X2Go Bug report logs - #323
x2go server refuses client with 'Error: Wrong version or invalid session authentication cookie.'

Full log

Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 14 Oct 2013 04:34:14 +0000
From hjmangalam@gmail.com  Mon Oct 14 06:34:13 2013
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,HTML_MESSAGE
	autolearn=ham version=3.3.2
Received: from mail-pd0-f179.google.com (mail-pd0-f179.google.com [209.85.192.179])
	by ymir (Postfix) with ESMTPS id 115F55DA7B
	for <submit@bugs.x2go.org>; Mon, 14 Oct 2013 06:34:12 +0200 (CEST)
Received: by mail-pd0-f179.google.com with SMTP id v10so6914764pde.10
        for <submit@bugs.x2go.org>; Sun, 13 Oct 2013 21:34:11 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=1e100.net; s=20130820;
        h=from:to:subject:date:message-id:organization:user-agent
         :mime-version:content-type:content-transfer-encoding;
        bh=622jvuwCZ/5JQR/IFa37qqgDIDJwxDgevGPad2mYVpw=;
        b=c9+rmTMsPJ37XwSW0jPOgMugxrrkJCDY2JgAy8h1Ybb569O3yZc6mhvzVCyzqbqAYP
         zk3pKSI5UCQNH8mf1HATB4uKOCnrN0k57bY+748cdAdaxGm5v+60KrwZujoSMk7UuOoI
         3iNvZ77fBBI5O/GaxtchnpGBDGlgANlUMZcsZTdg2ksQ4c6KlzkIshtkTfMjK5j9x6Kj
         UiYmJKZoUJZrrvykVv5u8wBFEeyDEGCHubKUquUhORxtHRDFYjbl+ARXMuZhDMue3ced
         AIZibHUa5HjxH5q0n9smqVl8fKBeXNdpzlhNrN1vFYbKIF2OiEm6srxQ5ubJxGHowIwj
         bBMw==
X-Received: by 10.66.142.132 with SMTP id rw4mr36053676pab.6.1381725251146;
        Sun, 13 Oct 2013 21:34:11 -0700 (PDT)
Received: from stunted.localnet (ip68-109-196-185.oc.oc.cox.net. [68.109.196.185])
        by mx.google.com with ESMTPSA id va8sm75275379pbc.16.1969.12.31.16.00.00
        (version=TLSv1.1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
        Sun, 13 Oct 2013 21:34:10 -0700 (PDT)
From: harry mangalam <harry.mangalam@uci.edu>
To: submit@bugs.x2go.org
Subject: x2go server refuses client with 'Error: Wrong version or invalid session authentication cookie.'
Date: Sun, 13 Oct 2013 21:34:07 -0700
Message-ID: <3112399.Az4Yrmv0PE@stunted>
Organization: UC Irvine
User-Agent: KMail/4.8.5 (Linux/3.2.0-54-generic; KDE/4.8.5; x86_64; ; )
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="nextPart5693511.bkTg2ULVBd"
Content-Transfer-Encoding: 7Bit

[Message part 1 (text/plain, inline)]

Package: x2goserver
Version: 4.0.1 
x86_64, CentOS 6.4, kernel 2.6.32-358.18.1.el6.centos.plus.x86_64

(also x2go version 4.0.1.6 (self-compiled) on the same platform)

Problem:
After a server OS lockup and reboot, the previously working x2goserver would 
not allow client connections from Mac, Linux, Windows.  After re-installing 
x2gserver (x2goserver-4.0.1.6-1.1.x86_64) and x2goagent 
(x2goagent-3.5.0.20-4.1.x86_64), it refused to connect with the client-side 
message:

===
Session: Starting session at 'Fri Oct 11 18:11:36 2013'.
Info: Connecting to remote host 'localhost:31030'.
Info: Connection to remote proxy 'localhost:31030' established.
Error: The remote NX proxy closed the connection.
Error: Failure negotiating the session in stage '7'.
Error: Wrong version or invalid session authentication cookie.
Session: Terminating session at 'Fri Oct 11 18:11:37 2013'.
Session: Session terminated at 'Fri Oct 11 18:11:37 2013'.
===
(dont know if this is complete since the popup only lasts 2s.)
This error has been cited multiple times in various fora and lists, but no one 
seems to have been able to solve it.  

I can passwordlessly ssh to both servers just fine from other Linux clients. 

If I don't use the ssh keys, I can enter my password and the result is the 
same. 

The server seems to be initializing the session since if I try to log in 
multiple times, there are new sessions listed, but I'm not allowed to connect 
to them. I can only terminate or suspend them.  

Terminating them does appear to work since they are not listed on following 
sessions if I do.  

The problem does seem to be related to authentication or authorization; we use 
ldap-based auth on the server and it's working fine otherwise, except for 
x2go.

Thanks for your work!

harry

---
Harry Mangalam - Research Computing, OIT, Rm 225 MSTB, UC Irvine
[m/c 2225] / 92697 Google Voice Multiplexer: (949) 478-4487
415 South Circle View Dr, Irvine, CA, 92697 [shipping]
MSTB Lat/Long: (33.642025,-117.844414) (paste into Google Maps)
---

[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.