From unknown Tue May 19 02:13:46 2026 X-Loop: git-admin@x2go.org Subject: Bug#34: SSH_OPTIONS_FD Reply-To: Mike Gabriel , 34@bugs.x2go.org Resent-From: Mike Gabriel Resent-To: x2go-dev@lists.berlios.de Resent-CC: X2Go Developers X-Loop: git-admin@x2go.org Resent-Date: Di, 25 Sep 2012 08:18:02 +0000 Resent-Message-ID: Resent-Sender: git-admin@x2go.org X-X2Go-PR-Message: followup 34 X-X2Go-PR-Package: x2goclient X-X2Go-PR-Keywords: Received: via spool by 34-submit@bugs.x2go.org id=B34.134856088412949 (code B ref 34); Di, 25 Sep 2012 08:18:02 +0000 Received: (at 34) by bugs.x2go.org; 25 Sep 2012 08:14:44 +0000 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 82C9C5DB15 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id 5BFB9AD4 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 4CE443BB75 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t86oL5q8BVdt for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 2C76B3C003 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id 146373BB75 for <34@bugs.x2go.org>; Tue, 25 Sep 2012 10:14:44 +0200 (CEST) X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on grimnir.das-netzwerkteam.de X-Spam-Flag: NO X-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.1 running as userid= X-Spam-Level: X-Spam-Bayes-Score: 0.0000 Received: by grimnir.das-netzwerkteam.de (Postfix, from userid 33) id C4B0A3C003; Tue, 25 Sep 2012 10:14:43 +0200 (CEST) Received: from nocatv2.tng.de (nocatv2.tng.de [213.178.75.58]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Tue, 25 Sep 2012 10:14:43 +0200 Message-ID: <20120925101443.23885uk5uxopayur@mail.das-netzwerkteam.de> X-Priority: 3 (Normal) Date: Tue, 25 Sep 2012 10:14:43 +0200 From: Mike Gabriel To: 34@bugs.x2go.org References: <505CC771.20300@gmx.de> <505D9F99.10808@gmx.de> <505DA7B4.3030909@informatik.uni-erlangen.de> <505F6DDB.1070304@gmx.de> <5060251D.90202@informatik.uni-erlangen.de> <20120924132602.316510@gmx.net> <50607239.5090308@informatik.uni-erlangen.de> <5060CF1E.20700@gmx.de> <5060EA24.7070600@obviously-nice.de> <20120925030819.309160@gmx.net> In-Reply-To: <20120925030819.309160@gmx.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=_5ri38fzej4kz"; protocol="application/pgp-signature"; micalg="pgp-sha1" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.3.4) This message is in MIME format and has been PGP signed. --=_5ri38fzej4kz Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: 7bit Hi Guys, On Di 25 Sep 2012 05:08:19 CEST glpk xypron wrote: > Dear Oleksandr, > >> And one more thing, as I understood, this code work only with recent >> version of libssh. We should think, how can we make it available for >> distributions like squeeze. Such distributions should be also supported >> by X2Go Client. > I have sent a bug report to Debian to include the missing patch. > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=688700 > >> I have a one notice. In your case HTTP protocol is used for proxy. It is >> mean, that user name and password will be transmitted unencrypted. It >> can follow to security issues. Can you think about HTTPS support? This >> should be not very difficult, as Qt already supports SSL. You can check >> code of HttpBrockerClient class in X2Go Client, which can use HTTPS >> connections. > > QNetworkProxy relies on QAuthenticator. > > QAuthenticator supports the following authentication methods: > - Basic > - NTLM version 2 > - Digest-MD5 > > Which one is used depends on the setup of the proxy server. Squid > has plugin for NTLM. > > NTLM and Digest-MD5 should be acceptable inside a private network. > > After the connection is established all further traffic will be SSH > encrypted. > > I am not aware of proxies being contacted over https. > > An interesting feature might be QNetworkProxy::DefaultProxy which > can use the system settings to determine the proxy server. > > Best regards > > Heinrich Schuchardt Can you think of a way to utilize WPAD for proxy detection. Many systems I know use the WPAD protocol to roll out proxy settings over the network: http://de.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol Just in case Qt knows about it... Mike -- DAS-NETZWERKTEAM mike gabriel, rothenstein 5, 24214 neudorf-bornstein fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_5ri38fzej4kz Content-Type: application/pgp-signature Content-Description: Digitale PGP-Unterschrift Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQIcBAABAgAGBQJQYWfzAAoJEJr0azAldxsx/QcQAJt7gbtLG6vZPwpDYu1bRO9g B57GAtqIkNUZYSPPFxOrg/nqBVkyX/HoJubVEPp2vVTlh2Y1FSGO3wp4kjLfWrRE K6ZwXfDnhnHj2sig0icuOHeXPHfngg7C5FXKxhF5sXa/6Qnn/JTwfwHnKlauP7iR D5sxMBXIMYkllRO+vlOj8aBy3Wi+h/iW6xCJPkC2k9hKB25X+4E+i2BxLFyXsOWW 4abKSR8eqGkk+NKSyj3J4A1TReWC62edBIz/MZM7GnRK9fAufrV1v8njjifErIoz NRNU2Xdn6NwP5V6uC8dzdnqUeVCAQmifMSHyERdo2e7bNptVOyd5thoA6UKmmb97 K+U6SF43DiNAw93fkLwnBdcu79v37I3leQc+bszgdcysJVumhJA9e5JkOI8qsw9U qFdij4lcwyg3wqMehb3QNkL906owRQisc6Yv3NyQxBXThaRMasJ2nr6E+WMlcwE6 k+NziwOOSQ1X/ZRQqcZRi5SF98fBUM5k2EOpRGvLPEBofMpUy26wnZY105MNb8+H VIfK/fbY7aKqnNCc629vy2QXZCipqQEb0/j5ILJIl301+PkNoemdV8ELb8OesiDd fXAn+Z7KSTkCcLsU+as6n/cMr25fQrD2NmdFz/TpjR19ByRumPqXhSAHYjSVwKcE HnwcouuByYb3st5FwgKZ =Tsem -----END PGP SIGNATURE----- --=_5ri38fzej4kz--