A page in your DokuWiki was added or changed. Here are the details: Date : 2013/05/12 13:12 Browser : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1 IP-Address : 46.115.54.165 Hostname : 46.115.54.165 Old Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker?rev=1368362674 New Revision: http://wiki.x2go.org/doku.php/doc:installation:x2gobroker Edit Summary: User : sunweaver @@ -56,8 +56,27 @@ ==== Currently available WebUI frontends ==== * The '''plain''' WebUI frontend: usable with X2Go Client * The '''uccs''' WebUI frontend: usable with Unity Greeter (experimental) + + + ===== X2Go Session Broker Authentication Service ===== + + Package name: '''x2gobroker-authservice''' + + On Debian based systems: + + <code bash> + $ sudo apt-get install x2gobroker-authservice + </code> + + The X2Go Session Broker Authentication Service normally gets installed on the machine that also has ''x2gobroker-daemon'' or ''x2gobroker-wsgi'' installed. The broker code itself runs as system user ''x2gobroker'' whereas the authentication service has to run as root. By security design, the functionality of the broker that requires root privileges has been separated from the rest of the broker. + + The X2Go Session Broker Authentication Service requires root privileges for a few PAM based authentication backends. The default installation authenticates against PAM, on default Linux systems, PAM authentication (''pam_unix.so'') requires root privileges by the authentication process. + + With other PAM setups (e.g. ''pam_ldap.so'') root privileges are not required and it is ok to not install ''x2gobroker-authservice''. + + Furthermore, X2Go Session Broker can extended by other (non-PAM) authentication methods. The currently available authentication mechanisms in X2Go Session Broker are listed [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=tree;f=x2gobroker/authmechs|here]]. ===== Testing Your X2Go Session Broker Setup ===== @@ -92,14 +111,5 @@ * ''<frontend>'' can be either of [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob_plain;f=x2gobroker/web|the available broker WebUI frontends]] (except the files base.py and extras.py all files here are broker WebUI frontends) * ''<backend>'' can be either of [[http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob_plain;f=x2gobroker/web|the available broker WebUI frontends]] **Example:** ''http://localhost:8080/plain/zeroconf'' - - - - - - - - - -- This mail was generated by DokuWiki at http://wiki.x2go.org/