个人工具

“UbuntuHelp:Updated Version For Feisty”的版本间的差异

来自Ubuntu中文

跳转至： 导航, 搜索
小
小
第1行： 第1行：
−
{{From|https://help.ubuntu.com/community/Updated_Version_For_Feisty}}
+
{{From|https://help.ubuntu.com/community/Updated Version For Feisty}}
−
{{Languages|UbuntuHelp:Updated_Version_For_Feisty}}
+
{{Languages|UbuntuHelp:Updated Version For Feisty}}
−
This page is a re-creation of the LTSP trouble-shooting page specifically aimed at the Feisty release. According to the maintainers some of these fixes are not required and should be treated as "dubious", however they work for us.
+
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
−
== Introduction ==
+
<html>
−
We've found some bugs in a number of components in the Ubuntu LTSP kit, hopefully some of the developers will take a look at this page at some point and possibly integrate some of our fixes back into the mix. Until then however, below we detail how we got around some of the more interesting issues.
+
<head>
−
We have tried to post fix requests where possible, however a number relate to "work in progress" and "fixes available in gutsy".
+
<meta http-equiv="Content-Type" content="text/html;charset=utf-8">
−
== Getting Started ==
+
<meta name="robots" content="index,nofollow">
−
First you need to edit your /etc/default/syslogd on the your server, make sure the "-r" option is listed in options. This will allow thin clients to send their syslog information to your server, this making it visible. Be warned, multiple thin clients booting at the same time can get interesting.
+
<title>Updated - Community Ubuntu Documentation</title>
−
== Getting set up with GDM ==
+
<script type="text/javascript">
−
Then you need to set up an environment for your thin clients, try the following;
+
<!--// common functions
−
<pre><nowiki>
+
// We keep here the state of the search box
−
ltsp-build-client            # this can take a while
+
searchIsDisabled = false;
−
cd /opt/ltsp/i386
+
function searchChange(e) {
−
chroot . /bin/bash
+
// Update search buttons status according to search box content.
−
apt-get install gdm          # a real login manager
+
// Ignore empty or whitespace search term.
−
apt-get install nvidia-glx  #
+
var value = e.value.replace(/\s+/, '');
−
apt-get install ..           # any other drivers required by thin client HW
+
if (value == '' || searchIsDisabled) {
−
vi /etc/lts.conf            # add "XSERVER=nvidia" or similar as appropriate
+
searchSetDisabled(true);
−
update-initramfs -c -k all  # rebuild your ramfs with the new drivers
+
} else {
−
</nowiki></pre>
+
searchSetDisabled(false);
−
Now check that /opt/ltsp/i386/etc/X11/default-display-manager contains;  
+
−
<pre><nowiki>
+
−
/usr/sbin/gdm
+
−
</nowiki></pre>
+
−
Then you will need some manual fixes;
+
−
<pre><nowiki>
+
−
chown root:gdm /var/lib/gdm
+
−
chmod 1770 /var/lib/gdm
+
−
</nowiki></pre>
+
−
Then edit /etc/default/ltsp-client-setup and add the following;
+
−
<pre><nowiki>
+
−
rw_dirs="$rw_dirs /var/lib/gdm /var/run/network"
+
−
copy_dirs="$copy_dirs /home"
+
−
</nowiki></pre>
+
−
Then edit /etc/X11/gdm/gdm.conf, comment out the "0=Standard" and uncomment the "0=Chooser".
+
−
You should be pretty much good to go with gdm as your login manager. Why do we do this when there's the wonderful ldm login server which apparently we should be using instead?
+
−
* LDM is generally 'rubbish' when compared to GDM
+
−
* LDM does not let you select which server you connect to, critical if your allocated server is dead
+
−
* LDM does not currently report "incorrect password", it just refreshes the screen with no error report
+
−
* LDM does not follow the system themes, so your login screen does not match your user's theme
+
−
== DHCP ==
+
−
The DHCP setup can sometime become confusing as you can end up with more than one dhcpd.conf file. Make sure you have no duplicates lying around otherwise you could end up spending hours changing your dhcpd.conf and wondering what's wrong with the syntax, only to find it's not using the file you thought it was. Here's a working sample;
+
−
<pre><nowiki>
+
−
ddns-update-style none;
+
−
ignore client-updates;
+
−
default-lease-time              86400;
+
−
max-lease-time                  86400;
+
−
subnet 10.1.0.0 netmask 255.255.255.0 {
+
−
interface eth1;
+
−
range 10.1.0.100 10.1.0.199;
+
−
option domain-name "mydomain.co.uk";
+
−
option domain-name-servers 10.1.0.1;
+
−
option broadcast-address 10.1.0.255;
+
−
option routers 10.1.0.4;
+
−
option subnet-mask 255.255.255.0;
+
−
filename "/ltsp/pxelinux.0";
+
−
option root-path "/opt/ltsp/i386";
+
 
}
 
}
−
</nowiki></pre>
 
−
== Sound Configuration ==
 
−
This is now working (by default) on Feisty with both LDM and GDM (Apparently XDMCP is unsupported by LTSP5, which is why sound doesn't work .. but it works for us!)
 
−
Don't spend too much time trying to get your desktop volume control working - it won't. Use application specific volume controls instead, or the volume knob on your speaker.
 
−
== USB Client Printers ==
 
−
(not worked on this yet - see previous version of document if you have a problem)
 
−
== Graphics Problems ==
 
−
(not worked on this yet - see previous version of document if you have a problem)
 
−
== Failure to Launch ==
 
−
There's a new problem of Feisty, people who've been running quite happily now find that when they run rdesktop and get a windows 2000 login, as soon as they click on anything interesting, their application (rdesktop) SEGV's. This is a REALLY NASTY bug to track down, so if your windows / rdesktop applications start falling over - start here!
 
−
For some reason, it's caused by lack of bitmap depth on the client's X display. To fix, inside your chroot ltsp filesystem (/opt/ltsp/i386) edit /etc/lts.conf and add a section for your work station (or add to your default section;
 
−
<pre><nowiki>
 
−
X_COLOR_DEPTH = 24
 
−
</nowiki></pre>
 
−
Then reboot and see what happens .. 100% success rate here.
 
−
If anyone has any more tips - please add them here!
 
−
== Local Storage Devices ==
 
−
Ok, we now have this working with GDM. (at this point we're way beyond worrying about LDM)
 
−
This is what you need to do, on your server, edit /etc/X11/gdm/PreSession/Default
 
−
<pre><nowiki>
 
−
+CLIENT=`echo $DISPLAY | cut -d: -f1 `
 
−
+LOCATION="/mnt/localdev/$CLIENT"
 
−
+LOCALDEV="/var/lib/localdev"
 
−
+mkdir -p ${LOCATION} && chown $USER ${LOCATION} && echo $USER > ${LOCALDEV}/${CLIENT}
 
−
SESSREG=`gdmwhich sessreg`
 
−
..
 
−
</nowiki></pre>
 
−
Then edit /etc/X11/gdm/PostSession/Default
 
−
<pre><nowiki>
 
−
+CLIENT=`echo $DISPLAY | cut -d: -f1 `
 
−
+LOCATION="/mnt/localdev/$CLIENT"
 
−
+LOCALDEV="/var/lib/localdev"
 
−
+umount ${LOCATION}
 
−
+killall -u ${USER} ltspfs
 
−
+rm ${LOCALDEV}/${CLIENT}
 
−
+rmdir ${LOCATION}
 
−
exit 0
 
−
</nowiki></pre>
 
−
Then edit /usr/share/gnome/default.session
 
−
<pre><nowiki>
 
−
7,RestartStyleHint=3
 
−
7,Priority=52
 
−
7,RestartCommand=/usr/local/bin/LDA-nautilus.sh
 
−
</nowiki></pre>
 
−
Then add LDA-nautilus.sh to your /usr/local/bin, here's my slightly modified version
 
−
<pre><nowiki>
 
−
#!/bin/bash
 
−
# Copyright Henry Burroughs/ Hilton Head Preparatory School
 
− 
−
#      This program is free software; you can redistribute it and/or modify
 
−
#    it under the terms of the GNU General Public License as published by
 
−
#    the Free Software Foundation; either version 2 of the License, or
 
−
#    (at your option) any later version.
 
−
#    This program is distributed in the hope that it will be useful,
 
−
#    but WITHOUT ANY WARRANTY; without even the implied warranty of
 
−
#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 
−
#    GNU General Public License for more details.
 
−
#    You should have received a copy of the GNU General Public License
 
−
#    along with this program; if not, write to the Free Software
 
−
#    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 
−
#----------Script Setup & Functions
 
−
find_key() {
 
−
OUTPUT=""
 
−
for DIR in `gconftool-2 --all-dirs /desktop/gnome/connected_servers`
 
−
do
 
−
$GCONF -a $DIR | grep "$DISPLAY_NAME" > /dev/null
 
−
if [ $? == 0 ]
 
−
then
 
−
OUTPUT="$DIR"
 
−
fi
 
−
done
 
−
echo $OUTPUT
 
 
}
 
}
−
find_last_server() {
+
function searchSetDisabled(flag) {
−
LASTONE=`$GCONF --all-dirs /desktop/gnome/connected_servers | sort --reverse |cut -d'/' -f 5 | head -n 1`
+
// Enable or disable search
−
if [ "$LASTONE" != "" ]
+
document.getElementById('fullsearch').disabled = flag;
−
then
+
document.getElementById('titlesearch').disabled = flag;
−
NEWONE=`expr $LASTONE + 1`
+
−
else
+
−
NEWONE=1
+
−
fi
+
−
echo $NEWONE
+
 
}
 
}
−
delete_key() {
+
function searchFocus(e) {
−
KEY=`find_key`
+
// Update search input content on focus
−
$GCONF --recursive-unset $KEY
+
if (e.value == 'Search') {
 +
e.value = '';
 +
e.style.color = 'black';
 +
searchIsDisabled = false;
 
}
 
}
−
CLIENT=`echo $DISPLAY | cut -d: -f1 `
+
}
−
#----------End Script Setup & Functions
+
function searchBlur(e) {
−
#-----------User Configurable Variables
+
// Update search input content on blur
−
DISPLAY_NAME="My Disks"
+
if (e.value == '') {
−
LOCATION="/mnt/localdev/$CLIENT"
+
e.value = 'Search';
−
LOCALDEV="/var/lib/localdev"
+
e.style.color = 'gray';
−
#----------End User Configurable Variables
+
searchIsDisabled = true;
−
#----------Begin Main part of script----------------------
+
}
−
GCONFOPTS=""
+
}
−
#This part is under construction... in case it runs before gconfd is up and going
+
function actionsMenuInit(title) {
−
#gconftool-2 -p || GCONFOPTS="--direct --config-source="
+
// Initiliaze action menu
−
GCONF="gconftool-2 $GCONFOPTS"
+
for (i = 0; i < document.forms.length; i++) {
−
#See if there is a host access file for this client, and if not, we delete any existing keys and stop here
+
var form = document.forms[i];
−
# This takes care of ssh, vnc, etc...mainly we let the LDA-automount-login.sh script handle it
+
if (form.className == 'actionsmenu') {
−
if [ ! -e $LOCALDEV/$CLIENT ]
+
// Check if this form needs update
−
then
+
var div = form.getElementsByTagName('div')[0];
−
echo "Delete key: $LOCALDEV/$CLIENT"
+
var label = div.getElementsByTagName('label')[0];
−
delete_key
+
if (label) {
−
exit 0;
+
// This is the first time: remove label and do buton.
−
fi
+
div.removeChild(label);
−
ltspfs ${CLIENT}:/var/run/drives ${LOCATION} &
+
var dobutton = div.getElementsByTagName('input')[0];
−
if [ "`find_key`" != "" ]
+
div.removeChild(dobutton);
−
then
+
// and add menu title
−
$GCONF --type string --set `find_key`/uri "file://$LOCATION"
+
var select = div.getElementsByTagName('select')[0];
−
exit 0;
+
var item = document.createElement('option');
−
fi
+
item.appendChild(document.createTextNode(title));
−
#Otherwise, we need to create that key under the next newest one....
+
item.value = 'show';
−
LASTNUM=`find_last_server`
+
select.insertBefore(item, select.options[0]);
−
$GCONF --type string --set /desktop/gnome/connected_servers/$LASTNUM/display_name "$DISPLAY_NAME"
+
select.selectedIndex = 0;
−
$GCONF --type string --set /desktop/gnome/connected_servers/$LASTNUM/icon "gnome-dev-removable"
+
}
−
$GCONF --type string --set /desktop/gnome/connected_servers/$LASTNUM/uri "file://$LOCATION"
+
}
−
echo "Connected Server Update Done"
+
}
−
</nowiki></pre>
+
}
−
And you should be ready to rock and roll, with ONE main gotcha. You **need** to have entries in your hosts file on both the thin client environment and on the server for each of your clients. (if you don't already, you should!) If you don't do this, ltspfsd won't start on the client and you'll get nowhere.
+
//-->
−
=== Security Warning ===
+
</script>
−
By default, ltspfsd is started with a "-a" which means that anything you insert into a client USB socket or CD drive will be mountable by anyone on the network with enough knowledge. Bug #133635.
+
<link rel="stylesheet" type="text/css" charset="utf-8" media="all" href="/htdocs/ubuntu/css/common.css">
−
== How to secure XDMCP ==
+
<link rel="stylesheet" type="text/css" charset="utf-8" media="screen" href="/htdocs/ubuntu/css/screen.css">
−
The comment I hear is "we need LDM for security", my answer is "no you don't". Here's why;
+
<link rel="stylesheet" type="text/css" charset="utf-8" media="print" href="/htdocs/ubuntu/css/print.css">
−
If you run your sessions over OpenVPN, they are inherently secure, AND you get a proper login manager. The process goes something like this, on the server
+
<link rel="stylesheet" type="text/css" charset="utf-8" media="projection" href="/htdocs/ubuntu/css/projection.css">
−
<pre><nowiki>
+
<link rel="Start" href="/community/UserDocumentation">
−
apt-get install openvpn
+
<link rel="Alternate" title="Wiki Markup" href="/community/Updated?action=raw">
−
mv /usr/share/doc/examples/easy-rsa /usr/share/openvpn
+
<link rel="Alternate" media="print" title="Print View" href="/community/Updated?action=print">
−
cd /usr/share/openvpn/easy-rsa
+
<link rel="Search" href="/community/FindPage">
−
(read docs, create keys etc)
+
<link rel="Index" href="/community/TitleIndex">
−
cd /etc/openvpn
+
<link rel="Glossary" href="/community/WordIndex">
−
mkdir gdm
+
<link rel="Help" href="/community/HelpOnFormatting">
−
vi gdm.conf
+
</head>
−
---
+
<body  lang="en" dir="ltr">
−
port 1194
+
<script xmlns="" src="https://ssl.google-analytics.com/urchin.js" type="text/javascript"></script>
−
proto udp
+
<script xmlns="" type="text/javascript"><![CDATA[
−
dev tun0
+
_uacct = "UA-1018242-8";
−
ca gdm/ca.crt
+
urchinTracker();
−
cert gdm/server.crt
+
]]></script>
−
key gdm/server.key
+
<div id="header">
−
dh gdm/dh1024.pem
+
<div id="mastwrap"><div id="masthead">
−
server 10.99.0.0 255.255.255.0
+
<div id="logo"><a href="/community/UserDocumentation">Community Ubuntu Documentation</a></div>
−
push "route 10.99.0.0 255.255.255.0"
+
<form id="searchform" method="get" action="">
−
ifconfig-pool-persist gdm/ipp.txt
+
<div>
−
status gdm/status.log
+
<input type="hidden" name="action" value="fullsearch">
−
keepalive 10 50
+
<input type="hidden" name="context" value="180">
−
comp-lzo
+
<label for="searchinput">Search:</label>
−
persist-key
+
<input id="searchinput" type="text" name="value" value="" size="20"
−
persist-tun
+
onfocus="searchFocus(this)" onblur="searchBlur(this)"
−
verb 3
+
onkeyup="searchChange(this)" onchange="searchChange(this)" alt="Search">
−
tran-window 3600
+
<input id="titlesearch" name="titlesearch" type="submit"
−
tls-server
+
value="Titles" alt="Search Titles">
−
passtos
+
<input id="fullsearch" name="fullsearch" type="submit"
−
duplicate-cn
+
value="Text" alt="Search Full Text">
−
---
+
</div>
−
cp /usr/share/openvpn/easy-rsa/keys/{appropriate keys} gdm
+
</form>
−
/etc/init.d/openvpn start
+
<script type="text/javascript">
−
</nowiki></pre>
+
<!--// Initialize search form
−
You should now have a tun0 interface on 10.99.0.1. Now a similar operation for the thin client's environment. On the server, generate a key called "workstation", then do
+
var f = document.getElementById('searchform');
−
<pre><nowiki>
+
f.getElementsByTagName('label')[0].style.display = 'none';
−
mkdir /opt/ltsp/i386/etc/openvpn/gdm
+
var e = document.getElementById('searchinput');
−
cp /usr/share/openvpn/easy-rsa/keys/{ca.crt,workstation.key,workstation.crt} /opt/ltsp/i386/etc/openvpn/gdm
+
searchChange(e);
−
chroot /opt/ltsp/i386 /bin/bash --login
+
searchBlur(e);
−
apt-get install openvpn
+
//-->
−
vi /etc/openvpn/gdm.conf
+
</script>
−
---
+
<div id="sisternav">
−
client
+
<ul>
−
dev tun
+
<li id="plain">
−
proto udp
+
<a href="https://help.ubuntu.com/6.06"
−
remote <raw IP of server> 1194
+
accesskey="t">6.06 LTS</a>
−
resolv-retry infinite
+
</li>
−
nobind
+
<li id="plain">
−
persist-key
+
<a href="https://help.ubuntu.com/6.10"
−
persist-tun
+
accesskey="t">6.10</a>
−
ca gdm/ca.crt
+
</li>
−
cert gdm/workstation.crt
+
<li id="plain">
−
key gdm/workstation.key
+
<a href="https://help.ubuntu.com/7.04"
−
ns-cert-type server
+
accesskey="t">7.04</a>
−
comp-lzo
+
</li>
−
verb 3
+
<li id="plain">
−
---
+
<a href="https://help.ubuntu.com/7.10"
−
/etc/init.d/openvpn start
+
accesskey="t">7.10</a>
−
</nowiki></pre>
+
</li>
−
To cap it off, to make sure that the client accesses the server via the VPN, edit /etc/X11/gdm/gdm.conf (this is still in the thin client's virtual environment) and set chooser/Broadcast to false and Hosts=10.99.0.1. And you're away ...
+
<li id="current">
 +
<a href="https://help.ubuntu.com/community"
 +
accesskey="t">Community Docs</a>
 +
</li>
 +
</ul>
 +
</div>
 +
</div></div>
 +
<ul class="extranav">
 +
<li><a href="/community/UserDocumentation">User Documentation</a></li>
 +
</ul>
 +
</div>
 +
<div id="page" lang="en" dir="ltr"><!-- start page -->
 +
<h1 id="title"><a title="Click to do a full-text search for this title" href="/community/Updated?action=fullsearch&amp;value=linkto%3A%22Updated%22&amp;context=180">Updated</a></h1>
 +
<div lang="en" id="content" dir="ltr">
 +
<a id="top"></a>
 +
<div lang="en" id="content" dir="ltr">
 +
<a id="top"></a>
 +
<p><strong>This page does not exist yet. You can create a new empty page, or use one of the page templates. Before creating the page, please check if a similar page already exists.</strong> </p>
 +
<a href="/community/Updated?action=edit">Create new empty page</a><p> </p>
 +
<div>
 +
<table>
 +
<tr>
 +
<td>
 +
<p> <strong>Page templates:</strong> </p>
 +
</td>
 +
<td>
 +
<p> <strong>Existing pages with similar names:</strong> </p>
 +
</td>
 +
</tr>
 +
<tr>
 +
<td style="vertical-align: top;">
 +
<p> <ul>
 +
<li><a href="/community/Updated?action=edit&amp;template=AideTemplate">AideTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=[[category:CategoryTemplate">CategoryTemplate</a></li>]]
 +
<li><a href="/community/Updated?action=edit&amp;template=DocumentationTemplate">DocumentationTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=HelpTemplate">HelpTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=HilfeTemplate">HilfeTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=HomepageTemplate">HomepageTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=PagePersonnelleTemplate">PagePersonnelleTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=Pr%c3%a9sentationTemplate">PrésentationTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=SlideShowHandOutTemplate">SlideShowHandOutTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=SlideShowTemplate">SlideShowTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=SlideTemplate">SlideTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=SupportPapierD'UnePr%c3%a9sentationTemplate">SupportPapierD'UnePrésentationTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=ThuisbladTemplate">ThuisbladTemplate</a></li>
 +
<li><a href="/community/Updated?action=edit&amp;template=TransparentTemplate">TransparentTemplate</a></li>
 +
</ul>
 +
</p>
 +
</td>
 +
<td style="vertical-align: top;">
 +
<p> <ul>
 +
<li><a href="/community/ClamAVUpdates">ClamAVUpdates</a></li>
 +
<li><a href="/community/UbuntuUpdates">UbuntuUpdates</a></li>
 +
<li><a href="/community/UpdatingADeb">UpdatingADeb</a></li>
 +
</ul>
 +
<ul>
 +
<li><a href="/community/Updated_Version_For_Feisty">Updated Version For Feisty</a></li>
 +
</ul>
 +
<ul>
 +
<li><a href="/community/KeepingUbuntuUpdated">KeepingUbuntuUpdated</a></li>
 +
</ul>
 +
</p>
 +
</td>
 +
</tr>
 +
</table>
 +
</div>
 +
<a id="bottom"></a>
 +
</div>
 +
<a id="bottom"></a>
 +
</div>
 +
</div> <!-- end page -->
 +
<div id="footer">
 +
<div id="ubuntulinks">
 +
&copy; 2007 <a href="http://www.canonical.com">Canonical Ltd</a>. Ubuntu, Kubuntu, Edubuntu and Canonical are registered trademarks of Canonical Ltd.<br />
 +
<a href="https://help.ubuntu.com/community/WikiGuide">Feedback</a> &mdash;
 +
<a href="https://help.ubuntu.com/community/License">Legal</a> &mdash;
 +
<a href="https://help.ubuntu.com/community/Credits">Credits</a>
 +
<br />
 +
<a rel="license" href="http://creativecommons.org/licenses/by-sa/3.0/">
 +
<img alt="Creative Commons License" style="border-width:0" src="http://i.creativecommons.org/l/by-sa/3.0/80x15.png" />
 +
</a>
 +
</div>
 +
</div>
 +
</body>
 +
</html>
  
 
[[category:UbuntuHelp]]
 
[[category:UbuntuHelp]]

2007年11月30日 (五) 22:57的版本

Geographylogo.png 文章出处: 

https://help.ubuntu.com/community/Updated Version For Feisty

Geographylogo.png 点击翻译: 

English

请不要直接编辑翻译本页，本页将定期与来源同步。

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"> Updated - Community Ubuntu Documentation

Updated

This page does not exist yet. You can create a new empty page, or use one of the page templates. Before creating the page, please check if a similar page already exists.

Create new empty page

取自“https://wiki.ubuntu.org.cn/index.php?title=UbuntuHelp:Updated_Version_For_Feisty&oldid=38487”