User Tools

Site Tools


doc:howto:x2gobroker

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
doc:howto:x2gobroker [2017/02/10 19:49]
stefanbaur
doc:howto:x2gobroker [2017/02/13 15:26]
stefanbaur [x2gobroker1.x2go.example.com]
Line 233: Line 233:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 490: Line 490:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 706: Line 706:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 897: Line 897:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 927: Line 925:
 x2gobroker-authservice \ x2gobroker-authservice \
 x2gobroker-daemon \ x2gobroker-daemon \
 +x2gobroker-loadchecker \
 x2gobroker-ssh x2gobroker-ssh
  
Line 955: Line 954:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 994: Line 993:
  sed -i -e '/^command=SHADOW/aacl-groups-deny=ALL' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\  sed -i -e '/^command=SHADOW/aacl-groups-deny=ALL' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\
  sed -i -e '/^command=SHADOW/aacl-groups-allow=group-shadow' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\  sed -i -e '/^command=SHADOW/aacl-groups-allow=group-shadow' /target/etc/x2go/broker/x2gobroker-sessionprofiles.conf ;\
 + echo "COMMENT: These patches fix bugs that are still present in the current stable release" ;\
 + sed -i -e 's/if pam.pam:/if hasattr(pam, "pam"):/' /target/usr/sbin/x2gobroker-authservice /target/usr/lib/python2.7/dist-packages/x2gobroker/authmechs/pam_authmech.py ;\
 + sed -i -e "s/'hostname'/'hostaddr'/" /target/usr/sbin/x2gobroker-testagent ;\
 + echo "COMMENT: This enables the HTTP Session Broker for SystemD and SysVinit systems" ;\
 + sed -i '/#DAEMON_BIND_ADDRESS=127.0.0.1:8080/aDAEMON_BIND_ADDRESS=*:8080' /target/etc/default/x2gobroker-daemon /target/etc/x2go/broker/defaults.conf ;\
  echo "COMMENT: This patches rc.local so the following set of commands is run" ;\  echo "COMMENT: This patches rc.local so the following set of commands is run" ;\
  echo "COMMENT: exactly *once* - at the first boot after installation." ;\  echo "COMMENT: exactly *once* - at the first boot after installation." ;\
Line 1185: Line 1189:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 1248: Line 1250:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 1470: Line 1472:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries 
-run these gpg commands to download it: +#d-i apt-setup/local0/key string http://packages.x2go.org/pub.key 
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
  
 # Task and Package Selection # Task and Package Selection
Line 1533: Line 1533:
  echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\   echo "COMMENT: This is so LDAP users are added to local groups when logging in to a remote system." ;\ 
  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\  echo -e "auth\trequired\tpam_group.so\tuse_first_pass" >>/target/etc/pam.d/common-auth ;\
- echo "common-auth;*;*;A10000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\+ echo "*;*;*;Al0000-2400;users,x2gousers,x2gobroker-users" >>/target/etc/security/group.conf ;\
  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\  echo "COMMENT: This makes sure error messages during bootup remain on screen." ;\
  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\  sed -i -e '/^1/ s/getty/getty --noclear/' /target/etc/inittab ;\
Line 1724: Line 1724:
 # sources.list line will be left commented out # sources.list line will be left commented out
  
-CHANGE THIS - you need to download this keyfile onto your web server +When this key doesn't work any more, switch entries
-# run these gpg commands to download it: +
-# gpg --keyserver keys.gnupg.net --recv-keys E1F958385BFE2B6E +
-# gpg -a --export E1F958385BFE2B6E > x2go.key.gpg +
-#d-i apt-setup/local0/key string http://192.168.0.224/x2go.key.gpg+
 #d-i apt-setup/local0/key string http://packages.x2go.org/pub.key #d-i apt-setup/local0/key string http://packages.x2go.org/pub.key
 d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key d-i apt-setup/local0/key string http://packages.x2go.org/debian-old-pub.key
Line 1798: Line 1794:
  echo 'Type=Application' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\  echo 'Type=Application' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\
  echo 'Categories=Internet' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\  echo 'Categories=Internet' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\
- echo 'Exec=x2goclient --broker-url=ssh://x2gobroker1.x2go.example.com:/usr/bin/x2gobroker --add-to-known-hosts' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\+ echo 'Exec=x2goclient --broker-url=ssh://x2gobroker1.x2go.example.com:/usr/bin/x2gobroker-ssh --add-to-known-hosts' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\
  echo 'Name=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\  echo 'Name=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\
  echo 'GenericName=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\  echo 'GenericName=X2GoClient in Broker Mode' >>/target/home/localuser/Desktop/x2goclient-broker.desktop ;\
doc/howto/x2gobroker.txt · Last modified: 2017/02/28 09:21 by stefanbaur