[X2Go-User] (no subject)

[Richard Beare]

Apologies - accidentally sent before completing
Hi,
I have a working installation of x2go, but there is some ugliness about the setup that I'd like to reduce. Any advice welcome.

Here's how it looks at the moment.

1) vpn connection to the institute.
2) ssh tunnel to the workstation from the laptop
3) x2go connected to the local tunnel port

This works, but we now have 3 layers of encyption.

The reason for not pointing x2go directly at the w orkstation is the use of PaloAltoNetworking appliances within the institution. These do a man-in-the-middle break of ssh connections and lead to the following error from x2go:

kex error : no match for method kex algos: server [diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1], client [curve25519-sha256 at libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1]

A direct ssh login works, but always falls back to a password.


Is there any configuration option possible to have x2go/libssh handle the setup in the same way that regular ssh does?

That would eliminate one encryption layer. Other recommendations greatly appreciated too.

Thanks


Richard Beare

Team Leader (Computational Methods Group)
Developmental Imaging

Murdoch Children's Research Institute
The Royal Children's Hospital
Flemington Road Parkville Victoria 3052 Australia
T 8341 6403
E Richard.Beare at mcri.edu.au<mailto:richard.beare at mcri.edu.au>
www.mcri.edu.au
Developmental Imaging Software<http://developmentalimagingmcri.github.io/>

Disclaimer

This e-mail and any attachments to it (the "Communication") are, unless otherwise stated, confidential, may contain copyright material and is for the use only of the intended recipient. If you receive the Communication in error, please notify the sender immediately by return e-mail, delete the Communication and the return e-mail, and do not read, copy, retransmit or otherwise deal with it. Any views expressed in the Communication are those of the individual sender only, unless expressly stated to be those of Murdoch Children’s Research Institute (MCRI) ABN 21 006 566 972 or any of its related entities. MCRI does not accept liability in connection with the integrity of or errors in the Communication, computer virus, data corruption, interference or delay arising from or in respect of the Communication.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.x2go.org/pipermail/x2go-user/attachments/20200401/02a41584/attachment-0001.html>