x2go-dev December 2013

x2go-dev@lists.x2go.org

20 participants
121 discussions

Re: [X2Go-Dev] Bug#372: Bug#372: x2goadmin writes to users homes
by Reinhard Tartler 16 Dec '13

16 Dec '13

On Dec 16, 2013 9:40 AM, "Alexander Wuerstlein" <arw(a)cs.fau.de> wrote: > > On 13-12-16 15:33, Reinhard Tartler <siretart(a)gmail.com> wrote: > > On Dec 16, 2013 8:59 AM, "Alexander Wuerstlein" < > > snalwuer(a)cip.informatik.uni-erlangen.de> wrote: > > > > > > On 13-12-16 08:49, Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> wrote: > > > > Hi Reinhard, > > > > > > > > On So 15 Dez 2013 01:13:35 … [View More]CET, Reinhard Tartler wrote: > > > > > > > > >Package: x2goserver > > > > >Severity: serious > > > > > > > > > >Hi, > > > > > > > > > >my understanding of the x2goadmin code [code], end of sub add_user, is > > > > >that the code tries to write the sql password in users homes. This > > > > >will fail for installations that have the user homes on NFS with the > > > > >option "rootsquash" mounted. > > > > > > > > > >I set the severity to "serious" because I imagine that this is a > > > > >rather common scenario. > > > > > > > > > >Also, this approach has another problem: Imagine you want to give > > > > >access to the unix group "staff"? According to the documentation, you > > > > >can use the options "--addgroup" and "--rmgroup" for this. What if a > > > > >new employee joins the company later and wants to use x2go? In this > > > > >case you need to call x2godbadmin for this new user again, which is > > > > >suboptimal. > > > > > > > > > >Is there really no way to get around generated user passwords? > > > > > > There is a way that could work: If configured correctly, postgresql can > > > use GSSAPI (Kerberos) Authentication. That way, the user is > > > authenticated using his login ticket cache which is created anyways. > > > If necessary, one could also provide a keyfile for the cleanup-cronjob > > > so that it can at least access the database with sufficient permissions. > > > > That would be an option if you are OK to break passwordless ssh key > > authentication logins. > > > > If you really wanted to go the kerberos route, you would have to create > > special db principals that can only access the db, and stash a passwordless > > keyfile in the users home. > > Yes, that is correct. One more thing that could also work, but is ugly, > would be 'ident' authentication in postgresql. But that would of course > mean that one needs a sufficiently trustable identd on all machines. Only on the x2go server, not the machine the user is connecting from. For me, this seems perfectly appropriate in this case. Reinhard [View Less]

1 0

Bug#372: x2goadmin writes to users homes
by Reinhard Tartler 16 Dec '13

16 Dec '13

Package: x2goserver Severity: serious Hi, my understanding of the x2goadmin code [code], end of sub add_user, is that the code tries to write the sql password in users homes. This will fail for installations that have the user homes on NFS with the option "rootsquash" mounted. I set the severity to "serious" because I imagine that this is a rather common scenario. Also, this approach has another problem: Imagine you want to give access to the unix group "staff"? According to the … [View More]

3 4

Do we really need an x2gouser
by Reinhard Tartler 16 Dec '13

16 Dec '13

Hi, can someone please remind me again why we need a sqlite database that is shared for all users? It allows users to see what other users are currently having running sessions, which I frankly don't consider very important. It could even be considered a privacy issue. If there isn't a good reason for a shared database, why don't we have x2go users have their own sqlite database in their home directory? This would allow to get rid of the x2go user and all suid/sgid complexity that comes with … [View More]

6 10

Questions about Xsession/Xsession.d handling
by Orion Poplawski 16 Dec '13

16 Dec '13

In the Fedora x2goserver package, I've packaged the /etc/x2go/Xsession* files as part of the main package. This is breaking things - see https://bugzilla.redhat.com/show_bug.cgi?id=1038834 This seems to be the crux of the matter, from x2goruncommand: x2gofeature X2GO_XSESSION &>/dev/null && [ "x$X2GO_SESS_TYPE" = "xD" ] && { STARTUP="$cmd$args" $X2GO_LIB_PATH/x2gosyslog "$0" "notice" "launching session with Xsession-x2go … [View More]

2 3

Bug#371: RPM: setgid x2gouser on sqlite3 wrapper script
by Mike Gabriel 14 Dec '13

14 Dec '13

Package: x2goserver Severity: grave Version: 4.1.0.0-preview Tag: rpm-package The file /usr/lib(64)/x2go/libx2go-server-db-sqlite3-wrapper must be installed 2755:root:x2gouser. In older versions of X2Go Server (<< 4.1.0.0) the script name with those permissions is /usr/lib(64)/x2go/x2gosqlitewrapper. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de… [View More]

1 0

Bug#368: GSSAPI support falls back to SSH key
by Mike Gabriel 13 Dec '13

13 Dec '13

Package: x2goclient Version: 4.0.1.2-pre03 Hi Alex, with the latest GSSAPI patch in X2Go Client, I observe the following: Session profile options: autologin = false krblogin = true If GSSAPI fails, the underlying ssh process falls back to SSH-key based authentication. When this happens on passphrase protected SSH keys, I see this when running X2Go Client from the command line: """ mike@<host>:~$ LANG=C x2goclient x2go-INFO-1> "Starting x2goclient..." x2go-WARNING-1> "Can't … [View More]

1 0

Bug#263: Untagging moreinfo
by Mike Gabriel 13 Dec '13

13 Dec '13

Control: tag -1 - moreinfo Untagging the moreinfo tag on request of John Williams who contributed more necessary information to track this down. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

X2Go Client Windows binary 4.0.1.2pre02
by Michael DePaulo 12 Dec '13

12 Dec '13

Hi, In preparation for the upcoming release of X2Go Client 4.0.1.2, a new nightly build of the Windows binary is available for download under: http://code.x2go.org/releases/binary-win32/x2goclient/previews/4.0.1.2/ Right now the current plan for 4.0.1.2's release is "We've stopped making changes. If no showstopper bugs or regressions are reported, we'll release 4.0.1.2 on Friday." So while we want all bugs reported on http://bugs.x2go.org/ , it is especially important that users report any … [View More]

4 20

Bug#366: Missing dependency in x2gothinclient package?
by Stefan Baur 12 Dec '13

12 Dec '13

package: x2gothinclient severity: normal version:1.1.0.2 Hi, I just got x2gothinclientd to error out during system startup, message was "Can't locate File/Path/Expand.pm in @INC [...]". Seems like the package relies on libfile-path-expand-perl, but doesn't formally depend on it yet. Manually apt-get install'ing the libfile-path-expand-perl package removed the error. -Stefan

3 2

Bug#263: Testmail to #263
by Mike Gabriel 12 Dec '13

12 Dec '13

TEST (as Mails to this bug got lost three days ago...) Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

← Newer
1
...
7
8
9
10
11
12
13
Older →

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev December 2013