X2Go Bug report logs - #1202
kex error : no match for method mac algo client->server: server [hmac-sha2-256,hmac-sha2-512], client [hmac-sha1]

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: "J. M. van Bilsen" <jbilsen@xs4all.nl>

Date: Wed, 30 Aug 2017 19:20:02 UTC

Severity: normal

Found in version 4.0.5.1-1

Full log

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 30 Aug 2017 19:16:34 +0000
From jbilsen@xs4all.nl  Wed Aug 30 21:16:30 2017
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=3.0 tests=BAYES_50 autolearn=ham
	autolearn_force=no version=3.4.1
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id 41AA65DACF
	for <submit@bugs.x2go.org>; Wed, 30 Aug 2017 21:16:30 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id d3qPH_hoxrMz for <submit@bugs.x2go.org>;
	Wed, 30 Aug 2017 21:16:25 +0200 (CEST)
X-Greylist: delayed 424 seconds by postgrey-1.35 at ymir.das-netzwerkteam.de; Wed, 30 Aug 2017 21:16:25 CEST
Received: from lb1-smtp-cloud7.xs4all.net (lb1-smtp-cloud7.xs4all.net [194.109.24.24])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 38A9A5DA8C
	for <submit@bugs.x2go.org>; Wed, 30 Aug 2017 21:16:25 +0200 (CEST)
Received: from [192.168.16.133] ([88.159.38.100])
	by smtp-cloud7.xs4all.net with ESMTPA
	id n8MZdUpFUAr7rn8Mbd0h6A; Wed, 30 Aug 2017 21:09:21 +0200
Message-ID: <1504120159.19175.0.camel@xs4all.nl>
Subject: kex error : no match for method mac algo client->server: server
 [hmac-sha2-256,hmac-sha2-512], client [hmac-sha1]
From: "J. M. van Bilsen" <jbilsen@xs4all.nl>
To: submit@bugs.x2go.org
Cc: jbilsen@xs4all.nl
Date: Wed, 30 Aug 2017 21:09:19 +0200
Content-Type: text/plain; charset="UTF-8"
X-Mailer: Evolution 3.18.5.2-0ubuntu3.2 
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
X-CMAE-Envelope: MS4wfKmY8lRwfJe7OqQAWpMQjholUGFdSUfAKh1izpTYObusppmSfP3RhbOdKKYLjjnS45lrxIZ3ZzBup66wQi1D47YiPgdIV2w/11+xveXb3VrLT6tNPZyG
 ULLcU51+RUn4g+2USyOe6ajfaAyvo1nucwGHaVGm+gSJviN8Yamg3rc4EDyfFMtENf08+QQteHYPYuyTdWZ/jQLxe0R9Fz1t2y0=

Package: x2goclient 
Version: 4.0.5.1-1

Complete system info :

 $ which x2goclient
/usr/bin/x2goclient
    
 $ cat /etc/lsb-release 
DISTRIB_ID=LinuxMint
DISTRIB_RELEASE=18.1
DISTRIB_CODENAME=serena
DISTRIB_DESCRIPTION="Linux Mint 18.1 Serena"

 $ dpkg --list | grep x2goclient
ii  x2goclient                                                  4.0.5.1
-1                                    amd64        X2Go Client
application (Qt4)

WARNING my assumption is this problem will be on all x2goclient
programs. 

After change of the security settings on sshd we cannot connect using
x2go.
Using portforwarding ssh -L 9999:localhost:22 someremotehost then
letting x2goclient connect to localhost port 9999 works.

Settings in sshd_config

MACs hmac-sha2-256,hmac-sha2-512

When connecting we get error message :

kex error : no match for method mac algo client->server: server [hmac-
sha2-256,hmac-sha2-512], client [hmac-sha1]

My assumption is client is configured using hmac-sha1 as default

Problem does not surface using ssh or ssh port forwarding.

Problem can be easy reproduced using raspberry with mathe and MACs
hmac-sha2-256,hmac-sha2-512 in sshd_config

Problem surface also with different ssh proxy servers having the MACs
setting. As stated before normal connection on ssh or using port
forwarding no problem.

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 16:21:05 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.