x2go-dev December 2024

x2go-dev@lists.x2go.org

4 participants
6 discussions

Bug#1375: Deprecated UsePrivilegeSeparation option hard coded in client
by Orion Poplawski 04 Apr '25

04 Apr '25

Package: x2goclient https://bugzilla.redhat.com/show_bug.cgi?id=1680283 Bug ID: 1680283 Summary: Deprecated UsePrivilegeSeparation option hard coded in client Product: Fedora Version: 29 Status: NEW Component: x2goclient Assignee: orion(a)nwra.com Reporter: horsley1953(a)gmail.com QA Contact: extras-qa(a)fedoraproject.org CC: orion(a)nwra.com Target Milestone: --- Classification: Fedora Description of problem: Every time I start an x2go session from home to work, I get this error in my message log: Feb 12 08:24:03 zooty sshd[3479]: rexec line 2: Deprecated option UsePrivilegeSeparation Looking in all the files installed by all the x2go related rpm packages, I find this: fgrep -n UsePrivilegeSeparation `rpm -q --list $i` 2>/dev/null Binary file /usr/bin/x2goclient matches Version-Release number of selected component (if applicable): x2goclient-4.1.2.1-1.fc29.x86_64 How reproducible: 100% Steps to Reproduce: 1.start x2go session 2.see error show up in log 3. Actual results: log error Expected results: no log error Additional info: Don't know when they will really remove the option, but I presume x2go will cease functioning when it becomes an error rather than a deprecation warning. -- You are receiving this mail because: You are on the CC list for the bug. You are the assignee for the bug.

2 1

x2go Windows client crashes with Putty Pageant with long RSA 4096 keys
by Gerhard Wiesinger 05 Feb '25

05 Feb '25

Hello, I'm having a crash problem with latest version (also previous ones) with ssh private key authentication and Putty Pageant. Looks like there is a buffer overflow involved. With several smaller keys (e.g. ssh-ed25519) it works well. I found a scenario to reproduce it: 1. Generate a RSA 4096 Bit length private/public key pair 2. Load it on the Windows client into Putty Pageant 3. Put public key at the server at ~/.ssh/authorized_keys 4. open connection to the server => crash, see logs Looks like it is a bug in the old libssh library version with large private/public keys. Can you please fix the topic. Some questions: - Is the used libssh version really version 0.9.2? - The logs have some entries with: agent_talk - len of request - That has been changed in git to another logging in 2011: https://git.libssh.org/projects/libssh.git/commit/?id=ba4f10dc4657952ec47f7… - Version 0.9.2 has been released in 2019: https://www.libssh.org/2019/11/07/libssh-0-9-2/ - So it looks, not the version 0.9.2 is used - Any plans to upgrade to latest version of libssh 0.11.0 while keeping Putty Pageant Agent support? - Upgrade plans to newer Putty version? - Is there a newer nightly Windows build from newer git sources available? Version: - X2Go Client 4.1.2.3-ba65703-kdrclient-a3134d6 - according to the logs: ssh_connect: libssh 0.9.2 (c) 2003-2019 Aris Adamantiadis, Andreas Schneider and libssh contributors. Distributed under the LGPL, please refer to COPYING file for information about your rights, using threading threads_pthread - Server: (not relevant but version is: x2goserver-4.1.0.6-4.fc41.x86_64) Thnx. Ciao, Gerhard Relevant debug log file on the client: x2go-DEBUG-src\sshmasterconnection.cpp:674> Setting SSH directory to C:/Users/user/ssh [2024/12/17 08:03:09.904803, 3] : agent_talk - len of request: 1 [2024/12/17 08:03:09.904803, 3] : agent_talk - response length: 568 [2024/12/17 08:03:09.904803, 1] ssh_agent_get_ident_count: Answer type: 12, expected answer: 12 [2024/12/17 08:03:09.904803, 3] ssh_agent_get_ident_count: Agent count: 1 [2024/12/17 08:03:09.904803, 3] ssh_userauth_agent: Trying identity rsa-key-20241217 [2024/12/17 08:03:09.904803, 3] ssh_key_algorithm_allowed: Checking rsa-sha2-512 with list <ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss> [2024/12/17 08:03:09.904803, 3] ssh_key_algorithm_allowed: Checking rsa-sha2-512 with list <ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss> [2024/12/17 08:03:09.904803, 3] packet_send2: packet: wrote [type=5, len=32, padding_size=14, comp=17, payload=17] [2024/12/17 08:03:09.904803, 3] ssh_service_request: Sent SSH_MSG_SERVICE_REQUEST (service ssh-userauth) [2024/12/17 08:03:09.904803, 3] ssh_socket_unbuffered_write: Enabling POLLOUT for socket [2024/12/17 08:03:09.949398, 3] ssh_packet_socket_callback: packet: read type 6 [len=32,padding=14,comp=17,payload=17] [2024/12/17 08:03:09.949398, 3] ssh_packet_process: Dispatching handler for packet type 6 [2024/12/17 08:03:09.949398, 3] ssh_packet_service_accept: Received SSH_MSG_SERVICE_ACCEPT [2024/12/17 08:03:09.949398, 3] ssh_socket_unbuffered_write: Enabling POLLOUT for socket [2024/12/17 08:03:09.949398, 3] packet_send2: packet: wrote [type=50, len=608, padding_size=11, comp=596, payload=596] [2024/12/17 08:03:09.959352, 3] ssh_packet_socket_callback: packet: read type 60 [len=576,padding=19,comp=556,payload=556] [2024/12/17 08:03:09.959352, 3] ssh_packet_process: Dispatching handler for packet type 60 [2024/12/17 08:03:09.959352, 3] ssh_userauth_agent: Public key of rsa-key-20241217 accepted by server [2024/12/17 08:03:09.959352, 3] ssh_key_algorithm_allowed: Checking rsa-sha2-512 with list <ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss> [2024/12/17 08:03:09.959352, 3] ssh_key_algorithm_allowed: Checking rsa-sha2-512 with list <ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com,ssh-dss-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp521,ecdsa-sha2-nistp384,ecdsa-sha2-nistp256,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss> [2024/12/17 08:03:09.959352, 3] : agent_talk - len of request: 1180 QObject::~QObject: Timers cannot be stopped from another thread <---------- CRASH HERE ---------->

3 3

Sunday, Dec 29th - Last X2Go and orca e.V. Sponsorship Drive for 2024
by Vorstand ORCA e.V. 28 Dec '24

28 Dec '24

Dear $ALL, We hope you had some happy, relaxing and peaceful holidays over the last few days. As a quick reminder, tomorrow would be a good time to help out X2Go (and orca e.V.) financially. While we have received some donations to the general X2Go donation pool, which we can reassign as needed, donations towards our event budget have stalled for the last 5 months or so - only one recent donation has since shown up. This budget is used to cover costs for having handouts/posters printed for our booths, as well as travel/accommodation costs for our volunteers. It would be really cool if you could send some $$$/€€€/£££/¥¥¥ our way, so we can reimburse our volunteers, who have been covering all the costs up-front our of their own pockets. We can accept donations via PayPal, Credit Card, Direct Debit, giropay/paydirect and wire transfer. Best of all, donations towards X2Go and orca are usually tax deductible for German tax subjects. Until December 29th, non-recurring donations up to 100 Euro made on any Sunday during December 2024 will be matched by Betterplace with an additional 15%. This offer is only valid until a funding pool of 4 000 Euro is depleted (per Sunday). So the earlier you donate on these Sundays, the higher the chance that your donation will receive the bonus. As tomorrow is the last of those Sundays, we hope you are willing and able to chip in, so we can keep hosting and attending events like these. To donate towards X2Go's events (posters, handouts, travel, lodging, …), please use one of these links: * English-language donation form: <https://www.betterplace.org/en/projects/131360?wirwunder=235> * German-language donation form: <https://www.betterplace.org/de/projects/131360?wirwunder=235> Further donation links (infrastructure, X2Go in general, orca e.V.) can be found right at the very top of the X2Go Wiki: <https://wiki.x2go.org/> If times are rough for you and you can't afford to donate, don't feel bad! You can also help us by forwarding this announcement to whomever you seem fit - e.g. your local Linux user group, your social media followers, etc. Another way to help us is to be vocal about what you need X2Go for and how it would hurt you if it would no longer be available - we're trying to apply for public funding, so if you're using X2Go in the public sector (i.e. education, research, health care, energy, industry), please do let us know how X2Go ceasing to exist would affect you. Kind Regards, Stefan Baur, first chairman of the board, Open Remote Computing Association - orca e.V.

1 0

X2Go: The Spread 2024 recordings online/X2Go and orca e.V. Sponsorship Drive
by Vorstand ORCA e.V. 14 Dec '24

14 Dec '24

Dear $ALL, Some of you might have missed it, as it wasn't announced on the mailing lists, only on the Wiki, due to massive time constraints/understaffing, but - we did indeed have an X2Go: The Spread 2024 virtual event. Which makes 2024 the first, and probably the only year where we had both an in-person/hybrid "X2Go: The Gathering" and a virtual "X2Go: The Spread" event. You can read up about what you've missed on <https://wiki.x2go.org/doku.php/events:x2go-spread-2024>, where you will find links to recordings of each day (save for Thursday - that was a live debugging session, so we didn't bother recording it). Here's a quick overview of the presentations/discussions: Monday * X2Go's State of the Union, Part 2 (Part 1 was presented at X2Go: The Gathering 2024) * X2Go's Funding Situation, Part 1: Sovereign Tech Fund Tuesday * Demo: Portable DHCP proxy with X2Go-TCE-live Netboot (a follow-up to X2Go: The Spread 2023's Thursday presentation) * Progress Report re: KDrive on arm64 * OSUOSL Behind-The-Scenes Update Wednesday * X2Go's Funding Situation, Part 2: orca/Betterplace * Gitlab Status Report Thursday * KDrive debugging Friday * Secure Remote Access Even to Old Windows XP Systems - Thanks to X2Go and a Raspberry Pi * NX-libs update * “Mr. Eyebot V2.0” - Quick Explanation and Demo Or, if you want to watch all recordings back to back, head straight over to YouTube, where we have prepared a playlist for you: <https://youtube.com/playlist?list=PLWDo4PkY3E0My_exV1bT7z5vOA63P5mqN&featur…> If you like what we're doing, now would be a good time to help us out financially. While we have received some donations to the general X2Go donation pool, which we can reassign as needed, donations towards our event budget have stalled for the last 5 months or so. This budget is used to cover costs for having handouts/posters printed for our booths, as well as travel/accommodation costs for our volunteers. It would be really cool if you could send some $$$/€€€/£££/¥¥¥ our way, so we can reimburse our volunteers, who have been covering all the costs up-front our of their own pockets. We can accept donations via PayPal, Credit Card, Direct Debit, giropay/paydirect and wire transfer. Best of all, donations towards X2Go and orca are usually tax deductible for German tax subjects. Until December 29th, non-recurring donations up to 100 Euro made on any Sunday during December 2024 will be matched by Betterplace with an additional 15%. This offer is only valid until a funding pool of 4 000 Euro is depleted (per Sunday). So the earlier you donate on these Sundays, the higher the chance that your donation will receive the bonus. As tomorrow is one of those Sundays, we hope you are willing and able to chip in, so we can keep hosting and attending events like these. To donate towards X2Go's events (posters, handouts, travel, lodging, …), please use one of these links: * English-language donation form: <https://www.betterplace.org/en/projects/131360?wirwunder=235> * German-language donation form: <https://www.betterplace.org/de/projects/131360?wirwunder=235> Further donation links (infrastructure, X2Go in general, orca e.V.) can be found right at the very top of the X2Go Wiki: <https://wiki.x2go.org/> If times are rough for you and you can't afford to donate, don't feel bad! You can also help us by forwarding this announcement to whomever you seem fit - e.g. your local Linux user group, your social media followers, etc. Another way to help us is to be vocal about what you need X2Go for and how it would hurt you if it would no longer be available - we're trying to apply for public funding, so if you're using X2Go in the public sector (i.e. education, research, health care, energy, industry), please do let us know how X2Go ceasing to exist would affect you. Kind Regards, Stefan Baur, first chairman of the board, Open Remote Computing Association - orca e.V.

1 0

Reminder: X2Go and orca e.V. Sponsorship Drive (100% Matching) Tomorrow, 2024-12-06
by Vorstand ORCA e.V. 05 Dec '24

05 Dec '24

Dear $ALL, This is just a quick reminder that there will be another X2Go and orca e.V. sponsorship drive tomorrow, starting at 09:00 CET. We are still in need of almost 300 EUR to cover this year's hosting costs, and we're a good 2 100 EUR short in the "events" category, covering costs relating having handouts/posters printed for our booths, and travel/accommodation costs for our volunteers. Non-recurring donations up to 100 Euro made on Friday, 2024-12-06 (starting 09:00 CET and ending 23:59 CET) will be matched 100% by the Commercial and Savings Bank Ulm. This offer is only valid until a funding pool of 10 000 Euro is depleted. So the earlier you donate (past 09:00 CET) on this particular day, the higher the chance that your donation will receive the bonus. The donation links can be found right at the very top of the X2Go Wiki: <https://wiki.x2go.org/> To donate towards X2Go's events (posters, handouts, travel, lodging, …), please use one of these: * English-language donation form: <https://www.betterplace.org/en/projects/131360?wirwunder=235> * German-language donation form: <https://www.betterplace.org/de/projects/131360?wirwunder=235> To donate towards X2Go's infrastructure (hosting costs and the like), please use one of these: * English-language donation form: <https://www.betterplace.org/en/projects/131358?wirwunder=235> * German-language donation form: <https://www.betterplace.org/de/projects/131358?wirwunder=235> If times are rough for you and you can't afford to donate, don't feel bad! You can also help us by forwarding this announcement to whomever you seem fit - e.g. your local Linux user group, your social media followers, etc. Another way to help us is to be vocal about what you need X2Go for and how it would hurt you if it would no longer be available - we're trying to apply for public funding, so if you're using X2Go in the public sector (i.e. education, research, health care, energy, industry), please do let us know how X2Go ceasing to exist would affect you. Kind Regards, Stefan Baur, first chairman of the board, Open Remote Computing Association - orca e.V.

1 0

Bug#1631: KDE needs pty to work.
by Arne Wichmann 01 Dec '24

01 Dec '24

Package: x2gobroker-agent Version: 0.0.4.3-4 Hello. We had some problems getting KDE to work with x2gobroker-agent.pl . They could be solved by allowing PTY's like in the appended patch: --- x2gobroker-agent.pl 2024-08-19 12:47:08.593650476 +0200 +++ x2gobroker-agent.pl.distrib 2023-05-19 10:54:13.000000000 +0200 @@ -90,9 +90,6 @@ { my ($uid, $uidNumber, $gidNumber, $home, $pubkey, $authkeyfile)=@_; - #martin allow pty, kde isnt running otherwise - $pubkey =~ s/no-pty,//; - # rewrite %%, %u, %U, %G and %h in authkeyfile string $authkeyfile =~ s/%u/$uid/; $authkeyfile =~ s/%U/$uidNumber/; @@ -125,9 +122,6 @@ { my ($uid, $uidNumber, $gidNumber, $home, $pubkey, $authkeyfile)=@_; - #martin allow pty, kde isnt running otherwise - $pubkey =~ s/no-pty,//; - # rewrite %%, %u, %U, %G and %h in authkeyfile string $authkeyfile =~ s/%u/$uid/; $authkeyfile =~ s/%U/$uidNumber/; --- cu AW -- Arne Wichmann, Försterstraße 32, 66111 Saarbrücken

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

x2go-dev December 2024