[X2Go-Dev] Bug#782: x2goclient next login without password after logout

[GZ Nianguan E.T.opensource@gznianguan.com]

Hi,

Passwords and stuff like that should ALWAYS be discarded immediately
after use.

In other words... as soon as your authenticated (or at least tried to
authenticate), get rid of it!





On 02/05/2015 12:40 PM, Sergey Savko wrote:
> Package: x2goclient
> Version: 4.0.3.2
> Severity: grave
> 
> x2goclient start in broker mode with «--broker-autologoff» parameter.
> At the end of the session the user get into the authentication window, we can press the "OK" button and connect without a password under the user who last connected to the system.
> Video: http://youtu.be/dXu_clQfCtc
> 
> Add lines
>     config.brokerPass.clear();
>     config.brokerUser.clear();
> in the function "void ONMainWindow :: slotGetBrokerAuth ()" does not help.
> 
>