19 Jan
2022
19 Jan
'22
7:54 a.m.
If you use this patch you need to add the pubkey modification to DelAuthKey too. Otherwise the key doesn't match and will never get deleted. Am 18.01.22 um 18:11 schrieb Brian Sanders:
I guess to for completeness, if someone needs more help, the following is the simple patch I am using (Ubuntu ppa server)
@@ -90,6 +90,7 @@ { my ($uid, $uidNumber, $gidNumber, $home, $pubkey, $authkeyfile)=@_;
- $pubkey =~ s/no-pty,//; # rewrite %%, %u, %U, %G and %h in authkeyfile string $authkeyfile =~ s/%u/$uid/; $authkeyfile =~ s/%U/$uidNumber/;
On Tue, Jan 18, 2022 at 11:35 AM Brian Sanders <brian.sanders@gmail.com> wrote:
Thank you, I was on the right track but this confirms it. I am going to edit my ansible playbook to deploy this as a patch to the file. Hopefully it will just keep working for a while. Through digging around I can tell you that the broker is the one which generates the keys. It then calls the server to add the key, and passes the private key back to the client to then use in the connection. So I am going to guess this is a bug in the broker, surely this isn't intentional to exclude PTY in the key. On Tue, Jan 18, 2022 at 9:52 AM Martin Lange <m.lange@pumpe24.de> wrote: Hi Brian, I had the same problem using plasma. This is because the generated ssh key includes a no-pty option. I don't know where this key is generated, so I "hacked" /usr/lib/x2go/x2gobroker-agent.pl <http://x2gobroker-agent.pl> on every server and added $pubkey =~ s/no-pty,//; on the beginning of AddAuthKey() and DelAuthKey() functions right before the line $authkeyfile =~ s/%u/$uid/; This removes this option from the key and works fine. Keep in mind you have to do this after every update of x2go server software. Maybe someone can tell us where the key is generated (I assume in the client executable?) - or even better - if there is a configuration flag for no-pty? Greetings Martin Am 18.01.22 um 15:33 schrieb Brian Sanders:Actually, I also turned on debug on the client, and it seems to indicate that I do auth, but am refused PTY access. 2go-DEBUG-../src/httpbrokerclient.cpp:684> Starting parser. x2go-DEBUG-../src/httpbrokerclient.cpp:703> Server IP address: "192.168.56.228" x2go-DEBUG-../src/httpbrokerclient.cpp:704> Server port: "22" x2go-DEBUG-../src/onmainwindow.cpp:3695> Server: "192.168.56.228" x2go-INFO-8> "Starting connection to server: 192.168.56.228:22 <http://192.168.56.228:22>" x2go-DEBUG-../src/onmainwindow.cpp:2853> Starting new ssh connection to server:"192.168.56.228":"22" krbLogin: false x2go-DEBUG-../src/sshmasterconnection.cpp:168> SshMasterConnection, host "192.168.56.228"; port 22; user "brians"; useproxy false; proxyserver ""; proxyport 22 x2go-DEBUG-../src/sshmasterconnection.cpp:248> Starting SSH connection without Kerberos authentication. x2go-DEBUG-../src/sshmasterconnection.cpp:250> SshMasterConnection, instance SshMasterConnection(0x7f05c0007c50) created. x2go-DEBUG-../src/httpbrokerclient.cpp:717> Parsing has finished. x2go-DEBUG-../src/sshmasterconnection.cpp:495> SshMasterConnection, instance SshMasterConnection(0x7f05c0007c50) entering thread. x2go-DEBUG-../src/sshmasterconnection.cpp:797> Session port before config file parse: 22 x2go-DEBUG-../src/sshmasterconnection.cpp:807> Session port after config file parse: 22 x2go-DEBUG-../src/sshmasterconnection.cpp:870> Session port before config file parse (part 2): 22 x2go-DEBUG-../src/sshmasterconnection.cpp:880> Session port after config file parse (part 2): 22 x2go-DEBUG-../src/sshmasterconnection.cpp:904> cserverAuth x2go-DEBUG-../src/sshmasterconnection.cpp:943> state: 1 x2go-DEBUG-../src/sshmasterconnection.cpp:1324> Trying to authenticate user with private key. x2go-DEBUG-../src/sshmasterconnection.cpp:1340> Temporarily saved key in "/home/brians/.x2go/ssh/gen/key.DkiWvu" x2go-DEBUG-../src/sshmasterconnection.cpp:1507> Authenticating with key: 0 x2go-DEBUG-../src/sshmasterconnection.cpp:687> User authentication OK. x2go-DEBUG-../src/sshmasterconnection.cpp:1671> "ssh_channel_request_pty failed": "Channel request pty-req failed" I do in fact allow PTY in the sshd_config, however doesn't the broker disallow this with the key that it adds? I see it adding the key with "no-X11-forwarding,no-pty,no-user-rc". So is this not the key that gets used, and I still have some sshd_config settings somewhere, or do I have to tell the broker to allow this and it will update the key's settings? On Tue, Jan 18, 2022 at 8:52 AM Brian Sanders <brian.sanders@gmail.com> wrote: I am trying to get the broker to work with the auto login feature, and I can't seem to get it to work. I am using an ansible playbook and building a broker, and then 2 workstations. I setup wks1 to autologin and wks2 with out. I can use wks2 just fine, but when I try and use wk1, It seems the new key is added, and the workstation indicates that it accepts a session for my user. However the X2go client then shows me a login/password box rather than logging me into the session. I have logs from the server and the workstation, can someone help point me in the right direction? Session configuration: [DEFAULT] command=TERMINAL defsndport=true useiconv=false iconvfrom=UTF-8 height=600 width=800 export= quality=9 fullscreen=false layout= useexports=true speed=2 soundsystem=pulse print=true type=auto sndport=4713 xinerama=true variant= usekbd=true fstunnel=true applications=TERMINAL,WWWBROWSER,MAILCLIENT,OFFICE multidisp=false sshproxyport=22 sound=true rootless=true iconvto=UTF-8 soundtunnel=true dpi=96 sshport=22 setdpi=0 pack=16m-jpeg directrdp=false user=BROKER_USER [[wks1]] acl-groups-allow=test_group broker-session-autologin=true command=xfce host=192.168.56.228 name=Molecule Wks1 [[wks2]] command=xfce host=192.168.56.229 name=Molecule Wks2 Broker logs: ==> /var/log/x2gobroker/broker.log <== 2022-01-18 13:45:07,395 - broker - INFO - client address is 192.168.56.1 2022-01-18 13:45:07,397 - broker - DEBUG - broker_username: brians, server_username: brians, password: XXXXX, task: selectsession, profile_id: [wks1, cookie: 83ddbd2d-c4ca-4f22-bb0b-b3629d522fc5 2022-01-18 13:45:07,397 - broker - DEBUG - base_broker.X2GoBroker.check_access(): checking if our configured cookie was submitted: False 2022-01-18 13:45:07,397 - broker - DEBUG - base_broker.X2GoBroker.check_access(): found valid auth key for user cookie: brians_83ddbd2d-c4ca-4f22-bb0b-b3629d522fc5 2022-01-18 13:45:07,398 - broker - DEBUG - base_broker.X2GoBroker.check_access(): Giving cookie: 0ca4bea5-f216-4f59-ae6b-1e103243814e to ip 192.168.56.1 2022-01-18 13:45:07,402 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: ssh 2022-01-18 13:45:07,407 - broker - DEBUG - base_broker.X2GoBroker.get_agent_hostkey_policy(): found default-agent-hostkey-policy in global config section: WarningPolicy 2022-01-18 13:45:07,475 - broker - INFO - Executing agent command on remote host 192.168.56.228 (192.168.56.228): sh -c '/usr/lib/x2go/x2gobroker-agent foo ping' 2022-01-18 13:45:08,258 - broker - INFO - Broker agent answered: OK; 2022-01-18 13:45:08,304 - broker - INFO - Executing agent command on remote host 192.168.56.228 (192.168.56.228): sh -c '/usr/lib/x2go/x2gobroker-agent brians listsessions' 2022-01-18 13:45:09,164 - broker - INFO - Broker agent answered: OK; 2022-01-18 13:45:09,165 - broker - DEBUG - base_broker.X2GoBroker.get_agent_query_mode(): found default-agent-query-mode in global config section: ssh 2022-01-18 13:45:09,165 - broker - DEBUG - base_broker.X2GoBroker.get_portscan_x2goservers(): found default-portscan-x2goservers in global config section: True 2022-01-18 13:45:09,167 - broker - DEBUG - base_broker.X2GoBroker.get_session_autologin(): found broker-session-autologin in session profile with ID [wks1: True. This one has precendence over the default value. 2022-01-18 13:45:09,177 - broker - DEBUG - base_broker.X2GoBroker.get_authorized_keys_file(): found default-authorized-keys in global config section: %h/.x2go/authorized_keys 2022-01-18 13:45:09,221 - broker - INFO - Executing agent command on remote host 192.168.56.228 (192.168.56.228): sh -c '/usr/lib/x2go/x2gobroker-agent brians addauthkey "no-X11-forwarding,no-pty,no-user-rc ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5JtTMMkSa3yus8ciCIcYvzl7FYvEsFtoppLFyce3zEfc8+zg4xH3qSwDIHP/2f0nUBiuOESIRjsVQa0nIxjQljXegJO82p/6ixP1eZHzNZUuTCHBL4vA7QAVteHJgBFhUYz4rqPQIwyrQR9STu/cLu0fGIKvFxIf0LIC0zs2Xf+B6qQwoXQF4aR9G2AGOaeGcvwBItyLhVxWwzHmoxAHAqWMCisFPGACItfdDixhZl9IyCdcmsyFxWsndjgKPXAJGBxUREIkntaXgtZ7IrIDhrTtY9xWy0mJUwKlIdqluViMxyWagQM5TX38OVYH+fR2DaNV3WxCuO8pKHgH24ExV brians@192.168.56.1" "%h/.x2go/authorized_keys"' 2022-01-18 13:45:09,921 - broker - INFO - Broker agent answered: OK; 2022-01-18 13:45:09,921 - broker - DEBUG - base_broker.X2GoBroker.get_authorized_keys_file(): found default-authorized-keys in global config section: %h/.x2go/authorized_keys 2022-01-18 13:45:09,923 - broker - DEBUG - Scheduled deletion of authorized key in 20s: user=brians, hostname=192.168.56.228, hostaddr=192.168.56.228 2022-01-18 13:45:29,981 - broker - INFO - Executing agent command on remote host 192.168.56.228 (192.168.56.228): sh -c '/usr/lib/x2go/x2gobroker-agent brians delauthkey "no-X11-forwarding,no-pty,no-user-rc ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5JtTMMkSa3yus8ciCIcYvzl7FYvEsFtoppLFyce3zEfc8+zg4xH3qSwDIHP/2f0nUBiuOESIRjsVQa0nIxjQljXegJO82p/6ixP1eZHzNZUuTCHBL4vA7QAVteHJgBFhUYz4rqPQIwyrQR9STu/cLu0fGIKvFxIf0LIC0zs2Xf+B6qQwoXQF4aR9G2AGOaeGcvwBItyLhVxWwzHmoxAHAqWMCisFPGACItfdDixhZl9IyCdcmsyFxWsndjgKPXAJGBxUREIkntaXgtZ7IrIDhrTtY9xWy0mJUwKlIdqluViMxyWagQM5TX38OVYH+fR2DaNV3WxCuO8pKHgH24ExV brians@192.168.56.1" "%h/.x2go/authorized_keys"' 2022-01-18 13:45:30,816 - broker - INFO - Broker agent answered: OK; Workstation auth.log Jan 18 13:45:07 ubuntu-focal sshd[36704]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:07 ubuntu-focal sshd[36705]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:07 ubuntu-focal sshd[36706]: Accepted publickey for x2gobroker from 192.168.56.230 port 58526 ssh2: RSA SHA256:dBs4pnJUuc0/h4OUI52+D8aKAbTaDC1QYtbB8/eH/l4 Jan 18 13:45:07 ubuntu-focal sshd[36706]: pam_unix(sshd:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:07 ubuntu-focal systemd-logind[713]: New session 32 of user x2gobroker. Jan 18 13:45:07 ubuntu-focal systemd: pam_unix(systemd-user:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:07 ubuntu-focal sshd[36706]: pam_unix(sshd:session): session closed for user x2gobroker Jan 18 13:45:07 ubuntu-focal systemd-logind[713]: Session 32 logged out. Waiting for processes to exit. Jan 18 13:45:07 ubuntu-focal systemd-logind[713]: Removed session 32. Jan 18 13:45:07 ubuntu-focal sshd[36820]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:08 ubuntu-focal sshd[36821]: Accepted publickey for x2gobroker from 192.168.56.230 port 58530 ssh2: RSA SHA256:dBs4pnJUuc0/h4OUI52+D8aKAbTaDC1QYtbB8/eH/l4 Jan 18 13:45:08 ubuntu-focal sshd[36821]: pam_unix(sshd:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:08 ubuntu-focal systemd-logind[713]: New session 34 of user x2gobroker. Jan 18 13:45:08 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/x2golistsessions --all-servers Jan 18 13:45:08 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:08 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:08 ubuntu-focal sshd[36821]: pam_unix(sshd:session): session closed for user x2gobroker Jan 18 13:45:08 ubuntu-focal systemd-logind[713]: Session 34 logged out. Waiting for processes to exit. Jan 18 13:45:08 ubuntu-focal systemd-logind[713]: Removed session 34. Jan 18 13:45:08 ubuntu-focal sshd[36921]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:08 ubuntu-focal sshd[36922]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:08 ubuntu-focal sshd[36923]: Accepted publickey for x2gobroker from 192.168.56.230 port 58536 ssh2: RSA SHA256:dBs4pnJUuc0/h4OUI52+D8aKAbTaDC1QYtbB8/eH/l4 Jan 18 13:45:08 ubuntu-focal sshd[36923]: pam_unix(sshd:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:08 ubuntu-focal systemd-logind[713]: New session 35 of user x2gobroker. Jan 18 13:45:09 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/mkdir -p /home/brians/.x2go Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:09 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/touch /home/brians/.x2go/authorized_keys Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:09 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/cat /home/brians/.x2go/authorized_keys Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:09 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/tee -a /home/brians/.x2go/authorized_keys Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:09 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:09 ubuntu-focal sshd[36923]: pam_unix(sshd:session): session closed for user x2gobroker Jan 18 13:45:09 ubuntu-focal systemd-logind[713]: Session 35 logged out. Waiting for processes to exit. Jan 18 13:45:09 ubuntu-focal systemd-logind[713]: Removed session 35. Jan 18 13:45:09 ubuntu-focal sshd[37020]: Accepted publickey for brians from 192.168.56.1 port 42394 ssh2: RSA SHA256:4fPeupT3DmbLhiYOu08NOn1H8wYDYxEVVpHSg+gWLtw Jan 18 13:45:09 ubuntu-focal sshd[37020]: pam_unix(sshd:session): session opened for user brians by (uid=0) Jan 18 13:45:09 ubuntu-focal systemd-logind[713]: New session 36 of user brians. Jan 18 13:45:09 ubuntu-focal systemd: pam_unix(systemd-user:session): session opened for user brians by (uid=0) Jan 18 13:45:10 ubuntu-focal sshd[37020]: pam_unix(sshd:session): session closed for user brians Jan 18 13:45:10 ubuntu-focal systemd-logind[713]: Session 36 logged out. Waiting for processes to exit. Jan 18 13:45:10 ubuntu-focal systemd-logind[713]: Removed session 36. Jan 18 13:45:29 ubuntu-focal sshd[37159]: error: kex_exchange_identification: Connection closed by remote host Jan 18 13:45:29 ubuntu-focal sshd[37160]: Accepted publickey for x2gobroker from 192.168.56.230 port 58540 ssh2: RSA SHA256:dBs4pnJUuc0/h4OUI52+D8aKAbTaDC1QYtbB8/eH/l4 Jan 18 13:45:29 ubuntu-focal sshd[37160]: pam_unix(sshd:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:29 ubuntu-focal systemd-logind[713]: New session 38 of user x2gobroker. Jan 18 13:45:29 ubuntu-focal systemd: pam_unix(systemd-user:session): session opened for user x2gobroker by (uid=0) Jan 18 13:45:30 ubuntu-focal sudo: root : TTY=unknown ; PWD=/var/lib/x2gobroker ; USER=brians ; COMMAND=/usr/bin/sed -e s!^no-X11-forwarding,no-pty,no-user-rc ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC5JtTMMkSa3yus8ciCIcYvzl7FYvEsFtoppLFyce3zEfc8+zg4xH3qSwDIHP/2f0nUBiuOESIRjsVQa0nIxjQljXegJO82p/6ixP1eZHzNZUuTCHBL4vA7QAVteHJgBFhUYz4rqPQIwyrQR9STu/cLu0fGIKvFxIf0LIC0zs2Xf+B6qQwoXQF4aR9G2AGOaeGcvwBItyLhVxWwzHmoxAHAqWMCisFPGACItfdDixhZl9IyCdcmsyFxWsndjgKPXAJGBxUREIkntaXgtZ7IrIDhrTtY9xWy0mJUwKlIdqluViMxyWagQM5TX38OVYH+fR2DaNV3WxCuO8pKHgH24ExV brians@192.168.56.1$!! -e /^$/d -i /home/brians/.x2go/authorized_keys Jan 18 13:45:30 ubuntu-focal sudo: pam_unix(sudo:session): session opened for user brians by (uid=0) Jan 18 13:45:30 ubuntu-focal sudo: pam_unix(sudo:session): session closed for user brians Jan 18 13:45:30 ubuntu-focal sshd[37160]: pam_unix(sshd:session): session closed for user x2gobroker Jan 18 13:45:30 ubuntu-focal systemd-logind[713]: Session 38 logged out. Waiting for processes to exit. Jan 18 13:45:30 ubuntu-focal systemd-logind[713]: Removed session 38. Jan 18 13:45:32 ubuntu-focal dbus-daemon[701]: [system] Failed to activate service 'org.bluez': timed out (service_start_timeout=25000ms) _______________________________________________ x2go-user mailing list x2go-user@lists.x2go.org https://lists.x2go.org/listinfo/x2go-user_______________________________________________ x2go-user mailing list x2go-user@lists.x2go.org https://lists.x2go.org/listinfo/x2go-user
x2go-user mailing list x2go-user@lists.x2go.org https://lists.x2go.org/listinfo/x2go-user