X2Go Bug report logs - #1477
x2goclient doesn't prompt for password after authentication failure if server is using google-authenticator

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: Toby <anothercoffee@googlemail.com>

Date: Mon, 8 Jun 2020 17:00:03 UTC

Severity: normal

Found in version 4.1.2.2

Full log


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 8 Jun 2020 16:59:34 +0000
From anothercoffee@googlemail.com  Mon Jun  8 18:59:18 2020
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.7 required=3.0 tests=BAYES_50,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,SPF_HELO_NONE,URIBL_BLOCKED
	autolearn=ham autolearn_force=no version=3.4.2
Received: from mail-io1-xd2c.google.com (mail-io1-xd2c.google.com [IPv6:2607:f8b0:4864:20::d2c])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id C0E2E5DAE7
	for <submit@bugs.x2go.org>; Mon,  8 Jun 2020 18:59:15 +0200 (CEST)
Received: by mail-io1-xd2c.google.com with SMTP id p20so19411574iop.11
        for <submit@bugs.x2go.org>; Mon, 08 Jun 2020 09:59:15 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=googlemail.com; s=20161025;
        h=mime-version:from:date:message-id:subject:to;
        bh=7YoP7FdH0R+5HbqAlMV9s2xSXmmTGV2BsbsreVsIMhI=;
        b=lvN2CMcNaudY+ZXSqIoIMUaN3f1V9P8TDJ/f/1J/p1vS/XSiqV5JTrx4SNkvYN/apT
         AZp48ciFYC2yFUHkzTXgbBrAllFwXWBbvLUTNnUgXTj2CFSEQBTshIw87MvPy2/nzk6r
         EQGvltlYdeH+6cvLVf3YKufQVJFsA//8ZjEaXaQMzbS0kTE/YMV8m3Qc87Y1sQ444UbK
         MuIiH4ErNEKyXSm6aHWRl5ElLtWLuonJNEvA7gO22ISoXbk9VWF8L+I97nJk6hIviOUg
         jVAlimHw84aIj8YxKP/mN4U5zNyiburAU4PbC+o4uVpRmIpk5cp+u8aFH9LNPap6cBJo
         TEgw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20161025;
        h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
        bh=7YoP7FdH0R+5HbqAlMV9s2xSXmmTGV2BsbsreVsIMhI=;
        b=lQ01Yi4VO/asp6T/Iy9/w0GP8U/A51bk2Jk9D+EA8PwIe6dGT2Ai259x/3UW/GSWhE
         NAaO34vbLFGOPNuOmeauOSbmlrB2HpcjFdUFob/jOFFCmrDj3xdVLZdgEdN0hEecMif+
         sEXT+TQLVzuioDbyGp1kJJPK8WHAzIXy+y2SahRt3WqqGj3/QKUK8ka43tWP5UtXrYTo
         8dWCi9LpZyzwkDOZ6u02ivXxQpqg8sRmd6S4sQ9RId1SUelv0xr+T/QwlH3uPRsriH3M
         o8hq6fO5x42tnO6RU5NZ+VZeEgU6Opx8vGYUcGIpUOtlSJrrnMAkMEizhBE/lFUU12/H
         KT+g==
X-Gm-Message-State: AOAM532b1cB/DN8y5iXyXIMS9K72/vRNvk/fBrYwM/B2vGORnGZX0JJC
	usch9AsDExJJkCS0qNhY1/j+eeWUsysNRVsJRFoDOHHe3y0=
X-Google-Smtp-Source: ABdhPJw75OC+iwrExvDLnFibQGwOaCSlIeyTDvKGhAMq6iI11z2D78KzXXVX64SDi+o/LOeFazqiwB0SgCeu02viuzQ=
X-Received: by 2002:a6b:d617:: with SMTP id w23mr22681594ioa.188.1591635553228;
 Mon, 08 Jun 2020 09:59:13 -0700 (PDT)
MIME-Version: 1.0
From: Toby <anothercoffee@googlemail.com>
Date: Mon, 8 Jun 2020 17:58:47 +0100
Message-ID: <CAEScUDhCg3j4W_5v0w=B5AbrwQ34Yoj3qBdtDpY+=iukTkS4-A@mail.gmail.com>
Subject: x2goclient doesn't prompt for password after authentication failure
 if server is using google-authenticator
To: submit@bugs.x2go.org
Content-Type: text/plain; charset="UTF-8"
Package: x2goclient
Version: 4.1.2.2

I have installed Google Authenticator on my x2go server, and use
keyboard-interactive for ssh passwords. If I mistype my password in
x2goclient, it won't offer me another password prompt, but repeatedly
asks for the Verification code until sshd on the server gets bored and
closes the connection.

Expected behaviour: if the login is not successful, prompt for both
password and verification code again.

x2goserver: Scientific Linux 7.7 - 3.10.0-1062.12.1.el7.x86_64
x2goclient: Fedora 32 - 5.6.14-300.fc32.x86_64

Cheers
Toby


Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Apr 22 14:49:27 2021; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.