[Kde-kiosk] Problem with Applying Group Profiles to new Users

Sun Jan 16 15:10:42 CET 2005

Murray Trainer wrote:

> Martijn Klingens wrote:
>
>> On Saturday 15 January 2005 16:17, Murray Trainer wrote:
>>  
>>
>>> Everything is fine setting up the profile in preview etc.  As I 
>>> said, my
>>> locked down Kiosk profile works fine when it is applied to a group of
>>> existing users.  The problem is the Kiosk profile doesn't apply when
>>> adding new or existing users to the group.  If I remove the association
>>> of the kiosk profile to the group and reapply then the new members of
>>> the group get the locked down profile when they login.  I am using Suse
>>> 9.1 if that is any help.
>>>   
>>
>>
>> With what KDE version is that? My laptop runs a self-compiled KDE, 
>> which works fine with Kiosk, but the KDE that shipped with 9.1 is 
>> slightly too old to use with user profiles and instead requires the 
>> use of $KDEDIRS to get things up and running.
>>
>>  
>>
> I am using KDE 3.3.0 and the latest Kiosk-Tool from the website.  I 
> did not have to set the $KDEDIRS var to make it work on KDE 3.3.0.
>
>> That said, since it works with some users for you I'd assume you 
>> already upgraded to SuSE's supplementary updates or built your own 
>> KDE. While looking for the command line that Waldo once mentioned for 
>> the 'kiosktool-kdedirs' tool I noticed the attached e-mail.
>>
>> Does that e-mail (and the rest of the thread in the list archives) 
>> look familiar to you and help you any further? To me it seems like 
>> the same problem. It's also remarkable that the mail mentions that 
>> profiles are being added by UID rather than GID, which would also 
>> explain the behaviour you describe. I quickly considered that option 
>> and dropped it since it should be technically impossible, but 
>> apparently it can actually happen :/
>>
>> Anyway, is that thread of any help?
>>
>>  
>>
> The problem below doesn't look like the same problem I am getting as I 
> can successfully apply a Kiosk-tool profile to a group.  It is only 
> users added to the group that don't get the Kiosk profile applied.  I 
> thought it may be a problem with the ACL's on my LDAP directory but I 
> made it open and I still get the problem.  I will do some testing 
> using local users/groups on the Kiosk tool machine to see if it is an 
> LDAP issue and report back the results.
>
I tested the Kiosk-Tool profile with the following user/group 
configurations:

1.  Local users and local groups - Profile applies successfully to 
existing and new group members
2.  LDAP users and local groups - Profile applies successfully to 
existing users but not applied to new group members
3.  Local users and LDAP groups - Profile applies successfully to 
existing users but not applied to new group members
4.  LDAP users and LDAP groups - Profile applies successfully to 
existing users but not applied to new group members

Looks like  it an LDAP related issue.  The question I have to ask is - 
Is anyone else running the Kiosk Tool successfully with LDAP users 
and/or groups?   Maybe someone else can reproduce the problem.

>>
>> ------------------------------------------------------------------------
>>
>> Subject:
>> [Kde-kiosk] trouble implementing kiosk on Suse 9.1
>> From:
>> Mr Wiggles <astalavista.box.sk at gmail.com>
>> Date:
>> Wed, 5 Jan 2005 07:58:25 -0500
>> To:
>> kde-kiosk at kde.org
>>
>> To:
>> kde-kiosk at kde.org
>>
>> Return-path:
>> <kde-kiosk-bounces-+kde.org-klingens=kde.org at kde.org>
>> Envelope-to:
>> martijn at martijn.homeip.net
>> Delivery-date:
>> Wed, 05 Jan 2005 13:59:44 +0100
>> Received:
>> from ktown.kde.org ([131.246.103.200]) by martijn.homeip.net with 
>> smtp (Exim 4.04) id 1CmAlM-0004Mz-00 for martijn at martijn.homeip.net; 
>> Wed, 05 Jan 2005 13:59:44 +0100
>> Received:
>> (qmail 23706 invoked by uid 1055); 5 Jan 2005 12:59:24 -0000
>> Delivered-To:
>> kde.org-klingens at kde.org
>> Received:
>> (qmail 23681 invoked by uid 72); 5 Jan 2005 12:59:20 -0000
>> Received:
>> (qmail 23631 invoked by uid 1055); 5 Jan 2005 12:59:13 -0000
>> Delivered-To:
>> kde.org-kde-kiosk at kde.org
>> Received:
>> (qmail 23624 invoked from network); 5 Jan 2005 12:59:12 -0000
>> Received:
>> from rproxy.gmail.com (64.233.170.203) by ktown.kde.org with SMTP; 5 
>> Jan 2005 12:58:30 -0000
>> Received:
>> by rproxy.gmail.com with SMTP id f1so129116rne for 
>> <kde-kiosk at kde.org>; Wed, 05 Jan 2005 04:58:25 -0800 (PST)
>> DomainKey-Signature:
>> a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; 
>> h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding; 
>> b=Repnmm6wpp36Tg9dUvAxwlTs7sEMIkn+t8UA7uKTYqq2hX2UznT9vLH8mJQEuJdKRXqX7sMPuOLtPq9jX6J7PAPl6m98awXVgk+h8yhBThH1RnClcYC/AcIgsRSRc19gvnJbvTZdsFrBnBt440opNrqvE3w2yZgQrXaYEGdTP2M= 
>>
>> Received:
>> by 10.38.10.17 with SMTP id 17mr127624rnj; Wed, 05 Jan 2005 04:58:25 
>> -0800 (PST)
>> Received:
>> by 10.39.1.20 with HTTP; Wed, 5 Jan 2005 04:58:25 -0800 (PST)
>> Message-ID:
>> <3303bfa10501050458729039bf at mail.gmail.com>
>> MIME-Version:
>> 1.0
>> Content-Type:
>> text/plain; charset=US-ASCII
>> Content-Transfer-Encoding:
>> 7bit
>> X-Spam-Checker-Version:
>> SpamAssassin 3.0.1 (2004-10-22) on ktown.kde.org
>> X-BeenThere:
>> kde-kiosk at kde.org
>> X-Mailman-Version:
>> 2.1.5
>> Precedence:
>> list
>> Reply-To:
>> kde-kiosk at kde.org, Mr Wiggles <astalavista.box.sk at gmail.com>
>> List-Id:
>> All about the KDE KIOSK Framework <kde-kiosk.kde.org>
>> List-Unsubscribe:
>> <https://mail.kde.org/mailman/listinfo/kde-kiosk>, 
>> <mailto:kde-kiosk-request at kde.org?subject=unsubscribe>
>> List-Archive:
>> <http://mail.kde.org/pipermail/kde-kiosk>
>> List-Post:
>> <mailto:kde-kiosk at kde.org>
>> List-Help:
>> <mailto:kde-kiosk-request at kde.org?subject=help>
>> List-Subscribe:
>> <https://mail.kde.org/mailman/listinfo/kde-kiosk>, 
>> <mailto:kde-kiosk-request at kde.org?subject=subscribe>
>> X-UID:
>> 16282
>> X-Length:
>> 4796
>>
>>
>> I found a similar problem to what I am experiencing in the archives, 
>> here it is:
>>
>> ****
>> On Thursday 22 July 2004 12:17, Florian Roth wrote:
>>  
>>
>>> Hi
>>>
>>> I ran kiosktool as root on our 'masterclient' (the computer the 
>>> image is
>>> made from) in school an modified the default profile. I locked down the
>>> proxy settings, set up some desktop icons etc. Then a wanted to 
>>> assign the
>>> profile to a group ('users' in this case) so I added a group policy. 
>>> Here I
>>> realized, that every group exported from out server over NIS was in the
>>> list at least twice. I chose one of the 3 user groups and created the
>>> policy.
>>> Ich looked at the /etc/kde* (don't know the exactly name here an my 
>>> private
>>> computer) file and saw, that the policy was assigned by name and not by
>>> gid. So this should be no problem, should it? But when I tried to 
>>> test the
>>> settings with several accounts, it didn't work. (Simply nothing was
>>> changed). So I wondered if I had to activate the kiosk features 
>>> somewhere.
>>> Maybe someone can help.
>>>   
>>
>>
>> Which version of KDE are you using?
>>
>> You can use "kiosktool-kdedirs --check" to see which profiles are 
>> currently active.
>>
>> You probably need to add
>>  export KDEDIRS=$(kiosktool-kdedirs)
>> to startkde or xinitrc.
>> Adding it to xinitrc only works if startkde doesn't unset KDEDIRS.
>>
>> Cheers,
>> Waldo
>> ****
>>
>>
>> My specific issue:
>> I am running SuSe9.1 Pro and installed the version of kiosk from the
>> CD.  In this version there did not appear to be any way to assign the
>> created profiles to users or groups, and once I created a profile it
>> was only applying to root for some reason.
>>
>> I saw that the screenshots on the kiosk site were different than what
>> I was using so I uninstalled my older version of kiosk and downloaded
>> the suse rpm of the new one.
>>
>> Now it looks to make more sense as there is a section to assign the
>> created profile to users or groups, but for some reason it appears to
>> be ignoring the aforementioned manage users profile assignment and is
>> only applying the profiles I create to root.
>>
>> Does it sound like I just need to add that line to
>> /opt/kde3/bin/startkde and if so where in startkde should I add it?
>> _______________________________________________
>> kde-kiosk mailing list
>> kde-kiosk at kde.org
>> https://mail.kde.org/mailman/listinfo/kde-kiosk
>>  
>>
>> ------------------------------------------------------------------------
>>
>> _______________________________________________
>> kde-kiosk mailing list
>> kde-kiosk at kde.org
>> https://mail.kde.org/mailman/listinfo/kde-kiosk
>>  
>>
>
> _______________________________________________
> kde-kiosk mailing list
> kde-kiosk at kde.org
> https://mail.kde.org/mailman/listinfo/kde-kiosk
>
> .
>