- x2go-dev - X2Go ListServ

Processed: Re: Bug#438: x2goserver and rhel6.4 / selinux Problem
by owner＠bugs.x2go.org 06 Mar '14

06 Mar '14

Processing control commands: > close -1 Bug #438 [x2goserver] x2goserver and rhel6.4 / selinux Problem Marked Bug as done -- 438: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=438 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#438: x2goserver and rhel6.4 / selinux Problem
by Mike Gabriel 06 Mar '14

06 Mar '14

Hi Frank, On Fr 28 Feb 2014 09:22:47 CET, Frank Knoben wrote: > Hello Mike, > > the problem is, that I'm not an expert on selinux too. > But I did some more tests. > > Interactive Session - first login, the ~/.Xauthority file is created > and stays after logout with the permissions *system_u:object_r:default_t:s0* > I am still able to login in interactively again. > > But with this permissions, I got the Cookie mismatch problem, when > using the x2goclient. > And when I login with ssh to the computer, I got a xauth error message: > /usr/bin/xauth: ~/.Xauthority not writable, changes will be ignored > > Now I remove all .Xauthority* files. Then a login with ssh will > create the ~/.Xauthority file > with the *system_u:object_r:xauth_home_t:s0* permissions and the > files stays with > these permissions after logout. > > Now when I use the x2goclient, the file permissions change during > the login process from > *system_u:object_r:xauth_home_t:s0* to > *system_u:object_r:default_t:s0 *and stay > that way after logout. The same, as it is with interactive sessions. > So I guess, everything is fine with the x2goserver software and > this is not a bug. > My problem is, that ssh is not able to overwrite the .Xauthority > file, when it has the > default permissions of *system_u:object_r:default_t:s0* . Therefore > the x2goclient is > not able to start a successful session and gets the Cookie mismatch error. > > So I think, you can close this bugreport. Nonono... I actually think there is something wrong with X2Go Server. X2Go Client / PyHoca-GUI (another X2Go client app) should immitate what SSH does. As the X2Go clients call the script /usr/bin/x2gostartagent and this script fiddles with the .Xauthority files via xauth, we should make sure that after modifying the .Xauthority file the SELinux permissions stay intact. Can you please add your proposed chcon command into x2gostartagent (near line 268, there is another position further up for shadow sessions) after xauth has been called and see it that fixes your troubles. Next step: please provide me with an if clause that will test if SELinux is in use or not, so we can call chcon only if SELinux is in use on that system. Thanks+Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

3 15

Bug#447: [PATCH] Add support for cookie based auth after initial password auth
by Josh Lukens 06 Mar '14

06 Mar '14

Package: x2gobroker Version: 0.0.2.4 Severity: wishlist --- etc/x2gobroker.conf | 30 +++++++-- x2gobroker/brokers/base_broker.py | 133 +++++++++++++++++++++----------------- x2gobroker/defaults.py | 7 +- x2gobroker/web/json.py | 9 +-- x2gobroker/web/plain.py | 10 ++- x2gobroker/web/uccs.py | 4 +- 6 files changed, 112 insertions(+), 81 deletions(-) diff --git a/etc/x2gobroker.conf b/etc/x2gobroker.conf index 19ea93b..b8b8974 100644 --- a/etc/x2gobroker.conf +++ b/etc/x2gobroker.conf @@ -24,20 +24,38 @@ [global] -# Allow unauthenticated connections? Then set check-credentials to false. -#check-credentials = true +# Allow unauthenticated connections? Then set both require-password and require-cookie to false. + +# Veriy username/password combination sent by client +#require-password = true # To secure server-client communication the client can start the communication # with a pre-set, agreed on authentication ID. Set the below value to true # to make the X2Go Session Broker require this feature -#require-cookie-auth = false ### NOT-IN-USE-YET +#require-cookie = false # X2Go supports two different cookie authentication modes (static and dynamic). -#use-static-cookie = true ### NOT-IN-USE-YET +# Dynamic cookies send new cookie to client on every request. This could possibly +# cause issues if a client ever tries multiple requests at the same time. +#use-static-cookie = true + +# Once a client is authenticated their password is not revalidated until this +# many seconds have elapsed from their initial authentication. +#auth-timeout = 36000 + +# Client cookies (both static and dynamic) must be stored as local files. +# This is the directory where those files will be stored. Please make sure +# the permissions are set to allow the x2go broker process to write to this directory +#cookie-directory = '/var/log/x2gobroker/cookies' # Every server-client communication (between X2Go Client and broker) has to be -# accompanied by this initial authentication cookie. -#my-cookie = <aaaavveeeerrrrryyyyylooonnnnggggssttrrriiinnnggg> ### NOT-IN-USE-YET +# accompanied by this initial authentication cookie if require-cookie is set above. +# This should be in the format of a UUID. +#my-cookie = xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx + +# By default the broker will pin user sessions to the IP address from which they +# origionally authenticate. If you would like to skip that check set this to false. +#verify-ip = true # X2Go Session Broker knows about two output formats: a text/plain based output # and a text/json based output that is compatible with UCCS. The different outputs diff --git a/x2gobroker/brokers/base_broker.py b/x2gobroker/brokers/base_broker.py index 7fb3172..2f7c7ad 100644 --- a/x2gobroker/brokers/base_broker.py +++ b/x2gobroker/brokers/base_broker.py @@ -726,7 +726,7 @@ class X2GoBroker(object): else: return [] - def check_access(self, username='', password='', cookie=None, cookie_only=False): + def check_access(self, username='', password='', ip='', cookie=None): """\ Check if a given user with a given password may gain access to the X2Go session broker. @@ -735,80 +735,95 @@ class X2GoBroker(object): @type username: C{unicode} @param password: a password that authenticates the user against the X2Go session broker @type password: C{unicode} + @param ip: the ip address of the client + @type ip: C{unicode} @param cookie: an extra (static or dynamic) authentication token @type cookie: C{unicode} - @param cookie_only: do only check the auth_cookie, not username/password - @type cookie_only: C{bool} @return: returns C{True} if the authentication has been successful - @rtype: C{bool} + @rtype: C{bool},C{unicode} """ ### FOR INTRANET LOAD BALANCER WE MAY JUST ALLOW ACCESS TO EVERYONE ### This is handled through the config file, normally /etc/x2go/x2gobroker.conf - if not self.config.get_value('global', 'check-credentials'): + if not self.config.get_value('global', 'require-password') and not self.config.get_value('global', 'require-cookie'): logger_broker.debug('base_broker.X2GoBroker.check_access(): access is granted without checking credentials, prevent this in {configfile}'.format(configfile=self.config_file)) - return True + return True,0 elif username == 'check-credentials' and password == 'FALSE': # this catches a validation check from the UCCS web frontend... - return False + return False,0 ### IMPLEMENT YOUR AUTHENTICATION LOGIC IN THE self._do_authenticate(**kwargs) METHOD ### when inheriting from the base.X2GoBroker class. - - access = False - if cookie_only is False: - access = self._do_authenticate(username=username, password=password) - logger_broker.debug('base_broker.X2GoBroker.check_access(): result of authentication check is: {access}'.format(access=access)) - else: - access = True - - ### HANDLING OF DYNAMIC AUTHENTICATION ID HASHES - - # using cookie authentication as extra security? - if self.config.get_value('global', 'require-cookie-auth'): - - if type(cookie) is types.StringType: - cookie = unicode(cookie) - - if self.config.get_value('global', 'use-static-cookie'): - - # evaluate access based on static authentication ID feature - access = access and ( cookie == self.config.get_value('global', 'my-cookie') ) - - else: - - # evaluate access based on dynamic authentication ID feature - if self._dynamic_cookie_map.has_key(username): - access = access and ( cookie == self._dynamic_cookie_map[username] ) - if access: - self._dynamic_cookie_map[username] = uuid.uuid5(namespace=cookie, name=username) - + if type(cookie) is types.StringType: + cookie = unicode(cookie) + + if (((cookie == None) or (cookie == "")) and self.config.get_value('global', 'require-cookie')): + #cookie required but we did not get one - catch wrong cookie case later + logger_broker.debug('base_broker.X2GoBroker.check_access(): cookie required but none given.') + return False, 0 + #check if cookie sent was our preset cookie from config file + next_cookie = self.config.get_value('global', 'my-cookie') + access = (cookie == next_cookie ) + logger_broker.debug('base_broker.X2GoBroker.check_access(): checking if our configured cookie was submitted: {access}'.format(access=access)) + #the require cookie but not password case falls through to returning value of access + + if self.config.get_value('global', 'require-password'): + #using files to store persistant cookie information because global variables do not work across threads in WSGI + import os.path + cookie_directory=self.config.get_value('global', 'cookie-directory') + if(not os.path.isdir(cookie_directory)): + logger_broker.debug('base_broker.X2GoBroker.check_access(): cookie-directory {cookie_directory} does not exist trying to craete it'.format(cookie_directory=cookie_directory)) + try: + os.makedirs(cookie_directory); + except: + logger_broker.warning('base_broker.X2GoBroker.check_access(): could not create cookie-directory {cookie_directory} failing to authenticate'.format(cookie_directory=cookie_directory)) + return False, 0 + if access or cookie == None or cookie == "": + # this should be the first time we have seen this user or they are using old client so verify their passwrd + access = self._do_authenticate(username=username, password=password) + logger_broker.debug('base_broker.X2GoBroker.check_access(): checking for valid password: {access}'.format(access=access)) + + if access: + #create new cookie for this user + #each user gets one or more tuples of IP, time stored as username_UUID files so they can connect from multiple sessions + next_cookie = str(uuid.uuid4()) + fh = open(cookie_directory+"/"+username+"_"+next_cookie,"w") + fh.write('{ip} {time}'.format(ip=ip, time=time.time())) + fh.close() + logger_broker.debug('base_broker.X2GoBroker.check_access(): Giving new cookie: {cookie} to user {username} at ip {ip}'.format(cookie=next_cookie,username=username,ip=ip)) + else: + # there is a cookie but its not ours so its either wrong or subsequent password auth + if os.path.isfile(cookie_directory+"/"+username+"_"+cookie): + logger_broker.debug('base_broker.X2GoBroker.check_access(): found valid auth key for user cookie: {usercookie}'.format(usercookie=username+"_"+cookie)) + fh=open(cookie_directory+"/"+username+"_"+cookie,"r") + origip,origtime= fh.read().split() + fh.close() + os.unlink(cookie_directory+"/"+username+"_"+cookie) + #found cookie - make sure IP and time are good + if self.config.get_value('global', 'verify-ip') and (ip != origip): + logger_broker.debug('base_broker.X2GoBroker.check_access(): IPs differ (new: {ip} old: {origip}) - rejecting user'.format(ip=ip,origip=origip)) + return False, 0 + if (time.time() - float(origtime)) > self.config.get_value('global', 'auth-timeout'): + logger_broker.debug('base_broker.X2GoBroker.check_access(): Too much time elapsed since origional auth - rejecting user') + return False, 0 + if self.config.get_value('global', 'use-static-cookie'): + #if using static cookies keep same cookie as user presented + next_cookie = cookie + else: + #otherwise give them new random cookie + next_cookie = str(uuid.uuid4()) + logger_broker.debug('base_broker.X2GoBroker.check_access(): Giving cookie: {cookie} to ip {ip}'.format(cookie=next_cookie, ip=ip)) + fh = open(cookie_directory+"/"+username+"_"+next_cookie,"w") + fh.write('{ip} {time}'.format(ip=ip, time=origtime)) + fh.close() + access = True else: - access = access and ( cookie == self.config.get_value('global', 'my-cookie') ) - if access: - # generate a first uuid, initialize the dynamic authencation ID security feature - self._dynamic_cookie_map[username] = uuid.uuid4() - - return access - - def get_next_cookie(self, username): - """\ - Get the next expected authentication cookie for the given user name. - - @param username: query next authentication cookie for this user - @type username: C{unicode} - - @return: returns next authentication cookie for the given username, None if no cookie has been generated, yet - @rtype: C{unicode} or C{None} - - """ - try: - return self._dynamic_cookie_map[username] - except KeyError: - return None - + # client sent us an unknown cookie so failing auth + logger_broker.debug('base_broker.X2GoBroker.check_access(): User {username} from {ip} presented cookie {cookie} which is not recognized - rejecting user'.format(username=username, cookie=cookie, ip=ip)) + return False, 0 + return access, next_cookie def get_remote_agent(self, profile_id, exclude_agents=[], ): """\ diff --git a/x2gobroker/defaults.py b/x2gobroker/defaults.py index e65fd31..9027ed0 100644 --- a/x2gobroker/defaults.py +++ b/x2gobroker/defaults.py @@ -180,9 +180,12 @@ X2GOBROKER_HOME = os.path.normpath(os.path.expanduser('~{broker_uid}'.format(bro # defaults for X2Go Sessino Broker configuration file X2GOBROKER_CONFIG_DEFAULTS = { 'global': { - u'check-credentials': True, - u'require-cookie-auth': False, + u'require-password': True, + u'require-cookie': False, u'use-static-cookie': True, + u'auth-timeout': 36000, + u'cookie-directory': '/var/log/x2gobroker/cookies', + u'verify-ip': True, u'my-cookie': uuid.uuid4(), u'enable-plain-output': True, u'enable-json-output': True, diff --git a/x2gobroker/web/json.py b/x2gobroker/web/json.py index b217050..1f10b31 100644 --- a/x2gobroker/web/json.py +++ b/x2gobroker/web/json.py @@ -119,17 +119,14 @@ class X2GoBrokerWeb(_RequestHandler): output = '' logger_broker.debug ('username: {username}, password: {password}, task: {task}, profile_id: {profile_id}, cookie: {cookie}'.format(username=username, password='XXXXX', task=task, profile_id=profile_id, cookie=cookie)) - if broker_backend.check_access(username=username, password=password, cookie=cookie): + access, next_cookie = broker_backend.check_access(username=username, password=password, ip=ip, cookie=cookie) + if access: ### ### CONFIRM SUCCESSFUL AUTHENTICATION FIRST ### - if global_config['require-cookie-auth'] and not global_config['use-static-cookie']: - - ### FIXME: make up a nice protocol for this, disabled for now - #output += "AUTHID: {authid}<br />".format(authid=broker_backend.get_next_authid(username=data.user)) - pass + ### FIXME: find good way to pass next cookie to client - stored in next_cookie ### ### X2GO BROKER TASKS diff --git a/x2gobroker/web/plain.py b/x2gobroker/web/plain.py index 9d58742..254c9d2 100644 --- a/x2gobroker/web/plain.py +++ b/x2gobroker/web/plain.py @@ -115,17 +115,15 @@ class X2GoBrokerWeb(_RequestHandler): output = '' logger_broker.debug ('username: {username}, password: {password}, task: {task}, profile_id: {profile_id}, cookie: {cookie}'.format(username=username, password='XXXXX', task=task, profile_id=profile_id, cookie=cookie)) - if broker_backend.check_access(username=username, password=password, cookie=cookie): + access, next_cookie = broker_backend.check_access(username=username, password=password, ip=ip, cookie=cookie) + if access: ### ### CONFIRM SUCCESSFUL AUTHENTICATION FIRST ### - if global_config['require-cookie-auth'] and not global_config['use-static-cookie']: - - ### FIXME: make up a nice protocol for this, disabled for now - #output += "AUTHID: {authid}<br />".format(authid=broker_backend.get_next_authid(username=data.user)) - pass + if next_cookie != 0: + output += "AUTHID:{authid}\n".format(authid=next_cookie) output += "Access granted\n" ### diff --git a/x2gobroker/web/uccs.py b/x2gobroker/web/uccs.py index 917704f..87dc64a 100644 --- a/x2gobroker/web/uccs.py +++ b/x2gobroker/web/uccs.py @@ -42,11 +42,11 @@ def credentials_validate(username, password): # from x2gobroker.conf are available here... broker = x2gobroker.brokers.base_broker.X2GoBroker() broker.enable() - access = broker.check_access(username=username, password=password) + access, next_cookie = broker.check_access(username=username, password=password) # UCCS only allows email addresses for remote login if not access and "@" in username: username = username.split('@')[0] - access = broker.check_access(username=username, password=password) + access, next_cookie = broker.check_access(username=username, password=password) if username == 'check-credentials' and password == 'FALSE': username = 'anonymous' return username, access -- 1.8.3.4 (Apple Git-47)

1 0

Processed: Re: Bug#438: x2goserver and rhel6.4 / selinux Problem
by owner＠bugs.x2go.org 05 Mar '14

05 Mar '14

Processing control commands: > tag -1 not-a-bug Bug #438 [x2goserver] x2goserver and rhel6.4 / selinux Problem Added tag(s) not-a-bug. -- 438: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=438 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#380: X2Go issue (in src:x2gobroker) has been marked as pending for release
by Mike Gabriel 05 Mar '14

05 Mar '14

tag #380 pending fixed #380 0.0.3.0 thanks Hello, X2Go issue #380 (src:x2gobroker) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=e5eb4a3 The issue will most likely be fixed in src:x2gobroker (0.0.3.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit e5eb4a32da13145e012b1fc3fe112ff8d5e53076 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Wed Mar 5 09:12:23 2014 +0100 add bug closures #379 and #380 to changelog, fixed by commit 1f80caf359b239bf60e5a07c3119446997e4962e and some later follow-ups diff --git a/debian/changelog b/debian/changelog index 5439a0c..ced44bc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -86,7 +86,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low systemd. - Provide symlink x2gobroker-daemon. - Provide systemd service files for x2gobroker-daemon and - x2gobroker-authservice. + x2gobroker-authservice. (Fixes: #379, #380). - Add --drop-privileges feature so that x2gobroker-daemon can drop root privileges when started via systemd. Only drop privileges if x2gobroker(-daemon) is run as uidNumber 0.

2 1

Bug#379: X2Go issue (in src:x2gobroker) has been marked as pending for release
by Mike Gabriel 05 Mar '14

05 Mar '14

tag #379 pending fixed #379 0.0.3.0 thanks Hello, X2Go issue #379 (src:x2gobroker) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=e5eb4a3 The issue will most likely be fixed in src:x2gobroker (0.0.3.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit e5eb4a32da13145e012b1fc3fe112ff8d5e53076 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Wed Mar 5 09:12:23 2014 +0100 add bug closures #379 and #380 to changelog, fixed by commit 1f80caf359b239bf60e5a07c3119446997e4962e and some later follow-ups diff --git a/debian/changelog b/debian/changelog index 5439a0c..ced44bc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -86,7 +86,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low systemd. - Provide symlink x2gobroker-daemon. - Provide systemd service files for x2gobroker-daemon and - x2gobroker-authservice. + x2gobroker-authservice. (Fixes: #379, #380). - Add --drop-privileges feature so that x2gobroker-daemon can drop root privileges when started via systemd. Only drop privileges if x2gobroker(-daemon) is run as uidNumber 0.

2 1

Bug#360: X2Go issue (in src:x2gobroker) has been marked as pending for release
by Mike Gabriel 05 Mar '14

05 Mar '14

tag #360 pending fixed #360 0.0.3.0 thanks Hello, X2Go issue #360 (src:x2gobroker) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=e5791ce The issue will most likely be fixed in src:x2gobroker (0.0.3.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit e5791ce77aa5dc69e6f80565bcc4093e9c880311 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Wed Mar 5 09:06:49 2014 +0100 add closure for #360, got already fixed in commit d9ce73f4f90b80554dea629dcf64bb1f65b65f4b diff --git a/debian/changelog b/debian/changelog index a91fc06..5439a0c 100644 --- a/debian/changelog +++ b/debian/changelog @@ -66,7 +66,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low - Fix man pages (layout issues on x2gobroker-authservice man page). - Adapt man page installation to moval of x2gobroker(-testauth) from an sbin to a bin directory (executable for any user). - - Make the inifile broker backend the default backend. + - Make the inifile broker backend the default backend. (Fixes: #360). - Support daemonizing of the http broker. - Default to http broker mode when daemonizing the broker. - Support daemonizing of the authservice.

2 1

Bug#446: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 05 Mar '14

05 Mar '14

tag #446 pending fixed #446 4.0.2.0 thanks Hello, X2Go issue #446 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=275a22a The issue will most likely be fixed in src:x2goclient (4.0.2.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 275a22a6b2469119cbdaaa76ee7d00804864b773 Author: Josh Lukens <jlukens(a)botch.com> Date: Wed Mar 5 08:50:01 2014 +0100 Provide support for dynamic authentication IDs. This is a requirement for using the broker client against brokers that use some sort of OTP authentication mechanism. (Fixes: #446). diff --git a/debian/changelog b/debian/changelog index a11310b..7d89bd9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -23,6 +23,10 @@ x2goclient (4.0.2.0-0x2go1) UNRELEASED; urgency=low header to "application/x-www-form-urlencoded" for HTTP post requests. (Fixes: #440, #138). - Fix copy+paste errors in QNetworkAccessManager code. + - Provide support for dynamic authentication IDs. This is + a requirement for using the broker client against brokers + that use some sort of OTP authentication mechanism. + (Fixes: #446). [ Mike Gabriel ] * New upstream version (4.0.2.0):

2 1

Bug#440: Request for patch review
by Mike Gabriel 05 Mar '14

05 Mar '14

Hi Alex, can you please review the proposed patch in #440 [1]? Thanks, Mike [1] http://bugs.x2go.org/440 -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

3 7

Bug#441: x2gocleansessions crashes on RHEL 6
by Mike Gabriel 05 Mar '14

05 Mar '14

Package: x2goserver Severity: important Version: 4.0.1.13 Hi all, hi Alex, in x2gocleansessions we use a line of code that is supposed to close all open file handles: """ # close all filehandles for (glob "/proc/$$/fd/*") { POSIX::close($1) if m{/(\d+)$}; } """ This line lets x2gocleansessions crash on RHEL6 based distros. On Debian based distros, x2gocleansessions survives the above line of code. Not sure about Fedora. Does anyone have an idea on this? Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 2

Bug#441: X2Go issue (in src:x2goserver) has been marked as pending for release
by Mike Gabriel 05 Mar '14

05 Mar '14

tag #441 pending fixed #441 4.0.1.14 thanks Hello, X2Go issue #441 (src:x2goserver) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=34e59ae The issue will most likely be fixed in src:x2goserver (4.0.1.14). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 34e59ae01f81a8657045e90824cf62b0a4b35ed7 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Wed Mar 5 08:34:07 2014 +0100 Fix broken file descriptor closures in x2gocleansessions. (Fixes: #441). diff --git a/debian/changelog b/debian/changelog index ca530ed..2a8a394 100644 --- a/debian/changelog +++ b/debian/changelog @@ -16,6 +16,8 @@ x2goserver (4.0.1.14-0x2go1) UNRELEASED; urgency=low the connection gets interrupted. SSHFS will then get removed by the Linux kernel and we have to "guess" what desktop icons is actually to be removed. + - Fix broken file descriptor closures in x2gocleansessions. (Fixes: + #441). * x2goserver.spec: - Let builds for EPEL-7 behave like recent Fedora builds.

2 1

Bug#446: Add support to client for dynamic authids when connecting to session broker
by Josh Lukens 05 Mar '14

05 Mar '14

Package: x2goclient Version: 4.0.2.0 Severity: wishlist Currently the client re-authenticates with the session broker for every interaction. This breaks the use of any one time use authentication methods. The attached patch adds support for the session broker server to include an authid in its responses. The client will then include that authid in future requests. A corresponding patch to the session broker is forthcoming. Patch should be backward compatible with existing session brokers.

1 0

Bug#440: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 03 Mar '14

03 Mar '14

tag #440 pending fixed #440 4.0.2.0 thanks Hello, X2Go issue #440 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=19fe787 The issue will most likely be fixed in src:x2goclient (4.0.2.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 19fe7875e2b8203780340272dc83189e9b8e470c Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Mon Mar 3 11:55:44 2014 +0100 Switch to QNetworkAccessManager. Appropriately set content type header to "application/x-www-form-urlencoded" for HTTP post requests. (Fixes: #440, #138). diff --git a/debian/changelog b/debian/changelog index 42c5799..daec032 100644 --- a/debian/changelog +++ b/debian/changelog @@ -14,6 +14,12 @@ x2goclient (4.0.2.0-0x2go1) UNRELEASED; urgency=low from terminal on linux and mac. - If no user in session config, display system username in pass form. + [ Josh Lukens ] + * New upstream version (4.0.2.0): + - Switch to QNetworkAccessManager. Appropriately set content type + header to "application/x-www-form-urlencoded" for HTTP post + requests. (Fixes: #440, #138). + [ Mike Gabriel ] * debian/control: + Build-depend on libssh-dev (>= 0.5.4-2).

2 1

Bug#138: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 03 Mar '14

03 Mar '14

tag #138 pending fixed #138 4.0.2.0 thanks Hello, X2Go issue #138 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=19fe787 The issue will most likely be fixed in src:x2goclient (4.0.2.0). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 19fe7875e2b8203780340272dc83189e9b8e470c Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Mon Mar 3 11:55:44 2014 +0100 Switch to QNetworkAccessManager. Appropriately set content type header to "application/x-www-form-urlencoded" for HTTP post requests. (Fixes: #440, #138). diff --git a/debian/changelog b/debian/changelog index 42c5799..daec032 100644 --- a/debian/changelog +++ b/debian/changelog @@ -14,6 +14,12 @@ x2goclient (4.0.2.0-0x2go1) UNRELEASED; urgency=low from terminal on linux and mac. - If no user in session config, display system username in pass form. + [ Josh Lukens ] + * New upstream version (4.0.2.0): + - Switch to QNetworkAccessManager. Appropriately set content type + header to "application/x-www-form-urlencoded" for HTTP post + requests. (Fixes: #440, #138). + [ Mike Gabriel ] * debian/control: + Build-depend on libssh-dev (>= 0.5.4-2).

2 1

Bug#431: Wiki account created
by Mike Gabriel 28 Feb '14

28 Feb '14

Control: close -1 The wiki account for Marco Woitschitzky has been created some time ago. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#432: Wiki account created (some time ago)
by Mike Gabriel 28 Feb '14

28 Feb '14

Control: retitle -1 New wiki account for Tobias Vollmer Control: close -1 The wiki account for Tobias Vollmer has been created some time ago. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#424: X2Go issue (in src:x2goserver) has been marked as pending for release
by Mike Gabriel 28 Feb '14

28 Feb '14

tag #424 pending fixed #424 4.0.1.14 thanks Hello, X2Go issue #424 (src:x2goserver) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=4a1a3aa The issue will most likely be fixed in src:x2goserver (4.0.1.14). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 4a1a3aa99459bf2dbee4f141de1b9a8c667a49f2 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Fri Feb 28 13:12:52 2014 +0100 Fix x2gostartagent. Make sure the -nolisten tcp option is configurable via x2goagent.options. (Fixes: #424). diff --git a/debian/changelog b/debian/changelog index 84ac01b..6381e14 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,6 +6,8 @@ x2goserver (4.0.1.14-0x2go1) UNRELEASED; urgency=low (Fixes: #415). - If x2golistmounts is used with out cmd options <session_id>, then the env var $X2GO_SESSION (current session) will be used. + - Fix x2gostartagent. Make sure the -nolisten tcp option is configurable + via x2goagent.options. (Fixes: #424). * x2goserver.spec: - Let builds for EPEL-7 behave like recent Fedora builds.

2 1

Processed: your mail
by owner＠bugs.x2go.org 28 Feb '14

28 Feb '14

Processing commands for control(a)bugs.x2go.org: > reassign #342 x2goclient Bug #342 [x2goclient 4.0.1.1-0~427~ubuntu12.04.1] Seamless / rootless apps don't resize in KDE/Kwin Warning: Unknown package '4.0.1.1-0~427~ubuntu12.04.1' Bug reassigned from package 'x2goclient 4.0.1.1-0~427~ubuntu12.04.1' to 'x2goclient'. Ignoring request to alter found versions of bug #342 to the same values previously set Ignoring request to alter fixed versions of bug #342 to the same values previously set > reassign #343 x2goclient Bug #343 [x2goclient 4.0.1.1-0~427~ubuntu12.04.1] Invisible UI components when compositing enabled Warning: Unknown package '4.0.1.1-0~427~ubuntu12.04.1' Bug reassigned from package 'x2goclient 4.0.1.1-0~427~ubuntu12.04.1' to 'x2goclient'. Ignoring request to alter found versions of bug #343 to the same values previously set Ignoring request to alter fixed versions of bug #343 to the same values previously set > tag #138 patch Bug #138 [x2goclient] httpbroker client in X2Go Client does not set content type "application/x-www-form-urlencoded" Added tag(s) patch. > tag #440 patch Bug #440 [x2goclient] Convert from using QHttp to QNetworkAccessManager for Session Broker Added tag(s) patch. > tag #157 build-macosx Bug #157 [x2goclient] x2goclient.app 4.0.0.4 crashes immediately on launch Bug #209 [x2goclient] Mac Client crashes on start Added tag(s) build-macosx. Added tag(s) build-macosx. > tag #208 build-macosx Bug #208 [x2goclient] X2goclient on mac Added tag(s) build-macosx. > tag #252 build-macosx Bug #252 [x2goclient] Tabulator and 'p' keys are not working on Mac OS X Added tag(s) build-macosx. > tag #317 build-win32 Bug #317 [x2goclient] Mounting of maps on Windows 8 is broken Added tag(s) build-win32. > tag #389 patch Bug #389 [x2goclient] Spelling/English language syntax patches to x2goclient Added tag(s) patch. > tag #395 build-macosx Bug #395 [x2goclient] Mac Menu Bar Icon Handles Left Clicks vs Right Clicks Incorrectly Added tag(s) build-macosx. > tag #413 patch Bug #413 [x2goclient] [PATCH] Spelling fixes. Added tag(s) patch. > merge #413 #389 Bug #413 [x2goclient] [PATCH] Spelling fixes. Bug #413 [x2goclient] [PATCH] Spelling fixes. There is no source info for the package 'x2goclient' at version '4.0.1.3' with architecture '' Unable to make a source version for version '4.0.1.3' Marked as found in versions 4.0.1.3. Bug #389 [x2goclient] Spelling/English language syntax patches to x2goclient Merged 389 413 > tag #421 build-win32 Bug #421 [x2goclient] X2goclient on Windows: sshd.exe does not start. Added tag(s) build-win32. > tag #422 build-win32 Bug #422 [x2goclient] Windows PulseAudio 3.0 and later fail to start due to missing cookie Added tag(s) build-win32. > tag #425 build-win32 Bug #425 [x2goclient] High CPU usage for "Windows Audio Device Graph Isolation" when x2goclient is launched Added tag(s) build-win32. > tag #195 build-win32 Bug #195 [x2goclient] windows client ignores ssh port Added tag(s) build-win32. > tag #39 build-macosx Bug #39 [x2goclient] x2goclient lacks AppleScript scripting support on Mac OS X Added tag(s) build-macosx. > tag #234 build-macosx Bug #234 [x2goclient] x2goclient on mac without sshd reports error Added tag(s) build-macosx. > tag #236 build-macosx Bug #236 [x2goclient] x2goclient on mac ignores users language setting Added tag(s) build-macosx. > tag #297 build-win32 Bug #297 [x2goclient] Pulseaudio doesn't start when there is no audio input device present Added tag(s) build-win32. > tag #387 build-macosx Bug #387 [x2goserver] use dbus-launch to start recent gnome-terminal applications Added tag(s) build-macosx. > thanks Stopping processing here. Please contact me if you need assistance. -- 138: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=138 157: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=157 195: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=195 208: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=208 209: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=209 234: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=234 236: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=236 252: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=252 297: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=297 317: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=317 342: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=342 343: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=343 387: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=387 389: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=389 39: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=39 395: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=395 413: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=413 421: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=421 422: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=422 425: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=425 440: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=440 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Dynamic cookies in session broker
by Josh Lukens 28 Feb '14

28 Feb '14

I've been working on a x2go setup using a session broker. The issue I'm having is our auth uses 2-factor with tokens which I wrote a working auth_mech for. The problem is the client resends the initial username and password with each request to the session broker which in turn tries to re-authenticate with them. Our system doesn't allow reuse of token codes so all requests after the first fail. I've taken a look at the beginnings of the dynamic cookie code in the session broker to see if I could make it work for our needs. As I understand the code that's there, the client would first connect with the static cookie value then a new random uuid4 is created for that user. That new random cookie would then need to be sent to the client so it can use it for its next auth, but I can't find any intent on how it should be communicated toward the client. From then on each request gets a new uuid5 created cookie based on the prior uuid and username, these could theoretically be generated independently on both client and server (assuming client knows the initial random one to see with). I'm happy to work on finishing this feature up but would like to make sure I'm roughly inline with where you guys where going with the feature so I have a few questions. How were you planning on communicating the randomly generated cookie back to the client? Were you intending to send the new next cookie to the client on every request or only do it once and have client and server keep generating independently? (the later could be an issue for QT client as QT4.8 doesn't support creating v5 UUIDs) How were you planning on handling multiple simultaneous connections from one user? (looks like next cookies would clash with each other in map) Thanks, -Josh

2 1

Bug#439: Please update your x2goserver version
by Mike Gabriel 27 Feb '14

27 Feb '14

Hi Emmanuelle, > Package: x2goserver > Version: 3.1.1.3-0~571~lucid1 Please update to latest x2goserver version (4.0.1.13) and then retest if the observed error is still there. Thanks, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Processed: Re: x2goserver and rhel6.4 / selinux Problem
by owner＠bugs.x2go.org 27 Feb '14

27 Feb '14

Processing control commands: > tag -1 moreinfo Bug #438 [x2goserver] x2goserver and rhel6.4 / selinux Problem Added tag(s) moreinfo. -- 438: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=438 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Processed: Re: x2goserver and rhel6.4 / selinux Problem
by owner＠bugs.x2go.org 27 Feb '14

27 Feb '14

Processing control commands: > tag -1 moreinfo Bug #438 [x2goserver] x2goserver and rhel6.4 / selinux Problem Ignoring request to alter tags of bug #438 to the same tags previously set -- 438: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=438 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#438: x2goserver and rhel6.4 / selinux Problem
by Mike Gabriel 27 Feb '14

27 Feb '14

Control: tag -1 moreinfo Hi Frank, > --------------------------- > > ls -Z .Xauthority > -rw-------. frank users unconfined_u:object_r:default_t:s0 .Xauthority > > -------------------------- > > Then I do a logout. Now, when I try to connect again to the x2go > server system, I get > the following error message on the client side and no session is started. > > ----------------------------- > ..... > > "Warning: Cookie mismatch in the X authentication data. > " > > "Session: Terminating session at 'Thu Feb 27 09:40:05 2014'. > Info: Your session was closed before reaching a usable state. > Info: This can be due to the local X server refusing access to the client. > Info: Please check authorization provided by the remote X application. > Session: Session terminated at 'Thu Feb 27 09:40:05 2014'. > " > > deleting proxy > > nxproxy not running > > proxy deleted > > ----------------------------------- > > But when I change the selinux permissions to > > ------ > > ls -Z .Xauthority > > -rw-------. frank users unconfined_u:object_r:xauth_home_t:s0 .Xauthority What are the SELinux permissions after you have logged out? Do you need that chcon command call when resuming sessions or when starting sessions. Excuse my SELinux innocence at this point. I would like to add support for SELinux, but I need to understand better why we have to tweak the security context of .Xauthority for X2Go. Thanks+Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#138: Possible fix
by Josh Lukens 27 Feb '14

27 Feb '14

Possible fix. Note, this is built on top of changes submitted in bug 440.

1 0

Bug#229: x2goclient for windows unable to use https broker-urls
by Anders Bruun Olsen 27 Feb '14

27 Feb '14

Package: x2goclient Version: 4.0.1.0-pre2 and 4.0.0.3 Platform: Windows I can login to our broker with x2goclient just fine on OSX and Linux, using our externally available https-server. On Windows however, it just fails authentication when using our https-server. It works fine when the broker-url is an http-address. I do not have a build-system for Windows at hand, so I am unable to test newest git revision on Windows. -- Anders Bruun Olsen It-ansvarlig Det Danske Sprog- og Litteraturselskab (Society for Danish Language and Literature)

3 5

Bug#229: X2Go Client 4.1.0.3+build2 for Windows now supports https broker connections
by Mike Gabriel 27 Feb '14

27 Feb '14

Control: close -1 Hi Anders, hi all, we have just provided a build2 of X2Go Client 4.0.1.3 [1]. This new build now suppports https connections when connecting to a session broker. The reason was a missing dll file (ssleay32.dll). Greets, Mike [1] http://code.x2go.org/releases/binary-win32/x2goclient/releases/4.0.1.3+buil… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#366: X2Go issue (in src:x2gothinclient) has been marked as closed
by Mike Gabriel 27 Feb '14

27 Feb '14

close #366 thanks Hello, we are very hopeful that X2Go issue #366 reported by you has been resolved in the new release (1.1.0.2) of the X2Go source project »src:x2gothinclient«. You can view the complete changelog entry of src:x2gothinclient (1.1.0.2) below, and you can use the following link to view all the code changes between this and the last release of src:x2gothinclient. http://code.x2go.org/gitweb?p=x2gothinclient.git;a=commitdiff;h=00d2050ad18… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2gothinclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2gothinclient Version: 1.1.0.2-0x2go1 Status: PREVIEW Date: Fri, 22 Nov 2013 23:54:00 +0100 Fixes: 366 Changes: x2gothinclient (1.1.0.2-0x2go1) PREVIEW; urgency=low . * New upstream version (1.1.0.2): - No upstream changes. * debian/control: + Add libfile-path-expand-perl to Depends: field of x2gothinclient bin:package. (Fixes: #366). * debian/source/format: + Switch to format 1.0.

2 1

Bug#422:
by Michael DePaulo 27 Feb '14

27 Feb '14

Status Update: While investigating this bug, I filed PulseAudio bug 75418. https://bugs.freedesktop.org/show_bug.cgi?id=75418 It might be related or involve a similar fix, but it is not the cause of this bug because the Windows X2Go Client does not set XDG_CONFIG_HOME for the pulseaudio.exe process. PulseAudio bug 75006 is also worth noting: https://bugs.freedesktop.org/show_bug.cgi?id=75006 Currently, the Windows X2Go Client does not set PULSE_COOKIE. It instead sets overrides USERPROFILE and expects the cookie to be created relative to it.

1 0

X2Go Session Broker for Fedora
by Mike Gabriel 25 Feb '14

25 Feb '14

Hi all, we are close to having nightly built RPMs for X2Go Session Broker for Fedora (with systemd Support). The configurations that have previously been done in the files /etc/defaults/*x2gobroker* can now alternatively be done in /etc/x2go/broker/defaults.conf (ini file format) Please test test test... Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Processed: your mail
by owner＠bugs.x2go.org 25 Feb '14

25 Feb '14

Processing commands for control(a)bugs.x2go.org: > tag #229 confirmed Bug #229 [x2goclient] x2goclient for windows unable to use https broker-urls Added tag(s) confirmed. > thanks Stopping processing here. Please contact me if you need assistance. -- 229: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=229 X2Go Bug Tracking System Contact owner(a)bugs.x2go.org with problems

1 0

Bug#229: X2Go Client: https broker URL on Windows
by Mike Gabriel 25 Feb '14

25 Feb '14

Control: severity -1 grave Control: confirmed Hi Alex, already a while ago, Anders reported issue #229 [1]. X2Go Client on Windows cannot connect to https broker URLs. Do you have an idea what the issue with this can be??? Any hint is appreciated. Thanks, Mike#1 [1] http://bugs.x2go.org/229 -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Re: [X2Go-Dev] [X2Go-User] Nightly builds for Fedora and EPEL
by Mike Gabriel 21 Feb '14

21 Feb '14

Hi Kermit, On Do 20 Feb 2014 21:15:29 CET, Short, Kermit wrote: > I am unable to see the x2go packages on EPEL for EL 5, i386 and x86_64. > Is this expected behavior? only a few (server-side) packages build against EPEL-5. See here: http://packages.x2go.org/epel/5/heuler/x86_64/rpms/ Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#434: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 20 Feb '14

20 Feb '14

tag #434 pending fixed #434 4.0.1.4 thanks Hello, X2Go issue #434 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=1535c0d The issue will most likely be fixed in src:x2goclient (4.0.1.4). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 1535c0d39525d9a746831933eee6c5a1e742cdae Author: Orion Poplawski <orion(a)cora.nwra.com> Date: Thu Feb 20 14:08:16 2014 +0100 Don't use ancient Debianism's for ssh options (ProtocolKeepAlives). (Fixes: #434). diff --git a/debian/changelog b/debian/changelog index 096aec2..f08604b 100644 --- a/debian/changelog +++ b/debian/changelog @@ -10,6 +10,8 @@ x2goclient (4.0.1.4-0x2go1) UNRELEASED; urgency=low [ Orion Poplawski ] * New upstream version (4.0.1.4): - Fix password connection with libssh 0.6.0 + - Don't use ancient Debianism's for ssh options (ProtocolKeepAlives). + (Fixes: #434). [ Martti Pitkanen ] * New upstream version (4.0.1.4):

2 1

Bug#434: Incorrect ssh options
by Orion Poplawski 19 Feb '14

19 Feb '14

Package: x2goclient Version: 4.0.1.3 Tags: patch x2goclient appears to use some ancient Debianism's for ssh options. The attached patch should hopefully fix, assuming the comments in bug 125263 below are correct. https://bugzilla.redhat.com/show_bug.cgi?id=1066744 https://bugzilla.redhat.com/show_bug.cgi?id=125263 -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion(a)cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com

3 3

Bug#427: X2Go issue (in src:x2godesktopsharing) has been marked as pending for release
by Mike Gabriel 15 Feb '14

15 Feb '14

tag #427 pending fixed #427 3.1.1.1 thanks Hello, X2Go issue #427 (src:x2godesktopsharing) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2godesktopsharing.git;a=commitdiff;h=442f6a7 The issue will most likely be fixed in src:x2godesktopsharing (3.1.1.1). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 442f6a79f472463fba0151a29284fecd46729e92 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Mon Feb 3 22:28:32 2014 +0100 add closure for bug#427 diff --git a/debian/changelog b/debian/changelog index d3f76d2..8c19386 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,7 +3,8 @@ x2godesktopsharing (3.1.1.1-0x2go1) UNRELEASED; urgency=low * New upstream version (3.1.1.1): - Update man pages (Fixes: #281). - Fix FSF address in COPYING file. - - Use x2gopath in scripts rather than deprecated x2gobasepath. + - Use x2gopath in scripts rather than deprecated x2gobasepath. (Fixes: + #427). - Different Linux distros have pidof installed in different locations. If pidof is not available, we brutally kill all instances of x2godesktopsharing when a session suspends. (Fixes: #426).

3 2

Bug#432: New wiki account for Marco Woitschitzky
by Tobias Vollmer 14 Feb '14

14 Feb '14

Package: wiki.x2go.org Please create a wiki account for me. First name: Tobias Last name: Vollmer Account name: Snafu -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.12 (GNU/Linux) mQENBFL+PBoBCADGBN/fTz6kMpjhOKk1tRdvyuEhzyUBdyy/Ff4YqTvn+aeE7PW6 7x/sEmKjmaHxZYFoPhkqCaETSzEjv5bn0ooR+28k/ZDNxXH9rTtjpPg65q7jET1f Yr4P+3kIVtOEeD0swDieI3KLtuvek1A3cUXUusdyoJWAvHq3YLizPEu7Gysq4HU0 Zv12exIrRucBMVmduK7dM4WfAKHTs8Sgi0Lovqrr1PtjLZCKOVqQ2x9jVIlTjYNy d6RCuuXC1tljz2H2mK0s7V3CDPFi0m2NRuO48Sw/YF1Xynf+pfFkDnlpLfLUsVOe Db1z5fZGFeU6fkbA4AbdLpdj9LDqf77O7h/3ABEBAAG0NFRvYmlhcyBWb2xsbWVy IDx0b2JpYXMudm9sbG1lckBpbW1vYmlsaWVuc2NvdXQyNC5kZT6JAT4EEwECACgF AlL+PBoCGyMFCQPCZwAGCwkIBwMCBhUIAgkKCwQWAgMBAh4BAheAAAoJEPiMiMB1 p6WqgE4H/0hMgDt/nK700zOKIVy46/K+yEmEhqmbaQeYBZqA2XvsLGY69B+yufxL yL2/Lk8k364cqX8Js4uKbtg3uY5rt3/jIVCCpHSAEfRKZoIq+HGDKiJa2klS2P2K rD52QPH7ALW1ZKmRgRSdOZoLgvxLRuZarxu0gLy4j967Kw2HI8PPEL9e4rDZ/LAa kMkii3hFhH53cLPqel0BQugqwoURExaKPCWc8p+c4EMkRWHiHdXCykVeJ324ZOAp KuRP2YJh/IxNy9fOfLJM+6j3/EkiV+07RfTG9HDZy/qMY5RtP0rSqTNWQRb0V2Bz rUbJoVFhThZMrFZe4bYBz09g9/3GEfeIRgQTEQIABgUCUv48wQAKCRAZUrIviuEi MxA2AJ91IsmstevnnGv7TIo3wGDDFWVS9wCffKoIV7BYEjnTttE3woBy5YOI6q25 AQ0EUv48GgEIAKVhuwJPhm6sWx4AguITj8K7QmjiPkVK2Kwit49yxuFCSNq/ifwl T9wiq2DELGuK+dL7wEWwmlvRw8D5oPZHNOcswL3DS/MLbejuEqJ+t1zTclf6GuSg /aZTodQg1C80aiOgZiSY+566TIDnSnH5i9z6H1zpZDDHI4cbBVWSLdWjN36BB3+B kniMXOnGGYpVKZ0aI8ue9ntFpQCwCrwYRKOz4UNG22yUM6Y0nxhXCTR9GtVvRQKz YQ/isPR2fFcpIZVIyddT1nMEXUfqdNmaHA/1yvCdMT3SXIbVhbv9Tvl3i8QCTZ06 yyQijEn3teZTfk9R85PloVsX3+d3nMAnMtMAEQEAAYkBJQQYAQIADwUCUv48GgIb DAUJA8JnAAAKCRD4jIjAdaelqqQ1CADChM8rqJ1CsPc9aMQAryFCsnWxLhCsSGXD oaJnw0lB6x9tUp16nHOUi4lLCYwRUHV2cRvwE0YnbDTHfaIoSkNg7ungJWbBkOgH d+Ct86rICQZotyu00p89H0pqVBPSsqmHWxRz0lS+1w4darTa00FBgwpLHWsknbx+ PlQi4YWEs4Oeu1/njG+m6HVwKhYN3GZh4eB+uvx9b1K3F5uREok1C5mEadxEhejC l9MAzz65OXKz79yLGj4T8WvmzCUjVeoKmC+kColZEukuMc+Q6tqs/k54Nezq0QW5 MIaCC7K7uljDvMsgtsewJbtc0O5vaRhvBn1ZvJ5VqXP06Ekh4TDP =phEM -----END PGP PUBLIC KEY BLOCK-----

1 0

Bug#431: New wiki account for Marco Woitschitzky
by Marco Woitschitzky 14 Feb '14

14 Feb '14

Package: wiki.x2go.org Please create a wiki account for me. First name: Marco Last name: Woitschitzky Account name: Woi -- Marco Woitschitzky System Engineer Immobilien Scout GmbH Andreasstraße 10 10243 Berlin Fon +49 30 24301-1351 Fax +49 30 24301-1343 marco.woitschitzky(a)immobilienscout24.de ---------------------------------------------------------- Immobilien Scout GmbH Aufsichtsrat: Dr. Martin Enderle (Vorsitzender) Geschäftsführer: Dirk Hoffmann, Marc Stilke (Sprecher) Handelsregister: Amtsgericht Charlottenburg, HRB 69108 Sitz der Gesellschaft: Berlin ---------------------------------------------------------- Der Marktführer: Die Nr. 1 rund um Immobilien http://www.immobilienscout24.de

1 0

Bug#430: Improve libssh speed: accept upstream patch
by Mike Gabriel 11 Feb '14

11 Feb '14

Package: libssh Severity: normal Version: 0.5.4-1 Tag: patch Dear maintainer, please pull this [1] upstream patch into the Debian libssh package to improve speed for libssh issue connections. Thanks, Mike [1] http://git.libssh.org/projects/libssh.git/commit/?id=d90478448985a1e21cc240… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 1

Bug#428: X2Go issue (in src:x2goserver) has been marked as pending for release
by Mike Gabriel 09 Feb '14

09 Feb '14

tag #428 pending fixed #428 4.0.1.14 thanks Hello, X2Go issue #428 (src:x2goserver) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=50111fd The issue will most likely be fixed in src:x2goserver (4.0.1.14). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 50111fd14b523f032a4dd875be33d0214aad7f9b Author: Orion Poplawski <orion(a)cora.nwra.com> Date: Sun Feb 9 19:54:06 2014 +0100 Fix the x2goserver.service unit file. Allow systemd to track the service after startup. (Fixes: #428). diff --git a/debian/changelog b/debian/changelog index 4246aa9..8cc4931 100644 --- a/debian/changelog +++ b/debian/changelog @@ -18,6 +18,8 @@ x2goserver (4.0.1.14-0x2go1) UNRELEASED; urgency=low * New upstream release (4.0.1.14): - Fix wrong path to xinitrd.d in Xsession (section for RPM based distros). Also, add some existence/readability checking. (Fixes: #414). + - Fix the x2goserver.service unit file. Allow systemd to track the service + after startup. (Fixes: #428). -- Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Tue, 28 Jan 2014 13:41:38 +0100

2 1

Bug#428: Fix x2goserver unit file
by Orion Poplawski 05 Feb '14

05 Feb '14

Package: x2goserver Version: 4.0.1.13 Tags: patch Fix the x2goserver.service unit file. This allows systemd to track the service after startup. -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 http://www.nwra.com

1 0

Bug#426: X2Go issue (in src:x2godesktopsharing) has been marked as pending for release
by Mike Gabriel 03 Feb '14

03 Feb '14

tag #426 pending fixed #426 3.1.1.1 thanks Hello, X2Go issue #426 (src:x2godesktopsharing) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2godesktopsharing.git;a=commitdiff;h=ab06c0a The issue will most likely be fixed in src:x2godesktopsharing (3.1.1.1). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit ab06c0a9ffdefd09b582e03d09dff2c22c0f923b Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Mon Feb 3 22:27:21 2014 +0100 Add closure for pidof bug #426. diff --git a/debian/changelog b/debian/changelog index 3d12002..d3f76d2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,7 +6,7 @@ x2godesktopsharing (3.1.1.1-0x2go1) UNRELEASED; urgency=low - Use x2gopath in scripts rather than deprecated x2gobasepath. - Different Linux distros have pidof installed in different locations. If pidof is not available, we brutally kill all instances - of x2godesktopsharing when a session suspends. + of x2godesktopsharing when a session suspends. (Fixes: #426). * debian/control: + Replace LDAP support with session brokerage support in LONG_DESCRIPTION. + Rework LONG_DESCRIPTION in several other aspects.

2 1

x2goDebug
by Michael DePaulo 03 Feb '14

03 Feb '14

Is there a way to view the "x2goDebug" statements on win32? Honestly, I'm not even sure where the function is defined. I'm thinking I might need to load up a full IDE (rather than a text editor) to do that.

2 3

Bug#427:
by Michael DePaulo 02 Feb '14

02 Feb '14

This bug is actually in package x2godesktopsharing and it was fixed in commit: 80d50f61f48a286e2b6c7499f3866a31a835d365 (2013-12-17, not released yet.)

1 0

Bug#426:
by Michael DePaulo 02 Feb '14

02 Feb '14

This bug is actually in package x2godesktopsharing and it was fixed in commit: b06196d55c25a7e3b9cfa9ab21a67b9f4e35eec9 (2013-12-18, not released yet.)

1 0

Bug#427: "x2gosyslog: No such file or directory" when resuming x2go session
by Michael DePaulo 01 Feb '14

01 Feb '14

Package: x2goserver Version: 4.0.1.10 I observed these 2 errors: http://i.imgur.com/9Va5sJJ.png /usr/bin/x2gosuspend-desktopsharing: line 32: /usr/lib/x2go/x2gosyslog: No suh file or directory /usr/bin/x2goterminate-desktopsharing: line 32: /usr/lib/x2go/x2gosyslog: No suh file or directory When resuming an X2Go session. Server: x2goserver 4.0.1.10 (Fedora 20 64-bit) Client: x2goclient 4.0.1.3 (Windows 8.1 64-bit) Note that the "pidof: command not found" error has been be reported separately as bug 426. Note that on Fedora 20 64-bit, x2gosyslog is located at: /usr/lib64/x2go/x2gosyslog I plan to fix the bug (most likely today) by editing those 2 scripts so that they follow this pseudocode: if (file exists: /usr/lib64/x2go/x2gosyslog ) then /usr/lib64/x2go/x2gosyslog else /usr/lib/x2go/x2gosyslog fi -Mike#2

1 0

Bug#426: "pidof: command not found" when resuming x2go session
by Michael DePaulo 01 Feb '14

01 Feb '14

Package: x2goserver Version: 4.0.1.10 I observed this error: http://i.imgur.com/9Va5sJJ.png /usr/bin/x2goterminate-desktopsharing: line 44: pidof: command not found When resuming an X2Go session. Server: x2goserver 4.0.1.10 (Fedora 20 64-bit) Client: x2goclient 4.0.1.3 (Windows 8.1 64-bit) Note that the other error messages will be reported in a separate bug report) Note that on Fedora 20, pidof is located at: /usr/sbin/pidof /sbin/pidof would also work too because /sbin has been a symlink to /usr/sbin on Fedora since Fedora 17's "/usr Merge": https://fedoraproject.org/wiki/Features/UsrMove

1 0

"pidof: command not found" error
by Michael DePaulo 01 Feb '14

01 Feb '14

Has anyone seen this error when resuming fedora x2goserver sessions? I seem to be experiencing it often from my windows x2goclients. http://i.imgur.com/9Va5sJJ.png This screenshot was taken on x2goclient 4.0.1.3 (Win 8.1 64-bit) connecting to x2goserver 4.0.1.10 (Fedora 20 64-bit).

3 3

Bug#421: X2goclient on Windows: sshd.exe does not start.
by jordi＠amospalla.es 30 Jan '14

30 Jan '14

Package: X2goclient Version: 4.0.1.3 Client host: windows xp Server host: debian wheezy - When enabling support for printer sharing, or sharing a folder, sshd.exe does not start, and so these features are not available. - If I launch manually sshd (from what I understand x2goclient launches from reading source code) sshd.exe launches and stays until I kill it: "C:\Program Files\x2goclient\sshd.exe" -D -p 7022 -f "/cygdrive/c/Documents and Settings/User/.x2go/etc/sshd_config" -h "/cygdrive/c/Documents and Settings/User/.x2go/etc/ssh_host_dsa_key" - Every time I try to share a folder with the session running, I can see on the process manager ssh-keygen is launched. - Server host shows the remote folders as mounted on /proc/mounts, so accessing them makes a process hang. - Firewall is disabled on client host.

1 1

Bug#423: FIx more -Werror=format-security errors
by Orion Poplawski 30 Jan '14

30 Jan '14

Package: nx-libs Version: 3.5.0.22 Tags: patch The attached patch fixes more -Werror=format-security errors. Interestingly, most of the errors only showed up on our arm builds. No idea why. -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA/CoRA Division FAX: 303-415-9702 3380 Mitchell Lane orion(a)cora.nwra.com Boulder, CO 80301 http://www.cora.nwra.com

1 0

Bug#422: Windows PulseAudio 3.0 and later fail to start due to missing cookie
by Michael DePaulo 30 Jan '14

30 Jan '14

Package: x2goclient Version: 4.0.1.3 X2Go Client 4.0.1.3 for for Windows is bundled with PulseAudio 1.1. If you replace 1.1 with 3.0 or later (2.0 was not tested), the .pulse-cookie file is not created and therefore pulseaudio.exe either fails to start or repeatedly restarts. The bottom line is that sound will not work in Windows X2go Client with these newer versions of PulseAudio. The simple workaround is to run X2Go Client with PulseAudio 1.1 once and then exit x2goclient. The cookie will be present even after x2goclient is closed. Newer versions of PulseAudio can then use that cookie. These are my full test results for what files are generated with different versions of PulseAudio. They were tested on windows 7 32-bit SP1 Professional (with all important and recommended windows updates installed.) "mothership-7-32" is my test VM's hostname. Note that I tested PulseAudio 1.1 (and 1 or 2 newer versions) under Windows 8.1 64-bit Professional (with all important and recommended windows updates installed) and the results were the same. 1.1: Under C:\Users\mike\.x2go\pulse\ : .pulse-cookie .esd_auth .pulse\ .pulse\mothership-7-32-runtime\ tmp.Hp2820\ tmp.Hp2820\config.pa 3.0 Under C:\Users\mike\.x2go\pulse\ : .pulse\ .pulse\mothership-7-32-runtime\ tmp.Hp1572 tmp.Hp1572\config.pa (Pulseaudio.exe does not appear to be running at all, but maybe what happened under 4.99.2 is happening.) 4.0: Under C:\Users\mike\.x2go\pulse\ : .pulse\ .pulse\mothership-7-32-runtime\ .pulse\mothership-7-32-runtime\pid tmp.Hp2656 tmp.Hp2656\config.pa Also, windows complains that "pulseaudio.exe has stopped working". And it does so repeatedly,.This suggests that x2goclient.exe keeps on trying to restart pulseaudio.exe 4.99.2: Under C:\Users\mike\.x2go\pulse\ : .pulse\ .pulse\mothership-7-32-runtime\ .pulse\mothership-7-32-runtime\pid (keeps on being created and then disappearing because pulseaudio.exe keeps stopping and starting) tmp.Hp3716 tmp.Hp3716\config.pa -Mike#2

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev