<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>Hello again Stefan, thanks for looking into this.</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">First, confirm that a regular SSH login using the same username, client,<br /> and server, with Kerberos enabled, works.</div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Yes, I am able to connect client and server though SSH with Kerberos auth, wihtout being prompted for a password. I had changed some of the config options you mentioned but the it was already working before and the error still persists with X2go. The ssh verbose prompts these lines that prove that gssapi is working: <br /><br /></div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">debug1: Next authentication method: gssapi-with-mic<br />debug1: Authentication succeeded (gssapi-with-mic).<br />Authenticated to newhost ([SERVER IP]:22).</div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">Second, can you create an account on the server that does not need to<br /> authenticate via Kerberos, and attempt a regular user/password or SSH<br /> Public Keyfile login, to see if that works? If that doesn't work, then<br /> your X2Go installation (server, client, or both) is botched somehow, and<br /> the issue is independent of Kerberos.</div>
</blockquote>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">I'm not sure if I got that right. If you're asking me to create another user account (on the X2Go server) and attempt a regular X2Go login, without kerberos, then yes, it does work fine with X2Go and SSH with password authentication.</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">One thing that I noticed on the SSH Logs on the server is that the failed X2Go kerberos authentication attemps are actually sucessfull but disconnect IMMEDIATLY after being done. This does not happen with a password based X2Go connection. Take a look:</div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div class="de1">Jan 24 09:43:04 newhost sshd[10146]: Authorized to remoto, krb5 principal remoto@KERBEROS.COM (krb5_kuserok)</div>
<div class="de1">Jan 24 09:43:04 newhost sshd[10146]: Accepted gssapi-with-mic for remoto from [CLIENT IP] port 33428 ssh2: remoto@KERBEROS.COM</div>
<div class="de1">Jan 24 09:43:04 newhost sshd[10146]: pam_unix(sshd:session): session opened for user remoto by (uid=0)</div>
<div class="de1">Jan 24 09:43:04 newhost systemd-logind[554]: New session 12 of user remoto.</div>
<div class="de2">Jan 24 09:43:04 newhost sshd[10210]: Received disconnect from [CLIENT IP] port 33428:11: disconnected by user</div>
<div class="de1">Jan 24 09:43:04 newhost sshd[10210]: Disconnected from user remoto [CLIENT IP] port 33428</div>
<div class="de1">Jan 24 09:43:04 newhost sshd[10144]: dispatch_protocol_error: type 90 seq 3 [preauth]</div>
<div class="de1">Jan 24 09:43:04 newhost sshd[10146]: pam_unix(sshd:session): session closed for user remoto</div>
<div class="de1">Jan 24 09:43:04 newhost systemd-logind[554]: Removed session 12.</div>
</blockquote>
<div class="de1"> </div>
<div class="de1">Could this be related to that socket error mentioned on the X2Go --debug verbose?</div>
<div class="de1"> </div>
<div class="de1">Regards,</div>
<div class="de1">Rubens.</div>
</body></html>