[winswitch] Unable to authenticate to xpra proxy

Wed Jul 27 16:54:13 BST 2016

On 27/07/16 22:36, Eric Grammatico wrote:
> Thanks Antoine for your quick reply.
> 
> I don't have any binary named xpra _sound_query.
This is not a binary but a subcommand of xpra, note the space in between
the command and its arguments. Just cut & paste it.

Cheers
Antoine

> I have installed packages from WinSwitch.org. I'll give it a try with your beta,if xpra _sound_query is packaged in I'll give you back the result.
> 
> thanks and regards,
> 
> 
> -
> _/) Eric Grammatico.
> 27 juillet 2016 17:09 "Antoine Martin" <antoine at nagafix.co.uk> a écrit:
>> On 27/07/16 21:08, Eric Grammatico wrote:
>>
>>> Hello There,
>>>
>>> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is
>>> commands launch from client side and logs:
>>>
>>> [eric at lys ~]$ export XPRA_PASSWORD="bonjour"
>>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000
>>
>> FYI: authentication modules are used to verify client authentication
>> tokens, they are not used by the client.
>> Client side, use the "password-file" option, or the XPRA_PASSWORD
>> environment variable.
>>
>> Newer versions will also support this form:
>> xpra attach tcp/username:password at IPADDRESS:PORT
>>
>>> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942
>>> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three
>>> 2016-07-27 16:01:37,203 Warning: failed to import opencv:
>>> 2016-07-27 16:01:37,204 No module named cv2
>>> 2016-07-27 16:01:37,204 webcam forwarding is disabled
>>> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7
>>> -:6: error: unexpected character ':', expected character '}'
>>> -:6: error: unexpected character ':', expected character '}'
>>
>> That's odd, can you please post the output of:
>> xpra _sound_query
>>
>>> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded
>>> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size
>>> 8192x8192
>>> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96'
>>> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96
>>> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr
>>> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen:
>>> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016
>>> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90)
>>> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established
>>> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found)
>>
>> "no sessions found" is quite likely to be caused by this bug:
>> http://xpra.org/trac/ticket/1264
>>
>>> 2016-07-27 16:01:42,241 Connection lost
>>> And commands from proxy side and logs:
>>> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth
>>> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0
>>> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh
>>> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100
>>> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942
>>> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core
>>> 2016-07-27 14:00:42,606 on display :100
>>> 2016-07-27 14:00:42,607 xpra is ready.
>>> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496
>>> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module
>>> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest
>>>
>>> If I try to type a stupid password on client side:
>>> [eric at lys ~]$ export XPRA_PASSWORD="stupid"
>>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000
>>> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942
>>> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three
>>> 2016-07-27 16:05:52,185 Warning: failed to import opencv:
>>> 2016-07-27 16:05:52,185 No module named cv2
>>> 2016-07-27 16:05:52,185 webcam forwarding is disabled
>>> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7
>>> -:6: error: unexpected character ':', expected character '}'
>>> -:6: error: unexpected character ':', expected character '}'
>>> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded
>>> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size
>>> 8192x8192
>>> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96'
>>> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96
>>> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr
>>> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen:
>>> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016
>>> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90)
>>> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established
>>> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response
>>> 2016-07-27 16:05:58,725 Connection lost
>>
>> Good debugging. Changing the password does make a difference.
>>
>>> And form proxy side:
>>> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528
>>> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module
>>> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest
>>> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match
>>> 2016-07-27 14:05:56,684 Error: authentication failed
>>> 2016-07-27 14:05:56,685 invalid challenge response
>>> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528:
>>> 2016-07-27 14:05:57,688 invalid challenge response
>>> 2016-07-27 14:05:57,691 Connection lost
>>>
>>> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome.
>>
>> So, this bug:
>> http://xpra.org/trac/ticket/1264
>> was fixed a few days ago and has already been applied to the v0.17.x
>> branch, it will be included in the 0.17.5 release.
>>
>> In the meantime, you can try a newer beta build:
>> http://xpra.org/beta
>> or downgrade to the 0.14.x LTS branch, which should be immune to this
>> particular regression.
>>
>> Cheers
>> Antoine
>>
>>> thanks and best regards,
>>>
>>> -
>>> _/) Eric Grammatico.
>>> _______________________________________________
>>> shifter-users mailing list
>>> shifter-users at lists.devloop.org.uk
>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users
>>
>> _______________________________________________
>> shifter-users mailing list
>> shifter-users at lists.devloop.org.uk
>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users
> _______________________________________________
> shifter-users mailing list
> shifter-users at lists.devloop.org.uk
> http://lists.devloop.org.uk/mailman/listinfo/shifter-users
>