[X2go-dev] x2goplugin test sites

[John A. Sullivan III]

On Wed, 2010-06-30 at 23:24 +0200, Mike Gabriel wrote:
> Sorry, the former mail had the wrong subject line...
> 
> Hi List,
> 
> I am thinking about setting up a public x2goplugin test site. This  
> test site needs some features.
> 
>    o accessible from everywhere on the internet
>    o no access to the internet (local iptables, blocking outgoing connections)
>    o ssh key auto-login (username x2gotest)
>    o disposable homes
>        - on login generate homedir-name (/home/x2gotest.<some-id>)
>        - create /home/x2gotest.<some-id> from
>          pre-configured skel (pam_mkhomedir)
>        - on logout remove /home/x2gotest.<some-id>
>    o x2go session timeouts (5min)
>    o allow simultaneous sessions (limit number of simultaneous sessions)
>    o ... (anything forgotten)
> 
> 
> If any of you can contribute to any of these aspects or add security  
> thoughts to the above list, please do so.
> 
> My questions:
> 
>    o when is the best moment to rename the home dir to a session  
> individual name?
>    o where can I hook into the logout x2go process to remove the  
> deprecated home
>      dir?
>    o does x2go support session timeouts natively?
>    o can x2go limit the number of allowed simultaneous sessions?
> 
> Greets,
> Mike
> 
Although I've not played with it much, I believe you can set limits
in /etc/x2go/x2goserver.conf.  The code which checks it
(x2gosessionlimit) doesn't quite make sense to me but I didn't digest it
closely.  I posted my questions about it to the list a couple of months
ago.  Thanks - John