Hi !
After a long time, sharing folder works on HP T620.
On the t620 : perhaps is it possible to optimize it) :
activate SSH server :
- /usr/bin/mclient set root/sshd/enabled 1
- /usr/bin/mcleint set root/sshd/userAccess 1
- /usr/bin/mclient commit
- /usr/share/manticore/plugins/sshd/wrappers/apply.sh root/sshd
put a sshd_config file like (it come from an ubuntu server config,
# What ports, IPs and protocols we listen for Port 22 # Use these options to restrict which interfaces/protocols sshd will bind to #ListenAddress :: #ListenAddress 0.0.0.0 Protocol 2 # HostKeys for protocol version 2 HostKey /etc/ssh/ssh_host_rsa_key HostKey /etc/ssh/ssh_host_dsa_key HostKey /etc/ssh/ssh_host_ecdsa_key HostKey /etc/ssh/ssh_host_ed25519_key #Privilege Separation is turned on for security UsePrivilegeSeparation yes
# Lifetime and size of ephemeral version 1 server key KeyRegenerationInterval 3600 ServerKeyBits 1024
# Logging SyslogFacility AUTH LogLevel INFO
# Authentication: LoginGraceTime 120 PermitRootLogin without-password StrictModes yes
RSAAuthentication yes PubkeyAuthentication yes #AuthorizedKeysFile %h/.ssh/authorized_keys
# Don't read the user's ~/.rhosts and ~/.shosts files IgnoreRhosts yes # For this to work you will also need host keys in /etc/ssh_known_hosts RhostsRSAAuthentication no # similar for protocol version 2 HostbasedAuthentication no # Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication #IgnoreUserKnownHosts yes
# To enable empty passwords, change to yes (NOT RECOMMENDED) PermitEmptyPasswords no
# Change to yes to enable challenge-response passwords (beware issues with # some PAM modules and threads) ChallengeResponseAuthentication no
# Change to no to disable tunnelled clear text passwords #PasswordAuthentication yes
# Kerberos options #KerberosAuthentication no #KerberosGetAFSToken no #KerberosOrLocalPasswd yes #KerberosTicketCleanup yes
# GSSAPI options #GSSAPIAuthentication no #GSSAPICleanupCredentials yes
X11Forwarding yes X11DisplayOffset 10 PrintMotd no PrintLastLog yes TCPKeepAlive yes #UseLogin no
#MaxStartups 10:30:60 #Banner /etc/issue.net
# Allow client to pass locale environment variables AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
# Set this to 'yes' to enable PAM authentication, account processing, # and session processing. If this is enabled, PAM authentication will # be allowed through the ChallengeResponseAuthentication and # PasswordAuthentication. Depending on your PAM configuration, # PAM authentication via ChallengeResponseAuthentication may bypass # the setting of "PermitRootLogin without-password". # If you just want the PAM account and session checks to run without # PAM authentication, then enable this but set PasswordAuthentication # and ChallengeResponseAuthentication to 'no'. UsePAM yes DenyUsers
Hope it's help anyone
Regards
Franck
Le 19/10/2016 08:51, "> BOTZ Franck (Administrateur Systèmes et Réseaux)
- DDT 67/SIDSIC/Pôle Infra (par Internet, dépôt x2go-user-bounces@lists.x2go.org)" a écrit :
Hi !
So, there is my configuration :
Terminal Hardware : HP t620 HP Thinpro (ubuntu 14.04 base) x2goclient 4.0.5.3
Broker Ubuntu server 16.04 64 LTS python-x2gobroker 0.0.3.1-0~934~ubuntu16.04.1 all
X2Go Session Broker (Python modules) x2gobroker 0.0.3.1-0~934~ubuntu16.04.1 all X2Go Session Broker (executable) x2gobroker-loadchecker 0.0.3.1-0~934~ubuntu16.04.1 all X2Go Session Broker (load checker service) x2gobroker-ssh 0.0.3.1-0~934~ubuntu16.04.1 amd64 X2Go Session Broker (SSH broker)Server : Ubuntu Desktop 16.04 64 LTS libx2go-log-perl 4.1.0.0-0~1359~ubuntu16.04.1 all Perl X2Go::Log package libx2go-server-db-per 4.1.0.0-0~1359~ubuntu16.04.1 amd64 Perl X2Go::Server:DB package libx2go-server-perl 4.1.0.0-0~1359~ubuntu16.04.1 all Perl X2Go::Server package x2goagent 2:3.5.0.33-0~687~ubuntu16.04.1 all X2Go agent x2gobroker-agent 0.0.3.1-0~934~ubuntu16.04.1 amd64 X2Go Session Broker (remote agent) x2goclient 4.0.5.1-0~1103~ubuntu12.04.1 amd64 X2Go Client application (Qt4) x2goserver 4.1.0.0-0~1359~ubuntu16.04.1 amd64 X2Go server daemon scripts x2goserver-common 4.1.0.0-0~1359~ubuntu16.04.1 amd64 X2Go Server (common files) x2goserver-extensions 4.1.0.0-0~1359~ubuntu16.04.1 all X2Go Server (extension support) x2goserver-fmbindings 4.1.0.0-0~1359~ubuntu16.04.1 all X2Go Server (file manager bindings) x2goserver-printing 4.1.0.0-0~1359~ubuntu16.04.1 all X2Go server (printing support) x2goserver-xsession 4.1.0.0-0~1359~ubuntu16.04.1
I can connect from my t620 to the server trough the broker. I can resum/suspend a session. The system is functionnal.
My next step is sharing a folder on the t620 (the folder used to mount a mass storage /tmp/tmpfs/media and access to it from the session open on the server.
On the broker, my x2gobroker-sessionprofiles.conf : [DEFAULT] defsndport=true useiconv=false iconvfrom=UTF-8 #height=600 export= quality=9 #fullscreen=true #layout= #model= useexports=true #width=800 speed=2 soundsystem=pulse print=false sndport=4713 xinerama=true variant= usekbd=true fstunnel=true applications= multidisp=false sshproxyport=22 sound=true rootless=true iconvto=UTF-8 soundtunnel=true dpi=96 sshport=22 setdpi=0 pack=16m-jpeg directrdp=false user=
[xfce] host=x2go-server-01 (10.0.0.1) name=XFCE command=XFCE type=auto fullscreen=true xinerama=false export="/tmp/tmpfs/media:1" broker-session-autologin=false usebrokerpass=true
As you can see, in the xfce section, I export the "/tmp/tmpfs/media:1" directory.
On the t620 my mass storage is mounted on /tmp/tmpfs/media/SomeUsbStick and I access it with the user who launch the x2goclient.
When the session openned I see on the server :
- the time to open session is longer with the export directive
- the media directory appears is home directory
- the media contained disk/_tmp_tmpfs_media directory
- When I list _tmp_tmpfs_media i have "permission denied"
- the mount command let me see (but brievely) a line like user@127.0.0.1 ...
- the trash disappear
So what can I do to access to my USB mass storage stick ?
Sincerly
Franck
x2go-user mailing list x2go-user@lists.x2go.org http://lists.x2go.org/listinfo/x2go-user