I am having GUI selection issue, when I select command =GNOME/KDE or Unity under in configuration of Broker server in /etc/x2go/broker/x2gobroker-sessionprofiles.conf . it is now working. Only a Blackscreen come . While without session broker I select "Connection to local Desktop " it works.
I am using Ubuntu 16.04 LTS for x2go server and below are the logs of that .
==> auth.log <== Jul 13 06:04:11 ubuntu sshd[20761]: Did not receive identification string from 192.168.0.19 Jul 13 06:04:11 ubuntu sshd[20762]: Accepted password for jyoti from 192.168.0.12 port 51482 ssh2 Jul 13 06:04:11 ubuntu sshd[20762]: pam_unix(sshd:session): session opened for user jyoti by (uid=0) Jul 13 06:04:11 ubuntu systemd-logind[831]: New session 11 of user jyoti.
==> lastlog <==
==> syslog <== Jul 13 06:04:11 ubuntu systemd[1]: Started Session 11 of user jyoti.
==> wtmp <== Qpts/23s/23jyoti192.168.0.12�[ �� _�� Qpts/23�[ _ʆ ==> syslog <== Jul 13 06:04:17 ubuntu /usr/bin/x2gostartagent: successfully started X2Go Agent session with ID jyoti-54-1594645454_stDGNOME_dp32 Jul 13 06:04:22 ubuntu /usr/bin/x2gomountdirs[21049]: successfully mounted TOM@127.0.0.1:38317/cygdrive/C/Users/TOM/X2GO~1/S-4962~1/spool to /tmp/.x2go-jyoti/spool/C-jyoti-54-1594645454_stDGNOME_dp32 Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: launching session with Xsession-x2go mechanism, using STARTUP="/usr/bin/gnome-session --session=gnome-flashback-metacity --disable-acceleration-check" Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: dbus wrapper available as /usr/bin/dbus-run-session
==> auth.log <== Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The Secret Service was already initialized Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The PKCS#11 component was already initialized
==> syslog <== Jul 13 06:04:24 ubuntu org.ayatana.bamf[21288]: bamfdaemon start/running, process 21337 Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: ** (process:21364): WARNING **: Failed to register client: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.gnome.SessionManager was not provided by any .service files Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Activating service name='org.a11y.atspi.Registry' Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Successfully activated service 'org.a11y.atspi.Registry' Jul 13 06:04:25 ubuntu org.a11y.atspi.Registry[21369]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Regards Jyoti Kumar Mobile: +919953437397
Hi, A connection to a local Desktop is a complete other procedure - the Desktop session is already running.Please try a direct connection with a new session and without the broker. Does this work?Do you use x2gobroker-session-autologin like in your last message? Regards,Martin Am Montag, den 13.07.2020, 13:26 +0000 schrieb Jyoti Kumar:
I am having GUI selection issue, when I select command =GNOME/KDE or Unity under in configuration of Broker server in /etc/x2go/broker/x2gobroker-sessionprofiles.conf . it is now working.
Only a Blackscreen come . While without session broker I select "Connection to local Desktop " it works.
I am using Ubuntu 16.04 LTS for x2go server and below are the logs of that .
==> auth.log <==
Jul 13 06:04:11 ubuntu sshd[20761]: Did not receive identification string from 192.168.0.19
Jul 13 06:04:11 ubuntu sshd[20762]: Accepted password for jyoti from 192.168.0.12 port 51482 ssh2
Jul 13 06:04:11 ubuntu sshd[20762]: pam_unix(sshd:session): session opened for user jyoti by (uid=0)
Jul 13 06:04:11 ubuntu systemd-logind[831]: New session 11 of user jyoti.
==> lastlog <==
==> syslog <==
Jul 13 06:04:11 ubuntu systemd[1]: Started Session 11 of user jyoti.
==> wtmp <==
Qpts/23s/23jyoti192.168.0.12�[
�� _��
Qpts/23�[
_ʆ==> syslog <==
Jul 13 06:04:17 ubuntu /usr/bin/x2gostartagent: successfully started X2Go Agent session with ID jyoti-54-1594645454_stDGNOME_dp32
Jul 13 06:04:22 ubuntu /usr/bin/x2gomountdirs[21049]: successfully mounted TOM@127.0.0.1:38317/cygdrive/C/Users/TOM/X2GO~1/S- 4962~1/spool to /tmp/.x2go-jyoti/spool/C-jyoti-54- 1594645454_stDGNOME_dp32
Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: launching session with Xsession-x2go mechanism, using STARTUP="/usr/bin/gnome-session --session=gnome-flashback-metacity --disable-acceleration-check"
Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: dbus wrapper available as /usr/bin/dbus-run-session
==> auth.log <==
Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The Secret Service was already initialized
Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The PKCS#11 component was already initialized
==> syslog <==
Jul 13 06:04:24 ubuntu org.ayatana.bamf[21288]: bamfdaemon start/running, process 21337
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: ** (process:21364): WARNING **: Failed to register client: GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name org.gnome.SessionManager was not provided by any .service files
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Activating service name='org.a11y.atspi.Registry'
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Successfully activated service 'org.a11y.atspi.Registry'
Jul 13 06:04:25 ubuntu org.a11y.atspi.Registry[21369]: SpiRegistry daemon is running with well-known name - org.a11y.atspi.Registry
Regards Jyoti Kumar Mobile: +919953437397
_______________________________________________x2go-user mailing listx2go-user@lists.x2go.org https://lists.x2go.org/listinfo/x2go-user
when I make direct connection without Broker using windows x2go client, same issue happen ( Black screen ). I selected session type as GNOME, KDE, UNITY one by one but getting black screen .
Do you use x2gobroker-session-autologin like in your last message?
- No I am not using this option "x2gobroker-session-autologin"
Regards Jyoti Kumar Mobile: +919953437397
Am 14.07.20 um 12:31 schrieb Jyoti Kumar:
when I make direct connection without Broker using windows x2go client, same issue happen ( Black screen ). I selected session type as GNOME, KDE, UNITY one by one but getting black screen .
Please see <https://wiki.x2go.org/doku.php/doc:de-compat>
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
I installed xfce Desktop Environment, now able to access from Direct session as well through Broker.
I was using session broker through http, --broker-url=http://1192.168.0.19:8080/plain/ and able to login using userid and password.
But I want to login with ssh key , how to do that ? I tried --broker-url=ssh://1192.168.0.19:22/plain/ but it was giving error "bash:/plain/: No sucjh file or directroy."
Should I need to make some changes in /etc/x2go/x2gobroker.conf ? if yes , what changes.
Below are the x2go broker packages installed on Ubuntu 20.04LTS
root@ubuntu:~# dpkg -l | grep x2go ii python3-x2gobroker 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (Python3 modules) ii x2gobroker 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (executable) ii x2gobroker-authservice 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (PAM authentication service) ii x2gobroker-common 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (common files) ii x2gobroker-daemon 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (standalone daemon) ii x2gobroker-wsgi 0.0.4.3-0~1003~ubuntu20.04.1 all X2Go Session Broker (WSGI) root@ubuntu:~#
Regards Jyoti Kumar Mobile: +919953437397
Am 15.07.20 um 14:39 schrieb Jyoti Kumar:
But I want to login with ssh key , how to do that ? I tried --broker-url=ssh://1192.168.0.19:22/plain/ but it was giving error "bash:/plain/: No sucjh file or directroy."
Should I need to make some changes in /etc/x2go/x2gobroker.conf ? if yes , what changes.
No. Your URL is wrong.
When using ssh, you need to specify the file system path to the broker executable as part of the URL, and separated from the server name/IP using a colon:
--broker-url=ssh://your-server-here:/usr/bin/x2gobroker-ssh
Also, 1192.something is not a valid IP, you might want to double-check that. You probably meant 192.something?
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
Thank you Stefan.
I am able to login Broker server using ssh userid and password from below command.
--broker-url=ssh://192.168.0.19:/usr/bin/x2gobroker<ssh://your-server-here:/usr/bin/x2gobroker-ssh>
Now I want to login broker server through ssh .pem key, how to do that ? I am using x2go client in Windows 7.
If I share user id and password of broker server to anyone, he can login through Putty or any Terminal via " ssh 192.168.0.19 " as well as through x2go client. It seems risky .
How to secure it ? Is there a way to disable putty or terminal access of ssh and allow only through x2go client.
Regards Jyoti Kumar Mobile: +919953437397
Am 16.07.20 um 18:22 schrieb Jyoti Kumar:
Now I want to login broker server through ssh .pem key, how to do that ? I am using x2go client in Windows 7.
You don't. ;)
X2GoClient on Windows can read OpenSSH Private Key files, and it can work with pageant.exe, which in turn can read PuTTY-style SSH Private Key files.
If I share user id and password of broker server to anyone, he can login through Putty or any Terminal via " ssh 192.168.0.19 " as well as through x2go client. It seems risky .
How to secure it ? Is there a way to disable putty or terminal access of ssh and allow only through x2go client.
X2Go is not a security mechanism, X2Go is a remote desktop/remote application tool. You need to use the standard Linux security mechanisms to lock down your system. However, I would guess it's near impossible to lock it down in a way that login via SSH to a shell is blocked, but X2Go still works.
If you want to increase security against people that are not supposed to be using your server, that can be done with 2FA (either SSH keyfiles, or various OTP methods). But blocking a legitimate user from running the shell, while still allowing X2Go ... no.
A longer explanation why this won't work, and why this is the wrong way to solve your issue, can be found in this bug report from a while ago: <https://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=1465>
-Stefan
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
I tried to login broker server with ssh key (privateKey.ppk), before I converted "id_rsa" private key with Putty Style such as .ppk using puttyGen
I am able to login with Putty and winscp using the privateKey.ppk .
But when I login with x2go client using below url it is asking "Enter passphrase to decrypt a key" I copied the privateKey.ppk into " C:\Program Files (x86)\x2goclient" directory and pageant.exe already exist there.
C:\Program Files (x86)\x2goclient\x2goclient.exe" --broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker --broker-key=privateKey.ppk
what I am missing ?
Regards Jyoti Kumar Mobile: +919953437397
Am 18.07.20 um 12:52 schrieb Jyoti Kumar:
But when I login with x2go client using below url it is asking "Enter passphrase to decrypt a key" I copied the privateKey.ppk into " C:\Program Files (x86)\x2goclient" directory and pageant.exe already exist there.
C:\Program Files (x86)\x2goclient\x2goclient.exe" --broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker --broker-key=privateKey.ppk
what I am missing ?
Like I said, X2GoClient can only use OpenSSH keys - not PEM, and neither PPK. To use a PPK file, you need to load it into pageant first, and pageant will take over authentication, so you don't specify the key as a x2goclient --something parameter. Instead, you use --broker-autologin.
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
C:\Program Files (x86)\x2goclient\x2goclient.exe" --broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker --broker-ssh-key=privateKey.ppk
Thanks Stefan. I am able to use pageant.exe for key based login. I have few doubts , please clear
1- Is screen sharing possible in x2go session, If I want to share my screen to other x2go user through broker ? He will login with my id and password.
2- one to one Desktop Access ? If multiple session are added in brokers profile list, it shows to every user who log in broker server with ssh user.
Regards Jyoti Kumar Mobile: +919953437397
team please reply,
From: Jyoti Kumar <jyotim995@outlook.com> Sent: Monday, July 27, 2020 18:05 To: x2go-user@lists.x2go.org <x2go-user@lists.x2go.org> Subject: Re: x2go Broker GUI selection issue [command = ]
Thanks Stefan. I am able to use pageant.exe for key based login. I have few doubts , please clear
1- Is screen sharing possible in x2go session, If I want to share my screen to other x2go user through broker ? He will login with my id and password.
2- one to one Desktop Access ? If multiple session are added in brokers profile list, it shows to every user who log in broker server with ssh user.
-
Jyoti Kumar -
Martin Lange -
Stefan Baur