On Tue, May 17, 2011 at 16:56:06 (CEST), Paul van der Vlis wrote:
Op 17-05-11 11:25, Mike Gabriel schreef:
Hi Morty,
thanks for the quick reply...
On Di 17 Mai 2011 11:20:42 CEST Moritz Struebe wrote:
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Question to the community... Do people need group checking?
What do you exactly mean with that?
I don't want all users to be able to login with X2go. I don't like the automatic script what makes all excisting users a member of x2gousers without asking me.
that script is gone.
What I would like is a default with no users, a script to add all users to the group, and a config-option what says: "all users may login, no need for membership of a group".
currently, the script does not do any restriction of that kind. Generally, I'd suggest to forbid those user logging in completely via pam_groups or similar.
If you really need the filtering back, please send a patch against the x2gowrapper that implements checking the user membership and drops the connection.
btw, this was discussed in length a few weeks ago.
-- Gruesse/greetings, Reinhard Tartler, KeyID 945348A4