X2Go Bug report logs -
#1258
x2goclient hangs when connecting with Kerberos auth
Reported by: Mike DePaulo <mikedep333@gmail.com>
Date: Mon, 19 Feb 2018 04:30:02 UTC
Severity: normal
Tags: pending
Found in version 4.1.1.0
Fixed in version 4.1.1.2
Done: X2Go Release Manager X2Go Release Manager <git-admin@x2go.org>
Bug is archived. No further changes may be made.
Full log
🔗
View this message in rfc822 format
[Message part 1 (text/plain, inline)]
This is an automatic notification regarding your Bug report
which was filed against the x2goclient package:
#1258: x2goclient hangs when connecting with Kerberos auth
It has been closed by Mike DePaulo Mike DePaulo <mikedep333@gmail.com>.
Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mike DePaulo Mike DePaulo <mikedep333@gmail.com> by
replying to this email.
--
X2Go Bug Tracking System
Contact owner@bugs.x2go.org with problems
[Message part 2 (message/rfc822, inline)]
close #1258
thanks
Hello,
we are very hopeful that X2Go issue #1258 reported by you
has been resolved in the new release (4.1.1.1) of the
X2Go source project »src:x2goclient«.
You can view the complete changelog entry of src:x2goclient (4.1.1.1)
below, and you can use the following link to view all the code changes
between this and the last release of src:x2goclient.
http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=b4421bf6fc16d46e68dde8a0b9d48252804a30f1;hp=d8f5e5a4a51724ef3620e7f347644338e2449444
If you feel that the issue has not been resolved satisfyingly, feel
free to reopen this bug report or submit a follow-up report with
further observations described based on the new released version
of src:x2goclient.
Thanks a lot for contributing to X2Go!!!
light+love
X2Go Git Admin (on behalf of the sender of this mail)
---
X2Go Component: src:x2goclient
Version: 4.1.1.1-2018.03.01
Status: RELEASE
Date: Wed, 28 Feb 2018 20:53:41 -0500
Fixes: 1258
Changes:
x2goclient (4.1.1.1-2018.03.01) RELEASED; urgency=medium
.
[ Mike DePaulo ]
* New upstream version (4.1.1.1-2018.03.01):
- src/sshmasterconnection.cpp: Do not attempt to perform Interaction with
SSH Server (e.g. for changing expired password) when using
GSSAPI/Kerberos because the interaction code does not support it yet.
Fixes: #1258
- Windows: Update PuTTY from 0.68 to 0.70, which fixes PuTTY vulns
vuln-indirect-dll-hijack-2 & vuln-indirect-dll-hijack-3.
Note that x2goclient was only ever affected if the permissions on the
installation folder were changed to give users write access, or if
x2goclient was copied/extracted to a folder where users could write.
[Message part 3 (message/rfc822, inline)]
Package: x2goclient
Version: 4.1.1.0
When attempting to connect to an X2Go server with GSSAPI/Kerberos
auth, x2goclient hangs indefinitely.
This was observed with nightly builds for Windows, and was assumed to
be Windows-specific.
The fix has already been committed to master. I will update master
with another commit (& change to debian/changelog) stating that this
was fixed:
commit 7cbd8d525309edb8bd05d27ec57ac72e2d8c90e8
Author: Mike DePaulo <mikedep333@gmail.com>
Date: Sun Feb 18 19:52:22 2018 -0500
Do not attempt to perform Interaction with SSH Server
(e.g. for changing expired password) when using GSSAPI/Kerberos
because the interaction code does not support it yet.
But as I was fixing it, I noticed that Linux & Mac OS X are probably
affected too.
The cause of the issue is that the new Interaction Dialog feature
introduced by this commit contains libssh-specific function calls, but
we use PuTTY binaries on Windows & the OpenSSH ssh client binary on
Linux/MacOS for GSSAPI/Kerberos:
commit 68bbf328132125eaad5c53b0ac82490bf818e42e
Author: Oleksandr Shneyder <o.shneyder@phoca-gmbh.de>
Date: Wed May 10 15:22:11 2017 +0200
Interaction with SSH server (for example for changing expired
password). Fixes: #592.
And the "fix" for this is to bypass that new feature when
GSSAPI/Kerberos auth is used.
I will open up a separate issue about the fact that the Interaction
Dialog feature does not work with GSSAPI/Kerberos.
-Mike
Send a report that this bug log contains spam.
X2Go Developers <owner@bugs.x2go.org>.
Last modified:
Fri Dec 6 11:34:56 2024;
Machine Name:
ymir.das-netzwerkteam.de
X2Go Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.