X2Go Bug report logs - #459
PolicyKit authentication within apps often fails

version graph

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: Michael DePaulo <mikedep333@gmail.com>

Date: Sun, 23 Mar 2014 16:30:02 UTC

Severity: normal

Found in version 4.0.1.13

Full log

🔗 View this message in rfc822 format

X-Loop: owner@bugs.x2go.org
Subject: Bug#459: [X2Go-Dev] Bug#459: PolicyKit authentication within apps often fails
Reply-To: Michael DePaulo <mikedep333@gmail.com>, 459@bugs.x2go.org
Resent-From: Michael DePaulo <mikedep333@gmail.com>
Resent-To: x2go-dev@lists.x2go.org
Resent-CC: X2Go Developers <x2go-dev@lists.x2go.org>
X-Loop: owner@bugs.x2go.org
Resent-Date: Wed, 20 Aug 2014 14:15:02 +0000
Resent-Message-ID: <handler.459.B459.140854407615970@bugs.x2go.org>
Resent-Sender: owner@bugs.x2go.org
X-X2Go-PR-Message: followup 459
X-X2Go-PR-Package: x2goserver
X-X2Go-PR-Keywords: 
Received: via spool by 459-submit@bugs.x2go.org id=B459.140854407615970
          (code B ref 459); Wed, 20 Aug 2014 14:15:02 +0000
Received: (at 459) by bugs.x2go.org; 20 Aug 2014 14:14:36 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM,
	T_DKIM_INVALID autolearn=ham version=3.3.2
Received: from mail-we0-f180.google.com (mail-we0-f180.google.com [74.125.82.180])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id D8F085DB17
	for <459@bugs.x2go.org>; Wed, 20 Aug 2014 16:14:34 +0200 (CEST)
Received: by mail-we0-f180.google.com with SMTP id w61so7924110wes.39
        for <459@bugs.x2go.org>; Wed, 20 Aug 2014 07:14:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type:content-transfer-encoding;
        bh=ya7C/nxeb40z7wnyRDn8iIcuIFzOs067jtxwDipCD44=;
        b=kh/TXGTukUycIRYvSb4/Wao34QLL55Df7gmnQxNEVS1PZ8h/tbVNdsRxUdCbJiZ3n3
         AYJz3y18GflYuaPIAtwmbrY23Rn2imL1M7E4GphqmxoIlq5k7XiGTUJYHbI1IRXCnEaB
         jDqF2kAmK9nSmWKsOez8KASoQs1hPtgfyu8rgso0qjTu1cqmUVePAXpxJxDUvdREOKQ2
         oGd6BCcV9hxasCVk6/NbRsApW4MhIhALsGVd5wGGg1H805cmF1dXjb16SOU4HvTqjQZG
         ZcVjYYPLQUm47+xkWk5DgndudVj0LKoKyZYHtfAr7ueVr8G/ZivNxUGxukD2Tg7yYhbE
         r+Iw==
MIME-Version: 1.0
X-Received: by 10.180.85.136 with SMTP id h8mr15498348wiz.67.1408544074598;
 Wed, 20 Aug 2014 07:14:34 -0700 (PDT)
Received: by 10.180.238.66 with HTTP; Wed, 20 Aug 2014 07:14:34 -0700 (PDT)
In-Reply-To: <CAMKht8jYno1FNzfcmmo29SMHO4fx6e78Q+zOLnbky0Sv5qtE-A@mail.gmail.com>
References: <CAMKht8hxORsAXk32K=9ruNpF-PYWLUeyVvWqyeMsZhhb4uTWEQ@mail.gmail.com>
	<20140820093115.Horde.TjoWeWlTUbpPl3j2vDFNFw1@mail.das-netzwerkteam.de>
	<CAMKht8jYno1FNzfcmmo29SMHO4fx6e78Q+zOLnbky0Sv5qtE-A@mail.gmail.com>
Date: Wed, 20 Aug 2014 10:14:34 -0400
Message-ID: <CAMKht8gOyOr8_-DNtwXPXZfNuweG7EQ4NLc2Cnuv8BOPZCQ4Qg@mail.gmail.com>
From: Michael DePaulo <mikedep333@gmail.com>
To: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>, 459@bugs.x2go.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Aug 20, 2014 at 10:04 AM, Michael DePaulo <mikedep333@gmail.com> wrote:
> On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel
> <mike.gabriel@das-netzwerkteam.de> wrote:
>> Hi Michael,
>>
>>
>> On  So 23 Mär 2014 17:25:58 CET, Michael DePaulo wrote:
>>
>>>[...]
>>
>>
>> I just fixed #458 by exporting $XAUTHORITY in x2goruncommand.
>
> Thank you :)
>
>> Do you have any clue what this issue may be related to? As I don't have any
>> of the failing apps on Debian, I cannot reproduce your test results right
>> away.
>
> 2 possible theories:
> 1. We are not integrating with ConsoleKit and/or logind properly.
> (Although it appears that our integration with logind is better, since
> Fedora 20 works better than CentOS 6.)
> 2. We have issues with the polcykit authentication windows not being
> permitted to show up.
>
A 3rd possible theory:
3. PolicyKit policies are blocking certain actions from happening over
any sort of remote session. PolicyKit refers to local sessions as
"Active" and remote sessions as "Inactive".
It appears that the X11RDP project has run into this problem:
http://scarygliders.net/2012/06/20/a-brief-guide-to-policykit/
http://scarygliders.net/category/policykit/

> I think that there is different behavior when using XDMCP. I'll double
> check after work.
>
> Also, Red Hat has some KB articles on this subject. I noticed them
> after I bought a RHEL subscription for home. I'll look over them
> again, and update this bug with any relevant info.
>
>> Any hint, if this issues also occurs on Debian?
>
> I can test this with VMs. I've already created some Debian VMs for
> compatibility testing with X2Go. Which of the 3 releases (squeeze,
> wheezy and jessie) should I test? Squeeze is similar to CentOS 6 in
> terms of versions of packages like ConsoleKit.
>
>> Mike
> [...]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Tue Apr 23 15:53:05 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.