From unknown Tue May 19 02:13:54 2026 X-Loop: git-admin@x2go.org Subject: Bug#34: SSH_OPTIONS_FD Reply-To: Mike Gabriel , 34@bugs.x2go.org Resent-From: Mike Gabriel Resent-To: x2go-dev@lists.berlios.de Resent-CC: X2Go Developers X-Loop: git-admin@x2go.org Resent-Date: Di, 25 Sep 2012 09:33:02 +0000 Resent-Message-ID: Resent-Sender: git-admin@x2go.org X-X2Go-PR-Message: followup 34 X-X2Go-PR-Package: x2goclient X-X2Go-PR-Keywords: Received: via spool by 34-submit@bugs.x2go.org id=B34.13485648853928 (code B ref 34); Di, 25 Sep 2012 09:33:02 +0000 Received: (at 34) by bugs.x2go.org; 25 Sep 2012 09:21:25 +0000 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 35EC55DB15 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:25 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 0EF159BE for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:25 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 08E013BD2B for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:25 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iNZGmKxWLUrr for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:24 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id E0E723C007 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:24 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id C9A723BD2B for <34@bugs.x2go.org>; Tue, 25 Sep 2012 11:21:24 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on grimnir.das-netzwerkteam.de X-Spam-Flag: NO X-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.1 running as userid= X-Spam-Level: X-Spam-Bayes-Score: 0.0000 Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id 1233C3C007; Tue, 25 Sep 2012 11:21:23 +0200 (CEST) Received: from 194.242.20.98 ([194.242.20.98]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Tue, 25 Sep 2012 11:21:23 +0200 Message-ID: <20120925112123.10037dv1mhdymb2r@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Tue, 25 Sep 2012 11:21:23 +0200 From: Mike Gabriel To: x2go-dev@lists.berlios.de Cc: 34@bugs.x2go.org References: <505CC771.20300@gmx.de> <505D9F99.10808@gmx.de> <505DA7B4.3030909@informatik.uni-erlangen.de> <505F6DDB.1070304@gmx.de> <5060251D.90202@informatik.uni-erlangen.de> <20120924132602.316510@gmx.net> <50607239.5090308@informatik.uni-erlangen.de> <5060CF1E.20700@gmx.de> <5060EA24.7070600@obviously-nice.de> <20120925030819.309160@gmx.net> <20120925102525.15264n2buhtuy73p@mail.das-netzwerkteam.de> <50616F8C.2020600@obviously-nice.de> <506172DF.9070902@informatik.uni-erlangen.de> <506175AC.8000209@obviously-nice.de> In-Reply-To: <506175AC.8000209@obviously-nice.de> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_azg8opmsfir"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_azg8opmsfir Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit hi Alex, On Di 25 Sep 2012 11:13:16 CEST Oleksandr Shneyder wrote: > I don't want to disable any features. I only say, it is nice to have a > possibility to send authentication data to server encrypted. In LAN it > is not a such big problem to send it in clear text. But in case of > SSH-Proxy it is an Internet connection. And I want, that every one, who > use this feature with X2Go know, that sending unecrypted data over > Internet is not safe. And that should not be the same authentication > data as used on other servers. With SSH proxy support you normally do _not_ send passwords unencrypted. Manual SSH proxy tunnel: ssh -l -L 127.0.0.1::: and then an X2Go session to Hostname: 127.0.0.1 Port: User: Both SSH authentications do not reveal clear text credentials. So, I am wondering what your SSH proxy strategy will be(?). Greets, Mike -- DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_azg8opmsfir Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJQYXeSAAoJEJr0azAldxsx1ZsQAIxlQVXetDOctNqEKlOHSQ0C NDLQzZD3DHkcUb19yFVHTXKa4U6FLDrN7Jsjghj48LsuXhUdZ2bZJ26TnkTUigPi jKWjo/1ByJ7OLAhtNV6DsnKtW3xYHm/JSzgxKa9YZloCzK/fnkRn26aKPO1EVVVl rIbx0EjJTC6y0rCXrZybKuzu+Tsz+y2afrvCAfLanTVnbPRwBt64I+EetjbW5QLl 7ZdUIlDd4Fv4e6EQ/XCyAS2OH04yom62YV8hfgpS03ABUc3ZL4mHhFJjUb3hOot5 2W1q3KF9RnaSN8Bz4KKN6MZwGqAWlCywheKU+qcMpBho/67/v1B+VjngIQU4NWOa 785/K2Ti+rgNH2BcuyAxTiAwbs4qsszXJHF7F9o9xKRoV2QRTLeLxgu3p+ENI379 TIE5+JV0erSnNZcEDknTTjfJHfUcHbo5c2MRfaKMPxqDQgICFwGIVuQEbcCaQfIE +jmavKSpwyHIraBRFpb57+GavuFGNsi2p2QSN3hcxZvx5lmpbCT6wmsoc+7zYE2X z21get/aiem5uzO3NzOrSGwjZEPoOwXXFSDGdqYg6e1vJUjxZILImvNQ8f0YB+Jk JrCixUuzfe0k1Y1Xq2Y1RkohwRsu/r+IeDdUhWlU9OdAn2+jwh58hmUy5J0APiIS YFdMYnjqyeJ++yOeeDm5 =NMkv -----END PGP SIGNATURE----- --=_azg8opmsfir--