Arvutiklassi Linux: Difference between revisions
From ICO wiki
Jump to navigationJump to search
Line 76: | Line 76: | ||
*Tee /etc/pam.d/common-* failidest varukoopia. Muuda faile järgnevalt. | *Tee /etc/pam.d/common-* failidest varukoopia. Muuda faile järgnevalt. | ||
<pre> | <pre> | ||
# /etc/pam.d/common-account - authorization settings common to all services | |||
account sufficient pam_ldap.so | |||
account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so | |||
account requisite pam_deny.so | |||
account required pam_permit.so | |||
</pre> | </pre> | ||
<pre> | <pre> | ||
# /etc/pam.d/common-auth - authentication settings common to all services | |||
#auth required pam_group.so use_first_pass | |||
auth sufficient pam_mount.so | |||
auth sufficient pam_ldap.so | |||
auth required pam_unix.so nullok_secure try_first_pass | |||
auth requisite pam_deny.so | |||
auth required pam_permit.so | |||
auth optional pam_ecryptfs.so unwrap | |||
</pre> | </pre> | ||
<pre> | <pre> | ||
# /etc/pam.d/common-password - password-related modules common to all services | |||
# here are the per-package modules (the "Primary" block) | |||
password sufficient pam_ldap.so | |||
password required pam_unix.so obscure sha512 | |||
password requisite pam_deny.so | |||
password required pam_permit.so | |||
password optional pam_ecryptfs.so | |||
</pre> | </pre> | ||
<pre> | <pre> | ||
# /etc/pam.d/common-session - session-related modules common to all services | |||
session required pam_unix.so | |||
session optional pam_mount.so | |||
session optional pam_ldap.so | |||
session required pam_mkhomedir.so | |||
session optional pam_ecryptfs.so unwrap | |||
session optional pam_ck_connector.so nox11 | |||
</pre> | </pre> | ||
Revision as of 09:22, 16 June 2009
Arvutiklassides kasutatava Linux seadistused ja tarkvara
Kuna Margus ja Laur kavatsevad teha arvutiklasside Linux keskkonna pisut sõbralikumaks, siis toimub siin lehel arutelu antud teemal.
Hetkel eksisteerivad probleemid
- OpenOffice org on vana ja ei oma õigekirjakontrolli.
- Nädal algab pühapäevast ja arvuti kell on GMTs (tegelikult pole)
Installeeritav tarkvara
- eagle - Trükkplaadi CAD programmi vaba versioon
- avr-gcc, avr-libc, avrdude - AVR mikrokontrollerite programmeerimise tarkvara
- minicom - Terminalirakendus
- vim htop - Kellad viled
- inkscape - Eestimaise Sodipodi edasiarendus, vektorgraafika rakendus
- mc - Midnight Commander
- amarok, libxine-ffmpeg - Amarok ja pluginad
- kdevelop - Arenduskeskkond
- opencv - Pilditöötlusteek
- hugs - Haskell interpretaator
- build-essential, gcc, g++- C ja C++ arendusvahendid
- sdcc - Ristkompilaator sardsüsteemidele (compiler for embedded systems)
- qt4-designer, pyqt4-tools - QT4 disainer ja pyuic4 kompilaator
- skype - Linuxi versioon paigaldada ja testida heliväljund+mikker ja seadistada volüümid normaalseks
- kaffeine - Threadidega filmimängija (xine decoderi threadide arv lükata 2 peale kuna meil vist enamus kahetuumalised)
- wesnoth-all - The Battle for Wesnothi strateegiamäng, mida Kakk mõnedel kursustel õppevahendina kasutab (see on metapakk, mis kogu vajaliku kupatuse ära tirib ja paigaldab)
- scribus (+ scribus-template) - MS Publisheri sarnane DTP-programm koos vajalike mallidega
Küsimärgiga - avaldage arvamust
- LyX - LaTEXi frontend
- Eclipse ja/või Lazarus - arenduskeskkonnad
- Dia ja/või Kivio - diagrammitarkvara
- Wine ja Dosbox - M$ tarkvara käimalaskmiseks
Väljastpoolt Ubuntu varamuid
- Hippo Viewer (http://mjm-labs.com/viewer/) - virtuaalmaailmade kasutamiseks (sh ITK OpenSim'i projekt)
Eemaldatav tarkvara
- pulseaudio ja arts või mis iganes - ALSAst piisab kohalike rakenduste jaoks ja heliserverid on tavaliselt tülinaks. Skypel puudub pulseaudio tugi
Seadistused
Siin on klassi masinate seadistused
Grub alglaadur
Vaikimisi laetakse windows operatsioonisüsteemi (kuna win maailma paikamine peab öösel töimima) Alglaadimisel ooteaeg 300s
PAM ja LDAP
Pam konfiguratsioon LDAP serveriga ühendamiseks debian/ubuntu laadsetel
- Installeerida ldap klienditarkvara
sudo apt-get install auth-client-config ldap-auth-client ldap-auth-config libnss-db libnss-ldap libpam-ldap nscd nss-updatedb ldap-utils libpam-mkhomedir
- Seadistada /etc/ldap.conf
# The distinguished name of the search base. base dc=itcollege,dc=ee host 172.16.0.175
- Seadistada /etc/nsswitch.conf
passwd: files ldap group: files ldap
Kontrollimiseks kasuta järgnevaid korraldusi
getent passwd getent group
Kui kuvatakse kasutajate ja gruppide nimekiri, siis on tulemus õige.
- Tee /etc/pam.d/common-* failidest varukoopia. Muuda faile järgnevalt.
# /etc/pam.d/common-account - authorization settings common to all services account sufficient pam_ldap.so account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so account requisite pam_deny.so account required pam_permit.so
# /etc/pam.d/common-auth - authentication settings common to all services #auth required pam_group.so use_first_pass auth sufficient pam_mount.so auth sufficient pam_ldap.so auth required pam_unix.so nullok_secure try_first_pass auth requisite pam_deny.so auth required pam_permit.so auth optional pam_ecryptfs.so unwrap
# /etc/pam.d/common-password - password-related modules common to all services # here are the per-package modules (the "Primary" block) password sufficient pam_ldap.so password required pam_unix.so obscure sha512 password requisite pam_deny.so password required pam_permit.so password optional pam_ecryptfs.so
# /etc/pam.d/common-session - session-related modules common to all services session required pam_unix.so session optional pam_mount.so session optional pam_ldap.so session required pam_mkhomedir.so session optional pam_ecryptfs.so unwrap session optional pam_ck_connector.so nox11
- Restardi nscd teenus
/etc/init.d/nscd restart
- Kontrolli su - kasutajanimi
PAM mount
sudo apt-get install libpam-mount smbfs
Estobuntu
Fedora
#%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth required pam_mount.so auth sufficient pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 100 quiet auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so account required pam_unix.so broken_shadow account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 100 quiet account [default=bad success=ok user_unknown=ignore] pam_ldap.so account required pam_permit.so password requisite pam_cracklib.so try_first_pass retry=3 password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_ldap.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_mkhomedir.so session required pam_unix.so session optional pam_mount.so session optional pam_ldap.so
rm /etc/udev/rules.d/70-persistent-net.rules
PAM mount
Lingid
https://bugs.launchpad.net/ubuntu/+source/libpam-mount/+bug/367918