[Kde-kiosk] Problem with Applying Group Profiles to new Users
Murray Trainer
mtrainer at central-data.net
Mon Jan 17 14:10:00 CET 2005
Murray Trainer wrote:
> Murray Trainer wrote:
>
>> Martijn Klingens wrote:
>>
>>> On Saturday 15 January 2005 16:17, Murray Trainer wrote:
>>>
>>>
>>>> Everything is fine setting up the profile in preview etc. As I
>>>> said, my
>>>> locked down Kiosk profile works fine when it is applied to a group of
>>>> existing users. The problem is the Kiosk profile doesn't apply when
>>>> adding new or existing users to the group. If I remove the
>>>> association
>>>> of the kiosk profile to the group and reapply then the new members of
>>>> the group get the locked down profile when they login. I am using
>>>> Suse
>>>> 9.1 if that is any help.
>>>>
>>>
>>>
>>>
>>> With what KDE version is that? My laptop runs a self-compiled KDE,
>>> which works fine with Kiosk, but the KDE that shipped with 9.1 is
>>> slightly too old to use with user profiles and instead requires the
>>> use of $KDEDIRS to get things up and running.
>>>
>>>
>>>
>> I am using KDE 3.3.0 and the latest Kiosk-Tool from the website. I
>> did not have to set the $KDEDIRS var to make it work on KDE 3.3.0.
>>
>>> That said, since it works with some users for you I'd assume you
>>> already upgraded to SuSE's supplementary updates or built your own
>>> KDE. While looking for the command line that Waldo once mentioned
>>> for the 'kiosktool-kdedirs' tool I noticed the attached e-mail.
>>>
>>> Does that e-mail (and the rest of the thread in the list archives)
>>> look familiar to you and help you any further? To me it seems like
>>> the same problem. It's also remarkable that the mail mentions that
>>> profiles are being added by UID rather than GID, which would also
>>> explain the behaviour you describe. I quickly considered that option
>>> and dropped it since it should be technically impossible, but
>>> apparently it can actually happen :/
>>>
>>> Anyway, is that thread of any help?
>>>
>>>
>>>
>> The problem below doesn't look like the same problem I am getting as
>> I can successfully apply a Kiosk-tool profile to a group. It is only
>> users added to the group that don't get the Kiosk profile applied. I
>> thought it may be a problem with the ACL's on my LDAP directory but I
>> made it open and I still get the problem. I will do some testing
>> using local users/groups on the Kiosk tool machine to see if it is an
>> LDAP issue and report back the results.
>>
> I tested the Kiosk-Tool profile with the following user/group
> configurations:
>
> 1. Local users and local groups - Profile applies successfully to
> existing and new group members
> 2. LDAP users and local groups - Profile applies successfully to
> existing users but not applied to new group members
> 3. Local users and LDAP groups - Profile applies successfully to
> existing users but not applied to new group members
> 4. LDAP users and LDAP groups - Profile applies successfully to
> existing users but not applied to new group members
>
> Looks like it an LDAP related issue. The question I have to ask is -
> Is anyone else running the Kiosk Tool successfully with LDAP users
> and/or groups? Maybe someone else can reproduce the problem.
>
Further testing with the Kiosk tool installed on my LDAP server and the
users logging on there gave the same problem. That eliminates the NFS
home directories and any other network issues as a cause of the problem.
The info below might shed some light on the problem. I created a
Kiosk-Tool profile called external and associated it with the ldap group
"external". The ldap user "demo" was already a member of the "external"
group. Things below look right .....
demo at ldap:~> groups demo
demo : users Domain Users external
demo at ldap:~> kiosktool-kdedirs --check
/home/demo/.kde/:/var/lib/kde-profiles/external/:/etc/opt/kde3/:/opt/kde3/
The ldap user mtrainer was not a member of the ldap group "external".
Here are his settings .....
mtrainer at ldap:~> groups mtrainer
mtrainer : users Domain Users
mtrainer at ldap:~> kiosktool-kdedirs --check
/home/mtrainer/.kde/:/var/lib/kde-profiles/default/:/etc/opt/kde3/:/opt/kde3/
I then added the ldap user mtrainer to the ldap group "external". Here
are his settings afterwards .....
mtrainer at ldap:~> groups mtrainer
mtrainer : users Domain Users external
mtrainer at ldap:~> kiosktool-kdedirs --check
/home/mtrainer/.kde/:/var/lib/kde-profiles/default/:/etc/opt/kde3/:/opt/kde3/
Obviously the problem is the /var/lib/kde-profiles/default value which
should be /var/lib/kde-profiles/external/. My question is where and
when is that value generated?
>>>
>>> ------------------------------------------------------------------------
>>>
>>>
>>> Subject:
>>> [Kde-kiosk] trouble implementing kiosk on Suse 9.1
>>> From:
>>> Mr Wiggles <astalavista.box.sk at gmail.com>
>>> Date:
>>> Wed, 5 Jan 2005 07:58:25 -0500
>>> To:
>>> kde-kiosk at kde.org
>>>
>>> To:
>>> kde-kiosk at kde.org
>>>
>>> Return-path:
>>> <kde-kiosk-bounces-+kde.org-klingens=kde.org at kde.org>
>>> Envelope-to:
>>> martijn at martijn.homeip.net
>>> Delivery-date:
>>> Wed, 05 Jan 2005 13:59:44 +0100
>>> Received:
>>> from ktown.kde.org ([131.246.103.200]) by martijn.homeip.net with
>>> smtp (Exim 4.04) id 1CmAlM-0004Mz-00 for martijn at martijn.homeip.net;
>>> Wed, 05 Jan 2005 13:59:44 +0100
>>> Received:
>>> (qmail 23706 invoked by uid 1055); 5 Jan 2005 12:59:24 -0000
>>> Delivered-To:
>>> kde.org-klingens at kde.org
>>> Received:
>>> (qmail 23681 invoked by uid 72); 5 Jan 2005 12:59:20 -0000
>>> Received:
>>> (qmail 23631 invoked by uid 1055); 5 Jan 2005 12:59:13 -0000
>>> Delivered-To:
>>> kde.org-kde-kiosk at kde.org
>>> Received:
>>> (qmail 23624 invoked from network); 5 Jan 2005 12:59:12 -0000
>>> Received:
>>> from rproxy.gmail.com (64.233.170.203) by ktown.kde.org with SMTP; 5
>>> Jan 2005 12:58:30 -0000
>>> Received:
>>> by rproxy.gmail.com with SMTP id f1so129116rne for
>>> <kde-kiosk at kde.org>; Wed, 05 Jan 2005 04:58:25 -0800 (PST)
>>> DomainKey-Signature:
>>> a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
>>> h=received:message-id:date:from:reply-to:to:subject:mime-version:content-type:content-transfer-encoding;
>>> b=Repnmm6wpp36Tg9dUvAxwlTs7sEMIkn+t8UA7uKTYqq2hX2UznT9vLH8mJQEuJdKRXqX7sMPuOLtPq9jX6J7PAPl6m98awXVgk+h8yhBThH1RnClcYC/AcIgsRSRc19gvnJbvTZdsFrBnBt440opNrqvE3w2yZgQrXaYEGdTP2M=
>>>
>>> Received:
>>> by 10.38.10.17 with SMTP id 17mr127624rnj; Wed, 05 Jan 2005 04:58:25
>>> -0800 (PST)
>>> Received:
>>> by 10.39.1.20 with HTTP; Wed, 5 Jan 2005 04:58:25 -0800 (PST)
>>> Message-ID:
>>> <3303bfa10501050458729039bf at mail.gmail.com>
>>> MIME-Version:
>>> 1.0
>>> Content-Type:
>>> text/plain; charset=US-ASCII
>>> Content-Transfer-Encoding:
>>> 7bit
>>> X-Spam-Checker-Version:
>>> SpamAssassin 3.0.1 (2004-10-22) on ktown.kde.org
>>> X-BeenThere:
>>> kde-kiosk at kde.org
>>> X-Mailman-Version:
>>> 2.1.5
>>> Precedence:
>>> list
>>> Reply-To:
>>> kde-kiosk at kde.org, Mr Wiggles <astalavista.box.sk at gmail.com>
>>> List-Id:
>>> All about the KDE KIOSK Framework <kde-kiosk.kde.org>
>>> List-Unsubscribe:
>>> <https://mail.kde.org/mailman/listinfo/kde-kiosk>,
>>> <mailto:kde-kiosk-request at kde.org?subject=unsubscribe>
>>> List-Archive:
>>> <http://mail.kde.org/pipermail/kde-kiosk>
>>> List-Post:
>>> <mailto:kde-kiosk at kde.org>
>>> List-Help:
>>> <mailto:kde-kiosk-request at kde.org?subject=help>
>>> List-Subscribe:
>>> <https://mail.kde.org/mailman/listinfo/kde-kiosk>,
>>> <mailto:kde-kiosk-request at kde.org?subject=subscribe>
>>> X-UID:
>>> 16282
>>> X-Length:
>>> 4796
>>>
>>>
>>> I found a similar problem to what I am experiencing in the archives,
>>> here it is:
>>>
>>> ****
>>> On Thursday 22 July 2004 12:17, Florian Roth wrote:
>>>
>>>
>>>> Hi
>>>>
>>>> I ran kiosktool as root on our 'masterclient' (the computer the
>>>> image is
>>>> made from) in school an modified the default profile. I locked down
>>>> the
>>>> proxy settings, set up some desktop icons etc. Then a wanted to
>>>> assign the
>>>> profile to a group ('users' in this case) so I added a group
>>>> policy. Here I
>>>> realized, that every group exported from out server over NIS was in
>>>> the
>>>> list at least twice. I chose one of the 3 user groups and created the
>>>> policy.
>>>> Ich looked at the /etc/kde* (don't know the exactly name here an my
>>>> private
>>>> computer) file and saw, that the policy was assigned by name and
>>>> not by
>>>> gid. So this should be no problem, should it? But when I tried to
>>>> test the
>>>> settings with several accounts, it didn't work. (Simply nothing was
>>>> changed). So I wondered if I had to activate the kiosk features
>>>> somewhere.
>>>> Maybe someone can help.
>>>>
>>>
>>>
>>>
>>> Which version of KDE are you using?
>>>
>>> You can use "kiosktool-kdedirs --check" to see which profiles are
>>> currently active.
>>>
>>> You probably need to add
>>> export KDEDIRS=$(kiosktool-kdedirs)
>>> to startkde or xinitrc.
>>> Adding it to xinitrc only works if startkde doesn't unset KDEDIRS.
>>>
>>> Cheers,
>>> Waldo
>>> ****
>>>
>>>
>>> My specific issue:
>>> I am running SuSe9.1 Pro and installed the version of kiosk from the
>>> CD. In this version there did not appear to be any way to assign the
>>> created profiles to users or groups, and once I created a profile it
>>> was only applying to root for some reason.
>>>
>>> I saw that the screenshots on the kiosk site were different than what
>>> I was using so I uninstalled my older version of kiosk and downloaded
>>> the suse rpm of the new one.
>>>
>>> Now it looks to make more sense as there is a section to assign the
>>> created profile to users or groups, but for some reason it appears to
>>> be ignoring the aforementioned manage users profile assignment and is
>>> only applying the profiles I create to root.
>>>
>>> Does it sound like I just need to add that line to
>>> /opt/kde3/bin/startkde and if so where in startkde should I add it?
>>> _______________________________________________
>>> kde-kiosk mailing list
>>> kde-kiosk at kde.org
>>> https://mail.kde.org/mailman/listinfo/kde-kiosk
>>>
>>>
>>> ------------------------------------------------------------------------
>>>
>>>
>>> _______________________________________________
>>> kde-kiosk mailing list
>>> kde-kiosk at kde.org
>>> https://mail.kde.org/mailman/listinfo/kde-kiosk
>>>
>>>
>>
>> _______________________________________________
>> kde-kiosk mailing list
>> kde-kiosk at kde.org
>> https://mail.kde.org/mailman/listinfo/kde-kiosk
>>
>> .
>>
>
> _______________________________________________
> kde-kiosk mailing list
> kde-kiosk at kde.org
> https://mail.kde.org/mailman/listinfo/kde-kiosk
>
> .
>
More information about the kde-kiosk
mailing list