I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
Hello Nikos,
You might edit your /etc/group file and remove the entries for the users in the x2go and fuse groupd. However, if there previously were some users in there be careful because you would remove them, too.
If there is an x2go-way to do this I don't know it ;)
Greetings, Kevin
Am 20.11.2010 01:04, schrieb Nikos Chantziaras:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
X2go-dev mailing list X2go-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/x2go-dev
Hi Nikos,
On Sa 20 Nov 2010 01:04:25 CET Nikos Chantziaras wrote:
I followed the instructions in the Wiki and installed x2goserver-one
on my Debian Lenny server. However, during the installation, it
told me:Attention: If you want to allow users to log into the x2go system,
you'll need to add them to the "x2gousers" groupbut then it went on all on its own and added all users (about 300)
of the system to the "x2gousers" as well as "fuse" groups! How do I
undo that? Right now, I need to click around for hours in the Users
and Groups admin tool :-$
The x2goserver-one package is intended for little Ubuntu systems...
(standalone, sqlite, make your desktop reachable from home). So the
auto-adding for groupmember is intended here, I suppose (make it easy
for the user).
For bigger installations/contexts use the x2goserver package (no
-home, no -one at the end of the package name) with PostgreSQL DB
backend, the x2goserver package does not impose auto-groupmemberships
on you.
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 11/20/2010 12:03 PM, Mike Gabriel wrote:
Hi Nikos,
On Sa 20 Nov 2010 01:04:25 CET Nikos Chantziaras wrote:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
The x2goserver-one package is intended for little Ubuntu systems... (standalone, sqlite, make your desktop reachable from home). So the auto-adding for groupmember is intended here, I suppose (make it easy for the user).
For bigger installations/contexts use the x2goserver package (no -home, no -one at the end of the package name) with PostgreSQL DB backend, the x2goserver package does not impose auto-groupmemberships on you.
I don't understand what a "big installation/context" is. Most admins just want a remote desktop for the servers they administer. Me too. I don't have a reason to use Postgre for anything.
So it's a big server, and I want a remote desktop to it for administrative purposes. Do you recommend to install Postgre and the normal x2goserver on it? I was under the impression that the home version was -home. The one person version was -one. I'm one person, and I want me, and only me, to be able to login per x2go. So I installed -one.
I suggest the installation to be adapted to this. -home might add users to x2gousers, but why -one?
Also, what's the point in adding users like "apache" and "mysql" to x2gousers and fuse?
Am 20.11.2010 18:12, schrieb Nikos Chantziaras:
On 11/20/2010 12:03 PM, Mike Gabriel wrote:
Hi Nikos,
On Sa 20 Nov 2010 01:04:25 CET Nikos Chantziaras wrote:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server.
x2goserver-one One Node Edition is intended for single server usage. This means: One server, "n" users as x2go is not a Remote Desktop, but a Terminal Server Project.
I don't understand what a "big installation/context" is. Most admins just want a remote desktop for the servers they administer. Me too. I don't have a reason to use Postgre for anything.
You can use more than one server and have them work together (incl. load balancing). To use this scenario you'll need to have centralized storage places for session management and user authentification which can be reached by all servers. In this case you can't use local data storage systems.
version was -home. The one person version was -one. I'm one person, and I want me, and only me, to be able to login per x2go. So I installed -one.
The home server is intended for Ubuntu only. The name was choosen by the Ubuntu folks talking to us some time ago...
Also, what's the point in adding users like "apache" and "mysql" to x2gousers and fuse?
The script responsible for adding the users can be found here:
/usr/lib/x2go/script/x2goconfigusers
/usr/lib/x2go/script/x2goconfigusers #!/usr/bin/perl
use strict;
my @users=split("\n",getent passwd);
for(my $i=0; $i<@users;$i++)
{
my @user=split(":",@users[$i]);
if(@user[2] >= 1000 && @user[2] < 29999) { # print "add @user[0] (@user[2]) to x2gousers\n"; system("adduser @user[0] x2gousers"); system("adduser @user[0] fuse"); } }
As you might see, the idea was only to add users above uid 1000 which are normally used for real users (not system users).
best regards,
Heinz
Hi Nikos,
On Sa 20 Nov 2010 18:12:16 CET Nikos Chantziaras wrote:
On 11/20/2010 12:03 PM, Mike Gabriel wrote:
Hi Nikos,
On Sa 20 Nov 2010 01:04:25 CET Nikos Chantziaras wrote:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
The x2goserver-one package is intended for little Ubuntu systems... (standalone, sqlite, make your desktop reachable from home). So the auto-adding for groupmember is intended here, I suppose (make it easy for the user).
For bigger installations/contexts use the x2goserver package (no -home, no -one at the end of the package name) with PostgreSQL DB backend, the x2goserver package does not impose auto-groupmemberships on you.
I don't understand what a "big installation/context" is.
That's a terminal server, for example.
Most admins just want a remote desktop for the servers they
administer. Me too. I don't have a reason to use Postgre for anything.
In this case the sqlite version is preferable. I never have problems
with the scripts as my user DB is always LDAP. Thus, only my local
admin user gets added automatically.
I guess Gerry is right with his posting, only users with a local home
may be added. Much nicer would be a debconf selection screen that
allows the administrator to manually select X2go users from a list of
local passwd user.
So it's a big server, and I want a remote desktop to it for
administrative purposes. Do you recommend to install Postgre and
the normal x2goserver on it?
Nope, not in that case.
I was under the impression that the home version was -home. The one
person version was -one. I'm one person, and I want me, and only
me, to be able to login per x2go. So I installed -one.
As I have already written in my other posting: always test software on
non-production systems. Once you have done that you know about the
caveats and then things like this do not happen.
I suggest the installation to be adapted to this. -home might add
users to x2gousers, but why -one?
I rather suggest a line of documentation in the wiki... Changing
package names after many people have already installed them is nasty...
Also, what's the point in adding users like "apache" and "mysql" to
x2gousers and fuse?
This has never happened on my systems that I access as a local
administrator. You are using Ubuntu... what version? Are you using
apache and mysql from the Ubuntu archive or do you have a special
blend of the LAMP software. The X2go x2goconfigusers script only adds
users that have uidNumber 1000-29999. The apache and mysql user should
be system users, that is have a uidNumber <1000. So maybe there is
something irregular...
For further reference: adding users to X2go groups in GIT: http://git.x2go.org/?a=viewblob&p=x2go&h=5025991b72d4f67006e9998bd9ee7f1a1be4c43d&hb=38b730a075cc77f747acf6fe585e0aeb728dda55&f=db-builds/x2goserver-one/x2goserver-one-3.0.1/x2goconfigusers
Greetings, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 11/20/2010 10:54 PM, Mike Gabriel wrote:
[...]
Also, what's the point in adding users like "apache" and "mysql" to x2gousers and fuse?
This has never happened on my systems that I access as a local administrator. You are using Ubuntu... what version? Are you using apache and mysql from the Ubuntu archive or do you have a special blend of the LAMP software. The X2go x2goconfigusers script only adds users that have uidNumber 1000-29999. The apache and mysql user should be system users, that is have a uidNumber <1000. So maybe there is something irregular...
I'm using Debian 5. But I have my own management of users, since they were all imported from other machines (running Red Hat), with a history of over 10 years.
You can never assume that UIDs mean anything. They are not hardcoded.
Perhaps it would be better to simply prompt the user during installation whether to add users to the groups or not with one of those ncurses prompt dialogs that I sometimes get when installing or updating other packages.
Hi Nikos,
On Sa 20 Nov 2010 22:19:02 CET Nikos Chantziaras wrote:
On 11/20/2010 10:54 PM, Mike Gabriel wrote:
[...] You can never assume that UIDs mean anything. They are not hardcoded.
Perhaps it would be better to simply prompt the user during
installation whether to add users to the groups or not with one of
those ncurses prompt dialogs that I sometimes get when installing or
updating other packages.
You are definitely right about this!
@Heinz & Alex: may you put a adduser2groups debconf interface (,,one
of these ncurses prompt dialogs'') on the x2goserver-one package
wishlist???
Thanks for everybody's input! Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
Hello Nikos,
As Mike described before a little script was added to the install progress, which enables all existing users to use x2goserver. This was added because there where a lot of complaints about the installation procedure.
You won't need to use a graphical tool to remove users. This can be done by command line or you open the file /etc/group in your favourite editor and remove any unwanted users from that group (you should be careful of cause).
best regards,
Heinz
Am 20.11.2010 01:04, schrieb Nikos Chantziaras:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
X2go-dev mailing list X2go-dev@lists.berlios.de https://lists.berlios.de/mailman/listinfo/x2go-dev
Hi Nikos,
On Sa 20 Nov 2010 14:15:19 CET "Heinz-M. Graesing" wrote:
You won't need to use a graphical tool to remove users. This can be done by command line or you open the file /etc/group in your favourite editor and remove any unwanted users from that group (you should be careful of cause).
To be pedantic: normally the bunch of users is also added to the group
in the file /etc/gshadow. As a perfectionalist you may want to edit
that file, too...
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 11/20/2010 03:15 PM, Heinz-M. Graesing wrote:
Hello Nikos,
As Mike described before a little script was added to the install progress, which enables all existing users to use x2goserver. This was added because there where a lot of complaints about the installation procedure.
Looks like the worst idea ever. You just hijacked my system and I have to go fix it :-/
You won't need to use a graphical tool to remove users. This can be done by command line or you open the file /etc/group in your favourite editor and remove any unwanted users from that group (you should be careful of cause).
best regards,
Heinz
Am 20.11.2010 01:04, schrieb Nikos Chantziaras:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
Hi Nikos,
On Sa 20 Nov 2010 18:13:12 CET Nikos Chantziaras wrote:
On 11/20/2010 03:15 PM, Heinz-M. Graesing wrote:
Hello Nikos,
As Mike described before a little script was added to the install progress, which enables all existing users to use x2goserver. This was added because there where a lot of complaints about the installation procedure.
Looks like the worst idea ever. You just hijacked my system and I
have to go fix it :-/
I always desperately encourage people to test new opensource software.
However, I also urge people _NOT_ to do this on production systems
(300 users sounds like a greater context of usage).
May I also ask to be careful with words when you post to a public
mailing list (with online archive). Nobody hijacked anything here, the
only thing that happened is that you tested new software on a
non-testing system (and that you were not fully aware of the
consequences).
However, I hope you enjoy X2go, greetings from Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 11/20/2010 10:36 PM, Mike Gabriel wrote:
Hi Nikos,
On Sa 20 Nov 2010 18:13:12 CET Nikos Chantziaras wrote:
On 11/20/2010 03:15 PM, Heinz-M. Graesing wrote:
Hello Nikos,
As Mike described before a little script was added to the install progress, which enables all existing users to use x2goserver. This was added because there where a lot of complaints about the installation procedure.
Looks like the worst idea ever. You just hijacked my system and I have to go fix it :-/
I always desperately encourage people to test new opensource software. However, I also urge people _NOT_ to do this on production systems (300 users sounds like a greater context of usage).
May I also ask to be careful with words when you post to a public mailing list (with online archive). Nobody hijacked anything here, the only thing that happened is that you tested new software on a non-testing system (and that you were not fully aware of the consequences).
Well, even if I tested it before installing it, there's still no way to make the installation script of the -home/-one packages not add users automatically.
But this thread starts looking like I'm flaming or bitching about it, so I'd better stop ;-P x2go is a very nice piece of software and this single problem definitely doesn't diminish its value.
On Sa 20 Nov 2010 22:22:21 CET Nikos Chantziaras wrote:
But this thread starts looking like I'm flaming or bitching about
it, so I'd better stop ;-P x2go is a very nice piece of software
and this single problem definitely doesn't diminish its value.
:-)
Always welcoming contributions and ideas!!!
Greets, Mike
--
DAS-NETZWERKTEAM mike gabriel, dorfstr. 27, 24245 barmissen fon: +49 (4302) 281418, fax: +49 (4302) 281419
mail: m.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...
On 11/20/2010 08:15 AM, Heinz-M. Graesing wrote:
Hello Nikos,
As Mike described before a little script was added to the install progress, which enables all existing users to use x2goserver. This was added because there where a lot of complaints about the installation procedure.
You won't need to use a graphical tool to remove users. This can be done by command line or you open the file /etc/group in your favourite editor and remove any unwanted users from that group (you should be careful of cause).
best regards,
Heinz
Am 20.11.2010 01:04, schrieb Nikos Chantziaras:
I followed the instructions in the Wiki and installed x2goserver-one on my Debian Lenny server. However, during the installation, it told me:
Attention: If you want to allow users to log into the x2go system, you'll need to add them to the "x2gousers" group
but then it went on all on its own and added all users (about 300) of the system to the "x2gousers" as well as "fuse" groups! How do I undo that? Right now, I need to click around for hours in the Users and Groups admin tool :-$
The only users that make sense to automatically add are those that exist
as users under /home (on Linux). Users such as 'mysql', 'apache', etc.
would not need to be added. The -home, -one scripts need to be adjusted
for this.
Regards, Gerry
-
Gerry Reno -
Heinz-M. Graesing -
Kevin Möllering -
Mike Gabriel -
Nikos Chantziaras