X2Go Bug report logs - #1323
SSH proxy connection doesn't work for tunnel only accounts

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: Arcadie Cracan <acracan@gmail.com>

Date: Tue, 21 Aug 2018 13:45:02 UTC

Severity: normal

Found in version 4.1.2.1

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1323; Package x2goclient. (Tue, 21 Aug 2018 13:45:02 GMT) (full text, mbox, link).


Acknowledgement sent to Arcadie Cracan <acracan@gmail.com>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Tue, 21 Aug 2018 13:45:02 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: Arcadie Cracan <acracan@gmail.com>
To: submit@bugs.x2go.org
Subject: SSH proxy connection doesn't work for tunnel only accounts
Date: Tue, 21 Aug 2018 16:38:24 +0300
[Message part 1 (text/plain, inline)]
Package: x2goclient
Version: 4.1.2.1
Tag: patch

I use a ssh proxy server that allows only tunnel connections (i.e. doesn't 
allow the users to use the shell). After upgrading from Ubuntu 16.04 to 
18.04 x2goclient stopped working with my ssh proxy server.

I believe the reason for this is the call to the "checkLogin()" function 
even for ssh proxy connections (which in my opinion is not necessary).

I attach a patch that makes x2goclient skip the checkLogin() call (as it 
does for kerberos connections) for the ssh proxy connection.

Thank you for considering this patch.

Kind regards,
   Arcadie Cracan
[0001-Skip-checkLogin-for-ssh-proxy-connection.patch (text/x-patch, attachment)]

Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1323; Package x2goclient. (Tue, 03 Mar 2020 10:00:02 GMT) (full text, mbox, link).


Acknowledgement sent to Pajula Juha <Juha.Pajula@vtt.fi>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Tue, 03 Mar 2020 10:00:02 GMT) (full text, mbox, link).


Message #10 received at 1323@bugs.x2go.org (full text, mbox, reply):

From: Pajula Juha <Juha.Pajula@vtt.fi>
To: "1323@bugs.x2go.org" <1323@bugs.x2go.org>
Subject: Re: SSH proxy connection doesn't work for tunnel only accounts
Date: Tue, 3 Mar 2020 09:57:56 +0000
[Message part 1 (text/plain, inline)]
On Tue, 21 Aug 2018 16:38:24 +0300 Arcadie Cracan <acracan@gmail.com<mailto:acracan@gmail.com>> wrote:

> Package: x2goclient

> Version: 4.1.2.1

> Tag: patch

>

> I use a ssh proxy server that allows only tunnel connections (i.e. doesn't

> allow the users to use the shell). After upgrading from Ubuntu 16.04 to

> 18.04 x2goclient stopped working with my ssh proxy server.

>

> I believe the reason for this is the call to the "checkLogin()" function

> even for ssh proxy connections (which in my opinion is not necessary).

>

> I attach a patch that makes x2goclient skip the checkLogin() call (as it

> does for kerberos connections) for the ssh proxy connection.

>

> Thank you for considering this patch.

>

> Kind regards,

>    Arcadie Cracan



I can confirm that the bug exists still on latest version 4.1.2.2-2020.02.13.



It prevents using newer versions of X2GO (4.1.x) with Bastion host type of ssh proxies where proxy account is jailed to use only ssh (no shell is allowed).



The connections work fine with version 4.0.5.2-2016.09.20, but not newer.



This is clearly visible on debug messages with latest version:

x2go-DEBUG-../src/sshmasterconnection.cpp:943> state: 1



x2go-DEBUG-../src/sshmasterconnection.cpp:676> Setting SSH directory to C:/xxxxxxx

x2go-DEBUG-../src/sshmasterconnection.cpp:1324> Trying to authenticate user with private key.

x2go-DEBUG-../src/sshmasterconnection.cpp:1507> Authenticating with key: 0



x2go-DEBUG-../src/sshmasterconnection.cpp:687> User authentication OK.

x2go-DEBUG-../src/sshmasterconnection.cpp:1708> LOGIN CHECK:"This account is currently not available.

"

x2go-DEBUG-../src/sshmasterconnection.cpp:1744> LOOP FINISHED

x2go-DEBUG-../src/sshmasterconnection.cpp:1754> Reconnect session

x2go-DEBUG-../src/sshmasterconnection.cpp:707> Login Check - Failed

x2go-DEBUG-../src/onmainwindow.cpp:3051> SSH Session prompt:"This account is currently not available.

"

x2go-DEBUG-../src/onmainwindow.cpp:3054> SSH Session interaction

x2go-DEBUG-../src/sshmasterconnection.cpp:437> SSH proxy interaction finished





Regards,

-Juha Pajula
[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Sun Dec 4 07:33:06 2022; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.