Hi Morty, Reinhard,
as you have done the last implementation (perlsuid etc.) around X2go
server I have a question on that.
Is group membership in the posix group x2gousers still a requirement
with the latest x2goserver.git code?
Thanks, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Cheers Morty
-- Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter) Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme) Friedrich-Alexander-Universität Erlangen-Nürnberg Martensstr. 1 91058 Erlangen
Tel : +49 9131 85-25419 Fax : +49 9131 85-28732 eMail : struebe@informatik.uni-erlangen.de WWW : http://www4.informatik.uni-erlangen.de/~morty
Hi Morty,
thanks for the quick reply...
On Di 17 Mai 2011 11:20:42 CEST Moritz Struebe wrote:
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Question to the community... Do people need group checking?
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
Op 17-05-11 11:25, Mike Gabriel schreef:
Hi Morty,
thanks for the quick reply...
On Di 17 Mai 2011 11:20:42 CEST Moritz Struebe wrote:
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Question to the community... Do people need group checking?
What do you exactly mean with that?
I don't want all users to be able to login with X2go. I don't like the automatic script what makes all excisting users a member of x2gousers without asking me.
What I would like is a default with no users, a script to add all users to the group, and a config-option what says: "all users may login, no need for membership of a group".
With regards, Paul van der Vlis.
On Tue, May 17, 2011 at 16:56:06 (CEST), Paul van der Vlis wrote:
Op 17-05-11 11:25, Mike Gabriel schreef:
Hi Morty,
thanks for the quick reply...
On Di 17 Mai 2011 11:20:42 CEST Moritz Struebe wrote:
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Question to the community... Do people need group checking?
What do you exactly mean with that?
I don't want all users to be able to login with X2go. I don't like the automatic script what makes all excisting users a member of x2gousers without asking me.
that script is gone.
What I would like is a default with no users, a script to add all users to the group, and a config-option what says: "all users may login, no need for membership of a group".
currently, the script does not do any restriction of that kind. Generally, I'd suggest to forbid those user logging in completely via pam_groups or similar.
If you really need the filtering back, please send a patch against the x2gowrapper that implements checking the user membership and drops the connection.
btw, this was discussed in length a few weeks ago.
-- Gruesse/greetings, Reinhard Tartler, KeyID 945348A4
Hi Paul,
On Di 17 Mai 2011 16:56:06 CEST Paul van der Vlis wrote:
Op 17-05-11 11:25, Mike Gabriel schreef:
Hi Morty,
thanks for the quick reply...
On Di 17 Mai 2011 11:20:42 CEST Moritz Struebe wrote:
On 2011-05-17 11:15, Mike Gabriel wrote:
Is group membership in the posix group x2gousers still a requirement with the latest x2goserver.git code?
Nope, and has never been on our servers. Group-Checking would have to be reintroduced to the perl-script.
Question to the community... Do people need group checking?
What do you exactly mean with that?
I don't want all users to be able to login with X2go.
With the current code in git.x2go.org this is the case. The group
limitation has been removed from code with the removal of all the sudo
stuff. So basically, that's good. But if people want to be able to
restrict access, then it's bad news.
I don't like the automatic script what makes all excisting users a member of x2gousers without asking me.
I guess rather a few people did not like this script...
What I would like is a default with no users, a script to add all users to the group, and a config-option what says: "all users may login, no need for membership of a group".
This indeed needs a patch. It would be great if you could privat one.
Please use the master branch of x2goserver.git on git.x2go.org and
branch off from there.
THANKS, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
GnuPG Key ID 0xB588399B mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
-
Mike Gabriel -
Moritz Struebe -
Paul van der Vlis -
Reinhard Tartler