From mike.gabriel@das-netzwerkteam.de Mon Sep 23 12:23:56 2013 Received: (at submit) by bugs.x2go.org; 23 Sep 2013 10:23:57 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_BLOCKED,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 5C30F5DB13 for ; Mon, 23 Sep 2013 12:23:56 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 156199D5 for ; Mon, 23 Sep 2013 12:23:56 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 09ABD3C153 for ; Mon, 23 Sep 2013 12:23:56 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZiKu1DOGk6BT for ; Mon, 23 Sep 2013 12:23:55 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id D98233C155 for ; Mon, 23 Sep 2013 12:23:55 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id C07963C153 for ; Mon, 23 Sep 2013 12:23:55 +0200 (CEST) Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 7D7EC3C155; Mon, 23 Sep 2013 12:23:55 +0200 (CEST) Received: from m-047.informatik.uni-kiel.de (m-047.informatik.uni-kiel.de [134.245.254.47]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Mon, 23 Sep 2013 12:23:55 +0200 Message-ID: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Mon, 23 Sep 2013 12:23:55 +0200 From: Mike Gabriel To: submit@bugs.x2go.org Subject: Make x2goterminate-session / x2gosuspend-session operable as root MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_3jno3qzr620r"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_3jno3qzr620r Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Package: x2goserver Severity: wishlist Currently, only the user owning a session can suspend/terminate that session. The super-user root should also be eligible to act on user sessions with those commands. This should work from any x2goserver (in a multi-node farm) and with SQLite and PostgreSQL db backend. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_3jno3qzr620r Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJSQBa7AAoJEJr0azAldxsx4PsP/2K7K7P2ze6nYAfUy/wyKslQ jjXR6CQrxZ/ZsOob41NUPiLiCUXJBjDKcG/dhgvGuc51jqx3sOdWcxLYoEOspa2C qpMxGZCKihleeelL/LqTwxDJWL2RnVe1Tb9Xu70iPnpF9Ni6G6sb0DPFfIID4UBp eGnUvJ0WP6DOdw4yDerbAWuN/H7pMafYYmjIgVxLX3WrZ/Q5k7KSKpwWFvLfuTe/ rc67Rq6SsJFY41Su2uMnwsJgN3nto5AlUgv7eLLr6SPMEv0UPKtssc4nK1v/8j/k kbog83jloEa37QTif9qipsIKD6DufSC58AaFjmaNFWc9gaH06rtxAebPRkNBEuG7 J/uWjV03xSPOYudcxaO5j+XuyRxlCmKz+UR8kPopfp7xVc2fIe1hYMWVNb7ARHEs 1C3Sw6rOZ3kU0Q56hfghhmdKpmz9VJFrvIAy0S1KQPZJ6CTjFDUVBwcnlGQHkvx+ 8nv8iYm9EMwxUt5lDxI8AT/jC9H7PM18AgS+6nwr9ZivhHhp0xVgxIHlIF81tx/Q lc1O2lnq2lvZpMLcd4TEqxeQMHEFffAF/Y/XmM/LsUQqT7J/A/c6FUt25Kl0q+mI FoVsf3mu2zUgiX5zcv0X6LKAye+1Z1U4nKTM4Eafh5Dn3BlIGaOqI3NwulzDGzDF Akgjz+vVuGBFy/TEHZ63 =dnXF -----END PGP SIGNATURE----- --=_3jno3qzr620r-- From newsgroups.mail2@stefanbaur.de Mon Sep 23 12:56:01 2013 Received: (at 309) by bugs.x2go.org; 23 Sep 2013 10:56:01 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE, SPF_HELO_PASS autolearn=unavailable version=3.3.2 X-Greylist: delayed 302 seconds by postgrey-1.34 at ymir; Mon, 23 Sep 2013 12:56:01 CEST Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.186]) by ymir (Postfix) with ESMTP id 102615DB13 for <309@bugs.x2go.org>; Mon, 23 Sep 2013 12:56:01 +0200 (CEST) Received: from [192.168.0.3] (dslb-088-067-144-215.pools.arcor-ip.net [88.67.144.215]) by mrelayeu.kundenserver.de (node=mrbap3) with ESMTP (Nemesis) id 0LdVQI-1W6mTw11Va-00ikB6; Mon, 23 Sep 2013 12:50:58 +0200 Message-ID: <52401D1B.2060502@stefanbaur.de> Date: Mon, 23 Sep 2013 12:51:07 +0200 From: Stefan Baur User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Mike Gabriel , 309@bugs.x2go.org, x2go-dev@lists.berlios.de CC: submit@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root References: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> In-Reply-To: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V02:K0:MlPSmZhT1gfImTAUjUrJ93ELjB0pw5ebbkuVYvuCdT9 Gt3V/5PXKn9/yphO1KROPLK5fjaVQIRkcRl0a57BaGMMPQqIhR 69hE03cykh5cARL5NNcXiXfCM0aru/65D7113z7S0gNCl6+TTN gx98Ug6RbDial40LZ8q9uRuMYr5mDxUPikmAsfJAnppIF/nLAu q8xfLcAvjFQ33gl3t1B5+4fGJuvCQA4XmnmAy+jL+UcH3hQ/nD yHc5c3lYjspgU4IxMMb41RXiyds6RXJwbJ/EEl1f7yAasyruP1 ZJNKvxVLcvMucxZfZkmG159QnEwi+rgVjKwfZ7GAcEnS4uGtrN LnBcFUHI2CDDtBtsvaBUqpVeFUsu3cJg3pPQoiURk Am 23.09.2013 12:23, schrieb Mike Gabriel: > Package: x2goserver > Severity: wishlist > > Currently, only the user owning a session can suspend/terminate that > session. > > The super-user root should also be eligible to act on user sessions > with those commands. > > This should work from any x2goserver (in a multi-node farm) and with > SQLite and PostgreSQL db backend. We're only using single node mode, but here, terminating sessions from root works (or at least, it did last time we needed it). x2golistsessions_root | awk -F '|' '{ print $2 " " $12 "@" $8 }' # lists session-IDs followed by username@clientname x2goterminate-session $SESSIONID # this terminates the session with the named ID when called by root Never tried suspend, but there's x2gosuspend-session which should work the same way. So, either you missed that or your bug report should contain a few more details as to what functionality you need and what is missing, I'd say. ;-) -Stefan From mike.gabriel@das-netzwerkteam.de Mon Sep 23 23:27:36 2013 Received: (at 309) by bugs.x2go.org; 23 Sep 2013 21:27:37 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 8DD425DA6C for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:36 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 43AC6A75 for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:36 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 205F13BF1D for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:36 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NyZmKBBcWWRf for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:35 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 4209C3BEC6 for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:35 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 0D96F3BB45 for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:27:34 +0200 (CEST) Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 65DFC3BE3F; Mon, 23 Sep 2013 23:27:33 +0200 (CEST) Received: from pD9E9E7BE.dip0.t-ipconnect.de (pD9E9E7BE.dip0.t-ipconnect.de [217.233.231.190]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Mon, 23 Sep 2013 23:27:33 +0200 Message-ID: <20130923232733.175016qodss5ek3p@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Mon, 23 Sep 2013 23:27:33 +0200 From: Mike Gabriel To: Stefan Baur Cc: 309@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root References: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> <52401D1B.2060502@stefanbaur.de> In-Reply-To: <52401D1B.2060502@stefanbaur.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_atgd9zlehqd"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_atgd9zlehqd Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Hi Stefan, On Mo 23 Sep 2013 12:51:07 CEST Stefan Baur wrote: > Am 23.09.2013 12:23, schrieb Mike Gabriel: >> Package: x2goserver >> Severity: wishlist >> >> Currently, only the user owning a session can suspend/terminate >> that session. >> >> The super-user root should also be eligible to act on user sessions >> with those commands. >> >> This should work from any x2goserver (in a multi-node farm) and >> with SQLite and PostgreSQL db backend. > > We're only using single node mode, but here, terminating sessions > from root works (or at least, it did last time we needed it). > x2golistsessions_root | awk -F '|' '{ print $2 " " $12 "@" $8 }' # > lists session-IDs followed by username@clientname > x2goterminate-session $SESSIONID # this terminates the session with > the named ID when called by root With the SQLite backend this surely is the case. > Never tried suspend, but there's x2gosuspend-session which should > work the same way. > > So, either you missed that or your bug report should contain a few > more details as to what functionality you need and what is missing, > I'd say. ;-) With PostgreSQL, you get this: """ x2goterminate-session mga-54-1379970522_stRTERMINAL_dp24 DBD::Pg::st execute failed: ERROR: permission denied for relation sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417. Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417. DBD::Pg::st execute failed: ERROR: permission denied for relation sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328. Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328. """ Nowadays, the x2gocleansessions daemon script can handle suspend/terminate through a change in the session database. x2goterminate-session and x2gosuspend-session should utilize this new feature. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_atgd9zlehqd Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJSQLJEAAoJEJr0azAldxsxBUwQAJha/QLU6bY/NDlwGIlln/eI sbwhFRSR9GSaQCQ3JrKypY0LkfP2Rw7GeS8avFaUKs+aWcDwaN9Y90pB5YxQL+Ij kmZE6QrYewsrLRGRgWsbQSzWBldthqwteXpWdjmvso8OtqeUF48s3klcvCdjgaTX HfhGM3tNBRMwJLesXNvduJnfdwf7OxLwPcnD+/EXmHvEE9iMNatG85CQvzdlM2ll YlJJImZU7uKZfSZ7r1a5MoPYP7U1GZBAlHcAiWotjIEa8VElszzj/uun/AJQU3qB r003BWwV4qTEbmyVSUDCM+zQBSTHt3KU2hA806GTM0PzZxXa9bDn3oVGywo26HmY gIYXdzYHbyO49zpLcKwrd14CF1Z4xcAGXRIkDGvTgdH9MPxCLmdj1jHBz26uLdPJ 3yMR/N92+zcu4k45zCih5hRTGlA+d50hI88JJLiCJA6XbEcQxbGf7tqGsZi2yqcg tb2cn0glO8cdBaifvEdq7RjHtbnvDeIMyReodv+IFZSFtnwfETs/h9kl14DIGchE pEQ3PtLwMVKfzxYws5xDGhyYoyExipgx0huRqvCC5SnRiVy2iQtzreMTYekuGUCY 0AKWkBhXzOjQ7sMuEY+Diidhr83HDENEdz24VBovjbVwOq9/LjdrM8cZn3powtlq oPJQ4W2KB9Nf+UPhvx9u =BuZ8 -----END PGP SIGNATURE----- --=_atgd9zlehqd-- From newsgroups.mail2@stefanbaur.de Mon Sep 23 23:31:08 2013 Received: (at 309) by bugs.x2go.org; 23 Sep 2013 21:31:09 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,RCVD_IN_DNSWL_NONE, SPF_HELO_PASS autolearn=ham version=3.3.2 Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.186]) by ymir (Postfix) with ESMTP id A169C5DA6C for <309@bugs.x2go.org>; Mon, 23 Sep 2013 23:31:08 +0200 (CEST) Received: from [192.168.0.3] (HSI-KBW-149-172-200-27.hsi13.kabel-badenwuerttemberg.de [149.172.200.27]) by mrelayeu.kundenserver.de (node=mreu0) with ESMTP (Nemesis) id 0LhiWz-1WAhcz19u5-00mbbq; Mon, 23 Sep 2013 23:31:08 +0200 Message-ID: <5240B329.7050601@stefanbaur.de> Date: Mon, 23 Sep 2013 23:31:21 +0200 From: Stefan Baur User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Mike Gabriel CC: 309@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root References: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> <52401D1B.2060502@stefanbaur.de> <20130923232733.175016qodss5ek3p@mail.das-netzwerkteam.de> In-Reply-To: <20130923232733.175016qodss5ek3p@mail.das-netzwerkteam.de> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V02:K0:a8asGDXOtFTc1moQXUwCwa6Bm8khsfr9++65jGby/WK wvSH8+KUHhZWJeye1Ek7uZ6egIbzJVkzPT+uu+1r3l6F/A84Zk CHtMSplIvtR2FaM9I2FPJ8a1kq+uMU7yObBDzjwTK69i9zdNWk y7Rsj3yagRyAoJ9T41ZnIlGZbwbYCUVeBDQe2SGvwfnoOCFDqB LnEywUh1OuB3VZlYr+zaLjuDtz/pSu+dqqPnTpDhRFtks2/Su7 664KrtgnFTjPxrTegkLwNfPNf2J1xVTrNV4G6hByzUaoP/x3uo mH1skezq3UesFCzUiDnkw0y+DOoNS2odT3WC9Z09iucKLzh3iN Fdo25bSNk3HJrowWeKPnY+IOhlsvdxKUd0V5Mq3rt Am 23.09.2013 23:27, schrieb Mike Gabriel: > [x2goterminate-session working as expected] > With the SQLite backend this surely is the case. > >> Never tried suspend, but there's x2gosuspend-session which should >> work the same way. >> >> So, either you missed that or your bug report should contain a few >> more details as to what functionality you need and what is missing, >> I'd say. ;-) > > With PostgreSQL, you get this: > > """ > x2goterminate-session mga-54-1379970522_stRTERMINAL_dp24 > DBD::Pg::st execute failed: ERROR: permission denied for relation > sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417. > Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 417. > DBD::Pg::st execute failed: ERROR: permission denied for relation > sessions_view at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328. > Died at /usr/share/perl5/X2Go/Server/DB/PostgreSQL.pm line 328. > """ > > Nowadays, the x2gocleansessions daemon script can handle > suspend/terminate through a change in the session database. > > x2goterminate-session and x2gosuspend-session should utilize this new > feature. That sounds like it makes sense. ;-) And now the bug/wishlist description is detailed enough that we'll all still remember what this was about, 6 months down the road. ;-) -Stefan From Moritz.Struebe@informatik.uni-erlangen.de Tue Sep 24 09:56:54 2013 Received: (at 309) by bugs.x2go.org; 24 Sep 2013 07:56:55 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00, T_FILL_THIS_FORM_SHORT,URIBL_BLOCKED autolearn=ham version=3.3.2 X-Greylist: delayed 578 seconds by postgrey-1.34 at ymir; Tue, 24 Sep 2013 09:56:54 CEST Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [131.188.34.40]) by ymir (Postfix) with ESMTPS id D59FC5DA6C for <309@bugs.x2go.org>; Tue, 24 Sep 2013 09:56:54 +0200 (CEST) Received: from [IPv6:2001:638:a000:4134::ffff:51] (faui48e.informatik.uni-erlangen.de [IPv6:2001:638:a000:4134::ffff:51]) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTP id BC94E58C4AF; Tue, 24 Sep 2013 09:47:15 +0200 (CEST) Message-ID: <52414383.7040104@informatik.uni-erlangen.de> Date: Tue, 24 Sep 2013 09:47:15 +0200 From: Moritz Struebe Organization: Uni Erlangen-Nuernberg User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 MIME-Version: 1.0 To: Mike Gabriel , 309@bugs.x2go.org, x2go-dev@lists.berlios.de Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root References: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> In-Reply-To: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> X-Enigmail-Version: 1.5.2 Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms060600080908030904080003" Dies ist eine kryptografisch unterzeichnete Nachricht im MIME-Format. --------------ms060600080908030904080003 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 2013-09-23 12:23, Mike Gabriel wrote: > The super-user root should also be eligible to act on user sessions wit= h those commands. > > This should work from any x2goserver (in a multi-node farm) and with SQLite and PostgreSQL db backend. Hmm, but the super user can su to the user owning the session, right? Morty - --=20 Dipl.-Ing. Moritz 'Morty' Struebe (Wissenschaftlicher Mitarbeiter) Lehrstuhl f=FCr Informatik 4 (Verteilte Systeme und Betriebssysteme) Friedrich-Alexander-Universit=E4t Erlangen-N=FCrnberg Martensstr. 1 91058 Erlangen Tel : +49 9131 85-25419 Fax : +49 9131 85-28732 eMail : struebe@informatik.uni-erlangen.de WWW : http://www4.informatik.uni-erlangen.de/~morty -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSQUNwAAoJEG/nl4s6YOSIhVQIAKjM+90UYWOyz8gFa8qZP4X0 qIRfXTZZ45OnMf8+SBaVXurISGncHk8kZ6YEA10QhFBLt+GLie8w7K0rYaEDK7Jl /Eu3jCtumPlDxC9BCQfawbmXG8caiWUgNkuPAipMcChMhgW/J/JDM3nAErQkWyht F6J1kJuqKCs2U3h8OQL/19umISkh11ePFIVfXmWNe/v2pkD/6YSZZnoGFwoOoiUU MC+6Uv8csVZa7bHJSJVMzrkhxrW0jNZBlOtVfqEMtryV5GbCLBBGUo/hlt8pnyLF d0tKHWvl+PmVq+DHTtaizJHAXisjULiG+C0uCQ5ZAXlQzluUci0fzH75RUNR2Ig=3D =3DuZyM -----END PGP SIGNATURE----- --------------ms060600080908030904080003 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Kryptografische Unterschrift MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIPITCC BCEwggMJoAMCAQICAgDHMA0GCSqGSIb3DQEBBQUAMHExCzAJBgNVBAYTAkRFMRwwGgYDVQQK ExNEZXV0c2NoZSBUZWxla29tIEFHMR8wHQYDVQQLExZULVRlbGVTZWMgVHJ1c3QgQ2VudGVy MSMwIQYDVQQDExpEZXV0c2NoZSBUZWxla29tIFJvb3QgQ0EgMjAeFw0wNjEyMTkxMDI5MDBa Fw0xOTA2MzAyMzU5MDBaMFoxCzAJBgNVBAYTAkRFMRMwEQYDVQQKEwpERk4tVmVyZWluMRAw DgYDVQQLEwdERk4tUEtJMSQwIgYDVQQDExtERk4tVmVyZWluIFBDQSBHbG9iYWwgLSBHMDEw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpm8NnhfkNrvWNVMOWUDU9YuluTO2U 1wBblSJ01CDrNI/W7MAxBAuZgeKmFNJSoCgjhIt0iQReW+DieMF4yxbLKDU5ey2QRdDtoAB6 fL9KDhsAw4bpXCsxEXsM84IkQ4wcOItqaACa7txPeKvSxhObdq3u3ibo7wGvdA/BCaL2a869 080UME/15eOkyGKbghoDJzANAmVgTe3RCSMqljVYJ9N2xnG2kB3E7f81hn1vM7PbD8URwoqD oZRdQWvY0hD1TP3KUazZve+Sg7va64sWVlZDz+HVEz2mHycwzUlU28kTNJpxdcVs6qcLmPkh nSevPqM5OUhqjK3JmfvDEvK9AgMBAAGjgdkwgdYwcAYDVR0fBGkwZzBloGOgYYZfaHR0cDov L3BraS50ZWxlc2VjLmRlL2NnaS1iaW4vc2VydmljZS9hZl9Eb3dubG9hZEFSTC5jcmw/LWNy bF9mb3JtYXQ9WF81MDkmLWlzc3Vlcj1EVF9ST09UX0NBXzIwHQYDVR0OBBYEFEm3xs/oPR9/ 6kR7Eyn38QpwPt5kMB8GA1UdIwQYMBaAFDHDeRu69VPXF+CJei0XbAqzK50zMA4GA1UdDwEB /wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgECMA0GCSqGSIb3DQEBBQUAA4IBAQA74Vp3wEgX 3KkY7IGvWonwvSiSpspZGBJw7Cjy565/lizn8l0ZMfYTK3S9vYCyufdnyTmieTvhERHua3iR M347XyYndVNljjNj7s9zw7CSI0khUHUjoR8Y4pSFPT8z6XcgjaK95qGFKUD2P3MyWA0Ja6ba hWzAP7uNZmRWJE6uDT8yNQFb6YyC2XJZT7GGhfF0hVblw/hc843uR7NTBXDn5U2KaYMo4RMJ hp5eyOpYHgwf+aTUWgRo/Sg+iwK2WLX2oSw3VwBnqyNojWOl75lrXP1LVvarQIc01BGSbOyH xQoLBzNytG8MHVQs2FHHzL8w00Ny8TK/jM5JY6gA9/IcMIIFNzCCBB+gAwIBAgIECr6fXjAN BgkqhkiG9w0BAQUFADBaMQswCQYDVQQGEwJERTETMBEGA1UEChMKREZOLVZlcmVpbjEQMA4G A1UECxMHREZOLVBLSTEkMCIGA1UEAxMbREZOLVZlcmVpbiBQQ0EgR2xvYmFsIC0gRzAxMB4X DTA3MDcxOTA4MzMxOVoXDTE5MDYzMDAwMDAwMFowgaMxCzAJBgNVBAYTAkRFMQ8wDQYDVQQI EwZCYXllcm4xETAPBgNVBAcTCEVybGFuZ2VuMSgwJgYDVQQKEx9Vbml2ZXJzaXRhZXQgRXJs YW5nZW4tTnVlcm5iZXJnMQ0wCwYDVQQLEwRSUlpFMQ8wDQYDVQQDEwZGQVUtQ0ExJjAkBgkq hkiG9w0BCQEWF2NhQHJyemUudW5pLWVybGFuZ2VuLmRlMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAt4zo7dRsCRRgHOL7iMEQXwWSXMbFa8Acei7z6I0pxFUxT18yK4n+fgq4 f/cCDMaWjKJ4KWY6p78qUiFZRG0zCw6YPesxyVen2KUbt4hTvS4TzZrPULDs3ZXej22Ug+UM frVlcrxcJA7Tm7/O5uotER46J1xX6KuW6vnjyG7L6JREwa6jAaAfW2b2XVffvfleqS+QXCdT NSSEWIAHC1qPEhnTbaAwIltrlFeP4tJm/7rsw9OpCZ2gx/dZKzzOkzznj5FJI81uKcoOjgoB GR9o2ROJvfoc8x8xO7lWIFHlMi5En+AAe1XdgL5RxyOmP/LhdQ34Siqyo4OUWxW/33goCQID AQABo4IBuTCCAbUwEgYDVR0TAQH/BAgwBgEB/wIBATALBgNVHQ8EBAMCAQYwHQYDVR0OBBYE FPRz8/rGQrPGXGnAWL50OPlhK45iMB8GA1UdIwQYMBaAFEm3xs/oPR9/6kR7Eyn38QpwPt5k MCIGA1UdEQQbMBmBF2NhQHJyemUudW5pLWVybGFuZ2VuLmRlMIGIBgNVHR8EgYAwfjA9oDug OYY3aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIvY3JsL2NhY3Js LmNybDA9oDugOYY3aHR0cDovL2NkcDIucGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1jYS9wdWIv Y3JsL2NhY3JsLmNybDCBogYIKwYBBQUHAQEEgZUwgZIwRwYIKwYBBQUHMAKGO2h0dHA6Ly9j ZHAxLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0MEcG CCsGAQUFBzAChjtodHRwOi8vY2RwMi5wY2EuZGZuLmRlL2dsb2JhbC1yb290LWNhL3B1Yi9j YWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEARMHGwyEK31G2lGZ8MeYwocnQ MBLi0JIQdP5XtbPJ7cd3IoKhl0XU1+ZpCzN35kgrwmpjHpar73uSrmjcZEjZKxGzis70osCX wCmDGrzk4oLggiRxkXjpMZoGBAeIUwOppw9P73Gm13yjbDjjHlCwOxSMq4nmc8kw6eMvK5my nO+0as8Iq6BndmKM8CfMQdaR4DFMWnF/c5FTQQxfcp14PIhvPkEY8KXIwHXSyhpTbQaUnkAP LKagH+e8HPRti6uHDZfqQkwyZoKApwg4Klq851LKSvNNQGUSkUOnlYg+NcaLpjiRBZ2n+GTS Y02WFwXTAH66k/Nclhmq9IeWkW3iZjCCBb0wggSloAMCAQICBxL4KPF3HOUwDQYJKoZIhvcN AQEFBQAwgaMxCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCYXllcm4xETAPBgNVBAcTCEVybGFu Z2VuMSgwJgYDVQQKEx9Vbml2ZXJzaXRhZXQgRXJsYW5nZW4tTnVlcm5iZXJnMQ0wCwYDVQQL EwRSUlpFMQ8wDQYDVQQDEwZGQVUtQ0ExJjAkBgkqhkiG9w0BCQEWF2NhQHJyemUudW5pLWVy bGFuZ2VuLmRlMB4XDTExMTIwMjEwNDEzOFoXDTE0MTIwMTEwNDEzOFowfDELMAkGA1UEBhMC REUxKDAmBgNVBAoTH1VuaXZlcnNpdGFldCBFcmxhbmdlbi1OdWVybmJlcmcxKjAoBgNVBAsT IURlcGFydG1lbnQgb2YgQ29tcHV0ZXIgU2NpZW5jZSA0IDEXMBUGA1UEAxMOTW9yaXR6IFN0 cnVlYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfzPZGUhN/6df7oXojpNRT SyvDGmg/fhiOeAxQnN+DX9bLSMQtKs/xqrFhubYtEgcb94ontUuGrsGFxJERfJtuK1OeqyMB /Rne6GiSjH88Ut6nmykynS+2GeDsB6xgYn7CTIcZP6pC95zxK0qn+XSzaoMTiV1jcc3uxRLV UlvlAn4W8Z2rIvocTnLnIX6rk6nopjmfQQ1JeLOKOC8ztkZDhXvCg5vkZ38okkD9GEB118VE xZdulknZJCyrdNBBNsJgy9DnMqPzsQXjmZQP0aTMx0wWVfy5xxrT4qM+FKDIBY6RG4n+pfnO Af35Yc8aL6+XtYyKH67Y+gfk1vnEGa+/AgMBAAGjggIaMIICFjAJBgNVHRMEAjAAMAsGA1Ud DwQEAwIF4DApBgNVHSUEIjAgBggrBgEFBQcDAgYIKwYBBQUHAwQGCisGAQQBgjcUAgIwHQYD VR0OBBYEFMLK3xJsufrPkUH99qzwp1lh2GNLMB8GA1UdIwQYMBaAFPRz8/rGQrPGXGnAWL50 OPlhK45iMDQGA1UdEQQtMCuBKU1vcml0ei5TdHJ1ZWJlQGluZm9ybWF0aWsudW5pLWVybGFu Z2VuLmRlMIGfBgNVHR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvdW5p LWVybGFuZ2VuLW51ZXJuYmVyZy1jYS9wdWIvY3JsL2NhY3JsLmNybDBIoEagRIZCaHR0cDov L2NkcDIucGNhLmRmbi5kZS91bmktZXJsYW5nZW4tbnVlcm5iZXJnLWNhL3B1Yi9jcmwvY2Fj cmwuY3JsMIG4BggrBgEFBQcBAQSBqzCBqDBSBggrBgEFBQcwAoZGaHR0cDovL2NkcDEucGNh LmRmbi5kZS91bmktZXJsYW5nZW4tbnVlcm5iZXJnLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNy dDBSBggrBgEFBQcwAoZGaHR0cDovL2NkcDIucGNhLmRmbi5kZS91bmktZXJsYW5nZW4tbnVl cm5iZXJnLWNhL3B1Yi9jYWNlcnQvY2FjZXJ0LmNydDANBgkqhkiG9w0BAQUFAAOCAQEAkhCt 8To6NRpOL/p31V5rKM8LWWyBrWW9ppyJaeFHeqmAiPPC+HMpO/364s14VTT637s2/zYMgbbl pU6AfY9c1uAmjK/PoF21R2r7PIebtCDU8ScFYaJ121L0MsvTPq8mPRUp0vm8pFMO6I4+FQnh YElXD5Avw/R7SO45cR82iZbI/jDDxaGehTZwflULM/6GZU6LcjbRI5OkEs/C5FksP67WwneO COD5RL8PB2Ta/ur9+m/9A6tvOACRLjXFjl080e6xSAs9bSJdrHQQ3d2PencaSCb5XVm1K/pO nTR6YicTk39CG6zbq/zdyzL1tK4oBg2BdTOgg0d8ZYlwGU084jGCBC4wggQqAgEBMIGvMIGj MQswCQYDVQQGEwJERTEPMA0GA1UECBMGQmF5ZXJuMREwDwYDVQQHEwhFcmxhbmdlbjEoMCYG A1UEChMfVW5pdmVyc2l0YWV0IEVybGFuZ2VuLU51ZXJuYmVyZzENMAsGA1UECxMEUlJaRTEP MA0GA1UEAxMGRkFVLUNBMSYwJAYJKoZIhvcNAQkBFhdjYUBycnplLnVuaS1lcmxhbmdlbi5k ZQIHEvgo8Xcc5TAJBgUrDgMCGgUAoIICUzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xMzA5MjQwNzQ3MTVaMCMGCSqGSIb3DQEJBDEWBBT6V4W1ME1LmWex uAotFCH28Se1SDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIw CgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0G CCqGSIb3DQMCAgEoMIHABgkrBgEEAYI3EAQxgbIwga8wgaMxCzAJBgNVBAYTAkRFMQ8wDQYD VQQIEwZCYXllcm4xETAPBgNVBAcTCEVybGFuZ2VuMSgwJgYDVQQKEx9Vbml2ZXJzaXRhZXQg RXJsYW5nZW4tTnVlcm5iZXJnMQ0wCwYDVQQLEwRSUlpFMQ8wDQYDVQQDEwZGQVUtQ0ExJjAk BgkqhkiG9w0BCQEWF2NhQHJyemUudW5pLWVybGFuZ2VuLmRlAgcS+CjxdxzlMIHCBgsqhkiG 9w0BCRACCzGBsqCBrzCBozELMAkGA1UEBhMCREUxDzANBgNVBAgTBkJheWVybjERMA8GA1UE BxMIRXJsYW5nZW4xKDAmBgNVBAoTH1VuaXZlcnNpdGFldCBFcmxhbmdlbi1OdWVybmJlcmcx DTALBgNVBAsTBFJSWkUxDzANBgNVBAMTBkZBVS1DQTEmMCQGCSqGSIb3DQEJARYXY2FAcnJ6 ZS51bmktZXJsYW5nZW4uZGUCBxL4KPF3HOUwDQYJKoZIhvcNAQEBBQAEggEADK72VmDNMD8j 7Wz6APv7DfHIXSg39nN3Pxc/egBFbcuisXXtxCZj7nBwORkZTg0M5KYxHEh8pN0JNfYNkmaj bUhV1wH0j8sBCOcL/mXZVrRob0iJApAt+pkpAidJMjDqu0O2ROrbxLQXgXebSOXyOLAsNr/H 0jlP+pnJkXv63qwvSqftIV+++hfYeNhLFwKTwzGYftfAKLe4u+v9k/aAa3NUJdd3XZ+eiTDC dzDwDC39t4U4huTuyb2DQOsTDFv8sQOVT20mUIYEI/B3e/J1si8onNloG7cVQpfy44EEodXb nxrf/Zg8S7/u1/LdY0TjjYn/h+D+4C53LBJQZLdQkwAAAAAAAA== --------------ms060600080908030904080003-- From mike.gabriel@das-netzwerkteam.de Tue Sep 24 10:19:11 2013 Received: (at 309) by bugs.x2go.org; 24 Sep 2013 08:19:11 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 132C65DA6C for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:11 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id C0689C72 for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id B73E53B9E4 for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PqtH759B7eeG for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 8E7933C014 for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 707DB3B9E4 for <309@bugs.x2go.org>; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 1DC6E3BF23; Tue, 24 Sep 2013 10:19:10 +0200 (CEST) Received: from m-047.informatik.uni-kiel.de (m-047.informatik.uni-kiel.de [134.245.254.47]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Tue, 24 Sep 2013 10:19:10 +0200 Message-ID: <20130924101910.92526grl1bvaiwhq@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Tue, 24 Sep 2013 10:19:10 +0200 From: Mike Gabriel To: Moritz Struebe Cc: 309@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#309: Make x2goterminate-session / x2gosuspend-session operable as root References: <20130923122355.13703meclu8eso1n@mail.das-netzwerkteam.de> <52414383.7040104@informatik.uni-erlangen.de> In-Reply-To: <52414383.7040104@informatik.uni-erlangen.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_e1iv6fga9ku"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_e1iv6fga9ku Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Hi Morty, On Di 24 Sep 2013 09:47:15 CEST Moritz Struebe wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 2013-09-23 12:23, Mike Gabriel wrote: >> The super-user root should also be eligible to act on user sessions >> with those commands. >> >> This should work from any x2goserver (in a multi-node farm) and with > SQLite and PostgreSQL db backend. > > Hmm, but the super user can su to the user owning the session, right? Basically correct, but this does not help on larger setups where the homes are on AFS or NFSv4+Krb5. Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_e1iv6fga9ku Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJSQUr9AAoJEJr0azAldxsxwZwP/2DM9fgAikK8sp7vyYtpdjzj S9x/hiU6lY/ZEIS3fXjiEXhNK3/wdS95ot8XV3oQkCvStTv469+HrPsY4vdraX/K iTFKv2Xg3asVP+9frx4LIN6e3HmrFHs8kk7tX4Ofu1ncEwNKYknyj/BsyauU4kZi 28rETxQ/GJ5lcH2LInQM8ICJOkP1PJWL4RRcZKrCSdfaxC6fvbJsIHgcns8t9VVL tCuePvJwaXgG/LyXxFWHvV7Iz3UsT0T1jyV0Ebhe/zGzrNq4g+i/czO5wgW3xKCe kCVkJBJAboaGW7d/nZsvqcKYYhyyYuOxZQt/grZOQkYe8QRT6IZ3j/c3miG3Ar2E 9RUbxTmg7CewWXulW3FHVx60FPMDaYvWTvvLjaeCjDsqkRdJMvQyewkO0cFhghrq Sn/3adCmtKyEd60ko7HveYs4xl+E1tH6VAe5nqa06Y7JZbrSNFbIqQucu7i7pleQ Sl4fyNIfe0r1uVGx9Oaob03oaT3GlddGpV7/OHNvNuSvbt7/pbyZS1JSGpgbm+0B 4PT11be+v7sMR4wV63VG/ysvWMF2cekjHzU4UStruDwuoW3YBkX3LN32RmS+rJ5+ kcUMuok+f8CWpeQxtxHlhEHHNeAJ72CXffxfChdnxGBCLEj3hjCnxWATl/XtPF4y r1uKisvlTfD2VzNXfUj3 =Vzdl -----END PGP SIGNATURE----- --=_e1iv6fga9ku--