Control: tag -1 + moreinfo

Hi Cristian,

On  Mo 08 Dez 2014 09:38:30 CET, Cristian Falcas wrote:

Package: x2goserver
Version: 4.0.1.18

Due to the sanitizer from "/usr/lib64/x2go/x2gosqlitewrapper.pl",
domain users can't login. Usually a login id is in for
"domain\username" or "username@domain". Bot "\" and "@" are stripped
and the sub check_user fails.

Either allow at least "@" as a valid char to username, or make it
configurable and allow extra chars from a varible in the configuration
file.

We are currently trying to fix X2Go logons with AD accounts containing "\" in the username.

The concept for email based login, I propose, is:

  o allow "@" in usernames / session IDs
  o usernames are 48 chars long at maximum

For usernames with backslashes, to do things properly, we need a similar hack like Samba uses (replace the "\" by some other unique symbol. We have some places in the code that detect the username from the session name so the mapping between username and session ID (concerning the username part) should be bijective.

We have some hacks for backslashed username in the code (e.g. for fixing #664 [2]), but this actually needs a cleaner implementation.

Can you please check/test...

(1) How long are email-based logon names? Did they exceed 32 chars? This has been fixed just now for
      4.0.1.19 and has been fixed on the master branch for quite a while.
(2) Is the email-based logon used as username everywhere on the system (echo $LOGON, echo $USER,
      echo $HOME)?


(3) Does the patch provided here [1] fix your issue for backslashed usernames? (4) Is logon for backslashed users possible if you have x2goserver 4.1.0.0-preview (nightly builds)
      installed?

[1] http://code.x2go.org/gitweb?p=x2goserver.git;a=commitdiff;h=5c11f3c67f14db5f0e751f491017ab9f17c152d1
[2] http://bugs.x2go.org/664

Greets,
Mike

--

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: [email protected], http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

Attachment: pgpXBCg8igEFK.pgp
Description: Digitale PGP-Signatur

_______________________________________________
x2go-dev mailing list
[email protected]
http://lists.x2go.org/listinfo/x2go-dev

Reply via email to