- x2go-dev - X2Go ListServ

Bug#112: Verified problem with 10.9
by Andreas Yankopolus 27 Nov '13

27 Nov '13

I'm seeing this problem with X2Go Client V. 4.0.1.1 on 10.9 and x2goserver from the stable PPA. It reports versions of: x2goagent: 3.5.0.21 x2goserver: 4.0.1.6 x2goserver-extensions: 4.0.1.6 x2goserver-xsession: 4.0.1.6 I'm happy to try troubleshooting updates.

1 0

Support (more) silent mode on X2GoClient and X2GoDesktopSharing
by Marco André Dinis 26 Nov '13

26 Nov '13

Hi I'm developing a program that will use X2Go software. I dont want users to notice they are using any other program besides my own. I have two problems right now: A) X2GoClient Using SHADOW mode with "--hide" does not work. The interface waits for selection of Display (usually ":0") and, since there's no input from user (there's no window) the program does not show anything. There are possible ways of fixing/improving this situation: -allow user to set the default display on sessions' file -create one flag and run program like these: "x2goclient --hide --sessionid=xxx --select-first-display" Anyway, i modified the code of x2goclient/onmainwindow.cpp and added these lines: l4348:..if( shadowSession ) l4349:....slotShadowSess(); Compiled the program, and now i can run "./x2goclient --hide --sessionid=xxx" and the window will show up. This is NOT a fix, this is a nasty workaround. It wontn show the list even when the "hide" flag is not present. B) X2GoDesktopSharing Just the icon on SystemTray. If we could pass a flag like "--no-icon" would be great I could do these simple changes on my own, but i rather see this changes on the official code. Thanks, Marco Dinis

1 0

Two additions to X2Go-TCE
by Stefan Baur 25 Nov '13

25 Nov '13

Hi, as those of you also subscribed to the x2go-user mailing list might already have noticed, I'm currently evaluating X2Go-ThinClient-Edition. This is purely for my own, at-home use, as opposed to the published application mode, which I'm using commercially. One thing that has always annoyed me about X2Go is the mechanism for printing to a locally-attached client printer. Especially in a thinclient, LAN-only setup, it seems like an unnecessary complex solution to a trivial problem. My solution: Make the ThinClients behave like a "HP JetDirect" card. This can easily be done like this (on the server supplying the TC NFS root): chroot /opt/x2gothinclient/chroot apt-get install openbsd-inetd -y echo "9100 stream tcp nowait root /bin/dd if=- of=/dev/usb/lp0 bs=1024k" >> /etc/inetd.conf echo "9101 stream tcp nowait root /bin/dd if=- of=/dev/usb/lp1 bs=1024k" >> /etc/inetd.conf Assumption: Thinclients will have no more than two locally attached printers. For more, simply keep adding lines and increment the port numbers by 1 (9102: /dev/usb/lpt2, 9103: /dev/usb/lpt3, etc). For more flexibility, this could also be created dynamically at boot, by turning inetd.conf into a symlink to a writable file on a ramdisk, and a script checking for the presence of /dev/usb/lp* and /dev/lp* (in case somebody uses an ancient computer with a parallel printer as thinclient). With this addition (either statically as shown above, or with the use of a script), all you need to do on the CUPS server is set up a printer and specify socket://name-or-ip-of-the-thinclient:portnumber, e.g. socket://thinclient01.example.com:9100, as AppSocket/HP JetDirect URI in CUPS. Now, this will end up in a mess if you're assigning IPs dynamically via DHCP, and you aren't matching them up with the thinclients' MAC addresses. The easy solution for that would be using a DNS name, however, right now, it looks like all X2Go thin clients don't request/suggest a DNS name via DHCP, and use the same name "x2gothinclient" locally. Seems like "send host-name = gethostname();" in /etc/dhcp/dhclient.conf somehow doesn't work properly in the thin client environment - possibly because PXE already pulls a DHCP IP and doesn't know about the name? I'm not sure what the mechanism there does. Therefore, I would like to suggest the addition of some code that adds an individual name to each client, and requests/suggests that via DHCP. The MAC address would come in handy for that. A method to query the MAC address of the currently active interface would be: IFACE=$(route -n | awk '/^0.0.0.0/ { print $8 }' | head -1) MAC=$( ip a l $IFACE | awk '/^ *link/ { print $2 }' | tr ':' '-' ) hostname "$(cat /etc/hostname)-$MAC" # this sets the hostname dhclient -sf /dev/null $IFACE # this re-registers our lease and updates the name on the DHCP/DNS server, without complaining about a read-only resolv.conf-file # NB: Yes, you really need to use /dev/null, not /dev/zero. Notes: 1) This is a quick hack, feel free to improve it 2) I'm not sure where this should be inserted, only that it should be inserted. ;-) Right now, I'm running it in rc.local, but there must be a better place for this. The earlier in the boot process, the better. Maybe as a script in /etc/network/if-up.d/ ? 3) I don't know if changing the host name without changing /etc/hostname and /etc/hosts might have some undesired side effects. If it does, these files might have to be symlinked to a ramdisk. -Stefan

1 0

Bug#323: x2go server refuses client with 'Error: Wrong version or invalid session authentication cookie.'
by Horst Stanitzok 25 Nov '13

25 Nov '13

My error was the same: Error: The remote NX proxy closed the connection. Error: Failure negotiating the session in stage '7'. Error: Wrong version or invalid session authentication cookie. I solved it in my case. The reason was a wrong writing permission in the appropriate directory where the client logged in. This is certainly not a bug but a mistake, - and a trace to look at for the the one or other case with this error. Regards, horst

1 0

Bug#347: tempfile command not know / available (?) in Fedora
by Mike Gabriel 25 Nov '13

25 Nov '13

Package: x2goserver-xsession Version: 4.0.1.8 Hi Orion, on IRC we just discovered that x2goserver-xsession/etc/Xsession uses a command named tempfile. On Debian, the binary is in package debianutils which makes it appear like a Debianism. However, I found evidence of the file being known to other Unices [1]. What would be the Fedora way of ,,tempfile''? Shall we change that upstream? Or can you provide that binary somehow in Fedora? Mike [1] http://nixdoc.net/man-pages/linux/man1/tempfile.1.html -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 1

Bug#346: "integrate" misspelled in PyHoca-GUI
by Michael DePaulo 25 Nov '13

25 Nov '13

Package: pyhoca-gui Version: 0.4.0.8 Screenshot: http://imgur.com/1pnEShP Whenever I go to add or edit a profile, and I go to the "Session" tab, there is a line with this exact spelling: ntegrate remote application(s) into local desktop (rootless mode) "ntegrate" should be spelled "Integrate" Observed on both Windows 7 SP1 64-bit & Windows 8.1 64-bit with the language set (during install) to English. Downloaded from http://code.x2go.org/releases/binary-win32/pyhoca-gui/releases/0.4.0.8/ NOT observed on Ubuntu 12.04.3 32-bit with phyoca-gui 0.4.0.8-0~1063~precise1 from http://ppa.launchpad.net/x2go/stable/ubuntu . In other words, it is spelled correctly as "Integrate" on Ubuntu.

3 2

Do any of the browser plugins still work, please?
by Graham Stoddart-Stones 24 Nov '13

24 Nov '13

Dear X2Go: Please could you advise me whether the browser plugins are still in use? My engineers tell me that none of them works with modern browsers, but that is opposite to the information at http://wiki.x2go.org/doku.php/wiki:advanced:x2goplugin On the other hand, I cannot find any X2Goclient plug in for the Windows versions of either Chrome or Firefox, which suggests that our engineers are right! Thank you Graham -- Graham Stoddart-Stones Pacifera - Founding Partner UK Phone : +44 (0)3333 444 300 ext 314 | UK Fax : +44 3333 444 301 | UK mobile : +44 (0)7783 427215 US Phone : +1 207 221 0521 ext 314 | US Fax : +1 866 221 4853 | US mobile : +1 207 590 4030 | Toll-free 866 821 2946 ext 314 www.pacifera.com

1 0

Bug#345: Fix DNS for x2go.org -> redirect to wiki.x2go.org
by Mike Gabriel 23 Nov '13

23 Nov '13

Package: wiki.x2go.org Severity: wishlist Hi Heinz, can you please check that the DNS A record for x2go.org points to 176.9.116.2 (japsand)? We should make http://x2go.org redirect to http://wiki.x2go.org and I guess that is most easily handled if all DNS entries end up on the same machine. Alternatively, please configure a Redirect permanent on the host x2go.org currently points at. Thanks, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Bug#301: X2Go issue (in src:x2gothinclient) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #301 thanks Hello, we are very hopeful that X2Go issue #301 reported by you has been resolved in the new release (1.1.0.1) of the X2Go source project »src:x2gothinclient«. You can view the complete changelog entry of src:x2gothinclient (1.1.0.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2gothinclient. http://code.x2go.org/gitweb?p=x2gothinclient.git;a=commitdiff;h=9aebcecfe34… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2gothinclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2gothinclient Version: 1.1.0.1 Status: RELEASE Date: Fri, 22 Nov 2013 23:51:33 +0100 Fixes: 300 301 Changes: x2gothinclient (1.1.0.1) RELEASED; urgency=low . [ Mike Gabriel ] * New upstream version (1.1.0.1): - Switch to VT-7 on TC shutdown. - Syntax fix in x2gousbmount script. - Make ~x2gothinclient rw-able on TCE machines. Thanks to Peter Schneider for pointing at this. - Remove chroot bootstrap cruft when finished with creating the TCE chroot. - Deactivate serial line terminals on X2Go thinclients. - Install TCE dependencies via meta-package x2gothinclient-chroot. - Move init scripts from debian/ folder into upstream folders. - Provide x2gothinclient-chroot.init script that tweaks the chroot during thin client startup. - Patch /etc/init.d/checkroot-bootclean.sh during TCE creation to avoid failures when clean tmp files on the read-only NFS root-fs. - Work around Debian bug #729373 during TCE creation. Replace alsa-utils init script and ALSA's utils.sh (for Debian wheezy+jessie chroots). - Refrain from using "~<user>" when launching X2Go Client as it cannot handle it, yet. Use "~" instead (handable by X2Go Client >= 4.0.1.2). - Tweak the /etc/os-release more comprehensively. - Update initramfs at the very end of the TCE creation. - Do not over-mount /run as tmpfs. This is already done by the Debian boot process. - Monitor mounted USB devices via ~x2gothinclient/mounts (and not via deprecated location /var/run). - Add TC_NONINTERACTIVE (commented out) to x2gothinclient_settings config file. - Add syslog support to x2gousbmount. - Install radeon and i915 kms/drm module into initrd image for Debian (>= 7). * debian/control: + New bin:package x2gothinclient-chroot. + Make sure x2gothinclient-chroot pulls in editing tools like mc, vim, less via Recommends: field. + Depend on x2goclient (>= 4.0.1.2-0~). + Suggest some helpful firmware packages (also from non-free) in bin:package x2gothinclient-chroot. . [ Arnold Krille ] * New upstream version (1.1.0.1): - Extend x2gothinclient_shell to run anything given as arguments and fall back to $TC_SHELL when nothing is given. (Fixes: #301). - Allow non-interactive execution of x2gothinclient_create. (Fixes: #300).

2 1

Bug#300: X2Go issue (in src:x2gothinclient) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #300 thanks Hello, we are very hopeful that X2Go issue #300 reported by you has been resolved in the new release (1.1.0.1) of the X2Go source project »src:x2gothinclient«. You can view the complete changelog entry of src:x2gothinclient (1.1.0.1) below, and you can use the following link to view all the code changes between this and the last release of src:x2gothinclient. http://code.x2go.org/gitweb?p=x2gothinclient.git;a=commitdiff;h=9aebcecfe34… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2gothinclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2gothinclient Version: 1.1.0.1 Status: RELEASE Date: Fri, 22 Nov 2013 23:51:33 +0100 Fixes: 300 301 Changes: x2gothinclient (1.1.0.1) RELEASED; urgency=low . [ Mike Gabriel ] * New upstream version (1.1.0.1): - Switch to VT-7 on TC shutdown. - Syntax fix in x2gousbmount script. - Make ~x2gothinclient rw-able on TCE machines. Thanks to Peter Schneider for pointing at this. - Remove chroot bootstrap cruft when finished with creating the TCE chroot. - Deactivate serial line terminals on X2Go thinclients. - Install TCE dependencies via meta-package x2gothinclient-chroot. - Move init scripts from debian/ folder into upstream folders. - Provide x2gothinclient-chroot.init script that tweaks the chroot during thin client startup. - Patch /etc/init.d/checkroot-bootclean.sh during TCE creation to avoid failures when clean tmp files on the read-only NFS root-fs. - Work around Debian bug #729373 during TCE creation. Replace alsa-utils init script and ALSA's utils.sh (for Debian wheezy+jessie chroots). - Refrain from using "~<user>" when launching X2Go Client as it cannot handle it, yet. Use "~" instead (handable by X2Go Client >= 4.0.1.2). - Tweak the /etc/os-release more comprehensively. - Update initramfs at the very end of the TCE creation. - Do not over-mount /run as tmpfs. This is already done by the Debian boot process. - Monitor mounted USB devices via ~x2gothinclient/mounts (and not via deprecated location /var/run). - Add TC_NONINTERACTIVE (commented out) to x2gothinclient_settings config file. - Add syslog support to x2gousbmount. - Install radeon and i915 kms/drm module into initrd image for Debian (>= 7). * debian/control: + New bin:package x2gothinclient-chroot. + Make sure x2gothinclient-chroot pulls in editing tools like mc, vim, less via Recommends: field. + Depend on x2goclient (>= 4.0.1.2-0~). + Suggest some helpful firmware packages (also from non-free) in bin:package x2gothinclient-chroot. . [ Arnold Krille ] * New upstream version (1.1.0.1): - Extend x2gothinclient_shell to run anything given as arguments and fall back to $TC_SHELL when nothing is given. (Fixes: #301). - Allow non-interactive execution of x2gothinclient_create. (Fixes: #300).

2 1

Bug#310: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #310 thanks Hello, we are very hopeful that X2Go issue #310 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

Bug#305: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #305 thanks Hello, we are very hopeful that X2Go issue #305 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

Bug#278: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #278 thanks Hello, we are very hopeful that X2Go issue #278 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

Bug#285: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #285 thanks Hello, we are very hopeful that X2Go issue #285 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

Bug#276: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #276 thanks Hello, we are very hopeful that X2Go issue #276 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

Bug#331: X2Go issue (in src:x2goserver) has been marked as closed
by Mike Gabriel 22 Nov '13

22 Nov '13

close #331 thanks Hello, we are very hopeful that X2Go issue #331 reported by you has been resolved in the new release (4.0.1.7) of the X2Go source project »src:x2goserver«. You can view the complete changelog entry of src:x2goserver (4.0.1.7) below, and you can use the following link to view all the code changes between this and the last release of src:x2goserver. http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=447e68e8b82ea4b… If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goserver. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goserver Version: 4.0.1.7 Status: RELEASE Date: Fri, 22 Nov 2013 21:58:27 +0100 Fixes: 276 278 285 305 310 331 Changes: x2goserver (4.0.1.7) RELEASED; urgency=low . [ Orion Poplawski ] * New upstream version (4.0.1.7): - Install Xsession file as executable, make Xsession.d directory location configurable during build process, do not create unused Xsession.options. (Fixes: #278). . [ Mike Gabriel ] * New upstream version (4.0.1.7): - Fine-tune x2goserver-xsession/Makefile: if /etc/X11 has Xsession.d and/or Xsession.options they get symlinked into /etc/x2go. Otherwise Xsession.d and Xsession.options are created under /etc/x2go as empty dir/file. (Fixes: #278). - Fix automatic keyboard setup (via x2gosetkeyboard) while resuming a session. (Fixes: #285). - Provide sudoers.d/x2goserver file that allows sudoed commands under KDE (by pertaining the env var QT_GRAPHICSSYSTEM. (Fixes: #276). - With PostgreSQL as session db backend, prevent the root user from launching sessions. Also, prevent x2gouser_root from being added as a PostgreSQL user. (Fixes: #310). - Execute DB status changes as late as possible during suspend / terminate. - Start/resume rootless sessions without geometry parameter. Esp. using X2GO_GEOMETRY=fullscreen for rootless sessions lead to an extra 1x1 px session window (nxagentCreateIconWindow in nxagent's Window.c). - Typo fix in x2goruncommand (for MATE session startup). * debian/control: + Update LONG_DESCRIPTIONS. + Raise Standards: to 3.9.4 (no changes needed). + Move xfonts-base to Recommends: field of bin:package x2goserver. * debian/x2goserver.init: + Make init script LSB compliant. . [ Helmer Teles ] * New upstream version (4.0.1.7): - Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). . [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305). . [ Oleksandr Shneyder ] * New upstream version (4.0.0.6): - Fix x2goruncommand: "type -P $cmd" can create new lines in EXEC variable if command have the arguments wich have same names as existing commands, for example "rdesktop -k nl" -> "/usr/bin/rdesktop\n/usr/bin/nl". Now we splitting $cmd and taking only first part.

2 1

shameless plug: "deployment-stories:electronic-glovebox" wiki page has been updated and expanded
by Stefan Baur 20 Nov '13

20 Nov '13

Hi everyone, back in March, Mike (sunweaver) created the first revision of a wiki page describing my particular use case. (Again, thanks for the birthday present, Mike!) Today I finally got around to updating and expanding it: http://wiki.x2go.org/doku.php/doc:deployment-stories:electronic-glovebox If you've ever wondered what my customers use X2Go for, or even consider selling similar solutions in your home country, feel free to have a look and contact me off-list. Kind Regards, Stefan Baur, speaking for BAUR-ITCS UG (haftungsbeschraenkt)

1 0

Installation of x2go fails. Can you help me please?
by Javier Martinez Arandigoyen 19 Nov '13

19 Nov '13

I have an installation in ubuntu 12.04 LTS of x2go. The server start working fine, and sharing the folders, but aftter minutes, some times hours the sharing folder stop working. My technician is out. Can you help me???. I´ll pay for your work. I can give you access t the server. Regards Recibe un cordial saludo. Javier Martínez Arandigoyen Director General <http://www.sip2000.es/> http://www.cloudsmart.es *C/ Berroa 2 Edificio Empresarial La Estrella,. Oficina 204* *31192 Tajonar Navarra*

2 1

Bug#343: Invisible UI components when compositing enabled
by Wil 19 Nov '13

19 Nov '13

Package: x2goclient 4.0.1.1-0~427~ubuntu12.04.1 Version: 4.0.1.1 (from x2go stable) Ubuntu 12.04.2 LTS 3.2.0-51-generic-pae #77-Ubuntu SMP Wed Jul 24 20:40:32 UTC 2013 i686 Qt: 4.8.1 KDE Development Platform: 4.8.5 (4.8.5) KDE Daemon: $Id$ When the compositing extension is enabled some UI elements seem to completely disappear. For example using the oxygen theme in kde the menus are no longer visible (likewise oxygen-gtk for gtk+ apps). Also the scroll bar overlay control for the thin gtk+ scrollbars does not appear to show. The default panel in kde is also invisible. I'm not sure how much work it would be to fix this but with compositing turned off there are often thick black borders around UI elements that should be composited. This even affects applications like Eclipse as well as the window / display manager UI etc.

2 1

Bug#342: Seamless / rootless apps don't resize in KDE/Kwin
by Wil 17 Nov '13

17 Nov '13

Package: x2goclient 4.0.1.1-0~427~ubuntu12.04.1 Version: 4.0.1.1 (from x2go stable) Ubuntu 12.04.2 LTS 3.2.0-51-generic-pae #77-Ubuntu SMP Wed Jul 24 20:40:32 UTC 2013 i686 Qt: 4.8.1 KDE Development Platform: 4.8.5 (4.8.5) KDE Daemon: $Id$ When trying to resize a rootless window in kde with kwin window manager the resize appears blocked. It's possible to resize the window a tiny bit and then it stops resizing (the resize cursor is still showing though). If all the affects and compositing are turned off occasionally it will start working. It seems worse after the application has just been started and when the resizing kicks in it does seem to keep working. The problem seems to go away if metacity is chosen as the window manager (obviously this is less than ideal as a lot of kde functionality is disabled and metacity themes often feature very fiddly resize borders).

1 0

wmctrl problems
by Jean-Francois Dagenais 14 Nov '13

14 Nov '13

Hi all, Running x2go server on ubuntu (12.04), and my terminal is a mac running XQuartz (with quartz-wm) and the Qt x2go client. I used the Published apps rootless and spawn a few windows from the server. Things run pretty smoothly and Im happy with the performance. The thing that hurts is related to window management. Heres a relevant output: $ echo $DISPLAY :50 $ wmctrl -l Cannot get client list properties. (_NET_CLIENT_LIST or _WIN_CLIENT_LIST) $ wmctrl -m Cannot get window manager info properties. (_NET_SUPPORTING_WM_CHECK or _WIN_SUPPORTING_WM_CHECK) Whereas if I run the same commands natively on the mac, XQuartz responds correctly to wmctrl. So the problem affects pretty much all tools related to window management I tried. I am no X11 expert, but I am a developer and very familiar with linux systems. Right now I just need a few pointers, any thoughts? Thanks in advance! /jfd

1 0

Re: [X2Go-Dev] Bug#338: gnome no longer working in Ubuntu 13.10
by brian mullan 14 Nov '13

14 Nov '13

With Ubuntu 13.10... *gnome-session-fallback * has been replaced with: *gnome-session-flashback* Gnome Flashback is a session for Gnome 3 which was initially called "Gnome Fallback", and shipped as a stand-alone session in Debian and Ubuntu. It provides a similar user experience to the Gnome 2.x series sessions. It consists of the following components: - GnomePanel - Metacity - GnomeApplets The first release was on 2013-09-25, included in gnome-panel 3.8.0. This is the first release that ships a session descriptor and wrapper script for the "Gnome Flashback" session. This is similar to the standalone fallback session previously shipped in Debian / Ubuntu. As integration with the rest of the Gnome stack has suffered somewhat, this is mainly aimed at distributions that still want to support a metacity / gnome-panel based desktop (e.g. for LTSP installations). Some integration work may be necessary - for example, nautilus 3.8 no longer draws the desktop background icons. Brian

2 1

Bug#338: gnome no longer working in Ubuntu 13.10
by Michael Lipp 14 Nov '13

14 Nov '13

Package: x2goserver Version: 4.0.1.6-0~712~saucy1 After upgrading my server from Ubuntu 13.04 to 13.10, x2go stopped working. All I get now is a blank screen.

2 1

upcoming changes for shadow session names in X2Go Server 4.1.x.y
by Mike Gabriel 13 Nov '13

13 Nov '13

Hi all, I have today made a change to the naming of desktop sharing / shadow sessions in X2Go. Earlier, I already added a script x2golistshadowsessions. Yesterday, I realized that it works for the wrong user. It works for the user who is sharing his/her desktop session. But it actually was intended for the user who requests desktop sharing. Note that x2golistshadowsessions is only used from PyHoca-GUI's desktop sharing feature. The x2golistshadowsessions command is not available in x2goserver below version 4.1.0.0. Today then, I wrote a patch for X2Go Server (x2goserver.git, master branch) that changes the session names of desktop sharing sessions. Until now: ---------- <shadowed-user>-<dpl>-<tstamp>_stS0XSHAD<shadow-user>XSHADPP<shadow-display>_dp<depth> From now on: ------------ <shadow-requesting-user>-<dpl>-<tstamp>_stS0XSHAD<shadow-user>XSHADPP<shadowed-display>_dp<depth> With this change x2golistshadowsessions shows shadow sessions to the user who requested the shadow session. This fixes crashing desktop sharing sessions in PyHoca-GUI, btw. It also transparently works with X2Go Client. Feedback? Comments? Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 1

SupeReNicer support for X2Go Server 4.1.0.0-preview
by Mike Gabriel 13 Nov '13

13 Nov '13

Hi all, the 4.1.0.0-preview (x2goserver.git master) just received a code patch from Guangzhou Nianguan Electronics Technology Co.Ltd, an open source company in Asia that plans to use X2Go for school setups in areas where electricity is a rare resource. They plan to build cost-effective and energy-effective embedded thin clients running X2Go. The patch we received adds a feature to X2Go Server called SupeReNicer [1] and it is a tool that hooks into x2gocleansessions. It renices suspended sessions to nice level 19 and renices them again to nice level 0 once they change there status from suspended to running. See the new x2goserver.conf template for configuration hints [2]. Happy testing! Mike [1] http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=9ae866256d908d9… [2] http://code.x2go.org/gitweb?p=x2goserver.git;a=blob;f=x2goserver-common/etc… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

5 10

Bug#339: nxcomp: Android patch
by Mike Gabriel 12 Nov '13

12 Nov '13

Package: libxcomp3 Severity: wishlist Version: 3.5.0.21 The QVD project ships an Android patch for nxcomp [1]. We should evaluate that patch and possibly apply it to nx-libs. Mike [1] https://github.com/theqvd/theqvd/blob/master/nx/nxcomp-3.5.0-android.patch -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

1 0

Heads Up for browser-plugin devs
by Stefan Baur 08 Nov '13

08 Nov '13

Hi, not sure if everyone is reading slashdot, so http://slashdot.org/stories/gateone might be worth a visit. This fellow coded a SSH terminal emulator in HTML5/JavaScript and is adding X11 support as well. -Stefan

4 4

Bug#337: nxcomp doesn't compile against libc++ STL
by Clemens Lang 05 Nov '13

05 Nov '13

Package: nx-libs Version: 3.5.0.21 The nx-libs-lite package does not compile on OS X Mavericks because Apple's clang compilers now default to compiling against the libc++ STL rather than (their outdated copy of) libstdc++. While the compiler still allows changing that, we should not rely on this being possible forever. The compiler chokes in Types.h, specifically the clear() methods in subclasses of vectors that use implementation details of the GNU STL. The attached patch fixes these compilation issues by not overriding the clear() method when compiling against libc++, since the libc++ headers seem to do essentially the same as the overriden method. HTH, -- Clemens Lang MacPorts Developer

1 0

Bug#323: 323 bug
by Eric Forgeot 01 Nov '13

01 Nov '13

Hello, I have this problem as well. version 4.0.1.1 for the client version 4.0.1.6 for the server on linuxmint 15. All packages coming from the ppa:x2go/stable I tried this: 1/ sudo rm -f /var/lib/x2go/x2go_sessions sudo x2godbadmin --createdb 2/ creating a new ssh user on the server, and trying to connect with this new one. x2go detected the /home/my_new_user folder was missing, and when I created it, x2go refused to connect any longer. 3/ editing / renaming ~/.ssh/known_hosts from the client side (according to http://john.wesorick.com/2011/11/issues-installing-x2go.html I also commented the "HostKey /etc/ssh/ssh_host_ecdsa_key" in my sshd_config on the server) none of them worked. I also renamed the ~/.x2go/ ~/.x2goclient/ folders in my home I can barely copy the output from the error window ( it hides itself too quickly and can't find a way to get it from elsewhere) : Starting session at 'Fri Nov 1 13:28:55 2013'. Info: Connecting to remote host 'localhost:31004'. Info: Connection to remote proxy 'localhost:31004' established. Error: The remote NX proxy closed the connection. Error: Failure negotiating the session in stage '7'. Error: Wrong version or invalid session authentication cookie. Session: Terminating session at 'Fri Nov 1 13:28:56 2013'. Session: Session terminated at 'Fri Nov 1 13:28:56 2013'. (I don't understand why it tries to connect to localhost) My log in ~/.x2go/S-mylogin-50-1383308923_stDLXDE_dp24/sessions says: Loop: PANIC! The remote NX proxy closed the connection. Loop: PANIC! Failure negotiating the session in stage '7'. Loop: PANIC! Wrong version or invalid session authentication cookie. x2go worked perfectly before, I can't trace when it stopped working but it's probably after some package updates.

1 0

Bug#316: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 30 Oct '13

30 Oct '13

tag #316 pending fixed #316 4.0.1.2 thanks Hello, X2Go issue #316 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=24561cc The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 24561ccdeb367345797ead5db7ad5305b962135d Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Wed Oct 30 12:10:17 2013 +0100 New option --tray-icon. Force showing the tray icon, even for hidden sessions. Also allow creation of .desktop files with --tray-icon optionally being enabled. (Fixes: #316). diff --git a/debian/changelog b/debian/changelog index 09fc5e0..a772355 100644 --- a/debian/changelog +++ b/debian/changelog @@ -20,6 +20,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low * New upstream versino (4.0.1.2): - Strip whitespaces off of user name, host name and other strings when loading / saving session profiles.(Fixes: #315). + - New option --tray-icon. Force showing the tray icon, even for + hidden sessions. Also allow creation of .desktop files with + --tray-icon optionally being enabled. (Fixes: #316). [ Oleksandr Shneyder ] * New upstream version (4.0.1.2):

2 1

Bug#316: Can't see session icon in shadow sessions
by Ricardo Díaz Martín 30 Oct '13

30 Oct '13

Package: x2goclient Version: 4.1.0 Tag: patch When you launch a session using .desktop file (session saved as a launcher in the desktop) you can't see the tray icon though you choose this option in x2go settings Attaching patch to solve this issue.

3 7

Bug#335: X2Go issue (in src:python-x2go) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #335 pending fixed #335 0.4.0.9 thanks Hello, X2Go issue #335 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=5b8164d The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 5b8164de3596bd79e89de18e574252b2730b0916 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 18:36:06 2013 +0100 Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow data injections via ~/.*shrc files. (Fixes: #335). diff --git a/debian/changelog b/debian/changelog index eb4b587..cee5b48 100644 --- a/debian/changelog +++ b/debian/changelog @@ -19,6 +19,8 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Implement two-factor authentication. - Compat fix in _paramiko monkey patch module to also work with early Paramiko versions. + - Handle echoing ~/.*shrc files gracefully via SSH client connections. Do not allow + data injections via ~/.*shrc files. (Fixes: #335). [ Orion Poplawski ] * debian/control:

2 1

Bug#322: RDP connection through SSH proxy: Unable to execute: rdesktop
by Mathias Ewald 29 Oct '13

29 Oct '13

Package: x2goclient Version: 4.0.1.1-0 x2goclient session configuration: [20131009111725764] speed=2 pack=16m-jpeg quality=9 fstunnel=true export= iconvto=UTF-8 iconvfrom=ISO8859-1 useiconv=false fullscreen=false multidisp=false display=1 maxdim=false rdpclient=rdesktop directrdpsettings= width=800 height=600 dpi=86 setdpi=true xinerama=false usekbd=true layout=us type=pc105/us sound=false soundsystem=pulse startsoundsystem=true soundtunnel=true defsndport=true sndport=4713 print=false name=windows rdp test icon=:icons/128x128/x2gosession.png host=PUBLIC_IP user=mathias key= rdpport=3389 sshport=22 autologin=false krblogin=false directrdp=false rootless=false published=false applications=WWWBROWSER, MAILCLIENT, OFFICE, TERMINAL command=RDP rdpoptions= rdpserver=PRIVATE_IP xdmcpserver=localhost usesshproxy=true sshproxytype=SSH sshproxyuser=mathias sshproxykeyfile= sshproxyhost=PUBLIC_IP sshproxyport=22 sshproxysamepass=false sshproxysameuser=false sshproxyautologin=true uniquehostkeyaliases=0 setsessiontitle=0 sessiontitle= autostart=0 forwardsshagent=0 mimeboxaction=OPEN variant= mimeboxextensions= autoconnect=0 useexports=1 restoreexports=0 usemimebox=0 x2go client error message in GUI: "Unable to execute: rdesktop -g 800x600 PRIVATE_IP" but rdesktop is there: mathias@x220:~$ dpkg -l | grep rdesktop ii rdesktop 1.7.1-1 amd64 RDP client for Windows NT/2000 Terminal Server and Windows Servers mathias@x220:~$ which rdesktop /usr/bin/rdesktop mathias@x220:~$ x2go client debug output: mathias@x220:~$ x2goclient --debug x2go-INFO-1> "Starting x2goclient..." x2go-WARNING-1> "Can't load translator: :/x2goclient_en_us" x2go-WARNING-2> "Can't load translator: :/qt_en_US" x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:1133> Plugging apps in tray. x2go-INFO-3> "Started x2goclient." x2go-DEBUG-../onmainwindow.cpp:464> "$HOME=/home/mathias" x2go-DEBUG-../onmainwindow.cpp:2160> Reading 5 sessions from config file. x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-INFO-8> "Starting connection to server: 88.198.244.99:22" x2go-DEBUG-../onmainwindow.cpp:2796> Start new ssh connection to server:"88.198.244.99":"22" krbLogin: false x2go-DEBUG-../onmainwindow.cpp:2891> SSH connection established. x2go-DEBUG-../onmainwindow.cpp:3117> Continue normal x2go session x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:3940> Executing remote command: "X2GODPI=86 x2gostartagent 800x600 adsl 16m-jpeg-9 unix-kde-depth_24 us pc105/us 1 R RDP" x2go-DEBUG-../onmainwindow.cpp:4707> Agent output: "53 bf5828ddcf1e1409b3109a596ef1115a 8154 mathias-53-1381656965_stRRDP_dp24 30001 30002 30003 " x2go-DEBUG-../onmainwindow.cpp:5272> "Starting NX proxy, command: nxproxy -S nx/nx,options=/home/mathias/.x2go/S-mathias-53-1381656965_stRRDP_dp24/options:53" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: " NXPROXY - Version 3.5.0 Copyright (C) 2001, 2010 NoMachine. See http://www.nomachine.com/ for more information. Info: Proxy running in client mode with pid '2723'. Session: Starting session at 'Sun Oct 13 10:58:47 2013'. Info: Connecting to remote host 'localhost:31001'. Info: Connection to remote proxy 'localhost:31001' established. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Connection with remote proxy completed. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Warning: Unrecognized session type 'unix-kde-depth_24'. Assuming agent session. Info: Using ADSL link parameters 512/24/1/0. Info: Using cache parameters 4/4096KB/8192KB/8192KB. Info: Using pack method '16m-jpeg-9' with session 'unix-kde-depth_24'. Info: Using ZLIB data compression 1/1/32. Info: Using ZLIB stream compression 4/4. Info: No suitable cache file found. Info: Forwarding X11 connections to display ':0'. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Session started at 'Sun Oct 13 10:58:48 2013'. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Established X server connection. " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Info: Using shared memory parameters 1/2048K. " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Terminating session at 'Sun Oct 13 10:58:49 2013'. Info: Your session was closed before reaching a usable state. Info: This can be due to the local X server refusing access to the client. Info: Please check authorization provided by the remote X application. " x2go-DEBUG-../onmainwindow.cpp:5532> Proxy wrote on stderr: "Session: Session terminated at 'Sun Oct 13 10:58:49 2013'. " x2go-DEBUG-../onmainwindow.cpp:5400> Deleting Proxy. x2go-DEBUG-../onmainwindow.cpp:5449> Waiting for proxy to exit. x2go-DEBUG-../onmainwindow.cpp:5469> Checking exit status. x2go-DEBUG-../onmainwindow.cpp:5520> Finished Proxy. x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:8578> "Command Message: X2GORUNCOMMAND ERR NOEXEC:rdesktop -g 800x600 10.173.20.13 " x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:11252> "Searching window with title: X2GO-mathias-53-1381656965_stRRDP_dp24" x2go-DEBUG-../onmainwindow.cpp:9762> "Searching proxy win: X2GO-mathias-53-1381656965_stRRDP_dp24" ... cheers Mathias

3 4

Bug#332: RPM issue of the OSBD queues
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #332 rpm-packages thanks Hi Jan, can you take a look at issue #332 in X2Go BTS. Obviously, you should add something to the RPM package's init script of X2Go Server that resembles this [1]. Thanks, Mike [1] http://code.x2go.org/gitweb?p=x2goserver.git;a=blobdiff;f=debian/x2goserver… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

4 9

Bug#311: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #311 pending fixed #311 4.0.1.2 thanks Hello, X2Go issue #311 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=1a4504a The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 1a4504aefb145446c9011fb34743aa8535db3b7b Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 16:39:43 2013 +0100 Add option --broker-cacertfile. Allow usage of non-system-wide installed (self-signed) SSL certificate chains for https (SSL) session broker connections. (Fixes: #311). diff --git a/debian/changelog b/debian/changelog index e069591..78908d6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -11,6 +11,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low + Perform sanity checks on data that comes in from X2Go Servers. Prohibit the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333). + + Add option --broker-cacertfile. Allow usage of non-system-wide + installed (self-signed) SSL certificate chains for https (SSL) + session broker connections. (Fixes: #311). * Pull-in packaging changes from Debian. [ Ricardo Díaz Martín ]

2 1

Bug#334: Don't allow users to override X2Go commands via ~/bin (or similar)
by Mike Gabriel 29 Oct '13

29 Oct '13

Package: x2goclient Severity: important In X2Go it is currently possible to replace every command in X2Go Server by a command of the same name in ~/bin. An attacker could use this to infiltrate X2Go Client with arbitrary data. IMHO, we should make sure, X2Go Client only uses system-wide paths when evoking commands on X2Go Servers. This, of course, will boycott installing X2Go Server into ~<user> space, but actually, I prefer a safe setup to such custom installation tweaks. Feedback?!? Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 2

Bug#333: Users can inject arbitrary data into X2Go Client via .bashrc
by Mike Gabriel 29 Oct '13

29 Oct '13

Hi All, Dan Halbert made me aware of it being easily possible to inject arbitrary data into X2Go Client via the server-side .bashrc file. This surely is a security problem in X2Go. Thus, I found that we really need to do some sanity checks on incoming output from X2Go Servers to avoid such injections. The idea is to invoke the server-side command with a UUID hash before and after the actuall command invocation: 1. execute server-side command from X2Go Client: ssh <user>@<server> sh -c "echo <uuidhash> && <x2gocmd> && echo <uuidhash> 2. read data from X2Go Server: X2GODATABEGIN:<uuidhash> <x2godata_line1> <x2godata_line2> .... <x2godata_lineN> X2GODATAEND:<uuidhash> 3. cut out the X2Go data returned by the server (in C++): QString begin_marker = "X2GODATABEGIN:"+uuid+"\n"; QString end_marker = "X2GODATAEND:"+uuid+"\n"; int output_begin=stdOutString.indexOf(begin_marker) + \\ begin_marker.length(); int output_end=stdOutString.indexOf(end_marker); output = stdOutString.mid(output_begin, \\ output_end-output_begin); I have a patch locally for this and will commit it in a minute. We can discuss the patch and move on from there when it's there. Unfortunately, this patch does not fix #327 as it is impossible to use scp with echoing .bashrc files. With this patch applied, the session starts, but setting up the SSHfs shares fails with locking up X2Go Client. For people who depend on echoing .bashrc files, please read my last post on #327. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 2

Bug#333: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #333 pending fixed #333 4.0.1.2 thanks Hello, X2Go issue #333 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=c121b7e The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit c121b7e2d3d83abdc2d7a29637bc3294e38b2ec3 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 13:36:58 2013 +0100 Perform sanity checks on data that comes in from X2Go Servers. Prohibit the execution of arbitrary code via the ~/.bashrc file. (Fixes: #333). diff --git a/debian/changelog b/debian/changelog index e484ba5..e069591 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low + Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions). (Fixes: #328). + + Perform sanity checks on data that comes in from X2Go Servers. + Prohibit the execution of arbitrary code via the ~/.bashrc file. + (Fixes: #333). * Pull-in packaging changes from Debian. [ Ricardo Díaz Martín ]

3 3

Bug#327: x2go client crashes if .bashrc prints anything
by Dan Halbert 29 Oct '13

29 Oct '13

Package: x2goclient Version: 4.0.0.3 If I put an echo "testing" # exact text doesn't matter at the top of my .bashrc, then the x2goclient crashes immediately when trying to start a session. (The crash does not occur if I put a similar statement in .bash_login.) I have reproduced this on the Windows client; I believe a colleague saw it on both the Windows and Linux clients. The x2go server being used is 4.0.1.6-0~712~precise1.

3 5

Bug#321: X2Go issue (in src:pyhoca-gui) has been marked as pending for release
by Mike Gabriel 29 Oct '13

29 Oct '13

tag #321 pending fixed #321 0.4.0.9 thanks Hello, X2Go issue #321 (src:pyhoca-gui) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=pyhoca-gui.git;a=commitdiff;h=299bb0e The issue will most likely be fixed in src:pyhoca-gui (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 299bb0ee83d70c6c98cbc834e7d876cdff27d91f Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Tue Oct 29 09:58:24 2013 +0100 Don't crash if no notification-daemon provide is registered in DBUS. (Fixes: #321). diff --git a/debian/changelog b/debian/changelog index 131085e..9abb3f9 100644 --- a/debian/changelog +++ b/debian/changelog @@ -8,6 +8,8 @@ pyhoca-gui (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Support encrypted on SSH proxy whith password authentication on X2Go Server. - Implement two-factor authentication. + - Don't crash if no notification-daemon provide is registered in DBUS. + (Fixes: #321). * /debian/copyright: + Update file. Add entry for file icon2exe.py.

2 1

x2go session broker connect problem
by Ted Barnes 29 Oct '13

29 Oct '13

Hi All: Am trying to get up to speed on x2go session broker, but am having trouble. Any suggestions? When try to connect I get: Error Login failed! Please try again. Along with... broker url: http://xxx.xxx.xxx.xxx/:8080/plain/inifilebroker url:http://xxx.xxxx.xxx.xxx/:8080/plain/inifile or.... broker url:http://user@xxx.xxx.xxx.xxx/cgi-bin/x2gobroker.cfgi As I'm getting started, I'm trying to do this on my LAN (all behind my firewall) without any ssh (longer term I want to see if I can run sessions inside SSL). I've disabled all the iptable rules on my server....and tried various settings in the x2gobroker.conf and x2gobroker-sessionprofiles.conf files which have not really changed the error message but may be the problem (see below). I can connect using the x2go client GUI "the normal way", and the first time I got a window on the client "The server is unknown. Do you trust the host key....", which I assume is x2go dynamically creating a ssh tunnel? This part works fine. However, when I try from the command line with an "x2goclient --broker-..." type of command, I get the Error message. Both client and server are running Debian Squeeze, and on the server I've successively installed: x2gobroker-wsgi apache2 libapache20mod-wsgi x2gobroker-authservice (wasn't sure if I should install this for my initial tests) My x2gobroker.conf: # This file is part of the X2Go Project - http://www.x2go.org # Copyright (C) 2011-2013 by Oleksandr Shneyder <oleksandr.shneyder(a)obviously-nice.de> # Copyright (C) 2011-2013 by Heinz-Markus Graesing <heinz-m.graesing(a)obviously-nice.de> # Copyright (C) 2012-2013 by Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> # # X2Go Session Broker is free software; you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # X2Go Session Broker is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program; if not, write to the # Free Software Foundation, Inc., # 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. ### ### GLOBAL section ### [global] # Allow unauthenticated connections? Then set check-credentials to false. check-credentials = false # To secure server-client communication the client can start the communication # with a pre-set, agreed on authentication ID. Set the below value to true # to make the X2Go Session Broker require this feature #require-cookie-auth = false ### NOT-IN-USE-YET # X2Go supports two different cookie authentication modes (static and dynamic). #use-static-cookie = false ### NOT-IN-USE-YET # Every server-client communication (between X2Go Client and broker) has to be # accompanied by this initial authentication cookie. #my-cookie = <aaaavveeeerrrrryyyyylooonnnnggggssttrrriiinnnggg> ### NOT-IN-USE-YET # X2Go Session Broker knows about two output formats: a text/plain based output # and a text/json based output that is compatible with UCCS. The different outputs # run under different URLs. enable {base_url}/plain/ enable-plain-output = true # enable {base_url}/uccs/ #enable-uccs-output = false # use this URL base to create URL field in UCCS-style JSON output #my-uccs-url-base = http://localhost:8080/ # default authentication mechanism for all broker backends default-auth-mech = pam # how does this X2Go Session Broker instance retrieve user and group # information from the system? (defaults for all broker backends) default-user-db = libnss default-group-db = libnss # on large deployments it is recommended to ignore primary group # memberships traversing into all user accounts for primary group # detection can be quite CPU intensive on the X2Go Broker server. #ignore-primary-group-memberships = true # X2Go session autologin via X2Go Session Broker # # Once authenticated against the session # broker, the user becomes a trusted user. That is, the X2Go session login can # be automatized by a very temporary SSH pub/priv key pair. Prior to the session # login the key is generated, after successful session login, the key is dropped # immediately. # # This option can be overridden by the session profile parameter # broker-session-autologin={true|false} broker-session-autologin=true default-session-autologin=true # X2Go's authorized_keys file for broker mediated autologin sessions # # For the X2Go auto-login via X2Go Session Broker feature to work thoroughly, # the X2Go Session Broker has to place the temporary public SSH key into the # user's home directory. It is not recommended to use SSH's default # authorized_keys file for this but a separate and X2Go-specific authorized_keys # file ($HOME/.x2go/authorized_keys). # # Of course, the SSH daemon has to be made aware of this. This can be configured # in /etc/ssh/sshd_config like this: # # --- /etc/ssh/sshd_config.no-x2go 2013-03-01 09:57:04.000000000 +0100 # +++ /etc/ssh/sshd_config 2013-03-01 09:56:57.000000000 +0100 # @@ -28,7 +28,8 @@ # # RSAAuthentication yes # PubkeyAuthentication yes # AuthorizedKeysFile %h/.ssh/authorized_keys # +AuthorizedKeysFile2 %h/.x2go/authorized_keys # # # Don't read the user's ~/.rhosts and ~/.shosts files # IgnoreRhosts yes # # This option can be overridden by the session profile parameter # broker-authorized-keys=<file-location> #default-authorized-keys=%h/.x2go/authorized_keys # X2Go Broker Agent query mode # # The X2Go Broker Agent is needed for multi-server sites configured for # load balancing. Multi-server sites require a setup that uses the # PostgreSQL X2Go session DB backend. The X2Go Broker Agent has to be installed # on the local system (mode: LOCAL) or on all X2Go Servers (mode: SSH) in a # multi-server farm. # # So, there are three query modes for the X2GO Broker Agent: NONE, LOCAL and # SSH. # # NONE - Try to get along without X2Go Broker Agent queries. For simple # broker setups this may suffice. For load-balancing or reliable # session suspending and resuming the broker agent is a must!!! # # LOCAL - This LOCAL mode only works for _one_ configured multi-server farm. # If this X2Go Session Broker is supposed to serve many different # multi-server farms, then the LOCAL mode will not work!!! # # How it works: Assume that the local system has an X2Go Broker Agent # that knows about the multi-server setup. This means: X2Go Server # has to be installed locally and the X2Go Server has to be # configured to use the multi-server farm's PostgreSQL session DB # backend. # # The local system that is running the broker does not necessarily # have to be a real application server. It only has to be aware of # running/suspended sessions within the X2Go multi-server farm setup. # # A typical use-case is X2Go on top of a Debian Edu Terminal-Server # farm: # # TJENER -> PostgreSQL DB, X2Go Server, X2Go Session Broker + # Broker Agent # TS01 - TS0X -> X2Go Server configured to use the PostgreSQL DB # on TJENER # # SSH - The more generic approach, but also more complex. It allows that # the broker on this system may serve for many different X2Go Server # multi-server setups. # # With the SSH agent query mode, the X2Go Session Broker will query # one of the X2Go Servers in the targeted multi-server setup (through # SSH). The SSH authentication is done by a system user account # (normally UID=x2gobroker) and SSH pub/priv key authentication has # to be configured to make this work. # # All X2Go Servers in a multi-server farm need the X2Go Broker Agent # installed, whereas this local system running the X2Go Session # Broker does not need a local X2Go Broker Agent at all. # # The agent query mode can be configured on a per-broker-backend basis, the # below value is the default. #default-agent-query-mode=LOCAL ### ### BACKEND section ### # Possible X2Go Session Broker backends: # # 1. backend = zeroconf (activated by default) # Use the ZeroConf X2Go Session Broker backend, this backend is for demo only # and only operates on localhost. Make sure you have x2gobroker-daemon and # and x2goserver installed on the same machine. No need to install # x2gobroker-agent. # 2. backend = infile (deactivated by default) # The IniFile X2Go Session Broker backend is for providing session profiles # to multiple users/clients on a text config file basis (.ini file format). # # The session profile setup is accomplished by an extra configuration file, # by default named /etc/x2go/broker/x2gobroker-sessionproiles.conf. # # For small-scale deployments the IniFile backend is the recommended backend. [zeroconf] #enable = true #auth-mech = pam #user-db = libnss #group-db = libnss #desktop-shell = KDE [inifile] enable = true session-profiles = /etc/x2go/broker/x2gobroker-sessionprofiles.conf #[ldap] -> MUSIC OF THE FUTURE #enable = false #auth-mech = ldap #user-db = ldap #group-db = ldap #uri = ldap://localhost:389 #base = dc=example,dc=org #user-search-filter = (&(objectClass=posixAccount)(uid=*)) #host-search-filter = (&(objectClass=ipHost)(serial=X2GoServer)(cn=*)) #group-search-filter = (&(objectClass=posifxGroup)(cn=*)) #starttls = false #agent-query-mode = SSH My x2gobroker-sessionprofiles.conf: ### X2Go Broker Session Profiles - ADAPT TO YOUR NEEDS ### # This whole file reflects a set of examplary X2Go session profiles being # provided via the X2Go Session Broker (backend: iniconf). # This whole file could be the broker setup in some university institute that # runs three server pools (pool-A, pool-B and pool-C). Though most univerities # have real IPv4 internet addresses, we use private subnets in the examples # below. # The X2Go Session Broker is served into the institutes local intranet, the # broker cannot be reached from the internet directly. # The first section [DEFAULTS] provides a set of default profile settings that # are common to all session profiles given in sections below. # The other section names can be freely chosen, however, each section name has # to be unique within this file. # IMPORTANT: in the session profiles below you will find some lines starting # with acl-... These lines do neither protect the X2Go Session Broker nor # your X2Go Servers. They simply allow for selective session profile provision # based on client address, user name and group memberships. # # For protecting the broker use iptables and ip6tables. For protecting your # X2Go Servers use iptable+ip6tables and a tightened PAM configuration (e.g. # pam_access.so). Securing X2Go Servers means securing the SSH daemon that # runs on the X2Go Server. [DEFAULT] command=TERMINAL defsndport=true useiconv=false iconvfrom=UTF-8 height=600 export= quality=9 fullscreen=false layout= useexports=true width=800 speed=2 soundsystem=pulse print=true type=auto sndport=4713 xinerama=true variant= usekbd=true fstunnel=true applications=TERMINAL,WWWBROWSER,MAILCLIENT,OFFICE multidisp=false sshproxyport=22 sound=true rootless=false iconvto=UTF-8 soundtunnel=true dpi=96 sshport=22 setdpi=0 pack=16m-jpeg directrdp=false [GNOME] user=xxx host=xxx.xxx.xxx.xxx name=GNOME command=GNOME rootless=false acl-users-allow=xxx acl-groups-allow=gnome-users,admins acl-groups-deny=ALL acl-any-order=deny-allow broker-session-autologin=true

2 1

Re: [X2Go-Dev] X2Go-Dev Digest, Vol 58, Issue 16
by Madog 24 Oct '13

24 Oct '13

Thanks Mike (!) - that did the trick... On Oct 24, 2013, at 6:00 AM, x2go-dev-request(a)lists.berlios.de wrote: > Send X2Go-Dev mailing list submissions to > x2go-dev(a)lists.berlios.de > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.berlios.de/mailman/listinfo/x2go-dev > or, via email, send a message with subject or body 'help' to > x2go-dev-request(a)lists.berlios.de > > You can reach the person managing the list at > x2go-dev-owner(a)lists.berlios.de > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of X2Go-Dev digest..." > > > Today's Topics: > > 1. Bug#331: Default umask when mounting sshfs tunnel (Helmer Teles) > 2. x2go session broker & apache (Ted Barnes) > 3. Re: x2go session broker & apache (Mike Gabriel) > 4. X2Goclient portable (Tobias Luther | X2Go-Community.org) > 5. Re: X2Goclient portable (Stefan Baur) > 6. Processed: X2Go issue (in src:x2goserver) has been marked as > pending for release (X2Go Bug Tracking System) > 7. Bug#331: X2Go issue (in src:x2goserver) has been marked as > pending for release (Mike Gabriel) > 8. Re: client inconsistencies when resizing GNOME sessions > (Mike Gabriel) > 9. Bug#330: X2Go issue (in src:python-x2go) has been marked as > pending for release (Mike Gabriel) > 10. Bug#329: X2Go issue (in src:python-x2go) has been marked as > pending for release (Mike Gabriel) > 11. Processed: X2Go issue (in src:python-x2go) has been marked as > pending for release (X2Go Bug Tracking System) > 12. Processed: X2Go issue (in src:python-x2go) has been marked as > pending for release (X2Go Bug Tracking System) > 13. Bug#328: X2Go issue (in src:x2goclient) has been marked as > pending for release (Mike Gabriel) > 14. Processed: X2Go issue (in src:x2goclient) has been marked as > pending for release (X2Go Bug Tracking System) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 23 Oct 2013 13:44:47 +0100 > From: Helmer Teles <helmer.teles(a)mykolab.com> > To: submit(a)bugs.x2go.org > Subject: [X2Go-Dev] Bug#331: Default umask when mounting sshfs tunnel > Message-ID: <1456688.sWGnl1COIA@zen-touch> > Content-Type: text/plain; charset="iso-8859-1" > > Package: x2goserver > Version: 4.0.1.6-0~712~precise1 > Tag: Patch > > Hello dear mates. > > > Just had a problem that when a user moves or copy a file from the mounted sshfs dir to > a shared directory on the x2goserver, if this is a shared folder for a group with > respective ACL's we've got a problem with the final permissions. > > > The easy way to solve this is to change the x2gomountdirs to include the umask param. > > > Also included is the modification required at /etc/x2goserver.conf > If stay uncommented the umask will stay as is on the server side ( client local computer > ) and the value provided ( 0117 ) will make all files to be with rw-rw---- > > > P.S: As i don't have the original x2goserver.conf don't apply the diff as is, but use it as > reference please. > > > the diff's are attached as Mr. Michael kindly asked. > > > Best regards, > > > -- > Com os melhores cumprimentos. > Helmer Teles > > http://hteles.wordpress.com[1] > > "Sent from my Linux Device" > Please don't send me proprietary file formats, use ISO standard ODF instead (ISO/IEC > 26300) > > > > -------- > [1] http://hteles.wordpress.com/ >

1 0

Bug#328: X2Go issue (in src:x2goclient) has been marked as pending for release
by Mike Gabriel 24 Oct '13

24 Oct '13

tag #328 pending fixed #328 4.0.1.2 thanks Hello, X2Go issue #328 (src:x2goclient) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=cf33d55 The issue will most likely be fixed in src:x2goclient (4.0.1.2). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit cf33d551c21c86c7ea654914930550b0fd0b2c79 Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Date: Thu Oct 24 10:10:53 2013 +0200 Store broker HTTPS certificate exceptions in $HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions). (Fixes: #328). diff --git a/debian/changelog b/debian/changelog index 05b5189..e484ba5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -5,6 +5,9 @@ x2goclient (4.0.1.2-0~x2go2) UNRELEASED; urgency=low + Provide Keywords: key in .desktop file. + Add NSIS packaging files for win32 builds to source tree. (Files provided by Oleksandr Shneyder, thanks!!!). + + Store broker HTTPS certificate exceptions in + $HOME/.x2go/ssl/exceptions (before: $HOME/ssl/exceptions). + (Fixes: #328). * Pull-in packaging changes from Debian. [ Ricardo Díaz Martín ]

2 1

Bug#329: X2Go issue (in src:python-x2go) has been marked as pending for release
by Mike Gabriel 24 Oct '13

24 Oct '13

tag #329 pending fixed #329 0.4.0.9 thanks Hello, X2Go issue #329 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=6bc5020 The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 6bc50204f851133b284e8f3ba388101118fae2f9 Author: Orion Poplawski <orion(a)cora.nwra.com> Date: Thu Oct 24 09:54:59 2013 +0200 debian/control: Drop python-cups from Depends: field. Python CUPS is no dependency if Python X2Go. (Fixes: #329). diff --git a/debian/changelog b/debian/changelog index de471fb..ac9dc1e 100644 --- a/debian/changelog +++ b/debian/changelog @@ -17,6 +17,11 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Rewrite passwords that are not string/unicode to an empty string. - No Unicode chars in log messages. Eliminated one more in checkhosts.py. + [ Orion Poplawski ] + * debian/control: + + Drop python-cups from Depends: field. Python CUPS is no dependency if + Python X2Go. (Fixes: #329). + [ Kenneth Pedersen ] * New upstream version (0.4.0.9): - Color depth detection: Stop using win32api.GetSystemMetrics(2) which actually

2 1

Bug#330: X2Go issue (in src:python-x2go) has been marked as pending for release
by Mike Gabriel 24 Oct '13

24 Oct '13

tag #330 pending fixed #330 0.4.0.9 thanks Hello, X2Go issue #330 (src:python-x2go) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=python-x2go.git;a=commitdiff;h=732635e The issue will most likely be fixed in src:python-x2go (0.4.0.9). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit 732635efb177910d23b544d2e05e09559c8af5ff Author: Kenneth Pedersen <kenneth(a)wangpedersen.com> Date: Thu Oct 24 09:50:00 2013 +0200 Color depth detection: Stop using win32api.GetSystemMetrics(2) which actually returns the width of a vertical scroll bar in pixels. Instead, create a screen display context and query it for the color depth. (Fixes: #330). diff --git a/debian/changelog b/debian/changelog index 8c6ee9e..de471fb 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,5 +1,6 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low + [ Mike Gabriel ] * New upstream version (0.4.0.9): - Agent channels in Paramiko can raise an EOFError if the connection has got disrupted. Ignoring this. @@ -16,6 +17,12 @@ python-x2go (0.4.0.9-0~x2go1) UNRELEASED; urgency=low - Rewrite passwords that are not string/unicode to an empty string. - No Unicode chars in log messages. Eliminated one more in checkhosts.py. + [ Kenneth Pedersen ] + * New upstream version (0.4.0.9): + - Color depth detection: Stop using win32api.GetSystemMetrics(2) which actually + returns the width of a vertical scroll bar in pixels. Instead, create a screen + display context and query it for the color depth. (Fixes: #330). + -- Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> Wed, 07 Aug 2013 12:18:46 +0200 python-x2go (0.4.0.8-0~x2go1) unstable; urgency=low

2 1

client inconsistencies when resizing GNOME sessions
by Pedro Pinto 24 Oct '13

24 Oct '13

Hi Guys, I've found some inconsistent X2GO client behaviour, and was hoping someone could shed some light. In short, it seems that the C++ x2goclient for Mac is able to handle "session resizing" correctly, but Pyhoca-GUI for Linux isn't, even though they are configured with exaclty the same session parameters. Specifically: --- when I start a GNOME-fallback session using the Pyhoca-GUI for Linux, the remote desktop appears with a "constant geometry", where resizing the local session window simply crops the view of the remote GNOME-fallback desktop. -- on the other hand, using the C++ x2go client for Mac, I can successfuly resize the local session window, and the remote GNOME-fallback desktop also resizes automatically. -- strangely, I can get Pyhoca-GUI to *also* resize properly if I do the following: 1) Start a GNOME-fallback session with the C++ x2goclient for Mac, then suspend the session. 2) Use Pyhoca-GUI for linux to resume the session in 1). Then, Pyhoca-GUI is able to handle session resizing properly, ie, resizing the local session window will resize the remote GNOME desktop. This last point suggests that the resizing issue is not a GNOME bug, but an issue with the X2GO client. Also, let me mention how this relates to the bug in http://bugs.x2go.org/42. Using the C++ x2goclient for Mac, I verified that this happens: o with GNOME3 the window appears in the expected size and then gets resized from inside the starting up GNOME3 session but these don't: o I can manually resize the window afterwards via the client-side window manager (play with your mouse on the window borders...) o Still, the desktop shell inside does not adapt its size On the contrary, the C++ X2goclient is able to perform the auto-resizing correctly. Versions that I'm using: -- C++ X2goclient for Mac, version 4.0.1.0 -- Pyhoca GUI for Linux, version 0.4.0.8 -- x2goagent: 3.5.0.20 -- x2goserver: 4.0.1.6 -- x2goserver-extensions: 4.0.1.6 -- x2goserver-pyhoca: 4.0.1.6 -- x2goserver-xsession: 4.0.1.6 A last, related question that perhaps someone can point me in the right direction: I'd like to implement a "stretch/compress" resizing behaviour, where: --- the resolution of the remote GNOME-fallback session is always constant (say 1280x720). --- when the user resizes the local session window, it does *not* modify the resolution of the remote GNOME-fallback session, but simply distorts it (stretch/compress) so that it fits the window exactly. Is this possible at all? If so, where should I start looking to implement this feature? Many thanks, Pedro

2 1

Bug#331: X2Go issue (in src:x2goserver) has been marked as pending for release
by Mike Gabriel 24 Oct '13

24 Oct '13

tag #331 pending fixed #331 4.0.1.7 thanks Hello, X2Go issue #331 (src:x2goserver) reported by you has been fixed in X2Go Git. You can see the changelog below, and you can check the diff of the fix at: http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=c3be1cd The issue will most likely be fixed in src:x2goserver (4.0.1.7). light+love X2Go Git Admin (on behalf of the sender of this mail) --- commit c3be1cdb1145b0d6ebdc27f0aa1c2b8564f0000b Author: Helmer Teles <helmer.teles(a)mykolab.com> Date: Thu Oct 24 08:59:26 2013 +0200 Make umask that is used when mounting client-side folders via SSHFS configurable in x2goserver.conf. (Fixes: #331). diff --git a/debian/changelog b/debian/changelog index 46354a8..d40a494 100644 --- a/debian/changelog +++ b/debian/changelog @@ -24,6 +24,11 @@ x2goserver (4.0.1.7-0~x2go1) UNRELEASED; urgency=low - Move xfonts-base from Recommends: field to Depends: field (bin:package x2goserver). + [ Helmer Teles ] + * New upstream version (4.0.1.7): + - Make umask that is used when mounting client-side folders via SSHFS + configurable in x2goserver.conf. (Fixes: #331). + [ Jürgen Hötzel ] * New upstream version (4.0.1.7): - Use bash-builtin 'type' instead of to be avoided 'which'. (Fixes: #305).

2 1

X2Goclient portable
by Tobias Luther | X2Go-Community.org 23 Oct '13

23 Oct '13

Hi, I got a question @ the forum I cannot answer. Does anybody know what to answer to this question? Thank you, Tobias ============================================= Hallo, Currently I'm spending some time to create a portable X2GO client for Windows with software-virtualization tools (thinapp, cameyo). Unfortuneatly I haven't been successfull until now. Has anybody tried the same thing and had more success than me? It would be very cool to have just an executable of the x2GO client without the need for an installation. Best regards, Fabian

2 1

x2go session broker & apache
by Ted Barnes 23 Oct '13

23 Oct '13

Hi All: Am experimenting with x2go session broker (am running it in a virtual machine). All in all, I plan to try to run my x2go sessions through an SSL connection to avoid having to manage SSH keys. Because I anticipate a more complicated setup, am trying the "wsgi" option. Installed just fine (apt-get install x2gobroker-wsgi). The documentation mentions using Apache along side (http://wiki.x2go.org/doku.php/doc:installation:x2gobroker: " With Apache2+WSGI...), so I tried to install apache2 but get the following type of error: Starting web server: apache2 Syntax error on line 7 of /etc/apache2/conf.d/x2gobroker-wsgi: Invalid command 'WSGIDaemonProcess', perhaps misspelled or defined by a module not included in the server configuration Action 'start' failed. The Apache error log may have more information. failed! Should I not be trying to install Apache (this is a fresh VM, so apache was not previously installed), or is there some other install or setting I should have done? Thanks!

2 1

Bug#331: Default umask when mounting sshfs tunnel
by Helmer Teles 23 Oct '13

23 Oct '13

Package: x2goserver Version: 4.0.1.6-0~712~precise1 Tag: Patch Hello dear mates. Just had a problem that when a user moves or copy a file from the mounted sshfs dir to a shared directory on the x2goserver, if this is a shared folder for a group with respective ACL's we've got a problem with the final permissions. The easy way to solve this is to change the x2gomountdirs to include the umask param. Also included is the modification required at /etc/x2goserver.conf If stay uncommented the umask will stay as is on the server side ( client local computer ) and the value provided ( 0117 ) will make all files to be with rw-rw---- P.S: As i don't have the original x2goserver.conf don't apply the diff as is, but use it as reference please. the diff's are attached as Mr. Michael kindly asked. Best regards, -- Com os melhores cumprimentos. Helmer Teles http://hteles.wordpress.com[1] "Sent from my Linux Device" Please don't send me proprietary file formats, use ISO standard ODF instead (ISO/IEC 26300) -------- [1] http://hteles.wordpress.com/

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev