xpra icon
Bug tracker and wiki

This bug tracker and wiki are being discontinued
please use https://github.com/Xpra-org/xpra instead.


Changes between Initial Version and Version 1 of Ticket #2933


Ignore:
Timestamp:
11/13/20 13:10:50 (5 months ago)
Author:
Antoine Martin
Comment:

global capabilities

Using global is a bad idea. Instead, the code should be modified to pass capabilities to the authentication module.

Please attach a patch or point to your changes when they are ready.

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #2933

    • Property Owner changed from Antoine Martin to louis-mulder
  • Ticket #2933 – Description

    initial v1  
    11Hi All,
    22
    3 I am running the xpra proxy server as an Kubernetes ingress server. Therefor I merged the pam_auth.py and exec_auth.py to a new module pamexec_auth.py and placed it in the Xpra tree. The following is done by this module first a normal validation with PAM and when this is a succesfull login it starts a script to create or re-connect a running Xpra pod with a predefined session. The script must return a string with the following form "testuser2|NA|545400003|545400003|tcp:192.168.81.136:14500|||" like the SQlite module. The script needs some information from the  client side. (argv) In de server_core module there is a def process_hello (XXXX) place before the line 'capabilities = packet[1]' the line 'global capabilities'. The module pamexec is then able to import capabilities and update the display with tcp:<ip-addres>.
    4 In the upcoming days when I have some time I will upload scripts etc. to https://github.com/louis-mulder/Xpra-VDI-Netes
     3I am running the xpra proxy server as an Kubernetes ingress server. Therefor I merged the `pam_auth.py` and `exec_auth.py` to a new module `pamexec_auth.py` and placed it in the Xpra tree. The following is done by this module first a normal validation with PAM and when this is a successful login it starts a script to create or re-connect a running Xpra pod with a predefined session. The script must return a string with the following form
     4{{{
     5testuser2|NA|545400003|545400003|tcp:192.168.81.136:14500|||
     6}}}
     7like the SQlite module. The script needs some information from the  client side. (argv) In the `server_core` module there is a `def process_hello (XXXX)` place before the line `capabilities = packet[1]` the line `global capabilities`. The module `pamexec` is then able to import capabilities and update the display with `tcp:<ip-addres>`.
     8In the upcoming days when I have some time I will upload scripts etc. to [https://github.com/louis-mulder/Xpra-VDI-Netes]
    59
    610Kindly regards Louis