I have x2go working perfectly OK when connecting across my LAN, so the basics are OK.
However it doesn't work when connecting my laptop when I'm away from home (i.e. not on the LAN).
When I'm away from home I connect via an intermediate site to my home system, i.e. in my ~/.ssh/config file I have the following:-
#
#
# esprimo may be remote or local
#
Match host esprimo exec "hostNotLocal esprimo"
ForwardX11 true
ProxyCommand ssh cheddar nc -q0 zbmc.eu 22
host esprimo
ForwardX11 trueSo when I'm not on the home LAN I connect via 'cheddar' to my home machine.
Can I get x2go to do the same thing somehow? Or, even better, can I get x2go to use a connection already set up by ssh in 'ControlMaster' mode?
-- Chris Green
Am 18.10.18 um 20:33 schrieb Chris Green:
Can I get x2go to do the same thing somehow? Or, even better, can I get x2go to use a connection already set up by ssh in 'ControlMaster' mode?
That "nc" thing in your ssh config looks weird. What you actually do want is the "proxy" feature in the session config, activate it, select the SSH proxy, enter the connection info for your proxy/jump host there, and the connection info for the actual X2Go server in the usual fields above. You can either have two session tiles, one with proxy settings enabled, one with them disabled, or go to the session config and check/unched the proxy as required.
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
You can replace ProxyCommand + nc by ProxyJump for openssh. X2go uses libssh so it cannot work there. Stefan already posted the solution for that case.
Uli
Stefan Baur <X2Go-ML-1@baur-itcs.de> schrieb am Do., 18. Okt. 2018, 21:25:
Am 18.10.18 um 20:33 schrieb Chris Green:
Can I get x2go to do the same thing somehow? Or, even better, can I get x2go to use a connection already set up by ssh in 'ControlMaster' mode?
That "nc" thing in your ssh config looks weird. What you actually do want is the "proxy" feature in the session config, activate it, select the SSH proxy, enter the connection info for your proxy/jump host there, and the connection info for the actual X2Go server in the usual fields above. You can either have two session tiles, one with proxy settings enabled, one with them disabled, or go to the session config and check/unched the proxy as required.
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
x2go-user mailing list x2go-user@lists.x2go.org https://lists.x2go.org/listinfo/x2go-user
On Thu, Oct 18, 2018 at 09:18:08PM +0200, Stefan Baur wrote:
Am 18.10.18 um 20:33 schrieb Chris Green:
Can I get x2go to do the same thing somehow? Or, even better, can I get x2go to use a connection already set up by ssh in 'ControlMaster' mode?
That "nc" thing in your ssh config looks weird. What you actually do want is the "proxy" feature in the session config, activate it, select the SSH proxy, enter the connection info for your proxy/jump host there, and the connection info for the actual X2Go server in the usual fields above. You can either have two session tiles, one with proxy settings enabled, one with them disabled, or go to the session config and check/unched the proxy as required.
I'm (fairly) happy to set up two configurations for x2go. I'm not quite sure how to configure the non-LAN one though, how do you configure x2goclient to go 'via' system X to system Y? Is that what x2go's "proxy server" means.
Well, I've tried it and I always end up with an error box saying:-
SSH proxy connection error: Access denied. Authentication that can continue: publickey,password Access denied. Authentication that can continue: publickey,password
It *only* uses password authentication, no keys, but even when I enter the right passwords it repeatedly outpus the above error.
-- Chris Green
Am 18.10.18 um 21:40 schrieb Chris Green:
It *only* uses password authentication, no keys, but even when I enter the right passwords it repeatedly outpus the above error.
Have you tried entering the password you believe to be the second password first?
-Stefan
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
On Thu, Oct 18, 2018 at 09:55:12PM +0200, Stefan Baur wrote:
Am 18.10.18 um 21:40 schrieb Chris Green:
It *only* uses password authentication, no keys, but even when I enter the right passwords it repeatedly outpus the above error.
Have you tried entering the password you believe to be the second password first?
Yes I'm pretty sure I've tried the two passwords both ways round but I will try again just to make sure.
-- Chris Green
Am 20.10.18 um 09:58 schrieb Chris Green:
On Thu, Oct 18, 2018 at 09:55:12PM +0200, Stefan Baur wrote:
Am 18.10.18 um 21:40 schrieb Chris Green:
It *only* uses password authentication, no keys, but even when I enter the right passwords it repeatedly outpus the above error.
Have you tried entering the password you believe to be the second password first?
Yes I'm pretty sure I've tried the two passwords both ways round but I will try again just to make sure.
I think I might have encountered a similar issue today.
Could you please copy and paste what the login to the intermediate host looks like on the command line, when you're not using an ssh_config file, and pretend to log in directly for a shell?
i.e. something like:
ssh pi@pi pi@pi's password: ^^^^^^^^^^^^^^^^^^^^^ this is the line I'm curious about
Kind Regards, Stefan Baur
-- BAUR-ITCS UG (haftungsbeschränkt) Geschäftsführer: Stefan Baur Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364 Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243
On Mon, Oct 22, 2018 at 09:01:13PM +0200, Stefan Baur wrote:
Am 20.10.18 um 09:58 schrieb Chris Green:
On Thu, Oct 18, 2018 at 09:55:12PM +0200, Stefan Baur wrote:
Am 18.10.18 um 21:40 schrieb Chris Green:
It *only* uses password authentication, no keys, but even when I enter the right passwords it repeatedly outpus the above error.
Have you tried entering the password you believe to be the second password first?
Yes I'm pretty sure I've tried the two passwords both ways round but I will try again just to make sure.
I think I might have encountered a similar issue today.
Could you please copy and paste what the login to the intermediate host looks like on the command line, when you're not using an ssh_config file, and pretend to log in directly for a shell?
i.e. something like:
ssh pi@pi pi@pi's password: ^^^^^^^^^^^^^^^^^^^^^ this is the line I'm curious about
There's nothing, just a prompt:-
chris$ ssh cheddar.halon.org.uk
Password:
chris@cheddar$ -- Chris Green
-
Chris Green -
Stefan Baur -
Ulrich Sibiller