Hi there again,

2 issues with CUPS/X2GO printing...

1st issue:
==========
when mounting home directories via NFS (NFS3 with root_squash, NFS4 with any kind of Kerberos security feature) you cannot copy a file as superuser ,,root'' to a user's HOME (x2goprint is called via sudo(NOPASSWD) in the cups-x2go backend).

The logical error is in the last stanza of the x2goprint file... (quoted and marked below).

Maybe there is already a solution for this. If not, let me know and I propose a suggestion (and test it with krb5p security enabled servers).

<quote>
my $mounts=`sudo x2gopgwrapper getmounts $session`;
if( $mounts=~m/$spooldir/)
{

vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
move ("$printdir/$file", "$homedir/.x2go/C-$session/$file") or die "$!: Can't rename $file to $homedir/.x2go/C-$session/$file";
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

     chown $uid, $gid, "$homedir/.x2go/C-$session/$file";
     system ("su $user -c \"mv $homedir/.x2go/C-$session/$file $spooldir\"");

     open (RFILE,">$homedir/.x2go/C-$session/$file.ready");
     print RFILE "$file\n$title";
     close (RFILE);

     chown $uid, $gid, "$homedir/.x2go/C-$session/$file.ready";
system ("su $user -c \"mv $homedir/.x2go/C-$session/$file.ready $spooldir\"");
}
</quote>

2nd issue:
==========
There is als some inconsistency between cups-x2go and x2goprint:

cups-x2go:
----------
<quote src="/usr/lib/cups/backend/cups-x2go">
$tempFile = "$ENV{TMPDIR}/$jid-$uid-cupsjob$$";
</quote>

BUT: $TMPDIR is not set, that's why first instances of CUPS's spool jobs appear in the server's root directory "/".

Most important: by design $tempFile is a full path!!!

x2goprint:
----------
$tempFile is picked up in x2goprint as $file

<quote src="/usr/bin/x2goprint">
my ($user, $session, $file, $titleFile)=...@argv;
</quote>

However, in x2goprint $file is interpreted as a filename without path...

But maybe this problem als has been already addressed...

I also get loads of stray job files on my x2goserver, especially if the print mechanism is not working by some reason (e.g. broken reverse ssh, because i was not able to configure my client properly... ;-) )

Greets,
Mike



--

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

eMail-LeseSchreibStunde: wochentags 8h-10h
mail: [email protected], http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
_______________________________________________
X2go-dev mailing list
[email protected]
https://lists.berlios.de/mailman/listinfo/x2go-dev

Reply via email to