[X2Go-User] StrictHostKeyChecking=no

Ulrich Sibiller ulrich.sibiller at gmail.com
Sun Mar 26 19:24:36 CEST 2017


If you have a DHCP environment without decent hostkey management disabling struct hostkey checks makes it a bit more comfortable. Please do not judge the user's desire as inappropriate without knowing his reasons...

Uli


Vom Smartphone gesendet.

----- Ursprüngliche Nachricht -----
Von: "Stefan Baur" <X2Go-ML-1 at baur-itcs.de>
Gesendet: ‎26.‎03.‎2017 18:20
An: "x2go-user at lists.x2go.org" <x2go-user at lists.x2go.org>
Betreff: Re: [X2Go-User] StrictHostKeyChecking=no

Am 26.03.2017 um 17:43 schrieb Ivan Gomez:

> Just sending this again in case someone knows the answer and missed it.

This isn't a web forum where you could "bump" posts.

List replies are provided by volunteers, and thus may take some time.
(If you are looking for support with guaranteed response times, please
sign up for commercial support. Info below.)

At present, both me and my assistant list-master (list-mistress,
actually) are suffering from the flu, another key X2Go member is on a
well-deserved vacation, another is out of the country, so things may
take a little longer than usual.


> Is there a way to disable Strict Host Key Checking on X2Go client for
> windows?

I would hope not, as that would expose X2Go users to undetectable
Man-in-the-Middle-Attacks.
There is a command line parameter to make X2GoClient auto-accept an
unknown key, but it will complain if the key changes on subsequent
connection attempts.  This is by design.


> I would like to ignore the Host Key changed waring (screenshot
> attached). If you have suggestions other than using
> StrictHostKeyCheking=no please share.

Maybe you could instead explain why you believe you need to make your
users ignore that warning?  It sure sounds like the wrong thing to do,
so maybe it's time to take a few steps back and look at the actual
problem from a distance, to see if there aren't any alternative routes
to take.

<shameless plug>
X2Go also has a commercial side, where various companies - including
my own - offer support contracts with guaranteed response times as
well as consultancy and paid-for development work if someone wants to
see a bug fixed or a new feature added in a certain time frame.

What makes my company special is, IMHO:
1) I'm the current X2Go Project/Community Coordinator, so the
   development lead and the developers tend to listen to me.
2) As far as I know, we are the only company providing X2Go support
   that isn't a one-man-show.  Oh, and we already have US customers.
3) We sub-contract other developers from the X2Go community on demand,
   so you only have one person you need to talk to - me - and you will
   only receive one invoice, even if the task involved several freelance
   or part-time X2Go developers.

Our hourly rate for consultancy work and fixing issues outside of a
support contract is 110 EUR.
With a support contract, you get guaranteed response times (starting at
400 EUR/month for 24h response time during business hours in the
CET/CEST time zone from Monday to Friday, German holidays excluded)
and lower hourly rates if you buy a certain amount of hours in advance.
</shameless plug>

Kind Regards,
Stefan Baur

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.x2go.org/pipermail/x2go-user/attachments/20170326/6dd88f4a/attachment-0001.html>


More information about the x2go-user mailing list