[X2Go-Dev] Bug#734: ssh-agent gets used although GSSAPI is enabled and agent-auth is disabled

[Mike Gabriel]

Package: x2goclient
Version: 4.0.3.1
Severity: important
Control: block -1 by 733

I have...

autologin=false
krblogin=true

_plus_ a running ssh-agent, loaded with my private SSH key.

The X2Go Server has the public SSH key belonging to the private key  
loaded into the agent.

If the remote server does not support GSSAPIauthentication (set to  
"no" via sshd_config), then X2Go Client should fall back to  
username+password (KbdInteractiveAuthentication).

At the time of writing this, X2Go Client nonetheless uses the running  
ssh-agent and performs a PubkeyAuthentication.

However, this breaks GSSAPI credentials delegation...

Mike

-- 

DAS-NETZWERKTEAM
mike gabriel, herweg 7, 24357 fleckeby
fon: +49 (1520) 1976 148

GnuPG Key ID 0x25771B31
mail: mike.gabriel at das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: Digitale PGP-Signatur
URL: <http://lists.x2go.org/pipermail/x2go-dev/attachments/20150110/343a1ddb/attachment.pgp>