<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=DE link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>Package: x2go-server<o:p></o:p></p><p class=MsoNormal>Version: <span lang=EN-US>4.0.1.20</span><o:p></o:p></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Dear all,<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>I have an Ubuntu 16.04.2 LTS (Server) which is integrated in the Windows Active Directory (AD). The user authentification is done via Kerberos followed here:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><a href="https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto">https://help.ubuntu.com/community/ActiveDirectoryWinbindHowto</a><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>The directories are also mounted automatically every time the user logs on via pam_mount:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US> <volume user="*" fstype="cifs" server="fileserver1" path="home/%(DOMAIN_USER)" mountpoint="/home/%(DOMAIN_USER)"/><o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>This works quite nice and I can login via ssh with the user names of the AD. I also would like to use x2go for the AD users. However, it works fine when I try to connect to the server (called ssh or ssh2) from the internal network (192.168.0.0). The users get their remote desktops. However, if they try to login remotely from another subnet the session could not be initialized. I was looking for the problem the last 3 weeks. Of course the first idea was due to a misconfigured firewall.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>The configuration is as follows:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>INTERNET ----- NAT1 -----(192.168.183.0)------ NAT2 ----(192.168.0.0)------ ssh-server <o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>I replaced the firewall, I put the PC (ssh-server) directly after the NAT. I had a look in all network connections with wireshark. I opened all ports. None of these things solved the problem. However, I can login with a local user (user account on the ssh-server) on the ssh-server but not with a user of the AD (username test01). I set the logging to the debug mode and I see that a file is always blocked. I do not understand why this file is blocked if I login from another subnet. Maybe this is not a bug – I do not know and I do not understand this behavior.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>May 5 16:08:41 ssh2 /usr/sbin/x2gocleansessions[1717]: test01-50-1493993318_stDXFCE_dp24: updating session status from 'R' to 'F'.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>May 5 16:08:41 ssh2 /usr/sbin/x2gocleansessions[1717]: test01-50-1493993318_stDXFCE_dp24: is blocked.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>May 5 16:08:41 ssh2 /usr/sbin/x2gocleansessions[1717]: test01-50-1493993318_stDXFCE_dp24: adding to finished list.<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US>May 5 16:08:41 ssh2 /usr/bin/x2goumount-session[11035]: x2goumount-session has been called with options:<o:p></o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p><p class=MsoNormal><span lang=EN-US>Best regards!<o:p></o:p></span></p></div></body></html>