x2go-user

x2go-user@lists.x2go.org

3 participants
2322 discussions

restricting access to published applications
by Bernhard J. Mayr 22 Oct '14

22 Oct '14

Hi! Is there a chance to restrict access to x2go server to only published applications sessions in the way that a user can only establish x2go "published applications" sessions but no desktop session? Thankfully Yours! Bernhard -- ########################################################## Preisträger Constantinus-Preis 2012 Nutzen Sie auch unsere Apps für Android: Übersicht über alle deutschen ICD10-Codes: https://play.google.com/store/apps/details?id=net.eaustria.icd10.release Alle Arzneimittel und Medikamenten direkt am Smartphone: https://play.google.com/store/apps/details?id=net.eaustria.eaustria_medicat… ########################################################## Dr. Bernhard J. Mayr, MBA Projektkoordinator elexis-austria | Freie Software für freie Berufe Tulpenweg 10 4600 Wels, Austria Tel.: +43(0)660 31 96 763 E-Mail: bernhard.mayr(a)elexis-austria.net www: www.elexis-austria.net www: www.arztsoftware.it fb: www.facebook.com/elexis-austria youtube: www.youtube.com/elexisaustria

2 2

Re: [X2Go-User] x2go-user Digest, Vol 6, Issue 19
by Tom McManus 22 Oct '14

22 Oct '14

Where do I download x2goclient-4.0.1.6-20141019.dmg? -- Tom McManus (http://help.nmr.mgh.harvard.edu) On Tue, 21 Oct 2014 12:00pm, x2go-user-request(a)lists.x2go.org wrote: > Send x2go-user mailing list submissions to > x2go-user(a)lists.x2go.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.x2go.org/listinfo/x2go-user > or, via email, send a message with subject or body 'help' to > x2go-user-request(a)lists.x2go.org > > You can reach the person managing the list at > x2go-user-owner(a)lists.x2go.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of x2go-user digest..." > > > Today's Topics: > > 1. Changing the X2Go Client for Windows version numbering > (Michael DePaulo) > 2. Re: Changing the X2Go Client for Windows version numbering > (James M. Pulver) > 3. Re: Mac OS X 10.10 (Yosemite) X2Go client (Mike Gabriel) > 4. Re: Mac OS X 10.10 (Yosemite) X2Go client (Ricardo D?az Mart?n) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 20 Oct 2014 08:16:21 -0400 > From: Michael DePaulo <mikedep333(a)gmail.com> > To: "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org> > Subject: [X2Go-User] Changing the X2Go Client for Windows version > numbering > Message-ID: > <CAMKht8hnGJA5+QbP-zz9QU5PUpTTMm3T-qFdqg5p-qkG_oHRNg(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > X2Go Users, > > I'd like feedback on this topic. > > I am thinking of switching the X2Go Client for Windows version > numbering over to the version numbering that X2Go Client for Mac OS X > uses such as: > If X2Go Client for Windows 4.0.3.0 were released today: > 4.0.3.0-20141020 > If I had to make any sort of change, either in the build process or in > the source code, on 2014-11-21: > 4.0.3.0-20141121 > > The reason for this change is that I believe these version numbers > will be simpler and less confusing. This would be especially true for > Windows users who are not used to the version numbering used by Linux > distros. > > Under the current version numbering , if I were to build X2Go Client > for Windows 4.0.3.0 when it is released the version number would > simply be: > 4.0.3.0 > Then say I had to make 2 changes to the build process, such as calling > different commands during the build process or bundling different 3rd > party binaries/libraries (e.g., VcXsrv, OpenSSL). The 2 new version > numbers would be: > 4.0.3.0+build1 > 4.0.3.0+build2 > If I had to then make a change to the source code, it would be: > 4.0.3.0+hotfix1 > And if I had to make 2 more changes to the build process, the 2 new > version numbers would be: > 4.0.3.0+hotfix1+build1 > 4.0.3.0+hotfix1+build2 > > -Mike#2 > > > ------------------------------ > > Message: 2 > Date: Mon, 20 Oct 2014 12:27:40 +0000 > From: "James M. Pulver" <jmp242(a)cornell.edu> > To: "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org> > Subject: Re: [X2Go-User] Changing the X2Go Client for Windows version > numbering > Message-ID: > <981ce53b33b44aa89d78c6107bbac2eb(a)BY2PR04MB775.namprd04.prod.outlook.com> > > Content-Type: text/plain; charset="us-ascii" > > Personally, I don't love either build numbering method. That said, I find the date suffix much harder to parse personally, it's too many numbers munged together and I just end up ignoring it. > > What do you all mean by the numbering anyway - i.e. why would > 4.0.3.0+hotfix1 > Not be 4.0.3.1? > > Personally, from a Windows admin / user perspective, I don't care what the build process is in terms of a binary I download. I care if something changed. > > So if 4.0.3.0+build1 changed the version of gcc but didn't change the output, I doubt anyone would care - maybe somewhere would be a build # for deep debugging, but it wouldn't be in any download name someone would use. > > If 4.0.3.0+build2 packaged a new library that fixed a bug, I'd expect to see > 4.0.3.1 again as it fixed something "in the product" from my perspective. > > I'm a fan of MajorChange.MinorFeatureChange.Bugfix.someotherchange sort of software numbering. > > That all said - I would like to see the numbering be consistent across platforms in terms of code that is shared, and the method also be consistent. > -- > James Pulver > CLASSE Computer Group > Cornell University > > > -----Original Message----- > From: x2go-user-bounces(a)lists.x2go.org [mailto:x2go-user-bounces@lists.x2go.org] On Behalf Of Michael DePaulo > Sent: Monday, October 20, 2014 8:16 AM > To: x2go-user(a)lists.x2go.org > Subject: [X2Go-User] Changing the X2Go Client for Windows version numbering > > X2Go Users, > > I'd like feedback on this topic. > > I am thinking of switching the X2Go Client for Windows version numbering over to the version numbering that X2Go Client for Mac OS X uses such as: > If X2Go Client for Windows 4.0.3.0 were released today: > 4.0.3.0-20141020 > If I had to make any sort of change, either in the build process or in the source code, on 2014-11-21: > 4.0.3.0-20141121 > > The reason for this change is that I believe these version numbers will be simpler and less confusing. This would be especially true for Windows users who are not used to the version numbering used by Linux distros. > > Under the current version numbering , if I were to build X2Go Client for Windows 4.0.3.0 when it is released the version number would simply be: > 4.0.3.0 > Then say I had to make 2 changes to the build process, such as calling different commands during the build process or bundling different 3rd party binaries/libraries (e.g., VcXsrv, OpenSSL). The 2 new version numbers would be: > 4.0.3.0+build1 > 4.0.3.0+build2 > If I had to then make a change to the source code, it would be: > 4.0.3.0+hotfix1 > And if I had to make 2 more changes to the build process, the 2 new version numbers would be: > 4.0.3.0+hotfix1+build1 > 4.0.3.0+hotfix1+build2 > > -Mike#2 > _______________________________________________ > x2go-user mailing list > x2go-user(a)lists.x2go.org > http://lists.x2go.org/listinfo/x2go-user > > > ------------------------------ > > Message: 3 > Date: Tue, 21 Oct 2014 07:29:27 +0000 > From: Mike Gabriel <mike.gabriel(a)das-netzwerkteam.de> > To: Ricardo D?az Mart?n <ricardo.diaz(a)oceanosoft.com> > Cc: x2go-user(a)lists.x2go.org > Subject: Re: [X2Go-User] Mac OS X 10.10 (Yosemite) X2Go client > Message-ID: > <20141021072927.Horde.2ismKJ5MkdR9q5FJX70Shw1(a)mail.das-netzwerkteam.de> > > Content-Type: text/plain; charset="utf-8"; Format="flowed"; > DelSp="Yes" > > Hi Ricardo, > > On Di 21 Okt 2014 07:54:51 CEST, Ricardo D?az Mart?n wrote: > >> Hi Mike, >> >> I got some users updated to Yosemite. Could you send to me or upload to the >> releases the .dmg Yosemite compatible. >> >> Regards, >> >> -- >> <ricardo.diaz(a)oceanosoft.com> > > The Yosemite fix is now available in x2goclient-4.0.1.6-20141019.dmg [1]. > > Sorry for the delay! > Mike > > [1] > http://code.x2go.org/releases/binary-macosx/x2goclient/releases/4.0.2.1/x2g… > > -- > > DAS-NETZWERKTEAM > mike gabriel, herweg 7, 24357 fleckeby > fon: +49 (1520) 1976 148 > > GnuPG Key ID 0x25771B31 > mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de > > freeBusy: > https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x… >

3 4

Security setup on server with x2go
by Hanák 22 Oct '14

22 Oct '14

Hello, I would like to ask experienced users, how they solve security topics on their x2go servers. I have the server where users are allowed to start only very a limited set of commands through ssh. I am using sshd_config option ForceCommand which allows to start only /usr/local/bin/check_ssh_cmd where I test SSH_ORIGINAL_COMMAND. Everything works fine so far. Now I need to allow users to start also some commands through x2goclient. The problem is that in order x2go to work I need to allow also every single command which is sent by x2goclient. I tried to track what is being sent and there are a lot of commands like 'sh -c "echo X2GODATABEGIN: ... echo X2GODATAEND"'. So the question is, how to write the rules in check_ssh_cmd wrapper script. If I would allow any command containing X2GODATABEGIN and X2GODATAEND, it would probably work, but my security setup of ssh would be broken, because somebody who knows, how x2go internally works, could sent his own commands wrapped in X2GODATABEGIN and X2GODATAEND. What would you recommend? Any sugestions are appreciated. Pavel

1 0

x2go sessions
by Magnus Hagdorn 22 Oct '14

22 Oct '14

Hi there, is there a way I can limit the session types I offer to x2go clients? I would like to stop users from using gnome/kde sessions and get them to use icewm instead. I do realise that if they know how to they could simply execute the relevant session program directly. I'd just like to make the default session sane. Cheers magnus -- The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336.

2 1

X2Go Server / X2Go Client with openSSH 6.7 (Debian jessie et al.)
by Mike Gabriel 21 Oct '14

21 Oct '14

Hi all, openSSH 6.7 has just entered Debian unstable and will be in Debian jessie soon. It will probably land in other distributions rather sooner than later. As the openSSH developers have--by default--disabled several kex algorithm in the latest openSSH 6.7 release, X2Go Client on older systems (Debian wheezy, Ubuntu 14.04, etc.) will fail connecting to those machines. """ (This probably is the error message X2Go Client shows on your screen...) X2Go Client reports: kex error : did not find one of algos diffie-hellman-group1-sha1 in list curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 for kex algos """ The issue can be addressed in two ways... OPTION 1: --------- If you only have control of the client, you may get the issue resolved by backporting a libssh 0.6.3 version. Consult your distribution's build tools to make this happen. I will checkout what we as X2Go upstream can provide for you in our package repositories without breaking other parts of your system (older applications using libssh << 0.6.0 are very likely to break with that newer libssh). OPTION 2: --------- If you have control of the server, then you may want to re-enable the mode-insecure, older, by-default-disabled algos. From the sshd_config man page in openSSH 6.7: """ KexAlgorithms Specifies the available KEX (Key Exchange) algorithms. Multiple algorithms must be comma-separated. The supported algorithms are: curve25519-sha256(a)libssh.org diffie-hellman-group1-sha1 diffie-hellman-group14-sha1 diffie-hellman-group-exchange-sha1 diffie-hellman-group-exchange-sha256 ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 The default is: curve25519-sha256(a)libssh.org, ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521, diffie-hellman-group-exchange-sha256, diffie-hellman-group14-sha1 """ What you probably have to add to the KexAlgorithms parameter in /etc/ssh/sshd_config are these additional algos: diffie-hellman-group1-sha1 and diffie-hellman-group-exchange-sha1. """ KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group-exchange-sha256,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521 """ If you use the KexAlgorithms option in sshd_config, make sure that you: o also add all the default algos o restart openSSH server on your server and try a second login while you are still logged in with another session (in case you broker something by editing sshd_config) Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 1

Changing the X2Go Client for Windows version numbering
by Michael DePaulo 21 Oct '14

21 Oct '14

X2Go Users, I'd like feedback on this topic. I am thinking of switching the X2Go Client for Windows version numbering over to the version numbering that X2Go Client for Mac OS X uses such as: If X2Go Client for Windows 4.0.3.0 were released today: 4.0.3.0-20141020 If I had to make any sort of change, either in the build process or in the source code, on 2014-11-21: 4.0.3.0-20141121 The reason for this change is that I believe these version numbers will be simpler and less confusing. This would be especially true for Windows users who are not used to the version numbering used by Linux distros. Under the current version numbering , if I were to build X2Go Client for Windows 4.0.3.0 when it is released the version number would simply be: 4.0.3.0 Then say I had to make 2 changes to the build process, such as calling different commands during the build process or bundling different 3rd party binaries/libraries (e.g., VcXsrv, OpenSSL). The 2 new version numbers would be: 4.0.3.0+build1 4.0.3.0+build2 If I had to then make a change to the source code, it would be: 4.0.3.0+hotfix1 And if I had to make 2 more changes to the build process, the 2 new version numbers would be: 4.0.3.0+hotfix1+build1 4.0.3.0+hotfix1+build2 -Mike#2

2 2

Re: [X2Go-User] Mac OS X 10.10 (Yosemite) X2Go client
by Mike Gabriel 21 Oct '14

21 Oct '14

Hi Ricardo, On Di 21 Okt 2014 07:54:51 CEST, Ricardo Díaz Martín wrote: > Hi Mike, > > I got some users updated to Yosemite. Could you send to me or upload to the > releases the .dmg Yosemite compatible. > > Regards, > > -- > <ricardo.diaz(a)oceanosoft.com> The Yosemite fix is now available in x2goclient-4.0.1.6-20141019.dmg [1]. Sorry for the delay! Mike [1] http://code.x2go.org/releases/binary-macosx/x2goclient/releases/4.0.2.1/x2g… -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x…

2 1

X2Go client won't open desktop window on Mac OS X 10.10 Yosemite
by Robson Francisco de Souza 20 Oct '14

20 Oct '14

I've just upgrade my version of Mac OS X to 10.10 (Yosemite) and x2goclient (verion 4.0.2.1) started failing and printing the following message to .x2go/S-<my user>-50-1413676018_stDKDE_dp32/sessions: Socket: PANIC! Failed to resolve address of '/private/tmp/com.apple.launchd.iLnJoOXr4Z/org.macosforge.xquartz'. Loop: PANIC! Unknown display host '/private/tmp/com.apple.launchd.iLnJoOXr4Z/org.macosforge.xquartz'. As I try to open the connection a second time, a running section is detected, meaning the session was actually initiated but the client failed to open a local X11 window. The socket is present in the /private/tmp directory referred by the error message above, although its name ends with 'xquartz:0' instead of just 'xquartz'. Creating a symlink with the expected socket name does not solve the issue. It would seem like the client is trying to use the socket name as a host name? Perhaps misinformed by XQuartz? Any help will be greatly appreciated. Thanks, Robson -- Robson Francisco de Souza, PhD Laboratório de Estrutura e Evolução de Proteínas (LEEP/PSEL) Departamento de Microbiologia Instituto de Ciências Biomédicas Universidade de São Paulo Av. Prof. Lineu Prestes, 1374 - Ed. Biomédicas II - Sala 250 - 2o. andar Tel: 3091-0891 Cidade Universitária - CEP 05508-900 - São Paulo - SP - Brasil ---- Robson Francisco de Souza, PhD Protein Structure and Evolution Laboratory (LEEP/PSEL) Microbiology Departament Biomedical Sciences Institute University of Sao Paulo Av. Prof. Lineu Prestes, 1374 - Biomédicas II - Sala 250 Phone: 55-11-3091-0891 Cidade Universitária - ZIP 05508-900 - São Paulo - SP - Brazil

3 4

Re: [X2Go-User] X2Go on OS X 10.10 Yosemite not working
by Florian Mutter 19 Oct '14

19 Oct '14

X11 forwarding over SSH is working. It had some graphic glitches but I'm not sure they weren't there before. I did not test this in detail. > Am 17.10.2014 um 17:46 schrieb Ricardo Díaz Martín <oceanosoftlapalma(a)gmail.com>: > > I can confirm the issue. Looks like the problem is in in Xquartz... > > 2014-10-17 10:01 GMT+02:00 Florian Mutter <elm(a)skweez.net>: >> When I try to connect I get the following error: >> >> > NXPROXY - Version 3.5.0 >> > >> > Copyright (C) 2001, 2010 NoMachine. >> > See http://www.nomachine.com/ for more information. >> > >> > Info: Proxy running in client mode with pid '1170'. >> > Session: Starting session at 'Fri Oct 17 09:51:51 2014'. >> > Error: Failed to resolve address of '/private/tmp/com.apple.launchd.T6ee4BNtWi/org.macosforge.xquartz'. >> > Error: Unknown display host '/private/tmp/com.apple.launchd.T6ee4BNtWi/org.macosforge.xquartz'. >> > Session: Session terminated at 'Fri Oct 17 09:51:51 2014'. >> >> In the the folder is one file: >> >> > $ ls -l /private/tmp/com.apple.launchd.T6ee4BNtWi/ >> > total 0 >> > srw-rw-rw- 1 flmu wheel 0 17 Okt 09:41 org.macosforge.xquartz:0 >> >> I hope you can help. >> >> Thank you in advance, >> elm >> >> _______________________________________________ >> x2go-user mailing list >> x2go-user(a)lists.x2go.org >> http://lists.x2go.org/listinfo/x2go-user >

2 1

x2go not working on OS X Yosemite
by Christopher Thomas 18 Oct '14

18 Oct '14

It seems to hang. I get a dialogue box titled "Select session" with one session which has Status "running" but nothing else happens. Any ideas?

2 1

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

x2go-user