Subject: Bug#584: [X2Go-Dev] Bug#584: x2go Session Broker don't work with shadow sessions

From: Mike Gabriel <[email-masked]>
Date: Wed, 27 Aug 2014 07:25:47 +0000

Hi KeRo,

On  Di 26 Aug 2014 19:08:26 CEST, KeRo wrote:

> Package: x2gobroker
>
> Version: 0.0.3.0
>
> I have two type of broker session configured, MATE for normal desktop use
> and a SHADOW session for support and presentation. MATE sessions work fine
> but SHADOW session show Access Denied throw broker (Direct shadow session
> configured in x2go client work fine)
>
> The session displays of shadow connection dont appear throw broker :S
>
> x2go Server is a Ubuntu Desktop 14.04 with MATE
>
> Error in x2go Server syslog:
>
> NOVEA-desk /usr/bin/x2gostartagent: user ,,pam'' requests desktop sharing
> from user ,,'' for desktop ,,''
> NOVEA-desk /usr/bin/x2gostartagent: ERROR: user  denied desktop sharing
> session
>
> Broker sessions config:
>
> [DEFAULT]
> command=TERMINAL
> defsndport=true
> useiconv=false
> iconvfrom=UTF-8
> height=768
> export=
> quality=9
> fullscreen=false
> layout=es
> useexports=true
> width=1024
> speed=2
> soundsystem=pulse
> print=true
> type=pc105/es
> sndport=4713
> xinerama=true
> variant=
> usekbd=true
> fstunnel=true
> applications=TERMINAL,WWWBROWSER,MAILCLIENT,OFFICE
> multidisp=false
> sound=true
> rootless=true
> iconvto=UTF-8
> soundtunnel=true
> dpi=96
> sshport=22
> setdpi=0
> pack=16m-jpeg
> directrdp=false
> user=BROKER_USER
> usesshproxy=true
> sshproxytype=SSH
> sshproxyhost=broker.test.com
> sshproxyport=22
> sshproxyautologin=false
> sshproxysamepass=true
> sshproxysameuser=true
>
> [NOVEA-pim-access]
> name=NOVEA ACCESS
> host=172.16.110.101
> command=MATE
> acl-users-allow=pim
> acl-users-deny=ALL
> acl-clients-deny=ALL
> acl-clients-allow=0.0.0.0/0
> acl-any-order=deny-allow
>
> [NOVEA-pim-support]
> name=NOVEA Support
> host=172.16.110.101
> command=SHADOW
> acl-users-allow=pim
> acl-users-deny=ALL
> acl-clients-deny=ALL
> acl-clients-allow=0.0.0.0/0
> acl-any-order=deny-allow
>
> [NOVEA-pam-access]
> name=NOVEA ACCESS
> host=172.16.110.101
> command=MATE
> acl-users-allow=pam
> acl-users-deny=ALL
> acl-clients-deny=ALL
> acl-clients-allow=0.0.0.0/0
> acl-any-order=deny-allow
>
> [NOVEA-pam-support]
> name=NOVEA Support
> host=172.16.110.101
> command=SHADOW
> acl-users-allow=pam
> acl-users-deny=ALL
> acl-clients-deny=ALL
> acl-clients-allow=0.0.0.0/0
> acl-any-order=deny-allow
>
> Thanks for your help.

This one is an interesting bug. Of course, shadow sessions should be  
supported by the broker. Will take a look soon.

Mike
-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: [email-masked], http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb