<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Stefan,</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div>Q1: So now I'm confused - are you trying to connect to the same server, from both clients? Or are these two different servers, not only two different clients?</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
My response: I am trying to connect from one x2go client (Mac 10.10.4) to one x2go server (RHEL7). When I login from the x2go client using a non-root account to the x2goserver the session kicks me back to the login screen. When I login from the x2go client
using a root account to the x2goserver I am able to connect without any problems.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Q2: It doesn't look like you allowed incoming connections for x2goclient.app yet? Judging from what Mihai (one of our resident Mac experts here on the list) told me, you have to, or X2GoClient won't work</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
My response: the x2go server is RHEL7, how do you allow incoming connections for x2goclient.app? </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
The x2goserver is installed and the x2gocleansessions.service is running. Here are the rpms installed and the preceding firewall commands tried. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div>
<div><font face="Calibri,sans-serif">[root@ ~]# rpm -qa | grep x2go</font></div>
<div><font face="Calibri,sans-serif">x2goserver-4.0.1.19-3.el7.x86_64</font></div>
<div><font face="Calibri,sans-serif">x2goserver-xsession-4.0.1.19-3.el7.x86_64</font></div>
<div><font face="Calibri,sans-serif">x2goagent-3.5.0.31-1.el7.x86_64</font></div>
<div><font face="Calibri,sans-serif">x2goclient-4.0.3.1-1.el7.x86_64</font></div>
<div><font face="Calibri,sans-serif">[root@ ~]# firewall-cmd --permanent --add-service=x2go</font></div>
<div><font face="Calibri,sans-serif">Error: INVALID_SERVICE: x2go</font></div>
<div><font face="Calibri,sans-serif">[root@ ~]# firewall-cmd --permanent --add-service=x2gocleansessions.service</font></div>
<div><font face="Calibri,sans-serif">Error: INVALID_SERVICE: x2gocleansessions.service</font></div>
<div><font face="Calibri,sans-serif">[root@ ~]# firewall-cmd --permanent --add-service=x2goclient.app</font></div>
<div><font face="Calibri,sans-serif">Error: INVALID_SERVICE: x2goclient.app</font></div>
<div><font face="Calibri,sans-serif">[root@ ~]# firewall-cmd --permanent --add-service=x2goclient</font></div>
<div><font face="Calibri,sans-serif">Error: INVALID_SERVICE: x2goclient</font></div>
<div><font face="Calibri,sans-serif">[root@ ~]# systemctl status x2gocleansessions.service</font></div>
<div><font face="Calibri,sans-serif">x2gocleansessions.service - X2go session cleanup</font></div>
<div><font face="Calibri,sans-serif"> Loaded: loaded (/usr/lib/systemd/system/x2gocleansessions.service; enabled)</font></div>
<div><font face="Calibri,sans-serif"> Active: active (running) since Tue 2015-09-15 09:04:18 PDT; 4 weeks 0 days ago</font></div>
<div><font face="Calibri,sans-serif"> Main PID: 717 (x2gocleansessio)</font></div>
<div><font face="Calibri,sans-serif"> CGroup: /system.slice/x2gocleansessions.service</font></div>
<div><font face="Calibri,sans-serif"> └瘢雹─717 /usr/bin/perl /usr/sbin/x2gocleansessions</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Q3: run the following 4 tests on the terminal, compare banner messages</font></div>
<div><font face="Calibri,sans-serif">My response: ran the ssh commands suggested but there are no banner differences. I’m able to connect to the x2goserver without issues. Xterm comes up without issues, no error messages.</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Q4: xquartz security tab screen shot</font></div>
<div><font face="Calibri,sans-serif">My response: both authenticate connections and allow connections from network clients are checked (see attachment)</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">Q5: are machines on same network</font></div>
<div><font face="Calibri,sans-serif">My response: yes they are</font></div>
<div><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div>Thank you,</div>
<div>Liz</div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Elizabeth Real Chavez <<a href="mailto:Elizabeth.Real@jpl.nasa.gov">Elizabeth.Real@jpl.nasa.gov</a>><br>
<span style="font-weight:bold">Date: </span>Monday, September 28, 2015 at 3:26 PM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:x2go-dev@lists.x2go.org">x2go-dev@lists.x2go.org</a>" <<a href="mailto:x2go-dev@lists.x2go.org">x2go-dev@lists.x2go.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: x2go client session kicks user back to the session login screen<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
Stephan,</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
I reinstalled xquartz 2.7.7 and x2goclient 4.0.5 and verified the settings are set to those recommended. </div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
The behavior is happening when regular users attempt to connect to an x2go server. This leads me to believe it could be a permissions issue?</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
When I attempt to connect as a regular linux user, I get kicked back to the login scree. However when I connect as ‘root’ there are no problems.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
CLIENT LOGIN AS REGULAR USER:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
I noticed that if I attempt to login as a regular linux user (real), that user gets kicked back to the login screen, here’s the session output:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
"Protocol mismatch or no X authentication data”</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
SERVER:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
The /var/log/secure reports:</div>
<div>
<div><font face="Calibri,sans-serif">Sep 28 15:11:34 **** sshd[27639]: Accepted keyboard-interactive/pam for real from ********** port 52380 ssh2</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:11:34 **** sshd[27639]: pam_unix(sshd:session): session opened for user real by (uid=0)</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:11:38 **** su: pam_unix(su:session): session opened for user real by (uid=0)</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:11:38 **** su: pam_unix(su:session): session closed for user real</font></div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
When I check the status of x2gocleansessions.service:</div>
<div><font face="Calibri,sans-serif">Sep 28 15:11:36 ******* /usr/sbin/x2gocleansessions[769]: real-50-1443478272_stDKDE_dp32: state file for this session does not exist: /tmp/.x2go-real/C-real-50-1443478272_stDKDE_dp32/state (this can be ignored during session
startups)</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
CLIENT LOGIN AS ROOT:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
As root there are no issues.</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
SERVER:</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
/var/log/secure shows:</div>
<div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:04 node4 sshd[6137]: Accepted password for root from ********* port 52504 ssh2</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:04 node4 sshd[6137]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:15 node4 polkitd[1516]: Registered Authentication Agent for unix-session:46638 (system bus name :1.102126 [/usr/libexec/kde4/polkit-kde-authentication-agent-1], object path /org/kde/PolicyKit1/AuthenticationAgent,
locale C)</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:17 node4 sshd[7291]: Accepted publickey for rmdc from ********** port 50161 ssh2: RSA 81:72:dd:4f:3d:a2:18:ba:ed:77:2a:1d:2e:72:f6:4b</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:17 node4 sshd[7291]: pam_unix(sshd:session): session opened for user rmdc by (uid=0)</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:17 node4 sshd[7291]: pam_unix(sshd:session): session closed for user rmdc</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:23 node4 sshd[7347]: Accepted publickey for root from ********** port 49422 ssh2: RSA 23:2c:8c:a6:fd:aa:80:ae:7e:fa:60:57:5f:e4:c2:98</font></div>
<div><font face="Calibri,sans-serif">Sep 28 15:21:23 node4 sshd[7347]: pam_unix(sshd:session): session opened for user root by (uid=0)</font></div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div>Thank you,</div>
<div>Liz</div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Elizabeth Real Chavez <<a href="mailto:Elizabeth.Real@jpl.nasa.gov">Elizabeth.Real@jpl.nasa.gov</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, September 24, 2015 at 9:12 AM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:x2go-dev@lists.x2go.org">x2go-dev@lists.x2go.org</a>" <<a href="mailto:x2go-dev@lists.x2go.org">x2go-dev@lists.x2go.org</a>><br>
<span style="font-weight:bold">Subject: </span>x2go client session kicks user back to the session login screen<br>
</div>
<div><br>
</div>
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hello,</div>
<div><br>
</div>
<div>I have a user who is not able to connect to an x2go server using x2go client for Mac. When I connect to the x2go server in question I am able to successfully connect and login. I’ve compared settings between the user’s and my Mac x2go client and they are
identical.</div>
<div><br>
</div>
<div>I’ve attached screen shots of the client session details. The last messages in the session are:</div>
<ul>
<li>Info: Your session was closed before reaching a usable state.</li><li>Info: This can be due to the local X server refusing access to the client.</li><li>Info: Please check authorization provided by the remote X application.</li><li>Session: Session terminated at</li></ul>
<div>x2go client: v4.0.4.0</div>
<div>xquarts: v2.7.7</div>
<div><br>
</div>
<div>Tried uninstalling the x2go client and installing it again but that did not help. Same errors while attempt is made to connect to x2go server.</div>
<div><br>
</div>
<div>Please advise.</div>
<div><br>
</div>
<div>
<div>Thank you,</div>
<div>Liz</div>
<br>
</div>
</div>
</div>
</span></div>
</div>
</span>
</body>
</html>