- x2go-user - X2Go ListServ

Re: [X2Go-User] X2Go-User Digest, Vol 38, Issue 25
by Ted Barnes 30 Oct '13

30 Oct '13

Hi Mike: Thanks for the help...no joy yet, but some updates (in a separate email, I'd like to circle back around on using SSL/SSH and the option of using x2goplugin with SSL as an alternative short term): 1) I mis-wrote earlier - the server I'm using is Wheezy, and the client Squeeze. Not sure that matters, but wanted to convey as such. 2) FYI, can go to server's webpage and get generic apache "It works! This is the default web page for this server. The web server software is running but no content has been added, yet.", so think apache is running. SSH is running as well on the server. 3) Again FYI have been trying x2gobroker-wsgi (not x2gobroker-daemon) 4) When I try: x2goclient --broker-url=http://xxx.xxx.xxx.xxx/plain/inifile I get an error window: Login Failed! Please try again When I try: x2goclient --broker-url="ssh://xxx.xxx.xxx.xxx/usr/bin/x2gobroker --backend=inifile" I get: sh: 1: /usr/bin/x2gobroker: not found FYI: on the server, there isn't an x2gobroker in /usr/bin....there is an x2gobroker script in /usr/sbin. If I try: x2goclient --broker-url="ssh://xxx.xxx.xxx.xxx/usr/sbin/x2gobroker --backend=inifile" I get an error window with a fair amount of info: 2013-10-29 19:01:05,325 - broker - INFO - X2Go Session Broker (0.0.2.3), written by Mike Gabriel (X2Go Project) <mike.gabriel(a)das-netzwerkteam.de> 2013-10-29 19:01:05,325 - broker - INFO - Setting up the broker's environment... 2013-10-29 19:01:05,325 - broker - INFO - X2GOBROKER_DEBUG: True 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_CONFIG: /etc/x2go/x2gobroker.conf 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_AGENT_CMD: /usr/lib/x2go/x2gobroker-agent 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_AUTHSERVICE_SOCKET: /run/x2gobroker/x2gobroker-authservice.socket 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_DEFAULT_BACKEND: zeroconf 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_SSL_CERTFILE: 2013-10-29 19:01:05,326 - broker - INFO - X2GOBROKER_SSL_KEYFILE: 2013-10-29 19:01:05,327 - broker - WARNING - X2Go Session Broker has been started interactively by user ted, better run as user x2gobroker. 2013-10-29 19:01:05,327 - broker - INFO - Automatically switching to DEBUG mode due to interactive launch of this application. usage: x2gobroker [-h] [-C CONFIG_FILE] [-b BIND_ADDRESS] [-d] x2gobroker: error: unrecognized arguments: --backend=inifile --user ted --task listsessions On 10/29/13 11:00, x2go-user-request(a)lists.berlios.de wrote: > Send X2Go-User mailing list submissions to > x2go-user(a)lists.berlios.de > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.berlios.de/mailman/listinfo/x2go-user > or, via email, send a message with subject or body 'help' to > x2go-user-request(a)lists.berlios.de > > You can reach the person managing the list at > x2go-user-owner(a)lists.berlios.de > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of X2Go-User digest..." > > > Today's Topics: > > 1. Re: x2go session broker connect problem (Mike Gabriel) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 29 Oct 2013 08:18:12 +0000 > From: Mike Gabriel<mike.gabriel(a)das-netzwerkteam.de> > To:x2go-user@lists.berlios.de > Subject: Re: [X2Go-User] x2go session broker connect problem > Message-ID: > <20131029081812.Horde.okJoiab6YGTA8vs8g2sQGA2(a)mail.das-netzwerkteam.de> > > Content-Type: text/plain; charset="utf-8"; Format="flowed"; > DelSp="Yes" > > Hi Ted, > > On Fr 25 Okt 2013 19:28:11 CEST, Ted Barnes wrote: > > >> Am trying to get up to speed on x2go session broker, but am having >> trouble. Any suggestions? >> >> When try to connect I get: >> >> Error >> Login failed! >> Please try again. >> >> Along with... >> broker url:http://xxx.xxx.xxx.xxx/:8080/plain/inifilebroker >> url:http://xxx.xxxx.xxx.xxx/:8080/plain/inifile >> > For the X2Go Session Broker standalone daemon (python-tornado > implementation) the X2Go Client cmdline is: > > x2goclient --broker-url=http://<host>:8080/plain/inifile > > > >> or.... >> broker url:http://user@xxx.xxx.xxx.xxx/cgi-bin/x2gobroker.cfgi >> > For the WSGI implementation of X2Go Session Broker, the URL varies. > For our default setup [1], use this X2Go Client cmdline: > > x2goclient --broker-url=http://<host>/x2gobroker/plain/inifile > > >> [...] >> > If you use the SSH implementation of X2Go Session Broker (available > with 0.0.3.0, currently as preview in the nightly builds): > > x2goclient --broker-url="ssh://<host>/usr/bin/x2gobroker --backend=inifile" > > >> However, when I try from the command line with an "x2goclient >> --broker-..." type of command, I get the Error message. >> > This is not surprising me, as you have not used the correct URLs, so far. > > >> x2gobroker-authservice (wasn't sure if I should install this for my >> initial tests) >> > Yes. The authentication system of the X2Go Session Broker uses PAM by > default. PAM authentication requires root privileges. The X2Go Session > Broker's Authentication Service runs with root privileges whereas the > broker itself runs as user x2gobroker. > > > > Greets, > Mike > > [1] > http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=etc/x2gobroker-wsgi.a… >

2 1

x2go session broker connect problem
by Ted Barnes 29 Oct '13

29 Oct '13

Hi All: Am trying to get up to speed on x2go session broker, but am having trouble. Any suggestions? When try to connect I get: Error Login failed! Please try again. Along with... broker url: http://xxx.xxx.xxx.xxx/:8080/plain/inifilebroker url:http://xxx.xxxx.xxx.xxx/:8080/plain/inifile or.... broker url:http://user@xxx.xxx.xxx.xxx/cgi-bin/x2gobroker.cfgi As I'm getting started, I'm trying to do this on my LAN (all behind my firewall) without any ssh (longer term I want to see if I can run sessions inside SSL). I've disabled all the iptable rules on my server....and tried various settings in the x2gobroker.conf and x2gobroker-sessionprofiles.conf files which have not really changed the error message but may be the problem (see below). I can connect using the x2go client GUI "the normal way", and the first time I got a window on the client "The server is unknown. Do you trust the host key....", which I assume is x2go dynamically creating a ssh tunnel? This part works fine. However, when I try from the command line with an "x2goclient --broker-..." type of command, I get the Error message. Both client and server are running Debian Squeeze, and on the server I've successively installed: x2gobroker-wsgi apache2 libapache20mod-wsgi x2gobroker-authservice (wasn't sure if I should install this for my initial tests) My x2gobroker.conf: # This file is part of the X2Go Project - http://www.x2go.org # Copyright (C) 2011-2013 by Oleksandr Shneyder <oleksandr.shneyder(a)obviously-nice.de> # Copyright (C) 2011-2013 by Heinz-Markus Graesing <heinz-m.graesing(a)obviously-nice.de> # Copyright (C) 2012-2013 by Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> # # X2Go Session Broker is free software; you can redistribute it and/or modify # it under the terms of the GNU Affero General Public License as published by # the Free Software Foundation; either version 3 of the License, or # (at your option) any later version. # # X2Go Session Broker is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Affero General Public License for more details. # # You should have received a copy of the GNU Affero General Public License # along with this program; if not, write to the # Free Software Foundation, Inc., # 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. ### ### GLOBAL section ### [global] # Allow unauthenticated connections? Then set check-credentials to false. check-credentials = false # To secure server-client communication the client can start the communication # with a pre-set, agreed on authentication ID. Set the below value to true # to make the X2Go Session Broker require this feature #require-cookie-auth = false ### NOT-IN-USE-YET # X2Go supports two different cookie authentication modes (static and dynamic). #use-static-cookie = false ### NOT-IN-USE-YET # Every server-client communication (between X2Go Client and broker) has to be # accompanied by this initial authentication cookie. #my-cookie = <aaaavveeeerrrrryyyyylooonnnnggggssttrrriiinnnggg> ### NOT-IN-USE-YET # X2Go Session Broker knows about two output formats: a text/plain based output # and a text/json based output that is compatible with UCCS. The different outputs # run under different URLs. enable {base_url}/plain/ enable-plain-output = true # enable {base_url}/uccs/ #enable-uccs-output = false # use this URL base to create URL field in UCCS-style JSON output #my-uccs-url-base = http://localhost:8080/ # default authentication mechanism for all broker backends default-auth-mech = pam # how does this X2Go Session Broker instance retrieve user and group # information from the system? (defaults for all broker backends) default-user-db = libnss default-group-db = libnss # on large deployments it is recommended to ignore primary group # memberships traversing into all user accounts for primary group # detection can be quite CPU intensive on the X2Go Broker server. #ignore-primary-group-memberships = true # X2Go session autologin via X2Go Session Broker # # Once authenticated against the session # broker, the user becomes a trusted user. That is, the X2Go session login can # be automatized by a very temporary SSH pub/priv key pair. Prior to the session # login the key is generated, after successful session login, the key is dropped # immediately. # # This option can be overridden by the session profile parameter # broker-session-autologin={true|false} broker-session-autologin=true default-session-autologin=true # X2Go's authorized_keys file for broker mediated autologin sessions # # For the X2Go auto-login via X2Go Session Broker feature to work thoroughly, # the X2Go Session Broker has to place the temporary public SSH key into the # user's home directory. It is not recommended to use SSH's default # authorized_keys file for this but a separate and X2Go-specific authorized_keys # file ($HOME/.x2go/authorized_keys). # # Of course, the SSH daemon has to be made aware of this. This can be configured # in /etc/ssh/sshd_config like this: # # --- /etc/ssh/sshd_config.no-x2go 2013-03-01 09:57:04.000000000 +0100 # +++ /etc/ssh/sshd_config 2013-03-01 09:56:57.000000000 +0100 # @@ -28,7 +28,8 @@ # # RSAAuthentication yes # PubkeyAuthentication yes # AuthorizedKeysFile %h/.ssh/authorized_keys # +AuthorizedKeysFile2 %h/.x2go/authorized_keys # # # Don't read the user's ~/.rhosts and ~/.shosts files # IgnoreRhosts yes # # This option can be overridden by the session profile parameter # broker-authorized-keys=<file-location> #default-authorized-keys=%h/.x2go/authorized_keys # X2Go Broker Agent query mode # # The X2Go Broker Agent is needed for multi-server sites configured for # load balancing. Multi-server sites require a setup that uses the # PostgreSQL X2Go session DB backend. The X2Go Broker Agent has to be installed # on the local system (mode: LOCAL) or on all X2Go Servers (mode: SSH) in a # multi-server farm. # # So, there are three query modes for the X2GO Broker Agent: NONE, LOCAL and # SSH. # # NONE - Try to get along without X2Go Broker Agent queries. For simple # broker setups this may suffice. For load-balancing or reliable # session suspending and resuming the broker agent is a must!!! # # LOCAL - This LOCAL mode only works for _one_ configured multi-server farm. # If this X2Go Session Broker is supposed to serve many different # multi-server farms, then the LOCAL mode will not work!!! # # How it works: Assume that the local system has an X2Go Broker Agent # that knows about the multi-server setup. This means: X2Go Server # has to be installed locally and the X2Go Server has to be # configured to use the multi-server farm's PostgreSQL session DB # backend. # # The local system that is running the broker does not necessarily # have to be a real application server. It only has to be aware of # running/suspended sessions within the X2Go multi-server farm setup. # # A typical use-case is X2Go on top of a Debian Edu Terminal-Server # farm: # # TJENER -> PostgreSQL DB, X2Go Server, X2Go Session Broker + # Broker Agent # TS01 - TS0X -> X2Go Server configured to use the PostgreSQL DB # on TJENER # # SSH - The more generic approach, but also more complex. It allows that # the broker on this system may serve for many different X2Go Server # multi-server setups. # # With the SSH agent query mode, the X2Go Session Broker will query # one of the X2Go Servers in the targeted multi-server setup (through # SSH). The SSH authentication is done by a system user account # (normally UID=x2gobroker) and SSH pub/priv key authentication has # to be configured to make this work. # # All X2Go Servers in a multi-server farm need the X2Go Broker Agent # installed, whereas this local system running the X2Go Session # Broker does not need a local X2Go Broker Agent at all. # # The agent query mode can be configured on a per-broker-backend basis, the # below value is the default. #default-agent-query-mode=LOCAL ### ### BACKEND section ### # Possible X2Go Session Broker backends: # # 1. backend = zeroconf (activated by default) # Use the ZeroConf X2Go Session Broker backend, this backend is for demo only # and only operates on localhost. Make sure you have x2gobroker-daemon and # and x2goserver installed on the same machine. No need to install # x2gobroker-agent. # 2. backend = infile (deactivated by default) # The IniFile X2Go Session Broker backend is for providing session profiles # to multiple users/clients on a text config file basis (.ini file format). # # The session profile setup is accomplished by an extra configuration file, # by default named /etc/x2go/broker/x2gobroker-sessionproiles.conf. # # For small-scale deployments the IniFile backend is the recommended backend. [zeroconf] #enable = true #auth-mech = pam #user-db = libnss #group-db = libnss #desktop-shell = KDE [inifile] enable = true session-profiles = /etc/x2go/broker/x2gobroker-sessionprofiles.conf #[ldap] -> MUSIC OF THE FUTURE #enable = false #auth-mech = ldap #user-db = ldap #group-db = ldap #uri = ldap://localhost:389 #base = dc=example,dc=org #user-search-filter = (&(objectClass=posixAccount)(uid=*)) #host-search-filter = (&(objectClass=ipHost)(serial=X2GoServer)(cn=*)) #group-search-filter = (&(objectClass=posifxGroup)(cn=*)) #starttls = false #agent-query-mode = SSH My x2gobroker-sessionprofiles.conf: ### X2Go Broker Session Profiles - ADAPT TO YOUR NEEDS ### # This whole file reflects a set of examplary X2Go session profiles being # provided via the X2Go Session Broker (backend: iniconf). # This whole file could be the broker setup in some university institute that # runs three server pools (pool-A, pool-B and pool-C). Though most univerities # have real IPv4 internet addresses, we use private subnets in the examples # below. # The X2Go Session Broker is served into the institutes local intranet, the # broker cannot be reached from the internet directly. # The first section [DEFAULTS] provides a set of default profile settings that # are common to all session profiles given in sections below. # The other section names can be freely chosen, however, each section name has # to be unique within this file. # IMPORTANT: in the session profiles below you will find some lines starting # with acl-... These lines do neither protect the X2Go Session Broker nor # your X2Go Servers. They simply allow for selective session profile provision # based on client address, user name and group memberships. # # For protecting the broker use iptables and ip6tables. For protecting your # X2Go Servers use iptable+ip6tables and a tightened PAM configuration (e.g. # pam_access.so). Securing X2Go Servers means securing the SSH daemon that # runs on the X2Go Server. [DEFAULT] command=TERMINAL defsndport=true useiconv=false iconvfrom=UTF-8 height=600 export= quality=9 fullscreen=false layout= useexports=true width=800 speed=2 soundsystem=pulse print=true type=auto sndport=4713 xinerama=true variant= usekbd=true fstunnel=true applications=TERMINAL,WWWBROWSER,MAILCLIENT,OFFICE multidisp=false sshproxyport=22 sound=true rootless=false iconvto=UTF-8 soundtunnel=true dpi=96 sshport=22 setdpi=0 pack=16m-jpeg directrdp=false [GNOME] user=xxx host=xxx.xxx.xxx.xxx name=GNOME command=GNOME rootless=false acl-users-allow=xxx acl-groups-allow=gnome-users,admins acl-groups-deny=ALL acl-any-order=deny-allow broker-session-autologin=true

3 3

Broker + User-side HTTP(S) proxy
by Mathias Ewald 28 Oct '13

28 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I am using X2go broker with SSH proxy to have X2go servers sit behind the broker not directly reachable from the internet. Like this, I need Users have access to ports 443 (usually not a problem) and SSH (very often a problem). Problem is that users tend to sit behind transparent http/https proxies, so SSH won't get out. I would like to see everything being done through HTTPs so we can trick proxies. Is this going to be implemented in the near future or maybe even already possible somehow? cheers Mathias -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBAgAGBQJSbgt3AAoJEA7RPiZyzgdIIRoP/A4d6rYcYk2NbNW7Zalc5viU u6lDE4KGPl9m7b7TbXs7X30FWGN/1wsyKFo262nrJHUX/UiiWjrIiSlRewxAg2dT AFsiNaLPfQc/GW/nSm0qOdAz/pCBlNTTeNa2HY/K6bOCyzv5kcsuqI8RjDZXV06E /tsvDeD/HR+C8ZHvsnHYDgmn12ftgpS1pJ/P5AM6ATTU3eKDC30OkJ4q46Ykim8W CbrMCDtElEUI3XXi6D33mYWKEAJyrIR10KvFMyZuG4o6E8lq0olT5FCFItyJTV+x i4KJWf/jAM3DDcJFNqICziSnLJcOTGt2PVBe8pZH9uidMVacztoJ0sBlOk/alTe1 nM4zUbToaGA4dwNPgBcJjdmywwXF7rXGqgp8Wm/VJ0u4mobm/NkNbsyWI5Q+TVcO huf250kDaDb8+eqIP23JttKr+FYT3eZ6D5KKIQeYeomgu/zopsPHSFi5gIexQclf 5aT87URNae+efIjayydjyP8DTEFh3Hw1QkdEgJYyfQlgh5lecYdsi+74G8MA3PoI NJpDUPsKtya4gIM3F3fTd3ucxYXXP6Z5qod7pDG6uIEwvImcbT9cbkNidnf01ROE g43lrBrhQ2C3pW2fhQi7skNI4Q2uA1wd1Qq8lPcTxoAl6wY6iS5Wut6aMwyJxmOm z5YtX+C+HkTb7kubtDtP =F+9b -----END PGP SIGNATURE-----

2 1

Ubuntu System Upgrade: The following packages have unmet dependencies
by Mathias Ewald 24 Oct '13

24 Oct '13

Hi, I have x2gobroker running for a while and everything working. Now I wanted to patch my Ubuntu: mathias@x2gobroker:~$ sudo apt-get update ... mathias@x2gobroker:~$ sudo apt-get upgrade Reading package lists... Done Building dependency tree Reading state information... Done The following packages have been kept back: x2goserver The following packages will be upgraded: base-files curl dmsetup dpkg gnupg gpgv grub-common grub-pc grub-pc-bin grub2-common initscripts libapr1 libcurl3 libcurl3-gnutls libdevmapper1.02.1 libxml2 linux-image-3.2.0-4-amd64 perl perl-base perl-modules python python-crypto python-minimal sysv-rc sysvinit sysvinit-utils x2gobroker-agent x2goserver-extensions xserver-common xserver-xorg-core 30 upgraded, 0 newly installed, 0 to remove and 1 not upgraded. The following packages have unmet dependencies: x2goserver-extensions : Depends: x2goserver (>= 4.1.0.0-0~x2go1+wheezy~heuler~20130731~779~build1) but 4.0.1.6-0~x2go1+wheezy~main~712~build1 is to be installed E: Internal error, InstallPackages was called with broken packages! mathias@x2gobroker:~$ mathias@x2gobroker:~$ cat /etc/apt/sources.list.d/x2go.list # X2Go Repository deb http://packages.x2go.org/debian wheezy main heuler # X2Go Repository (sources) deb-src http://packages.x2go.org/debian wheezy main heuler mathias@x2gobroker:~$ cheers Mathias

3 3

pyhoca-cli sound issues
by Tim Kruse 24 Oct '13

24 Oct '13

Hi all, I have weird sound issues with pyhoca-cli and need a hint, where to look :) Scenario: debian wheezy (uptodate) client with KDE running conncts to a debian wheezy (also uptodate) server with KDE. Following versions: root@client: ~ # dpkg -l | egrep 'x2go|pyhoca' ii pyhoca-cli 0.4.0.1-0~x2go1+wheezy~main~171~build1 all Command line X2Go client written in Python ii pyhoca-gui 0.4.0.8-0~x2go1+wheezy~main~1082~build1 all Graphical X2Go client written in (wx)Python ii python-x2go 0.4.0.8-0~x2go1+wheezy~main~1095~build1 all Python module providing X2Go client API ii x2goclient 4.0.1.1-0~x2go1+wheezy~main~427~build1 amd64 X2Go Client application (Qt4) root@server: ~ # dpkg -l | egrep 'x2go|pyhoca' ii x2go-keyring 2012.07.23+wheezy~main~17~build1 all GnuPG keys of all X2Go developers and the X2Go archive ii x2goagent 2:3.5.0.21-0+wheezy~main~423~build1 all X2Go agent ii x2goserver 4.0.1.6-0~x2go1+wheezy~main~712~build1 i386 X2Go server daemon scripts ii x2goserver-compat 4.0.1.6-0~x2go1+wheezy~main~712~build1 all X2Go server daemon scripts (backwards compatitbity to old client versions) ii x2goserver-extensions 4.0.1.6-0~x2go1+wheezy~main~712~build1 all X2Go server daemon scripts (extensions) ii x2goserver-xsession 4.0.1.6-0~x2go1+wheezy~main~712~build1 all X2Go server daemon scripts (Xsession runner) If I try to connect from client (within a fresh KDE session) to server with the following command, I don't have any sound in this x2gosession: pyhoca-cli --server $SERVER --new --command startkde --username $USR --sound pulse --geometry 1440x900 --link adsl --pack 16m-png-9 --kbd-layout de --kbd-type '105/de' Now I connect to the server (or another x2goserver, that doesn't matter) with x2goclient and there is sound. When I then connect again with above pyhoca-cli command, I have sound in this session. When I restart the local KDE Desktop on the client, I don't have any sound with pyhoca, until I connect with x2goclient ... I think, there is some process/program, that pyhoca-cli is not able to start, until x2goclient will start it, but I can't find it ... Help appreciatet :) So long, Tim

2 9

Session Configuration Data
by Short, Kermit 23 Oct '13

23 Oct '13

I'm pleased to say that I've got X2Go client running on an IGEL thin client. To those of you that have helped me get to this point, please accept my sincere thanks. I can't tell you how much I appreciate all the help! My next step is to build a configuration file with all of the various servers that our customers will connect to. Where does all the session configuration data get stored? Is this stuff that I can pass in on the command line? It would certainly be easier to push out a prebuilt (pre-customized) session configuration file to particular thin client devices, but if I have to create a shortcut with command line parameters for each server, I'll do that too. Thanks!! -- Kermit Short DCS-5

3 4

more and more sessions
by Mathias Ewald 23 Oct '13

23 Oct '13

Hi, I am connecting to a Ubuntu Desktop over x2gobroker with the following session configuration: host=10.173.20.2 name=Terminal Server sshproxyuser=x2gosshproxy acl-groups-allow=vxltadmins setsessiontitle=true krblogin=false pack=16m-jpeg quality=9 speed=2 usesshproxy=true sshproxytype=SSH sshproxyhost=88.198.244.99 sshproxyport=22 sshproxyautologin=false sshproxysamepass=false sshproxysameuser=false width=800 height=600 dpi=96 fullscreen=false maxdim=false multidisp=false xinerama=false usekbd=true sound=true soundtunnel=true defsndport=false soundsystem=pulse startsoundsystem=true useexports=false useiconv=false iconvform=UTF-8 iconvto=UTF-8 fstunnel=true print=false usemimebox=false mimeboxaction=OPEN autostart=false xdmcpserver=localhost command=XFCE4 published=false command=XFCE acl-groups-deny=ALL acl-clients-allow=ALL acl-any-order=deny-allow sshproxysameuser=false After a while I realized that memory usage went very high on that x2go server and found out I was having 10 sessions running. That makes sense as I always wondered why my sessions are not resumed. So it looks like instead of resuming I get a new session every time. Is there any configuration I am missing that would force resume if there is a session available and clean up sessions after say a timeout or similar? cheers Mathias

1 0

x2go session broker & apache
by Ted Barnes 23 Oct '13

23 Oct '13

Hi All: Am experimenting with x2go session broker (am running it in a virtual machine). All in all, I plan to try to run my x2go sessions through an SSL connection to avoid having to manage SSH keys. Because I anticipate a more complicated setup, am trying the "wsgi" option. Installed just fine (apt-get install x2gobroker-wsgi). The documentation mentions using Apache along side (http://wiki.x2go.org/doku.php/doc:installation:x2gobroker: " With Apache2+WSGI...), so I tried to install apache2 but get the following type of error: Starting web server: apache2 Syntax error on line 7 of /etc/apache2/conf.d/x2gobroker-wsgi: Invalid command 'WSGIDaemonProcess', perhaps misspelled or defined by a module not included in the server configuration Action 'start' failed. The Apache error log may have more information. failed! Should I not be trying to install Apache (this is a fresh VM, so apache was not previously installed), or is there some other install or setting I should have done? Thanks!

1 0

SSH proxy user name
by Mathias Ewald 21 Oct '13

21 Oct '13

Hi, how can I have a user not only type his password to the proxy with preconfigured username but have him type his username, too? cheers Mathias

2 3

o
by Short, Kermit 21 Oct '13

21 Oct '13

Greetings! Thank you to everyone who's helped me up to this point!! I've got the x2goclient and seemingly all the required libraries (used objdump -x "x2goclient" | grep NEEDED) to find out all the required linked libraries), and on the thin client I can launch the x2goclient program and the familiar GUI interface pops up. I can create a session as I normally would, and when I double click the session and try and authenticate, the client contacts the remote x2goserver daemon and creates a session. However, that's where everything stops working. I usually get a black window that pops up with an X2Go watermark in it. Eventually my remote graphical desktop appears in this window and I'm off and running. That black window pop up is not happening on the thin client. The display stays on the credential entry screen and the status simply says 'Finished' and the client goes back to it's typical waiting state. If I try to connect again, I can see that a session on the remote server daemon exists. I can suspend or terminate it. If I try to resume or create a new session, the aforemention behaviour is repeated...no black x2go window, just 'Finished' and that's it. Anyone have any ideas? It seems like I'm missing some program or module that the client relies on. Thanks! -- Kermit Short DCS-5

2 3

Re: [X2Go-User] X2Go-User Digest, Vol 38, Issue 19
by Ted Barnes 21 Oct '13

21 Oct '13

On 10/21/13 10:00, x2go-user-request(a)lists.berlios.de wrote: > Send X2Go-User mailing list submissions to > x2go-user(a)lists.berlios.de > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.berlios.de/mailman/listinfo/x2go-user > or, via email, send a message with subject or body 'help' to > x2go-user-request(a)lists.berlios.de > > You can reach the person managing the list at > x2go-user-owner(a)lists.berlios.de > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of X2Go-User digest..." > > > Today's Topics: > > 1. Install problems session broker (Ted Barnes) > 2. Re: X2Go client 4.0.0 can't resume certain sessions > (Sebastian Flothow) > 3. Re: [X2Go-Dev] Install problems session broker (Mike Gabriel) > 4. Re: X2Go client 4.0.0 can't resume certain sessions > (John Williams) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 20 Oct 2013 14:29:56 +0000 > From: Ted Barnes<madogdevelopment(a)gmail.com> > To: x2go-user(a)lists.berlios.de, x2go-dev(a)lists.berlios.de > Subject: [X2Go-User] Install problems session broker > Message-ID:<5263E8E4.9060005(a)gmail.com> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi All: > > Am starting to experiment with x2go session broker and am running into > install problems (have same trouble with daemon and x2gobroker-wsgi). > I'm using Squeeze. > > Initially was getting dependency issues with python-wsgi, so upgraded to > python2.7. > > Now am getting: > > The following packages have unmet dependencies: > initscripts : Breaks: console-setup (< 1.74) but 1.68+squeeze2 is to > be installed > keyboard-configuration : Breaks: console-setup (< 1.71) but > 1.68+squeeze2 is to be installed > libcups2 : Breaks: cups (< 1.5.0) but 1.4.4-7+squeeze3 is to be installed > E: Broken packages > root@bc:/home/soho# vserver First3 exec apt-get install x2gobroker-daemon > Reading package lists... Done > Building dependency tree > Reading state information... Done > Some packages could not be installed. This may mean that you have > requested an impossible situation or if you are using the unstable > distribution that some required packages have not yet been created > or been moved out of Incoming. > The following information may help to resolve the situation: > > The following packages have unmet dependencies: > initscripts : Breaks: console-setup (< 1.74) but 1.68+squeeze2 is to > be installed > keyboard-configuration : Breaks: console-setup (< 1.71) but > 1.68+squeeze2 is to be installed > libcups2 : Breaks: cups (< 1.5.0) but 1.4.4-7+squeeze3 is to be installed > > Do I have to use Wheezy? > > Any suggestions? Thanks! > > > ------------------------------ > > Message: 2 > Date: Mon, 21 Oct 2013 09:11:40 +0200 > From: Sebastian Flothow<sebastian.flothow(a)gip.com> > To: John Williams<jwilliams4200(a)gmail.com> > Cc: "x2go-user(a)lists.berlios.de"<x2go-user(a)lists.berlios.de> > Subject: Re: [X2Go-User] X2Go client 4.0.0 can't resume certain > sessions > Message-ID:<5264D3AC.5090703(a)gip.com> > Content-Type: text/plain; charset=UTF-8; format=flowed > > Am 19.10.2013 05:45, schrieb John Williams: > >> One thing that usually works is to restart the server process >> > I just had a look at /etc/init.d/x2goserver on my box, the only thing > being started there is x2gocleansessions. Is this what you're referring to? > > Is x2gocleansessions supposed to continue running in the background? > There are no x2gocleansessions processes running on my machine right now. > > - Sebastian > > > ------------------------------ > > Message: 3 > Date: Mon, 21 Oct 2013 08:03:30 +0000 > From: Mike Gabriel<mike.gabriel(a)das-netzwerkteam.de> > To: x2go-dev(a)lists.berlios.de > Cc: x2go-user(a)lists.berlios.de > Subject: Re: [X2Go-User] [X2Go-Dev] Install problems session broker > Message-ID: > <20131021080330.Horde.vMTxiO31d_BZWFOiFs6NCw2(a)mail.das-netzwerkteam.de> > > Content-Type: text/plain; charset="utf-8"; Format="flowed"; > DelSp="Yes" > > Hi Ted, > > On So 20 Okt 2013 16:29:56 CEST, Ted Barnes wrote: > > Thanks Mike(!). That worked(!) for "x2gobroker-daemon"? Did you mean don't use "x2gobroker-wsgi" on Squeeze? Or just python-wsgilog? As always, appreciate the help...Best, Ted > >> Am starting to experiment with x2go session broker and am running >> into install problems (have same trouble with daemon and >> x2gobroker-wsgi). I'm using Squeeze. >> >> Initially was getting dependency issues with python-wsgi, so >> upgraded to python2.7. >> > The session broker works with python2.6, as well. The problem was, > that I forgot to provide python-wsgilog for Debian squeeze in our > package archive. > > This has been fixed now. Please do not use python-wsgilog that has > been built for wheezy. It probably causes the troubles you described > below. > > >> [...] >> > Greets, > Mike > >

1 0

load balanced broker autologin
by Stefan Heitmüller 21 Oct '13

21 Oct '13

Hello everyone... I'm currently evaluating x2go as terminal server solution for our developer linux desktops. So far, it works, great, i'm using it with https session broker and 3 servers (with mate-desktop). Right now, i'm trying to setup load balancing for those servers (see http://wiki.x2go.org/doku.php/wiki:advanced:x2gobroker:loadbalancing) All servers are identical (thanks to puppet, like mentioned in the wiki), user-homes are mounted via nfs, users are mapped from active-directory (samba4) via likewise-open. I can login on every single server without the broker, but when i'm using the broker, i just can login once. The second x2goclient ist listing the load-balanced session profile as in active (so "/usr/lib/x2go/x2gobroker-agent stefan.heitmueller listsessions" seems to work, at least it does on cli), login just throws an error. When watching the logs and personal authorized_key files, i see that the broker is placing the ssh key onto the target server while login to the first session. When logging into the second one, there is no attempt to do so...how is the automatic login done without ssh keys? using postgres database?

2 1

Consultation on use of x2go
by Fermin Barboza 21 Oct '13

21 Oct '13

Hi currently I'm using TeamViewer and other systems that allow me to remotely support. The problem is that these systems are very costly for me. I'm looking for other alternatives. Right now I'm trying x2go I wonder whether I can use the same way x2go I use Teamviewer, especially to access Windows computers. Something that is very practical in systems like Teamviewer is that the person who supports you just have installed the software and to know your ID and password. Besides these systems allow direct access to any computer on the local network without having to open ports or configure routers or firewalls. >From already thank you very much. -- Fermín Barboza 099111954 http://informatica.barboza.com.uy

4 5

x2goclient SSL
by Mathias Ewald 21 Oct '13

21 Oct '13

Hi, I just noticed that connecting to a x2gobroker over https, x2goclient puts the public key to $HOME/ssl/exceptions/<FQND>/<Thumbprint> Please make the ssl folder hidden. cheers Mathias

2 1

Install problems session broker
by Ted Barnes 21 Oct '13

21 Oct '13

Hi All: Am starting to experiment with x2go session broker and am running into install problems (have same trouble with daemon and x2gobroker-wsgi). I'm using Squeeze. Initially was getting dependency issues with python-wsgi, so upgraded to python2.7. Now am getting: The following packages have unmet dependencies: initscripts : Breaks: console-setup (< 1.74) but 1.68+squeeze2 is to be installed keyboard-configuration : Breaks: console-setup (< 1.71) but 1.68+squeeze2 is to be installed libcups2 : Breaks: cups (< 1.5.0) but 1.4.4-7+squeeze3 is to be installed E: Broken packages root@bc:/home/soho# vserver First3 exec apt-get install x2gobroker-daemon Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you have requested an impossible situation or if you are using the unstable distribution that some required packages have not yet been created or been moved out of Incoming. The following information may help to resolve the situation: The following packages have unmet dependencies: initscripts : Breaks: console-setup (< 1.74) but 1.68+squeeze2 is to be installed keyboard-configuration : Breaks: console-setup (< 1.71) but 1.68+squeeze2 is to be installed libcups2 : Breaks: cups (< 1.5.0) but 1.4.4-7+squeeze3 is to be installed Do I have to use Wheezy? Any suggestions? Thanks!

2 1

Q: regarding x2go plugin
by Ted Barnes 20 Oct '13

20 Oct '13

Hi All: Am starting to experiment with the x2go plugin, and am trying to run it on a virtual machine. I'm also, as a baseline, working with a separate server where I'm running apache2 and the x2goplugin-provider. Initially, I could connect to the "regular" server but not to the VM. After disabling all the firewall rules (which I'll want to go back and address eventually), I could get the login screen to appear when trying to connect to the VM. However, I still can't actually connect. NOTE: In both scenarios, I am purposely not generating ssh keys, as eventually I want to explore using x2go with SSL. Q: When I initially connect to the "regular" server, I get asked to OK an ssh key, which I do and I can connect. I never get asked this question when trying to connect to VM. Any suggestions as to how to complete this initial experiment on using the plugin with a VM? Thanks!

1 0

Fedora and Fedora EPEL X2Go packages
by Orion Poplawski 18 Oct '13

18 Oct '13

X2Go packages are now available in the official repositories for: - Fedora 20 - Fedora 19 in updates-testing - EPEL 6 in epel-testing (missing python-x2go/pyhoca for now) This is not a full set yet, but has the basics. If there is anything missing that you would like to set, let me know. -- Orion Poplawski Technical Manager 303-415-9701 x222 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane orion(a)nwra.com Boulder, CO 80301 http://www.nwra.com

1 0

nx-libs missing on Fedora 19
by Michael DePaulo 18 Oct '13

18 Oct '13

Jan Engelhardt (and anybody else involved in X2Go's openSUSE Build Service for Fedora), It appears that the nx-libs packages are failing to compile for Fedora 19. It is thus impossible to install x2go using the OBS Fedora 19 repo: https://build.opensuse.org/project/show/X11:RemoteDesktop:x2go Some people have suggested the workaround of using the Fedora 18 repo on Fedora 19. That workaround seems to have worked for me. However, I plan on updating the wiki (I have an account) and I do not want to write that people should use the Fedora 18 repo on Fedora 19 unless I get confirmation that it is safe to do so. https://ask.fedoraproject.org/question/31602/cant-install-x2go-on-f19/ I might be able to help with fixing the nx-libs compiliation issue. According to the OBS, it looks like newer versions of nx-libs are failing to compile on Fedora 18, RHEL5 and RHEL6 also: https://build.opensuse.org/project/monitor/X11:RemoteDesktop:x2go?blocked=0… -Mike

2 1

trouble building nxlibs 3.5.0.21
by Short, Kermit 17 Oct '13

17 Oct '13

Greetings, I'm trying to build nx-libs from a source tarball for version 3.5.0.21. When I run: make build-lite I get a compilation abort while building nxcomp. The compiler is looking for jpeglib.h. I've run a quick find and that file doesn't exist in the hierarchy created by the tarball. g++ -c -O3 -fno-rtti -fno-exceptions -I../nx-X11/exports/include -Wmissing-declarations -fPIC -DIN_ADDR_T=in_addr_t -DVERSION=\"3.5.0\" -DPACKAGE_NAME=\"\" -DPACKAGE_TARNAME=\"\" -DPACKAGE_VERSION=\"\" -DPACKAGE_STRING=\"\" -DPACKAGE_BUGREPORT=\"\" -DPACKAGE_URL=\"\" -Wall -Wpointer-arith Jpeg.cpp Jpeg.cpp:29:23: fatal error: jpeglib.h: No such file or directory compilation terminated. make[1]: *** [Jpeg.o] Error 1 make[1]: Leaving directory `/var/tmp/nx-libs-3.5.0.21/nxcomp' make: *** [build-lite] Error 2 This is probably mostly due to my reluctance (and inability in some cases) to clone the git source tree, but I'm a bit old school when it comes to building software...this automake stuff is about as modern as I can get. If anyone has any howtos on how to clone the nx-libs modules using http transports (I'm behind a fairly thorough firewall and web proxy) I'm willing to give it a shot, otherwise where can I obtain that header file? Thanks! -- Kermit Short DCS-5

2 2

sources for nxcomp and nxproxy
by Short, Kermit 17 Oct '13

17 Oct '13

Greetings, I'm trying to build an installation of x2go client to be installed on a thin client device. I've downloaded the tarball of the sources for x2goclient, and in the tarball is an installation README referring to prerequisites for installation. Two of the prerequisites are nxcomp and nxproxy with a URL of http://www.nomachine.com/sources.php. The webserver at nomachine indicates that the page no longer exists. Does anyone know where I can download a compatible version of these packages to be used with a source install of x2goclient and pyhocaGUI? Thanks! -- Kermit Short DCS-5

3 3

Q: regarding calling script or binary on login
by Ted Barnes 14 Oct '13

14 Oct '13

Hi All: Am trying to launch a script at login to mount an encrypted partition. I've been trying the option to place a script and/or commands in /usr/lib/x2go/extensions/post-start.d/scriptname.sh. I can get this to work, but want to figure out a way to keep the password for the mount hidden. Q: if I compile the script with shc, can I call a binary using the /usr/lib/x2go/extensions/post-start.d/ approach? It appears right now that the compiled script/binary can only be started as root, and x2go seems to call scripts as the user logging in. Q: alternatively, if I put one script in /usr/lib/x2go/extensions/post-start.d/ that calls another that contains the mount command with the password, is there a way to make the called script callable from the user login but also not "viewable" by the user. I've tried things like "chmod 711" but the script's content either remain visible if it executes or the script's content can't can't be seen but it doesn't execute. Any help appreciated - thanks!

2 1

mouse gestures on x2go
by Gianfilippo 14 Oct '13

14 Oct '13

Hi all, has anybody managed to make mouse gestures work through an x2go client connection (i.e. using easystroke )? if so, how? thank you.

1 0

Problems with broker-session-autologin
by Mathias Ewald 13 Oct '13

13 Oct '13

Hi everyone, the way I understand the broker-session-autologin feature as described on http://wiki.x2go.org/doku.php/wiki:advanced:x2gobroker:loadbalancing?s[]=au… is that a user will not have to type username and password to the x2go server machine he is logging in to. Therefore we create an SSH key pair on the broker with x2gobroker-keygen and then import it on the X2go server with x2gobroker-agent installed using x2gobroker-pubkeyauthorizer --broker-url http(s)://<broker-server>:<port>/<basepatch>/pubkeys/ It looks like step 1 worked fine: x2gobroker@x2gobroker:~$ ls -l .ssh total 12 -rw------- 1 x2gobroker x2gobroker 1683 Oct 13 07:26 id_rsa -rw-r--r-- 1 x2gobroker x2gobroker 380 Oct 13 07:26 id_rsa.pub -rw-r--r-- 1 x2gobroker x2gobroker 222 Oct 13 07:34 known_hosts x2gobroker@x2gobroker:~$ On the desktop (x2go server) the key was imported: root@desktop:~# ls -l /var/lib/x2gobroker/.ssh/ total 4 -rw-r--r-- 1 x2gobroker x2gobroker 422 Okt 13 13:30 authorized_keys root@desktop:~# cat /var/lib/x2gobroker/.ssh/authorized_keys ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDBHBNRsjCy80ihzJmKxK7I3Gfn8FMlr+I8MyLbZbMHBdlKhHnAP2qm2AfsWwJa2hP62RgS2Ussxk0d9b7pLe43GfS3xcZR6+/YPSYblFqmTx2NPTV9A8ycG0wGr/RYh6qgWOTBlPoyGbZeFa538iSt/6iNNln+fbFBOwmTDi+UondjVovIhERAC96tFMVLQdRg+4vMViOZkUdmn2+7VVpeYEAmdNPtXd8fluSYYLZo8D8RFPn8IHf3LWr6OXpos/7AOglsxJy2A3EtEkif7boKHV7XyRviKsamahhuNTw1HelbZvr8eAB/TPKWI80giszKPz+1H8PFU4KM2paB8T9f x2gobroker(a)x2gobroker.*************** root@desktop:~# With a session of this configuration [vs55-dev-mathias] setsessiontitle=true krblogin=false pack=16m-jpeg quality=9 speed=2 usesshproxy=true sshproxytype=SSH sshproxyhost=88.198.244.99 sshproxyport=22 sshproxyautologin=false sshproxysamepass=false sshproxysameuser=false width=800 height=600 dpi=96 fullscreen=false maxdim=false multidisp=false xinerama=false usekbd=true sound=false soundtunnel=false defsndport=false soundsystem=none startsoundsystem=false useexports=false useiconv=false iconvform=UTF-8 iconvto=UTF-8 fstunnel=true print=false usemimebox=false mimeboxaction=OPEN autostart=false xdmcpserver=localhost command=XFCE4 published=false sessiontitle=vXLT - vSphere 5.5 Dev host=10.173.20.16 user=student0 name=vSphere 5.5 Dev command=XFCE sshproxyuser=mathias sshproxysameuser=false acl-groups-allow=mathias acl-groups-deny=ALL acl-clients-allow=ALL acl-any-order=deny-allow broker-session-autologin=true I would assume I did everything as described in the link above but here is what happens: 1) x2goclient --broker-url .... 2) session profiles received 3) click session above 4) enter password to ssh proxy 5) get window with title "student0(a)10.173.20.16" and text "Enter password to decrypt key" Now which password?? I didn't set any... In the meantime, x2goclient logs this: x2go-DEBUG-../onmainwindow.cpp:2160> Reading 3 sessions from config file. x2go-DEBUG-../onmainwindow.cpp:2757> Starting session with key. x2go-DEBUG-../httpbrokerclient.cpp:459> cmd request answer: "Access granted SERVER:10.173.20.16:22" x2go-DEBUG-../httpbrokerclient.cpp:441> parsing "Access granted SERVER:10.173.20.16:22" x2go-DEBUG-../httpbrokerclient.cpp:480> starting parser x2go-DEBUG-../httpbrokerclient.cpp:499> server IP: "10.173.20.16" x2go-DEBUG-../httpbrokerclient.cpp:500> server port: "22" x2go-DEBUG-../httpbrokerclient.cpp:507> parsing has finished x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:3307> Server: "10.173.20.16" x2go-INFO-8> "Starting connection to server: 10.173.20.16:22" x2go-DEBUG-../onmainwindow.cpp:2796> Start new ssh connection to server:"10.173.20.16":"22" krbLogin: false x2go-DEBUG-../httpbrokerclient.cpp:518> sslError ,code:"The host name did not match any of the valid hosts for this certificate": x2go-DEBUG-../httpbrokerclient.cpp:518> sslError ,code:"The certificate is self-signed, and untrusted": x2go-DEBUG-../httpbrokerclient.cpp:459> cmd request answer: "Access granted SERVER:10.173.20.16:22" x2go-DEBUG-../httpbrokerclient.cpp:441> parsing "Access granted SERVER:10.173.20.16:22" x2go-DEBUG-../httpbrokerclient.cpp:480> starting parser x2go-DEBUG-../httpbrokerclient.cpp:499> server IP: "10.173.20.16" x2go-DEBUG-../httpbrokerclient.cpp:500> server port: "22" x2go-DEBUG-../httpbrokerclient.cpp:507> parsing has finished x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:3307> Server: "10.173.20.16" x2go-INFO-8> "Starting connection to server: 10.173.20.16:22" x2go-DEBUG-../onmainwindow.cpp:2796> Start new ssh connection to server:"10.173.20.16":"22" krbLogin: false x2go-DEBUG-../onmainwindow.cpp:2891> SSH connection established. x2go-DEBUG-../onmainwindow.cpp:3117> Continue normal x2go session x2go-DEBUG-../onmainwindow.cpp:3497> "Session data: " x2go-DEBUG-../onmainwindow.cpp:3500> Starting new managed session. x2go-DEBUG-../onmainwindow.cpp:1165> Removing apps from tray x2go-DEBUG-../onmainwindow.cpp:3940> Executing remote command: "x2gostartagent 800x600 adsl 16m-jpeg-9 unix-kde-depth_24 us auto 1 D XFCE" x2go-DEBUG-../onmainwindow.cpp:1423> Close event received. x2go-INFO-6> "Closing x2goclient..." x2go-DEBUG-../onmainwindow.cpp:1276> Saving settings... x2go-DEBUG-../onmainwindow.cpp:1285> Saved settings. x2go-DEBUG-../onmainwindow.cpp:1307> Waiting for the SSH connection to finish... x2go-DEBUG-../onmainwindow.cpp:1309> Waited for the SSH connection to finish. x2go-INFO-7> "Closed x2goclient." x2gobroker shows this in the logs: root@x2gobroker:~# tail -n 0 -f /var/log/x2gobroker/* ==> /var/log/x2gobroker/access.log <== ==> /var/log/x2gobroker/access.log.1 <== ==> /var/log/x2gobroker/access.log.2.gz <== ==> /var/log/x2gobroker/authservice.log <== ==> /var/log/x2gobroker/authservice.log.1 <== ==> /var/log/x2gobroker/authservice.log.2.gz <== ==> /var/log/x2gobroker/broker.log <== ==> /var/log/x2gobroker/broker.log.1 <== ==> /var/log/x2gobroker/broker.log.2.gz <== ==> /var/log/x2gobroker/error.log <== ==> /var/log/x2gobroker/error.log.1 <== ==> /var/log/x2gobroker/wsgi.log <== ==> /var/log/x2gobroker/wsgi.log.2013-10-10_06 <== ==> /var/log/x2gobroker/wsgi.log.2013-10-13_06 <== ==> /var/log/x2gobroker/broker.log <== 2013-10-13 09:41:25,008 - broker - INFO - client address is 87.151.248.112 2013-10-13 09:41:25,008 - broker - DEBUG - username: mathias, password: XXXXX, task: listsessions, profile_id: , cookie: 2013-10-13 09:41:25,009 - broker - DEBUG - base_broker.X2GoBroker.get_authentication_mechanism(): found default-auth-mech in global config section: pam 2013-10-13 09:41:25,010 - broker - DEBUG - base_broker.X2GoBroker._do_authenticate(): authenticating user=mathias with password=<hidden> against backend=inifile. 2013-10-13 09:41:25,010 - broker - DEBUG - connecting to authentication service socket /run/x2gobroker/x2gobroker-authservice.socket 2013-10-13 09:41:25,011 - broker - DEBUG - sending username=mathias, password=<hidden>, service=x2gobroker to authentication service 2013-10-13 09:41:25,026 - broker - INFO - authentication against PAM service »x2gobroker« succeeded for user »mathias« 2013-10-13 09:41:25,027 - broker - DEBUG - base_broker.X2GoBroker.check_access(): result of authentication check is: True 2013-10-13 09:41:25,034 - broker - DEBUG - base_broker.X2GoBroker.get_session_autologin(): found default-session-autologin in global config section: False 2013-10-13 09:41:25,087 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: none 2013-10-13 09:41:25,094 - broker - DEBUG - base_broker.X2GoBroker.get_session_autologin(): found broker-session-autologin in session profile with ID vs55-dev-mathias: true. This one has precendence over the default value. 2013-10-13 09:41:25,144 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: none 2013-10-13 09:41:25,151 - broker - DEBUG - base_broker.X2GoBroker.get_session_autologin(): found default-session-autologin in global config section: False 2013-10-13 09:41:25,206 - broker - DEBUG - base_broker.X2GoBroker.get_session_autologin(): found default-session-autologin in global config section: False 2013-10-13 09:41:25,259 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: none 2013-10-13 09:41:31,634 - broker - INFO - client address is 87.151.248.112 2013-10-13 09:41:31,635 - broker - DEBUG - username: mathias, password: XXXXX, task: selectsession, profile_id: vs55-dev-mathias, cookie: 2013-10-13 09:41:31,636 - broker - DEBUG - base_broker.X2GoBroker.get_authentication_mechanism(): found default-auth-mech in global config section: pam 2013-10-13 09:41:31,636 - broker - DEBUG - base_broker.X2GoBroker._do_authenticate(): authenticating user=mathias with password=<hidden> against backend=inifile. 2013-10-13 09:41:31,636 - broker - DEBUG - connecting to authentication service socket /run/x2gobroker/x2gobroker-authservice.socket 2013-10-13 09:41:31,637 - broker - DEBUG - sending username=mathias, password=<hidden>, service=x2gobroker to authentication service 2013-10-13 09:41:31,652 - broker - INFO - authentication against PAM service »x2gobroker« succeeded for user »mathias« 2013-10-13 09:41:31,652 - broker - DEBUG - base_broker.X2GoBroker.check_access(): result of authentication check is: True 2013-10-13 09:41:31,659 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: none I am not sure how the mechanism works so that the client can log in using pub key as a user for whom no ssh public key was installed, so I need your help. cheers Mathias

1 0

pyhoca-gui error
by Mathias Ewald 13 Oct '13

13 Oct '13

Hi, connecting to my server I get this since the day before yesterday: Dunno what changed ... mathias@x220:~$ pyhoca-gui --debug Xlib.protocol.request.QueryExtension pyhoca-gui[15814] (PyHoca-GUI) DEBUG: PyHoca-GUI's user interface language is: en_US. pyhoca-gui[15814] (PyHoca-GUI) INFO: PyHoca GUI is starting up pyhoca-gui[15814] (PyHoca-GUI) INFO: start TaskBarIcon of type: ('__WXGTK__', 'wxGTK', 'unicode', 'gtk2', 'wx-assertions-off', 'SWIG-1.3.29') pyhoca-gui[15814] (PyHoca-GUI) WARN: the current release of PyHoca-GUI does not support client configuration pyhoca-gui[15814] (x2gosessregistry-pylib) NOTICE: registering X2Go session **********... pyhoca-gui[15814] (x2goclient-pylib) NOTICE: initializing X2Go session... pyhoca-gui[15814] (x2gocontrolsession-pylib) NOTICE: connecting to [**********]:22 pyhoca-gui[15814] (PyHoca-GUI) INFO: SSH key authentication to server failed, trying next auth-mechanism pyhoca-gui[15814] (PyHoca-GUI) INFO: password dialog box started pyhoca-gui[15814] (x2gocontrolsession-pylib) NOTICE: connecting to [**********]:22 pyhoca-gui[15814] (PyHoca-GUI) NOTICE: [********** - connect] Authentication has been successful. Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/pyhoca/wxgui/logon.py", line 438, in OnLogin self._PyHocaGUI.notifier.send(self.current_profile_name, context='AUTH_%s' % self.current_profile_name, timeout=4000) File "/usr/lib/python2.7/dist-packages/pyhoca/wxgui/notify.py", line 137, in send if not n.show(): glib.GError: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.freedesktop.Notifications was not provided by any .service files pyhoca-gui[15814] (PyHoca-GUI) INFO: exit application mathias@x220:~$ For some reaseon pub key auth doesn't work anymore and even with password auth it shows this error message. cheers Mathias

2 1

X2go browser plugin & session broker
by Ted Barnes 10 Oct '13

10 Oct '13

Hi All: Currently the people I support who use x2go connect over ssh and are "outside the firewall". This means needing some secure way to get remote users the ssh private key. Q: How do other people do this, where there is no secure connection until the private ssh key is provided? Email doesn't seem to be a great way to send someone a key (e.g., as a password protected file)....maybe try some sort of "user login" web page or drop box? My understanding of the documented way of giving someone a key assumes you are on the same LAN....is that wrong? Q: Does x2go session broker still require ssh even if the initial connection is made over HTTPS? Would x2go session broker be a way to avoid using SSH keys but still provide an encrypted connection? Q: Does the x2go plugin work on Windows and OS X at this point? Would the x2go plugin be a means to connect over HTTPS securely with a user name and password and avoid SSH keys? Any suggestions, please!

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

x2go-user