From unknown Mon May 25 06:53:42 2026 X-Loop: owner@bugs.x2go.org Subject: Bug#584: [X2Go-Dev] Bug#584: x2go Session Broker don't work with shadow sessions Reply-To: Mike Gabriel , 584@bugs.x2go.org Resent-From: Mike Gabriel Resent-To: x2go-dev@lists.x2go.org Resent-CC: X2Go Developers X-Loop: owner@bugs.x2go.org Resent-Date: Wed, 27 Aug 2014 07:30:01 +0000 Resent-Message-ID: Resent-Sender: owner@bugs.x2go.org X-X2Go-PR-Message: followup 584 X-X2Go-PR-Package: x2gobroker X-X2Go-PR-Keywords: Received: via spool by 584-submit@bugs.x2go.org id=B584.140912434924913 (code B ref 584); Wed, 27 Aug 2014 07:30:01 +0000 Received: (at 584) by bugs.x2go.org; 27 Aug 2014 07:25:49 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id B02FD5DB1B for <584@bugs.x2go.org>; Wed, 27 Aug 2014 09:25:47 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 6BF9B3D8; Wed, 27 Aug 2014 09:25:47 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 5BA103BBA8; Wed, 27 Aug 2014 09:25:47 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dlT783UCOhjU; Wed, 27 Aug 2014 09:25:47 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id 23D0F3BB22; Wed, 27 Aug 2014 09:25:47 +0200 (CEST) Received: from listrac.informatik.uni-kiel.de (listrac.informatik.uni-kiel.de [134.245.252.114]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Wed, 27 Aug 2014 07:25:47 +0000 Date: Wed, 27 Aug 2014 07:25:47 +0000 Message-ID: <20140827072547.Horde.M9E60gLSZYcOX4oQTTEwgg1@mail.das-netzwerkteam.de> From: Mike Gabriel To: KeRo , 584@bugs.x2go.org In-Reply-To: User-Agent: Internet Messaging Program (IMP) H5 (6.2.0) Accept-Language: en,de Organization: DAS-NETZWERKTEAM X-Originating-IP: 134.245.252.114 X-Remote-Browser: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Firefox/31.0 Iceweasel/31.0 Content-Type: multipart/signed; boundary="=_k509uzJmQr5Ku7nWzIumRw1"; protocol="application/pgp-signature"; micalg=pgp-sha1 MIME-Version: 1.0 This message is in MIME format and has been PGP signed. --=_k509uzJmQr5Ku7nWzIumRw1 Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi KeRo, On Di 26 Aug 2014 19:08:26 CEST, KeRo wrote: > Package: x2gobroker > > Version: 0.0.3.0 > > I have two type of broker session configured, MATE for normal desktop use > and a SHADOW session for support and presentation. MATE sessions work fin= e > but SHADOW session show Access Denied throw broker (Direct shadow session > configured in x2go client work fine) > > The session displays of shadow connection dont appear throw broker :S > > x2go Server is a Ubuntu Desktop 14.04 with MATE > > Error in x2go Server syslog: > > NOVEA-desk /usr/bin/x2gostartagent: user ,,pam'' requests desktop sharing > from user ,,'' for desktop ,,'' > NOVEA-desk /usr/bin/x2gostartagent: ERROR: user denied desktop sharing > session > > Broker sessions config: > > [DEFAULT] > command=3DTERMINAL > defsndport=3Dtrue > useiconv=3Dfalse > iconvfrom=3DUTF-8 > height=3D768 > export=3D > quality=3D9 > fullscreen=3Dfalse > layout=3Des > useexports=3Dtrue > width=3D1024 > speed=3D2 > soundsystem=3Dpulse > print=3Dtrue > type=3Dpc105/es > sndport=3D4713 > xinerama=3Dtrue > variant=3D > usekbd=3Dtrue > fstunnel=3Dtrue > applications=3DTERMINAL,WWWBROWSER,MAILCLIENT,OFFICE > multidisp=3Dfalse > sound=3Dtrue > rootless=3Dtrue > iconvto=3DUTF-8 > soundtunnel=3Dtrue > dpi=3D96 > sshport=3D22 > setdpi=3D0 > pack=3D16m-jpeg > directrdp=3Dfalse > user=3DBROKER_USER > usesshproxy=3Dtrue > sshproxytype=3DSSH > sshproxyhost=3Dbroker.test.com > sshproxyport=3D22 > sshproxyautologin=3Dfalse > sshproxysamepass=3Dtrue > sshproxysameuser=3Dtrue > > [NOVEA-pim-access] > name=3DNOVEA ACCESS > host=3D172.16.110.101 > command=3DMATE > acl-users-allow=3Dpim > acl-users-deny=3DALL > acl-clients-deny=3DALL > acl-clients-allow=3D0.0.0.0/0 > acl-any-order=3Ddeny-allow > > [NOVEA-pim-support] > name=3DNOVEA Support > host=3D172.16.110.101 > command=3DSHADOW > acl-users-allow=3Dpim > acl-users-deny=3DALL > acl-clients-deny=3DALL > acl-clients-allow=3D0.0.0.0/0 > acl-any-order=3Ddeny-allow > > [NOVEA-pam-access] > name=3DNOVEA ACCESS > host=3D172.16.110.101 > command=3DMATE > acl-users-allow=3Dpam > acl-users-deny=3DALL > acl-clients-deny=3DALL > acl-clients-allow=3D0.0.0.0/0 > acl-any-order=3Ddeny-allow > > [NOVEA-pam-support] > name=3DNOVEA Support > host=3D172.16.110.101 > command=3DSHADOW > acl-users-allow=3Dpam > acl-users-deny=3DALL > acl-clients-deny=3DALL > acl-clients-allow=3D0.0.0.0/0 > acl-any-order=3Ddeny-allow > > Thanks for your help. This one is an interesting bug. Of course, shadow sessions should be=20=20 supported=20by the broker. Will take a look soon. Mike --=20 DAS-NETZWERKTEAM mike=20gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x= fb --=_k509uzJmQr5Ku7nWzIumRw1 Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAABAgAGBQJT/Yf7AAoJEJr0azAldxsxMKUP/0EaLNEKhvSEXq7aBGwoyL/I bMzr0zsug4LzxHmx7Dd9orBAUQGWAlmhUzo1Bzdfztokva+Tpr09i+JSQ4flfMOm 4eHq89FOocDNg4PQC6NPqdAc/3oT3sk6d7ezDpNDJdfox79/vV0c+dmJssFmuHA8 9rPPHXalU5MS5s1n/EeTL8uG50h+8nmedGJSr9aA9CBp50ZTPh9kU3La8y9SFZnW yDwe5X1+58iocu3asWpGOeaPN2fJ8icHfZ2FgnKEfIxTc1g/QxmniKibuUr8UrS2 PhZs6TvOlVmA5Plg/pCOcXTWZSrHQp85QmxAeqfBDzhPUw+0+V7sqLQrQUCrLQtA sJFhjcILnVu1O8uf004JIppuT39uZZi3i5r7ys0jdClN4KR7tnDybRbgRHvSRFSG Ec8u5N5dtBJ45hKu5HLyS7dPQjMcIBX9VTF9il692oa7A03QqQO3PAJmE4kF6e7L 383qR5l/UNxn06S6/vHkSAm8JgysMseJAYvh43k5y/3afUsPuQlm/zq1GITrzPUO KFD2RfrD9RoHYW0HTNJm9foAZlZljg1tgReYO7mfHwJS/vFJQkcQDkZOkPE/9jxF 6/50hBwvwCsE20jvIfoZYipZTaMp8tSwkLnMr9s/5yG+YiX9/+cAgQz5J2XLpWc6 Bw3Uai2bMv08qPpuOjBP =s+b/ -----END PGP SIGNATURE----- --=_k509uzJmQr5Ku7nWzIumRw1--