.xsession-errors blowing up my home directory

[linuxgrrl]

hi,
I have a fully updated version of Karmic.
every few days, my .xsession-errors grows to such size that breaks my system.
Based on "tail", the error this time is:
05/04/2014 08:59:20 AM h1955969.stratoserver.net
05/04/2014 08:59:20 AM h1988238.stratoserver.net
05/04/2014 08:59:20 AM h1955969.stratoserver.net
05/04/2014 08:59:20 AM h1988238.stratoserver.net

but the last couple times, it was some other error (i forgot what), but googling these errors gives no pertinent results. Not even sure how to troubleshoot?

Help!
mary

[23dornot23d]

It may be time to go to a newer system ......

http://en.wikipedia.org/wiki/List_of_Ubuntu_releases#Ubuntu_9.10_.28Karmic_Koal a.29

Ubuntu 9.10 (Karmic Koala), released on 29 October 2009,[79] (http://en.wikipedia.org/wiki/List_of_Ubuntu_releases#cite_note-karmicReleased-79) was Canonical's 11th release of Ubuntu. It was supported until April 2011


Do you have a lot of room on you hard drive for another install alongside what you already have ......

Type df in a terminal - ( lowercase DF as below will show the space on the drive ) .....

df

which should show something similar to below ....



$ df -a
Filesystem 1K-blocks Used Available Use% Mounted on
rootfs 20787996 6608808 14179188 32% /
/dev/root 20787996 6608808 14179188 32% /
proc 0 0 0 - /proc
sysfs 0 0 0 - /sys
tmpfs 2097152 12776 2084376 1% /tmp
udev 20480 4 20476 1% /dev
tmpfs 2097152 72 2097080 1% /dev/shm
devpts 0 0 0 - /dev/pts
/dev/sda9 96120588 77167048 14070804 85% /media/sda9

[linuxgrrl]

OK, my bad, I now see I have Precise (LTS version)

mary@mythbox:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 12.04.4 LTS
Release: 12.04
Codename: precise

Here's ouput of -DF

Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda1 28857916 18805756 8586232 69% /
udev 1979604 4 1979600 1% /dev
tmpfs 404896 1180 403716 1% /run
none 5120 0 5120 0% /run/lock
none 2024472 10064 2014408 1% /run/shm
/dev/sda6 42275184 2424320 37703380 7% /home
/dev/sdb4 372409508 340933872 12558296 97% /media/mythvideo
/dev/sdb1 100790004 12899112 82770980 14% /media/music
/dev/sdb3 41326992 11306720 27920980 29% /media/photos
/dev/sdb2 100790036 15461692 80208432 17% /media/home_video

For any upgrade, I would want to keep all the /media completely untouched. Could I also keep my /home or should I back that up first?

[linuxgrrl]

More data on the most recent .xsession-errors. The only thing I've done this session is to browse to songza.com using google-chrome:


(gnome-settings-daemon:2730): libappindicator-CRITICAL **: app_indicator_set_label: assertion `IS_APP_INDICATOR (self)' failed

[steeldriver]

Do you have desktop sharing enabled? if so is your setup suitably firewalled? I have seen several cases of .xsession-errors blowups that have been due to rogue VNC authentication attempts



sudo lsof :5900

sudo netstat -nltp | grep ':59..'

[23dornot23d]

That is different 12.04 LTS
LTS .... Long term support (LTS) releases are for 5 years

Lets try to sort some of the problems .......

Which problems are stopping you doing things .... and what is actually not working ?

Ok will leave it there .... with Steeldriver ..... but 12.04 is good ......

[linuxgrrl]

yes, I enabled desktop sharing, and I do use it (my Ubuntu box is in the basement and i look at it from a mac often).
output of these commands:

mary@mythbox:~$ sudo lsof :5900
[sudo] password for mary:
lsof: WARNING: can't stat() fuse.gvfs-fuse-daemon file system /home/mary/.gvfs
Output information may be incomplete.
lsof: status error on :5900: No such file or directory
lsof 4.81
latest revision: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/
latest FAQ: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/FAQ
latest man page: ftp://lsof.itap.purdue.edu/pub/tools/unix/lsof/lsof_man
usage: [-?abhlnNoOPRtUvVX] [+|-c c] [+|-d s] [+D D] [+|-f[gG]]
[-F [f]] [-g [s]] [-i [i]] [+|-L [l]] [+m [m]] [+|-M] [-o [o]] [-p s]
[+|-r [t]] [-s [p:s]] [-S [t]] [-T [t]] [-u s] [+|-w] [-x [fl]] [--] [names]
Use the ``-h'' option to get more help information.


mary@mythbox:~$ sudo netstat -nltp | grep ':59..'
tcp 0 0 0.0.0.0:5900 0.0.0.0:* LISTEN 2781/vino-server
tcp 0 0 0.0.0.0:59844 0.0.0.0:* LISTEN -
tcp6 0 0 :::5900 :::* LISTEN 2781/vino-server

[linuxgrrl]

That is different 12.04 LTS
LTS .... Long term support (LTS) releases are for 5 years

Lets try to sort some of the problems .......

Which problems are stopping you doing things .... and what is actually not working ?

Ok will leave it there .... with Steeldriver ..... but 12.04 is good ......

My main problem is periodic random probs like this .xsession thing that break the system intermittently.

I wonder what would be the best distro for me? I use this box as a jukebox, music and photo server ... it powers whole-house audio and is also my desktop for home use.

With 2 kids and a new job, I need something that is very easy to maintain ... should I be choosing something that does updates on a rolling basis rather than have to rip/replace every few years?
I once upgraded from one LTS to another and it was pretty rough (even though I did it the "right" way and went one version at a time) ... took me days to get back to a working desktop.

[23dornot23d]

I found this - appears that its a bug .....
https://bugs.launchpad.net/ubuntu/+source/vino/+bug/1047679

I install alongside my other OS's ..... but 12.04 is good ...... usually .... and even though I run later versions
I keep going back to 12.04 .... ( so do not change and upgrade - but possibly put a system alongside it - that is if the problem persists ...... let me do a little searching and reading on this ..... maybe in that bug report there
is a solution or someone else knows a good fix ........ I will continue to watch the thread and also look for
more information ...... )

[steeldriver]

oops sorry I missed a '-i' from that lsof command


sudo lsof -i :5900

however that's not important since netstat has confirmed that you do have a VNC server listening (and not just on the localhost interface).

That *may* not be a problem as long as your computer is behind a home router and the router does not allow external traffic in. However if you can't confirm that then you really should consider closing the external interface and tunnelling the VNC connection over SSH.

First thing would be to try to confirm that really is the cause of the .xsession-errors - perhaps something like



grep -i 'vino' ~/.xsession-errors

[linuxgrrl]

oops sorry I missed a '-i' from that lsof command


sudo lsof -i :5900

however that's not important since netstat has confirmed that you do have a VNC server listening (and not just on the localhost interface).

That *may* not be a problem as long as your computer is behind a home router and the router does not allow external traffic in. However if you can't confirm that then you really should consider closing the external interface and tunnelling the VNC connection over SSH.

First thing would be to try to confirm that really is the cause of the .xsession-errors - perhaps something like



grep -i 'vino' ~/.xsession-errors


ding ding ding!


mary@mythbox:~$ grep -i 'vino' ./.xsession-errors
(vino-server:2781): EggSMClient-CRITICAL **: egg_sm_client_set_mode: assertion `global_client == NULL || global_client_mode == EGG_SM_CLIENT_MODE_DISABLED' failed
(vino-server:2781): LIBDBUSMENU-GLIB-WARNING **: Trying to remove a child that doesn't believe we're it's parent.
(vino-server:2781): LIBDBUSMENU-GLIB-WARNING **: Trying to remove a child that doesn't believe we're it's parent.
** (vino-server:2781): WARNING **: VNC authentication failure from '195-198-116-26.customer.telia.com'
** (vino-server:2781): WARNING **: Deferring authentication of 'hosted-by-kingrdp.com' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from 'hosted-by-kingrdp.com'
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
** (vino-server:2781): WARNING **: Deferring authentication of 'hosted-by-kingrdp.com' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from 'hosted-by-kingrdp.com'
** (vino-server:2781): WARNING **: Deferring authentication of 'hosted-by-kingrdp.com' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from 'hosted-by-kingrdp.com'
** (vino-server:2781): WARNING **: Deferring authentication of '195-198-116-26.customer.telia.com' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from '195-198-116-26.customer.telia.com'
** (vino-server:2781): WARNING **: Deferring authentication of 'hosted-by-kingrdp.com' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from 'hosted-by-kingrdp.com'
** (vino-server:2781): WARNING **: Deferring authentication of '93-58-5-5.ip156.fastwebnet.it' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from '93-58-5-5.ip156.fastwebnet.it'
** (vino-server:2781): WARNING **: Deferring authentication of 'new-host.home' for 5 seconds
** (vino-server:2781): WARNING **: VNC authentication failure from 'hosted-by-kingrdp.com'
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed
(vino-server:2781): GLib-CRITICAL **: the GVariant format string `(u)' has a type of `(u)' but the given value has a type of `()'
(vino-server:2781): GLib-CRITICAL **: g_variant_get: assertion `valid_format_string (format_string, TRUE, value)' failed

My PC is indeed behind a router supplied by my cable company, so I'm safe, right? Should I just turn off the logging of .xession errors?

[23dornot23d]

The results for solutions that I keep finding seems to just suppress the .xsession log by making it read only

http://askubuntu.com/questions/314723/why-is-the-xsession-errors-old-file-so-big

But if it can be stopped sorted then obviously a solution is better than just stopping the error reports .......

Seems its well known about - but I am not seeing a full and proper fix to it yet.

and another bug report that is linked to from the askubuntu link but with it triagged and some solutions
in it https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1000775

[linuxgrrl]

The results for solutions that I keep finding seems to just suppress the .xsession log by making it read only

http://askubuntu.com/questions/314723/why-is-the-xsession-errors-old-file-so-big

But if it can be stopped sorted then obviously a solution is better than just stopping the error reports .......

Seems its well known about - but I am not seeing a full and proper fix to it yet.

and another bug report that is linked to from the askubuntu link but with it triagged and some solutions
in it https://bugs.launchpad.net/ubuntu/+source/lightdm/+bug/1000775

thank you so very much! Just knowing it's a bug, and that I can turn off logging, is actually good news!

Two quick questions about installing another OS alongside:

1. can i use my RF keyboard to select which one boots? that used to be a showstopper for me (PC box is in a storage area)
2. what partition could I put it on (if any?)


sudo df
[sudo] password for mary:
Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda1 28857916 18826128 8565860 69% /
udev 1979604 4 1979600 1% /dev
tmpfs 404896 1184 403712 1% /run
none 5120 0 5120 0% /run/lock
none 2024472 10252 2014220 1% /run/shm
/dev/sda6 42275184 2460152 37667548 7% /home
/dev/sdb4 372409508 340933872 12558296 97% /media/mythvideo
/dev/sdb1 100790004 12899112 82770980 14% /media/music
/dev/sdb3 41326992 11306720 27920980 29% /media/photos
/dev/sdb2 100790036 15461692 80208432 17% /media/home_video

Every time I consider other OS, i remember all the incredibly kind helpful people on this forum and stop myself :)

[23dornot23d]

I always play safe with new installations and they always go onto an external USB drive ......

Before ever being allowed onto my main drive .....

Looking at your setup there - I would not want to risk anything - the sizes are too large to go shrinking
partitions to make room for another OS .... and each partition seems to have personal things on that
you would not want to lose .....

External hard drive is good for backups as well things like personal home-video - I would not just want one
copy on one drive ( drives can fail and I have had a few go on me in the past )

If you do get another drive - then the OS's that I prefer may not suit you as my main concern is 3d graphics.

But I always keep returning to Ubuntu ...... 14.04 is due out on the 17th of this month ....... if I was to
advise on any it would be that ... but only once its got into use and been tested a bit by the community.

Will always sit on a external USB ready to be upgraded though .... keeping your main OS running as it is now.

Best of luck with what ever you do ...... each system runs different - so my experience with 14.04 may not
be the same as other peoples ..... but IMHO ...... it feels good and professional ......

[steeldriver]

I really wouldn't recommend simply ignoring / truncating these errors - they're telling you that your system IS under attack (probably just port scanners finding and knocking on your open VNC port - however VNC passwords are NOT difficult to brute force).

Depending on your network configuration and requirements I'd suggest:


(MINIMUM) configure your router to reject external VNC traffic

OR


(MINIMUM) configure and enable UFW on the machine under attack (and any others you are running Desktop Sharing on) to only allow connections from specific IP addresses. If you only remote between machines on your home LAN then it could be as simple as something like 'ufw allow from 192.168.1.0/24 to any port 5900' (exact details will depend on your network)

OR


(BETTER) configure Desktop Sharing to only listen on the loopback interface, and then tunnel your VNC sessions over SSH


The last option is only really necessary if you don't have control over your router and / or need remote desktop access from outside your LAN (e.g. from work).

Hope this helps

[23dornot23d]

Must admit that the links were to show what others were doing to get over the problem of their drives filling up and stopping them in their tracks
as one woman said it brought her whole office workplace to a halt.



thank you so very much! Just knowing it's a bug, and that I can turn off logging, is actually good news!


It is a Bug and it needs fixing ......

? who knows if it is it fixed for the release of 14.04 ......

(the latest Bug report that I posted above - in the last comment in it - pointed to it still being a problem in 13.10.)

Not long to go to 14.04 .... still its a option as I said alongside what you have ( but the 2 drives you have need a backup really )
so a good sized external USB drive may still be a good answer - if they are easy to get where you are ......

Also just unplug when not needing that system .... they are easy to move from computer to computer too .......

I like them and not had one die on me yet ..... fingers crossed on that one ......

( only the two internal laptop drives have ever overheated and died ) again - just replaced these with external USB ssd hdd's quieter and need
no external power supply ......... 500 gig on mine as larger than these seem to be slower .......