From unknown Wed Apr 29 12:22:48 2026
X-Loop: owner@bugs.x2go.org
Subject: Bug#781: [X2Go-Dev] Bug#781: x2goclient in broker mode with --broker-noauth
Reply-To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>, 781-quiet@bugs.x2go.org
Resent-To: Sergey Savko <savko@tophouse.ru>
X-Loop: owner@bugs.x2go.org
Resent-Date: Wed, 04 Feb 2015 15:00:03 +0000
Resent-Message-ID: <handler.781.U781.142306195011786@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: report 781
X-X2Go-PR-Package: x2goclient
X-X2Go-PR-Keywords: 
Received: via spool by 781-submitter@bugs.x2go.org id=U781.142306195011786
          (code U ref 781); Wed, 04 Feb 2015 15:00:03 +0000
Received: (at 781-submitter) by bugs.x2go.org; 4 Feb 2015 14:59:10 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED
	autolearn=ham version=3.3.2
Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 55F955E073;
	Wed,  4 Feb 2015 15:59:08 +0100 (CET)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98])
	by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 038CE38C;
	Wed,  4 Feb 2015 15:59:08 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id DE85A3C06B;
	Wed,  4 Feb 2015 15:59:07 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de
Received: from grimnir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id 7sdgtRq2TZbe; Wed,  4 Feb 2015 15:59:07 +0100 (CET)
Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTPS id 8391C3BA69;
	Wed,  4 Feb 2015 15:59:07 +0100 (CET)
Received: from m-097.informatik.uni-kiel.de (m-097.informatik.uni-kiel.de
 [134.245.254.97]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP;
 Wed, 04 Feb 2015 14:59:07 +0000
Date: Wed, 04 Feb 2015 14:59:07 +0000
Message-ID: <20150204145907.Horde.gQHo-olBJ8GjQQL7uzk4_Q2@mail.das-netzwerkteam.de>
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: Sergey Savko <savko@tophouse.ru>, 781@bugs.x2go.org
Cc: 781-submitter@bugs.x2go.org
References: <1249362733.50203.1423045063015.JavaMail.zimbra@tophouse.ru>
 <1445793820.50897.1423046495131.JavaMail.zimbra@tophouse.ru>
In-Reply-To: <1445793820.50897.1423046495131.JavaMail.zimbra@tophouse.ru>
User-Agent: Internet Messaging Program (IMP) H5 (6.2.2)
Accept-Language: de,en
Organization: DAS-NETZWERKTEAM
X-Originating-IP: 134.245.254.97
X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:32.0) Gecko/20100101
 Firefox/32.0 Iceweasel/32.0
Content-Type: multipart/signed; boundary="=_bzoSvBNw30uAHM7cUU9TPw1";
 protocol="application/pgp-signature"; micalg=pgp-sha1
MIME-Version: 1.0

This message is in MIME format and has been PGP signed.

--=_bzoSvBNw30uAHM7cUU9TPw1
Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Alex,

On  Mi 04 Feb 2015 11:41:35 CET, Sergey Savko wrote:

> Package: x2goclient
> Version: 4.0.3.1
> Tag: patch
>
> If x2goclient started in broker mode without pass-through=20=20
>=20authentication (--broker-noauth) and authentication on the server,=20=
=20
>=20x2goclient connected from the user who started the x2goclient.
> That isn't right, we can run x2goclient from any user and connect to=20=
=20
>=20the servers as a different user. Just x2goclient can't restore=20=20
>=20session from suspend.
> This patch allows you to start x2goclient from any user on the local=20=
=20
>=20system and connect to the server by the user that was entered in the=20=
=20
>=20authentication window.

can you please review Sergey's patch attached to #781? Would switching=20=
=20
to=20the X2Go Server username for the "selectsession" broker task break=20=
=20
any=20of your deployed setups?

Optionally, I would suggest adding a cmdline option=20=20
(--broker-noauth-with-session-username=20or such) that enables the=20=20
provided=20patch (which makes sense from my point of view).

Greets,
Mike


--=20

DAS-NETZWERKTEAM
mike=20gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.x=
fb

--=_bzoSvBNw30uAHM7cUU9TPw1
Content-Type: application/pgp-signature
Content-Description: Digitale PGP-Signatur
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=z3Dd
-----END PGP SIGNATURE-----

--=_bzoSvBNw30uAHM7cUU9TPw1--
