July 2018 - Arch-general - lists.archlinux.org

Re: [arch-general] Arch Linux PC as a Remote Desktop Node
by Giancarlo Razzolini 29 Jul '18

29 Jul '18

Em julho 27, 2018 14:46 Foxtrot Mike via arch-general escreveu: > > The issue with x2go and ltsp is that I'll have to separately manage > username and passwords for local Linux login. The solution that I'd > rather prefer would use Active directory authentication so the current > system administrator won't have to do anything extra. The group policies > are already there. Once the Arch system is properly configured, I'd > disable local logins so there will be very limited chance for a user to > corrupt/modify Arch system. And ideally, the user would have no way to > interact with the local system. Thats why I want to limit the user to > freeRDP. Anything else, and the X-session expires. You have more than one option to authenticate to windows AD servers [0] . You have PAM Ldap, winbind, making a samba server the secondary controller, etc. You will probably need a local home dir for storing session data, but this can be created/destroyed on demand. > > Plus, I am very much into embedded linux systems (routers, SBCs, etc). I > think putting the various pieces together would be give me a lot more to > learn as compared to using a third party specialized software such as a > kiosk script. > Why reinvent the wheel here? I understand the need for learning, but I wouldn't do this on something that is intended as a production system. Again, don't use plain X protocol over the network, it's very wasteful. Regards, Giancarlo Razzolini [0] https://wiki.archlinux.org/index.php/Active_Directory_Integration

2 1

Re: [arch-general] Arch Linux PC as a Remote Desktop Node
by Giancarlo Razzolini 27 Jul '18

27 Jul '18

Em julho 27, 2018 14:07 Foxtrot Mike via arch-general escreveu: > > Here are the major tasks: > > 1- Ask LightDM to use Windows Domain (Kerberos) authentication. I am a > little confused. There are supposedly many different ways with little > changes to do this. [1] is one solution. LDAP is also a possibility. I > need advice from someone who knows this field better than me :p > > 2- How to ask i3-wm (my default wm) to run freerdp at login? I guess [2] > will get this done. > > 3- How to ask freerdp to authenticate using the ticket received from TGT > during LightDM Domain authentication? If I could somehow configure > freerdp to use Kerberos Tickets then the user won't have to enter his > Domain password again. > > 4- How to ask i3-wm to close the X-session when freeRDP quits? I read > something a while ago about .xsession files to achieve this > functionality, but can't find it now. > Hi Mike, You have some options here. I suggest you look into x2go and ltsp for starters. I don't suggest you use plain X over the network. With those 2 options you can have this kiosk mode you want, for the users to only be able to access windows. Regards, Giancarlo Razzolini

4 4

[arch-general] Possible to "inherit" from a package?
by Peter Nabbefeld 26 Jul '18

26 Jul '18

Hello, it seems, Dovecot is built without Solr support. Just to add a build option, I wonder if there's a concept of "inheriting" from a package build, so I'd only add the config option? Kind regards Peter

5 13

[arch-general] Password managers implementing org.freedesktop.secrets?
by Peter Nabbefeld 26 Jul '18

26 Jul '18

Hello, the only password managers I found documented to implement org.freedesktop.secrets are kwallet and gnome-keyring. Does somebody know any others, probably GTK-based? I'm using XFCE4, so I'd like to install an alternative application, if possible. Kind regards Peter

4 4

Re: [arch-general] Astrometa DVB T2 stick
by Wolfgang Thiel 25 Jul '18

25 Jul '18

I think you received the new stick with the Sony CXD2837: Only one frontend was found. A kernel patch is needed: seeAuzeuner DVB-T2 (Astrometa 2018) driver update #567 https://github.com/torvalds/linux/pull/567/commits/24ab0be682b16911efcbac27… I have one of those running since yesterday with good results with DVB-T2.

1 0

[arch-general] WIN+anything key not working at startup
by Andy Pieters 24 Jul '18

24 Jul '18

Hi Every time I start my computer, plasma does not properly detect/respond to global hotkeys, in particular, WIN+anything combination. After I open a terminal from inside plasma, kill the kglobalaccel5 program and launch it again, all the WIN+ hotkeys work again. During the time that it is not working and whilst the cursor is stood in a shell window, pressing the hotkey WIN+r generates the keypresses sr Has anyone seen this behaviour before and know of a durable fix short of scripting plasma startup with a delayed kill+restart of kglobalaccel5? Thank you Andy

2 2

[arch-general] How can I delete my flyspray account?
by Peter Nabbefeld 24 Jul '18

24 Jul '18

2 1

[arch-general] Kernel modules not loaded after Linux update
by Peter Nabbefeld 23 Jul '18

23 Jul '18

Hello, I've updated my installation yesterday, also doing an update of the Linux kernel to 4.17.8. When starting this morning, kernel modules rejected to load, so I even couldn't access the internet. I've downgraded Linux now to 4.17.2, but still have some problems (probably because I only downgraded the kernel itself). I cannot find the error message from the service again, sorry, so I cannot tell You, it had to do with some security parameter not set. According to the description of kernel downgrading in the wiki, I should have downgraded linux-headers, too, but these are not in my package cache - are they included in the kernel package now? How can I find out, which other kernel modules need to be downgraded? Kind regards Peter

6 32

Re: [arch-general] Kernel modules not loaded after Linux update (Peter Nabbefeld)
by saderror256 22 Jul '18

22 Jul '18

Hey peter Have you tried to boot into an arch iso, enable internet, and install the required kernel software? When you are in the live iso connect to internet like normal and chroot into your system, then install the kernel firmware required. This will also let you do some other work that cannot be done in your system currently :-) Hope this helped you a little!

1 0

[arch-general] Latest openssh - Premier connectivity tool for remote login with the SSH protocol?
by David C. Rankin 19 Jul '18

19 Jul '18

All, I have several scripts that perform backup work between six or so machines, all Arch. The script uses rsync to make approximately 6 connections to each server and transfer 100 directories from various parts of the filesystem. After the latest update to openssh 7.7p1-2, the time to connect feels like it has quadrupled. For example, in the past, when the script ran, a connection, check if files are newer and logout took less than a second. (it's a pilot thing, every time I'm watching something with an interest in the time is 1-1000, 2-1000, 3-1000, etc..) Now that 1-sec negotiation, check and logout has ballooned to 4-seconds, e.g. Jul 17 09:20:24 phoinix sshd[2652]: Accepted publickey for david from 66.76.46.195 port 59956 ssh2: ECDSA SHA256:97TPKWvaGks+sjneobeoY9RpK1Hznnh8xJCjbcAWrkQ Jul 17 09:20:24 phoinix sshd[2652]: pam_unix(sshd:session): session opened for user david by (uid=0) Jul 17 09:20:24 phoinix systemd-logind[408]: New session c18 of user david. Jul 17 09:20:24 phoinix systemd[1]: Started Session c18 of user david. Jul 17 09:20:28 phoinix sshd[2654]: Received disconnect from 66.76.46.195 port 59956:11: disconnected by user Jul 17 09:20:28 phoinix sshd[2654]: Disconnected from user david 66.76.46.195 port 59956 Jul 17 09:20:28 phoinix sshd[2652]: pam_unix(sshd:session): session closed for user david Jul 17 09:20:28 phoinix systemd-logind[408]: Session c18 logged out. Waiting for processes to exit. Jul 17 09:20:28 phoinix systemd-logind[408]: Removed session c18. Did the last update add some type of timer to intentionally slow the connection time to discourage or combat DOS type attacks? It's like there is something between: 09:20:24 phoinix systemd[1]: Started Session c18 of user david. and 09:20:28 phoinix sshd[2654]: Received disconnect from 66.76.46.195 port 59956:11: disconnected by user that isn't data transfer and isn't rsyc checking if files need updating. Also interestingly, the 5 boxes on my lan that are in the backup list do not show this type of delay. For example same connection and same box, but on lang and not internet: Jul 17 09:18:50 valkyrie sshd[1324]: Accepted publickey for david from 192.168.6.104 port 52414 ssh2: ECDSA SHA256:97TPKWvaGks+sjneobeoY9RpK1Hznnh8xJCjbcAWrkQ Jul 17 09:18:50 valkyrie sshd[1324]: pam_unix(sshd:session): session opened for user david by (uid=0) Jul 17 09:18:50 valkyrie systemd-logind[585]: New session c18 of user david. Jul 17 09:18:50 valkyrie systemd[1]: Started Session c18 of user david. Jul 17 09:18:50 valkyrie sshd[1327]: Received disconnect from 192.168.6.104 port 52414:11: disconnected by user Jul 17 09:18:50 valkyrie sshd[1327]: Disconnected from user david 192.168.6.104 port 52414 Jul 17 09:18:50 valkyrie sshd[1324]: pam_unix(sshd:session): session closed for user david Jul 17 09:18:50 valkyrie systemd-logind[585]: Session c18 logged out. Waiting for processes to exit. Jul 17 09:18:50 valkyrie systemd-logind[585]: Removed session c18. it didn't even take 1-sec for the same transaction. So I'm stumped and wanting to know if anyone else has seen this type of behavior where LAN connections via ssh connect normally, while WAN connection seem to have additional delay built into the connection. (these boxes are all Arch, and all current on packages) -- David C. Rankin, J.D.,P.E.

3 3