[X2Go-User] x2golistsessions_root vs. x2golistsessions on x2goserver with postgres DB backend

[Stefan Baur]

Hi $LIST,

I'm not filing this as a bug (yet) as I'm not sure if this is intended
behavior.

On a default X2GoServer installation, with the SQLite DB backend, both
x2golistsessions and x2golistsessions_root return sensible output - with
x2golistsessions working "per user", and x2golistsessions_root, when
invoked as root, shows all sessions.

On an X2GoServer installation with the postgres DB backend, however, the
output of x2golistsessions_root, when invoked as root, is always empty,
while x2golistsessions works as expected for a regular user.

So ... I figured "Hey, maybe it's because root doesn't have a file
/root/.x2go/sqlpass" - so I tried creating one.

Bzzt - "x2godbadmin --adduser root" returns 'The super-user "root" is
not allowed to use X2Go'.

I totally agree that root should not be able to start an X2Go session, but:
1) at present, in SQLite mode, root can start an X2Go session
2) root (or $SOME_USER_WITH_ADMIN_PRIVS - if it has to be a different
user name, so be it) SHOULD be able to view the sessions list (at least
for their own server, if not for the entire farm), regardless of which
DB backend is in use.

So what's the proper way of checking which sessions are
active/suspended/etc. on the server "root" is logged in to, and/or in
the entire farm handled by the postgres db instance it is linked to?

-Stefan

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.x2go.org/pipermail/x2go-user/attachments/20170207/e286f309/attachment.pgp>