From koschmieder@gmx.net Fri Aug 7 01:38:17 2015 Received: (at submit) by bugs.x2go.org; 6 Aug 2015 23:38:20 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,FREEMAIL_FROM autolearn=ham version=3.3.2 Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id E03405DA86 for ; Fri, 7 Aug 2015 01:38:16 +0200 (CEST) Received: from [192.168.178.21] ([217.50.162.79]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0MaV3V-1Z7k4P0iAj-00K6PX for ; Fri, 07 Aug 2015 01:38:16 +0200 Message-ID: <55C3EFD3.7080904@gmx.net> Date: Fri, 07 Aug 2015 01:37:55 +0200 From: Lukas Koschmieder User-Agent: Mozilla/5.0 (X11; Linux i686; rv:31.0) Gecko/20100101 Icedove/31.7.0 MIME-Version: 1.0 To: submit@bugs.x2go.org Subject: GSSAPI Auth Bug Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="NqF6ofeQtxWRbLq8F0MXa4iU0bNVMi9Wm" X-Provags-ID: V03:K0:IUx6Xe2R21w1tPwvspRYgWq/C63nGcx3dAPJ1bxFe0q2fONv6S/ ixaQPA7l/htuhawVwISE5/ulQfck8wWkOC/Erpio2c0lCCB7+S0dyzgAMm38Au2YFateXH+ EGYQ7Jjr3OXMj/sX8+apusqiPXEucK69v/N1mARxYNDrj+aqA0V7VoA/y+2aLJ/FAQjMktG LnQFtBw7KduiW6V3ucfAg== X-UI-Out-Filterresults: notjunk:1;V01:K0:clG13tqJjzI=:a+RXbzT1/BwGqcIdewA0+e JHnxSOtAyC0/nmUATGWK4/DThiEFlPbirRdYlCnQBWAjpOjh624nlMwKWT5ZpjrRq9AHmRHmC JlmUcoYcIMCviexsQD/YbJ8+W6+IIecFMP0ljcshvxXqPjq4kx3j+8sQsUnlGcatu/rN7MQdV frApRwlwXd2uOVnWcdpzaCkDk9tBp3CPHMyx5HadH1yTC0s2PveUellRvY+hdC667SVDcUvyX KXha4d+TNfCdS64HkFaGrDgJvoOU6UGUcQKDxwS1kJ/Qj/UiNUqEm4uTKfoBX6xD49bYLHbXO JZQq+JPwZC1qwOdph1Y2CSJUxwE/tFKRxWD5NmdVwMTCqcVrjh1ZaquhXX6yDFOOs6lreOJ4d UIbTHV0zK9bWTd3bjL0EiziCz78DncRO0djRWF9JeoID0o2PLmFG6EOsTykhkjoMLNfWgpXLH 95wsKdec8mi/3sZiOhblavkeezLxJOA+8sPeWLZu/+eiyUF21HTfQtNspIvMpIHbyTGF5bleA /5kZIIgBXVfY1KQzzRkDcsQpnOVlOQse3eVKtYM+Sfo1RXUGvup30U0WGfH7bO47czMnIw5Pf 1k6Yi8JGtQHTCjW6tKRYTFtAHn2lCiO1/Pq1+utJzcGuzpvvLnG3XCV9LDUMuEgb4qeJNNTq8 DMvYN/Q7y6gnoKp2vP1F52i1zMBjf3vbApPvc63FeFFQSbQ== This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --NqF6ofeQtxWRbLq8F0MXa4iU0bNVMi9Wm Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Package: x2goclient Version: 4.0.4.0 Hi, I'm not sure if this is a server-side or client-side bug but each new user who tries to connect to my X2Go server initially receives the following error message: "Check your GSSAPI configuration or choose another authentication method." I have noticed that this error disappears as soon as a user establishes his first SSH connection to my X2Go server (using PuTTY). Regards, Lukas --NqF6ofeQtxWRbLq8F0MXa4iU0bNVMi9Wm Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJVw+/6AAoJENY4GsZ1FubdrioP/2X5296uiXBmcLMKul78LAm9 yCk4LQyWi1JdqQjUWFuKlEa4bEyq1ljuqsvG57OEFJ78Ok/6FvRhRvILDcHCs8lz zyyiq4tg3UL8hhI3MOS9NGrslGGff9SqCloMbvpQh6yxuTnskFdT3JWLoC75ku28 Jawi5C46hpTgwoetmh1PqjQIwldXOhbAo8iTRkm7dzeesNJ66XfXd1+Yx6ZrCKNi Q4VSuYE6k2/YT7se1VaMm0d66acxxa5htCET6Rsh996MZz+cfMoKFe87L89PefjA 2OU9UYiL+GsAssnZ8iVG4j64Df2exAo9kKg4PBIUV5dKP9nUFYpT3Y+KDUsXIaa1 /Qrfbr4Aep+0tW4qSOEKuUSBV1cOyb0DZlI7OIf/ZtgZZfZpvTipbMuwmiOXazcI evihelDlpi3VM/amENryFLCpP0XBpa/4Wm0ub5qz9V0VdqD4LMzLYbTEvUNmqPDl NxE7DrG5otshaO89HPBpu9gJAuIAKlfT4kLRRKSqtrjdjGuPOzLk5rp+GEtQD2Yc 8ifiZuMd8KJS1uoHeYHioL5Rb+eu8f0eFqNm2VkZaZpvTTz7vJgSQHVA25RuD44T 3Zrlbje/0pfixXjfDVZC+a6t3kWRQbKEE1YX0wLIAcBkGABLeQRC+ejAGSy/1AsJ f3JGbiX6F7StNCgeVPI8 =F8AE -----END PGP SIGNATURE----- --NqF6ofeQtxWRbLq8F0MXa4iU0bNVMi9Wm-- From ionic@ionic.de Tue Aug 11 19:21:46 2015 Received: (at 915) by bugs.x2go.org; 11 Aug 2015 17:21:48 +0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_40,T_DKIM_INVALID, URIBL_BLOCKED autolearn=ham version=3.3.2 Received: from Root24.de (powered.by.root24.eu [5.135.3.88]) by ymir.das-netzwerkteam.de (Postfix) with ESMTP id A83BA5DA84 for <915@bugs.x2go.org>; Tue, 11 Aug 2015 19:21:46 +0200 (CEST) Received: from nopileos.local (home.ionic.de [217.92.117.31]) by mail.ionic.de (Postfix) with ESMTPSA id 13B274F09436; Tue, 11 Aug 2015 19:21:46 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ionic.de; s=default; t=1439313706; bh=7QwmKAYOYpftsfv4mjSs53n/syUgLbIJ9ickzsL4qKI=; h=Subject:To:References:From:Date:In-Reply-To:From; b=H3PFUYtSZv8k5TJCKFPb+LgVuCC3s4VHgfX7JcS6YM5vOUhmxqdxS3f10Jwg7vkSs mFIGeT5HK8F1HQ4G5PYdfg7w5aREp2JrO/6KiE5dDl45AfG3fS2MA4UyD0tC0MEF+v 7YhxOKbr3L6RE8efz/WykbtBSrYM8IzTrl2qhGaA= Subject: Re: [X2Go-Dev] GSSAPI Auth Bug To: Lukas Koschmieder , 915@bugs.x2go.org References: <55C3EFD3.7080904@gmx.net> From: Mihai Moldovan X-Enigmail-Draft-Status: N1110 Message-ID: <55CA2F22.7090303@ionic.de> Date: Tue, 11 Aug 2015 19:21:38 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:38.0) Gecko/20100101 Thunderbird/38.0.1 MIME-Version: 1.0 In-Reply-To: <55C3EFD3.7080904@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ugOlCoQUXcW0CblWDx43d58sTgPal0TD8" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --ugOlCoQUXcW0CblWDx43d58sTgPal0TD8 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07.08.2015 01:37 AM, Lukas Koschmieder wrote: > Package: x2goclient > Version: 4.0.4.0 Please try upgrading to 4.0.5.0. I have fixed a few bugs regarding GSSAPI/Kerberos in that version - maybe= that already solves your problem. > I have noticed that this error > disappears as soon as a user establishes his first SSH connection to my= > X2Go server (using PuTTY). Additionally, this might not be a bug at all. X2Go Client expects a valid Kerberos ticket to be available. Typically, W= indows users that use Kerberos already get a ticket at login time via AD or the = like. If that is not true for your setup, you will have to request a new ticket= manually the first time after login - and are responsible to also keep it= from expiring (e.g., via periodically requesting a new ticket or requesting a renewable ticket and running the renew command every now and then.) Mihai --ugOlCoQUXcW0CblWDx43d58sTgPal0TD8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCgAGBQJVyi8pAAoJEB/WLtluJTqHBecQAJsVSVsD/XMJVizfz0I50OLs 0X1AjE6KOX2klooNBxyEqHKZh6VPS6C3QC8SxNl6v615GVGH+8g6GsB27oa4KZST 7wUP7s3RH/G60plzPmY/ptA6qUSWaX0zdOyQBABsOpUgea1IcF/CCJ6KY4E3gufc PpzppCLEgaSSFGYZuUmuwVffrLDVhJWgiJgM/t/it3bC3O5uLFpSlMxzezl2EAqe MI/unZRVRworMwfjbp2wBjSD1Vnt41270yOrQQS/awoS8YdqcleRtIrweLQdbQY6 Xc9e5UFcpnZUZmYWspBN/wMfEJ85GRfQGvzF+9vTExMWc2sRDk168IkWE0J8aQJ9 gKOEaUc5pfmTf+8c1GisFi/rh4WYz+80aV1+ubR/oohFQFnasgnQV0CugPmrMg6Y qt3N+/v2yy9dlrtCrA1lPmK+8Gd6kroItWA0wt3RuS/VKS6Oz7vvIVLUstsR50Y8 dkguFJAjzQlgpkI1MeWGkOsZ2ENMBCQ6NwIYQ2c7DSq3TFO1MNn2EDrhH6cwiGMy XafWOoTcNjJ2xzWWSWo8TD8DVKgCriY43DINK7AuiMeYEUmgY68YtdziAqat+LT2 00obZBzKMhXoRXdtaxZBQkeHkN3lJvitPeS2tpS/53+DSs6VhcuVR+/anMRkzBTd rF4nqZ1v6bCoJ1Eou0OW =yJgq -----END PGP SIGNATURE----- --ugOlCoQUXcW0CblWDx43d58sTgPal0TD8-- From frank.lenaerts@sckcen.be Wed Aug 14 16:28:50 2019 Received: (at 915) by bugs.x2go.org; 14 Aug 2019 14:28:58 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on ymir.das-netzwerkteam.de X-Spam-Level: X-Spam-Status: No, score=0.8 required=3.0 tests=BAYES_50,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.2 Received: from EUR01-HE1-obe.outbound.protection.outlook.com (mail-he1eur01on072d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1e::72d]) by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id E118F5DA92 for <915@bugs.x2go.org>; Wed, 14 Aug 2019 16:28:47 +0200 (CEST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ckb64b8QuxJlWXZOb3pOfK0kD7zGi+kH97IOsdPFi7Xqz+uJgBkGWBhTE4TNebQ7C9S6pyO3dX92qOVSfqyJx/1bVvyg3yIp/AjWuyCtTiEhoL1YNT8h1TfBIFoCK62OzZ81HCxo93GNQ6ZoZvg2/rbCbe8ZvM3Bde3bYjMHxgl1nhNhUaRe95YvOU5G8jevnZFtu9Wytx5t6fopVq6tYVZ5+XvnOBwA8rB9g1g820P/z7gCdtJdIeTQjBMzVZYY8NxvCCciYcaZzBGJ5ASqFMsDQTzBjjQbJhtbUdTdtpTN8e01nyM2r3F95UffrlEsN8H/tWLehAkATtdhmZz9xw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=+76lJrZgLKj3bkwVfJI7lv7yPRLQc8sEhnWjCwrJRYo=; b=bFubBPElra3hpKtteh4cC38yZttDzIGiwygfPFpCJgFBloFQckNhD6JZwVLSwyJlrooplG2EC+L40LACJ4Eb/nl4H3njC5QCm+H6/xAkm/Z/8V9w5Iu0JOzggAymyJAZxUUcIiG2FIZ3IusblGFpUDu+i+2bKxgp9edJ9y8Q7sqpBwxp/OEhkSylgBk4RiI5FhzLyXDmyQtwGTURLgcoTbBCNxjDVJFscZgC0XIezFea+WejCmdG0nE8uRTInTznXKjRsCh/U2HHBgVhczNXXoViEP13qQAXWU9S+ZYSDf9Z6JAViwD1IiS8O59E06j3lO+ucNAkbvlDCccRT3Wi0Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 193.190.140.222) smtp.rcpttodomain=bugs.x2go.org smtp.mailfrom=sckcen.be; dmarc=bestguesspass action=none header.from=sckcen.be; dkim=none (message not signed); arc=none Received: from HE1EUR01FT009.eop-EUR01.prod.protection.outlook.com (10.152.0.52) by HE1EUR01HT077.eop-EUR01.prod.protection.outlook.com (10.152.0.212) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2157.15; Wed, 14 Aug 2019 14:28:43 +0000 Received-SPF: Pass (protection.outlook.com: domain of sckcen.be designates 193.190.140.222 as permitted sender) receiver=protection.outlook.com; client-ip=193.190.140.222; helo=mail.sckcen.be; Received: from mail.sckcen.be (193.190.140.222) by HE1EUR01FT009.mail.protection.outlook.com (10.152.0.77) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id 15.20.2178.16 via Frontend Transport; Wed, 14 Aug 2019 14:28:42 +0000 Received: from pc5424-v2.sck.be (10.0.6.24) by mailsrv4.sck.be (193.190.140.222) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Wed, 14 Aug 2019 16:28:42 +0200 Date: Wed, 14 Aug 2019 16:28:40 +0200 From: Frank Lenaerts To: <915@bugs.x2go.org> Subject: GSSAPI Auth Bug Message-ID: <20190814142840.ivoy6u4n6xaabbtr@pc5424-v2.sck.be> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Disposition: inline Content-Transfer-Encoding: 8bit X-Originating-IP: [10.0.6.24] X-ClientProxiedBy: mailsrv4.sck.be (193.190.140.222) To mailsrv4.sck.be (193.190.140.222) X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:193.190.140.222;IPV:NLI;CTRY:BE;EFV:NLI;SFV:NSPM;SFS:(10019020)(396003)(136003)(376002)(39850400004)(346002)(2980300002)(199004)(189003)(2906002)(186003)(316002)(23756003)(386003)(3480700005)(26005)(16526019)(36756003)(7696005)(47776003)(53936002)(53416004)(55016002)(2351001)(22746008)(356004)(4744005)(2870700001)(9686003)(1076003)(5660300002)(8676002)(7116003)(3846002)(6916009)(508600001)(6116002)(126002)(476003)(70586007)(44832011)(336012)(7736002)(81156014)(70206006)(86362001)(305945005)(22756006)(106002)(486006)(81166006)(8936002)(50466002);DIR:OUT;SFP:1102;SCL:1;SRVR:HE1EUR01HT077;H:mail.sckcen.be;FPR:;SPF:Pass;LANG:en;PTR:InfoDomainNonexistent;A:1;MX:1; X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 1c211e55-19ae-47d9-25ed-08d720c3b575 X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(2390118)(7020095)(4652040)(7021145)(8989299)(4534185)(7022145)(4603075)(4627221)(201702281549075)(8990200)(7048125)(7024125)(7027125)(7023125)(5600148)(711020)(4605104)(4709080)(1401327)(2017052603328)(7193020);SRVR:HE1EUR01HT077; X-MS-TrafficTypeDiagnostic: HE1EUR01HT077: X-Microsoft-Antispam-PRVS: X-MS-Oob-TLC-OOBClassifiers: OLM:6790; X-Forefront-PRVS: 01294F875B X-MS-Exchange-SenderADCheck: 1 X-Microsoft-Antispam-Message-Info: UIN/gs7+XkQIYWg7FnZm5A/I9S1/oboqVLtT08erc4w/LAJjKjEOPHKMDlGlqbl+jb95lqggDMFW8b3VYZIOiamPR3CiE+Y4wkoxPuSdR7+W/BDd9hi8a6GSoJxD2pi+6LDzIoJbb9FeSKP+027KRQZ9ZKpWvhm2/68AzSxSTtJXbwa5aqM5qBMvmqdVE6IdttscOm9C4F+kVEr9RSTE8qiPl5wT5jvC6Ol4GkFEcE8svLYVJ+a7Jw2lCgFYl54E3YRHQv+USBpLRnJk4CbjT6WLQJCPpNW5EXg4QMjYOnx3bYFw8pSCwc6a0us2U7ion8vy/pWwHLrJ4g4+q+z3AlqBxowEJ1zuSpV4viyp3Jv0w3UF6hXmi/cg6Fhh7O1Aq3RpnL0KTNyVV+QC49FgXd6l+CDo72wf+Wrooduu9ys= X-OriginatorOrg: sckcen.be X-MS-Exchange-CrossTenant-OriginalArrivalTime: 14 Aug 2019 14:28:42.9518 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 1c211e55-19ae-47d9-25ed-08d720c3b575 X-MS-Exchange-CrossTenant-Id: 2f885e27-9e8b-4e12-bf50-1768b073bc54 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=2f885e27-9e8b-4e12-bf50-1768b073bc54;Ip=[193.190.140.222];Helo=[mail.sckcen.be] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT077 Authentication-Results: ymir.das-netzwerkteam.de; dkim=none; dmarc=none; spf=pass (ymir.das-netzwerkteam.de: domain of frank.lenaerts@sckcen.be designates 2a01:111:f400:fe1e::72d as permitted sender) smtp.mailfrom=frank.lenaerts@sckcen.be Hi I think it has to do with the fact that, the first time you connect to the server, its key has to be accepted. As soon as you accept it (in a plain ssh session), the X2go client works as expected i.o.w. it's just that the X2go client can't cope with the message asking you to accept the host's key or not. -- Kind regards Frank Lenaerts SCK·CEN / ICT Group Boeretang 200 B-2400 Mol Belgium Tel.: +3214338723