I am volunteering to set up a computer lab for a small private school on an extremely limited budget. I love Ubuntu for my home, and on my server at work, but have never used it in a school before. I would like to "lock down" all the control panels, pretty much everything except for a few applications (open office, firefox, and some educational games, of course). I don't want the students (who will be automatically logged in as guests) to be able to make changes, or unintentionally mess things up.
Alternatively, at the public school I work at, we use Windows (sigh) that has been "frozen" using a program called Deep Freeze (similar to windows "steady-state"), which causes any changes a user my make revert back to default when rebooted. Is there a Linux equivalent? That may work too!
I noticed (the hard way) that enabling a guest session under 9.04 does not lock the source user. I enabled a guest session for someone and came back to find them rooting through my files. By quitting the guest session, it goes back to the source user's desktop without requiring a password. Shouldnt it go to gnome-screensaver automatically? Can this be changed? Is it a bug?
to replicate: log into source user's account use the menu to start a guest session quit the guest session root through files un-opposed.
Ubuntu 10.10 x64.It's been a little over a week since I *rebuilt my system after a gdm or gnome issue and now I'm having an issue with the guest session not working and I'm unable to add a new user. It says "incorrect data" or something like that. This is more than annoying. Why is my system decaying so rapidly? I'm not adding anything to the system that isn't approved by Ubuntu. it's virtually a stock build, minus some changes to the look and feel category. Is this possibly a security issue? My routers up and running and I turned on UFW.
.1) Can't add new users .2) Guest session will not start. .3) Should I be concerned about my security?
All I want is a simple Samba installation that anonymous users/guests can access. I have modified the smb.conf file so much using 'tips' that should enable a simple folder share. Nothing works. If I share the folder using Nautilus share then the folder is accessible without any credentials from only Win7 and android ES File Explorer. XP can't see the folder, nor can any other linux device. I want to switch to linux as a main OS but without shares it's not practical. Does anyone have a stripped down smb.conf which provides guest access to a single folder?
Here's the latest testparm -s Code: $ testparm -s Load smb config files from /etc/samba/smb.conf rlimit_max: rlimit_max (1024) below minimum Windows limit (16384) Processing section "[printers]" Processing section "[print$]" Loaded services file OK. Server role: ROLE_STANDALONE [global] workgroup = MSHOME server string = %h server (Samba, LinuxMint) security = SHARE map to guest = Bad User obey pam restrictions = Yes pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *Entersnews*spassword:* %n *Retypesnews*spassword:* %n *passwordsupdatedssuccessfully* . unix password sync = Yes syslog = 0 log file = /var/log/samba/log.%m max log size = 1000 dns proxy = No usershare allow guests = Yes panic action = /usr/share/samba/panic-action %d path = /home/mint/Shared read only = No create mask = 0777 guest ok = Yes
[printers] comment = All Printers path = /var/spool/samba read only = Yes create mask = 0700 guest ok = No printable = Yes browseable = No
[print$] comment = Printer Drivers path = /var/lib/samba/printers read only = Yes guest ok = No
I'm currently running a small server using 9.10 and I wondered if using groups was a possible route in order to keep users away from the bulk of the file system and keep them in locked their home directories.
What I planned to do is use a group named 'allowsystemfiles' to be added to admin accounts, then to set parts of the file system to that group, along with the permissions 0760 to keep non-admin users out.
I'm trying to get samba working on a debian/xebian box to use as a fileserver. I have a HTPC which is win 7 and a laptop which is OS X. I've installed SWAT and Samba to manage the whole settings. I'm trying to get it setup so that there's a user which has access to my ~/ and a guest user which just has read access to ~/Media/ so that the Media centre can read all the files from it without having to login.
The problem is when I have map to guest set as NEVER I can access the samba ~/ and I'm asked for a username and password which I login with fine and can access the files on both share ~/ and ~/Media. However when I set the map to guest to bad user or bad password I can access the share for ~/Media. But when I try and access the share ~/ I don't get any login box and I immediately get the error "Can't access share permission denied" or an error along those lines.
Here's my /etc/samba/smb.conf # Samba config file created using SWAT # from 192.168.1.65 (192.168.1.65) # Date: 2010/07/10 20:39:16
# Global parameters [global] workgroup = MS_HOME server string = %h server (Samba %v) obey pam restrictions = Yes passdb backend = tdbsam, guest passwd program = /usr/bin/passwd %u passwd chat = *EntersnewsUNIXspassword:* %n .....
How to get it working so I can have a guest share for my HTPC and a logged in user for my private files?
I want to lock the filesystem based on user basics, In effect only specific users should have write access. This need to done apart from normal permission setup.
Required: Only app users need to have write permission over app file system, this should done apart from the normal directory permissions. The all other users can able to view the contents even though other users have write permission based on permissions.
This need to done by over ridding the normal permission setup.
I have a firewall/router box running openSUSE 11.2 between the outside world and the LAN. This router also provides DNS for the LAN and has SuSEfirewall enabled. LAN users need (almost) full access to the internet. However, I want to block certain sites which are not required for work (you name it: facebook is my candidate). What is the most elegant way to block certain sites (which have quite a lot of different IP numbers) ?
I installed Pessulus on my workstation and I'm not able to lock other users profiles? I see the little wooden shield when I click on them, excpet it isn't blocking anything?
how to lock down individual users from setting a proxy server. Its a server not a WS so it should never go to the internet. I want to lock down the system side and firefox 5 settings.
Is there any way to access the guest account without having to go through the Gnome Panel? I'm using Cairo-Dock and disabled the Gnome Panels since it just gets in the way, but the only way I know to get access to the guest account is through gnome panel.
I have debian8.2 installed in VMware 12 with gnome desktop as guest os.
It boot into gnome successfully. But it will not boot into CLI mode and recovery mode. While boot into CLI, It is stucked in a blank screen, no cursor, after long long boot log splash in the screen.
To boot into CLI rather than gnome, I just set default.target into multi-user.target for systemd. I checked the syslog for boot into CLI, found that systemd execute getty 1~6, but it seemed to no success log and it seem to no other log for systemd. Is it failed to getty?
I check the grapyical.target and multi-user.target in systemd, find multi-user.target is the only one target required by graphical.target. Multi-user.target can be execute successfully during boot into graphical mode, while it will not be successfully execute during boot into CLI mode. That's is so unpredicted. Is there something else I missed?
Thoroughly repeatably, OpenOffice locks up on me when scrolling inside documents. Here's the breakdown:
* Only happens when actively in the process of scrolling * Doesn't matter if you use keyboard, mouse wheel, drag the scroll bar, or click the scroll arrows * Always happens within 15 minutes of steady use * Happens in both writer and calc -- haven't tested the others * OOo freezes up and no longer repaints the window or responds to anything * gnome-session peaks out at 100% CPU and stays there * Currently running application continue to work fine * Most applications (gnome-terminal, firefox, koffice) can no longer be launched * Some applications (abiword) can still be launched * Launching from icons brings up the spinner, but nothing else happens * Launching a GUI app from a terminal, it looks like it runs on CLI, but nothing ever happens in the GUI proper * X starts leaking descriptors and thus chewing up drive space at ~1M/s
Killing X and bringing up a new session puts everything back to normal, including CPU usage and drive space. This happens every time on my 64-bit Intel laptop and has persisted through several X/OpenOffice/kernel updates. It never happens on my 32-bit Intel desktop.
Sooner or later you may experience a Gnome shell lock up. After two weeks of daily use I experienced my first one today: the cursor turned to a hand, and no amount of clicking and pressing Esc would have any effect; Windows key didn't bring Activities in focus either. If you experience these or similar symptoms you can restart the gnome-shell in order to unlock the Gnome session:
1) pass to a console (press Ctrl+Alt+F2)
2) log in
3) execute: ps -ef | grep gnome-shell in order to find the gnome-shell process id (PID); the output may look something like
[Code]...
Pressing Ctrl+ALt+F1 (or, if that doesn't work -- Ctrl+ALt+F7) should take you back to the Gnome session. You should see the restarted gnome-shell. (You can now return to the console, log out from the console, and return to the Gnome session).
I am using RackMonkey to map out my lab. Unfortunately, due to RM limitations, every user who accesses the site has write access UNLESS they are logged in as a user named "guest". I currently have Apache allowing only the users (sysadmins) in an LDAP group access to RM, but I would like to allow read-only access for other users as well.I found mod_authn_anon, but I am having trouble combining the two authentication methods. I am using Apache 2.2.18 (compiled myself) on SLES 11.1.
This is the common part:
Code:
AuthType Basic AuthBasicProvider ldap anon Order allow,deny Allow from all
This part by itself works for the LDAP authentication:
Anonymous guest Anonymous_VerifyEmail Off Anonymous_MustGiveEmail Off Anonymous_LogEmail on Require valid-user
But if I have both of the previous blocks enabled at once, then guest access does not work. If I throw in a "Satisfy any", then I am not prompted for a username at all. How can I allow access to this LDAP group and to a user named "guest", but not allow all valid LDAP users to log in?
I'm fairly decent Linux admin (ok, i've been paid to do it for the last 10 years now, maybe better than fair), however this problem has me stumped. Ever since i dist-upgraded to 10.10 playing flash videos longer than a minute will *sometimes* lock up my window manager. I am unable to click on other windows, or links in current window. If i open a terminal after starting the video i can still run commands in the terminal after its locked up, but not use the mouse in any form at all.
I can get to tty1 or any other console, kill flash, kill the browser, etc. Until i restart gdm or kdm it is still locked up however. I have tested with both kde and gnome. Tested with kdm and gdm. Tested with firefox and chrome (both use different installs of flash plugin - chrome brings its own). I created a new user on the system to test enviroment, no luck there. I eventually reinstalled yesterday with a fresh 10.10, and still I am having this problem. It *often* happens, but not always. Always on videos longer than about a minute at a guess, i have not timed it. Only ever happens on flash videos - ie ..... etc.
USB driver bug exposed as "Linux plug&pwn" or this link.Two choices [GNOME, Fedora 14]:
1 - use the gnome-screensaver
2 - use the "switch user" function [gnome menu -> log out -> switch user]
So the question is: which one is the safer method to lock the screen, if a user leaves the pc? Is it true, that using the [2] method is safer?Why do i think this? - The gnome-screensaver is just a "process", it could be killed. But if you use the log out/switch user function, it's "something else". Using the "switch user" function, could there be a problem like with the gnome-screensaver? Could someone "kill a process" and presto...the lock is removed?Could the GDM [??] "login windows process" [e.g.: a picture of it] get killed and the "lock" gets owned?
p.s.: if the [2] method is safer, then how can i put an icon on the GNOME panel, to launch the "switch user" action by 1 click?
when i want to opening lock screen and after entering password take too long time to open lock scrren and i can not find what is the problem.i can not find any clue in my logs, so this is some of syslog :
Code: Select allDec 17 21:19:34 ali-deb gnome-session[2274]: (gnome-shell:2421): Gtk-WARNING **: Symbolic icon /home/ali/.local/share/gnome-shell/extensions/lockkeys@vaina.lt/icons/numlock-disabled-symbolic.svg is not in an icon theme directory Dec 17 21:19:34 ali-deb gnome-session[2274]: (gnome-shell:2421): Gtk-WARNING **: Symbolic icon /home/ali/.local/share/gnome-shell/extensions/lockkeys@vaina.lt/icons/capslock-disabled-symbolic.svg is not in an icon theme directory Dec 17 21:19:34 ali-deb gnome-session[2274]: (gnome-shell:2421): GLib-GObject-WARNING **: /tmp/buildd/glib2.0-2.42.1/./gobject/gsignal.c:2579:
what program runs the Session lock and the screen saver for gnome and KDE on centos 5.5. But most importantly id like to know what the config file for the screensaver/session lock is called and where its most likely located.
I'm trying to install the Guest Additions for a VM running a guest Lucid Lynx Server. The problem I'm encountering is this: The vboxadd-install.log for vbox says it "couldn't find the sources of your current Linux kernel" and to "Specify KERN_DIR=<directory> and run Make again."
i've installed kubuntu 10.04 on a sun virtualbox , and when i tried to install the guest additions i got this error in the terminal:
Building the VirtualBox Guest Additions kernel modules. fail ! (Your system does not seem to be set up to build kernel modules. Look at /var/log/vboxadd-install.log to find out what went wrong) i'am running windows 7 as a host operating system .
I have a local file server running Samba on Fedora 9. It's already configured and serves a few people without any problems. I am now trying to set up a new read-only share with the username 'guest' and the password 'guest'. However, with no success so far! If I log on as 'guest' with the password 'guest' like so:
Code:
su - guest No problem. Once logged in, if I try:
Code:
smbclient //samba/share
I'm prompted for a password. If I enter 'guest' I get:
OpenSUSE installed in a Virtualbox Virtual Machine and I want to set a shared folder.
1 - Set up a Virtual Machine and install OpenSUSE 11.2
2 - Create a shared folder on host (HostFolder)
3 - Setup the shared folder in Virtualbox Via the Virtual Machine details or via Devices > Shared Folders...
4 - Install dependencies for running the Virtualbox installer You need to install the right development kernelpackage for your machinetype (use 'zypper search -i kernel' to see what's installed) sudo zypper make gcc kernel-source kernel-hosttype/default-devel
5 - Run the Virtual Machine and go to Devices > Guest Additions This mounts an iso image in your OpenSUSE guest.
6 - Open a root terminal and run
cd /usr/src/linux make oldconfig && make prepare && make scripts && make dep cp ../linux-obj/$HOSTTYPE/default/Module.symvers . make prepare
* A commenter on previously mentioned thread says this step is unnecessary but it doesn't work without on my system. I suggest trying step 7 first and returning to step 6 if that fails. *
7 - Run ./VirtualboxLinux yourhosttype .run from the mounted iso image.
8 - Create shared folder in OpenSUSE (GuestFolder)
9 - Test with sudo mount -t vboxsf HostFolder /home/user/GuestFolder It works? Great! Let's set up the system so it automounts for your regular useraccount instead of root-only access.
10 - Add this line to /etc/fstab HostFolder /home/user/GuestFolder vboxsf defaults,uid=1000,gid=1000 0 0
11 - It works for me but if it still doesn't automount after a reboot; sudo mount -a
I installed a Fedora 14 guest on a Fedora 14 host with Virtualbox, then i run these commands on the guest:yum install kernel-devel kernel-headersbut if i try to install the virtualbox-guest additions on the guest, is still complains about that it's unable to find the kernel source directory?Ha anyone succeded installing the guest additions on a guest Fedora 14?
When i connect windows server 2003 from ubuntu these error displayed .When i installing the tsclient, by executing these following command from a Terminal window:
sudo apt-get install tsclient
When i run these command the following error displayed.
E: Could not get lock /var/lib/dpkg/lock - open (11 Resource temporarily unavailable)
E: Unable to lock the administration directory (/var/lib/dpkg/), is another process using it?
I have a HP Pavilion dv4 that is 4 months old. Yesterday it suddenly seemed to restart then once I logged in it turned off. When I tried to turn it on some of the lights came on and the caps lock and num lock started flashing. Since then I have not been able to get it to work correctly.It once seemed to turn on but died again after the login window.I tried to use my live cd but the same thing happened. It started loading once, but then shut down again. Every other time it stayed dead minus the lights
I recently installed Ubuntu 11.04 on an old Sony Vaio laptop. I was following some of the steps here..[url]
The step "Enable Full DVD Playback(Dual Layer DVD Support)" did not finish correctly doh and now I can't use 'sudo apt-get' for anything or the software center or using the 'Update Manager' does not work.
The update manger says it may be caused by an update not finishing correctly which sounds correct as explained above. The apt-get command gives me back the following....'Could not get lock /var/lib/dpkg/lock resource temporarily unavailable' 'unable to lock administration directory /var/lib/dpkg is another process using it?'
I tried the obvious restart but that hasn't worked.
E: Could not open lock file /var/lib/dpkg/lock - open (13: Permission denied) E: Unable to lock the administration directory (/var/lib/dpkg/) , are you root?
I have pidgin2.5.2. I want to install pidgin2.6.6.How can I do that?E: Could not get lock /var/lib/dpkg/lock - open (11 Resource temporarily unavailable)E: Unable to lock the administration directory (/var/lib/dpkg/), is another process using it?
