[Kde-kiosk] Problem with Applying Group Profiles to new Users

Sun Jan 16 07:31:26 CET 2005

Martijn Klingens wrote:

>On Saturday 15 January 2005 16:17, Murray Trainer wrote:
>  
>
>>Everything is fine setting up the profile in preview etc.  As I said, my
>>locked down Kiosk profile works fine when it is applied to a group of
>>existing users.  The problem is the Kiosk profile doesn't apply when
>>adding new or existing users to the group.  If I remove the association
>>of the kiosk profile to the group and reapply then the new members of
>>the group get the locked down profile when they login.  I am using Suse
>>9.1 if that is any help.
>>    
>>
>
>With what KDE version is that? My laptop runs a self-compiled KDE, which works 
>fine with Kiosk, but the KDE that shipped with 9.1 is slightly too old to use 
>with user profiles and instead requires the use of $KDEDIRS to get things up 
>and running.
>
>  
>
I am using KDE 3.3.0 and the latest Kiosk-Tool from the website.  I did 
not have to set the $KDEDIRS var to make it work on KDE 3.3.0.

>That said, since it works with some users for you I'd assume you already 
>upgraded to SuSE's supplementary updates or built your own KDE. While looking 
>for the command line that Waldo once mentioned for the 'kiosktool-kdedirs' 
>tool I noticed the attached e-mail.
>
>Does that e-mail (and the rest of the thread in the list archives) look 
>familiar to you and help you any further? To me it seems like the same 
>problem. It's also remarkable that the mail mentions that profiles are being 
>added by UID rather than GID, which would also explain the behaviour you 
>describe. I quickly considered that option and dropped it since it should be 
>technically impossible, but apparently it can actually happen :/
>
>Anyway, is that thread of any help?
>
>  
>
The problem below doesn't look like the same problem I am getting as I 
can successfully apply a Kiosk-tool profile to a group.  It is only 
users added to the group that don't get the Kiosk profile applied.  I 
thought it may be a problem with the ACL's on my LDAP directory but I 
made it open and I still get the problem.  I will do some testing using 
local users/groups on the Kiosk tool machine to see if it is an LDAP 
issue and report back the results.

>
> ------------------------------------------------------------------------
>
> Subject:
> [Kde-kiosk] trouble implementing kiosk on Suse 9.1
> From:
> Mr Wiggles <astalavista.box.sk at gmail.com>
> Date:
> Wed, 5 Jan 2005 07:58:25 -0500
> To:
> kde-kiosk at kde.org
>
> To:
> kde-kiosk at kde.org
>
> Return-path:
> <kde-kiosk-bounces-+kde.org-klingens=kde.org at kde.org>
> Envelope-to:
> martijn at martijn.homeip.net
> Delivery-date:
> Wed, 05 Jan 2005 13:59:44 +0100
> Received:
> from ktown.kde.org ([131.246.103.200]) by martijn.homeip.net with smtp 
> (Exim 4.04) id 1CmAlM-0004Mz-00 for martijn at martijn.homeip.net; Wed, 
> 05 Jan 2005 13:59:44 +0100
> Received:
> (qmail 23706 invoked by uid 1055); 5 Jan 2005 12:59:24 -0000
> Delivered-To:
> kde.org-klingens at kde.org
> Received:
> (qmail 23681 invoked by uid 72); 5 Jan 2005 12:59:20 -0000
> Received:
> (qmail 23631 invoked by uid 1055); 5 Jan 2005 12:59:13 -0000
> Delivered-To:
> kde.org-kde-kiosk at kde.org
> Received:
> (qmail 23624 invoked from network); 5 Jan 2005 12:59:12 -0000
> Received:
> from rproxy.gmail.com (64.233.170.203) by ktown.kde.org with SMTP; 5 
> Jan 2005 12:58:30 -0000
> Received:
> by rproxy.gmail.com with SMTP id f1so129116rne for 
> <kde-kiosk at kde.org>; Wed, 05 Jan 2005 04:58:25 -0800 (PST)
> DomainKey-Signature:
> a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; 
> h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; 
> b=Repnmm6wpp36Tg9dUvAxwlTs7sEMIkn+t8UA7uKTYqq2hX2UznT9vLH8mJQEuJdKRXqX7sMPuOLtPq9jX6J7PAPl6m98awXVgk+h8yhBThH1RnClcYC/AcIgsRSRc19gvnJbvTZdsFrBnBt440opNrqvE3w2yZgQrXaYEGdTP2M= 
>
> Received:
> by 10.38.10.17 with SMTP id 17mr127624rnj; Wed, 05 Jan 2005 04:58:25 
> -0800 (PST)
> Received:
> by 10.39.1.20 with HTTP; Wed, 5 Jan 2005 04:58:25 -0800 (PST)
> Message-ID:
> <3303bfa10501050458729039bf at mail.gmail.com>
> MIME-Version:
> 1.0
> Content-Type:
> text/plain; charset=US-ASCII
> Content-Transfer-Encoding:
> 7bit
> X-Spam-Checker-Version:
> SpamAssassin 3.0.1 (2004-10-22) on ktown.kde.org
> X-BeenThere:
> kde-kiosk at kde.org
> X-Mailman-Version:
> 2.1.5
> Precedence:
> list
> Reply-To:
> kde-kiosk at kde.org, Mr Wiggles <astalavista.box.sk at gmail.com>
> List-Id:
> All about the KDE KIOSK Framework <kde-kiosk.kde.org>
> List-Unsubscribe:
> <https://mail.kde.org/mailman/listinfo/kde-kiosk>, 
> <mailto:kde-kiosk-request at kde.org?subject=unsubscribe>
> List-Archive:
> <http://mail.kde.org/pipermail/kde-kiosk>
> List-Post:
> <mailto:kde-kiosk at kde.org>
> List-Help:
> <mailto:kde-kiosk-request at kde.org?subject=help>
> List-Subscribe:
> <https://mail.kde.org/mailman/listinfo/kde-kiosk>, 
> <mailto:kde-kiosk-request at kde.org?subject=subscribe>
> X-UID:
> 16282
> X-Length:
> 4796
>
>
>I found a similar problem to what I am experiencing in the archives, here it is:
>
>****
>On Thursday 22 July 2004 12:17, Florian Roth wrote:
>  
>
>>Hi
>>
>>I ran kiosktool as root on our 'masterclient' (the computer the image is
>>made from) in school an modified the default profile. I locked down the
>>proxy settings, set up some desktop icons etc. Then a wanted to assign the
>>profile to a group ('users' in this case) so I added a group policy. Here I
>>realized, that every group exported from out server over NIS was in the
>>list at least twice. I chose one of the 3 user groups and created the
>>policy.
>>Ich looked at the /etc/kde* (don't know the exactly name here an my private
>>computer) file and saw, that the policy was assigned by name and not by
>>gid. So this should be no problem, should it? But when I tried to test the
>>settings with several accounts, it didn't work. (Simply nothing was
>>changed). So I wondered if I had to activate the kiosk features somewhere.
>>Maybe someone can help.
>>    
>>
>
>Which version of KDE are you using?
>
>You can use "kiosktool-kdedirs --check" to see which profiles are currently 
>active.
>
>You probably need to add
>  export KDEDIRS=$(kiosktool-kdedirs)
>to startkde or xinitrc. 
>
>Adding it to xinitrc only works if startkde doesn't unset KDEDIRS.
>
>Cheers,
>Waldo
>****
>
>
>My specific issue:
>I am running SuSe9.1 Pro and installed the version of kiosk from the
>CD.  In this version there did not appear to be any way to assign the
>created profiles to users or groups, and once I created a profile it
>was only applying to root for some reason.
>
>I saw that the screenshots on the kiosk site were different than what
>I was using so I uninstalled my older version of kiosk and downloaded
>the suse rpm of the new one.
>
>Now it looks to make more sense as there is a section to assign the
>created profile to users or groups, but for some reason it appears to
>be ignoring the aforementioned manage users profile assignment and is
>only applying the profiles I create to root.
>
>Does it sound like I just need to add that line to
>/opt/kde3/bin/startkde and if so where in startkde should I add it?
>_______________________________________________
>kde-kiosk mailing list
>kde-kiosk at kde.org
>https://mail.kde.org/mailman/listinfo/kde-kiosk
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>kde-kiosk mailing list
>kde-kiosk at kde.org
>https://mail.kde.org/mailman/listinfo/kde-kiosk
>  
>