[X2Go-Commits] page changed: wiki:advanced:x2gobroker:howitworks

[wiki-admin at x2go.org]

A page in your DokuWiki was added or changed. Here are the details:

Date        : 2013/03/28 10:16
Browser     : Mozilla/5.0 (X11; Linux x86_64; rv:18.0) Gecko/20100101 Firefox/18.0 Iceweasel/18.0.1
IP-Address  : 46.142.186.224
Hostname    : 224-186-142-46.pool.kielnet.net
Old Revision: http://wiki.x2go.org/doku.php/wiki:advanced:x2gobroker:howitworks?rev=1364465568
New Revision: http://wiki.x2go.org/doku.php/wiki:advanced:x2gobroker:howitworks
Edit Summary: [Authentication] 
User        : sunweaver

@@ -5,11 +5,17 @@
  This is about how X2Go Client and a generic X2Go Session Broker communicate with each other. This article will quickly become rather technical.
  
  ===== Authentication =====
  
- The X2Go client can use different methods of authentication against an X2Go Session Broker.
+ X2Go Client in broker mode will authenticate twice. First, it will authenticate against the X2Go Session Broker, second, it will authenticate against one of the servers provided by the broker in
form of X2Go session profiles. Dual authentication means: the user has to type his/her username and password twice.
  
- With an HTTP(S) broker it could be //username and password//. With an SSH broker a //SSH key authentication// can also be used.
+ A gain in usability cerainly is, if one manages to reduce these two authentication requests to one. How this can be achieved will be explained further below.
+ 
+ ==== Authentication methods against X2Go Session Broker ====
+ 
+ In general, X2Go client can use different methods for authentication against an X2Go Session Broker.
+ 
+ With an HTTP(S) broker it could be //username and password//. With an SSH broker a //SSH key based authentication// is also possible.
  
  ===== Extra Security: Pre-shared Authentication ID =====
  
  With both types of broker (HTTP, SSH) you can use an additional parameter "authid" for verifying the trust state of an authenticating user. The authentication ID is a user defined string (like a pre-shared key)
which is stored in file on the client-side. 



-- 
This mail was generated by DokuWiki at
http://wiki.x2go.org/