[X2Go-User] Problem connecting via intermediate site

[Chris Green]

I have x2go working perfectly OK when connecting across my LAN, so the
basics are OK.

However it doesn't work when connecting my laptop when I'm away from
home (i.e. not on the LAN).

When I'm away from home I connect via an intermediate site to my home
system, i.e. in my ~/.ssh/config file I have the following:-

#
#
# esprimo may be remote or local
#
Match host esprimo exec "hostNotLocal esprimo"
ForwardX11 true
ProxyCommand ssh cheddar nc -q0 zbmc.eu 22

host esprimo
ForwardX11 true


So when I'm not on the home LAN I connect via 'cheddar' to my home
machine.

Can I get x2go to do the same thing somehow? Or, even better, can I
get x2go to use a connection already set up by ssh in 'ControlMaster'
mode?

[Stefan Baur]

Post by Chris Green
Can I get x2go to do the same thing somehow? Or, even better, can I
get x2go to use a connection already set up by ssh in 'ControlMaster'
mode?

That "nc" thing in your ssh config looks weird.
What you actually do want is the "proxy" feature in the session config,
activate it, select the SSH proxy, enter the connection info for your
proxy/jump host there, and the connection info for the actual X2Go
server in the usual fields above.
You can either have two session tiles, one with proxy settings enabled,
one with them disabled, or go to the session config and check/unched the
proxy as required.

Kind Regards,
Stefan Baur

[Ulrich Sibiller]

You can replace ProxyCommand + nc by ProxyJump for openssh. X2go uses
libssh so it cannot work there. Stefan already posted the solution for that
case.

Uli

Post by Stefan Baur

Post by Chris Green
Can I get x2go to do the same thing somehow? Or, even better, can I
get x2go to use a connection already set up by ssh in 'ControlMaster'
mode?

That "nc" thing in your ssh config looks weird.
What you actually do want is the "proxy" feature in the session config,
activate it, select the SSH proxy, enter the connection info for your
proxy/jump host there, and the connection info for the actual X2Go
server in the usual fields above.
You can either have two session tiles, one with proxy settings enabled,
one with them disabled, or go to the session config and check/unched the
proxy as required.
Kind Regards,
Stefan Baur
--
BAUR-ITCS UG (haftungsbeschrÀnkt)
GeschÀftsfÌhrer: Stefan Baur
EichenÀckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax [phone] | USt-IdNr.: DE268653243
_______________________________________________
x2go-user mailing list
https://lists.x2go.org/listinfo/x2go-user

[Chris Green]

Post by Stefan Baur

Post by Chris Green
Can I get x2go to do the same thing somehow? Or, even better, can I
get x2go to use a connection already set up by ssh in 'ControlMaster'
mode?

That "nc" thing in your ssh config looks weird.
What you actually do want is the "proxy" feature in the session config,
activate it, select the SSH proxy, enter the connection info for your
proxy/jump host there, and the connection info for the actual X2Go
server in the usual fields above.
You can either have two session tiles, one with proxy settings enabled,
one with them disabled, or go to the session config and check/unched the
proxy as required.

I'm (fairly) happy to set up two configurations for x2go. I'm not
quite sure how to configure the non-LAN one though, how do you
configure x2goclient to go 'via' system X to system Y? Is that what
x2go's "proxy server" means.

Well, I've tried it and I always end up with an error box saying:-

SSH proxy connection error: Access denied. Authentication that can
continue: publickey,password
Access denied. Authentication that can continue: publickey,password

It *only* uses password authentication, no keys, but even when I enter
the right passwords it repeatedly outpus the above error.

[Stefan Baur]

Post by Chris Green
It *only* uses password authentication, no keys, but even when I enter
the right passwords it repeatedly outpus the above error.

Have you tried entering the password you believe to be the second
password first?

-Stefan

[Chris Green]

Post by Stefan Baur

Post by Chris Green
It *only* uses password authentication, no keys, but even when I enter
the right passwords it repeatedly outpus the above error.

Have you tried entering the password you believe to be the second
password first?

Yes I'm pretty sure I've tried the two passwords both ways round but I
will try again just to make sure.

[Stefan Baur]

Post by Chris Green

Post by Stefan Baur

Post by Chris Green
It *only* uses password authentication, no keys, but even when I enter
the right passwords it repeatedly outpus the above error.

Have you tried entering the password you believe to be the second
password first?

Yes I'm pretty sure I've tried the two passwords both ways round but I
will try again just to make sure.

I think I might have encountered a similar issue today.

Could you please copy and paste what the login to the intermediate host
looks like on the command line, when you're not using an ssh_config
file, and pretend to log in directly for a shell?

i.e. something like:

ssh ***@pi
***@pi's password:
^^^^^^^^^^^^^^^^^^^^^ this is the line I'm curious about

Kind Regards,
Stefan Baur

[Chris Green]

Post by Stefan Baur

Post by Chris Green

Post by Stefan Baur

Post by Chris Green
It *only* uses password authentication, no keys, but even when I enter
the right passwords it repeatedly outpus the above error.

Have you tried entering the password you believe to be the second
password first?

Yes I'm pretty sure I've tried the two passwords both ways round but I
will try again just to make sure.

I think I might have encountered a similar issue today.
Could you please copy and paste what the login to the intermediate host
looks like on the command line, when you're not using an ssh_config
file, and pretend to log in directly for a shell?
^^^^^^^^^^^^^^^^^^^^^ this is the line I'm curious about

There's nothing, just a prompt:-

chris$ ssh cheddar.halon.org.uk
Password:
***@cheddar$