<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
    <title></title>
  </head>
  <body bgcolor="#ffffff" text="#000000">
    On 18/01/11 06:29, Christian Nygaard wrote:
    <blockquote
      cite="mid:AANLkTimcGO+FOvzG1=ETKKDq83RpP7RxmKYNd9hOaPvD@mail.gmail.com"
      type="cite">The recommended way is to run Thinlinc without
      Apparmor although less secure it is more compatible.
      <div>I've run into problems running for example evince with
        Apparmor on.</div>
    </blockquote>
    <br>
    Thanks again, Christian!<br>
    <br>
    I turned off apparmor using /etc/init.d/apparmor teardown and
    restarted the vsmserver.<br>
    As soon as I succesfully connect via thinlinc from a Ubuntu 10.10
    desktop to the thinlinc server running Ubuntu 10.04 LTS desktop in a
    VMware virtual machine, I get:<br>
    <br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 13:58:57 srv205 sshd[2379]: Accepted password for guest from
    172.27.26.15 port 50306 ssh2<br>
    Jan 18 13:58:57 srv205 sshd[2379]: pam_unix(sshd:session): session
    opened for user guest by (uid=0)<br>
    <br>
    ==&gt; vsmserver.log &lt;==<br>
    2011-01-18 13:58:57 INFO vsmserver.session: User with uid 1001
    (guest) requested a new session<br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 13:58:58 srv205 sshd[2379]: pam_unix(sshd:session): session
    closed for user guest<br>
    Jan 18 13:58:58 srv205 sshd[2495]: Accepted password for guest from
    172.27.26.15 port 50308 ssh2<br>
    Jan 18 13:58:58 srv205 sshd[2495]: pam_unix(sshd:session): session
    opened for user guest by (uid=0)<br>
    <br>
    ==&gt; vsmserver.log &lt;==<br>
    2011-01-18 13:58:58 INFO vsmserver: VSM Agent 127.0.0.1 successfully
    created a new session for guest<br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 14:01:15 srv205 sshd[2617]: last message repeated 16 times<br>
    Jan 18 14:01:15 srv205 sshd[2939]: Accepted publickey for root from
    172.27.26.15 port 50379 ssh2<br>
    Jan 18 14:01:15 srv205 sshd[2939]: pam_unix(sshd:session): session
    opened for user root by (uid=0)<br>
    Jan 18 14:01:18 srv205 sshd[2617]: channel 11: open failed: connect
    failed: Connection refused<br>
    Jan 18 14:02:19 srv205 sshd[2617]: last message repeated 25 times<br>
    <br>
    ==&gt; syslog &lt;==<br>
    Jan 18 13:59:31 srv205 kernel: [ 2074.089514] RPC: Registered udp
    transport module.<br>
    Jan 18 13:59:31 srv205 kernel: [ 2074.089516] RPC: Registered tcp
    transport module.<br>
    Jan 18 13:59:31 srv205 kernel: [ 2074.089518] RPC: Registered tcp
    NFSv4.1 backchannel transport module.<br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 13:59:32 srv205 sshd[2617]: channel 11: open failed: connect
    failed: Connection refused<br>
    <br>
    ==&gt; syslog &lt;==<br>
    Jan 18 13:59:32 srv205 gnome-session[2691]: WARNING: Unable to
    determine session: Unable to lookup session information for process
    '2691'<br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 14:00:01 srv205 sshd[2617]: last message repeated 11 times<br>
    Jan 18 14:00:01 srv205 CRON[2855]: pam_unix(cron:session): session
    opened for user root by (uid=0)<br>
    Jan 18 14:00:01 srv205 CRON[2855]: pam_unix(cron:session): session
    closed for user root<br>
    <br>
    ==&gt; syslog &lt;==<br>
    Jan 18 14:00:01 srv205 CRON[2856]: (root) CMD
    (/opt/thinlinc/sbin/tl-collect-licensestats)<br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 14:00:03 srv205 sshd[2617]: channel 11: open failed: connect
    failed: Connection refused<br>
    <br>
    ==&gt; syslog &lt;==<br>
    Jan 18 14:00:12 srv205 NetworkManager: &lt;info&gt;&nbsp; Unmanaged
    Device found; state CONNECTED forced. (see
    <a class="moz-txt-link-freetext" href="http://bugs.launchpad.net/bugs/191889">http://bugs.launchpad.net/bugs/191889</a>)<br>
    <br>
    ==&gt; auth.log &lt;==<br>
    Jan 18 14:00:34 srv205 sshd[2617]: last message repeated 14 times<br>
    <br>
    ==&gt; syslog &lt;==<br>
    Jan 18 14:00:12 srv205 NetworkManager: &lt;info&gt;&nbsp; Unmanaged
    Device found; state CONNECTED forced. (see
    <a class="moz-txt-link-freetext" href="http://bugs.launchpad.net/bugs/191889">http://bugs.launchpad.net/bugs/191889</a>)<br>
    Jan 18 14:00:35 srv205 AptDaemon: INFO: Initializing daemon<br>
    <br>
    <br>
    <br>
    ==&gt; vsmserver.log &lt;==<br>
    2011-01-18 13:25:24 INFO vsmserver.license: License summary: 10
    concurrent users. Hard limit of 11 concurrent users. <br>
    2011-01-18 13:25:24 INFO vsmserver.session: Loaded 0 sessions for 0
    users from file<br>
    2011-01-18 13:57:31 INFO vsmserver: Got SIGTERM, signaling process
    to quit<br>
    2011-01-18 13:57:31 INFO vsmserver: Terminating. Have a nice day!<br>
    2011-01-18 13:57:33 INFO vsmserver: VSM Server version 3.1.2 build
    2751 started<br>
    2011-01-18 13:57:33 INFO vsmserver.license: Updating license data
    from disk to memory<br>
    2011-01-18 13:57:33 INFO vsmserver.license: License summary: 10
    concurrent users. Hard limit of 11 concurrent users. <br>
    2011-01-18 13:57:33 INFO vsmserver.session: Loaded 0 sessions for 0
    users from file<br>
    2011-01-18 13:58:57 INFO vsmserver.session: User with uid 1001
    (guest) requested a new session<br>
    2011-01-18 13:58:58 INFO vsmserver: VSM Agent 127.0.0.1 successfully
    created a new session for guest<br>
    <br>
    Any ideas where the<br>
    <br>
    channel 11: open failed: connect failed: Connection refused<br>
    <br>
    comes from every two seconds?<br>
    <br>
    Regards,<br>
    heinz<br>
    <br>
    <br>
    <br>
    <blockquote
      cite="mid:AANLkTimcGO+FOvzG1=ETKKDq83RpP7RxmKYNd9hOaPvD@mail.gmail.com"
      type="cite">
      <div><br>
      </div>
      <div>Kind regards,</div>
      <div>
        Christian<br>
        <br>
        <div class="gmail_quote">2011/1/17 h zerbes <span dir="ltr">&lt;<a
              moz-do-not-send="true" href="mailto:heze54@gmail.com">heze54@gmail.com</a>&gt;</span><br>
          <blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt
            0.8ex; border-left: 1px solid rgb(204, 204, 204);
            padding-left: 1ex;">
            <div bgcolor="#ffffff" text="#000000"> Hello Christian,<br>
              <br>
              I guess I left an important bit out in my mail: I can
              successfully connect from the thinclient to the server and
              get the X11 display back, no problem.<br>
              <br>
              tl-setup initially gave some warnings which I wrote down,
              then installed:<br>
              <br>
              <br>
              lsb-graphics-ia32<br>
              pyhton-ldap<br>
              apache2<br>
              <br>
              for webmin:<br>
              perl5 <br>
              libnet-ssleay-perl libauthen-pam-perl libio-pty-perl
              apt-show-versions libapt-pkg-perl <br>
              download webmin.deb and install<br>
              <br>
              and then run the thinlinc installer again. This time no
              error msg.<br>
              <br>
              Hmm, apparmor is news to me, although I've been working
              with Linux for more than 20 years! Wow... But it is
              loaded:<br>
              <br>
              root@srv205:/var/log# apparmor_status <br>
              apparmor module is loaded.<br>
              10 profiles are loaded.<br>
              10 profiles are in enforce mode.<br>
              &nbsp;&nbsp; /sbin/dhclient3<br>
              &nbsp;&nbsp; /usr/bin/evince<br>
              &nbsp;&nbsp; /usr/bin/evince-previewer<br>
              &nbsp;&nbsp; /usr/bin/evince-thumbnailer<br>
              &nbsp;&nbsp; /usr/lib/NetworkManager/nm-dhcp-client.action<br>
              &nbsp;&nbsp; /usr/lib/connman/scripts/dhclient-script<br>
              &nbsp;&nbsp; /usr/lib/cups/backend/cups-pdf<br>
              &nbsp;&nbsp; /usr/sbin/cupsd<br>
              &nbsp;&nbsp; /usr/sbin/tcpdump<br>
              &nbsp;&nbsp; /usr/share/gdm/guest-session/Xsession<br>
              0 profiles are in complain mode.<br>
              1 processes have profiles defined.<br>
              1 processes are in enforce mode :<br>
              &nbsp;&nbsp; /usr/sbin/cupsd (7998) <br>
              0 processes are in complain mode.<br>
              0 processes are unconfined but have a profile defined.<br>
              <br>
              <br>
              And ssh is allowed. <br>
              <br>
              Sorry for the confusion, thinlinc client works, but I was
              checking /var/log/syslog to see if something complains
              when I noticed those error msgs. <br>
              <br>
              Any suggestions?<br>
              <br>
              Thanks,<br>
              heinz
              <div>
                <div class="h5"><br>
                  <br>
                  <br>
                  <br>
                  On 17/01/11 21:39, Christian Nygaard wrote:
                  <blockquote type="cite">
                    <div>Hi!</div>
                    <div><br>
                    </div>
                    <div>Did the tl-setup succeed?</div>
                    Have you tried manual ssh from the thinclient to the
                    vsmagent?<br>
                    Is Apparmor disabled?
                    <div>
                      <div>Is iptables allowing ssh?</div>
                      <div><br>
                      </div>
                      <div>Kind regards,</div>
                      <div>Christian<br>
                        <div><br>
                          <div class="gmail_quote">2011/1/17 h zerbes <span
                              dir="ltr">&lt;<a moz-do-not-send="true"
                                href="mailto:heze54@gmail.com"
                                target="_blank">heze54@gmail.com</a>&gt;</span><br>
                            <blockquote class="gmail_quote"
                              style="margin: 0pt 0pt 0pt 0.8ex;
                              border-left: 1px solid rgb(204, 204, 204);
                              padding-left: 1ex;"> Hello,<br>
                              <br>
                              after installing
                              thinlinc-3.1.2-servercd.iso on a patched
                              Ubuntu 10.04 running<br>
                              in an ESXi VM, I get tons of msgs in
                              syslog:<br>
                              <br>
                              Jan 16 23:32:57 srv205 sshd[27296]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:32:59 srv205 sshd[28291]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:33:00 srv205 sshd[28291]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:33:02 srv205 sshd[27296]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:33:02 srv205 sshd[27296]:
                              channel 12: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:33:04 srv205 sshd[28291]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              Jan 16 23:33:05 srv205 sshd[28291]:
                              channel 11: open failed: connect failed:<br>
                              Connection refused<br>
                              <br>
                              <br>
                              while connected with the thinlinc client
                              (from a different Ubuntu 10.10 desktop).<br>
                              <br>
                              Any ideas how to find out what channels 11
                              and 12 mean? There are no other TCP<br>
                              packets going between the two hosts than
                              ssh.<br>
                              <br>
                              TIA,<br>
                              henry<br>
                              <br>
                              <br>
                              <br>
_______________________________________________<br>
                              Thinlinc-technical mailing list<br>
                              <a moz-do-not-send="true"
                                href="mailto:Thinlinc-technical@lists.cendio.se"
                                target="_blank">Thinlinc-technical@lists.cendio.se</a><br>
                              <a moz-do-not-send="true"
                                href="http://lists.cendio.se/mailman/listinfo/thinlinc-technical"
                                target="_blank">http://lists.cendio.se/mailman/listinfo/thinlinc-technical</a><br>
                            </blockquote>
                          </div>
                          <br>
                          <br>
                        </div>
                      </div>
                    </div>
                  </blockquote>
                  <br>
                </div>
              </div>
            </div>
          </blockquote>
        </div>
        <br>
        <br clear="all">
        <br>
        -- <br>
        &nbsp;Christian Nygaard, Sysadmin Room:&nbsp;&nbsp; 1:4115<br>
        &nbsp;Department of Mathematics, <br>
        &nbsp;Uppsala University. <br>
        &nbsp;Phone:&nbsp; +46&nbsp; (0)18 - 471 32 77<br>
        &nbsp;Mobile: +46 (0)704 - 91 50 22<br>
        <br>
      </div>
    </blockquote>
    <br>
  </body>
</html>