Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

team please reply,



From: Jyoti Kumar 
Sent: Monday, July 27, 2020 18:05
To: x2go-user@lists.x2go.org 
Subject: Re: x2go Broker GUI selection issue [command = ]

Thanks Stefan.
I am able to use pageant.exe for key based login.
I have few doubts , please clear

1- Is screen sharing possible in x2go session, If I want to share my screen to 
other x2go user through broker ? He will login with my id and password.

2- one to one Desktop Access ?  If multiple session are added in brokers 
profile list, it shows to every user who log in broker server with ssh user.

___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

Thanks Stefan.
I am able to use pageant.exe for key based login.
I have few doubts , please clear

1- Is screen sharing possible in x2go session, If I want to share my screen to 
other x2go user through broker ? He will login with my id and password.

2- one to one Desktop Access ?  If multiple session are added in brokers 
profile list, it shows to every user who log in broker server with ssh user.



Regards Jyoti Kumar
Mobile: +919953437397
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

C:\Program Files (x86)\x2goclient\x2goclient.exe"  
--broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker 
--broker-ssh-key=privateKey.ppk

___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Stefan Baur]

Am 18.07.20 um 12:52 schrieb Jyoti Kumar:
> But when I login with x2go client using below url it is asking  "Enter 
> passphrase to decrypt a key"
> I copied the privateKey.ppk into  " C:\Program Files (x86)\x2goclient"  
> directory and pageant.exe already exist there.
> 
> C:\Program Files (x86)\x2goclient\x2goclient.exe"  
> --broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker 
> --broker-key=privateKey.ppk
> 
> 
> what I am missing ?

Like I said, X2GoClient can only use OpenSSH keys - not PEM, and neither
PPK.
To use a PPK file, you need to load it into pageant first, and pageant
will take over authentication, so you don't specify the key as a
x2goclient --something parameter.
Instead, you use --broker-autologin.

Kind Regards,
Stefan Baur

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

I tried to login broker server with ssh key (privateKey.ppk),  before  I 
converted "id_rsa" private key  with Putty Style such as .ppk  using puttyGen

I am able to login with Putty andwinscp using the privateKey.ppk .


But when I login with x2go client using below url it is asking  "Enter 
passphrase to decrypt a key"
I copied the privateKey.ppk into  " C:\Program Files (x86)\x2goclient"  
directory and pageant.exe already exist there.

C:\Program Files (x86)\x2goclient\x2goclient.exe"  
--broker-url=ssh://jyoti@192.168.0.19:/usr/bin/x2gobroker 
--broker-key=privateKey.ppk


what I am missing ?


Regards Jyoti Kumar
Mobile: +919953437397
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Stefan Baur]

Am 16.07.20 um 18:22 schrieb Jyoti Kumar:
>  Now I want to login broker server  through ssh .pem key,  how to do that ?   
> I am using x2go client in Windows 7.

You don't. ;)

X2GoClient on Windows can read OpenSSH Private Key files, and it can
work with pageant.exe, which in turn can read PuTTY-style SSH Private
Key files.


> If I share user id and password of broker server to anyone, he can login 
> through Putty or any Terminal  via " ssh 192.168.0.19 "  as well as through 
> x2go client.  It seems risky .
> 
> How to secure it  ?
> Is there a way to disable putty or terminal access of ssh and allow only  
> through x2go client.

X2Go is not a security mechanism, X2Go is a remote desktop/remote
application tool.  You need to use the standard Linux security
mechanisms to lock down your system.  However, I would guess it's near
impossible to lock it down in a way that login via SSH to a shell is
blocked, but X2Go still works.

If you want to increase security against people that are not supposed to
be using your server, that can be done with 2FA (either SSH keyfiles, or
various OTP methods).  But blocking a legitimate user from running the
shell, while still allowing X2Go ... no.

A longer explanation why this won't work, and why this is the wrong way
to solve your issue, can be found in this bug report from a while ago:


-Stefan


-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

Thank you Stefan.

I am able to login Broker server using ssh userid and password   from below 
command.

--broker-url=ssh://192.168.0.19:/usr/bin/x2gobroker

 Now I want to login broker server  through ssh .pem key,  how to do that ?   I 
am using x2go client in Windows 7.

If I share user id and password of broker server to anyone, he can login 
through Putty or any Terminal  via " ssh 192.168.0.19 "  as well as through 
x2go client.  It seems risky .

How to secure it  ?
Is there a way to disable putty or terminal access of ssh and allow only  
through x2go client.


Regards Jyoti Kumar
Mobile: +919953437397
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Stefan Baur]

Am 15.07.20 um 14:39 schrieb Jyoti Kumar:
> But I want to login with ssh key , how to do that ? I tried 
> --broker-url=ssh://1192.168.0.19:22/plain/   but it was giving error  
> "bash:/plain/: No sucjh file or directroy."
> 
> Should I need to make some changes in /etc/x2go/x2gobroker.conf  ?  if yes , 
> what changes.

No.  Your URL is wrong.

When using ssh, you need to specify the file system path to the broker
executable as part of the URL, and separated from the server name/IP
using a colon:

--broker-url=ssh://your-server-here:/usr/bin/x2gobroker-ssh

Also, 1192.something is not a valid IP, you might want to double-check
that.  You probably meant 192.something?

Kind Regards,
Stefan Baur

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

I  installed xfce Desktop Environment, now able to access from Direct session 
as well through  Broker.

I was using session broker through http,   
--broker-url=http://1192.168.0.19:8080/plain/  and able to login using userid 
and password.

But I want to login with ssh key , how to do that ? I tried 
--broker-url=ssh://1192.168.0.19:22/plain/   but it was giving error  
"bash:/plain/: No sucjh file or directroy."

Should I need to make some changes in /etc/x2go/x2gobroker.conf  ?  if yes , 
what changes.


Below are the x2go broker  packages installed on Ubuntu 20.04LTS

root@ubuntu:~# dpkg -l | grep x2go
ii  python3-x2gobroker 0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (Python3 modules)
ii  x2gobroker 0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (executable)
ii  x2gobroker-authservice 0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (PAM authentication service)
ii  x2gobroker-common  0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (common files)
ii  x2gobroker-daemon  0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (standalone daemon)
ii  x2gobroker-wsgi0.0.4.3-0~1003~ubuntu20.04.1 
  all  X2Go Session Broker (WSGI)
root@ubuntu:~#



Regards Jyoti Kumar
Mobile: +919953437397

___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Stefan Baur]

Am 14.07.20 um 12:31 schrieb Jyoti Kumar:
> when I make direct connection without Broker using windows x2go client,  same 
>  issue happen ( Black screen ).
> I selected session type as GNOME, KDE, UNITY one by one but getting black 
> screen .

Please see 

Kind Regards,
Stefan Baur

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

when I make direct connection without Broker using windows x2go client,  same  
issue happen ( Black screen ).
I selected session type as GNOME, KDE, UNITY one by one but getting black 
screen .



Do you use x2gobroker-session-autologin like in your last message?

  *   No I am not using this option "x2gobroker-session-autologin"


Regards Jyoti Kumar
Mobile: +919953437397
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

Re: [X2Go-User] x2go Broker GUI selection issue [command = ]

[Martin Lange]

Hi,
A connection to a local Desktop is a complete other procedure - the
Desktop session is already running.Please try a direct connection with
a new session and without the broker. Does this work?Do you use
x2gobroker-session-autologin like in your last message?
Regards,Martin
Am Montag, den 13.07.2020, 13:26 + schrieb Jyoti Kumar:
> I am having  GUI selection issue, when I select  command =GNOME/KDE
> or Unity  under  in configuration of Broker server  in 
> /etc/x2go/broker/x2gobroker-sessionprofiles.conf .  it is now
> working. 
> 
> Only a Blackscreen come . While without session broker I select
> "Connection to local Desktop "  it works.
> 
> 
> 
> 
> 
> I am using Ubuntu 16.04 LTS for x2go server  and below are the logs
> of that .
> 
> 
> 
> 
> 
> 
> 
> 
> 
> ==> auth.log <==
> 
> 
> Jul 13 06:04:11 ubuntu sshd[20761]: Did not receive identification
> string from 192.168.0.19
> 
> 
> 
> Jul 13 06:04:11 ubuntu sshd[20762]: Accepted password for jyoti from
> 192.168.0.12 port 51482 ssh2
> 
> 
> 
> Jul 13 06:04:11 ubuntu sshd[20762]: pam_unix(sshd:session): session
> opened for user jyoti by (uid=0)
> 
> 
> 
> Jul 13 06:04:11 ubuntu systemd-logind[831]: New session 11 of user
> jyoti.
> 
> 
> 
> 
> 
> 
> 
> ==> lastlog <==
> 
> 
> 
> 
> 
> 
> 
> ==> syslog <==
> 
> 
> 
> Jul 13 06:04:11 ubuntu systemd[1]: Started Session 11 of user jyoti.
> 
> 
> 
> 
> 
> 
> 
> ==> wtmp <==
> 
> 
> 
> Qpts/23s/23jyoti192.168.0.12�[
> 
> 
> 
> �� _��
> 
> 
> 
>  Qpts/23�[
> 
> 
> 
>_ʆ
> 
> 
> 
> ==> syslog <==
> 
> 
> 
> Jul 13 06:04:17 ubuntu /usr/bin/x2gostartagent: successfully started
> X2Go Agent session with ID jyoti-54-1594645454_stDGNOME_dp32
> 
> 
> 
> Jul 13 06:04:22 ubuntu /usr/bin/x2gomountdirs[21049]: successfully
> mounted TOM@127.0.0.1:38317/cygdrive/C/Users/TOM/X2GO~1/S-
> 4962~1/spool to /tmp/.x2go-jyoti/spool/C-jyoti-54-
> 1594645454_stDGNOME_dp32
> 
> 
> 
> Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: launching session
> with Xsession-x2go mechanism, using STARTUP="/usr/bin/gnome-session
> --session=gnome-flashback-metacity --disable-acceleration-check"
> 
> 
> 
> Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: dbus wrapper
> available as /usr/bin/dbus-run-session
> 
> 
> 
> 
> 
> 
> 
> ==> auth.log <==
> 
> 
> 
> Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The Secret Service
> was already initialized
> 
> 
> 
> Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The PKCS#11
> component was already initialized
> 
> 
> 
> 
> 
> 
> 
> ==> syslog <==
> 
> 
> 
> Jul 13 06:04:24 ubuntu org.ayatana.bamf[21288]: bamfdaemon
> start/running, process 21337
> 
> 
> 
> Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: ** (process:21364):
> WARNING **: Failed to register client:
> GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name
> org.gnome.SessionManager was not provided by any .service files
> 
> 
> 
> Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Activating service
> name='org.a11y.atspi.Registry'
> 
> 
> 
> Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Successfully activated
> service 'org.a11y.atspi.Registry'
> 
> 
> 
> Jul 13 06:04:25 ubuntu org.a11y.atspi.Registry[21369]: SpiRegistry
> daemon is running with well-known name - org.a11y.atspi.Registry
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Regards Jyoti Kumar
> Mobile: +919953437397
> 
> 
> 
> 
> 
> 
> 
> ___x2go-user mailing 
> listx2go-u...@lists.x2go.org
> https://lists.x2go.org/listinfo/x2go-user
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user

[X2Go-User] x2go Broker GUI selection issue [command = ]

[Jyoti Kumar]

I am having  GUI selection issue, when I select  command =GNOME/KDE or Unity  
under  in configuration of Broker server  in  
/etc/x2go/broker/x2gobroker-sessionprofiles.conf .  it is now working.
Only a Blackscreen come . While without session broker I select "Connection to 
local Desktop "  it works.

I am using Ubuntu 16.04 LTS for x2go server  and below are the logs of that .


==> auth.log <==
Jul 13 06:04:11 ubuntu sshd[20761]: Did not receive identification string from 
192.168.0.19
Jul 13 06:04:11 ubuntu sshd[20762]: Accepted password for jyoti from 
192.168.0.12 port 51482 ssh2
Jul 13 06:04:11 ubuntu sshd[20762]: pam_unix(sshd:session): session opened for 
user jyoti by (uid=0)
Jul 13 06:04:11 ubuntu systemd-logind[831]: New session 11 of user jyoti.

==> lastlog <==

==> syslog <==
Jul 13 06:04:11 ubuntu systemd[1]: Started Session 11 of user jyoti.

==> wtmp <==
Qpts/23s/23jyoti192.168.0.12�[
�� _��
 Qpts/23�[
   _ʆ
==> syslog <==
Jul 13 06:04:17 ubuntu /usr/bin/x2gostartagent: successfully started X2Go Agent 
session with ID jyoti-54-1594645454_stDGNOME_dp32
Jul 13 06:04:22 ubuntu /usr/bin/x2gomountdirs[21049]: successfully mounted 
TOM@127.0.0.1:38317/cygdrive/C/Users/TOM/X2GO~1/S-4962~1/spool to 
/tmp/.x2go-jyoti/spool/C-jyoti-54-1594645454_stDGNOME_dp32
Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: launching session with 
Xsession-x2go mechanism, using STARTUP="/usr/bin/gnome-session 
--session=gnome-flashback-metacity --disable-acceleration-check"
Jul 13 06:04:23 ubuntu /usr/bin/x2goruncommand: dbus wrapper available as 
/usr/bin/dbus-run-session

==> auth.log <==
Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The Secret Service was 
already initialized
Jul 13 06:04:24 ubuntu gnome-keyring-daemon[1873]: The PKCS#11 component was 
already initialized

==> syslog <==
Jul 13 06:04:24 ubuntu org.ayatana.bamf[21288]: bamfdaemon start/running, 
process 21337
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: ** (process:21364): WARNING **: 
Failed to register client: 
GDBus.Error:org.freedesktop.DBus.Error.ServiceUnknown: The name 
org.gnome.SessionManager was not provided by any .service files
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Activating service 
name='org.a11y.atspi.Registry'
Jul 13 06:04:25 ubuntu org.a11y.Bus[21288]: Successfully activated service 
'org.a11y.atspi.Registry'
Jul 13 06:04:25 ubuntu org.a11y.atspi.Registry[21369]: SpiRegistry daemon is 
running with well-known name - org.a11y.atspi.Registry


Regards Jyoti Kumar
Mobile: +919953437397
___
x2go-user mailing list
x2go-user@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-user