[X2go-dev] x2go & Kerberos

[Oleksandr.shneyder]

Robert Markula schrieb:
> Hi again,
> 
> Robert Markula wrote:
>> But if I try to login via x2go to an account that's not in the server's
>> passwd, but in ldap/kerberos, the x2go white login dialog disappears,
>> but nothing else happens. Running x2go from a terminal, I get this output:
> 
> Forgot to mention that I can see heavy traffic going from the x2go
> server to the x2go client after login. No terminal output window is
> shown however. So I guess authentication was somewhat successful?
> 
> Cheers,
> Robert
> _______________________________________________
> X2go-dev mailing list
> X2go-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/x2go-dev
Hello Robert,

as I already wrote, your problem is sudo configuration. As you can see
in output from x2goclient, you cannot execute "sudo x2gopgwrapper" :

sudo: setreuid(ROOT_UID, user_uid): Operation not permitted

all users running x2go should be a part of group "x2gousers". This group
 can execute "sudo x2gopgwrapper". It is configured in your "sudoers" file :


Defaults        env_reset
root    ALL=(ALL) ALL
#### X2GO section
%x2gousers ALL=(ALL) NOPASSWD: /usr/bin/x2gopgwrapper


You can check your configuration this way:


user at client:~$ ssh user at server
user at server's password:
Linux debian 2.6.26-1-amd64 #1 SMP Fri Mar 13 17:46:45 UTC 2009 x86_64

user at server:~$ id
uid=1000(user) gid=1000(user) Gruppen=110(fuse),114(x2gousers),1000(user)
user at server:~$ sudo x2gopgwrapper
: wrong argument


As you can see in output from "id", the user is a part from group
"x2gousers", and can execute command "sudo x2gopgwrapper".
In your case, your have output:

sudo: setreuid(ROOT_UID, user_uid): Operation not permitted

so, you have definitely problem with your sudo configuration.
I think, you must simple add your user in group "x2gousers" or modify
your "sudoers" file with command "visudo" to allow your user run "sudo
x2gopgwrapper"


Regards
-- 
Oleksandr Shneyder
Dipl. Informatik
X2go Core Developer Team

email:  oleksandr.shneyder at obviously-nice.de
web: www.obviously-nice.de

--> X2go - everywhere at home

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20091203/f19607c3/attachment.pgp>