Re: [X2Go-Dev] Bug#782: x2goclient next login without password after logout

Hi,

Passwords and stuff like that should ALWAYS be discarded immediately after use.

In other words... as soon as your authenticated (or at least tried to authenticate), get rid of it!

On 02/05/2015 12:40 PM, Sergey Savko wrote:

Package: x2goclient Version: 4.0.3.2 Severity: grave

x2goclient start in broker mode with «--broker-autologoff» parameter. At the end of the session the user get into the authentication window, we can press the "OK" button and connect without a password under the user who last connected to the system. Video: http://youtu.be/dXu_clQfCtc

Add lines config.brokerPass.clear(); config.brokerUser.clear(); in the function "void ONMainWindow :: slotGetBrokerAuth ()" does not help.