/srv/irclogs.ubuntu.com/2007/09/02/#edubuntu.txt

LaserJockmoquist: thanks02:03
moquistLaserJock: yep02:06
LaserJockmoquist: does the 2nd one include the change from the first02:07
moquistyes02:07
moquistI just kept going with the same file. diff my v.2 against whatever you have.02:07
LaserJockk,good02:07
moquistAny word on my moodle package yet? :)02:08
moquistSorry. I shouldn't nag...I know you're busy.02:08
LaserJockyeah, problem is inlaws are here for the weekend02:18
=== merriam [n=merriam@85-211-20-34.dyn.gotadsl.co.uk] has joined #edubuntu
LaserJockmoquist: Committed revision 4312.02:20
=== jack_wyt [n=jack@124.64.107.4] has joined #edubuntu
LaserJockmoquist: what were you doing to test moodle?02:23
LaserJockinstall with mysql and install with postgresql?02:23
LaserJockmoquist: I'll bbl going out for dinner02:28
moquistLaserJock: yes -- I installed moodle with mysql & postgresql. You then have to open a browser to http://localhost/moodle/ to complete the installation. (I forwarded localhost:80 to the remote system for that part.)02:34
=== pauljw [n=paul@pool81.dial1-clec.newalb.win.net] has joined #edubuntu
=== pitux [n=pitux@5-95-20-190.adsl.terra.cl] has joined #edubuntu
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
=== sumguy231 [n=sumguy23@c-68-52-189-249.hsd1.tn.comcast.net] has joined #edubuntu
=== sumguy231 [n=sumguy23@c-68-52-189-249.hsd1.tn.comcast.net] has left #edubuntu ["I'm]
=== Netham45 [n=netham@c-67-190-103-57.hsd1.co.comcast.net] has joined #edubuntu
=== raynerd [n=raynerd@79-65-51-28.dynamic.dsl.as9105.com] has joined #edubuntu
=== jbrefort [i=jean@pot44-1-88-172-65-1.fbx.proxad.net] has joined #edubuntu
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
=== juliux [n=juliux@ubuntu/member/juliux] has joined #edubuntu
=== ace_suares [n=ace@fupi.suares.an] has joined #edubuntu
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
=== Castigador [n=Alfredo@88.Red-80-38-9.staticIP.rima-tde.net] has joined #edubuntu
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
=== PriceChild [n=pricechi@ubuntu/member/pdpc.supporter.student.PriceChild] has joined #edubuntu
=== sc0tt_ [n=sc0tt@cpc1-stok5-0-0-cust150.bagu.cable.ntl.com] has joined #edubuntu
=== Nubae [n=Nubae@19.Red-83-63-247.staticIP.rima-tde.net] has joined #edubuntu
Nubaehi there... I'm trying to set up a proxy server with some sort of filtering for students... what is recommended, Ideally I'd like something that works with Squid which I have some experience with01:12
Kamping_Kaiserdansguardian01:12
Nubaeyeah I looked t that, but it set up nother firewall utility which screwed up my shorewall setup01:13
Kamping_Kaiseranother utility?01:13
Kamping_Kaiseri dont know about shorewall, btw01:13
Nubaeoh... well, I followed  guide I found, actually several, with dansguardian playing a central role01:15
Nubaebut using some other firewall tool, cant remember now... firehol maybe?01:15
Kamping_Kaiserits working a treat for me... cant really say more then that :|01:15
Kamping_Kaiseron a dapper system, fwiw.01:15
Nubaeok, and what firewall are u using, or just iptables directly?01:16
Kamping_Kaiserusing iptables to redirect 80 -> dans -> dans into squid01:16
Nubaeoh... ok, that sounds pretty feasable... guess only need http child filtered01:17
Kamping_Kaiserwell, i do have a 'drop anything not on 80' rule...01:17
Nubaeah... I'd need to remove that as this server is doing  lot of stuff, including ltsp01:18
Kamping_Kaiseri have a dedecated gateway01:18
Nubaeso u just apt-get installed dansguardian and modified the config file?01:18
Kamping_Kaiseryes. the config doesnt need much tweaking at all01:19
Kamping_Kaiseryou can optionally whitelist sites like .gov.au .edu.au01:20
Kamping_Kaiserum... your relevent TLD of course...01:20
Nubaehmmm... maybe I'm better of putting this on  seperate computer?01:20
Nubaeso it doesnt interfere with the server01:20
Kamping_Kaiser*shrug* better i dont know... i like dedicated gateways myself01:20
Nubaeok, well I'll give it a go... if you dont mind, can I ask you some questions as I install it?01:21
Kamping_Kaiserno worries01:22
Nubaeso email doesnt go through it?01:22
Kamping_Kaiseri have done squid+dans on Debian etch, but not confident. with dapper i can check against my settings (if that helps you)01:22
Nubaeyeah, I'm on feisty01:22
Kamping_Kaiserthrough what, the gateway ?01:23
Kamping_Kaiser"just dont block smtp"01:23
Nubaek01:23
Nubaetheres 2 conf files, dansguardian.conf and dansguardianf1.conf01:25
Kamping_Kaiseryou want dansguardian.conf01:25
Nubaewhat reporting level do u use?01:26
Kamping_Kaiser301:26
Nubaeso u created a custom html file01:26
Kamping_Kaiseri edited the default01:26
Kamping_Kaiserjust rebranded basicly01:26
Nubaeah, makes sense, what kind of info does it give if it tells u why access was denied?01:26
Kamping_Kaiserhm?01:27
Kamping_Kaiser#  2 = report fully <- that optoin?01:27
Nubaeyeah01:27
Kamping_Kaiserit tells you the exact line it banned you on01:27
Kamping_Kaisereg "you have been denided because you tried to look up" <really bad things here>01:28
Nubaeah, maybe too much :-)01:28
Kamping_Kaiseryep :)01:28
Kamping_Kaiser10,1 and 3 are good01:28
Kamping_Kaiser2 is good for debugging01:28
Kamping_Kaiserbut i use the logs for that, so i have 3 set, and look in logs01:28
Kamping_KaiserNubae, next option is language (for me)01:29
Nubaeyeah, I just put English in01:29
Nubaeuk01:29
Kamping_Kaiserjust cd into the languagedir , cp -r ukenglish mycustom01:30
Kamping_Kaisercustomise mycustom/index.html (or whatever the files called)01:30
Kamping_Kaiserthen set language='mycustom'01:30
Nubaeoh, cool01:30
Kamping_Kaiserits called template.html01:31
NubaeI leave the messages dir where it is?01:32
Kamping_Kaiseryea01:33
Nubaeproxy settings leave as default? Squid runs on the same server01:34
Kamping_Kaiseryep01:34
Nubaewhats filter groups... dont quite understand that01:35
Kamping_Kaiserdont worry about it01:35
Kamping_Kaiserwell, i havent01:35
Nubaephrasefiltermode?01:38
Nubaeleave default?01:38
Kamping_Kaiseri left default01:38
Kamping_Kaiseri didnt change a lot, which is one thing i liked about it - blocks everything without much effort01:40
Nubaeyeah defaults look pretty good, but like knowing what its doing anyway :-)01:40
Nubaeusexforwardedfor01:41
Kamping_Kaiseroff01:42
Nubaek thought cause it says something about squid...01:42
Kamping_Kaiseryou have dans between squid+clients, not squid between dans+clients01:43
Nubaeah... true... have u got it running as nobody?01:44
Kamping_Kaiserdefault01:44
Nubaeok virusscan?01:45
Kamping_Kaiserdo you want it to?01:45
Nubaewell, I've clamav already installed, running with postfix01:46
Nubaeor is this not scanning email, but downloads?01:46
Kamping_Kaiserdownloads - dansguardian is an http proxy only01:46
Nubaeah yes just read :-) need to be less impatient01:47
Kamping_Kaiserhehe.01:47
Nubaeok... that seems to be it then01:48
Nubaeso just turn it on and its running?01:48
Kamping_Kaiserrestart it, yeah01:49
Nubaeah, it does look for messages from the custom dir01:50
Kamping_Kaiser:)01:51
Nubae/var/log/dansguardian/access.log <--- what permissions u got on this file?01:53
Kamping_Kaiser-rw-r--r-- 1 dansguardian dansguardian  34K 2007-09-02 13:46 access.log01:54
Nubaewont run for me with the default... also tells me its running as dansguardian, seems to be ignoring the setting from the config file01:54
Kamping_Kaisermines running as dansguardian too.01:55
Kamping_Kaiserwhat do you mean 'with the default' though?01:55
Nubaedefault permissions for the log file01:55
Nubaejust relsed it doesnt exist01:56
Nubaenever mind01:56
Kamping_Kaiserok01:57
Nubaedid u add anything special to squid?01:59
Kamping_Kaiserum.02:00
Kamping_Kaiseri've made lots of changes, i dont remember how many are dansguardian related though02:00
Nubaeok, nevermind, I'll figure that out myself... thanks for all your help02:01
Nubaereally appreciate it02:01
Kamping_Kaisernp02:01
Kamping_Kaiseri can flood you config if you want02:02
Kamping_Kaiserhttpd_accel_host virtual02:02
Kamping_Kaiserhttpd_accel_with_proxy on02:02
Kamping_Kaiserhttpd_accel_uses_host_header on02:02
Kamping_Kaiser^^ check those settings02:02
Kamping_Kaiseracl our_networks src 192.168.1.0/2402:02
Kamping_Kaiserwill need attention02:02
Kamping_Kaisernot sure if/what else, depends on your exact layout02:03
Nubaeoh, with dansguardian, is there already a set of filters in place, or does that need to be extensively editted?02:04
Kamping_Kaiserits already got filters02:05
Kamping_Kaiserlook in dansguardianf1.conf at the naughtynesslimit setting02:05
Kamping_Kaiseri left it on default02:05
Kamping_Kaiserbut it gives you some idea whats going on02:06
Nubaeah yeah, I've got from 8-18 here02:07
Nubaeguess I'll need the lowest setting02:07
Kamping_Kaiser# 50 is for young children,  100 for old children,  160 for young adults.02:08
Kamping_Kaisernaughtynesslimit = 5002:08
Kamping_Kaiseris what i have02:08
Nubaeheh, where do old children end and young adults start, :-)02:09
Kamping_Kaiserno idea :)02:09
Kamping_Kaiserbut i do know i'm using young children setting for a community centre of ages from ~15-8002:10
Kamping_Kaiserand with good use of whitelisting  its the perfect setting02:10
Nubaeok... so it blocks mostly porn content right?02:10
Kamping_Kaiseryes02:11
Kamping_Kaiseri'd flood you some blocking, but then people wouldnt be able to view the logs *grin*02:11
Kamping_Kaiseractually... want me to pm it? so you can ee02:11
Nubaegreat, thats the biggest problem...02:11
Nubaeyeah sure y not02:11
Kamping_Kaiseroh, it also blocks extentions02:12
Kamping_KaiserNubae, check your pms02:14
Nubaeare you forwarding squid to dans, or the other way round?02:25
Kamping_Kaiserclients -> dans -> squid -> internet02:25
=== Kamping_Kaiser browses dansguardian logs of denied access and marvels how freeking effective it is
Nubae:-) do people complain?02:27
Kamping_Kaisernot really.02:28
Kamping_Kaiseronce i unblocked a few key TLDs and websites that 90% of our traffic goes to02:28
Kamping_Kaiserfor example it blocks .doc and .deb by default - nota  good state of affairs02:28
Kamping_Kaiserwhitelist our ISP ubuntu mirror and all of a suden we can dist-upgrade again.02:29
Nubaehep02:29
Kamping_Kaiseralso with .edu.au and .gov.au whitelisted people could download thier work again02:30
Kamping_Kaiseryou probalby get the idea anyhow :)02:30
Nubaehehe yeah02:31
Nubaeso on the client side, nothing needs to be setup in the browser?02:32
Nubaeauto proxy?02:32
Kamping_Kaisernot if you redirect port 80 on the gateway02:32
Nubaeok, yeah doh02:32
Kamping_Kaiseryou'll have a line similar to `iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 8080` in your iptables config02:33
Nubaeyeah redirect 80 to 808002:33
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
Kamping_KaiserAmaranth, hi mate02:36
Amaranthhi02:36
Kamping_Kaiser:)02:36
=== raynerd [n=raynerd@79-65-78-207.dynamic.dsl.as9105.com] has joined #edubuntu
raynerdhello, can anyone help with editing a live CD ?02:55
raynerdI have an edubuntu CD, with the programs I want to use. I want to use it in class but I dont want the install option. I simply want a CD that boots without the install desktop icon or the menu install icon.02:56
raynerdanyone know how this can be done.02:56
raynerd?02:56
=== Nubae [n=Nubae@19.Red-83-63-247.staticIP.rima-tde.net] has left #edubuntu []
Kamping_Kaisernot sure how the live cd stuff happens in ubuntu land02:57
raynerdim using edubuntu.02:58
Kamping_Kaisersame process02:59
raynerdBeen trying to do it for last few days!02:59
raynerdbut i`m a linux noob myself so .. its all a bit above me02:59
=== Netham45 [n=netham@c-67-190-103-57.hsd1.co.comcast.net] has joined #edubuntu
=== sbalneav [n=sbalneav@S0106000b6a5631f9.wp.shawcable.net] has joined #edubuntu
sbalneavMorning all03:25
Kamping_Kaiserhi mate03:26
=== PriceChild [n=pricechi@ubuntu/member/pdpc.supporter.student.PriceChild] has joined #edubuntu
=== jack_wyt [n=jack@124.64.107.4] has joined #edubuntu
=== jbrefort [n=jean@mar44-2-82-227-215-241.fbx.proxad.net] has joined #edubuntu
=== pauljw [n=paul@pool59.dial1-clec.newalb.win.net] has joined #edubuntu
=== joumetal [n=jouni@letku30.adsl.netsonic.fi] has joined #edubuntu
=== vistakiller [n=spiros@ppp151-74.adsl.forthnet.gr] has joined #edubuntu
=== Baby [n=miry@pdpc/supporter/silver/kavi/baby] has joined #edubuntu
=== SimonAnibal [n=sruiz@pool-71-120-170-158.aubnin.dsl-w.verizon.net] has joined #edubuntu
=== ludoRA [n=Ludovic@157.10.101-84.rev.gaoland.net] has joined #Edubuntu
=== ludoRA [n=Ludovic@157.10.101-84.rev.gaoland.net] has joined #Edubuntu
=== bddebian [n=bdefrees@c-71-224-172-103.hsd1.pa.comcast.net] has joined #edubuntu
bddebianHeya05:11
=== daveice [n=david@lns-bzn-50f-62-147-186-93.adsl.proxad.net] has joined #edubuntu
raynerdHey, does anyone know how I could completely remove the install options, those being the desktop icon and menu install icon, off the Live Cd. I want to run it with students, but dont want them to "accidently" install it!05:42
sbalneavraynerd: You've have to custom cut youre own version of the cd.06:19
=== highvoltage [n=highvolt@dsl-243-55-78.telkomadsl.co.za] has joined #edubuntu
raynerdhow is that done?06:24
raynerdi mean I was told to run live CD delete all install icons off the desktop and menu bar and then copy a image of the new CD and save as an iso.06:26
raynerdI can do the first bit but then don`t know where to go from there...how do i save the new CD image and how do i save as an iso>?06:26
sbalneavIt's a rather long mastering process.06:45
=== juliux [n=juliux@ubuntu/member/juliux] has joined #edubuntu
sbalneavhttps://launchpad.net/reconstructor06:46
raynerdsbalneav: I tried to use that earlier today and yesterday, But when i boot i get a black screen and no options. It definately takes control and boots up, but like I say, I get a short script then a black screen06:50
sbalneavI'd check on their mailing list or help forums, then.06:52
raynerdok :(07:08
=== kabitoxz [n=kabitoxz@189.142.211.215] has joined #edubuntu
=== Amaranth [n=travis@ubuntu/member/Amaranth] has joined #edubuntu
=== pauljw is now known as oldnslow
=== vistakiller [n=spiros@ppp151-74.adsl.forthnet.gr] has left #edubuntu []
=== john_s [n=john@c-24-17-48-60.hsd1.wa.comcast.net] has joined #edubuntu
=== pitux [n=pitux@pc-191-224-47-190.cm.vtr.net] has joined #edubuntu
john_shello all, can anyone tell me how to save the output of dmesg to a text file if I do it within a chroot environment on the thin client? I am trying to capture debug info and I can't figure out how to move it to a place where I can email it to someone09:10
=== pitux [n=pitux@pc-191-224-47-190.cm.vtr.net] has joined #edubuntu
=== edubuntugirl [n=edubuntu@ubuntu/bot/edubuntugirl] has joined #edubuntu
stgraberjohn_s: if you have an USB plug, you can use an usbkey, otherwise maybe using the floppy drive09:20
john_sstgraber: thanks, I am trying to debug my broken usbfs automount stuff so I can't use usb09:20
john_sThese thin clients don't have floppies either09:20
john_s:-)09:21
stgraberhmm, so you have a problem :)09:21
john_sYup09:21
john_sare you an edubuntu/ltsp guru?09:21
john_splease say yes!09:21
stgrabermaybe using a nfs server, but I'm not sure that the nfs kernel module is in the thin client chroot09:21
stgrabersort of, I'm testing all new Edubuntu release and have already installed some networks09:22
john_sok well briefly, I have been unable to get local usb keys to show up on users desktops09:23
john_sI have been working through the DebugLocalDev thing for about two weeks off and on09:23
john_sbut not yet got it09:23
john_sif I go to a termianl on the thin client by doing ctrl+alt+f2 I can put the thumbdrive in and dmesg shows it getting added and it shows up in /etc/fstab09:24
stgraberok, so in the terminal you could manually mount it ?09:25
stgraberare your users in the fuse group ?09:25
john_sbut when I try the final step on the debug ssh -S /tmp/.ltspfs_socket server "/usr/sbin/ltspfsmounter /tmp add"   I get a complaint from the ssh server saying authenticity of host 'server can't be established09:25
john_syup09:25
john_sI guess that's where I fail is manually mounting it09:26
john_ssince that's where I encounter the complaint about ssh keys09:26
john_sI have changed the ipaddress of the external nic since I set this server up but would that mess up the ssh key of the nic on the ltsp lan?09:27
stgraberok, and do you have a different result if you run this command with a logged on user ?09:27
stgrabershouldn't be a problem if the LAN ip didn't change09:27
john_swhen you say logged on user, you mean if I go through to the gdm desktop and then open a terminal and follow all of those steps?09:28
john_swhen I log on and open up a terminal and run the tests I don't see anything about usb devices in dmesg  and fstab doesn't show any usb devices09:31
stgraberI mean, on your thin client open a user session, then switch to tty2 (ctrl+alt+f2) and try the ltspfs cmd09:32
stgraber(sorry I'm doing wireless driver testing/debuging at the same time)09:33
john_sok, well when I do ctrl+alt+f2 as a normal user I just get a black screen with a rapidly blinking curser in th upper left hand corner.09:34
john_sI appreciate your help!09:34
john_sso I can't seem to do anything unless I log in on tty109:35
john_sand then only as root09:36
stgraberwhat's the exact ssh error you get ?09:38
john_sThe authenticity of host 'server (192.168.0.254)' can't be established. RSA key fingerpirnt is 47:1c:55:fa:45:05:80:b0:a6:48:c1:aa:68:5a:d5:2d: are you sure you want to continue connecting?09:40
stgraberok, can you have a look at files in /etc/ssh/09:41
john_syes09:41
stgraberis 192.168.0.254 specified in one of them ?09:41
john_syes, shall i clear it?09:41
stgraberno, but then it shouldn't ask this question ...09:42
stgraberthat's weird09:42
stgraberand if you try replacing server by 192.168.0.254 in your cmd09:42
john_slemme try09:43
stgraberdoes it helps ?09:43
john_sstand by09:43
john_sok well the response was different anyway09:44
john_sI did it by ip and it asked for root's password at 192.168.0.254 which i provided then it complained that there was no file or directory called /usr/sbin/ltspmounter  (which is true but that's the nomenclature used on the debug)09:45
john_sI am doing this comand    ssh -S /tmp/.ltspfs_socket server "/usr/sbin/ltspfsmounter /tmp add"09:46
stgraberdo you have ltspfs installed on the server ?09:46
john_summm09:47
john_sthis is a stock edubuntu install09:47
john_slemme see09:47
stgraber(according to apt-file that's the package you need to have ltspfsmounter)09:47
john_sI have /usr/bin/ltspfsd is that a good indication?09:48
john_sshould I just do apt-get from within the chroot?09:48
stgraberdpkg -l | grep ltspfs09:48
stgraberit's a package to install on the server itself, not the chroot09:49
stgraberso : sudo apt-get install ltspfs on the server should do it09:49
john_sltspfs is already the newest version.09:50
john_sas an aside all of my ubuntu based systems have been complaiing about multiverse sources lately09:52
john_sis it weird at all that I can't do ctrl+alt+f2 to get to tty2?09:55
stgraberno, I usually have a debug console on tty2 here but that can be personal tweak or gutsy09:58
john_sok, so not integral to debugging this problem, I guess09:58
raynerdI know I asked this before but I`ll say again. Anyone know how to edit a live10:07
raynerdCd10:07
john_sok10:13
john_sI am leaving10:13
john_sstgraber thanks for the help!10:14
john_sI'll keep plugging away10:14
=== john_s [n=john@c-24-17-48-60.hsd1.wa.comcast.net] has left #edubuntu []
=== bddebian2 [n=bdefrees@c-71-224-172-103.hsd1.pa.comcast.net] has joined #edubuntu
=== mumbles [n=mumbles@borknet.org] has left #edubuntu []
=== boyam [i=boyam@166-82-81-31.quickclick.ctc.net] has joined #edubuntu
=== boyam [i=boyam@166-82-81-31.quickclick.ctc.net] has joined #edubuntu
=== wfc0d3r [n=c0d3r@203.82.39.69] has joined #edubuntu
=== Netham45 [n=netham@c-67-190-103-57.hsd1.co.comcast.net] has joined #edubuntu
=== pitux [n=pitux@pc-191-224-47-190.cm.vtr.net] has joined #edubuntu
=== raynerd [n=raynerd@79-65-78-207.dynamic.dsl.as9105.com] has left #edubuntu ["Konversation]
=== lns [n=lns@75.61.204.105] has joined #edubuntu
=== pitux [n=pitux@pc-191-224-47-190.cm.vtr.net] has joined #edubuntu
=== effie_jayx [n=valles@ubuntu/member/effie-jayx] has joined #edubuntu

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!