[FreeNX-kNX] Seamless / rootless session, allowing only certain application to start.

[Kopra, Tom (NSN - FI/Espoo)]

Ok, the ENABLE_ROOTLESS_MODE="1" is clear, thanks for the info. J

 

Basically I would appreciate any pointers on FreeNX versions in which
the nxacl is working and maybe how I can check if the nxacl is being
processed.

Maybe my version, even if it has nxacl but it does not seem to process
it. Do I need to enable it somewhere?

 

Also some example of how I can modify the session parameters, syntax
etc.

 

Thanks,

 

Tom

 

From: freenx-knx-bounces at kde.org [mailto:freenx-knx-bounces at kde.org] On
Behalf Of ext chris at ccburton.com
Sent: Wednesday, January 23, 2013 3:53 PM
To: User Support for FreeNX Server and kNX Client
Subject: Re: [FreeNX-kNX] Seamless / rootless session, allowing only
certain application to start.

 


freenx-knx-bounces at kde.org wrote on 23/01/2013 12:44:22:

> Hi and sorry if this has been asked before. 

I don't think it's been asked recently anyway . . . . 

> I am having trouble finding the needed information online anywhere. 

Yup, that's cos there's no documentation . . . 

> NX version: 
> NX> 1000 NXNODE - Version 3.2.0-74-SVN OS (GPL, using backend: 3.3.0) 
> I have a need to do two things. (in FreeNX or commercial NX server) 
> 1.      Force an application to be started on session start  with no
> desktop (this I have partly  got working by using the 
> NODE_AUTOSTART="/usr/bin/firefox" setting in node.cfg
> (Not without desktop showing however) it seems the 
> ENABLE_ROOTLESS_MODE="1" does not function as I had thought it would. 

It could more accurately be called:- 

         ENABLE_CLIENT_SELECTION_OF_ROOTLESS_MODE 

but it isn't . . . 

> 2.      Only allowing this application to be launched, all other NX 
> client configured commands should be overridden so that this one 
> application starts. 
> So in short, I want the user to be presented with a login 
> application when they are logged on through the NX server, also I 
> want the desktop to be hidden and not usable for the end user. 
> I have not found any working way to do this, some information I 
> found about nxacl that I could not get working in our FreeNX so far. 

Use nxacl to change/set the session parameters 
        rootless=1 
        application=whateveryouwant 

As I (almost) wrote above . . . 

The setting in node.conf 

        ENABLE_ROOTLESS_MODE="1" 
        (which is the default value) 

allows nxnode to accept the "rootless" parameter from 
the client if it is set to 1 
BUT 
it DOESN'T force it, so you need to use nxacl. 

Now 

what problems are you having with nxacl  ????? 


> I was also not able to do this in the Commercial NX server. 
> Has anyone tried something like this and got it working. 
> I would be grateful for any hints. 
> 
> Regards, 
> Tom

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20130123/69bfa5ae/attachment.html>