Yes and no. For Windows, you could put the X2GoClient directory on the USB flash drive, add the ssh private key, and add a small batch file that runs x2goclient.exe with the "--portable" option.
The catch is that there is no autorun for USB flash drives (that's a security feature) in Windows, so your users would have to double-click on the batch file.
Using a CD/DVD would probably work, as Windows does support autorun there, IIRC.
Note that a system administrator may change this and e.g. disable autorun completely, so there's no guarantee that it will work in 100% of all cases.
- -Stefan
Hi Stefan,
Oh, I forgot to indicate that I want to do this on Linux. On Windows, I don't know how that could work and the scripting environment is a little sketchy, but I know that there have been similar projects under Linux, for ssh and login, but that was a long time ago. PamUSB if I recall correctly. Is there something like that in X2go? I just remember seeing something in the list of features. The idea would be (like in PamUSB it was) that when you pull the stick out, the session autocloses.
Markus
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Am 11.02.2015 um 14:04 schrieb Nigra Truo:
Oh, I forgot to indicate that I want to do this on Linux. On Windows, I don't know how that could work and the scripting environment is a little sketchy, but I know that there have been similar projects under Linux, for ssh and login, but that was a long time ago. PamUSB if I recall correctly. Is there something like that in X2go? I just remember seeing something in the list of features. The idea would be (like in PamUSB it was) that when you pull the stick out, the session autocloses.
Linux users and admins (except for those following the false prophets of systemd) have always believed that unix tools should "do one thing right".
So in your case, to have a session start automatically once a certain USB flash memory is plugged in, you will probably have to use udev rules or something similar.
If it's possible to terminate/suspend an x2gosession automatically once the USB flash memory is removed, I don't know. But I'd hope that udev can handle that as well (with some scripting magic).
Also, you might want to ping Heinz (see CC) - I know that from the very beginning of X2Go, there's been an option to use SmartCards for authentication and to move a suspended session around between terminals just by plugging the SmartCard into the new terminal. I *think* this method has been expanded to use USB flash memory instead of SmartCards, but I've never used it myself nor seen it in action, so asking Heinz is your best bet here.
BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32)
iQEcBAEBAgAGBQJU267IAAoJEG7d9BjNvlEZnGcIAIjJvNrHkkoECQFWJKjbA3qU vu7RehKmDz4qXtRR0ssulfQAGVFLSf6KKi++gMWy9lj0l+TU+XVlwPFIVlN501us XMMRchRS3KL3rt4iemWjceV6h5ImwvgjvmN8tzBrLYVKtLXhOZqZnRLgJ+e6yemX g2/oeUqmZsGrRIzYVXvNaDJfX2MrAXPcFhn3qUmHLHJOQljsRlCZ9TqKw6zjB9fY I6gNolQe8rNFEy6Wgm/HIYhkSFMgaM8tUTITktnYiVzGIBuJPKO+DIys8eM6wH9s 8/Sf/Asm+1RSVlG3fT1degCc6bYCjlgohtuQF6dKofDODv+effII4I9MiQSUPPY= =sHLg -----END PGP SIGNATURE-----
On Mi 11 Feb 2015 20:34:32 CET, Stefan Baur wrote:
Am 11.02.2015 um 14:04 schrieb Nigra Truo:
Also, you might want to ping Heinz (see CC) - I know that from the very beginning of X2Go, there's been an option to use SmartCards for authentication and to move a suspended session around between terminals just by plugging the SmartCard into the new terminal. I *think* this method has been expanded to use USB flash memory instead of SmartCards, but I've never used it myself nor seen it in action, so asking Heinz is your best bet here.
Yeah, the GnuPG SmartCard support in X2Go Client should be looked at
and tweaked/improved so that USB tokens will also get support (e.g.
UBKey devices or so).
Also, there is an x2gothinclient-smartcard package in
x2gothinclient.git, that adds those udev rules Stefan has been talking
about.
This all won't work out of the box, it needs some C++ skills and udev
skills to get that implemented.
Regards, Mike
--
DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xf...