x2go-commits May 2013

x2go-commits@lists.x2go.org

2 participants
1156 discussions

page changed: x2gobroker:conf
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 21:58 Browser : Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0 IP-Address : 2.208.203.28 Hostname : 2.208.203.28 Old Revision: http://wiki.x2go.org/doku.php/x2gobroker:conf?rev=1368390050 New Revision: http://wiki.x2go.org/doku.php/x2gobroker:conf Edit Summary: [The ZeroConf Backend] User : sunweaver @@ -32,9 +32,9 @@ <code bash> $ x2goclient --broker-url=http://localhost:8080/plain/zeroconf/ </code> - In ''/etc/x2go/x2gobroker.conf'' the only option you can tweak is the ''desktop-shell'' option. + In ''/etc/x2go/x2gobroker.conf'' the only option you can tweak is the ''desktop-shell'' option. Its default is set to ''KDE''. ==== The IniFile Backend ==== The ''inifile'' backend is a broker backend that can be text file based -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 21:56 Browser : Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0 IP-Address : 2.208.203.28 Hostname : 2.208.203.28 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368395459 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: User : sunweaver @@ -72,21 +72,24 @@ </code> Installing X2Go Session Broker Agent is optional. The broker agent has to be intalled on machines that are in the roll of an X2Go Server (i.e. in the role of a terminal server running X2Go). - **Note:** Furthermore, the X2Go Session Broker Agent gets installed setuid root (group: x2gobroker system group, permissions: 0750). System administrators should be aware of this. If someone hacks the x2gobroker user account on one of your X2Go Servers, this hacker can then execute certain X2Go related commands with root privileges on the X2Go Server system. + The X2GO Session Broker Agent is a requirement for load balancing setups and is also needed if X2Go Client shall be aware of already running X2Go Sessions. X2Go Client in non-broker mode resumes a suspended session (if exactly there is one) automatically. Other than that, X2Go Client in broker mode waits for resuming instructions from the session broker. The session broker, however, requires feedback from the broker agent to notice that there is a suspended/running session for a certain user. - The broker agent is the man-in-the-middle between X2Go Session Broker and the X2Go Server(s) that the session broker provides. Through the X2Go Session Broker Agent the broker core can obtain information on provided X2Go Servers for all users on that server host. + Thus, the broker agent is like a man-in-the-middle. It sits between X2Go Session Broker and the X2Go Server(s) that the session broker provides. Through the X2Go Session Broker Agent the broker core can obtain information on provided X2Go Servers for all users on that server host. - The current functionalities of the broker agent are: + The currently available functions of the broker agent are: * list user sessions of any user * deploy SSH public keys on behalf of any user * drop SSH public keys on behalf of any user * render an ordered list of X2Go Servers and their usage (by number of running/suspended sessions), only needed in load balancing setups * suspend sessions on behalf of any user * render a list of used X2Go Servers * (more to come...) + + **Note:** The X2Go Session Broker Agent gets installed setuid root (group: x2gobroker system group, permissions: 0750). System administrators should be aware of this. If someone hacks the x2gobroker user account on one of your X2Go Servers, this hacker can then execute certain X2Go related commands with root privileges on the X2Go Server system. + ===== X2Go Session Broker: Backends and Frontends ===== The design of X2Go Session Broker as provided in [[http://code.x2go.org/gitweb?p=x2gobroker.git|X2Go Git]] is highly modular. The X2Go Session Broker Daemon can be easily extended with //broker backends// and //WebUI frontends//. -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 21:50 Browser : Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0 IP-Address : 2.208.203.28 Hostname : 2.208.203.28 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368392723 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: User : sunweaver @@ -40,8 +40,53 @@ * [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob_plain;f=etc/x2gobroker-… Session Broker WSGI support added globally]] * [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob_plain;f=etc/x2gobroker-… Session Broker WSGI support as VirtualHost]] + + + ===== X2Go Session Broker Authentication Service ===== + + Package name: '''x2gobroker-authservice''' + + On Debian based systems: + + <code bash> + $ sudo apt-get install x2gobroker-authservice + </code> + + The X2Go Session Broker Authentication Service normally gets installed on the machine that also has ''x2gobroker-daemon'' or ''x2gobroker-wsgi'' installed. The broker code itself runs as system user ''x2gobroker'' whereas the authentication service has to run as root. By security design, the functionality of the broker that requires root privileges has been separated from the rest of the broker. + + The X2Go Session Broker Authentication Service requires root privileges for a few PAM based authentication backends. The default installation authenticates against PAM, on default Linux systems, PAM authentication (''pam_unix.so'') requires root privileges by the authentication process. + + With other PAM setups (e.g. ''pam_ldap.so'') root privileges are not required and it is ok to not install ''x2gobroker-authservice''. + + Furthermore, X2Go Session Broker can be extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|…]] + + ===== X2Go Session Broker Agent ===== + + Package name: '''x2gobroker-agent''' + + On Debian based systems: + + <code bash> + $ sudo apt-get install x2gobroker-agent + </code> + + Installing X2Go Session Broker Agent is optional. The broker agent has to be intalled on machines that are in the roll of an X2Go Server (i.e. in the role of a terminal server running X2Go). + + **Note:** Furthermore, the X2Go Session Broker Agent gets installed setuid root (group: x2gobroker system group, permissions: 0750). System administrators should be aware of this. If someone hacks the x2gobroker user account on one of your X2Go Servers, this hacker can then execute certain X2Go related commands with root privileges on the X2Go Server system. + + The broker agent is the man-in-the-middle between X2Go Session Broker and the X2Go Server(s) that the session broker provides. Through the X2Go Session Broker Agent the broker core can obtain information on provided X2Go Servers for all users on that server host. + + The current functionalities of the broker agent are: + + * list user sessions of any user + * deploy SSH public keys on behalf of any user + * drop SSH public keys on behalf of any user + * render an ordered list of X2Go Servers and their usage (by number of running/suspended sessions), only needed in load balancing setups + * suspend sessions on behalf of any user + * render a list of used X2Go Servers + * (more to come...) ===== X2Go Session Broker: Backends and Frontends ===== The design of X2Go Session Broker as provided in [[http://code.x2go.org/gitweb?p=x2gobroker.git|X2Go Git]] is highly modular. The X2Go Session Broker Daemon can be easily extended with //broker backends// and //WebUI frontends//. @@ -64,27 +109,8 @@ ==== Currently available WebUI frontends ==== * The '''plain''' WebUI frontend: usable with X2Go Client * The '''uccs''' WebUI frontend: usable with Unity Greeter (experimental) - - - ===== X2Go Session Broker Authentication Service ===== - - Package name: '''x2gobroker-authservice''' - - On Debian based systems: - - <code bash> - $ sudo apt-get install x2gobroker-authservice - </code> - - The X2Go Session Broker Authentication Service normally gets installed on the machine that also has ''x2gobroker-daemon'' or ''x2gobroker-wsgi'' installed. The broker code itself runs as system user ''x2gobroker'' whereas the authentication service has to run as root. By security design, the functionality of the broker that requires root privileges has been separated from the rest of the broker. - - The X2Go Session Broker Authentication Service requires root privileges for a few PAM based authentication backends. The default installation authenticates against PAM, on default Linux systems, PAM authentication (''pam_unix.so'') requires root privileges by the authentication process. - - With other PAM setups (e.g. ''pam_ldap.so'') root privileges are not required and it is ok to not install ''x2gobroker-authservice''. - - Furthermore, X2Go Session Broker can be extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|…]] ===== Setting up Config Files ===== ==== Configuration of X2Go Session Broker ==== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 21:05 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.80.235 Hostname : 46.115.80.235 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368392561 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: [X2Go Session Broker Config] User : sunweaver @@ -86,9 +86,9 @@ Furthermore, X2Go Session Broker can be extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|…]] ===== Setting up Config Files ===== - ==== X2Go Session Broker Config ==== + ==== Configuration of X2Go Session Broker ==== For a basic configuration with the INI file backend and the standalone daemon (recommended for beginners) you only need to touch. Click on the config file names below to retrieve more info on how to modify/tweak those individual files. * [[x2gobroker:conf|/etc/x2go/x2gobroker.conf]] @@ -112,8 +112,12 @@ __X2Go Session Broker WSGI:__ [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/x2gobroker-wsgi-a…]] (global implementation, enabled by default) [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/x2gobroker-wsgi.a…]] (VirtualHost example for the WSGI implementation of X2Go Session Broker) [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=logrotate/x2gobroker-…]] (rotate WSGI logfile) + + ==== Configuration of X2Go Session Broker Authentication Service ==== + + The authentication service normally does not need any configuration, unless you strongly deviated from the default setup. __X2Go Session Broker Authentication Service:__ [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=debian/x2gobroker-aut…]] (enviroment variables, used to set defaults in Python X2Go Session Broker with impact on the authentication service only), [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/broker/x2gobroker…]] (don't touch) -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 21:02 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.80.235 Hostname : 46.115.80.235 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368383899 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: [X2Go Session Broker: Backends and Frontends] User : sunweaver @@ -43,9 +43,17 @@ ===== X2Go Session Broker: Backends and Frontends ===== - The concept of X2Go Session Broker as provided in [[http://code.x2go.org/gitweb?p=x2gobroker.git|X2Go Git]] is highly modular. The X2Go Session Broker Daemon can be easily extended with //broker backends// and //WebUI frontends//. + The design of X2Go Session Broker as provided in [[http://code.x2go.org/gitweb?p=x2gobroker.git|X2Go Git]] is highly modular. The X2Go Session Broker Daemon can be easily extended with //broker backends// and //WebUI frontends//. + + ==== Broker Backends ==== + + The backends deal with the storage of, the rendering of and possibly the user/group/client based filtering of session profiles which then get provided via X2Go Session Broker to the querying X2Go client application. + + ==== Broker WebUI Frontends ==== + + The WebUI frontends deal with delivering the list of session profiles (available for this user/group/client address) to the X2Go client application (X2Go Client: text/plain WebUI, Unity Greeter: UCCS WebUI). ==== Currently available broker backends ==== * ZeroConf backend (name: zeroconf), set up by default, allows one to test the broker and see that client <-> broker configuration basically works -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page added: x2gobroker:conf
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 20:20 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.80.235 Hostname : 46.115.80.235 Old Revision: --- New Revision: http://wiki.x2go.org/doku.php/x2gobroker:conf Edit Summary: created User : sunweaver ====== X2Go Session Broker Config File: /etc/x2go/x2gobroker.conf ====== The default version of the ''/etc/x2go/x2gobroker.conf'' configuration file can be viewed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/x2gobroker.conf|h…]] It basically is used to do all global session broker configuration stuff. The file contains many and long comments, make sure you read everything thoroughly. The file ''x2gobroker.conf'' falls into a [global] section and several per-backend sections ([zeroconf], [inifile], etc.). ===== The Global Section of x2gobroker.conf ===== The tweakable options of ''x2gobroker.conf'' that you might have to touch are: * enable/disable authentication/authorization (''check-credentials'') * enable/disable available WebUIs (''enable-plain-output'', ''enable-uccs-output'') For miscellaneous setups you may be interested in adapting the following options: * ''default-session-autologin'': broker sessions are authoritative, clicking on a session profile card will launch the session right away without a second username/password request * ''default-authorized-keys'': location of the server-side ''authorized_keys'' file that is used by X2Go Session Broker to mediate session autologin * ''default-agent-query-mode'': mode for querying X2Go Session Broker Agent, can be either ''LOCAL'' or ''SSH'' ===== The Backend Sections ===== Available backend sections are: ''zeroconf'', ''inifile''. ==== The ZeroConf Backend ==== The ''zeroconf'' backend is a test backend that works out of the box and provides a session profile that will give an X2Go login to ''localhost''. With a default installation of ''x2gobroker-daemon'' the command to launch X2Go Client in broker mode then is: <code bash> $ x2goclient --broker-url=http://localhost:8080/plain/zeroconf/ </code> In ''/etc/x2go/x2gobroker.conf'' the only option you can tweak is the ''desktop-shell'' option. ==== The IniFile Backend ==== The ''inifile'' backend is a broker backend that can be text file based -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 18:38 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.69.202 Hostname : 46.115.69.202 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368376687 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: [Installing X2Go Session Broker] User : sunweaver @@ -1,7 +1,7 @@ ====== Installing X2Go Session Broker ====== - The X2Go Session Broker falls into two components. + The X2Go Session Broker falls into three components. * X2Go Session Broker Daemon/WSGI * X2Go Session Broker Authentication Service * X2Go Session Broker Agent -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 16:38 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.54.165 Hostname : 46.115.54.165 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368376608 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: [X2Go Session Broker Config] User : sunweaver @@ -86,9 +86,9 @@ * [[x2gobroker:conf|/etc/x2go/x2gobroker.conf]] * [[x2gobroker:daemondefaults|/etc/defaults/x2gobroker-daemon]] * [[x2gobroker:inifilebackend|/etc/x2go/broker/x2gobroker-sessionprofiles.conf]] - The X2Go Session Broker uses several more configuration files. Below is a complete list (for version 0.0.2.x, if not applicable to later versions anymore, please update the below lists): + The X2Go Session Broker uses several more configuration files. Below is a complete list (for version 0.0.2.x, if not applicable to later versions anymore, please update the below lists). The files are linked to their initial layout (in X2Go Git) to show what they look like directly after installation of the session broker packages. __X2Go Session Broker's Core:__ [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=debian/python-x2gobro…]] (enviroment variables, used to set defaults in Python X2Go Session Broker with impact on the daemon __and__ the authentication service), **[[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/x2gobroker.conf|/etc/x2go/x2gobroker.conf]]** (main configuration file), -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 16:36 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.54.165 Hostname : 46.115.54.165 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368368480 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: User : sunweaver @@ -80,9 +80,9 @@ ===== Setting up Config Files ===== ==== X2Go Session Broker Config ==== - For a basic configuration with the INI file backend and the standalone daemon (recommended for beginners) you only need to touch + For a basic configuration with the INI file backend and the standalone daemon (recommended for beginners) you only need to touch. Click on the config file names below to retrieve more info on how to modify/tweak those individual files. * [[x2gobroker:conf|/etc/x2go/x2gobroker.conf]] * [[x2gobroker:daemondefaults|/etc/defaults/x2gobroker-daemon]] * [[x2gobroker:inifilebackend|/etc/x2go/broker/x2gobroker-sessionprofiles.conf]] -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

page changed: doc:installation:x2gobroker
by wiki-admin＠x2go.org 12 May '13

12 May '13

A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 14:21 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.54.165 Hostname : 46.115.54.165 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368368428 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: [X2Go Session Broker Authentication Service] User : sunweaver @@ -74,9 +74,9 @@ The X2Go Session Broker Authentication Service requires root privileges for a few PAM based authentication backends. The default installation authenticates against PAM, on default Linux systems, PAM authentication (''pam_unix.so'') requires root privileges by the authentication process. With other PAM setups (e.g. ''pam_ldap.so'') root privileges are not required and it is ok to not install ''x2gobroker-authservice''. - Furthermore, X2Go Session Broker can extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|…]] + Furthermore, X2Go Session Broker can be extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|…]] ===== Setting up Config Files ===== ==== X2Go Session Broker Config ==== -- This mail was generated by DokuWiki at http://wiki.x2go.org/

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

x2go-commits May 2013