x2go-user

x2go-user@lists.x2go.org

2 participants
2322 discussions

Re: [X2Go-User] X2Go, MFA and Duo?
by J.Witvliet＠mindef.nl 25 Apr '20

25 Apr '20

That’s the point. Gpg-cards. We too had those sun-machines for evaluation, but declined. When ones whole organization is using PKI, with 65,000 cards around, pkcs11 is essential. Would be nice to have a proper Citrix alternative. From: "Stefan Baur" <X2Go-ML-1(a)baur-itcs.de<mailto:X2Go-ML-1@baur-itcs.de>> Date: Friday, 24 April 2020 at 20:24:56 To: "Witvliet, J, Ing., DMO/JIVC/GIT&INFRA/ITT" <J.Witvliet(a)mindef.nl<mailto:J.Witvliet@mindef.nl>>, "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org<mailto:x2go-user@lists.x2go.org>> Subject: Re: [X2Go-User] X2Go, MFA and Duo? Am 24.04.20 um 20:12 schrieb J.Witvliet(a)mindef.nl: > One obviously missing, is a SmartCard, loaded with SSL keys & certificates, that should be reachable through P11 (or pkcs11) library... We have SmartCard support as well (quite obviously, as X2Go started out as a replacement for SunRay workstations), that's just handled differently. But it's possible to authenticate using a GnuPG card that has SSH keys stored on it, for example. -Stefan -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

3 2

Re: [X2Go-User] X2Go, MFA and Duo?
by J.Witvliet＠mindef.nl 24 Apr '20

24 Apr '20

One obviously missing, is a SmartCard, loaded with SSL keys & certificates, that should be reachable through P11 (or pkcs11) library... From: "Stefan Baur" <X2Go-ML-1(a)baur-itcs.de<mailto:X2Go-ML-1@baur-itcs.de>> Date: Friday, 24 April 2020 at 18:44:51 To: "x2go-user(a)lists.x2go.org" <x2go-user(a)lists.x2go.org<mailto:x2go-user@lists.x2go.org>> Subject: Re: [X2Go-User] X2Go, MFA and Duo? Am 24.04.20 um 18:01 schrieb James M. Pulver: > Has anyone ever used X2Go Client (windows, linux, mac) with some sort of MFA that works in SSH? Duo and PortalGuard both support SSH MFA with either a "line client" or easier IMHO an appended password. I was wondering if Duo with the appended code to the password field might work? Also, is there any plans to add a second password field to the clients al la Cisco AnyConnect etc? X2GoClient has out-of-the-box support for several 2FA solutions: <https://code.x2go.org/gitweb?p=x2goclient.git;a=blob;f=src/sshmasterconnect…> 53 "Verification code:", // GA (http://github.com/google/google-authenticator) 54 "One-time password (OATH) for", // OATH (http://www.nongnu.org/oath-toolkit/pam_oath.html) 55 "passcode:", // MOTP (http://motp.sourceforge.net) 56 "Enter PASSCODE:", // SecurID 57 "YubiKey for" // YubiKey (https://en.wikipedia.org/wiki/YubiKey) If Duo needs an appended code, it should work out of the box as well; if not, it will need to use either one of the prompts above to work out of the box, or one unique to Duo that we can add to a future client release. Frankly, I don't see a reason for the hype around Duo - what does it do that any of the established 2FA solutions can't do? When we looked at that after a customer had asked us about it, all it seemed to do was add a single point of failure, as it needed to "phone home" to a central Duo server (not under the customer's control) before being able to grant access. Block/sabotage that connection and you've essentially DoS'ed the system. Solutions based on Google Authenticator, or more generally, OATH, need no such external connection. I would assume the same goes for MOTP, YubiKey and SecureID. My personal favorite at the moment is Google Authenticator, which, despite what its name might suggest, does not "phone home" to Google. And you don't need to run the actual Google-Authenticator-App on your phone, either - any open source OTP app that supports TOTP OATH will do. Not sure what Cisco AnyConnect does or why we should add a second password field on the default login screen - that doesn't seem to make sense. All that would do is confuse users that don't use 2FA. And we don't know if a server uses 2FA or not until after we've provided a username and password to it, so there's no way of determining whether or not we should present a field for the 2FA code on the login screen. Hence, the popup for it. -Stefan -- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243 _______________________________________________ x2go-user mailing list x2go-user(a)lists.x2go.org https://lists.x2go.org/listinfo/x2go-user Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.

2 1

x2go kdrive & windows client
by Михайло Падалка 24 Apr '20

24 Apr '20

Tried to understand why x2gokdrive does not work from Windows client, and found that there is no x2gokdrive binary installed with latest client. But looking into git history I see there are some commits related to windows support. Is it simply not packaged, or not ready? -- З повагою, Михайло

5 9

trying to use x2go on windows and could not make it work
by Danilovich, Leonid 23 Apr '20

23 Apr '20

Hello, I am trying to use it windows to Linux option and can not make it work. It looks like connection gets open and then soft crashes and window is closing on the screen. Andy advice will be appreciated Thank you Leo

2 4

kde bug
by lr 22 Apr '20

22 Apr '20

Hi, On So 22 Mär 2020 01:18:23 CET, Bilinmek Istemiyor wrote: >/Hello, />//>/I have been searching for a remote desktop solution to manage two manjaro />/linux machines at my home, after fiddling with vnc, I have come across to />/x2go, I am pretty impressed with the setup, and I thank you all who has />/contributed this software.. />//>/I would like to report one issue. In x2go client, there is an option of />/selecting desktop environments. I am using KDE in both machines. When I />/select KDE, the connection can not be established since startkde fails. />//>/KDE has changed startkde to startplasma-x11. I have tried to circumvent />/this problem by symbolic linking startkde to startplama-x11 by symbolic />/linking in the same directory which is /usr/bin. However this failed. />//>/I gave up KDE option. I have selected Custom Destop option and entered />/startplasma-x11 as the command which worked. />//>/I believe the KDE option must be updated accordion to new command.. />//>/Another issue is, the windows' menu fonts are exceptionally big even though />/the contents seem proportional.. I do not know if this is relevant to the />/missing of some options... Native connection with monitor does not have />/this issue. />//>/Best regards... / in /usr/bin/x2goruncommand, there is the mapping between "KDE" and the command to be executed. Can you fiddle on a patch that makes x2goruncommand work again with your plasma/kde setup? If so, could you provide your patch? Thanks+Greets, Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel at das-netzwerkteam.de <https://lists.x2go.org/listinfo/x2go-user>, http://das-netzwerkteam.de I looked into x2goruncommand for the mapping. The mapping in this case is without effect because it maps desktop-environments to commands but the parameters given to x2goruncommand don't show KDE. Instead x2goruncommand receives startkde directly (from where ever). Custom desktop with /startplasma-x11/ starts the session (because $cmd is set to /startplasma-x11) /and passes till the end. But obviously not using the clients display parameters (seems to use the servers display parameters. Client W10, server Opensuse tumbleweed. Hope I made no mistakes and it helps. Thanks Lutz

1 0

Getting delays when adjusting windows/web browsing
by Brant Pastore 17 Apr '20

17 Apr '20

My host is kubuntu 18.04, I have installed x2go server version 4.1.0.3-0~170. I'm using windows 10 to connect with x2go client 4.1.2.2. I get delays in scrolling on firefox, or chrome. I also get very noticeable stutters when dragging a window to move it, or maximizing. (Heres a GIF of what I'm talking about https://gph.is/g/ZORllLz ) I have good connection speeds - https://imgur.com/gKFzKkn (both machines are on LAN connected via the same switch) I've tried quite a few different connection compression methods. I've set the connection speed to lan/wan. I've disabled windows firewall. I have tried with compositor disabled as well. Input/output settings - https://imgur.com/ACtu4rS

1 0

Re: [X2Go-User] Can't connect to server with user 'A' but with user 'B'
by Mike Gabriel 16 Apr '20

16 Apr '20

Hi Henrik, On Mi 25 Mär 2020 11:20:11 CET, Henrik Schmidt wrote: > Ok Mike, > > Logs attached. > > Henrik What you see here is nxagent (aka x2goagent) crashing at session startup. X2Go Client and PyHoca bail out at the same point. In ~/.x2go/ server-side and client-side, you should find session.log, session.err and an options file. For a failing session, please send those files too me (off-list). Thanks+Greets, Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel(a)das-netzwerkteam.de, http://das-netzwerkteam.de

2 2

X2Go Windows Client 4.1.2.2 Crashes Upon Connect
by Josh G 09 Apr '20

09 Apr '20

I just installed the Windows client version 4.1.2.2. It crashes as soon as it tries to make the SSH connection. I tried debug and the debug window closes immediately as well. Is there a log somewhere? It was tried on two different machines that have different OSs and virus protection. 4.1.2.0 works fine. It doesn't crash when attempting to connect to a computer that isn't running SSH (just times out). It does crash when trying to connect to that same computer by tunneling through another machine that is running SSH. If I try to connect to a new machine, it crashes as soon as I accept the host key. If you put in a wrong password, it still crashes. Thus, there is never a completed SSH connection. Is there anything I can look at or do? I was hoping that 4.1.2.2 would fix some of the annoyances that prevents me from deploying X2Go to other users.Thanks,Josh

2 7

Can x2go session be initiated from a server to listening client?
by Andrew Munn 09 Apr '20

09 Apr '20

I'd like to initiate an x2go session from a server behind a firewall to a listening client with port 22 open. How can that be done? thanks!

5 5

Printing remotely
by Michael Pope 09 Apr '20

09 Apr '20

I'm having problems printing remotely using x2goserver-printing + cups-x2go. I've enabled printing on the client side, then connected to my Debian 8 server via X2go. I've installed x2goserver-printing + cups-x2go on the server and restarted cups. When I try and send a test print from the server to my home printer, it doesn't work. Nothing is in the spool directory. It doesn't seem to ever reach the otherside. What should I do? from Michael

2 2

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

x2go-user