Re: [Ltsp-discuss] Single user account and pam mount

2009-05-11 Thread Marius Flage
Gideon Romm wrote: You actually want PAM to be server-side, because your home directories need to be created server-side. I don't have code handy, but pam_mount should mount things in order as they appear in its configuration file. So, you should be able to say: mount a tmpfs on

Re: [Ltsp-discuss] Single user account and pam mount

2009-05-05 Thread Gideon Romm
Marius, You actually want PAM to be server-side, because your home directories need to be created server-side. I don't have code handy, but pam_mount should mount things in order as they appear in its configuration file. So, you should be able to say: mount a tmpfs on /tmp/$USER-tmpfs mount a

Re: [Ltsp-discuss] Single user account and pam mount

2009-05-04 Thread Marius Flage
Gideon Romm wrote: Then, the other piece is to make a temporary homedir for each user account that logs in that is based upon your golden one. Well, that can be done with pam_mount and unionfs. the tmpfs overlay can either be something created on the fly, or it can be something static that

Re: [Ltsp-discuss] Single user account and pam mount

2009-05-01 Thread Gideon Romm
Marius, Not sure if you are aware, but ldm these days has a Guest login feature. You can set usernames/passwords in lts.conf for each machine when the Guest login button is pressed, or the user can enter their own. This should solve teachers vs students issue. Then, the other piece is to make

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-29 Thread Vagrant Cascadian
On Tue, Apr 28, 2009 at 09:26:40PM +0200, Marius Flage wrote: Jordan Erickson wrote: I would propose a temporary user of sorts that pulls from the skel/template you created, does a pam makehomedir or whatever it is, and removes it upon logout. This way, you have separate user accounts

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-29 Thread jam
On Wednesday 29 April 2009 15:53:20 ltsp-discuss-requ...@lists.sourceforge.net wrote: I would propose a temporary user of sorts that pulls from the skel/template you created, does a pam makehomedir or whatever it is, and removes it upon logout. This way, you have separate user accounts

[Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Marius Flage
Hi there I've asked this question a couple of times on the IRC channel and mostly just gotten friendly abuse for having such a bad design as to only use one user account. So instead I ask this question here, where I can properly outline the reason why only one user account and also explain the

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Jordan Erickson
Marius, I concur with this type of setup, though my thinking is that having a single user account with multiple simultaneous logins isn't a very good idea since multiple things are happening at the same time, which might confuse the server/PAM/applications. I might be wrong, but it just seems

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Marius Flage
Jordan Erickson wrote: I would propose a temporary user of sorts that pulls from the skel/template you created, does a pam makehomedir or whatever it is, and removes it upon logout. This way, you have separate user accounts for each login, and changes can be wiped upon user logout. The

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Scott Balneaves
On Tue, Apr 28, 2009 at 12:03:52PM -0700, Jordan Erickson wrote: ... it shouldn't be shunned, it should be explored, developed and secured appropriately. There are many, many, MANY problems with this idea: 1) Most programs: gnome, firefox, openoffice.org, etc., all have configs that they

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread marius
Scott Balneaves wrote: All this having been said, I suspect that either pam-mount, or, probably more succinctly, pam-script (since you'd really want to do more that just mount: you also want to create the tmp area, etc.) would probably be the way to go. pam-script can be found at:

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Andreas J Guelzow
On Tue, 2009-04-28 at 23:30 +0200, mar...@flage.org wrote: Scott Balneaves wrote: All this having been said, I suspect that either pam-mount, or, probably more succinctly, pam-script (since you'd really want to do more that just mount: you also want to create the tmp area, etc.)

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread vagrant
On Tue, Apr 28, 2009 at 09:26:40PM +0200, Marius Flage wrote: Jordan Erickson wrote: I would propose a temporary user of sorts that pulls from the skel/template you created, does a pam makehomedir or whatever it is, and removes it upon logout. This way, you have separate user accounts

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread Steve Cayford
mar...@flage.org wrote: Scott Balneaves wrote: All this having been said, I suspect that either pam-mount, or, probably more succinctly, pam-script (since you'd really want to do more that just mount: you also want to create the tmp area, etc.) would probably be the way to go. pam-script

Re: [Ltsp-discuss] Single user account and pam mount

2009-04-28 Thread jam
On Wednesday 29 April 2009 03:04:17 ltsp-discuss-requ...@lists.sourceforge.net wrote: [snip] For simplicity and ease of user management (the school has no permanent IT personnel to handle day-to-day maintenance), we only use one shared account for all students. The implications of this