The current Ubuntu repository version of xrdp (0.5.0-20100303cvs) appears to

work perfectly under Ubuntu 10.4 & 10.10 with the Gnome 2.x desktop.

Unfortunately, there appear to be multiple security layers working on the

sessions, such that most desktop features requiring admin rights either do not

appear, or disable the 'authenticate' dialog or the 'unlock' button, whichever

happens to be available. For example:

1. "Time and Date" appears to be blocked by a policy-kit rule with the message

"Not authorized to make changes". However, if run with gksudo, the dialog comes

up "unlocked".

2. "Users and Groups" fails to start the authenticate dialog when selecting the

"Add" button (no error message, just unresponsive). If started with gksudo, the

process hangs. 

3. "Login Screen" shows the "unlock" button, but is unresponsive. Same behavior

if started with gksudo.

4. "Ubuntu Tweak" when run on the console shows a full range of admin accessible

functions. When run on the xrdp remote window, a limited subset of 'tweaks' are

offered, and opening up the policy-kit config file (<allow_any>yes</allow_any>)

doesn't appear to affect the behavior. Opening with gksudo produces the same
 result.

I noted that the sesman.ini file contains an entry 'TerminalServerAdmins'

referencing a group 'tsadmins'. However, in the man page, this option is listed

as 'ignored'.

Questions:

1. What (if any) security related session attributes can (or does) xrdp

influence? 

2. Is this problem more likely a function of the vncserver?

Thanks in advance for any guidance. 



------------------------------------------------------------------------------
AppSumo Presents a FREE Video for the SourceForge Community by Eric 
Ries, the creator of the Lean Startup Methodology on "Lean Startup 
Secrets Revealed." This video shows you how to validate your ideas, 
optimize your ideas and identify your business strategy.
http://p.sf.net/sfu/appsumosfdev2dev
_______________________________________________
xrdp-devel mailing list
xrdp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/xrdp-devel

Reply via email to