From unknown Sun Apr 05 21:39:09 2026 MIME-Version: 1.0 X-Mailer: MIME-tools 5.502 (Entity 5.502) X-Loop: owner@bugs.x2go.org From: owner@bugs.x2go.org (X2Go Bug Tracking System) Subject: Bug#377 closed by Mike Gabriel (Re: [X2Go-Dev] Bug#377: init scripts) Message-ID: References: <20131221210932.Horde.Diy4XlJi0Ykgyi95_Fbr8w1@mail.das-netzwerkteam.de> X-X2go-PR-Message: they-closed 377 X-X2go-PR-Package: x2gobroker X-X2go-PR-Source: x2gobroker Date: Sat, 21 Dec 2013 21:10:02 +0000 Content-Type: multipart/mixed; boundary="----------=_1387660202-21602-0" This is a multi-part message in MIME format... ------------=_1387660202-21602-0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is an automatic notification regarding your Bug report which was filed against the x2gobroker package: #377: paramiko fails to recognize known_hosts It has been closed by Mike Gabriel . Their explanation is attached below along with your original report. If this explanation is unsatisfactory and you have not received a better one in a separate message then please contact Mike Gabriel by replying to this email. --=20 377: http://bugs.x2go.org/cgi-bin/bugreport.cgi?bug=3D377 X2Go Bug Tracking System Contact owner@bugs.x2go.org with problems ------------=_1387660202-21602-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 377) by bugs.x2go.org; 21 Dec 2013 21:09:33 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from freya.das-netzwerkteam.de (freya.das-netzwerkteam.de [88.198.48.199]) by ymir (Postfix) with ESMTPS id 4DB645DB13 for <377@bugs.x2go.org>; Sat, 21 Dec 2013 22:09:33 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [78.46.204.98]) by freya.das-netzwerkteam.de (Postfix) with ESMTPS id DC0FDC8; Sat, 21 Dec 2013 22:09:32 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id B9B0C3C062; Sat, 21 Dec 2013 22:09:32 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at grimnir.das-netzwerkteam.de Received: from grimnir.das-netzwerkteam.de ([127.0.0.1]) by localhost (grimnir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LBuPQZenXTLH; Sat, 21 Dec 2013 22:09:32 +0100 (CET) Received: from grimnir.das-netzwerkteam.de (localhost [127.0.0.1]) by grimnir.das-netzwerkteam.de (Postfix) with ESMTPSA id 961023C038; Sat, 21 Dec 2013 22:09:32 +0100 (CET) Received: from p4FE5F50D.dip0.t-ipconnect.de (p4FE5F50D.dip0.t-ipconnect.de [79.229.245.13]) by mail.das-netzwerkteam.de (Horde Framework) with HTTP; Sat, 21 Dec 2013 21:09:32 +0000 Date: Sat, 21 Dec 2013 21:09:32 +0000 Message-ID: <20131221210932.Horde.Diy4XlJi0Ykgyi95_Fbr8w1@mail.das-netzwerkteam.de> From: Mike Gabriel To: Jan Engelhardt , 377@bugs.x2go.org Subject: Re: [X2Go-Dev] Bug#377: init scripts References: In-Reply-To: User-Agent: Internet Messaging Program (IMP) H5 (6.1.4) Accept-Language: en,de Organization: DAS-NETZWERKTEAM X-Originating-IP: 79.229.245.13 X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64; rv:23.0) Gecko/20100101 Firefox/23.0 Iceweasel/23.0 Content-Type: multipart/signed; boundary="=_MCq0pUhvGYC-sL05NQYpGA1"; protocol="application/pgp-signature"; micalg=pgp-sha1 MIME-Version: 1.0 This message is in MIME format and has been PGP signed. --=_MCq0pUhvGYC-sL05NQYpGA1 Content-Type: text/plain; charset=utf-8; format=flowed; DelSp=Yes Content-Disposition: inline Control: close -1 Hi Jan, On Di 17 Dez 2013 19:10:20 CET, Jan Engelhardt wrote: > I seem to remember that start-stop-daemon might have been part of LSB, > but then again, maybe not? (In the current openSUSE release with > systemd, start-stop-daemon is part of the dpkg package.) > > So the following are the init scripts currently running here. They lack > in quality, are dirt hacks, and only do the one thing they were tested > for. There is a lack of quoting all over the place. I have included two init scripts [1, 2] in X2Go Session Broker now that work on RHEL derived distros. The script use the daemon function from /etc/init.d/functions. Because of the limitation of the daemon function not being able to fork a process to background, I had to implement the "--daemonize" command line option in x2gobroker [3] and x2gobroker-authservice [4]. Now, both Python executables can fork themselves to background. Also, I split up x2gobroker-agent from x2gobroker (and also sub packaged x2gobroker-daemon, x2gobroker-wsgi and python-x2gobroker). I recommend doing the same on OpenSuSE. Find my x2gobroker.spec shipped in upstream x2gobroker.git [5]. Thanks, Mike [1] http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=rpm/x2gobroker.init [2] http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=rpm/x2gobroker-authservice.init [3] http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=man/man1/x2gobroker.1#l75 [4] http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=man/man8/x2gobroker-authservice.8#l41 [5] http://code.x2go.org/gitweb?p=x2gobroker.git;a=blob;f=x2gobroker.spec -- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby fon: +49 (1520) 1976 148 GnuPG Key ID 0x25771B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de freeBusy: https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb --=_MCq0pUhvGYC-sL05NQYpGA1 Content-Type: application/pgp-signature Content-Description: Digitale PGP-Signatur Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) iQIcBAABAgAGBQJStgOMAAoJEJr0azAldxsxwwMP/3mpCpuiTFXO3zna9pp7XMvo Q7m0m+cNX9wShZkADRMzt0P32gdPEW85hGrYnKG8ZE6dn/sTdWM4mhooqGRMSj6v I546dz8Erg3+kzy35lR2SExGBtxgMpoY7Q4VksqPX1zbRRRvxgBdV1AWhhoufV7C zD0zleOyxYVay0NVhufj1jj5Kl8khHiODUmIRACcKwGO5/rSCMPMmd1LdSoiUyjY Zw4oF7hrY2UIeT/dSOCmN45YU0FrRILlJeJp24RQV37KW7hVFvqiW5YKKDzbpusB xMSzeF4UXNqTJk4yc6iq0NYxbgqCUkG0FsBBYguMQ+CdQfkd4NIcnFbL+tYJY7qc z4o2bbRnyIo06/4YwTbwWw2LlPwCBQOFEIY1VupM79MlX6zSklOorD4iq8VcOqfy AQM/XdfAXPFeLNbqeA+s5azPBXC0+q2eEVgU63qIecphD59JEg1CXf6KZAPr998d WDNvP7lVLKxj9Lia/Dled5nmmgAdnXJqsQjluytQDDfJJ39zyXXaXF/R87LXCE2e Bkfs1r6DmsSycL85vJYsN+OTI3sYNsLeZcaRaQ15S36jnXFvas8jwf5jp+sUgSYy gqnYk5ohyvExzJC3N9B3FMZHGqWpL7/VzAj8st3oN1V1DpxhSTMG0LzqmQ1++k8u vBYKG7ARbh019Pkf99x1 =QSlm -----END PGP SIGNATURE----- --=_MCq0pUhvGYC-sL05NQYpGA1-- ------------=_1387660202-21602-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.x2go.org; 17 Dec 2013 13:56:03 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,URIBL_BLOCKED autolearn=ham version=3.3.2 X-Greylist: delayed 520 seconds by postgrey-1.34 at ymir; Tue, 17 Dec 2013 14:56:02 CET Received: from ares08.inai.de (ares08.inai.de [46.4.84.70]) by ymir (Postfix) with ESMTPS id 9677C5DB16 for ; Tue, 17 Dec 2013 14:56:02 +0100 (CET) Received: by ares08.inai.de (Postfix, from userid 25121) id 62E9A10673FF2; Tue, 17 Dec 2013 14:47:20 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by ares08.inai.de (Postfix) with ESMTP id 5A4671915A9C4; Tue, 17 Dec 2013 14:47:20 +0100 (CET) Date: Tue, 17 Dec 2013 14:47:20 +0100 (CET) From: Jan Engelhardt To: submit@bugs.x2go.org cc: Michael Kromer Subject: paramiko fails to recognize known_hosts Message-ID: User-Agent: Alpine 2.11 (LSU 23 2013-08-11) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Transfer-Encoding: 8BIT Package: x2gobroker Version: 0.0.2.3 When logging into a x2gobroker-0.0.2.3 with paramiko-1.11.0, it so happens that, for whatever reason, it rejects the remote side's key despite that being in /var/lib/x2gobroker/.ssh/known_hosts. {u'defsndport': False, u'useiconv': False, u'iconvfrom': 'UTF-8', u'height': 768, u'pack': '16m-jpeg', u'export': '', u'quality': 9, u'fullscreen': False, u'layout': '', 'host=terminalsrv2': '172.18.7.216', 'host=terminalsrv1': '172.18.7.205', u'width': 1024, u'speed': 4, u'soundtunnel': False, u'soundsystem': 'pulse', u'print': True, u'type': 'auto', u'sndport': 4713, u'xinerama': True, u'usekbd': True, u'variant': '', u'applications': ['TERMINAL', 'WWWBROWSER', 'MAILCLIENT', 'OFFICE'], u'host': ['terminalsrv1', 'terminalsrv2', 'terminalsrv3'], u'link': 'lan', u'multidisp': False, 'host=terminalsrv3': '172.18.7.214', u'fstunnel': False, u'sound': False, u'rootless': False, u'name': 'Terminalsitzung starten LAN Einstellungen', u'sshproxyport': 22, u'iconvto': 'UTF-8', u'directrdp': False, u'useexports': True, u'command': 'GNOME', u'dpi': 96, u'sshport': 22, u'setdpi': 0, u'startsoundsystem': 'false', u'user': ''} ['terminalsrv1', 'terminalsrv2', 'terminalsrv3'] ['terminalsrv3', 'terminalsrv1', 'terminalsrv2'] {u'hostname': 'terminalsrv2', u'port': 22} starting thread (client mode): 0xe8ded0L Connected (version 2.0, client OpenSSH_5.1) kex algos:['diffie-hellman-group-exchange-sha256', 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] server encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] client mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'zlib@openssh.com'] server compress:['none', 'zlib@openssh.com'] client lang:[''] ser ver lang:[''] kex follows?False Ciphers agreed: local=aes128-ctr, remote=aes128-ctr using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none Switch to new keys ... /usr/lib64/python2.6/site-packages/paramiko/client.py:95: UserWarning: Unknown ssh-rsa host key for terminalsrv2: 4d1d9d46a16da7d8c5a3829c920ff5da (key.get_name(), hostname, hexlify(key.get_fingerprint()))) ['terminalsrv3', 'terminalsrv1'] {u'hostname': 'terminalsrv1', u'port': 22} starting thread (client mode): 0xe95cd0L Connected (version 2.0, client OpenSSH_5.1) kex algos:['diffie-hellman-group-exchange-sha256', 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] server encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] client mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'zlib@openssh.com'] server compress:['none', 'zlib@openssh.com'] client lang:[''] ser ver lang:[''] kex follows?False Ciphers agreed: local=aes128-ctr, remote=aes128-ctr using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none Switch to new keys ... /usr/lib64/python2.6/site-packages/paramiko/client.py:95: UserWarning: Unknown ssh-rsa host key for terminalsrv1: 4d1d9d46a16da7d8c5a3829c920ff5da (key.get_name(), hostname, hexlify(key.get_fingerprint()))) thservice.logEOF in transport thread ['terminalsrv3'] {u'hostname': 'terminalsrv3', u'port': 22} starting thread (client mode): 0xe95290L Connected (version 2.0, client OpenSSH_5.1) kex algos:['diffie-hellman-group-exchange-sha256', 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] server encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] client mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'zlib@openssh.com'] server compress:['none', 'zlib@openssh.com'] client lang:[''] ser ver lang:[''] kex follows?False Ciphers agreed: local=aes128-ctr, remote=aes128-ctr using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none Switch to new keys ... /usr/lib64/python2.6/site-packages/paramiko/client.py:95: UserWarning: Unknown ssh-rsa host key for terminalsrv3: 4d1d9d46a16da7d8c5a3829c920ff5da (key.get_name(), hostname, hexlify(key.get_fingerprint()))) EOF in transport thread EOF in transport thread starting thread (client mode): 0xe8df50L Connected (version 2.0, client OpenSSH_5.1) kex algos:['diffie-hellman-group-exchange-sha256', 'diffie-hellman-group-exchange-sha1', 'diffie-hellman-group14-sha1', 'diffie-hellman-group1-sha1'] server key:['ssh-rsa', 'ssh-dss'] client encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] server encrypt:['aes128-cbc', '3des-cbc', 'blowfish-cbc', 'cast128-cbc', 'arcfour128', 'arcfour256', 'arcfour', 'aes192-cbc', 'aes256-cbc', 'rijndael-cbc@lysator.liu.se', 'aes128-ctr', 'aes192-ctr', 'aes256-ctr'] client mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] server mac:['hmac-md5', 'hmac-sha1', 'umac-64@openssh.com', 'hmac-ripemd160', 'hmac-ripemd160@openssh.com', 'hmac-sha1-96', 'hmac-md5-96'] client compress:['none', 'zlib@openssh.com'] server compress:['none', 'zlib@openssh.com'] client lang:[''] ser ver lang:[''] kex follows?False Ciphers agreed: local=aes128-ctr, remote=aes128-ctr using kex diffie-hellman-group1-sha1; server key type ssh-rsa; cipher: local aes128-ctr, remote aes128-ctr; mac: local hmac-sha1, remote hmac-sha1; compression: local none, remote none Switch to new keys ... Traceback (most recent call last): File "/usr/sbin/x2gobroker", line 145, in tornado.ioloop.IOLoop.instance().start() File "/usr/lib64/python2.6/site-packages/tornado/ioloop.py", line 606, in start self._run_callback(callback) File "/usr/lib64/python2.6/site-packages/tornado/ioloop.py", line 457, in _run_callback callback() File "/usr/lib64/python2.6/site-packages/tornado/stack_context.py", line 330, in wrapped raise_exc_info(exc) File "/usr/lib64/python2.6/site-packages/tornado/stack_context.py", line 301, in wrapped ret = fn(*args, **kwargs) File "/usr/lib64/python2.6/site-packages/tornado/iostream.py", line 340, in wrapper callback(*args) File "/usr/lib64/python2.6/site-packages/tornado/stack_context.py", line 330, in wrapped raise_exc_info(exc) File "/usr/lib64/python2.6/site-packages/tornado/stack_context.py", line 301, in wrapped ret = fn(*args, **kwargs) File "/usr/lib64/python2.6/site-packages/tornado/httpserver.py", line 339, in _on_request_body self.request_callback(self._request) File "/usr/lib64/python2.6/site-packages/tornado/web.py", line 1599, in __call__ handler._execute(transforms, *args, **kwargs) File "/usr/lib64/python2.6/site-packages/tornado/web.py", line 1133, in _execute self._when_complete(self.prepare(), self._execute_method) File "/usr/lib64/python2.6/site-packages/tornado/web.py", line 1140, in _when_complete callback() File "/usr/lib64/python2.6/site-packages/tornado/web.py", line 1161, in _execute_method self._when_complete(method(*self.path_args, **self.path_kwargs), File "/usr/lib64/python2.6/site-packages/x2gobroker/web/plain.py", line 136, in post profiles = broker_backend.list_profiles(username) File "/usr/lib64/python2.6/site-packages/x2gobroker/brokers/base_broker.py", line 870, in list_profiles running_sessions, suspended_sessions = x2gobroker.agent.has_sessions(username, query_mode=agent_query_mode, remote_agent=remote_agent) File "/usr/lib64/python2.6/site-packages/x2gobroker/agent.py", line 229, in has_sessions _session_list = list_sessions(username, query_mode=query_mode, remote_agent=remote_agent) File "/usr/lib64/python2.6/site-packages/x2gobroker/agent.py", line 174, in list_sessions return call_remote_broker_agent(username, mode='listsessions', remote_agent=remote_agent) File "/usr/lib64/python2.6/site-packages/x2gobroker/agent.py", line 139, in call_remote_broker_agent raise x2gobroker.x2gobroker_exceptions.X2GoBrokerAgentException('Query to remote X2Go Broker Agent (user: {user}, hostname: {hostname}, port: {port}) failed'.format(user=remote_username, hostname=remote_hostname, port=remote_port)) x2gobroker.x2gobroker_exceptions.X2GoBrokerAgentException: Query to remote X2Go Broker Agent (user: x2gobroker, hostname: terminalsrv3, port: 22) failed ------------=_1387660202-21602-0--