On Tue, 2005-11-08 at 08:34 -0500, Jim McQuillan wrote:
>
> > No. Anyone can telnet to an LTSP client and shutdown the machine or reboot
> > it. That is my point - it's a security issue. From my work PC - which has
> > nothing to do with LTSP - I shutdown several LTSP clients at our site
> > simply by telnetting to their IP adress and issuing the relevant ltspinfo
> > command. Having said that, it is required that the 'ALLOW_SHUTDOWN'
> > variable is set in the lts.conf file, but we want that because we want our
> > LTSP server to shutdown the clients. However, doing this means that anyone
> > can shut them down, not just the server.
> 
> So, you want each user to be able to shutdown their own workstations,
> and you don't want people to shutdown other workstations.
> 
Correct.

> Seems like a fair request.  This is an open source project.  Anybody
> care to step up and add authentication to ltspinfod?
> 
Ah, well...the thing is we are using LTSP for something specific (grid
computing), so there are no interactive users. We run the workstations
at runlevel 3 (shell).

I'll take a look at ltspinfod to see if we can add a 'server' option to
indicate that commands can only come from a given server. This will
satisfy us, and may well do for others too. I'll submit a patch to
bugzilla if that is okay, and if you decide to accept or reject it I
leave that up to you :-)



John.

-- 
---------------------------------------------------------------
John Horne, University of Plymouth, UK  Tel: +44 (0)1752 233914
E-mail: [EMAIL PROTECTED]       Fax: +44 (0)1752 233839



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to