On Tue, Apr 28, 2009 at 12:03:52PM -0700, Jordan Erickson wrote:
> ... it shouldn't be shunned, it should be explored, 
> developed and secured appropriately.

There are many, many, MANY problems with this idea:

1) Most programs: gnome, firefox, openoffice.org, etc., all have configs that
they constantly write to and update.  Having a shared, common area on a server
is either going to require some very special fancy footwork involving private
namespace homedir mounts, or creating per-instance homedirs and mounting them
via unionfs, as the person before noted.  What you "gain" in having to manage
"only one account", you lose in increased complexity of managing the
environment, as well as an increased chance of "something going wrong" with
this setup.  As you say, these are things that could be developed around.
However:

2) "Bad Student" figures out he can break into the school mark system/finds an
open proxy to view RedTube videos/harrases fellow student with racial
slurs/pick your scenario.  *EVEN IF* you figured out some way to identify the
135 currently logged in as "student" to the one who's actually causing the
trouble, good luck trying to prove it beyond a reasonable doubt to a
technically illiterate Principal/School Trustee/Judge and/or Jury.  "Oh, and
you say you developed this system yourself?  Could you please provide
*incontrovertable* proof that you've CORRECTLY identified little Yimmy here as
the bad guy?  And speak slow: I don't understand all this computer
mumbo-jumbo".

All this having been said, I suspect that either pam-mount, or, probably more
succinctly, pam-script (since you'd really want to do more that just mount: you
also want to create the tmp area, etc.) would probably be the way to go.

pam-script can be found at: http://sourceforge.net/projects/pam-script/

Hope this helps.

Scott

-- 
Scott L. Balneaves | An honest tale speeds best being plainly told.
Systems Department |     -- William Shakespeare, "Henry VI"
Legal Aid Manitoba | 

------------------------------------------------------------------------------
Register Now & Save for Velocity, the Web Performance & Operations 
Conference from O'Reilly Media. Velocity features a full day of 
expert-led, hands-on workshops and two days of sessions from industry 
leaders in dedicated Performance & Operations tracks. Use code vel09scf 
and Save an extra 15% before 5/3. http://p.sf.net/sfu/velocityconf
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to