On 8/26/07, Peter <[EMAIL PROTECTED]> wrote:
> > It is not (or rather -- definitely should not) be necessary to have apache
> > or apache-ssl installed in order to use the notebook.  What problem 
> > occurred?
> > If you do
> >    sage: notebook(open_viewer=False)
> > it should work irregardless of apache.    SAGE includes its own complete
> > secure web server (built using Twisted).
> >
> > It is possible that there was a SAGE dependency on openssl, and by 
> > installing
> > apache-ssl you also installed the relevant depenency, which caused whatever
> > problem you had to vanish.
> >
>
> You are right, the apache_ssl installation included openssl which was
> then used to generate the SSL certificate (or key?) during the
> notebook.setup() process. Previously this notebook.setup() process got
> stuck at the place where the certificate was being generated (no error
> message, I had to kill it with ctrl-C).

Actually it doesn't get stuck.  It's just *really* really slow.  The stupid
GNU TLS certificate generator is stupidly pitifully slow compared to
the openssl generator.  It's really really annoying.

> > > This particular ubuntu server is currently not used for anything else,
> > > and I am hoping to use the sage notebook for a discrete math class and
> > > an introduction to abstract algebra class. I looked at the
> > > instructions for running the notebook in a chroot jail, but I'm afraid
> > > this is beyond my current unix skills. If I create accounts for the
> > > students (but disable account creation) and tell them not to vandalize
> > > the server, what other security or performance implications are there
> >
> > The chroot jail business is only necessary if you are using the machine
> > for other purposes -- if it is *just* for running the SAGE notebook, there
> > is basically no advantage to using a chroot (in reality this would depend
> > some on how your main server is setup, of course).
> >
> > > if the notebook is run from a single user account on the ubuntu server
> > > and is accessible to the students over the web?
> >
> > After all the students have accounts, you should be sure to disable
> > new account creation (which is the default when you run the server; type
> > notebook?).  Then only your students can use the server.
> >
> > It is also an *excellent* idea to setup users on the ubuntu server like 
> > this:
> >   (1) A user named "server"
> >   (2) Another (or several) users named "worker".
> >   (3) Setup ssh keys so that server can login as worker without having to
> >       type a password -- instructions for this are at the end of the help
> >       if you type notebook?
> >   (4) Given the worker logins as argument to the server_pool option of
> >       the notebook command.
> > Doing the above is a major advantage, because it means even if your
> > students type "rm -rf <blah>" they will not be able to harm the server's
> > data files or process, only the files of other worksheets.  If you don't
> > do the above, a nefarious student could e.g., change all the passwords
> > of users in the notebook, kill the notebook server at will, etc.
> >
>
> okay, I will try making these accounts for the server_pool.
>
> > > Also, as far as logging notebook activity, is it possible to keep
> > > rotating logs of all commands typed in the various notebooks, together
> > > with a username and timestamp?
> >
> > This is currently not implemented, but would probably be easy to
> > implement.  I hope you can wait a little for this.  Do you have a trac
> > account?  If so, it would be good to post a request for the above
> > on the server?  If not, contact me and I'll make an account for you.
>
> This is not urgent (for me). I don't have a trac account, but if you
> make one for me, I'll put this in as a request.

Please send me ([EMAIL PROTECTED]) a login name that you would like to have.

William

--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/sage-support
URLs: http://sage.math.washington.edu/sage/ and http://sage.scipy.org/sage/
-~----------~----~----~----~------~----~------~--~---

Reply via email to