From ionic@ionic.de  Tue Sep  5 11:13:03 2017
Received: (at 1200) by bugs.x2go.org; 5 Sep 2017 09:13:08 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=3.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,T_SPF_HELO_TEMPERROR autolearn=ham
	autolearn_force=no version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 293FF5DACB
	for <1200@bugs.x2go.org>; Tue,  5 Sep 2017 11:13:03 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id Px8X8Usc01Lt for <1200@bugs.x2go.org>;
	Tue,  5 Sep 2017 11:12:58 +0200 (CEST)
Received: from mail.ionic.de (ionic.de [87.98.244.45])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id E903C5DAC8
	for <1200@bugs.x2go.org>; Tue,  5 Sep 2017 11:12:57 +0200 (CEST)
Received: from [10.20.16.17] (178.162.222.163.adsl.inet-telecom.org [178.162.222.163])
	by mail.ionic.de (Postfix) with ESMTPSA id C9C624F00234;
	Tue,  5 Sep 2017 11:12:56 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default;
	t=1504602776; bh=hNgUAcTQYXC8xOBvmlB7JsWKqWFUG23qhWDtk+4GFkM=;
	h=Subject:To:References:From:Date:In-Reply-To:From;
	b=Tv6cTOh9onXizKq8ttB4n7I5Z12SYcPXBp14bVGOLYpesToCvdy4T0+iYrRvlvRem
	 9thWN4r80OAgWQXBiyKmIIxlNOrGVUN4wu/SYTdnuHP4kRMG8foJa26Vaj7JIVfb7M
	 StzW8DkcJ/xBoBrxItRMqD6GeM5nfLJmp8tddhZ4=
Subject: Re: Double clicks not recognized in Qt(4?/5?) applications (Was:
 Environment variables not set)
To: Bruno CAPELETO <bruno.capeleto@abcreseau.com>, 1200@bugs.x2go.org
References: <CABa3fk4QCDwjuqZbXPzMWDqd0vrpJGVYAEZzm1VBKoAis8n=zg@mail.gmail.com>
 <5e2e5f4b-b445-09d5-1834-ad53f845a03e@ionic.de>
 <CABa3fk7jruJbtVzhC=zUd1gcVwJr88inRvX-z8e9N_gkLZ9tew@mail.gmail.com>
 <CABa3fk5qReW5skVWqahTTmYyyNy-hN8Op1qU4n15zO2jJz9YeQ@mail.gmail.com>
 <21445d8f-0208-1d84-b664-0ad6fc3c31cf@ionic.de>
 <CABa3fk6xixQ1xvPQDNaekQ_XWbpQtKHBYJa3zSfADfA9-aznHw@mail.gmail.com>
 <59ae4597.06981c0a.d2c4b.2b4d@mx.google.com>
 <CABa3fk7B4o54NigPNXB=RD-XcUu_foin6+LhSQDZC5jw=bNNtQ@mail.gmail.com>
 <CABa3fk7KB7ZYpuVBMOAXifm8V8LjoYweeKzO84-BSeT4rs1NjQ@mail.gmail.com>
 <CABa3fk66-r+=y-u3STVjUJBeY4p-3D7H3yb5Y8r=-_o+EaQV7w@mail.gmail.com>
From: Mihai Moldovan <ionic@ionic.de>
Message-ID: <0db286e2-87d7-2e68-c8aa-11146a10d66b@ionic.de>
Date: Tue, 5 Sep 2017 11:12:55 +0200
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.1.1
MIME-Version: 1.0
In-Reply-To: <CABa3fk66-r+=y-u3STVjUJBeY4p-3D7H3yb5Y8r=-_o+EaQV7w@mail.gmail.com>
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="oKWJSlTW3J1laajSGnhWTuS60jB4i8qMA"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--oKWJSlTW3J1laajSGnhWTuS60jB4i8qMA
Content-Type: multipart/mixed; boundary="IbndQ0KC5fPTsEv4QSvB9VeJVkLDj0kR3";
 protected-headers="v1"
From: Mihai Moldovan <ionic@ionic.de>
To: Bruno CAPELETO <bruno.capeleto@abcreseau.com>, 1200@bugs.x2go.org
Message-ID: <0db286e2-87d7-2e68-c8aa-11146a10d66b@ionic.de>
Subject: Re: Double clicks not recognized in Qt(4?/5?) applications (Was:
 Environment variables not set)
References: <CABa3fk4QCDwjuqZbXPzMWDqd0vrpJGVYAEZzm1VBKoAis8n=zg@mail.gmail.com>
 <5e2e5f4b-b445-09d5-1834-ad53f845a03e@ionic.de>
 <CABa3fk7jruJbtVzhC=zUd1gcVwJr88inRvX-z8e9N_gkLZ9tew@mail.gmail.com>
 <CABa3fk5qReW5skVWqahTTmYyyNy-hN8Op1qU4n15zO2jJz9YeQ@mail.gmail.com>
 <21445d8f-0208-1d84-b664-0ad6fc3c31cf@ionic.de>
 <CABa3fk6xixQ1xvPQDNaekQ_XWbpQtKHBYJa3zSfADfA9-aznHw@mail.gmail.com>
 <59ae4597.06981c0a.d2c4b.2b4d@mx.google.com>
 <CABa3fk7B4o54NigPNXB=RD-XcUu_foin6+LhSQDZC5jw=bNNtQ@mail.gmail.com>
 <CABa3fk7KB7ZYpuVBMOAXifm8V8LjoYweeKzO84-BSeT4rs1NjQ@mail.gmail.com>
 <CABa3fk66-r+=y-u3STVjUJBeY4p-3D7H3yb5Y8r=-_o+EaQV7w@mail.gmail.com>
In-Reply-To: <CABa3fk66-r+=y-u3STVjUJBeY4p-3D7H3yb5Y8r=-_o+EaQV7w@mail.gmail.com>

--IbndQ0KC5fPTsEv4QSvB9VeJVkLDj0kR3
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

Control: retitle -1 Double clicks not recognized in Qt(4?/5?) application=
s
Control: reassign -1 x2goclient 4.1.0.0
Control: tag -1 build-win32

On 09/05/2017 10:42 AM, Bruno CAPELETO wrote:
> Found : in sshd_config, one must use the "UsePAM yes" directive
>=20
> I do not really see the link with the locales, and on top of that that =
open some
> security holes I guess.
> For example, adding this instruction I had to add additional instructio=
ns to
> forbid the password authentication.

PAM authentication is generally good - it also provides stuff like sessio=
ns and
other access control (for instance with login limits and the like), which=
 pure
shadow access does not.

Okay, so what happens is that without PAM support, your shell startup scr=
ipts
that would normally fetch the system locale are probably not executed. Wh=
ich one
exactly beats me, but that's probably not too important. You really shoul=
dn't
disable PAM authentication on Linux.

Instead, you can edit /etc/pam.d/sshd. Disable the common-auth include li=
ne.
That should make it impossible to login with passwords - but still allow =
setups
with OTP's for instance, if ChallengeResponseAuthentication is enabled in=

sshd_config.


> Conclusions for the reported bugs :
> 1. locales are set properly

Great!


> 2. I do not have the LXDE error "no session for pid..." anylonger

Also good, but that's been LXDE's problem really.


> 3. single app mode seems to work for my software (no crash so far)

Even better. It might look bad in single application mode, as explained b=
efore.


> 4. I could not test right now ; I guess that one is related to somethin=
g else...

Let's assume that still to be the case, though. I'm retitling the bug rep=
ort as
such and will leave it open for the time being.



Mihai


--IbndQ0KC5fPTsEv4QSvB9VeJVkLDj0kR3--

--oKWJSlTW3J1laajSGnhWTuS60jB4i8qMA
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=6eft
-----END PGP SIGNATURE-----

--oKWJSlTW3J1laajSGnhWTuS60jB4i8qMA--

