Dear all

The X2Go project is proud to announce a new release of the X2Go component ,,x2gobroker''.

New gains of this version of ,,x2gobroker'' are:

o ported to Python 3 o allow-deny/deny-allow ACLs rework o new login option, useful when broker and X2Go Server users diverge o various fixes o build fix for newer Fedora versions o initial UCCS API version 5 o dropped Apache httpd 2.2 support o updated API documentation o rpm build fixes

X2Go Component: x2gobroker Version: 0.0.4.0 Status: RELEASE Timestamp: 1549140629 Date: Sat, 02 Feb 2019 21:50:29 +0100 Fixes these bug report(s): 1013 1234 1240 1252 1315 Changes: x2gobroker (0.0.4.0) RELEASED; urgency=medium . [ Mike Gabriel ]

• New upstream version (0.0.4.0):
  • Bump upstream version to 0.0.4.0.
  • Port to Python 3. (Fixes: #1240).
  • Drop left-over debug print() call.
  • Makefile: Assure that setup.py is run under Python3.
  • Improve debugging messages during authentication phase.
  • x2gobroker/basicauth.py: Fix call of base64.decodestring on Python3.
  • Unit tests: Fix deep misunderstanding in the way allow-deny vs. deny-allow should actually work.
  • x2gobroker/brokers/base_broker.py: Entire rewrite of check_profile_acls() method. (Fixes: #1234).
  • x2gobroker/tests/test_web_plain_base.py: Add test case for passwords with accentuated characters (using the testsuite_authmech for now).
  • Makefile: Support skipping installation of the x2gobroker PyModule. Useful when building with CDBS on Debian.
  • Makefile: Compress man pages.
  • Makefile: Run setup.py build at build time.
  • tmpfiles.d utilization: Create RUNDIR/x2gobroker via tmpfiles.d system. Fixes missing dir and flawed permissions when running under systemd.
  • etc/x2gobroker.conf: Mention the per-profile option for enabling/disabling load checker support.
  • sbin/{x2gobroker-pubkeyauthorizer,x2gobroker-keygen}: Use proper octal numbers for file permissions.
  • sbin/x2gobroker-pubkeyauthorizer: Fix key lookup in os.environ for Python3.
  • sbin/x2gobroker-pubkeyauthorizer: Some string/bytecode fixes for Python3. Plus urllib -> urllib.request.
  • sbin/x2gobroker-pubkeyauthorizer: Improve key integrity checker and move it further up. Plus one more Python2 -> Python3 issue fixed.
  • sbin/x2gobroker-pubkeyauthorizer: Drop unused binascii import.
  • x2gobroker-pubkeyauthorizer: Tiny Python2to3 fix.
  • load checker integration: Make the default-use-load-checker option work like all other default-* options.
  • uccs frontend: Convert datetime.datetime object to string before answering the http request with it.
  • x2gobroker/agent (check_load()): Bail out if no remote agent is given.
  • x2gobroker-testagent: Convert to Python3 (using 2to3 tool).
  • x2gobroker-loadchecker: Python3'ify iteration over dict keys.
  • x2gobroker/utils.py: Provide helper functions for pretty-formatting key fingerprints.
  • x2gobroker-keygen: Use new fingerprint formatting functions.
  • x2gobroker/agent.py: Bail out if no hostaddr contained in remote_agent.
  • x2gobroker/agent.py: No load-checking when remote_agent is set to 'LOCAL'.
  • x2gobroker/agent.py: Better sanity checks for remote_agent and its dict keys hostname and hostaddr.
  • x2gobroker/loadchecker.py: Report properly to the logger if we fail to obtain a load factor.
  • x2gobroker-loadchecker.service: loadchecker service needs to chuid to system user x2gobroker. (Fixes: #1252).
  • x2gobroker-loadchecker.service: File ownership should be x2gobroker:x2gobroker, too.
  • x2gobroker-loadchecker: No chown/chmod if we are not running as root (which is mostly the case).
  • x2gobroker/brokers/inifile_broker.py: Make sure profile['name'] has a fallback if not given in the session profile.
  • x2gobroker/brokers/inifile_broker.py: Also check for presence of 'host' and 'sshport'.
  • UCCS API change for X2Go Sessions: Rename "SessionType" to "Command".
  • obligatory profile keys: Move from inifile backend to UCCS frontend, as those requirements are frontend specific.
  • UCCS: Start working on API version 5.
  • x2gobroker/uccsjson.py: Hide private Python class properties from JSON dict (like <obj>._api_version).
  • UCCS frontend: Fix API version check.
  • UCSS frontend: Propagate API version onwards to the X2GoServer JSON generator class.
  • infile broker backend: Fix handling of empty lists in session profile and session profile defaults.
  • etc/x2gobroker-wsgi.apache.*: Drop Apache2.2 support.
  • Log to system broker.log file when run via x2gobroker-ssh.
  • Getting started documentation: Rework document, convert to markdown, install into x2gobroker bin:pkg (on DEB based systems).
  • Makefile.docupload: Add apidoc target (running sphinx-apidoc).
  • docs/source: Initialize Sphinx API documentation's .rst files.
  • bin/x2gobroker: If binding the http server fails, a non-zero exit code should be returned. (Fixes: #1013).
  • x2gobroker/loadchecker.py: Don't re-read the x2gobroker.conf during each cycle of the load checking loop. Rather read it on service startup and require a service restart when x2gobroker.conf has been changed.
  • x2gobroker/loadchecker.py: Avoid rare cases where at the end of a load checking cycle a negative sleep time would have been calculated. (Fixes: #1315). Thanks to Walid Moghrabi for catching this.
  • HTTP broker: Add &login=<server_user> support to plain and json broker frontends.
  • SSH broker: Add --login option. This now supports X2Go Broker user and X2Go Server username being different accounts.
  • bin/x2gobroker: Correctly use split_host_address() function call.
  • bin/x2gobroker: Don't override already defined logger objects, define them properly where needed.
  • Convert one more unicode object into (Python3) string.
  • x2gobroker/tests/test_broker_agent.py: Assure that tests are run without loadchecker usage.
  • broker-use-load-checker profile option: Also tolerate 'TRUE' and 'True'.
  • x2gobroker/agent.py: Fix failing execution of LOCAL broker agent. As the LOCAL broker agent is executed setuid root, we cannot Popen.terminate() (which is unneeded anyway) the process after its execution.
  • Ignore SSH broker events for now. Not sure if we will ever support that.
  • Finalize API documentation.
  • Fix regression flaw in x2gobroker/web/json.py, introduced by commit 9fa371e9.
• debian/*:
  • Trigger Makefile's install target and install those files. Drop debhelper from-source-installation magic.
• debian/{control,compat}: Bump to DH version level 9.
• debian/{control,x2gobroker-common.install}:
  • Split out common files into non-Pythonian bin:pkg.
• debian/*.install:
  • Add EOLs at EOF.
  • Add tmpfiles.d files into bin:pkgs.
  • Fix installation to /usr/lib/python3.x paths.
• debian/control:
  • Drop from D (several bin:pkgs): python3-argparse, argparse is shipped with Python3 core.
  • Switch from libapache2-mod-wsgi to libapache2-mod-wsgi-py3.
  • Add B-D: dh-python.
  • Add B-D: python3-netaddr (for unit tests).
• debian/x2gobroker-loadchecker.postinst:
  • Do chown/chmod on the correct file (not authservice.log, but loadchecker.log).
• debian/python-x2gobroker-doc.doc-base:
  • Drop leading white-space in Abstract: field.
• x2gobroker.spec:
  • Adapt to Python3 port.
  • Bump package version.
  • CentOS 6 + 7 have python34-devel, not python3-devel.
  • Enable debug_packages for openSUSE Tumbleweed (suse_version > 1500).
  • CentOS 6 + 7 have python34-setuptools, not python3-setuptools.
  • Fix removal of conf files in tmpfiles.d where needed.
  • Install tmpfiles.d configs into bin:pkgs.
  • Only install tmpfiles.d configs on systems that support/have systemd.
  • Some path fixes for the new tmpfiles.d/.
  • Make sure the build chroot has all it needs to run the PyModule's unit tests.
  • Let's try to get unit tests working on Fedora first... . [ Mihai Moldovan ]
• New upstream version (0.0.4.0):
  • src/x2gobroker-{agent,ssh}.c: catch errors in setuid wrappers and add general return clause to make compilers happy.
  • Makefile: make sure that we actually append our custom CFLAGS and LDFLAGS values, even if passed in through the make command line.
  • src/x2gobroker-{agent,ssh}.c: fix compile warnings/errors.
  • src/x2gobroker-{agent,ssh}.c: fix more compile errors.
  • misc: copyright update.
  • misc: switch to HTTPS-based URLs where appropriate.
  • man/*: update date and version stamps pre-release.
  • misc: add missing coding modelines.
• x2gobroker.spec:
  • Add %debug_package macro when debugging is to be enabled, hoping that it will actually generate proper debuginfo (and -source) sub packages owning files.
  • Whitespace only.
  • Remove obsolete EPEL 5 support.
  • Switch to HTTPS-based links.
  • Use more curly braces.
  • Pull in gcc and redhat-rpm-config.
  • Re-enable debug file generation to see which OS versions still fail.
  • %exclude does not work with curly braces, revert.
  • Remove %debug_package macro usage, breaks builds nowadays.
  • Pass down global flags in CFLAGS and LDFLAGS.
  • Fix %{__global_ldflags} usage if variable does not exist.
  • Commands don't seem to work when wrapped in curly braces (at least on *SuSE), so revert.

Regards,

Mihai Moldovan