Hi, Doing this based on IP is a bad idea, for two main reasons: 1. you can easily configure a different IP address to bypass 'security' 2. with LTSP thin clients all clients have the same IP address
If you don't care about 1), then you can overcome 2) by creating different servers, or running browsers as local applications (or using fat clients) and switches to divide the network. Either way, the best way to accomplish what you're trying to do is to use Squid authentication to identify users and hand out permissions accordingly: http://wiki.squid-cache.org/Features/Authentication Kindest regards, Jan Middelkoop Recreatie en Zorg Groep B.V. -- Website: http://www.recreatie-zorg.nl/ E-mail: j...@recreatie-zorg.nl Telephone: +31 10 714 22 97 Op 12-06-12 00:23, Andrés Yacopino schreef: > Hi, I have deployed an UBUNTU LTSP Server 10.04. > I want to change the IP address of the X Server of LTSP do make some > clients have different IP Address to connect t an Squid Proxy Server. > I have a Proxy Server in which based on the Ip Address you are able to > see a group of web pages or the whole internet. > The LTSP Server is in the range of IP Address having restricted internet > acccess, I have the need to make some LTSP users have full privileges to > browse internet. > I have setup an Alias in the LTSP Server to have two differents ethernet > cards: > > eth0 = 10.1.1.1 > eth0:1 = 10.1.2.1 > > I was able to change the dhcp server to be able to boot (based on the > mac of the client) to the interface eth0:1 and the client adquiring the > ip adddress in the range to allow browsing internet. > The problem is that the client is using the same X Server, the address > of the interface eth0, not the new address for the SQUID Server. > > Doing: ps -ef | grep X11 I see: > > userid 8444 8362 0 Jun08 ? 00:00:00 bash -c > LTSP_CLIENT=10.1.1.252 LTSP_CLIENT_HOSTNAME=ltsp1020 LC_ALL=es_AR.UTF-8 > LANGUAGE=es_AR.UTF-8 LANG=es_AR.UTF-8 DISPLAY=10.1.1.252:7 > /etc/X11/Xsession gnome-session< /dev/null> /dev/null ; > /usr/sbin/ltspfsmounter all cleanup > > Could I change a file in some place in the ltsp server to allow the > client to connect to the XServer in a different address (to 10.1.2.1 > instead of 10.1.1.1) based on the MAC of the client? > Thank you very much, > Regards, > Andres. > > ------------------------------------------------------------------------------ > Live Security Virtual Conference > Exclusive live event will cover all the ways today's security and > threat landscape has changed and how IT managers can respond. Discussions > will include endpoint security, mobile security and the latest in malware > threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ > _____________________________________________________________________ > Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: > https://lists.sourceforge.net/lists/listinfo/ltsp-discuss > For additional LTSP help, try #ltsp channel on irc.freenode.net ------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/ _____________________________________________________________________ Ltsp-discuss mailing list. To un-subscribe, or change prefs, goto: https://lists.sourceforge.net/lists/listinfo/ltsp-discuss For additional LTSP help, try #ltsp channel on irc.freenode.net
