From mike.gabriel@das-netzwerkteam.de Fri Aug 22 23:33:40 2014 Received: (at 459) by bugs.x2go.org; 22 Aug 2014 21:33:41 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 0BCD45DCA9 for <459@bugs.x2go.org>; Fri, 22 Aug 2014 23:33:40 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 1C2141EFC; Fri, 22 Aug 2014 23:33:38 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 67C723BBE6; Fri, 22 Aug 2014 23:33:39 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pe3KzOzd02EI; Fri, 22 Aug 2014 23:33:39 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id 26B083BBE5; Fri, 22 Aug 2014 23:33:39 +0200 (CEST) Received: from p5B3B9266.dip0.t-ipconnect.de (p5B3B9266.dip0.t-ipconnect.de [91.59.146.102]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Fri, 22 Aug 2014 21:33:39 +0000 Date: Fri, 22 Aug 2014 21:33:39 +0000 Message-ID: <20140822213339.Horde.0FGVLxzv6cUhXSZqYYA9vw1@mail.das-netzwerkteam.de> From: Mike Gabriel To: Michael DePaulo Cc: 459@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#459: PolicyKit authentication within apps often fails References: <20140820093115.Horde.TjoWeWlTUbpPl3j2vDFNFw1@mail.das-netzwerkteam.de> In-Reply-To: User-Agent: Internet Messaging Program (IMP) H5 (6.2.0) Accept-Language: en,de Organization: DAS-NETZWERKTEAM X-Originating-IP: 91.59.146.102 X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Firefox/31.0 Iceweasel/31.0 Content-Type: multipart/signed; boundary="=_uTBSffVbA4jZeChpfMyH3g1"; protocol="application/pgp-signature"; micalg=pgp-sha1 MIME-Version: 1.0 This message is in MIME format and has been PGP signed. --=_uTBSffVbA4jZeChpfMyH3g1 Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mi 20 Aug 2014 16:14:34 CEST, Michael DePaulo wrote: > On Wed, Aug 20, 2014 at 10:04 AM, Michael DePaulo=20=20 >=20 wrote: >> On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel >> wrote: >>> Hi Michael, >>> >>> >>> On So 23 M=C3=A4r 2014 17:25:58 CET, Michael DePaulo wrote: >>> >>>> [...] >>> >>> >>> I just fixed #458 by exporting $XAUTHORITY in x2goruncommand. >> >> Thank you :) >> >>> Do you have any clue what this issue may be related to? As I don't have= any >>> of the failing apps on Debian, I cannot reproduce your test results rig= ht >>> away. >> >> 2 possible theories: >> 1. We are not integrating with ConsoleKit and/or logind properly. >> (Although it appears that our integration with logind is better, since >> Fedora 20 works better than CentOS 6.) >> 2. We have issues with the polcykit authentication windows not being >> permitted to show up. >> > A 3rd possible theory: > 3. PolicyKit policies are blocking certain actions from happening over > any sort of remote session. PolicyKit refers to local sessions as > "Active" and remote sessions as "Inactive". > It appears that the X11RDP project has run into this problem: > http://scarygliders.net/2012/06/20/a-brief-guide-to-policykit/ > http://scarygliders.net/category/policykit/ > I stumbled over this the other day, when I was going through these=20=20 polkit=20bugs, myself. We don't want X2Go sessions to be "active=3DTRUE" and neither do we want=20= =20 them=20to be local. Sessions are marked as active and local sessions if the user is really=20= =20 sitting=20in front of a machine. Those session will accept USB=20=20 flashdrives=20when they are plugged into the workstation. We want that=20= =20 with=20local X.org sessions, but not in X2Go sessions. Greets, Mike --=20 DAS-NETZWERKTEAM mike=20gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x= fb --=_uTBSffVbA4jZeChpfMyH3g1 Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJT97czAAoJEJr0azAldxsxzGIQAIfyFdVr4k/rVo809nbkT69F J1/NC1PK0czc+El+NgZB1j9YQoUlugbKDASg34BwIDGwCBCUP8RPq+COBdq2Zs8A yd3PegYyF5KhnahJvbdB7x6lgSc4yZDEjyI4LtFfZ6RdbffR/aTLTifdoXVbbcei IabywH5t1wqG4tOi2qRD7oB4pXbip5QHunnOr4hC46qQyAOk697wYgDgNthL3pqd nEK1oD7o7OpvXSKnMBUOI6s2+pGNDbAedhto6ukRtEd8P/1LcrnFrYiy0UWeM5mx xQWTWr5xfF2jnd+e+t1PWrwkRmI4FgCCaKPM5xyb+dXme4dHF6HY+NHIWmEAtP3F XaFginYzyyNzWnooQB/1g4GqtVZON1dEFgv8zrn7y25KvEvGFbCsjIMjix1msd3K NRO+jPpSfsvJ6jM8ttKt49VCG7X4bBJHDoWQ1Qt9oWQogpdHYiJDGYrLTrgRiK2c 2vKwxGmZ+yB0ThP/I1j81mujuzFe2YyFz3WJiAfPCkWaFKykEN8+Tl/EHCOgiJi0 2HRVORPmVIUH6KH298NDKr58V55kvY3x7VA9qqNEr7PNipoMlCqn/YWWXo9bvmR6 xne8iDCot/hdLBCO2U41poI6JvBC2uXuqhswaPYdmksmA7TYEBhrfX1j1ZofSNLP d1KZz6eVU/qouCNYBnda =FkJw -----END PGP SIGNATURE----- --=_uTBSffVbA4jZeChpfMyH3g1--