From unknown Tue Apr 28 14:01:40 2026 X-Loop: owner@bugs.x2go.org Subject: Bug#459: [X2Go-Dev] Bug#459: PolicyKit authentication within apps often fails Reply-To: Michael DePaulo , 459@bugs.x2go.org Resent-From: Michael DePaulo Resent-To: x2go-dev@lists.x2go.org Resent-CC: X2Go Developers X-Loop: owner@bugs.x2go.org Resent-Date: Wed, 20 Aug 2014 14:15:02 +0000 Resent-Message-ID: Resent-Sender: owner@bugs.x2go.org X-X2Go-PR-Message: followup 459 X-X2Go-PR-Package: x2goserver X-X2Go-PR-Keywords: Received: via spool by 459-submit@bugs.x2go.org id=B459.140854407615970 (code B ref 459); Wed, 20 Aug 2014 14:15:02 +0000 Received: (at 459) by bugs.x2go.org; 20 Aug 2014 14:14:36 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM, T_DKIM_INVALID autolearn=ham version=3.3.2 Received: from mail-we0-f180.google.com (mail-we0-f180.google.com [74.125.82.180]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id D8F085DB17 for <459@bugs.x2go.org>; Wed, 20 Aug 2014 16:14:34 +0200 (CEST) Received: by mail-we0-f180.google.com with SMTP id w61so7924110wes.39 for <459@bugs.x2go.org>; Wed, 20 Aug 2014 07:14:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=ya7C/nxeb40z7wnyRDn8iIcuIFzOs067jtxwDipCD44=; b=kh/TXGTukUycIRYvSb4/Wao34QLL55Df7gmnQxNEVS1PZ8h/tbVNdsRxUdCbJiZ3n3 AYJz3y18GflYuaPIAtwmbrY23Rn2imL1M7E4GphqmxoIlq5k7XiGTUJYHbI1IRXCnEaB jDqF2kAmK9nSmWKsOez8KASoQs1hPtgfyu8rgso0qjTu1cqmUVePAXpxJxDUvdREOKQ2 oGd6BCcV9hxasCVk6/NbRsApW4MhIhALsGVd5wGGg1H805cmF1dXjb16SOU4HvTqjQZG ZcVjYYPLQUm47+xkWk5DgndudVj0LKoKyZYHtfAr7ueVr8G/ZivNxUGxukD2Tg7yYhbE r+Iw== MIME-Version: 1.0 X-Received: by 10.180.85.136 with SMTP id h8mr15498348wiz.67.1408544074598; Wed, 20 Aug 2014 07:14:34 -0700 (PDT) Received: by 10.180.238.66 with HTTP; Wed, 20 Aug 2014 07:14:34 -0700 (PDT) In-Reply-To: References: <20140820093115.Horde.TjoWeWlTUbpPl3j2vDFNFw1@mail.das-netzwerkteam.de> Date: Wed, 20 Aug 2014 10:14:34 -0400 Message-ID: From: Michael DePaulo To: Mike Gabriel , 459@bugs.x2go.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Wed, Aug 20, 2014 at 10:04 AM, Michael DePaulo wr= ote: > On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel > wrote: >> Hi Michael, >> >> >> On So 23 M=C3=A4r 2014 17:25:58 CET, Michael DePaulo wrote: >> >>>[...] >> >> >> I just fixed #458 by exporting $XAUTHORITY in x2goruncommand. > > Thank you :) > >> Do you have any clue what this issue may be related to? As I don't have = any >> of the failing apps on Debian, I cannot reproduce your test results righ= t >> away. > > 2 possible theories: > 1. We are not integrating with ConsoleKit and/or logind properly. > (Although it appears that our integration with logind is better, since > Fedora 20 works better than CentOS 6.) > 2. We have issues with the polcykit authentication windows not being > permitted to show up. > A 3rd possible theory: 3. PolicyKit policies are blocking certain actions from happening over any sort of remote session. PolicyKit refers to local sessions as "Active" and remote sessions as "Inactive". It appears that the X11RDP project has run into this problem: http://scarygliders.net/2012/06/20/a-brief-guide-to-policykit/ http://scarygliders.net/category/policykit/ > I think that there is different behavior when using XDMCP. I'll double > check after work. > > Also, Red Hat has some KB articles on this subject. I noticed them > after I bought a RHEL subscription for home. I'll look over them > again, and update this bug with any relevant info. > >> Any hint, if this issues also occurs on Debian? > > I can test this with VMs. I've already created some Debian VMs for > compatibility testing with X2Go. Which of the 3 releases (squeeze, > wheezy and jessie) should I test? Squeeze is similar to CentOS 6 in > terms of versions of packages like ConsoleKit. > >> Mike > [...]