From unknown Wed Apr 29 12:22:49 2026 MIME-Version: 1.0 X-Mailer: MIME-tools 5.502 (Entity 5.502) X-Loop: owner@bugs.x2go.org From: owner@bugs.x2go.org (X2Go Bug Tracking System) Subject: Bug#781 closed by X2Go Release Manager (X2Go issue (in src:x2goclient) has been marked as closed) Message-ID: References: <20150219115801.D9C0B5E156@ymir.das-netzwerkteam.de> X-X2go-PR-Keywords: pending X-X2go-PR-Message: they-closed 781 X-X2go-PR-Package: x2goclient X-X2go-PR-Source: x2goclient Date: Thu, 19 Feb 2015 12:00:22 +0000 Content-Type: multipart/mixed; boundary="----------=_1424347222-20582-0" This is a multi-part message in MIME format... ------------=_1424347222-20582-0 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This is an automatic notification regarding your Bug report which was filed against the x2goclient package: #781: x2goclient in broker mode with --broker-noauth It has been closed by X2Go Release Manager . Their explanation is attached below along with your original report. If this explanation is unsatisfactory and you have not received a better one in a separate message then please contact X2Go Release Manager <= git-admin@x2go.org> by replying to this email. --=20 X2Go Bug Tracking System Contact owner@bugs.x2go.org with problems ------------=_1424347222-20582-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at control) by bugs.x2go.org; 19 Feb 2015 11:58:31 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,NO_RELAYS, URIBL_BLOCKED autolearn=unavailable version=3.3.2 Received: by ymir.das-netzwerkteam.de (Postfix, from userid 1005) id D9C0B5E156; Thu, 19 Feb 2015 12:58:00 +0100 (CET) From: X2Go Release Manager To: 781-submitter@bugs.x2go.org Cc: control@bugs.x2go.org, 781@bugs.x2go.org Subject: X2Go issue (in src:x2goclient) has been marked as closed Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit Message-Id: <20150219115801.D9C0B5E156@ymir.das-netzwerkteam.de> Date: Thu, 19 Feb 2015 12:58:00 +0100 (CET) close #781 thanks Hello, we are very hopeful that X2Go issue #781 reported by you has been resolved in the new release (4.0.3.2) of the X2Go source project »src:x2goclient«. You can view the complete changelog entry of src:x2goclient (4.0.3.2) below, and you can use the following link to view all the code changes between this and the last release of src:x2goclient. http://code.x2go.org/gitweb?p=x2goclient.git;a=commitdiff;h=3b7ca68412005521d45d9751a370549ab1c80e58;hp=5290218751cc68a1fc1711ebd169e195eb3daeed If you feel that the issue has not been resolved satisfyingly, feel free to reopen this bug report or submit a follow-up report with further observations described based on the new released version of src:x2goclient. Thanks a lot for contributing to X2Go!!! light+love X2Go Git Admin (on behalf of the sender of this mail) --- X2Go Component: src:x2goclient Version: 4.0.3.2-0x2go1 Status: RELEASE Date: Thu, 19 Feb 2015 12:49:22 +0100 Fixes: 616 642 681 702 705 713 720 742 781 782 Changes: x2goclient (4.0.3.2-0x2go1) RELEASED; urgency=medium . [ Oleksandr Shneyder ] * New upstream release (4.0.3.2): - Fix placement of session folders in session card column. (Fixes: #681). - Send empty message in x2gohelper to stop AppStarting cursor. (Fixes: #616). - Fix multiple creations of modmap timer (OS_DARWIN). . [ Mike Gabriel ] * New upstream release (4.0.3.2): - Add several info/error/debug log message while hunting down #702. - Use app.setQuitOnLastWindowClosed(false) for the X2Go Client QtApplication to assure that X2Go Client does not arbitrarily exit during a running session. This fixes X2Go Client crashes that occur when printing via the CUPS-X2Go printing mechanism with activate print dialog popup on incoming print jobs and minimized main window. (Fixes: #702). - Be more exact when reporting rev forwarding tunnel request failures to the GUI user. Include the purpose of the tunnel (NX, audio, foldersharing) in the error message. - Enable debugging in sshprocess.cpp and sshmasterconnection.cpp if --debug is given. - sshmasterconnection.cpp: Fix several grammar issues in error messages. - When sharing a client-side folder, do not write the SSH pub key to client-side authorized_keys file if the folder-to-be-shared does not exist on the client. (Partially solves #405). - Fix string concatenation/layout of error message when tunnel I/O errors occur. - Improve debugging/logging the SSH connections made by X2Go Client. - Fix quotes when calling remote commands via SSH (esp. allow same quoting/ escaping style for libssh and openSSH+Krb based connections). (Fixes: #720). - FIXME: Disable PubkeyAuthentication _and_ PasswordAuthentication if GSSAPI authentication is activated. This is counter intuitive, though, and requires several other fixes in the authentication code. * x2goclient.spec: - Always set BuildRoot: parameter. . [ Sergey Savko ] * New upstream release (4.0.3.2): - Prevent passwordless re-logins into X2Go Session Broker if --broker-autologoff is used on the cmdline. (Fixes: #782). - Add new cmdline option --broker-noauth-use-session-username. When --broker-noauth is used, the broker does not know on behalf of which user to operate. This new option enables username syncing. When logging into X2Go Server, that username will be sent to the broker and be used for querying X2Go Broker Agents etc. (Fixes: #781). . [ Heinrich Schuchardt ] * New upstream release (4.0.3.2): - Base the layout dialogue "Session ID" (which shows up when starting a connection) on typographic points (instead of pixels). (Fixes: #713). . [ Jason Alavaliant ] * New upstream verson (4.0.3.2): - Use QUrl::toPercentEncoding() method to properly encode passwords sent to X2Go Session Broker. (Fixes: #705). . [ Mike DePaulo ] * New upstream release (4.0.3.2): - Windows: Win32 OpenSSL updates from 1.0.1j to 1.0.1L, which fixes the CVEs announced on 2015-01-08. - Windows: Cygwin OpenSSL updated from 1.0.1j-1 to 1.0.1k-1, which fixes the CVEs announced on 2015-01-08. - Windows: Bundle new version of VcXsrv: 1.15.2.2-xp+vc2013+x2go1. The differences from 1.15.2.1-xp+vc2013+x2go1 are that its bundled OpenSSL has been updated to 1.0.1k, and that xorg-server CVE-2014-8091..8103 have been fixed. - Windows: Update libssh from 0.6.3 to 0.6.4 (while maintaining Pageant support). This fixes CVE-2014-8132, which shouldn't affect x2goclient because x2goclient uses the SSH client functionality, not the SSH server functionality. 0.6.4 also added 4 features related to ECDSA keys. - Windows: Fix compatibility with PulseAudio 6.0 - Windows: Remove workaround for audio input with old versions of PulseAudio (calling parec once per second) (Fixes: #742) Thanks George Trakatelis (uom.edu.gr) for submitting this change. - Windows: Enable X2Go Client for Windows to build under VS2010 nmake (but not the VS2010 IDE due to a Qt4 Visual Studio Add-in limitation) Note that the official builds are still build under MinGW. (Fixes: #642) Thanks George Trakatelis (uom.edu.gr) for submitting this feature. - Windows: Make builds easier, and updating bundled dependencies easier, by adding copy-deps-win32.bat. It copies the exact version of each dependency (DLL, executable, data, folder, etc) from x2goclient-contrib.git. . [ Kaan Ozdincer ] * New upstream version (4.0.3.2): - Add Turkish translation file. ------------=_1424347222-20582-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by bugs.x2go.org; 4 Feb 2015 10:48:38 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,URIBL_BLOCKED autolearn=ham version=3.3.2 X-Greylist: delayed 536 seconds by postgrey-1.34 at ymir.das-netzwerkteam.de; Wed, 04 Feb 2015 11:48:36 CET Received: from m.tophouse.ru (m.tophouse.ru [178.238.31.85]) by ymir.das-netzwerkteam.de (Postfix) with ESMTP id EE7AF5E073 for ; Wed, 4 Feb 2015 11:48:36 +0100 (CET) Received: from localhost (localhost.localdomain [127.0.0.1]) by m.tophouse.ru (Postfix) with ESMTP id C8BDB46423A for ; Wed, 4 Feb 2015 13:41:36 +0300 (MSK) Received: from m.tophouse.ru ([127.0.0.1]) by localhost (m.tophouse.ru [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id U1JqZQO3oShX for ; Wed, 4 Feb 2015 13:41:36 +0300 (MSK) Received: from localhost (localhost.localdomain [127.0.0.1]) by m.tophouse.ru (Postfix) with ESMTP id E560A46424E for ; Wed, 4 Feb 2015 13:41:35 +0300 (MSK) X-Virus-Scanned: amavisd-new at m.tophouse.ru Received: from m.tophouse.ru ([127.0.0.1]) by localhost (m.tophouse.ru [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 95yjSNL0Xl0S for ; Wed, 4 Feb 2015 13:41:35 +0300 (MSK) Received: from m.tophouse.ru (m.tophouse.ru [178.238.31.85]) by m.tophouse.ru (Postfix) with ESMTP id 9211546424A for ; Wed, 4 Feb 2015 13:41:35 +0300 (MSK) Date: Wed, 4 Feb 2015 14:41:35 +0400 (MSK) From: Sergey Savko To: submit@bugs.x2go.org Message-ID: <1445793820.50897.1423046495131.JavaMail.zimbra@tophouse.ru> In-Reply-To: <1249362733.50203.1423045063015.JavaMail.zimbra@tophouse.ru> Subject: x2goclient in broker mode with --broker-noauth MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_50895_1656359125.1423046495129" X-Mailer: Zimbra 8.0.8_GA_6184 (ZimbraWebClient - GC39 (Linux)/8.0.8_GA_6184) Thread-Topic: x2goclient in broker mode with --broker-noauth Thread-Index: 5FGeIuGQmN/z38S7kfGpdOR3YexZdw== ------=_Part_50895_1656359125.1423046495129 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Package: x2goclient Version: 4.0.3.1 Tag: patch If x2goclient started in broker mode without pass-through authentication (--broker-noauth) and authentication on the server, x2goclient connected from the user who started the x2goclient. That isn't right, we can run x2goclient from any user and connect to the servers as a different user. Just x2goclient can't restore session from suspend. This patch allows you to start x2goclient from any user on the local system and connect to the server by the user that was entered in the authentication window. -- Yours truly, Sergey Savko. ------=_Part_50895_1656359125.1423046495129 Content-Type: text/x-patch; name=0001-x2goclient-broker-noauth-patch.patch Content-Disposition: attachment; filename=0001-x2goclient-broker-noauth-patch.patch Content-Transfer-Encoding: base64 RnJvbSAyNzBlNTgzNWZlNDllMDg0NDg3NGI5Nzc2OWU4ZGUxNTMyYTJhMDM5IE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBTZXJnZXlfU2F2a28gPHNhdmtvQHRvcGhvdXNlLnJ1PgpEYXRl OiBXZWQsIDQgRmViIDIwMTUgMTI6MjQ6MTggKzAzMDAKU3ViamVjdDogW1BBVENIXSB4MmdvY2xp ZW50IC0tYnJva2VyLW5vYXV0aCBwYXRjaAoKLS0tCiBvbm1haW53aW5kb3cuY3BwIHwgICAgMyAr KysKIDEgZmlsZSBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS9vbm1haW53 aW5kb3cuY3BwIGIvb25tYWlud2luZG93LmNwcAppbmRleCA1YzM0NmU2Li44Mjg5NzVmIDEwMDY0 NAotLS0gYS9vbm1haW53aW5kb3cuY3BwCisrKyBiL29ubWFpbndpbmRvdy5jcHAKQEAgLTMwMzEs NiArMzAzMSw5IEBAIHZvaWQgT05NYWluV2luZG93OjpzbG90U2Vzc0VudGVyKCkKIAogICAgIGlm KGJyb2tlck1vZGUpCiAgICAgeworICAgICAgICBpZiAoY29uZmlnLmJyb2tlck5vQXV0aCkgewor CSAgICBjb25maWcuYnJva2VyVXNlciA9IGxvZ2luLT50ZXh0KCk7CisgICAgICAgIH0KICAgICAg ICAgYnJva2VyLT5zZWxlY3RVc2VyU2Vzc2lvbihzZXNzaW9uRXhwbG9yZXItPmdldExhc3RTZXNz aW9uKCktPmlkKCkpOwogICAgICAgICBjb25maWcuc2Vzc2lvbj1zZXNzaW9uRXhwbG9yZXItPmdl dExhc3RTZXNzaW9uKCktPmlkKCk7CiAgICAgICAgIHNldFN0YXRTdGF0dXMgKCB0ciAoICJDb25u ZWN0aW5nIHRvIGJyb2tlciIgKSApOwotLSAKMS43LjEwLjQKCg== ------=_Part_50895_1656359125.1423046495129-- ------------=_1424347222-20582-0--