[KLUG Members] certificates

[Bert]

Adam Williams wrote:

>>>>question, is it possible to use browser certificates with ltsp? I need 
>>>>to install some certificates on the desktop. Because it is all browser 
>>>>driven I thought to introduce ltsp as well.
>>>>        
>>>>
>>>I don't see the correlation between browser certificates and LTSP?  If
>>>the browser knows the certificates it doesn't matter where it is
>>>presented.
>>>      
>>>
>>Ok, but a browser started from a diskless workstation is loaded from the 
>>server. In that case the same browser image can be loaded using the same 
>>"real-directories' mounted thru NFS.
>>    
>>
>
>1.) Are you running the browser locally on the thin-client?  I know
>current versions of LTSP support local applications.  But usually the
>LTSP client is merely a display server; the browser, GNOME, window
>manager, word processor, etc... are all RUNNING on the LTSP server (or
>some host) and NOT on the client.  Given the girth of modern browsers
>this is the preferred way, and not locally.  So the browser has nothing
>to do with the LTSP/NFS exports.
>

I haven't installed a ltsp server yet. And my knowledge is poor about 
any details. I did do an install a long time ago.
There was an option that let you choose between local and server 
apllications. I did use local then.

I have planed to install a ltsp server this week, if my schedule isn't 
mixed up that is.  Basically I am facing the following problem.

1) for a new project on my work we need access to priveledged data, from 
an inssurrance company. They offer a verisign cert. to access there data 
via a brower.
2) some external guy installed 10 new m$ based clients last week. Took 
more than a week to get them alle running (...) -> lesson: never take a 
vacation :-)
3) I want to replace that 10 clients as soon as possible by diskless 
clients (thats should be easy just remove the disk)
4) but those clients need that access to that inssurance company.
5) I have the choise here to get 10 certs and installl them on each 
client or to try to get it running on ltsp. Migth still need 10 certs btw
If I install those certs on the m$ clients I most likely don;t get a 
change to get ltsp clients here for some time.

Because the certifcates are $100 each, I can't just go and try and see 
how far I can take it. What I have tried so far is that it looks like 
that some files need to be installed on the client to get the 
certificate activated.

>Do these certificates have something to do with the specific
>application?  I get the feeling we aren't talking about boring old SSL
>certificates.
>
I think we do or I am completely mixed up.



Bert