<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body>
<p>Hi Anders,<br /><br />Thank you for your support. I have done all the instructions that you said but it doesn't work. The The DEBUG options were already enabled and I have seen the client computer IP on the public key on a log file.<br />Maybe I must to explain how is our network configuration.<br /><br />- Client computers don't have access to the servers. Client computers only have access to the broker server.<br />- Broker server have access to x2go servers and client computers.<br />- x2go servers only have access to broker server (this is a private network).<br /><br />Thanks,</p>
<p>A 2013-06-03 14:47, Anders Bruun Olsen escrigué:</p>
<blockquote type="cite" style="padding-left:5px; border-left:#1010ff 2px solid; margin-left:5px; width:100%"><!-- html ignored --><!-- head ignored --><!-- meta ignored -->
<div dir="ltr">Hi,
<div> </div>
<div>I have read about problems with the AuthorizedKeysFile2 option. My servers just use AuthorizedKeysFile to set two paths:</div>
<div> </div>
<div>
<div>AuthorizedKeysFile<span style="white-space: pre;"> </span>%h/.ssh/authorized_keys %h/.x2go/authorized_keys</div>
<div> </div>
<div>Have you tried running x2gobroker-daemon in debug mode and looking in the logfile, to see if anything useful gets logged?</div>
<div>Set X2GOBROKER_DEBUG=1 in /etc/default/x2gobroker-daemon</div>
<div> </div>
<div>Also, I assume that you have the requisite ssh-keys setup, so your broker can login to your terminalservers? You need to have run x2gobroker-keygen on the broker, and x2gobroker-pubkeyauthorizer -t <a href="http://BROKER:8080/pubkeys">http://BROKER:8080/pubkeys</a> on your x2go servers. Followed by su'ing to the x2gobroker on your broker and then ssh'ing to your x2go servers and accepting the host keys.</div>
<div> </div>
</div>
</div>
<div class="gmail_extra"><br /><br />
<div class="gmail_quote">2013/6/3 Juan Carlos Corchado <span><<a href="mailto:jcorchado@tsc.upc.edu">jcorchado@tsc.upc.edu</a>></span><br />
<blockquote class="gmail_quote" style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><span style="text-decoration: underline;"></span>
<div>
<p>Hi,</p>
<p><br />Thank you for the support. I have included the option "broker-session-autologin=true" on x2gobroker-sessionprofiles.conf but when I choose the KDE or GNOME appears "connection refused (or timed out)". Some options that I set on /etc/x2go/x2gobroker.conf are:<br /><br />check-credentials = true<br />default-session-autologin=true<br /><br />And I already include on /etc/ssh/sshd_config this line: <br /><br />AuthorizedKeysFile2 %h/.x2go/authorized_keys.<br /><br />I noticed that when ocurs this error I need to restart the process "x2gobroker-daemon" because is stopped.<br /><br />Thanks,</p>
<p> </p>
<p>A 2013-06-03 10:57, Anders Bruun Olsen escrigué:</p>
<div>
<div class="h5">
<blockquote style="padding-left: 5px; border-left: #1010ff 2px solid; margin-left: 5px; width: 100%;">
<div dir="ltr">Hi Juan,
<div> </div>
<div>That was one of my first questions as well :)</div>
<div>You will need to configure auto-login, which means that your clients will only need to authenticate to the broker. The broker will then place a temporary public ssh-key on the chosen x2goserver and give the corresponding private key to the client, allowing the client to login to that server, without a password. If I remember correctly, you just need to enable it in /etc/x2go/broker/x2gobroker-sessionprofiles.conf, by setting broker-session-autologin=true for the profiles you wish to have autologin on.</div>
</div>
<div class="gmail_extra"><br /><br />
<div class="gmail_quote">2013/6/3 Juan Carlos Corchado <span><<a href="mailto:jcorchado@tsc.upc.edu">jcorchado@tsc.upc.edu</a>></span><br />
<blockquote class="gmail_quote" style="margin: 0 0 0 .8ex; border-left: 1px #ccc solid; padding-left: 1ex;"><span style="text-decoration: underline;"></span>
<div>
<p>Hi all,<br /><br />The x2go-broker configuration is working correctly but when I try the command x2goclient --broker-url=<a href="http://server:8080/plain/inifile/">http://server:8080/plain/inifile/</a> and set the name and password appears another window to select KDE or GNOME (my configuration). When I choose one of them I have to set again the user and password. It's possible to put it just once?<br /><br />Thanks,</p>
<div> </div>
</div>
<br />_______________________________________________<br /> X2Go-User mailing list<br /><a href="mailto:X2Go-User@lists.berlios.de">X2Go-User@lists.berlios.de</a><br /><a href="https://lists.berlios.de/mailman/listinfo/x2go-user">https://lists.berlios.de/mailman/listinfo/x2go-user</a></blockquote>
</div>
<br /><br clear="all" />
<div> </div>
-- <br />Anders Bruun Olsen<br /> It-ansvarlig<br />Det Danske Sprog- og Litteraturselskab<br />(Society for Danish Language and Literature)</div>
</blockquote>
<p> </p>
<div> </div>
</div>
</div>
</div>
</blockquote>
</div>
<br /><br clear="all" />
<div> </div>
-- <br />Anders Bruun Olsen<br />It-ansvarlig<br />Det Danske Sprog- og Litteraturselskab<br />(Society for Danish Language and Literature)</div>
</blockquote>
<p> </p>
<div> </div>
</body></html>