#34 - Support for proxy server - X2Go Bug report logs

X2Go Bug report logs - #34
Support for proxy server

Reported by: "glpk xypron" <xypron.glpk@gmx.de>

Date: Fri, 21 Sep 2012 06:18:01 UTC

Severity: wishlist

Tags: pending

Done: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Bug is archived. No further changes may be made.

Received: (at 34) by bugs.x2go.org; 25 Sep 2012 08:14:44 +0000
From mike.gabriel@das-netzwerkteam.de  Tue Sep 25 10:14:44 2012
Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199])
	by ymir (Postfix) with ESMTPS id 82C9C5DB15
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98])
	by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 5BFB9AD4
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 4CE443BB75
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de
Received: from grimnir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id t86oL5q8BVdt for <34@bugs.x2go.org>;
	Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 2C76B3C003
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 146373BB75
	for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
	grimnir.das-netzwerkteam.de
X-Spam-Flag: NO
X-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00
	autolearn=ham version=3.3.1 running as userid=
X-Spam-Level: 
X-Spam-Bayes-Score: 0.0000
Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33)
	id C4B0A3C003; Tue, 25 Sep 2012 10:14:43 +0200 (CEST)
Received: from nocatv2.tng.de (nocatv2.tng.de [213.178.75.58]) by
 mail.das-netzwerkteam.de (Horde Framework) with HTTP; Tue, 25 Sep 2012
 10:14:43 +0200
Message-ID: <20120925101443.23885uk5uxopayur@mail.das-netzwerkteam.de>
X-Priority: 3 (Normal)
Date: Tue, 25 Sep 2012 10:14:43 +0200
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: 34@bugs.x2go.org
Subject: Re: [X2Go-Dev] Bug#34: SSH_OPTIONS_FD
References: <505CC771.20300@gmx.de>
 <handler.34.B34.13482576789462.ackinfo@bugs.x2go.org>
 <505D9F99.10808@gmx.de> <505DA7B4.3030909@informatik.uni-erlangen.de>
 <505F6DDB.1070304@gmx.de> <5060251D.90202@informatik.uni-erlangen.de>
 <20120924132602.316510@gmx.net>
 <50607239.5090308@informatik.uni-erlangen.de> <5060CF1E.20700@gmx.de>
 <5060EA24.7070600@obviously-nice.de> <20120925030819.309160@gmx.net>
In-Reply-To: <20120925030819.309160@gmx.net>
MIME-Version: 1.0
Content-Type: multipart/signed;
 boundary="=_5ri38fzej4kz";
 protocol="application/pgp-signature";
 micalg="pgp-sha1"
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)

[Message part 1 (text/plain, inline)]

Hi Guys, On Di 25 Sep 2012 05:08:19 CEST glpk xypron wrote: > Dear Oleksandr, > >> And one more thing, as I understood, this code work only with recent >> version of libssh. We should think, how can we make it available for >> distributions like squeeze. Such distributions should be also supported >> by X2Go Client. > I have sent a bug report to Debian to include the missing patch. > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688700 > >> I have a one notice. In your case HTTP protocol is used for proxy. It is >> mean, that user name and password will be transmitted unencrypted. It >> can follow to security issues. Can you think about HTTPS support? This >> should be not very difficult, as Qt already supports SSL. You can check >> code of HttpBrockerClient class in X2Go Client, which can use HTTPS >> connections. > > QNetworkProxy relies on QAuthenticator. > > QAuthenticator supports the following authentication methods: > - Basic > - NTLM version 2 > - Digest-MD5 > > Which one is used depends on the setup of the proxy server. Squid > has plugin for NTLM. > > NTLM and Digest-MD5 should be acceptable inside a private network. > > After the connection is established all further traffic will be SSH > encrypted. > > I am not aware of proxies being contacted over https. > > An interesting feature might be QNetworkProxy::DefaultProxy which > can use the system settings to determine the proxy server. > > Best regards > > Heinrich Schuchardt Can you think of a way to utilize WPAD for proxy detection. Many systems I know use the WPAD protocol to roll out proxy settings over the network: http://de.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol Just in case Qt knows about it... Mike -- DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

[Message part 2 (application/pgp-signature, inline)]

X2Go Developers <owner@bugs.x2go.org>. Last modified: Tue May 21 10:32:32 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #34 Support for proxy server

X2Go Bug report logs - #34
Support for proxy server