From fred@lionsemi.com Wed Apr 10 08:56:38 2019 Received: (at submit) by bugs.x2go.org; 10 Apr 2019 06:56:40 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-0.0 required=3.0 tests=BAYES_40,DKIMWL_WL_MED, DKIM_SIGNED,DKIM_VALID,HTML_MESSAGE autolearn=ham autolearn_force=no version=3.4.2 Received: from localhost (localhost [127.0.0.1]) by ymir.das-netzwerkteam.de (Postfix) with ESMTP id EA34C5DAF6 for ; Wed, 10 Apr 2019 08:56:37 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de Received: from ymir.das-netzwerkteam.de ([127.0.0.1]) by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b5N0kan04qdc for ; Wed, 10 Apr 2019 08:56:29 +0200 (CEST) Received: from mail-qk1-x732.google.com (mail-qk1-x732.google.com [IPv6:2607:f8b0:4864:20::732]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 11EB85DAE7 for ; Wed, 10 Apr 2019 08:56:29 +0200 (CEST) Received: by mail-qk1-x732.google.com with SMTP id y5so567047qkc.11 for ; Tue, 09 Apr 2019 23:56:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lionsemi-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=eVRgLu9YfiWldz93zCloEXaZjz/zE147mrU13YYTcMo=; b=u1SHeHxkKwcZuPDemy2zj6Q9+fDCbmoOOaIKCabD3MkGcewQllyrK/RjLBIUReUMyj XATZSdMI9FkjVWhM0oeAx/5tdwE0R5GtpyAwYpGZfPfv94gR0+ldmLj87siNAN8rMvPx yF+MqwAzzTjRd1h43i9zzEs3PY2wT3cc47EJ01h6yjCUPR9mrVZzcpSmnYo1HzTn4O3v 1OJFqmN8SJIwbNXxGisy+nw0EOzrOgP4+yzKjf+4t62pD8gDt4vLXtNrOqzs6a7MhRU0 rKoHEiqyzNhMoozuXO+gJ1AdCnrs581OLyECuPh+B9TAO14nYQscIhMYq2cXYIcnyaIb hxnw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=eVRgLu9YfiWldz93zCloEXaZjz/zE147mrU13YYTcMo=; b=X2QB7w+a5fAn2bqlDFUtc2e8Fkb5uxR7s9IV0uF7HCfby43EEsBy8bKw2S2tnyXhAz 89oKoa3R/66OV5EZ1bC4/EYWNSsaKIcaveJxRObfMXkliLfxAxOaydZ4hvbEtitqId39 F6m2xX3walQQGVK2TCU0JDVrs2kFl8srjnvhtp2Wddez9SYfCMVzNXkIdtvHEKbAVRYT MmBbi4pYlTIFxN+jYvVPkdx4nSKgIo+AvHY8NmAe6LBJhNxZTguTzYcozbYmgxTN5uWM al2BfcIOCVqW6vlWpYCJXQV3Jh2FLR+J2/yRH76TJp7V4k11EuZwfyFbVkelHCshV2nd 2QHQ== X-Gm-Message-State: APjAAAV/GNGxGlNC2wlCub4rrOJ8LmK/XqL3Yt79vsWbr6DVKm2ZyXer xrdEy4uuJ4/7bdvI+A+J3eMd8i7tiIO6KyaIUtp5+g/8lw+Cgg== X-Google-Smtp-Source: APXvYqyd3Z3n9EPZ+tlHAKsbQJzvm5do/sS8d6EtApMYmbKE/09gUl1PDtNK08E//93gYb26zl328eziCwJJZv72xZU= X-Received: by 2002:a05:620a:1597:: with SMTP id d23mr31095496qkk.226.1554879387315; Tue, 09 Apr 2019 23:56:27 -0700 (PDT) MIME-Version: 1.0 From: Fred Chen Date: Tue, 9 Apr 2019 23:55:50 -0700 Message-ID: Subject: X2Go Agent terminates unexpectedly only for LDAP users To: submit@bugs.x2go.org Content-Type: multipart/alternative; boundary="0000000000008cc6f805862791b7" --0000000000008cc6f805862791b7 Content-Type: text/plain; charset="UTF-8" Package: x2goagent Version: 4.1.0.3-1 ===================== It's not clear if this is an issue with x2goagent, x2goserver or perhaps some server configuration problem. * We ran into this problem on CentOS 7.6 (kernel 3.10.0-957.10.1) where we could not remotely connect to the server using X2GO and the only error message of note was: "Failed to start X2Go Agent session with ID fred-_stDMATE_dp32. X2Go Agent terminated unexpectedly. Aborting session startup." (Longer output of /var/log/messages below) * This problem only seems to be present for users authenticated via LDAP (via sssd/pam). When I created a dummy local user (with identical login shell setup), I was able to launch an X2GO session as that user with no problem (using the same client). * The LDAP user can SSH into the server and can also launch a remote desktop session with xrdp using a Royal TS client. That remote desktop session exercises most of the same services required by X2GO such as systemd-logind, which helps rule out those services. * It also appears that when starting the X2GO session that the LDAP user authenticates successfully to initiate the creation of a session so I don't believe it is an authentication issue. It almost seems as if some user credentials (uid or uidNumber) get lost or dropped when passed to nx-libs/x2goagent that prevent creation of the display port and ultimately terminates the session. Apr 9 23:39:47 lioncub7 systemd-logind: Removed session 2. Apr 9 23:39:47 lioncub7 systemd: Removed slice User Slice of fred. Apr 9 23:39:48 lioncub7 systemd: Created slice User Slice of fred. Apr 9 23:39:48 lioncub7 systemd-logind: New session 10 of user fred. Apr 9 23:39:48 lioncub7 systemd: Started Session 10 of user fred. Apr 9 23:39:50 lioncub7 /usr/bin/x2gostartagent: x2gostartagent called with options: 1920x1170 wan 16m-jpeg-9 unix-kde-depth_32 us auto 1 D MATE both Apr 9 23:39:50 lioncub7 /usr/bin/x2gosessionlimit[16405]: x2gosessionlimit has been called Apr 9 23:39:51 lioncub7 x2golistsessions: x2golistsessions has been called with options: --all-servers Apr 9 23:39:51 lioncub7 x2gocleansessions: fred-50-1554878391_stDMATE_dp32: state file for this session does not exist: /tmp/.x2go-fred/C-fred-50-1554878391_stDMATE_dp32/state (this can be ignored during session startups) Apr 9 23:39:52 lioncub7 /usr/bin/x2gofeature: x2gofeature called with options: X2GO_RUN_EXTENSIONS Apr 9 23:39:52 lioncub7 /usr/share/x2go/x2gofeature.d/x2goserver-extensions.features: x2goserver-extensions.features called with options: X2GO_RUN_EXTENSIONS Apr 9 23:39:52 lioncub7 /usr/bin/x2goserver-run-extensions: x2goserver-run-extensions called with options: fred-50-1554878391_stDMATE_dp32 pre-start Apr 9 23:39:52 lioncub7 /usr/bin/x2gostartagent: creating new session: fred-50-1554878391_stDMATE_dp32 3bb04b5de35c14108c76e0b7bd59214f 16535 ** 39539 39540 39541 -1 -1 Apr 9 23:39:52 lioncub7 /usr/bin/x2gostartagent: Failed to start X2Go Agent session with ID fred-50-1554878391_stDMATE_dp32. X2Go Agent terminated unexpectedly. Aborting session startup. Apr 9 23:39:52 lioncub7 /usr/bin/x2gofeature: x2gofeature called with options: X2GO_RUN_EXTENSIONS Apr 9 23:39:52 lioncub7 /usr/share/x2go/x2gofeature.d/x2goserver-extensions.features: x2goserver-extensions.features called with options: X2GO_RUN_EXTENSIONS Apr 9 23:39:52 lioncub7 /usr/bin/x2goserver-run-extensions: x2goserver-run-extensions called with options: fred-50-1554878391_stDMATE_dp32 fail-start Apr 9 23:40:01 lioncub7 systemd: Started Session 11 of user root. Apr 9 23:40:23 lioncub7 su: (to fred) root on none Apr 9 23:40:23 lioncub7 systemd: Started Session c6 of user fred. Apr 9 23:40:23 lioncub7 su: (to fred) root on none Apr 9 23:40:23 lioncub7 systemd: Started Session c7 of user fred. Apr 9 23:40:23 lioncub7 x2goumount-session: x2goumount-session has been called with options: fred-50-1554878391_stDMATE_dp32 --0000000000008cc6f805862791b7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Package= : x2goagent
Version: 4.1.0.3-1

=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

It's not clear if this is an = issue with x2goagent, x2goserver or perhaps some server configuration probl= em.

* We ran into this problem on CentOS 7.6 (kern= el 3.10.0-957.10.1) where we could not remotely connect to the server using= X2GO and the only error message of note was: "Failed to start X2Go Ag= ent session with ID fred-<Session #>_stDMATE_dp32. X2Go Agent termina= ted unexpectedly. Aborting session startup." (Longer output of /var/lo= g/messages below)

* This problem only seems to be = present for users authenticated via LDAP (via sssd/pam). When I created a d= ummy local user (with identical login shell setup), I was able to launch an= X2GO session as that user with no problem (using the same client).

* The LDAP user can SSH into the server and can also laun= ch a remote desktop session with xrdp using a Royal TS client. That remote = desktop session exercises most of the same services required by X2GO such a= s systemd-logind, which helps rule out those services.

=
* It also appears that when starting the X2GO session that the LDAP us= er authenticates successfully to initiate the creation of a session so I do= n't believe it is an authentication issue.=C2=A0 It almost seems as if = some user credentials (uid or uidNumber) get lost or dropped when passed to= nx-libs/x2goagent that prevent creation of the display port and ultimately= terminates the session.

Apr=C2=A0 9 23:39:47= lioncub7 systemd-logind: Removed session 2.
Apr=C2=A0 9 23:39:47= lioncub7 systemd: Removed slice User Slice of fred.
Apr=C2=A0 9 = 23:39:48 lioncub7 systemd: Created slice User Slice of fred.
Apr= =C2=A0 9 23:39:48 lioncub7 systemd-logind: New session 10 of user fred.
Apr=C2=A0 9 23:39:48 lioncub7 systemd: Started Session 10 of user fr= ed.
Apr=C2=A0 9 23:39:50 lioncub7 /usr/bin/x2gostartagent: x2gost= artagent called with options: 1920x1170 wan 16m-jpeg-9 unix-kde-depth_32 us= auto 1 D MATE both
Apr=C2=A0 9 23:39:50 lioncub7 /usr/bin/x2gose= ssionlimit[16405]: x2gosessionlimit has been called
Apr=C2=A0 9 2= 3:39:51 lioncub7 x2golistsessions: x2golistsessions has been called with op= tions: --all-servers
Apr=C2=A0 9 23:39:51 lioncub7 x2gocleansessi= ons: fred-50-1554878391_stDMATE_dp32: state file for this session does not = exist: /tmp/.x2go-fred/C-fred-50-1554878391_stDMATE_dp32/state (this can be= ignored during session startups)
Apr=C2=A0 9 23:39:52 lioncub7 /= usr/bin/x2gofeature: x2gofeature called with options: X2GO_RUN_EXTENSIONS
Apr=C2=A0 9 23:39:52 lioncub7 /usr/share/x2go/x2gofeature.d/x2gose= rver-extensions.features: x2goserver-extensions.features called with option= s: X2GO_RUN_EXTENSIONS
Apr=C2=A0 9 23:39:52 lioncub7 /usr/bin/x2g= oserver-run-extensions: x2goserver-run-extensions called with options: fred= -50-1554878391_stDMATE_dp32 pre-start
Apr=C2=A0 9 23:39:52 lioncu= b7 /usr/bin/x2gostartagent: creating new session: fred-50-1554878391_stDMAT= E_dp32 3bb04b5de35c14108c76e0b7bd59214f 16535 <Internal IP> 39= 539 39540 39541 -1 -1
Apr=C2=A0 9 23:39:52 lioncub7 /usr/bin/x2go= startagent: Failed to start X2Go Agent session with ID fred-50-1554878391_s= tDMATE_dp32. X2Go Agent terminated unexpectedly. Aborting session startup.<= /div>
Apr=C2=A0 9 23:39:52 lioncub7 /usr/bin/x2gofeature: x2gofeature c= alled with options: X2GO_RUN_EXTENSIONS
Apr=C2=A0 9 23:39:52 lion= cub7 /usr/share/x2go/x2gofeature.d/x2goserver-extensions.features: x2goserv= er-extensions.features called with options: X2GO_RUN_EXTENSIONS
A= pr=C2=A0 9 23:39:52 lioncub7 /usr/bin/x2goserver-run-extensions: x2goserver= -run-extensions called with options: fred-50-1554878391_stDMATE_dp32 fail-s= tart
Apr=C2=A0 9 23:40:01 lioncub7 systemd: Started Session 11 of= user root.
Apr=C2=A0 9 23:40:23 lioncub7 su: (to fred) root on n= one
Apr=C2=A0 9 23:40:23 lioncub7 systemd: Started Session c6 of = user fred.
Apr=C2=A0 9 23:40:23 lioncub7 su: (to fred) root on no= ne
Apr=C2=A0 9 23:40:23 lioncub7 systemd: Started Session c7 of u= ser fred.
Apr=C2=A0 9 23:40:23 lioncub7 x2goumount-session: x2gou= mount-session has been called with options: fred-50-1554878391_stDMATE_dp32=


--0000000000008cc6f805862791b7--