Bug 1451518 - Xorg.wrap default "allowed_users=console" causes XRDP to fail, suggest changing to "anybody"
Summary: Xorg.wrap default "allowed_users=console" causes XRDP to fail, suggest changi...
Keywords:
Status: CLOSED EOL
Alias: None
Product: Fedora
Classification: Fedora
Component: xorg-x11-server
Version: 33
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: X/OpenGL Maintenance List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-05-16 22:18 UTC by Charles Butterfield
Modified: 2021-11-30 17:59 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-11-30 17:59:26 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Charles Butterfield 2017-05-16 22:18:29 UTC
Description of problem: The default Xorg (via Xorg.wrap) setting of "allowed_users=console" seems overly restrictive.

Requiring the user to be CURRENTLY logged into the console seems odd (and counter productive).  Surely this must affect any software that wants to create a virtual framebuffer using Xorg software.  In particular, to make XRDP work (with Xorg) requires the user to know enough to manually change to "allowed_users = anybody".

Is there a really compelling reason for the default?  If so, is the reason sufficiently compelling that XRDP users should avoid Xorg sessions and use Xvnc sessions instead (which do work by default)?

Version-Release number of selected component (if applicable):
xorg-x11-server-Xorg-1.19.3-1.fc25.x86_64

Comment 1 Fedora End Of Life 2017-11-16 19:51:49 UTC
This message is a reminder that Fedora 25 is nearing its end of life.
Approximately 4 (four) weeks from now Fedora will stop maintaining
and issuing updates for Fedora 25. It is Fedora's policy to close all
bug reports from releases that are no longer maintained. At that time
this bug will be closed as EOL if it remains open with a Fedora  'version'
of '25'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version'
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not
able to fix it before Fedora 25 is end of life. If you would still like
to see this bug fixed and are able to reproduce it against a later version
of Fedora, you are encouraged  change the 'version' to a later Fedora
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's
lifetime, sometimes those efforts are overtaken by events. Often a
more recent Fedora release includes newer upstream software that fixes
bugs or makes them obsolete.

Comment 2 Fedora End Of Life 2017-12-12 10:54:24 UTC
Fedora 25 changed to end-of-life (EOL) status on 2017-12-12. Fedora 25 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 3 Charles Butterfield 2018-07-08 01:31:46 UTC
Just installed F28 Mate Spin - problem still there.

Comment 4 Charles Butterfield 2019-01-12 23:05:46 UTC
Still a problem in Fedora-29

Comment 5 Charles Butterfield 2019-01-12 23:17:19 UTC
Knock knock.  Anybody there? I'm puzzled that there is no comment of any sort from the maintainers since the ticket was filed in Spring of 2017. Is this bug report filed for the wrong group? Some feedback would be helpful.

Comment 6 Charles Butterfield 2019-01-13 14:11:51 UTC
OOPS, never mind.  My bad.  This problem WAS fixed a while ago.  I was updating 3 OTHER XRDP related bugs that are still outstanding in F29 and I mistakenly made the same edit to this ticket.  My apologies.  Thanks for the good work./etc/X11/Xwrapper.config

Comment 7 Charles Butterfield 2019-01-13 15:09:33 UTC
OOPS.  My previous comment 6 was in error.  Sadly, the default behaviour has NOT been changed.  What I though was an xorg provided  /etc/X11/Xwrapper.config was merely a file I had created as a workaround long ago.

ISSUE RESTATED
The current default used by Xorg.wrap prevents XRDP from creating a VIRTUAL framebuffer UNLESS the SAME user is ALSO currently logged into the physical console (which is quite unlikely).  So to make XRDP work (and perhaps other similar technologies based on X/Xorg) the user must know how to create a subtle config file, instead of things "just working".

CANDIDATE FIXES (any would seem to fix the RDP problem)
1) Don't perform this check when creating a VIRTUAL framebuffer
2) Change the default behavior to allowed_users=anybody
3) Change the default behavior to check for whether the user is ALLOWED to login to the console (rather than requiring them to BE logged in).
4) Have the various RDP groups each deliver an /etc/X11/Xwrapper.config that changes the behavior (sadly for both VIRTUAL and PHYSICAL framebuffers).

Anyway, some feedback would be appreciated.  Perhaps I'm overlooking something totally obvious.

Comment 8 Charles Butterfield 2019-01-13 15:22:08 UTC
As an aside, the "Xvnc" session type supported by XRDP does not have this limitation.  It seems to be purely the "Xorg" session type.

Comment 9 Ben Cotton 2019-10-31 20:10:58 UTC
This message is a reminder that Fedora 29 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 29 on 2019-11-26.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '29'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 29 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 10 Ben Cotton 2019-11-27 20:40:09 UTC
Fedora 29 changed to end-of-life (EOL) status on 2019-11-26. Fedora 29 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 11 Charles Butterfield 2021-02-14 18:26:27 UTC
Updated version from 29 to 33, same default/problem as F29

Comment 12 Ben Cotton 2021-11-04 16:05:36 UTC
This message is a reminder that Fedora 33 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora 33 on 2021-11-30.
It is Fedora's policy to close all bug reports from releases that are no longer
maintained. At that time this bug will be closed as EOL if it remains open with a
Fedora 'version' of '33'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version.

Thank you for reporting this issue and we are sorry that we were not 
able to fix it before Fedora 33 is end of life. If you would still like 
to see this bug fixed and are able to reproduce it against a later version 
of Fedora, you are encouraged  change the 'version' to a later Fedora 
version prior this bug is closed as described in the policy above.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events. Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

Comment 13 Ben Cotton 2021-11-30 17:59:26 UTC
Fedora 33 changed to end-of-life (EOL) status on 2021-11-30. Fedora 33 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.


Note You need to log in before you can comment on or make changes to this bug.