[X2Go-Dev] Bug#459: Bug#459: PolicyKit authentication within apps often fails
On Mi 20 Aug 2014 16:04:03 CEST, Michael DePaulo wrote:
On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel
mike.gabr...@das-netzwerkteam.de wrote:
Hi Michael,
On So 23 Mär 2014 17:25:58 CET, Michael DePaulo wrote:
[...]
I just fixed #458 by exporting $XAUTHORITY in x2goruncommand.
Thank you :)
Do you have any clue what this issue may be related to? As I don't have any
of the failing apps on Debian, I cannot reproduce your test results right
away.
2 possible theories:
1. We are not integrating with ConsoleKit and/or logind properly.
(Although it appears that our integration with logind is better, since
Fedora 20 works better than CentOS 6.)
On Debian systems all is handled via the /etc/X11/Xsession.d directory.
For RHEL et al I see this in the /etc/x2go/Xsession script:
CK_XINIT_SESSION=
if [ -x /usr/bin/ck-xinit-session -a -z $XDG_SESSION_COOKIE ]; then
CK_XINIT_SESSION=/usr/bin/ck-xinit-session
fi
# At the time of integrating X2Go Xsession support for RHEL6 / Fedora
# the Xsession stuff in Fedora/RHEL6 seems to be a little mess.
# The proposed strategy is to have Xclients.$WM.sh files in
# /etc/X11/xinit/Xclients.d. Currently, only wmx uses this mechanism.
# As it is a described but rather unused ,,standard'' we will
not support it
# in X2Go for now, but leave it here as a reminder...
# XCLIENTS_D=/etc/x2go/Xclients.d
#if [ -d $XCLIENTS_D -a -x
$XCLIENTS_D/Xclients.${XSESSION_EXEC}.sh ]; then
# exec -l $SHELL -c $CK_XINIT_SESSION $SSH_AGENT
$XCLIENTS_D/Xclients.$1.sh
#fi
# switchdesk support is also totally deprecated in RHEL, but
we leave it here
# as a reminder, as well, in case we need it in the future
for special setups...
#if [ -x $SWITCHDESKPATH/Xclients.${XSESSION_EXEC} ]; then
# exec -l $SHELL -c
$SWITCHDESKPATH/Xclients.${XSESSION_EXEC};
#fi
exec $CK_XINIT_SESSION $SSH_AGENT /bin/sh -c exec -l $SHELL
-c \$STARTUP\
It has been derived from the X11 session startup on SL6. Maybe we need
to tweak this CK_XINIT_SESSION variable and change over to using
ck-launch-session here.
Maybe this is hint enough for you to play with this some more.?...
2. We have issues with the polcykit authentication windows not being
permitted to show up.
I think that there is different behavior when using XDMCP. I'll double
check after work.
Ok. Any results?
Also, Red Hat has some KB articles on this subject. I noticed them
after I bought a RHEL subscription for home. I'll look over them
again, and update this bug with any relevant info.
Any hint, if this issues also occurs on Debian?
I can test this with VMs. I've already created some Debian VMs for
compatibility testing with X2Go. Which of the 3 releases (squeeze,
wheezy and jessie) should I test? Squeeze is similar to CentOS 6 in
terms of versions of packages like ConsoleKit.
squeeze has CK and GNOMEv2, wheezy has CK and XFCE or GNOMEv3...
jessie has systemd and MATE, GNOMEv3, etc.
So I guess, you should stick with wheezy for CK testing and use jessie
for systemd testing.
Mike#1
--
DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148
GnuPG Key ID 0x25771B31
mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de
freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
pgpqwwaskYmr8.pgp
Description: Digitale PGP-Signatur
___
x2go-dev mailing list
x2go-dev@lists.x2go.org
http://lists.x2go.org/listinfo/x2go-dev
[X2Go-Dev] Bug#459: Bug#459: PolicyKit authentication within apps often fails
On Mi 20 Aug 2014 16:14:34 CEST, Michael DePaulo wrote: On Wed, Aug 20, 2014 at 10:04 AM, Michael DePaulo mikedep...@gmail.com wrote: On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel mike.gabr...@das-netzwerkteam.de wrote: Hi Michael, On So 23 Mär 2014 17:25:58 CET, Michael DePaulo wrote: [...] I just fixed #458 by exporting $XAUTHORITY in x2goruncommand. Thank you :) Do you have any clue what this issue may be related to? As I don't have any of the failing apps on Debian, I cannot reproduce your test results right away. 2 possible theories: 1. We are not integrating with ConsoleKit and/or logind properly. (Although it appears that our integration with logind is better, since Fedora 20 works better than CentOS 6.) 2. We have issues with the polcykit authentication windows not being permitted to show up. A 3rd possible theory: 3. PolicyKit policies are blocking certain actions from happening over any sort of remote session. PolicyKit refers to local sessions as Active and remote sessions as Inactive. It appears that the X11RDP project has run into this problem: http://scarygliders.net/2012/06/20/a-brief-guide-to-policykit/ http://scarygliders.net/category/policykit/ I stumbled over this the other day, when I was going through these polkit bugs, myself. We don't want X2Go sessions to be active=TRUE and neither do we want them to be local. Sessions are marked as active and local sessions if the user is really sitting in front of a machine. Those session will accept USB flashdrives when they are plugged into the workstation. We want that with local X.org sessions, but not in X2Go sessions. Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabr...@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb pgpW4ey_d8aBC.pgp Description: Digitale PGP-Signatur ___ x2go-dev mailing list x2go-dev@lists.x2go.org http://lists.x2go.org/listinfo/x2go-dev
[X2Go-Dev] Bug#459: Bug#459: PolicyKit authentication within apps often fails
On Wed, Aug 20, 2014 at 5:31 AM, Mike Gabriel mike.gabr...@das-netzwerkteam.de wrote: Hi Michael, On So 23 Mär 2014 17:25:58 CET, Michael DePaulo wrote: [...] I just fixed #458 by exporting $XAUTHORITY in x2goruncommand. Thank you :) Do you have any clue what this issue may be related to? As I don't have any of the failing apps on Debian, I cannot reproduce your test results right away. 2 possible theories: 1. We are not integrating with ConsoleKit and/or logind properly. (Although it appears that our integration with logind is better, since Fedora 20 works better than CentOS 6.) 2. We have issues with the polcykit authentication windows not being permitted to show up. I think that there is different behavior when using XDMCP. I'll double check after work. Also, Red Hat has some KB articles on this subject. I noticed them after I bought a RHEL subscription for home. I'll look over them again, and update this bug with any relevant info. Any hint, if this issues also occurs on Debian? I can test this with VMs. I've already created some Debian VMs for compatibility testing with X2Go. Which of the 3 releases (squeeze, wheezy and jessie) should I test? Squeeze is similar to CentOS 6 in terms of versions of packages like ConsoleKit. Mike [...] ___ x2go-dev mailing list x2go-dev@lists.x2go.org http://lists.x2go.org/listinfo/x2go-dev
