[FreeNX-kNX] Force new NX Session without getting the Session Chooser

[Florian Schmidt]

Hi,


sorry for the late reply (business was a little bit stressy)

>On Tue, 24 Nov 2009 10:30:10 +0100

>Florian Schmidt <fschmidt at gmx.at> wrote:



>> Hi,

>>

>> I am interested in forcing a new session for a user by just changing

>> the session file. So even when a user has connected and working

>> sessions I want to create a session file to force a new session

>> without getting the session chooser (where you than also can reconnect

>> old sessions)

>>





>Florian, do you mean to never give users a persistent session (not being
able to suspend/resume) and always give them a new session - even if they
have one running?


We wan't to give users nonpersistent sessions from outside but want to give
them on the same range of machines also persistent Sessions from the inside
(which than can also be reconnected by using the nonpersistent session and
nxclient from the outside. (this is a complicated topic but some security
regulations force us to work this way)


USER -> nxclient -> firewall -> NXserver (nonpersistent) - > nxclient ->
NXserver (persistent)


allways by using the same credentials.


Currently we plan to split this scenario to have server with nonpersistent
sessions from where you can connect to the "normal" servers to the (maybe
allready running) persistent connections. For some smaller sites it would be
more interesting to have this persistent and nonpersistent (by using the
same accounts) on one box.



>If this is what you want, you can achieve this by setting in the node.conf
file on the server (typically found here: /etc/nxserver/node.conf):

>DISABLE_PERSISTENT_SESSION="all"

>(you can change "all" to a group of users, or a list of users if you want
it only to be enforced for some users.)


I know but this would disable it for the sessions coming from the inside too
:(



>When your users log out, it will take about 30 secs until they're session
is killed/removed.



>> I checked the source of nxserver but I haven't found anything there to

>> allow such a behavior. Does anyone knows if this is possible or of

>> this could be patched in the source and if so maybe even how?

>>



>I would take a look into what the node.conf file provides of settings and
possibilities, I think this is possible to achieve (look at the Quickstart
guide to FreeNX, or FAQ, >for explaination for the settings/directives).

>Also look at 'nxacl' tool which gives another set of admin control of the
users and their sessions. You can find more information about it at the FAQ
(look at the bottom of >this mail).



>//Terje


Cheers,

Florian
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20091204/7590cb2b/attachment.html>