On Japsand, which Jenkins builds on, I updated the mock files
(/etc/mock/*.cfg) for Fedora Rawhide to their mock 1.2.7-1 versions:
https://apps.fedoraproject.org/packages/mock/changelog/
One of the differences is that the rawhide RPMs now have "fc23"
instead of "fc22" in their names.
I started rebuilding the Rawhide packages through the Jenkins WebGUI.
I intend to finish doing so tonight.
-Mike#2
As Ionic stated in IRC adding -nopersistent to x2goagent.options stops
the shortkey ctrl+alt+r from suspending the session after switching the
resize-mode
But by adding this option i am no longer able to suspend my session even
with the 'x2gosuspend-session'-command
--
Kind regards
Florian Wicke
Hetzner Online AG
Industriestr. 25
91710 Gunzenhausen / Germany
Tel: +49 9831 505-0
Fax: +49 9831 505-3
florian.wicke(a)hetzner.de
www.hetzner.com
Register Court: Registergericht Ansbach, HRB 3204
Management Board: Dipl. Ing. (FH) Martin Hetzner
Chairwoman of the Supervisory Board: Diana Rothhan
tag #686 pending
fixed #686 0.0.3.0
thanks
Hello,
X2Go issue #686 (src:x2gobroker) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=f7e9e1e
The issue will most likely be fixed in src:x2gobroker (0.0.3.0).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit f7e9e1edf659473e4917d6c0649c6a432fb73c3d
Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de>
Date: Tue Mar 31 06:04:25 2015 +0200
add closure for #686
diff --git a/debian/changelog b/debian/changelog
index d13ad72..df87b67 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -233,7 +233,7 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low
- Makefile: Add installation rules for x2gobroker-loadchecker.
- x2gobroker.1: Since systemd there are not only init scripts. Rephrasing
man page.
- - New feature: x2gobroker-loadchecker daemon.
+ - New feature: x2gobroker-loadchecker daemon. (Fixes: #686).
- x2gobroker-agent.pl: Use var name server_usage instead of server_load.
Reflects better what that var denotes.
- agent.py: Completion of several __doc__ strings (missing @return:,
tag #685 pending
fixed #685 0.0.3.0
thanks
Hello,
X2Go issue #685 (src:x2gobroker) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=7b98c05
The issue will most likely be fixed in src:x2gobroker (0.0.3.0).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit 7b98c0514eaae794ce5880f86bab12f3a2bf9766
Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de>
Date: Tue Mar 31 06:00:59 2015 +0200
Provide x2gobroker system user public keys to broker agents with SSH options--strongly restricting the key usage--now. Modify x2gobroker- pubkeyauthorizer in a way that it replaces non-option keys with the newly provided optionized/restricted pubkeys. (Fixes: #685).
diff --git a/debian/changelog b/debian/changelog
index a0640e5..d13ad72 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -285,6 +285,10 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low
hand-back the system's hostname to X2Go Client / Python X2Go.
- Add security notice / disclaimer to x2gbroker.1 man page as suggested
by Stefan Baur. (Fixes: #666).
+ - Provide x2gobroker system user public keys to broker agents with SSH
+ options--strongly restricting the key usage--now. Modify x2gobroker-
+ pubkeyauthorizer in a way that it replaces non-option keys with the
+ newly provided optionized/restricted pubkeys. (Fixes: #685).
* debian/control:
+ Provide separate bin:package for SSH brokerage: x2gobroker-ssh.
+ Replace LDAP support with session brokerage support in LONG_DESCRIPTION.
tag #666 pending
fixed #666 0.0.3.0
thanks
Hello,
X2Go issue #666 (src:x2gobroker) reported by you has been
fixed in X2Go Git. You can see the changelog below, and you can
check the diff of the fix at:
http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=6652693
The issue will most likely be fixed in src:x2gobroker (0.0.3.0).
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
commit 6652693c1fe47dbc53f84db84fab34f70485951a
Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de>
Date: Mon Mar 30 16:57:56 2015 +0200
Add security notice / disclaimer to x2gbroker.1 man page as suggested by Stefan Baur. (Fixes: #666).
diff --git a/debian/changelog b/debian/changelog
index 8ac74a1..a0640e5 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -283,6 +283,8 @@ x2gobroker (0.0.3.0-0x2go1) UNRELEASED; urgency=low
- man pages: Update date.
- If non-load-balanced session profiles reference a non-reachable host,
hand-back the system's hostname to X2Go Client / Python X2Go.
+ - Add security notice / disclaimer to x2gbroker.1 man page as suggested
+ by Stefan Baur. (Fixes: #666).
* debian/control:
+ Provide separate bin:package for SSH brokerage: x2gobroker-ssh.
+ Replace LDAP support with session brokerage support in LONG_DESCRIPTION.
Dear all,
within the last week I have been working on X2Go Session Broker a bit
more, pushing it towards release 0.0.3.0.
One feature, that was still missing, was a means to perform load
checks on associated load-balanced X2Go servers, so that a real "load"
balancing could take place.
Until last week, server load was detected by only counting the number
of running / suspended X2Go sessions. If you have users that are
working hard on an X2Go server, then the number of sessions is a very
inaccurate way of detecting server load.
So now, we count X2Go sessions plus detect a couple of server metrics
(via a background daemon, aka x2gobroker-loadchecker). All gathered
information will be combined into a load-factor. The load-factor and
the number of running/suspended sessions, will decide on what host the
next new X2Go session will be started.
Quick install for testing the new feature (from the nightly builds, of couse):
Debian:
apt-get install x2gobroker # will update your x2gobroker packages
apt-get install x2gobroker-loadchecker
-> make sure x2gobroker-loadchecker starts via your init system
edit /etc/x2go/x2gobroker.conf, set use-load-checker for inifile
broker backend
-> make sure, you have at least one session profile setup in
/etc/x2go/broker/x2gobroker-sessionprofiles.conf that uses more than
one host
-> make sure, that you use "broker-agent-query-mode = SSH" for this
session profile.
-> for the fully-featured show, enable X2GOBROKER_DEBUG in
/etc/x2go/broker/defaults.conf
Now watch /var/log/x2gobroker/loadchecker.log and
/var/log/x2gobroker/broker.log for system load information.
I'd be happy to receive some test results within the next couple of
days/2-weeks. The 0.0.3.0 release is heavily overdue and I would like
to finalize this version by the beginning of April.
Thanks+Greets,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Package: x2goclient
Version: 4.0.4.0
Severity: minor
This mail's subject says it all: QAction::eventFilter: Ambiguous
shortcut overload: Ctrl+Q.
When hitting Ctrl+Q in X2Go Client, I would expect X2Go Client to
close. However, it only throws the above message on the underlying
terminal if launched from one.
Greets,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Package: x2goclient
Severity: important
Version: 4.0.4.0
If brokerage with autologin is in use (a very common broker setup),
the current client<->broker communication design in X2Go Client is
that the broker creates a SSH pubkey/privkey pair and transmits the
private key to the client.
Never should we transmit private key files over the wire!!!
The X2Go Session Broker is already able to accept pubkey files from
the client side and deploy those pubkeys appropriately. In Python
X2Go, this is already used.
X2Go Client should switch here: create pubkey/privkey pair on
client-side, push the pubkey to the broker and have it temporarily
deployed from there to the X2Go Server where the next session login is
scheduled by the broker.
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Package: x2goclient
Version: 4.0.4.0
Severity: minor
With brokerage enabled, the broker can mediate an autologin mechanism
from X2Go Client to a given (brokeraged) server.
The mechanism is this:
o broker deploys a public key in ~/.x2go/authorized_keys on
X2Go Server
o X2Go Client receives the corresponding private key
o (the above is already flawed, no private keys should be sent
over networks, I will file another bug for that)
o in SSHd, the ~/.x2go/authorized_keys must be configured as
potential place for authorized_keys file
If the last step is forgotten, SSH authentication with X2Go Client
against the X2Go Server fails.
If that fails, my expectation would be a fall-back to username /
password authentication.
But what happens, is: X2Go Client "gets stuck" in the session startup
procedure (it's not a real freeze), it does not return to the login
dialog widget anymore. Options remaining: closing X2Go Client and
reopening.
I stumbled over this because of a configuration in SSH daemon on one
of my test boxes.
Mike
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Hi Jan,
The following patch will probably interest you, because it fixes the
crash in SetPictureFilter():
http://code.x2go.org/gitweb?p=nx-libs.git;a=blob;f=debian/patches/0017_nx-X…
Incidentally, this was also the reason why nxagent on my Gentoo system
always crashed when clicking on any button in a XFCE desktop session.
This fix will also be included in the next nx-libs release, but I
haven't plan a date for this yet. Probably not coming any time soon,
especially due to the previous emergency releases a few weeks back...
Mihai