X2Go Bug report logs - #504
nxagent fails to come up on servers using

Full log

Message #12 received at 504@bugs.x2go.org (full text, mbox, reply):

Received: (at 504) by bugs.x2go.org; 31 May 2014 09:54:48 +0000
From mike.gabriel@das-netzwerkteam.de  Sat May 31 11:54:47 2014
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED
	autolearn=ham version=3.3.2
Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 2FD675DA79
	for <504@bugs.x2go.org>; Sat, 31 May 2014 11:54:47 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98])
	by freya.das-netzwerkteam.de (Postfix) with ESMTPS id CBFC8E27;
	Sat, 31 May 2014 11:54:46 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id B02793C816;
	Sat, 31 May 2014 11:54:46 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de
Received: from grimnir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id fNQo1yHvvmEz; Sat, 31 May 2014 11:54:46 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id 78D983BAE1;
	Sat, 31 May 2014 11:54:46 +0200 (CEST)
Received: from pD9E9E817.dip0.t-ipconnect.de (pD9E9E817.dip0.t-ipconnect.de
 [217.233.232.23]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP;
 Sat, 31 May 2014 09:54:46 +0000
Date: Sat, 31 May 2014 09:54:46 +0000
Message-ID: <20140531095446.Horde.Y43yygH35wH2hoTWHOtwVw3@mail.das-netzwerkteam.de>
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: Orion Poplawski <orion@cora.nwra.com>, 504@bugs.x2go.org
Subject: Re: [X2Go-Dev] Bug#504: Fwd: [Bug 1100985] New: x2go clients fail
 to connect to servers using polyinstantiated /tmp directories
References: <bug-1100985-140047@bugzilla.redhat.com>
 <5384EA18.7010203@cora.nwra.com>
In-Reply-To: <5384EA18.7010203@cora.nwra.com>
User-Agent: Internet Messaging Program (IMP) H5 (6.1.7)
Accept-Language: en,de
Organization: DAS-NETZWERKTEAM
X-Originating-IP: 217.233.232.23
X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:29.0) Gecko/20100101
 Firefox/29.0 Iceweasel/29.0.1
Content-Type: multipart/signed; boundary="=_EiSUPoxb2vUYnootL6KTOA9";
 protocol="application/pgp-signature"; micalg=pgp-sha1
MIME-Version: 1.0

[Message part 1 (text/plain, inline)]

Control: retitle -1 nxagent fails to come up on servers using  
polyinstantiated /tmp directories
Control: reassign -1 nxagent
Control: blocks -1 #406

On  Di 27 Mai 2014 21:40:08 CEST, Orion Poplawski wrote:

> Package: x2goserver
>
>
> -------- Original Message --------
> Subject: [Bug 1100985] New: x2go clients fail to connect to servers  
> using polyinstantiated /tmp directories
> Date: Sun, 25 May 2014 00:13:13 +0000
> From: bugzilla@redhat.com
> To: orion@cora.nwra.com
>
> https://bugzilla.redhat.com/show_bug.cgi?id=1100985
>
>             Bug ID: 1100985
>            Summary: x2go clients fail to connect to servers using
>                     polyinstantiated /tmp directories
>            Product: Fedora EPEL
>            Version: el6
>          Component: x2goserver
>           Assignee: orion@cora.nwra.com
>           Reporter: rgm+rh@gnu.org
>         QA Contact: extras-qa@fedoraproject.org
>                 CC: orion@cora.nwra.com
>
>
>
> Hi,
>
>
> Description of problem:
>
> If the RHEL6 host that acts as the server for x2go has enabled  
> polyinstantiated
> /tmp directories as per
>
> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/Security-Enhanced_Linux/polyinstantiated-directories.html
>
> then x2go clients cannot connect. They fail with
>
>   The remote proxy closed the connection while negotiating
>   the session. This may be due to the wrong authentication
>   credentials passed to the server.
>
> It seems that x2go needs the directory /tmp/.X11-unix/ to exist, be owned
> by root, and be mode 1777.
>
>
> Version-Release number of selected component (if applicable):
>
> x2goserver-4.0.1.13-4.el6.x86_64
> RHEL 6.5
>
>
> How reproducible:
>
> 100%.
>
>
> Steps to Reproduce:
> 1. Uncomment the line in /etc/security/namespace.conf that reads:
> #/tmp     /tmp-inst/           level      root,adm
>
> 2. Try to log in to that host via x2goclient.
>
>
> Actual results:
>
> x2go fails.
>
>
> Expected results:
>
> x2go works.
>
>
> Additional info:
>
> A workaround is to add something like the following to the end of
> /etc/security/namespace.init:
>
> if [ "$1" = "/tmp" ]; then
>     XSOCKDIR=/tmp/.X11-unix
>     if [ ! -d $XSOCKDIR ]; then
>         mkdir $XSOCKDIR
>         chmod 1777 $XSOCKDIR
>     fi
> fi
>
> It would be great if x2go could fix this itself though.
> Ideally it would either not need /tmp/.X11-unix, or be able to  
> create it itself
> when needed.
>
>
> Thanks.


-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.