[02:35] <Tom47> i was wondering is there any documentation that an administrator might refer to eg ... how to limit internet access?
[02:37] <Tom47> i suppose thats two questions .... ok one at a time ...
[02:37] <RichEd> Tom47: limit in what way ?
[02:37] <Tom47> how do you limit/manage/control thin client internet access?
[02:37] <RichEd> that is not really an o/s or Ubuntu function, it comes more under 3rd party filtering
[02:38] <Tom47> ummm it woul be a real issue for a school though ....
[02:38] <RichEd> oh ... I see what you mean now ... but that would really again be done against the user logged in, regardless of what sort of workstation i.e. fat / thin
[02:38] <Tom47> thin
[02:39] <RichEd> i mean that fat or thin is not the issue, it would be against user logged in ...
[02:39] <Tom47> yes true but would apply to classes of users eg students, employeess, etc
[02:39] <Tom47> yes riched sorry i misread yu initially
[02:40] <RichEd> I'm guessing that you'd use a firewall / proxy programme, looking at each user by login name ...
[02:41] <RichEd> so if BobC logged in from the LAB using a thin client today, and then via a fat client in the library tomorrow, you'd want both sessions to be logged, stats accumulated etc. against the user
[02:41] <Tom47> wouldn't a school want to implement policies thoughwhich applied to everyone rather than needing to set up each sudent individually?
[02:42] <RichEd> so you'd make a policy for "members of the group students" another for "members of the group staff" and add user BobC to the group students
[02:42] <RichEd> i think there may be some ideas on this in the wiki ... let me do a quick search
[02:45] <Tom47> ok ty
[02:55] <RichEd> Tom47: this is the best I can find at the moment ...
[02:55] <RichEd> try ogra when he wakes up again later
[02:55] <Tom47> ok ty
[11:11] <ogra> Tom47, for professional solitions (i.e. standalone firewall machine) we have smootwall on the server addon CD ... you can just install a commandline system on a spare machine with two NICs and install smothwall on top ...
[11:11] <ogra> if you want filtering directly on the server have a look at willow (its in universe)
[11:12] <ogra> (not sure about its status though)
[11:13] <Amaranth> definitely proof-of-concept
[11:13] <Amaranth> much more work than i had expected
[11:15] <ogra> Amaranth, well, white/blacklisting works, no ?
[11:15] <Amaranth> yeah
[11:16] <Amaranth> except the error pages you get instead don't
[11:16] <ogra> i think thats the main concern for schools
[11:16] <ogra> even though you shouldnt run firewals on a server anyway :)
[12:25] <rYu> uhm..
[12:26] <rYu> anyone here?
[12:39] <`6og> hi :)
[01:48] <rYu> uhm..
[02:31] <Tom47> ogra what is the thinking behind non-running of firewalls on the server?
[02:42] <ogra> Tom47, well, a firewall is a security barrier
[02:42] <ogra> you dont even want user accounts on such a thing if you want real security
[02:42] <Tom47> oic
[02:43] <Tom47> i just installed willow ..... now to get it to run !!!!
[02:43] <Tom47> ok
[02:44] <ogra> you usually also dont install any stuff beyond what you need ... i.e. no compiler so hackers dont have opportunities to change binaries in case they break in etc
[02:44] <Tom47> the thing we are trying to achieve here is basically to continue to allow access to the net from the server for software updates ec but prevent user browsers from going anywhere but to the apps on the server
[02:45] <Tom47> yes ... ok .... am only setting out on the pth to server wisdom and appreciat the insight
[02:46] <Tom47> the main browser app on the server is one based on tomcat/mtsql and i would like it isolated from exernal access as well
[02:46] <Tom47> mysql
[02:48] <`6og> Tom47, make it run on loopback
[02:49] <Tom47> it is presently accessed via 127.0.0.1:81880 ... is that what you mean by 'on the loopback' ?
[02:50] <Tom47> 8180*
[02:51] <`6og> make it run on any 127.*.*.* address
[02:51] <Tom47> ok right yes ty and that stops any external access ?
[02:51] <`6og> should do
[03:16] <lu> hi
[03:17] <lu> someone helpme to configure wifi -wpa ?
[03:29] <lu> there's someone ?
[03:30] <Tom47> yes but my speciality is asking questions at this stage of my knowledge of edubuntu specifics
[03:39] <sbalneav> Morning all
[04:56] <sgonzalez> I'm trying to connect my edubuntu servers to Active Directory. I need to install kerberos (krb5-user) to do this, but when I try to install it, I get an error that it depend on krb5-config and that is not installable. Anyone have any ideas why?
[04:57] <Kamping_Kaiser> sgonzalez, what version of ubuntu?
[04:58] <sgonzalez> edubuntu 7.04
[04:59] <sgonzalez> I did this same process using ubuntu 6.06 and it worked great. I'm fairly new to Linux, so I don't understand why packages won't install.
[04:59] <Kamping_Kaiser> sgonzalez, the package may have been made "badly"
[05:00] <Kamping_Kaiser> i havent used 704, so i'm still trying to decide if i'll be any use *heh*
[05:00] <sgonzalez> KK: besides googling looking for others' experiences and chats like this, any way to know if it actually works?
[05:01] <Kamping_Kaiser> sgonzalez, can you give me the exact error your getting?
[05:01] <Kamping_Kaiser> according to packages.ubuntu.com both packages exist, so i'm trying to work out the root of the problem
[05:01] <sgonzalez> The following packages have unmet dependencies:
[05:01] <sgonzalez> krb5-user: Depends: krb5-config but it is not installable.
[05:02] <sgonzalez> E: broken packages
[05:03] <Kamping_Kaiser> sgonzalez, try and install krb5-config on its own
[05:03] <sgonzalez> Errors out saying...
[05:03] <sgonzalez> E: package krb5-config has no installation candidate
[05:04] <Kamping_Kaiser> sgonzalez, run 'sudo apt-get update' then try again (could you pastebin the output of apt-get update and of your /etc/apt/sources.list too)
[05:06] <sgonzalez> ARGH! My network is down for some reason. Maybe that's my problem (I'm chatting from a different machine) Give me a minute to check this out.
[05:09] <Kamping_Kaiser> hehe. np
[05:12] <sgonzalez> Well, I did mess up my gw setting, but after fixing it still can't install krb5-user or config. I don't know how to do a pastebin... can you tell me how?
[05:13] <Kamping_Kaiser> !paste
[05:13] <ubotu> pastebin is a service to post large texts so you don't flood the channel. The Ubuntu pastebin is at http://paste.ubuntu-nl.org (make sure you give us the URL for your paste - see also the #ubuntu channel topic)
[05:13] <Kamping_Kaiser> have a look there ^^
[05:16] <sgonzalez> alright... it's pasted at paste.ubuntu-nl.org/30553
[05:23] <sgonzalez> I added my sources.list and now it's at 30554.
[05:38] <Kamping_Kaiser> i hate my internet
[05:38] <Kamping_Kaiser> sgonzalez, has anything been said after <Kamping_Kaiser> sgonzalez, wth? their both in universe :S. could you pastebin  your /etc/apt/sources.list file?
[05:38] <Kamping_Kaiser> ?
[05:43] <sgonzalez> It's there too... it's at pate.ubuntu-nl.org/30554
[05:44] <sgonzalez> Don't hate your internet :(
[06:02] <Burgundavia> stgraber: can I ask why you are rewriting the student control panel? /me is baffled
[06:03] <cbx33> Burgundavia, afaik stgraber isnt going to any more
[06:03] <Burgundavia> right
[06:03] <Burgundavia> somebody talked him out of it?
[06:03] <cbx33> we're going to collab to make tcm better
[06:03] <cbx33> afaik
[06:03] <cbx33> how are you anywho Burgundavia
[06:03] <cbx33> been a while since we last spoke
[06:03] <Burgundavia> pretty good
[06:03] <cbx33> cool
[06:04] <Burgundavia> register for courses on monday
[06:04] <cbx33> oh?
[06:05] <Burgundavia> yep, headed back to school\
[06:06] <cbx33> what ya doin?
[06:06] <cbx33> hey I would if i could
[06:06] <cbx33> back to uni that is to do Comp Sci
[06:06] <Burgundavia> Geography
[06:07] <Burgundavia> foresight? the linux distro?
[06:55] <Burgundavia> http://lists.opensuse.org/opensuse-edu/2007-07/msg00001.html
[07:29] <LaserJock> blah, is ogra not here?
[07:30] <Burgundavia> I have  ogra has quit (Remote closed the connection)
[07:30] <Burgundavia> two minutes before you arrived
[07:30] <LaserJock> for goodness sakes
[07:30] <LaserJock> that's my luck
[07:32] <LaserJock> sbalneav: you around?
[07:59] <CaPsULe> hillo 2 everybody
[08:00] <CaPsULe> i need driver
[08:33] <cliebow> LaserJock, isnt he flying to the U.S?
[08:33] <LaserJock> oh, that could be
[08:33] <cliebow> he said something about "stuck in Philly"
[08:33] <cliebow> for 4 hours
[08:34] <LaserJock> oh, he might be off to
[08:34] <LaserJock> Ubuntu Live
[08:34] <sbalneav> LaserJock: are you talkin' to me?
[08:34] <LaserJock> sbalneav: any work on docs lately?
[08:34] <sbalneav> None.
[08:35] <sbalneav> When's my cut-off date?
[08:35] <LaserJock> sbalneav: and hi!
[08:36] <LaserJock> sbalneav: not for some time yet
[08:36] <LaserJock> but we need to have a little early action at some point ;-)
[08:36] <sbalneav> heh
[08:36] <sbalneav> well, I could start documenting the changes to LDM I suppose.
[08:37] <sbalneav> I've got a LOT of LDM work to do this weekend (been slacking off) so I'll add that to the mix.
[08:37] <LaserJock> np, just doing periodic pokes to make sure people are still alive :-)
[09:06] <RichEd> hey LaserJock & sbalneav ...
[09:06] <LaserJock> RichEd!
[09:06] <sbalneav> Hey RichEd
[09:06] <RichEd> yep ... ogra is winging his way across the big puddle in a parrafin budgie
[09:07] <RichEd> will see oliver tomorrow some time ... when he should be online again
[09:07] <LaserJock> RichEd: oh man, I wish I could have made it
[09:07] <LaserJock> for multiple reasons
[09:08] <LaserJock> but it's expensive and I probably shouldn't take any time off of work
[09:08] <RichEd> LaserJock: I don't it is such a "participant event" so much as a "show the potential clients"
[09:09] <LaserJock> yes
[09:09] <LaserJock> I'm supposed to be there "selling" a book
[09:09] <RichEd> we'd prefer you to R&R and recharge ...
[09:09] <RichEd> oh ...
[09:09] <RichEd> speaking of R&R what are you doing on IRC ?
[09:09] <LaserJock> I was looking for IRC
[09:09] <LaserJock> I haven't gotten any email from you or ogra for days
[09:10] <LaserJock> and you guys weren't here for the Edubuntu meeting yesterday
[09:10] <LaserJock> so I thought I'd pop in and see what's going on
[09:10] <LaserJock> RichEd: yes, yes
[09:10] <stgraber> LaserJock: not a lot of people was tbh :)
[09:10] <LaserJock> stgraber: more than usual
[09:10] <LaserJock> I counted 5 people
[09:11] <RichEd> LaserJock: orga was supposed to chair it ... I am in the company strat meetings now ... and was transatlanticing myself during the meeting time
[09:11] <LaserJock> yeah, makes sense
[09:11] <stgraber> :), right usual = ogra, riched, you and me listening (sometimes after the meeting itself)
[09:11] <LaserJock> RichEd you guys need to email edubuntu-devel when you're going away ;-)
[09:11] <RichEd> Tue 6pm UTC+2 -> Thursday 10pm PDT ... ughh
[09:12] <RichEd> LaserJock: I assumed ogra would be there ... I did ask him to lead
[09:12] <LaserJock> anyway, I sidestepped ogra and got another MOTU to look over my package
[09:12] <stgraber> Tribe-3 release time was quite late and I think ogra took some rest afterwards :)