Hi Morty, Reinhard,
as you have done the last implementation (perlsuid etc.) around X2go
server I have a question on that.
Is group membership in the posix group x2gousers still a requirement
with the latest x2goserver.git code?
Thanks,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
I don't think that putting this configuration data about your
particular build environment in this x2go branch is particular good
idea. Better keep this data where it belongs, in your build
environment and scripts.
Moreover, could you please enable commit diffs, not only summaries? Thanks.
On Sun, May 15, 2011 at 12:21 AM, X2go dev team <git-admin(a)x2go.org> wrote:
> This is an automated email from the git hooks/post-receive script. It was
> generated because a ref change was pushed to the repository containing
> the project "X2go Client".
>
> The branch, master has been updated
>    via  516729d972d7f5bbd4c447f8964d028e51c4f850 (commit)
>    from  d767b9d11f304c5eb2f7087078ef81bfc2144957 (commit)
>
> Those revisions listed above that are new to this repository have
> not appeared on any other notification email; so we list those
> revisions in full, below.
>
> - Log -----------------------------------------------------------------
> commit 516729d972d7f5bbd4c447f8964d028e51c4f850
> Author: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de>
> Date: Â Sun May 15 00:19:32 2011 +0200
>
> Â Â restricting package-build on Debian to wheezy+squeeze
>
> -----------------------------------------------------------------------
>
> Summary of changes:
> Â BUILDS_FOR | Â Â 1 +
> Â 1 files changed, 1 insertions(+), 0 deletions(-)
> Â create mode 100644 BUILDS_FOR
>
>
> hooks/post-receive
> --
> X2go Client
> _______________________________________________
> X2go-commits mailing list
> X2go-commits(a)lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/x2go-commits
>
--
regards,
  Reinhard
Hi all,
pyhoca-cli is a Python command-line client for X2go based on
python-x2go. Initially there was a --password option with the script
that allowed to script X2go session and pass-on a cleartext password.
Heinz made me aware of the security breach concerning clear text
passwords at the command-line (ps aux | grep --password, I complete
was unaware of that at that time... ashame...). On his request I had
removed the option from the code, immediately.
However, inspired bei the rdesktop command (which allows a --password
cmd arg) I added code to pyhoca-cli that allows to give --password at
the command line or from within scripts without risking security (I
hope). pyhoca-cli now rewrites the process title as shown in ps aux
output and replaces the actual password by "XXXXXXX".
I would be greatful if someone with Python knowlegde could cross-check
the following commits:
http://code.x2go.org/gitweb?p=pyhoca-cli.git;a=commitdiff;h=3ec0c5db1f8eb5c…http://code.x2go.org/gitweb?p=pyhoca-cli.git;a=commitdiff;h=bdf71da2a41cbcd…
Thanks,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
hi all, hi esp. devs,
the LinDix company in the Netherlands has asked me to work on another
project in the context of X2go.
A couple of weeks ago we discussed possibilities of approaching the
usage of X2go in SaaS environemts (that is: not ,,Desktop as a
Serice'', but Software as a Service, meaning single, dedicated
applications in this context).
The vision is:
(a) to have a server-side X2goSSH service similar to OpenSSH that can be
configured via ACLs so that remote application can be granted/denied to
specific users and/or specific groups. Opposed to OpenSSH this X2go
service will be able to restrict the execution of remote (server-side)
commands very pedantically.
(b) to provider X2go remote apps through the programmes' menu on your local
desktop
In this mail I will address vision (b) in detail:
====================
For embedding X2go Apps (single remote application provided via X2go
in rootless mode) into the desktop application menu or for providing
them as desktop links the basic ideas could be listed as follows:
o all desktop links / menu links to X2go apps will launch an instance of
pyhoca-gui
o only the first click on such an X2go app will load the full pyhoca-gui
application (as first pyhoca-gui instance)
o all other clicks will launch pyhoca-gui in interprocess-communication
mode
- every secondly started pyhoca-gui will notify the firstly started
pyhoca-gui about what to do
- this will probably be approached via UDP communication (so
that it will
be available on Windows as well, no unix file sockets on Windows)
o the first pyhoca-gui instance will listen to incoming requests and process
them, such as
- connect to another server and...
- (...) start application A or B or C
With X2go embedded apps it will be possible to compose a desktop as a
mixture of locally installed applications and remote (SaaS)
applications on Windows and Linux.
Greetings + Request for Comments,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Hi there,
the x2go client expects Bash to be the defualt shell. If this is not the
case the login may fail.
BTW: Is there a bug tracker by now?
Cheers
Morty
--
Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter)
Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme)
Friedrich-Alexander-Universität Erlangen-Nürnberg
Martensstr. 1
91058 Erlangen
Tel : +49 9131 85-25419
Fax : +49 9131 85-28732
eMail : struebe(a)informatik.uni-erlangen.de
WWW : http://www4.informatik.uni-erlangen.de/~morty
hi all, hi esp. devs,
the LinDix company in the Netherlands has asked me to work on another
project in the context of X2go.
A couple of weeks ago we discussed possibilities of approaching the
usage of X2go in SaaS environemts (that is: not ,,Desktop as a
Serice'', but Software as a Service, meaning single, dedicated
applications in this context).
The vision is:
(a) to have a server-side X2goSSH service similar to OpenSSH that can be
configured via ACLs so that remote application can be granted/denied to
specific users and/or specific groups. Opposed to OpenSSH this X2go
service will be able to restrict the execution of remote (server-side)
commands very pedantically.
(b) to provider X2go remote apps through the programmes' menu on your local
desktop
In this mail I will address vision (a) in detail:
====================
The basic ideas of such an X2goSSH service are:
o instead of using OpenSSH daemon the client connects to X2goSSH daemon
o the X2goSSH service will wrap around the standard x2goserver command set
o installation of X2goSSH will be optional
o the client has to support the usage of the server-side X2goSSH (i.e.
there will be a parallel implementation within python-x2go code)
o the client has to be able to detect if it is talking to a normal
OpenSSH daemon or if it is talking to the restricted X2goSSH service
o the X2goSSH service will be implemented with Python-Paramiko/SSH
o behind the X2goSSH service there listens an X2go'ish shell that
guards and wraps around the actual execution of the already known x2go
comands (note again: X2goSSH+X2goSHELL is a wrapper for
x2goserver commands)
o With the help of a guy from LinDix.NL (and others?) I will soon start
working on a possible X2goSSH+X2goSHELL command protocol in the X2go wiki
o the proposed project name will be python-x2goserver, it will
contain several
packages/subprojects
python-x2goserver-x2gosshd
python-x2goserver-x2goshell
python-x2goserver-x2goacl
x2gosshd (the actual daemon)
Greetings + Request for Comments,
Mike
--
DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Hi Morty,
@ML: this mail was (probably by accident) only sent to me privately, I
re-include the list in my answer and fully quote Moritz's text passages
On Mi 04 Mai 2011 12:50:53 CEST Moritz Struebe wrote:
> On 2011-05-03 13:55, Mike Gabriel wrote:
>
> Hi Mike,
>
> I saw, you revived the x2gothinclient package. I was thinking of moving
> those scripts to x2gothinclientmanagement as the x2githinclient_init is
> the only script you might not want to adjust. I think it is easier to
> adjust those scripts outside the chroot and call the update-script to
> automatically update them within the chroot. That way you can delete the
> chroot without loosing the configuration.
OK, good point!!! But then let's move the whole TCE configuration to
/etc/x2go. Any file that is supposed to be modifyable by the
admin/user should rest in /etc/x2go, shouldn't it? Ok?
> Maybe it is even better to set
> up a "TCE-config"-Folder to manage those configurations and have an
> x2go-TCEconf.sample folder.
Ah... OK. This answers my former question. I would provide a default
configuration in /etc/x2go and provide other possible configurations
in /usr/share/doc/x2gothinclientmanagement/examples
> That way you can even put your different TCE
> configurations under version control.
That is by using e.g. etckeeper?!?
> I'd also rather install
> x2gothinclinetmanagement to /opt as this is something quite special, and
> is used for very special purposes.
This will probably conflict with Debian's FHS (Reinhard? Comments?)
which would lead to conflicts or transition problems once the packages
move into Debian...
> Cheers
> Morty
Sorry for the late reply (London was great!!!),
Mike
--
DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B
mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…
Hi there,
I have some strange issues with x2gothinclient.
For installing I used this manual:
http://wiki.x2go.org/installing_x2go_thin_client_environment_debian
Because of using squeeze instead of lenny I changed a couple
of things:
- debootstrap
- repos
- apt-get install x2gothinclient instead of x2gothinclientsystem
But that should not be the problem.
The tftp boot works like a charm, but in the NFS "bootsteps" I get come
errors/warnings:
[...]
cannot create /tmp/lean: Read-only file system
[...]
cannot create /var/run/utmp: Permission denied
[...]
cannot create /var/run/motd: Permission denied
[...]
There are some more errors and the problem is, in my opinion, that it is
not possible to write on /tmp, /var, etc.
The NFS-Share is exported "ro" as described in the documentation.
Should be there a "fake" writable /tmp, /var path or a special mountpoint?
Best regards
Markus