X2Go Bug report logs - #309
Make x2goterminate-session / x2gosuspend-session operable as root

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

To: submit@bugs.x2go.org

Subject: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Mon, 23 Sep 2013 12:23:55 +0200

[Message part 1 (text/plain, inline)]

Package: x2goserver
Severity: wishlist

Currently, only the user owning a session can suspend/terminate that session.

The super-user root should also be eligible to act on user sessions  
with those commands.

This should work from any x2goserver (in a multi-node farm) and with  
SQLite and PostgreSQL db backend.

Mike


-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

Message #10 received at 309@bugs.x2go.org (full text, mbox, reply):

From: Stefan Baur <newsgroups.mail2@stefanbaur.de>

To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>, 309@bugs.x2go.org, x2go-dev@lists.berlios.de

Cc: submit@bugs.x2go.org

Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Mon, 23 Sep 2013 12:51:07 +0200

Am 23.09.2013 12:23, schrieb Mike Gabriel:
> Package: x2goserver
> Severity: wishlist
>
> Currently, only the user owning a session can suspend/terminate that 
> session.
>
> The super-user root should also be eligible to act on user sessions 
> with those commands.
>
> This should work from any x2goserver (in a multi-node farm) and with 
> SQLite and PostgreSQL db backend.

We're only using single node mode, but here, terminating sessions from 
root works (or at least, it did last time we needed it).
x2golistsessions_root | awk -F '|' '{ print $2 " " $12 "@" $8 }' # lists 
session-IDs followed by username@clientname
x2goterminate-session $SESSIONID # this terminates the session with the 
named ID when called by root

Never tried suspend, but there's x2gosuspend-session which should work 
the same way.

So, either you missed that or your bug report should contain a few more 
details as to what functionality you need and what is missing, I'd say. ;-)

-Stefan

Message #15 received at 309@bugs.x2go.org (full text, mbox, reply):

From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

To: Stefan Baur <newsgroups.mail2@stefanbaur.de>

Cc: 309@bugs.x2go.org

Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Mon, 23 Sep 2013 23:27:33 +0200

[Message part 1 (text/plain, inline)]

Hi Stefan,

On Mo 23 Sep 2013 12:51:07 CEST Stefan Baur wrote:

> Am 23.09.2013 12:23, schrieb Mike Gabriel:
>> Package: x2goserver
>> Severity: wishlist
>>
>> Currently, only the user owning a session can suspend/terminate  
>> that session.
>>
>> The super-user root should also be eligible to act on user sessions  
>> with those commands.
>>
>> This should work from any x2goserver (in a multi-node farm) and  
>> with SQLite and PostgreSQL db backend.
>
> We're only using single node mode, but here, terminating sessions  
> from root works (or at least, it did last time we needed it).
> x2golistsessions_root | awk -F '|' '{ print $2 " " $12 "@" $8 }' #  
> lists session-IDs followed by username@clientname
> x2goterminate-session $SESSIONID # this terminates the session with  
> the named ID when called by root

With the SQLite backend this surely is the case.

> Never tried suspend, but there's x2gosuspend-session which should  
> work the same way.
>
> So, either you missed that or your bug report should contain a few  
> more details as to what functionality you need and what is missing,  
> I'd say. ;-)

With PostgreSQL, you get this:

"""
x2goterminate-session mga-54-1379970522_stRTERMINAL_dp24
DBD::Pg::st execute failed: ERROR:  permission denied for relation  
sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417.
Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417.
DBD::Pg::st execute failed: ERROR:  permission denied for relation  
sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328.
Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328.
"""

Nowadays, the x2gocleansessions daemon script can handle  
suspend/terminate through a change in the session database.

x2goterminate-session and x2gosuspend-session should utilize this new feature.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

Message #20 received at 309@bugs.x2go.org (full text, mbox, reply):

From: Stefan Baur <newsgroups.mail2@stefanbaur.de>

To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Cc: 309@bugs.x2go.org

Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Mon, 23 Sep 2013 23:31:21 +0200

Am 23.09.2013 23:27, schrieb Mike Gabriel:
> [x2goterminate-session working as expected]
> With the SQLite backend this surely is the case.
>
>> Never tried suspend, but there's x2gosuspend-session which should 
>> work the same way.
>>
>> So, either you missed that or your bug report should contain a few 
>> more details as to what functionality you need and what is missing, 
>> I'd say. ;-)
>
> With PostgreSQL, you get this:
>
> """
> x2goterminate-session mga-54-1379970522_stRTERMINAL_dp24
> DBD::Pg::st execute failed: ERROR:  permission denied for relation 
> sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417.
> Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417.
> DBD::Pg::st execute failed: ERROR:  permission denied for relation 
> sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328.
> Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328.
> """
>
> Nowadays, the x2gocleansessions daemon script can handle 
> suspend/terminate through a change in the session database.
>
> x2goterminate-session and x2gosuspend-session should utilize this new 
> feature.

That sounds like it makes sense. ;-) And now the bug/wishlist 
description is detailed enough that we'll all still remember what this 
was about, 6 months down the road. ;-)

-Stefan

Message #25 received at 309@bugs.x2go.org (full text, mbox, reply):

From: Moritz Struebe <Moritz.Struebe@informatik.uni-erlangen.de>

To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>, 309@bugs.x2go.org, x2go-dev@lists.berlios.de

Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Tue, 24 Sep 2013 09:47:15 +0200

[Message part 1 (text/plain, inline)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 2013-09-23 12:23, Mike Gabriel wrote:
> The super-user root should also be eligible to act on user sessions with those commands.
>
> This should work from any x2goserver (in a multi-node farm) and with
SQLite and PostgreSQL db backend.

Hmm, but the super user can su to the user owning the session, right?

Morty

- -- 
Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter)
Lehrstuhl für Informatik 4 (Verteilte Systeme und Betriebssysteme)
Friedrich-Alexander-Universität Erlangen-Nürnberg
Martensstr. 1
91058 Erlangen

Tel   : +49 9131 85-25419
Fax   : +49 9131 85-28732
eMail : struebe@informatik.uni-erlangen.de
WWW   : http://www4.informatik.uni-erlangen.de/~morty


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSQUNwAAoJEG/nl4s6YOSIhVQIAKjM+90UYWOyz8gFa8qZP4X0
qIRfXTZZ45OnMf8+SBaVXurISGncHk8kZ6YEA10QhFBLt+GLie8w7K0rYaEDK7Jl
/Eu3jCtumPlDxC9BCQfawbmXG8caiWUgNkuPAipMcChMhgW/J/JDM3nAErQkWyht
F6J1kJuqKCs2U3h8OQL/19umISkh11ePFIVfXmWNe/v2pkD/6YSZZnoGFwoOoiUU
MC+6Uv8csVZa7bHJSJVMzrkhxrW0jNZBlOtVfqEMtryV5GbCLBBGUo/hlt8pnyLF
d0tKHWvl+PmVq+DHTtaizJHAXisjULiG+C0uCQ5ZAXlQzluUci0fzH75RUNR2Ig=
=uZyM
-----END PGP SIGNATURE-----

[smime.p7s (application/pkcs7-signature, attachment)]

Message #30 received at 309@bugs.x2go.org (full text, mbox, reply):

From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

To: Moritz Struebe <Moritz.Struebe@informatik.uni-erlangen.de>

Cc: 309@bugs.x2go.org

Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root

Date: Tue, 24 Sep 2013 10:19:10 +0200

[Message part 1 (text/plain, inline)]

Hi Morty,

On Di 24 Sep 2013 09:47:15 CEST Moritz Struebe wrote:

>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 2013-09-23 12:23, Mike Gabriel wrote:
>> The super-user root should also be eligible to act on user sessions  
>> with those commands.
>>
>> This should work from any x2goserver (in a multi-node farm) and with
> SQLite and PostgreSQL db backend.
>
> Hmm, but the super user can su to the user owning the session, right?

Basically correct, but this does not help on larger setups where the  
homes are on AFS or NFSv4+Krb5.

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.