Hi Anders,
On Mi 27 Feb 2013 13:47:20 CET Anders Bruun Olsen wrote:
2013/2/21 Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
Setting up the X2Go Servers ts01.intern, ts02.intern, ... ------------------------------**---------------------------
Installing the standalone X2Go Session Broker (x2gobroker-daemon)
Are you sure that x2gobroker-daemon also goes on the terminal servers? I would have thought that x2gobroker-agent goes on the terminal servers...
You are absolutely right. Man, I must have been tired that night.
Thanks for noticing. Mike
--
DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
A couple of problems and comments:
- When enabling debugging you need to set X2GOBROKER_DEBUG=1 in /etc/default/x2gobroker-daemon, but this isn't specified in the file. It should be in the file, just commented out or set to 0.
- Where you need to set the key file, it says X2GOBROKER_SSL_CERTFILE where it should say X2GOBROKER_SSL_KEYFILE.
- Because the daemon is started as a non-privileged user, it is not possible to use ports below 1024 on most modern setups. That means, that port 80 and 443 is not possible to use. The daemon needs to be started as root, grab the port and then switch privileges to a non-privileged user.
2013/2/27 Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
Hi Anders,
On Mi 27 Feb 2013 13:47:20 CET Anders Bruun Olsen wrote:
2013/2/21 Mike Gabriel <mike.gabriel@das-**netzwerkteam.de<mike.gabriel@das-netzwerkteam.de>
Setting up the X2Go Servers ts01.intern, ts02.intern, ...
------------------------------****---------------------------
Installing the standalone X2Go Session Broker (x2gobroker-daemon)
Are you sure that x2gobroker-daemon also goes on the terminal servers? I would have thought that x2gobroker-agent goes on the terminal servers...
You are absolutely right. Man, I must have been tired that night.
Thanks for noticing.
Mike
--
DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.**de<mike.gabriel@das-netzwerkteam.de>, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.**de/freebusy/m.gabriel%40das-** netzwerkteam.de.xfb<https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb>
-- Anders Bruun Olsen It-ansvarlig Det Danske Sprog- og Litteraturselskab (Society for Danish Language and Literature)
Hi Anders,
On Mi 27 Feb 2013 15:23:39 CET Anders Bruun Olsen wrote:
- When enabling debugging you need to set X2GOBROKER_DEBUG=1 in /etc/default/x2gobroker-daemon, but this isn't specified in the file. It should be in the file, just commented out or set to 0.
The X2GOBROKER_DEBUG is in /etc/default/python-x2gobroker. This is not
very intuitive, I know. The thing is that there are several values for
x2gobroker-daemon and x2gobroker-authservice (and also later for
x2gobroker-wsgi). I will think about a more intuitive way.
- Where you need to set the key file, it says X2GOBROKER_SSL_CERTFILE where it should say X2GOBROKER_SSL_KEYFILE.
Thanks for spotting. Committed: http://code.x2go.org/gitweb?p=x2gobroker.git;a=commitdiff;h=af748b18e58a4b05...
- Because the daemon is started as a non-privileged user, it is not possible to use ports below 1024 on most modern setups. That means, that port 80 and 443 is not possible to use. The daemon needs to be started as root, grab the port and then switch privileges to a non-privileged user.
Unfortunately, this is not possible with the standalone daemon of the
webpy framework. With the next version (or the one after that) I will
provide a WSGI integration package that makes it possible to hook the
x2gobroker (/usr/sbin/x2gobroker) behind an Apache2 server. Then you
have privileged ports and everything.
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
-
Anders Bruun Olsen -
Mike Gabriel