... I have an SPA3102, an Obi110, two Google Voice numbers (one for me, one for SWMBO) and haven't even configured anything yet (for lack of time and fear that SWMBO, a/k/a "The Breaker of Things," would discover a way to screw it up & blame me for complicating things with my "gadgets").

36
Users / Re: Konsole item in computing menu,... help please...
« on: September 11, 2012, 03:57:04 pm »
Thanks,...

What I've decided is that the setup script needs to create a single user on each MD (named for the Moon[n] of that MD,... Like; Moon[n]_xtermuser), and give that user rights on the sudoers list on each MD so as not to interfere with any accounts currently used by the system.

I might have some prelim test script work done by the end of this weekend. Just a "hard-coded" launcher script, maybe a "hard-coded" user setup script as well... Full scripts will have to include sql queries to the database to get the necessary system information to do an automated setup. So, I have to learn that.

I don't know what to do about the tty terminals,... I think, though, that it should be a separate, optional piece to secure them... It doesn't make sense to limit user authority on a windowed xterm, and leave the the ability to get a tty as root (by default) hanging in the wind with a simple Alt-Ctrl-F[n]. It should be theoretically possible to limit local access to tty's while allowing access through ssh from the server. From what I've read, ssh-ing into a machine that's had its local tty access restricted is not affected, since authentication happens before hand, and that mechanism bypasses the normal restrictions imposed in the /etc/securetty file... but that'll be something to experiment with. If it's a separate piece to secure the tty's, it gives the admin the decision on how much to restrict the system, based on their own requirements. It would be a simple process to "undo" the tty access restriction by replacing the /etc/securetty file with the original, should someone need to reverse it. Future refinements could allow the admin to decide WHICH MDs to restrict in this way...

Otherwise, it should be simple to cause xterm to launch as a particular user. All that's left is to create a script that sets up the users on each MD (including a hybrid Core's on-screen Orbiter), sets the limited user environment, xterm configuration, sudo permissions for them, create a device profile for the "app" (script really) that launches xterm -ls, and make some sort of change to the main menu to assign/reserve it a hotkey. ... Oh, and eventually, to create a mechanism for turning this on (& configuring?!) it in the Web Admin,... Turns out getting xterm to launch in a more secure way is the easy part,... Devil's in the details...

There are two paths for user configuration that I can take,... the easier one being to require the user to set the password for the Moon[n]_xtermuser for each MD on first login with xterm... The second is to pre-define it,... but that would (eventually) require a Web Admin config screen... I think I'll take the easy road for now. If pre-configuration is desirable, that could be a ver. 2.0 thing.

One question remains,... I have a net installed 1004 system...

By default, if I drop to a tty on my Core, I'm presented with a login prompt that allows me to logins as the original user I created with the Kubuntu install. Does the DVD install create such a user,... or does it default to a password-less root like the MDs have??

Oops,... I realized I have a second question,... It came up while I was researching xterm use with ssh, and might (though unlikely) impact some aspect of how this would work...

Is ssh forwarding allowed on the LinuxMCE system by default?


37
OK nevermind,... my issues are unrelated, ... and at the moment , inconsequential, ... Thanks for clarification.

38
Users / Re: sambahelper credentials 10.04 [solved]
« on: September 10, 2012, 07:34:56 am »
Actually, that made me think about my thing with the terminal, ... thanks... food for thought, ...

39
I noticed the following:
  1) Missing media descriptions in the Videos lists (didn't look elsewhere). The entries were there, just not the file names...
  2) MythTV bombs out about one a day on me as well... the failed once too often error...

Is that the same as both of you are experiencing?

40
Users / Re: Konsole item in computing menu,... help please...
« on: September 10, 2012, 05:22:31 am »
Trying to get my head around the user management stuff in the terminal.

The object is to put together what I need to make this launch without being root by default... With least amount of additions or changes to the system,...

The su command works fine to get me to into my admin account (net install, but I don't know if that makes a I checked /etc/passswd just to be sure... ).

On the MDs, using su for the same user gets me to the sambahelper user... I checked /etc/passswd just to be sure... and yes,... it looks as though there are no real user accounts set up on the MDs, which makes sense ... Root level commands aren't honored when logged in as sambahelper,... which I expected.

That leads me to questions:
1) The core creates users with the names; pluto_[user names first entered on setup],... Are these "true" Linux user accounts in the traditional sense (or close to it), or some sort of services process user, like for MythTV, etc?

2) What would be the preferred method for this thing working on MDs?;
     a) Do not create any users,... default to sambahelper for ordinary users, but root for admin after supplying password (Set password as system Admins?)...
     b) Set up user "secondary" accounts with names derived from LinuxMCE, putting only admins on Sudoers list ("home" being their account dir on the core),...
     c) Set up Admins with "secondary" accounts only from LinuxMCE, otherwise as b, above...
     d) No user additions,...but create 2 options, sambahelper with no root authority, ... or root after supplying system admin's password,...

3) On Core,... same as above? or only just the admin...?

I'm inclined to think that the easiest thing would be #2(c) from above, universally, on MDs and the Core (I'm assuming a hybrid core here). But not use the LinuxMCE user accounts themselves, just a parallel set of accounts. Actually, 2(d) would be easiest, at least as far as MDs are concerned. But I'm inclined to think 2(c) would be more useful from the standpoint of using this as an admin tool.

Please let me know what you think.

41
Users / Re: Konsole item in computing menu,... help please...
« on: September 08, 2012, 04:06:38 am »
Thank you...

And XTerm it is... I hadn't realized it had a transparency setting,.. never bothered to use it...

42
Users / Re: Konsole item in computing menu,... help please...
« on: September 07, 2012, 07:33:01 pm »
Ok... I'll do it,...

But I want to do it with Guake...
http://guake.org/
That'll give the potential (maybe) to have it drop down over top of a running Media director, regardless of what's running underneath.  You can tell me if that's feasible. But otherwise, I think it should be intercepting the keyboard like the Firefox wrapper.

I'd like it to be able to be called up with a hot-key over-top any running OSD Orbiter running on an MD (e.g.: during media playback). That might give you the ability to manually issue live commands, such as DCE router commands to a running device (like the Xine Player).

I've found some of the development stuff in the Wiki, know that a device has to be created, etc,... but I need to have some kind of starting place,...

So,... I have questions;
  1) What scripts, wiki entries and files should I be looking at first (Mozilla.sh comes to mind for a starting place)?
  2) Could it be restricted to certain users, and if so, set to su (or kdesudo) to the running user if authorized? & What examples should I look at to figure that out?
  3) If it can be given a hot key to launch, where are those defined, and where/what should I be looking at to get started?
  4) Can it be set to always be on top (meaning are you alright with that, not necessarily how is that done, I assume wmctrl would be used)?

Please keep in mind I don't know C, C++, PHP, Ruby, etc. ... but I can shell script adequately. 

43
Users / Re: Konsole item in computing menu,... help please...
« on: September 07, 2012, 04:47:15 pm »
I'm trying to respond without sounding like a big giant [expletive deleted], but there's no good way (equally my personality as other reasons)... So, I'll just try to keep it short.

I had a very brief look at the the Mozilla.sh... I haven't figured out the whole thing, I'll keep looking, but I can't promise anything.

What I'm doing is just a nasty hack for my own purposes. I didn't build the Computing Class, I'm just using it. The "broken" apps  (KDE's Konsole & Dolphin) DO run... just hidden in the background,... not a very good security measure, if that's the reason they're not running right. The non-KDE apps run without any restriction. The security holes are way bigger than a file browser and a terminal running that way for a few minutes... & are an architecture issue that's definitely not my fault.

I have more ideas about this,... But that's a topic for another thread & probably something more of a wish list for 1204.

44
Users / Re: Konsole item in computing menu,... help please...
« on: September 07, 2012, 08:30:38 am »
Well,... I did a sanity check, and it's not anything I did...

There's a major incompatibility with the way KDE brings up its core apps and the Computing Class (where the DCE ruter cedes input control to the app)... Dolphin does the same thing as KDE... dives straight under the "Pluto desktop"...

I was able to install Thunar and Nautilus just fine,... and both called up fine from Gnome-terminal. Thunar is nice, in that it displays prominently that you're running as root (which can "result in damage to your system"), while Nautilus likes to take over the desktop if you don't use the --no-desktop switch...

I'll double-check Thunar as a Computing app to be safe, but I am pretty sure of the outcome ... I'm sure it'll be fine, where KDE apps aren't ...

PS: I am not trying to add these apps as a Feature... I understand full well that the computing class bypasses the normal control by the DCE router over input... I was NOT looking to get a wrapper together... Please understand that. This was intended, from the beginning, to be a HACK. I just wanted to clarify...

That said,... I don't know how deep the trouble goes ... Just to KDE and its plasma layer,... or all the way to QT.

45
Users / Re: Konsole item in computing menu,... help please...
« on: September 06, 2012, 06:35:23 pm »
Wasn't trying to get you to add a feature...

I just wanted an on-screen terminal app for (just) myself, because I prefer that to tty switching or dropping out to KDE for something simple as runing a command... If someone else wants it, I'll be happy to document it.

Anyway, I'll also be happy to figure out getting Konsole working, ... especially figuring out if it was bone-headed mistake of mine, or a (real) problem with KDE...




Pages: 1 2 [3] 4 5 ... 36