x2go-user April 2020

x2go-user@lists.x2go.org

24 participants
19 discussions

Question about the change in proxy/nx3.py
by Pavel 30 Apr '20

30 Apr '20

Hi, I am using my own small python application which is based on X2GoClient class from python-x2go. The application runs on windows, so it is necessary to start nxproxy.exe. The binary sits in C:\Users\user\win_apps\nxproxy\nxproxy.exe and in my app I set the environment variable NXPROXY_BINARY pointing to this path. This whole thing worked very well with python-x2go==0.5.0.6. Now I am on my way from Python2 to Python3, so I noticed, the newer version of python-x2go is also trying to be Python3 compatible. I made the necessary changes in my app and updated python-x2go to 0.6.1.3. But my application stopped to work. The reason was, nxproxy.exe didn't start. I tried to find out the problem and noticed there is an error log file in C:\users\user\.x2go\S-user-50-1588199962_stRxterm_dp32 containing: Loop: PANIC! Can't open options file '.\..\S-user-50-1588199962_stRxterm_dp32\options'. Error is 2 'No such file or directory'. Error: Can't open options file '.\..\S-user-50-1588199962_stRxterm_dp32\options'. Error is 2 'No such file or directory'. So I looked further and noticed this change in nx3.py between 0.6.0.2 and 0.6.1.0: - self.PROXY_OPTIONS= [ 'nx/nx', 'options=%s' % os.path.join("\\", "..", "S-%s" % self.session_info.name, 'options'), ] + self.PROXY_OPTIONS= [ 'nx/nx', 'options=%s' % os.path.join(".", "..", "S-%s" % self.session_info.name, 'options'), ] I reverted this change and my app worked correctly again. Now my question is: what is the motivation to change the path to options file and eventually, if the change is correct, what should I do in my app to be able to start nxproxy.exe again? The path to options file look as relative path, but to what? To nxproxy binary, or to nxproxy directory, or to session_id directory? The explanation would be very welcome. Thanks in advance. Pavel

1 0

X2Go, MFA and Duo?
by James M. Pulver 28 Apr '20

28 Apr '20

Has anyone ever used X2Go Client (windows, linux, mac) with some sort of MFA that works in SSH? Duo and PortalGuard both support SSH MFA with either a "line client" or easier IMHO an appended password. I was wondering if Duo with the appended code to the password field might work? Also, is there any plans to add a second password field to the clients al la Cisco AnyConnect etc? Thanks, -- James Pulver CLASSE Computer Group Cornell University

3 2

x2go over wayland now working?
by Neal Becker 27 Apr '20

27 Apr '20

I just updated to kde-20 on fedora 31, and once again trying kde over wayland. Previously x2go wouldn't work, but trying it now it seems to be working!

2 7

Is there a broker that does NOT require root to install?
by Dr Agile 26 Apr '20

26 Apr '20

I have a shared host in Namecheap. I have SSH access, but no root, so no APT-GET. I do have wsgi, with limited access to the httpd conf files, and do have access to .htaccess though. Is there a precompiled static binary, or a python / php script I can use with apache?

2 3

Re: [X2Go-User] X2Go, MFA and Duo?
by J.Witvliet＠mindef.nl 25 Apr '20

25 Apr '20

That’s the point. Gpg-cards. We too had those sun-machines for evaluation, but declined. When ones whole organization is using PKI, with 65,000 cards around, pkcs11 is essential. Would be nice to have a proper Citrix alternative. From: "Stefan Baur" <X2Go-ML-1(a)baur-itcs.de<mailto:X2Go-ML-1@baur-itcs.de>> Date: Friday, 24 April 2020 at 20:24:56 To: "Witvliet, J, Ing., DMO/JIVC/GIT&INFRA/ITT" <J.Witvliet(a)mindef.nl<mailto:J.Witvliet@mindef.nl>>, "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org<mailto:x2go-user@lists.x2go.org>> Subject: Re: [X2Go-User] X2Go, MFA and Duo? Am 24.04.20 um 20:12 schrieb J.Witvliet(a)mindef.nl: > One obviously missing, is a SmartCard, loaded with SSL keys & certificates, that should be reachable through P11 (or pkcs11) library... We have SmartCard support as well (quite obviously, as X2Go started out as a replacement for SunRay workstations), that's just handled differently. But it's possible to authenticate using a GnuPG card that has SSH keys stored on it, for example. -Stefan -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

3 2

Re: [X2Go-User] X2Go, MFA and Duo?
by J.Witvliet＠mindef.nl 24 Apr '20

24 Apr '20

One obviously missing, is a SmartCard, loaded with SSL keys & certificates, that should be reachable through P11 (or pkcs11) library... From: "Stefan Baur" <X2Go-ML-1(a)baur-itcs.de<mailto:X2Go-ML-1@baur-itcs.de>> Date: Friday, 24 April 2020 at 18:44:51 To: "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org<mailto:x2go-user@lists.x2go.org>> Subject: Re: [X2Go-User] X2Go, MFA and Duo? Am 24.04.20 um 18:01 schrieb James M. Pulver: > Has anyone ever used X2Go Client (windows, linux, mac) with some sort of MFA that works in SSH? Duo and PortalGuard both support SSH MFA with either a "line client" or easier IMHO an appended password. I was wondering if Duo with the appended code to the password field might work? Also, is there any plans to add a second password field to the clients al la Cisco AnyConnect etc? X2GoClient has out-of-the-box support for several 2FA solutions: <https://code.x2go.org/gitweb?p=x2goclient.git;a=blob;f=src/sshmasterconnect…> 53 "Verification code:", // GA (http://github.com/google/google-authenticator) 54 "One-time password (OATH) for", // OATH (http://www.nongnu.org/oath-toolkit/pam_oath.html) 55 "passcode:", // MOTP (http://motp.sourceforge.net) 56 "Enter PASSCODE:", // SecurID 57 "YubiKey for" // YubiKey (https://en.wikipedia.org/wiki/YubiKey) If Duo needs an appended code, it should work out of the box as well; if not, it will need to use either one of the prompts above to work out of the box, or one unique to Duo that we can add to a future client release. Frankly, I don't see a reason for the hype around Duo - what does it do that any of the established 2FA solutions can't do? When we looked at that after a customer had asked us about it, all it seemed to do was add a single point of failure, as it needed to "phone home" to a central Duo server (not under the customer's control) before being able to grant access. Block/sabotage that connection and you've essentially DoS'ed the system. Solutions based on Google Authenticator, or more generally, OATH, need no such external connection. I would assume the same goes for MOTP, YubiKey and SecureID. My personal favorite at the moment is Google Authenticator, which, despite what its name might suggest, does not "phone home" to Google. And you don't need to run the actual Google-Authenticator-App on your phone, either - any open source OTP app that supports TOTP OATH will do. Not sure what Cisco AnyConnect does or why we should add a second password field on the default login screen - that doesn't seem to make sense. All that would do is confuse users that don't use 2FA. And we don't know if a server uses 2FA or not until after we've provided a username and password to it, so there's no way of determining whether or not we should present a field for the 2FA code on the login screen. Hence, the popup for it. -Stefan -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 _______________________________________________ x2go-user mailing list x2go-user(a)lists.x2go.org https://lists.x2go.org/listinfo/x2go-user Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

2 1

x2go kdrive & windows client
by Михайло Падалка 24 Apr '20

24 Apr '20

Tried to understand why x2gokdrive does not work from Windows client, and found that there is no x2gokdrive binary installed with latest client. But looking into git history I see there are some commits related to windows support. Is it simply not packaged, or not ready? -- З повагою, Михайло

5 9

trying to use x2go on windows and could not make it work
by Danilovich, Leonid 23 Apr '20

23 Apr '20

Hello, I am trying to use it windows to Linux option and can not make it work. It looks like connection gets open and then soft crashes and window is closing on the screen. Andy advice will be appreciated Thank you Leo

2 4

kde bug
by lr 22 Apr '20

22 Apr '20

Hi, On So 22 Mär 2020 01:18:23 CET, Bilinmek Istemiyor wrote: >/Hello, />//>/I have been searching for a remote desktop solution to manage two manjaro />/linux machines at my home, after fiddling with vnc, I have come across to />/x2go, I am pretty impressed with the setup, and I thank you all who has />/contributed this software.. />//>/I would like to report one issue. In x2go client, there is an option of />/selecting desktop environments. I am using KDE in both machines. When I />/select KDE, the connection can not be established since startkde fails. />//>/KDE has changed startkde to startplasma-x11. I have tried to circumvent />/this problem by symbolic linking startkde to startplama-x11 by symbolic />/linking in the same directory which is /usr/bin. However this failed. />//>/I gave up KDE option. I have selected Custom Destop option and entered />/startplasma-x11 as the command which worked. />//>/I believe the KDE option must be updated accordion to new command.. />//>/Another issue is, the windows' menu fonts are exceptionally big even though />/the contents seem proportional.. I do not know if this is relevant to the />/missing of some options... Native connection with monitor does not have />/this issue. />//>/Best regards... / in /usr/bin/x2goruncommand, there is the mapping between "KDE" and the command to be executed. Can you fiddle on a patch that makes x2goruncommand work again with your plasma/kde setup? If so, could you provide your patch? Thanks+Greets, Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel at das-netzwerkteam.de <https://lists.x2go.org/listinfo/x2go-user>, http://das-netzwerkteam.de I looked into x2goruncommand for the mapping. The mapping in this case is without effect because it maps desktop-environments to commands but the parameters given to x2goruncommand don't show KDE. Instead x2goruncommand receives startkde directly (from where ever). Custom desktop with /startplasma-x11/ starts the session (because $cmd is set to /startplasma-x11) /and passes till the end. But obviously not using the clients display parameters (seems to use the servers display parameters. Client W10, server Opensuse tumbleweed. Hope I made no mistakes and it helps. Thanks Lutz

1 0

Getting delays when adjusting windows/web browsing
by Brant Pastore 17 Apr '20

17 Apr '20

My host is kubuntu 18.04, I have installed x2go server version 4.1.0.3-0~170. I'm using windows 10 to connect with x2go client 4.1.2.2. I get delays in scrolling on firefox, or chrome. I also get very noticeable stutters when dragging a window to move it, or maximizing. (Heres a GIF of what I'm talking about https://gph.is/g/ZORllLz ) I have good connection speeds - https://imgur.com/gKFzKkn (both machines are on LAN connected via the same switch) I've tried quite a few different connection compression methods. I've set the connection speed to lan/wan. I've disabled windows firewall. I have tried with compositor disabled as well. Input/output settings - https://imgur.com/ACtu4rS

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

x2go-user April 2020