[X2Go-Dev] Do we really need an x2gouser

Reinhard Tartler siretart at gmail.com
Sat Dec 14 23:38:31 CET 2013


On Sat, Dec 14, 2013 at 5:34 PM, Stefan Baur
<newsgroups.mail2 at stefanbaur.de> wrote:
> Am 14.12.2013 23:26, schrieb Reinhard Tartler:
>
>
>> can someone please remind me again why we need a sqlite database that
>> is shared for all users? It allows users to see what other users are
>> currently having running sessions, which I frankly don't consider very
>> important. It could even be considered a privacy issue.
>
>
> I can't speak for the "why", but isn't it still possible to use a serious DB
> engine like postgres instead?
>
> http://wiki.x2go.org/doku.php/wiki:advanced:multi-node:x2goserver-pgsql

Yes, but that's not my concern. AFAIUI, we don't need an x2gouser for
postgres either, right?

> If you're worried about privacy, because the sqlite DB happens t be open to
> everyone (I don't know - I'm taking your word for granted here), maybe the
> access rules on the postgres DB are stricter by default, or could at least
> be set in a stricter way without harming X2Go use?

I'd rather simplify the deployment by removing the x2gouser if it was
not necessary in the first place. For installations with central user
management, adding a system user is something non-trivial that may
require coordination, and I just wonder if we could not simplify the
no-configuration-needed-default-install even more.

-- 
regards,
    Reinhard



More information about the x2go-dev mailing list