x2go-user November 2017

x2go-user@lists.x2go.org

23 participants
27 discussions

Re: [X2Go-User] ssh kex error
by is＠k4ts.net 13 Nov '18

13 Nov '18

Am 19.10.2015 17:06, schrieb Robert Dinse: > the new version of openssh disabled certain insecure > ciphers... Version7 is what you mean. I use 6.9 on both client and server. > you can add > the following line to your /etc/ssh/sshd_config manually enable the > insecure old ciphers: > > KexAlgorithms > curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 Adding these ciphers doesn't help - same algo error, Thats wired coz I can ssh to the server without any issues. > -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- > Eskimo North Linux Friendly Internet Access, Shell Accounts, and > Hosting. > Knowledgeable human assistance, not telephone trees or script > readers. > See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) > 246-6874. > > On Mon, 19 Oct 2015, is(a)k4ts.net wrote: > >> Date: Mon, 19 Oct 2015 15:12:43 +0200 >> From: is(a)k4ts.net >> To: x2go-user(a)lists.x2go.org >> Subject: [X2Go-User] ssh kex error >> >> hi, i'm not able to connect >> to my new hardened gentoo server using x2go. >> >> No matter which key type i select for the connection, >> the client (v. 4.0.5.0) terminates with the following: >> >> kex error : no match for method server host key algo: >> server [ssh-rsa,ssh-ed25519], client [ecdsa-sha2-nistp256] >> >> I have rsa and ed25519 keys on my client and server. >> >> sshing from the shell works like always. log is attached. >> >> do you have an idea, whats might wrong? >> >> thx, >> k4t >> >> k4tfish@e10 ~ $ ssh k4tfish@host >> OpenSSH_6.9p1-hpn14v5, OpenSSL 1.0.2d 9 Jul 2015 >> debug1: Reading configuration data /etc/ssh/ssh_config >> debug1: Connecting to host.net port 51822. >> debug1: Connection established. >> debug1: identity file /home/k4tfish/.ssh/id_rsa type 1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_rsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_dsa type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_dsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_ecdsa type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_ecdsa-cert type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_ed25519 type -1 >> debug1: key_load_public: No such file or directory >> debug1: identity file /home/k4tfish/.ssh/id_ed25519-cert type -1 >> debug1: Enabling compatibility mode for protocol 2.0 >> debug1: Local version string SSH-2.0-OpenSSH_6.9p1-hpn14v5 >> debug1: Remote protocol version 2.0, remote software version >> OpenSSH_6.9p1-hpn14v5 >> debug1: match: OpenSSH_6.9p1-hpn14v5 pat OpenSSH* compat 0x04000000 >> debug1: Authenticating to host...net:51822 as 'k4tfish' >> debug1: SSH2_MSG_KEXINIT sent >> debug1: SSH2_MSG_KEXINIT received >> debug1: AUTH STATE IS 0 >> debug1: REQUESTED ENC.NAME is 'chacha20-poly1305(a)openssh.com' >> debug1: kex: server->client chacha20-poly1305(a)openssh.com <implicit> >> none >> debug1: REQUESTED ENC.NAME is 'chacha20-poly1305(a)openssh.com' >> debug1: kex: client->server chacha20-poly1305(a)openssh.com <implicit> >> none >> debug1: expecting SSH2_MSG_KEX_ECDH_REPLY >> debug1: Server host key: ssh-ed25519 SHA256:xyz >> debug1: Host '[host.net]:51822' is known and matches the ED25519 host >> key. >> debug1: Found key in /home/k4tfish/.ssh/known_hosts:203 >> debug1: SSH2_MSG_NEWKEYS sent >> debug1: expecting SSH2_MSG_NEWKEYS >> debug1: SSH2_MSG_NEWKEYS received >> debug1: Roaming not allowed by server >> debug1: SSH2_MSG_SERVICE_REQUEST sent >> debug1: SSH2_MSG_SERVICE_ACCEPT received >> debug1: Authentications that can continue: >> publickey,password,keyboard-interactive >> debug1: Next authentication method: publickey >> debug1: Offering RSA public key: /home/k4tfish/.ssh/id_rsa >> debug1: Server accepts key: pkalg ssh-rsa blen 279 >> debug1: Authentication succeeded (publickey). >> Authenticated to host ([123.123.456.7]:51822). >> debug1: Final hpn_buffer_size = 2097152 >> debug1: HPN Disabled: 0, HPN Buffer Size: 2097152 >> debug1: channel 0: new [client-session] >> debug1: Enabled Dynamic Window Scaling >> debug1: Requesting no-more-sessions(a)openssh.com >> debug1: Entering interactive session. >> debug1: client_input_global_request: rtype hostkeys-00(a)openssh.com >> want_reply 0 >> debug1: Sending environment. >> debug1: Sending env LC_COLLATE = C >> debug1: Sending env LANG = en_US.utf8 >> >> _______________________________________________ >> x2go-user mailing list >> x2go-user(a)lists.x2go.org >> http://lists.x2go.org/listinfo/x2go-user >>

3 3

It might be that we already have KDE5/Plasma support ...
by Stefan Baur 01 Oct '18

01 Oct '18

Hi $LIST, According to Mike#1, who currently attends DebConf in Montreal, Debian 9 + X2Go Stable + KDE5/Plasma have been shown to work together. This is a single report so far, though. If anyone is willing and able to test and confirm this, it would be highly appreciated. Another test result we'd be interested in would be what happens if you use Arctica NX-Libs and X2Go Heuler instead of X2Go Stable. Kind Regards, Stefan Baur -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243

7 15

Upcoming Deprecation of (Almost) EOL Distributions
by Mihai Moldovan 07 Feb '18

07 Feb '18

Hi In order to lower resource stress when building packages, I plan to deprecate support for distributions that have (almost) reached End Of Life on December 31th 2017. This includes the following distro versions: - Debian: o 7.0 "wheezy" - Fedora o 23 o 24 o 25 - OpenSuSE o 13.1 o 13.2 o 42.1 Ubuntu builds are ceased automatically after upstream deprecation. After deprecation, no new builds will be published and existing builds will be moved to the archive repositories to discourage users from installing unmaintained software. Mihai

2 2

can't connect to session
by Andrew Munn 24 Jan '18

24 Jan '18

Sometimes x2go works fine. Other times I can't get the session back and logs look like this. server version 4.0.1.20. Same results occur when connecting from my Windows or Linux client. $ uname -a Linux hercules 3.10.0-514.26.2.el7.x86_64 #1 SMP Tue Jul 4 15:04:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux ==> messages <== Nov 18 02:00:32 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully ==> secure <== Nov 18 02:00:35 hercules sshd[33053]: Accepted password for andrew from 104.133.2.65 port 42971 ssh2 ==> messages <== Nov 18 02:00:35 hercules systemd-logind: New session 13589 of user andrew. Nov 18 02:00:35 hercules systemd: Started Session 13589 of user andrew. Nov 18 02:00:35 hercules systemd: Starting Session 13589 of user andrew. ==> secure <== Nov 18 02:00:35 hercules sshd[33053]: pam_unix(sshd:session): session opened for user andrew by (uid=0) ==> messages <== Nov 18 02:00:41 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:00:44 hercules su: (to andrew) root on none Nov 18 02:00:44 hercules systemd: Started Session c387 of user andrew. Nov 18 02:00:44 hercules systemd: Starting Session c387 of user andrew. ==> secure <== Nov 18 02:00:44 hercules su: pam_unix(su:session): session opened for user andrew by (uid=0) Nov 18 02:00:44 hercules su: pam_unix(su:session): session closed for user andrew ==> messages <== Nov 18 02:00:44 hercules su: (to andrew) root on none Nov 18 02:00:44 hercules systemd: Started Session c388 of user andrew. Nov 18 02:00:44 hercules systemd: Starting Session c388 of user andrew. ==> secure <== Nov 18 02:00:44 hercules su: pam_unix(su:session): session opened for user andrew by (uid=0) ==> messages <== Nov 18 02:00:45 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:00:46 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully ==> secure <== Nov 18 02:00:47 hercules su: pam_unix(su:session): session closed for user andrew ==> messages <== Nov 18 02:00:50 hercules /usr/sbin/x2gocleansessions[3217]: andrew-51-1508260775_stDMATE_dp32: session status S desynchronized with current status (R) and session suspend already tried unsuccessfully Nov 18 02:00:50 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:00:54 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:01:00 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:01:01 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:01:01 hercules systemd: Created slice user-0.slice. Nov 18 02:01:01 hercules systemd: Starting user-0.slice. Nov 18 02:01:01 hercules systemd: Started Session 13590 of user root. Nov 18 02:01:01 hercules systemd: Starting Session 13590 of user root. Nov 18 02:01:01 hercules systemd: Removed slice user-0.slice. Nov 18 02:01:01 hercules systemd: Stopping user-0.slice. Nov 18 02:01:03 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully Nov 18 02:01:07 hercules /usr/bin/x2gosuspend-session: session with ID andrew-51-1508260775_stDMATE_dp32 has been suspended successfully

4 16

Fwd: X2Go on a Mac using nightly builds to Fedora 26 keystroke problem, LibreOffice menu fonts squished and loss of focus
by Robert Kudyba 29 Nov '17

29 Nov '17

Resending to see if anyone has any ideas? > Begin forwarded message: > > From: Robert Kudyba <rkudyba(a)fordham.edu> > Subject: X2Go on a Mac using nightly builds to Fedora 26 keystroke problem, LibreOffice menu fonts squished and loss of focus > Date: November 17, 2017 at 10:53:30 AM EST > To: x2go-dev(a)lists.x2go.org > > We have a Mac High Sierra user on the nightly builds connecting to a Fedora 26 workstation also on nightly builds with x2goserver-4.1.0.0-0.0x2go1.0.git20171111.1441.heuler.fc26.x86_64 > > Using MATE, keystrokes don't echo properly. If he types "ls" into a Terminal window, a "k" appears. > > XFCE works fairly well. The main complaint is that menus on LibreOffice are all squashed together. Screenshot at https://drive.google.com/open?id=1H7RPVP0qxqB_37Slbba8rlqdcITaEiDN <https://drive.google.com/open?id=1H7RPVP0qxqB_37Slbba8rlqdcITaEiDN> > > Also, he stills getting "loss of focus". At more-or-less random times, the window in which he's typing quits reacting to his keystrokes. Clicking into the window resumes the focus. > > This is the same user that had the mixed nx-ibs packages issue.

2 1

CentOS6 Servers
by Robert Dinse 29 Nov '17

29 Nov '17

If you have users on a CentOS6 platform and it is up to date, and they use the gnome desktop, you'll probably get a pop-up that says, "Authentication is required to set the network proxy used for downloading packages An application is attempting to perform an action that requires privleges. Authentication as the super user is required to perform this action". A fix per the Red Hat solutions site: "Add X-GNOME-Autostart-enabled=false to the end of the /etc/xdg/autostart/gpk-update-icon.desktop file." This works, it also fixes a similar pop-up in vnc. -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- Eskimo North Linux Friendly Internet Access, Shell Accounts, and Hosting. Knowledgeable human assistance, not telephone trees or script readers. See our web site: http://www.eskimo.com/ (206) 812-0051 or (800) 246-6874.

1 0

Can't access X2go through router
by Paul Borowicz 28 Nov '17

28 Nov '17

Bill, could this be your problem? https://wiki.x2go.org/doku.php/doc:faq:start Known Issues Can't login to x2goserver with an ECDSA key Currently, older versions of the ssh library used by X2Go called libssh are unable to work with ECDSA keys. However you may use an RSA key - if you need to - or go with the SSH default authenticating method using the remote user's password. SSH Login issue If you already use OpenSSH to get a shell on your x2go server, you may get this message when trying to connect with x2go: The host key for this server was not found but an othertype of key exists. An attacker might change the default server key to confuse your client into thinking the key does not exist This is related to the ECDSA host key (related to the previous FAQ entry - although there is a subtle difference between host and client keys.) To solve this issue, you can disable ECDSA keys on your OpenSSH server configuration, by commenting the following line in /etc/ssh/sshd_config file: #HostKey /etc/ssh/ssh_host_ecdsa_key Then restart the SSH service. Now you should not get the error message anymore.

3 2

Problem connecting
by Paul Borowicz 27 Nov '17

27 Nov '17

I've always had no problems connecting to x2go with only port 22 open on my router. Just recently I've been unable to connect. I turned on debugging and see my client connecting in the system logs: client X.X.X.X has successfully resumed session with ID paul-50-1511705558_stDXFCE_dp32 However, on the client I get an error that says "could not establish connection to remote proxy" I see this error repeating when I run the client with a --debug flag: 2go-DEBUG-../src/onmainwindow.cpp:10759> "Searching proxy window: X2GO-paul-50-1511705558_stDXFCE_dp32" x2go-DEBUG-../src/onmainwindow.cpp:12465> "Searching window with title: X2GO-paul-50-1511705558_stDXFCE_dp32" I'm not using a proxy for the internet. Paul

1 0

install x2gobroker
by "BOTZ Franck (Administrateur Systèmes et Résea ux) - DDT 67/SIDSIC/Pôle Infra" 27 Nov '17

27 Nov '17

Hi My system : ubuntu server 16.04 dpkg -l | grep x2gobroker ii python-x2gobroker 0.0.3.3-0~948~ubuntu16.04.1 all X2Go Session Broker (Python modules) ii x2gobroker 0.0.3.3-0~948~ubuntu16.04.1 all X2Go Session Broker (executable) ii x2gobroker-loadchecker 0.0.3.3-0~948~ubuntu16.04.1 all X2Go Session Broker (load checker service) ii x2gobroker-ssh 0.0.3.3-0~948~ubuntu16.04.1 amd64 X2Go Session Broker (SSH broker) My sources.list ###### Ubuntu Main Repos deb http://fr.archive.ubuntu.com/ubuntu/ xenial main restricted universe multiverse ###### Ubuntu Update Repos deb http://fr.archive.ubuntu.com/ubuntu/ xenial-security main restricted universe multiverse deb http://fr.archive.ubuntu.com/ubuntu/ xenial-updates main restricted universe multiverse # Dépot X2GO server (nightly build) deb http://ppa.launchpad.net/x2go/ppa/ubuntu xenial main When i install x2gobroker i've got this error message : apt-get install x2gobroker -s Lecture des listes de paquets... Fait Construction de l'arbre des dépendances Lecture des informations d'état... Fait Certains paquets ne peuvent être installés. Ceci peut signifier que vous avez demandé l'impossible, ou bien, si vous utilisez la distribution unstable, que certains paquets n'ont pas encore été créés ou ne sont pas sortis d'Incoming. L'information suivante devrait vous aider à résoudre la situation : Les paquets suivants contiennent des dépendances non satisfaites : x2gobroker : Dépend: python3-wsgilog mais il n'est pas installable Dépend: python3-x2gobroker (>= 0.0.4.0-0~972~ubuntu16.04.1) mais ne sera pas installé Dépend: python3-x2gobroker (< 0.0.4.0-0~972~ubuntu16.04.1.1~) mais ne sera pas installé E: Impossible de corriger les problèmes, des paquets défectueux sont en mode « garder en l'état ». How to correct this dependancy problem ? Thanks. Franck

6 7

USB forwarding documentation
by Seth Galitzer 21 Nov '17

21 Nov '17

I know this is a FAQ, but I've been unable to find an answer on my own. I'd like to be able to redirect a local USB flash drive to a remote Windows host. I'm using TCE from a debian image deployed to my thin client devices. If this is possible, what's the magic recipe to make this work? Thanks. Seth -- Seth Galitzer Systems Coordinator Computer Science Department Kansas State University http://www.cs.ksu.edu/~sgsax sgsax(a)ksu.edu 785-532-7790

3 12

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

x2go-user November 2017