From thejunk.b at gmail.com Fri Jul 8 23:15:21 2016 From: thejunk.b at gmail.com (Randy) Date: Fri, 08 Jul 2016 18:15:21 -0400 Subject: [winswitch] keyboard issue Message-ID: <1576905.js1K6g7hYS@bumblebee> I discovered an issue with the keyboard being passed correctly to a remote host. I am not sure that it is entirely winswitch/xrpa issue. I have 2 machines that run Debian Testing (Stretch). They are patched weekly. Both have the keyboard layout set in /etc/default/keyboard to dvork. There is a Debian Jessie Virtualbox vm on the Physical Desktop that I wanted to use as a test host for debugging an issue now that they have kde mostly functional again. This Jessie VM also has/had the keyboard layout set to dvoark in /etc/default/keyboard. I launched winswitch on both physical hosts and pulled the Jessie VM to the Physical Laptop but was unable to login to it. When I discovered that it was a keyboard layout issue and not me forgetting the password I was able to figure out what keystrokes it took to get logged in. So I commented out the layout line in /etc/default/keyboard on the VM and restarted it, then even though both Physical Hosts still have the dvoark layout I was able to login to the vm with my laptop with normal keystrokes. So I pushed the VM back to the physical desktop and the keyboard functions correctly. As further testing I restarted the VM on the desktop via a reboot from within the vm and the keyboard still functions correctly. Thanks -- If it ain't broke tweek it From esarmien at g.harvard.edu Wed Jul 20 02:07:12 2016 From: esarmien at g.harvard.edu (Evan Sarmiento) Date: Tue, 19 Jul 2016 21:07:12 -0400 Subject: [winswitch] --socket-dir doesn't work? Message-ID: Hi,? I noticed something kind of odd.? In previous versions of XPRA, I could place the XPRA sockets in a different directory, but, now? consider this? ??[esarmien at dev-cod6-2.clus.hmdc.harvard.edu] ? ??[~]> xpra --version? xpra v0.17.4? According to this log, the unix domain socket is still created in my ~/.xpra home directory, no matter what I do. ? ??[esarmien at dev-cod6-2.clus.hmdc.harvard.edu] ? ??[~]> XPRA_SOCKET_DIR=epep xpra start --socket-dir=epep --start-child=/usr/bin/gnome-terminal --daemon=no --socket-dir=epep --socket-dirs=epep? _XSERVTransSocketUNIXCreateListener: ...SocketCreateListener() failed? _XSERVTransMakeAllCOTSServerListeners: server already running? _XSERVTransSocketUNIXCreateListener: ...SocketCreateListener() failed? _XSERVTransMakeAllCOTSServerListeners: server already running? _XSERVTransSocketUNIXCreateListener: ...SocketCreateListener() failed? _XSERVTransMakeAllCOTSServerListeners: server already running? _XSERVTransmkdir: Owner of /tmp/.X11-unix should be set to root? X.Org X Server 1.17.4? Release Date: 2015-10-28? X Protocol Version 11, Revision 0? Build Operating System: worker1 2.6.32-573.18.1.el6.x86_64 ? Current Operating System: Linux dev-cod6-2.clus.hmdc.harvard.edu 2.6.32-642.1.1.el6.centos.plus.x86_64 #1 SMP Wed Jun 1 03:11:50 UTC 2016 x86_64? Kernel command line: ro root=/dev/mapper/vg01-root rd_NO_LUKS LANG=en_US.UTF-8 rd_NO_MD rd_LVM_LV=vg01/root SYSFONT=latarcyrheb-sun16 crashkernel=133M at 0M rd_LVM_LV=vg01/swap ?KEYBOARDTYPE=pc KEYTABLE=us rd_NO_DM rhgb quiet? Build Date: 12 July 2016 ?04:55:13PM? Build ID: xorg-x11-server 1.17.4-9.5.el6.centos ? Current version of pixman: 0.32.8? Before reporting problems, check http://wiki.centos.org/Documentation? to make sure that you have the latest version.? Markers: (--) probed, (**) from config file, (==) default setting,? (++) from command line, (!!) notice, (II) informational,? (WW) warning, (EE) error, (NI) not implemented, (??) unknown.? (++) Log file: "/nfs/home/E/esarmien/.xpra/Xorg.S23591.log", Time: Tue Jul 19 20:46:22 2016? (++) Using config file: "/etc/xpra/xorg.conf"? (==) Using system config directory "/usr/share/X11/xorg.conf.d"? Using display number provided by xpra_Xdummy: :3? 2016-07-19 20:46:22,744 created unix domain socket: /nfs/home/E/esarmien/.xpra/dev-cod6-2.clus.hmdc.harvard.edu-3? -- Evan Sarmeinto Front End Systems Software Developer Harvard-MIT Data Center T: 617-384-5876 E: esarmien at g.harvard.edu Follow us: @hmdcrce From antoine at nagafix.co.uk Wed Jul 20 08:42:41 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Wed, 20 Jul 2016 09:42:41 +0200 Subject: [winswitch] --socket-dir doesn't work? In-Reply-To: References: Message-ID: <6ecf4f6a-3172-b6c9-8721-36c6f52cdaa1@nagafix.co.uk> On 20/07/16 03:07, Evan Sarmiento wrote: > Hi, > > I noticed something kind of odd. > > In previous versions of XPRA, I could place the XPRA sockets in a different directory, but, now > consider this Please see: http://xpra.org/trac/ticket/1244#comment:1 This bug fix will be included in 0.17.5, in the meantime you can fix the issue yourself by setting "bind=auto" in your xpra.conf Cheers Antoine From e.grammatico at gmail.com Wed Jul 27 15:08:58 2016 From: e.grammatico at gmail.com (Eric Grammatico) Date: Wed, 27 Jul 2016 14:08:58 +0000 Subject: [winswitch] Unable to authenticate to xpra proxy Message-ID: Hello There, I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is commands launch from client side and logs: [eric at lys ~]$ export XPRA_PASSWORD="bonjour" [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three 2016-07-27 16:01:37,203 Warning: failed to import opencv: 2016-07-27 16:01:37,204 No module named cv2 2016-07-27 16:01:37,204 webcam forwarding is disabled 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 -:6: error: unexpected character ':', expected character '}' -:6: error: unexpected character ':', expected character '}' 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size 8192x8192 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) 2016-07-27 16:01:42,241 Connection lost And commands from proxy side and logs: [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core 2016-07-27 14:00:42,606 on display :100 2016-07-27 14:00:42,607 xpra is ready. 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest If I try to type a stupid password on client side: [eric at lys ~]$ export XPRA_PASSWORD="stupid" [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three 2016-07-27 16:05:52,185 Warning: failed to import opencv: 2016-07-27 16:05:52,185 No module named cv2 2016-07-27 16:05:52,185 webcam forwarding is disabled 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 -:6: error: unexpected character ':', expected character '}' -:6: error: unexpected character ':', expected character '}' 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size 8192x8192 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response 2016-07-27 16:05:58,725 Connection lost And form proxy side: 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match 2016-07-27 14:05:56,684 Error: authentication failed 2016-07-27 14:05:56,685 invalid challenge response 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: 2016-07-27 14:05:57,688 invalid challenge response 2016-07-27 14:05:57,691 Connection lost The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. thanks and best regards, - _/) Eric Grammatico. From antoine at nagafix.co.uk Wed Jul 27 16:09:15 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Wed, 27 Jul 2016 22:09:15 +0700 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: References: Message-ID: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> On 27/07/16 21:08, Eric Grammatico wrote: > Hello There, > > I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is commands launch from client side and logs: > > [eric at lys ~]$ export XPRA_PASSWORD="bonjour" > [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 FYI: authentication modules are used to verify client authentication tokens, they are not used by the client. Client side, use the "password-file" option, or the XPRA_PASSWORD environment variable. Newer versions will also support this form: xpra attach tcp/username:password at IPADDRESS:PORT > 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 > 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three > 2016-07-27 16:01:37,203 Warning: failed to import opencv: > 2016-07-27 16:01:37,204 No module named cv2 > 2016-07-27 16:01:37,204 webcam forwarding is disabled > 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 > -:6: error: unexpected character ':', expected character '}' > -:6: error: unexpected character ':', expected character '}' That's odd, can you please post the output of: xpra _sound_query > 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded > 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size 8192x8192 > 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' > 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 > 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr > 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: > 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 > 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) > 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established > 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) "no sessions found" is quite likely to be caused by this bug: http://xpra.org/trac/ticket/1264 > 2016-07-27 16:01:42,241 Connection lost > And commands from proxy side and logs: > [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth > eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 > [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh > 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 > 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 > 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core > 2016-07-27 14:00:42,606 on display :100 > 2016-07-27 14:00:42,607 xpra is ready. > 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 > 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module > 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest > > If I try to type a stupid password on client side: > [eric at lys ~]$ export XPRA_PASSWORD="stupid" > [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 > 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 > 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three > 2016-07-27 16:05:52,185 Warning: failed to import opencv: > 2016-07-27 16:05:52,185 No module named cv2 > 2016-07-27 16:05:52,185 webcam forwarding is disabled > 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 > -:6: error: unexpected character ':', expected character '}' > -:6: error: unexpected character ':', expected character '}' > 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded > 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size 8192x8192 > 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' > 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 > 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr > 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: > 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 > 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) > 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established > 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response > 2016-07-27 16:05:58,725 Connection lost Good debugging. Changing the password does make a difference. > And form proxy side: > 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 > 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module > 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest > 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match > 2016-07-27 14:05:56,684 Error: authentication failed > 2016-07-27 14:05:56,685 invalid challenge response > 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: > 2016-07-27 14:05:57,688 invalid challenge response > 2016-07-27 14:05:57,691 Connection lost > > The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. So, this bug: http://xpra.org/trac/ticket/1264 was fixed a few days ago and has already been applied to the v0.17.x branch, it will be included in the 0.17.5 release. In the meantime, you can try a newer beta build: http://xpra.org/beta/ or downgrade to the 0.14.x LTS branch, which should be immune to this particular regression. Cheers Antoine > > thanks and best regards, > > - > _/) Eric Grammatico. > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From e.grammatico at gmail.com Wed Jul 27 16:36:14 2016 From: e.grammatico at gmail.com (Eric Grammatico) Date: Wed, 27 Jul 2016 15:36:14 +0000 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> References: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> Message-ID: <4b1e60eaef7768625fe561bf5cd6a125@webmail.grammatico.me> Thanks Antoine for your quick reply. I don't have any binary named xpra _sound_query. I have installed packages from WinSwitch.org. I'll give it a try with your beta,if xpra _sound_query is packaged in I'll give you back the result. thanks and regards, - _/) Eric Grammatico. 27 juillet 2016 17:09 "Antoine Martin" a ?crit: > On 27/07/16 21:08, Eric Grammatico wrote: > >> Hello There, >> >> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is >> commands launch from client side and logs: >> >> [eric at lys ~]$ export XPRA_PASSWORD="bonjour" >> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 > > FYI: authentication modules are used to verify client authentication > tokens, they are not used by the client. > Client side, use the "password-file" option, or the XPRA_PASSWORD > environment variable. > > Newer versions will also support this form: > xpra attach tcp/username:password at IPADDRESS:PORT > >> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 >> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three >> 2016-07-27 16:01:37,203 Warning: failed to import opencv: >> 2016-07-27 16:01:37,204 No module named cv2 >> 2016-07-27 16:01:37,204 webcam forwarding is disabled >> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 >> -:6: error: unexpected character ':', expected character '}' >> -:6: error: unexpected character ':', expected character '}' > > That's odd, can you please post the output of: > xpra _sound_query > >> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded >> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size >> 8192x8192 >> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 >> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr >> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: >> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) >> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established >> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) > > "no sessions found" is quite likely to be caused by this bug: > http://xpra.org/trac/ticket/1264 > >> 2016-07-27 16:01:42,241 Connection lost >> And commands from proxy side and logs: >> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth >> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 >> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh >> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 >> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 >> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core >> 2016-07-27 14:00:42,606 on display :100 >> 2016-07-27 14:00:42,607 xpra is ready. >> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 >> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module >> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest >> >> If I try to type a stupid password on client side: >> [eric at lys ~]$ export XPRA_PASSWORD="stupid" >> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 >> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three >> 2016-07-27 16:05:52,185 Warning: failed to import opencv: >> 2016-07-27 16:05:52,185 No module named cv2 >> 2016-07-27 16:05:52,185 webcam forwarding is disabled >> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 >> -:6: error: unexpected character ':', expected character '}' >> -:6: error: unexpected character ':', expected character '}' >> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded >> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size >> 8192x8192 >> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 >> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr >> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: >> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) >> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established >> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response >> 2016-07-27 16:05:58,725 Connection lost > > Good debugging. Changing the password does make a difference. > >> And form proxy side: >> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 >> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module >> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest >> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match >> 2016-07-27 14:05:56,684 Error: authentication failed >> 2016-07-27 14:05:56,685 invalid challenge response >> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: >> 2016-07-27 14:05:57,688 invalid challenge response >> 2016-07-27 14:05:57,691 Connection lost >> >> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. > > So, this bug: > http://xpra.org/trac/ticket/1264 > was fixed a few days ago and has already been applied to the v0.17.x > branch, it will be included in the 0.17.5 release. > > In the meantime, you can try a newer beta build: > http://xpra.org/beta > or downgrade to the 0.14.x LTS branch, which should be immune to this > particular regression. > > Cheers > Antoine > >> thanks and best regards, >> >> - >> _/) Eric Grammatico. >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users From antoine at nagafix.co.uk Wed Jul 27 16:54:13 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Wed, 27 Jul 2016 22:54:13 +0700 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: <4b1e60eaef7768625fe561bf5cd6a125@webmail.grammatico.me> References: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> <4b1e60eaef7768625fe561bf5cd6a125@webmail.grammatico.me> Message-ID: <57f8b7fc-aba8-74ba-9a2c-d16403eba4fa@nagafix.co.uk> On 27/07/16 22:36, Eric Grammatico wrote: > Thanks Antoine for your quick reply. > > I don't have any binary named xpra _sound_query. This is not a binary but a subcommand of xpra, note the space in between the command and its arguments. Just cut & paste it. Cheers Antoine > I have installed packages from WinSwitch.org. I'll give it a try with your beta,if xpra _sound_query is packaged in I'll give you back the result. > > thanks and regards, > > > - > _/) Eric Grammatico. > 27 juillet 2016 17:09 "Antoine Martin" a ?crit: >> On 27/07/16 21:08, Eric Grammatico wrote: >> >>> Hello There, >>> >>> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is >>> commands launch from client side and logs: >>> >>> [eric at lys ~]$ export XPRA_PASSWORD="bonjour" >>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >> >> FYI: authentication modules are used to verify client authentication >> tokens, they are not used by the client. >> Client side, use the "password-file" option, or the XPRA_PASSWORD >> environment variable. >> >> Newer versions will also support this form: >> xpra attach tcp/username:password at IPADDRESS:PORT >> >>> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 >>> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three >>> 2016-07-27 16:01:37,203 Warning: failed to import opencv: >>> 2016-07-27 16:01:37,204 No module named cv2 >>> 2016-07-27 16:01:37,204 webcam forwarding is disabled >>> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 >>> -:6: error: unexpected character ':', expected character '}' >>> -:6: error: unexpected character ':', expected character '}' >> >> That's odd, can you please post the output of: >> xpra _sound_query >> >>> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded >>> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size >>> 8192x8192 >>> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 >>> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr >>> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: >>> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) >>> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established >>> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) >> >> "no sessions found" is quite likely to be caused by this bug: >> http://xpra.org/trac/ticket/1264 >> >>> 2016-07-27 16:01:42,241 Connection lost >>> And commands from proxy side and logs: >>> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth >>> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 >>> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh >>> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 >>> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 >>> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core >>> 2016-07-27 14:00:42,606 on display :100 >>> 2016-07-27 14:00:42,607 xpra is ready. >>> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 >>> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module >>> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest >>> >>> If I try to type a stupid password on client side: >>> [eric at lys ~]$ export XPRA_PASSWORD="stupid" >>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >>> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 >>> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three >>> 2016-07-27 16:05:52,185 Warning: failed to import opencv: >>> 2016-07-27 16:05:52,185 No module named cv2 >>> 2016-07-27 16:05:52,185 webcam forwarding is disabled >>> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 >>> -:6: error: unexpected character ':', expected character '}' >>> -:6: error: unexpected character ':', expected character '}' >>> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded >>> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size >>> 8192x8192 >>> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 >>> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr >>> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: >>> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) >>> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established >>> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response >>> 2016-07-27 16:05:58,725 Connection lost >> >> Good debugging. Changing the password does make a difference. >> >>> And form proxy side: >>> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 >>> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module >>> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest >>> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match >>> 2016-07-27 14:05:56,684 Error: authentication failed >>> 2016-07-27 14:05:56,685 invalid challenge response >>> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: >>> 2016-07-27 14:05:57,688 invalid challenge response >>> 2016-07-27 14:05:57,691 Connection lost >>> >>> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. >> >> So, this bug: >> http://xpra.org/trac/ticket/1264 >> was fixed a few days ago and has already been applied to the v0.17.x >> branch, it will be included in the 0.17.5 release. >> >> In the meantime, you can try a newer beta build: >> http://xpra.org/beta >> or downgrade to the 0.14.x LTS branch, which should be immune to this >> particular regression. >> >> Cheers >> Antoine >> >>> thanks and best regards, >>> >>> - >>> _/) Eric Grammatico. >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From e.grammatico at gmail.com Thu Jul 28 15:17:33 2016 From: e.grammatico at gmail.com (Eric Grammatico) Date: Thu, 28 Jul 2016 14:17:33 +0000 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> References: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> Message-ID: <19572d3538b6e94eef06009605bb5e5c@webmail.grammatico.me> Hi Antoine, I have followed your suggestion to make a test with the last Beta for Centos 7. Thanks to this I made some progress. Now the server sees client connexion attempt. Please find below logs from client side: $> xpra attach --username=eric --auth=env tcp:xspice.local:10000 2016-07-28 15:23:23,425 Xpra gtk2 client version 1.0-r13105 64-bit 2016-07-28 15:23:23,425 running on Linux Fedora 23 TwentyThree 2016-07-28 15:23:23,426 Warning: failed to import opencv: 2016-07-28 15:23:23,426 No module named cv2 2016-07-28 15:23:23,426 webcam forwarding is disabled 2016-07-28 15:23:23,623 GStreamer version 1.6 for Python 2.7 64-bit -:6: error: unexpected character ':', expected character '}' -:6: error: unexpected character ':', expected character '}' 2016-07-28 15:23:24,180 PyOpenGL warning: missing accelerate module 2016-07-28 15:23:24,184 OpenGL enabled with Gallium 0.4 on NV96 2016-07-28 15:23:24,726 detected keyboard: rules=evdev, model=pc105, layout=fr 2016-07-28 15:23:24,728 desktop size is 1680x1050 with 1 screen: 2016-07-28 15:23:24,728 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 2016-07-28 15:23:24,728 monitor 1 (474x296 mm - DPI: 90x90) 2016-07-28 15:23:44,703 connection timed out 2016-07-28 15:23:44,716 Connection lost logs from poxy: $> xpra proxy :100 --daemon=no --bind-tcp=0.0.0.0:10000 --tcp-auth=multifile:filename=/home/proxy/.xpra/proxy_auth Warning: invalid option: 'shadow-fullscreen' 2016-07-28 13:23:16,914 created unix domain socket: /root/.xpra/xpra_proxy-100 2016-07-28 13:23:18,187 html server unavailable, cannot find websockify module 2016-07-28 13:23:18,234 xpra proxy version 1.0-runknown 64-bit 2016-07-28 13:23:18,235 running with pid 22 on Linux 4.4.6-300.fc23.x86_64 2016-07-28 13:23:18,235 connected to X11 display :100 2016-07-28 13:23:18,236 xpra is ready. 2016-07-28 13:23:24,474 New tcp connection received from 192.168.122.1:52220 2016-07-28 13:23:24,482 Authentication required by multi password file authenticator module 2016-07-28 13:23:24,485 sending challenge for 'eric' using hmac digest Warning: invalid option: 'shadow-fullscreen' desc={'local': False, 'host': '172.19.0.2', 'display_name': 'tcp:172.19.0.2:10000', 'port': 10000, 'type': 'tcp'} 2016-07-28 13:23:25,577 read thread of None has not yet exited (timeout=0.6) 2016-07-28 13:23:25,578 some network IO threads have failed to terminate! Traceback (most recent call last): File "/usr/lib64/python2.7/multiprocessing/queues.py", line 266, in _feed send(obj) IOError: [Errno 32] Broken pipe Logs from the server: xpra --daemon=no start :100 --bind-tcp=0.0.0.0:10000 --exit-with-children --start-child=${XPRADIR}/xpra_child.sh Warning: invalid option: 'shadow-fullscreen' X.Org X Server 1.17.2 Release Date: 2015-06-16 X Protocol Version 11, Revision 0 Build Operating System: 2.6.32-220.17.1.el6.x86_64 Current Operating System: Linux rdisp_eric 4.4.6-300.fc23.x86_64 #1 SMP Wed Mar 16 22:10:37 UTC 2016 x86_64 Kernel command line: BOOT_IMAGE=/vmlinuz-4.4.6-300.fc23.x86_64 root=/dev/mapper/fedora-root ro rd.lvm.lv=fedora/root rd.lvm.lv=fedora/swap rhgb quiet LANG=fr_FR.UTF-8 Build Date: 20 November 2015 02:44:25PM Build ID: xorg-x11-server 1.17.2-10.el7 Current version of pixman: 0.32.6 Before reporting problems, check http://wiki.x.org to make sure that you have the latest version. Markers: (--) probed, (**) from config file, (==) default setting, (++) from command line, (!!) notice, (II) informational, (WW) warning, (EE) error, (NI) not implemented, (??) unknown. (++) Log file: "/home/rdisp/.xpra/Xorg.:100.log", Time: Thu Jul 28 13:57:48 2016 (++) Using config file: "/etc/xpra/xorg.conf" (==) Using system config directory "/usr/share/X11/xorg.conf.d" 2016-07-28 13:57:49,298 created unix domain socket: /home/rdisp/.xpra/rdisp_eric-100 2016-07-28 13:57:57,254 html server unavailable, cannot find websockify module 2016-07-28 13:57:57,698 started command '/home/rdisp/.xpra/xpra_child.sh' with pid 391 2016-07-28 13:57:57,701 xpra X11 version 1.0-runknown 64-bit 2016-07-28 13:57:57,702 running with pid 364 on Linux 4.4.6-300.fc23.x86_64 2016-07-28 13:57:57,702 connected to X11 display :100 2016-07-28 13:57:57,789 xpra is ready. 2016-07-28 13:58:49,931 New tcp connection received from 172.19.0.3:38970 Regarding the new URL format to attach from the client (eg: tcp/username:password at IPADDRESS:PORT), will it be supported in the multifile authentication module ? the auth file could looks like this: eric|bonjour|1000|1000|tcp/eric:bonjour at 172.19.0.2:10000|EXAMPLE_ENV=VALUE|compression=0 This way, the servers are proxied, but still secured with password to avoid direct connexion from the local area. Thanks and best regards, - _/) Eric Grammatico. 27 juillet 2016 17:09 "Antoine Martin" a ?crit: > On 27/07/16 21:08, Eric Grammatico wrote: > >> Hello There, >> >> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is >> commands launch from client side and logs: >> >> [eric at lys ~]$ export XPRA_PASSWORD="bonjour" >> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 > > FYI: authentication modules are used to verify client authentication > tokens, they are not used by the client. > Client side, use the "password-file" option, or the XPRA_PASSWORD > environment variable. > > Newer versions will also support this form: > xpra attach tcp/username:password at IPADDRESS:PORT > >> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 >> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three >> 2016-07-27 16:01:37,203 Warning: failed to import opencv: >> 2016-07-27 16:01:37,204 No module named cv2 >> 2016-07-27 16:01:37,204 webcam forwarding is disabled >> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 >> -:6: error: unexpected character ':', expected character '}' >> -:6: error: unexpected character ':', expected character '}' > > That's odd, can you please post the output of: > xpra _sound_query > >> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded >> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size >> 8192x8192 >> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 >> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr >> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: >> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) >> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established >> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) > > "no sessions found" is quite likely to be caused by this bug: > http://xpra.org/trac/ticket/1264 > >> 2016-07-27 16:01:42,241 Connection lost >> And commands from proxy side and logs: >> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth >> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 >> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh >> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 >> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 >> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core >> 2016-07-27 14:00:42,606 on display :100 >> 2016-07-27 14:00:42,607 xpra is ready. >> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 >> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module >> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest >> >> If I try to type a stupid password on client side: >> [eric at lys ~]$ export XPRA_PASSWORD="stupid" >> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 >> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three >> 2016-07-27 16:05:52,185 Warning: failed to import opencv: >> 2016-07-27 16:05:52,185 No module named cv2 >> 2016-07-27 16:05:52,185 webcam forwarding is disabled >> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 >> -:6: error: unexpected character ':', expected character '}' >> -:6: error: unexpected character ':', expected character '}' >> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded >> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size >> 8192x8192 >> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 >> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr >> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: >> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) >> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established >> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response >> 2016-07-27 16:05:58,725 Connection lost > > Good debugging. Changing the password does make a difference. > >> And form proxy side: >> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 >> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module >> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest >> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match >> 2016-07-27 14:05:56,684 Error: authentication failed >> 2016-07-27 14:05:56,685 invalid challenge response >> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: >> 2016-07-27 14:05:57,688 invalid challenge response >> 2016-07-27 14:05:57,691 Connection lost >> >> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. > > So, this bug: > http://xpra.org/trac/ticket/1264 > was fixed a few days ago and has already been applied to the v0.17.x > branch, it will be included in the 0.17.5 release. > > In the meantime, you can try a newer beta build: > http://xpra.org/beta > or downgrade to the 0.14.x LTS branch, which should be immune to this > particular regression. > > Cheers > Antoine > >> thanks and best regards, >> >> - >> _/) Eric Grammatico. >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users From antoine at nagafix.co.uk Thu Jul 28 15:54:46 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Thu, 28 Jul 2016 21:54:46 +0700 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: <19572d3538b6e94eef06009605bb5e5c@webmail.grammatico.me> References: <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> <19572d3538b6e94eef06009605bb5e5c@webmail.grammatico.me> Message-ID: <89f0a3b0-9fd1-2e30-94aa-a8a3b5115ee2@nagafix.co.uk> On 28/07/16 21:17, Eric Grammatico wrote: > Hi Antoine, > > I have followed your suggestion to make a test with the last Beta for Centos 7. Thanks to this I made some progress. Now the server sees client connexion attempt. > > Please find below logs from client side: > $> xpra attach --username=eric --auth=env tcp:xspice.local:10000 As per my previous reply: "--auth" does not do anything for the client. > 2016-07-28 15:23:23,425 Xpra gtk2 client version 1.0-r13105 64-bit > 2016-07-28 15:23:23,425 running on Linux Fedora 23 TwentyThree > 2016-07-28 15:23:23,426 Warning: failed to import opencv: > 2016-07-28 15:23:23,426 No module named cv2 > 2016-07-28 15:23:23,426 webcam forwarding is disabled > 2016-07-28 15:23:23,623 GStreamer version 1.6 for Python 2.7 64-bit > -:6: error: unexpected character ':', expected character '}' > -:6: error: unexpected character ':', expected character '}' Still not sure where this is from. The output "xpra _sound_query" that you sent doesn't contain it, so this must be coming from somewhere else. (snip) > 2016-07-28 13:23:24,482 Authentication required by multi password file authenticator module > 2016-07-28 13:23:24,485 sending challenge for 'eric' using hmac digest > Warning: invalid option: 'shadow-fullscreen' This warning is probably due to an old /etc/xpra/xpra.conf laying around. Make sure to install the latest one that comes with the RPM package. (maybe it was installed as rpmnew?) > desc={'local': False, 'host': '172.19.0.2', 'display_name': 'tcp:172.19.0.2:10000', 'port': 10000, 'type': 'tcp'} > 2016-07-28 13:23:25,577 read thread of None has not yet exited (timeout=0.6) > 2016-07-28 13:23:25,578 some network IO threads have failed to terminate! > Traceback (most recent call last): > File "/usr/lib64/python2.7/multiprocessing/queues.py", line 266, in _feed > send(obj) > IOError: [Errno 32] Broken pipe There was a problem with the naming of the RPM packages in the beta area, so you may have ended up downloading an older build. Sorry about that. The latest version does include the fix for this particular bug, included right at the top: http://xpra.org/trac/ticket/1264 Please try downloading again, you may have to: yum remove xpra xpra-common yum clean all Before you yum install again. The package file should have today's date in the filename. (snip) > Regarding the new URL format to attach from the client (eg: tcp/username:password at IPADDRESS:PORT), will it be supported in the multifile authentication module ? Not yet, but this could be added. Please file a ticket. > the auth file could looks like this: > eric|bonjour|1000|1000|tcp/eric:bonjour at 172.19.0.2:10000|EXAMPLE_ENV=VALUE|compression=0 > This way, the servers are proxied, but still secured with password to avoid direct connexion from the local area. You can achieve this already by adding your username and password to the session options (where compression=0 is set). ie: eric|bonjour|1000|1000|172.19.0.2:10000|EXAMPLE_ENV=VALUE|username=eric,password=bonjour,compression=0 Cheers Antoine > Thanks and best regards, > > - > _/) Eric Grammatico. > 27 juillet 2016 17:09 "Antoine Martin" a ?crit: >> On 27/07/16 21:08, Eric Grammatico wrote: >> >>> Hello There, >>> >>> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is >>> commands launch from client side and logs: >>> >>> [eric at lys ~]$ export XPRA_PASSWORD="bonjour" >>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >> >> FYI: authentication modules are used to verify client authentication >> tokens, they are not used by the client. >> Client side, use the "password-file" option, or the XPRA_PASSWORD >> environment variable. >> >> Newer versions will also support this form: >> xpra attach tcp/username:password at IPADDRESS:PORT >> >>> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 >>> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three >>> 2016-07-27 16:01:37,203 Warning: failed to import opencv: >>> 2016-07-27 16:01:37,204 No module named cv2 >>> 2016-07-27 16:01:37,204 webcam forwarding is disabled >>> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 >>> -:6: error: unexpected character ':', expected character '}' >>> -:6: error: unexpected character ':', expected character '}' >> >> That's odd, can you please post the output of: >> xpra _sound_query >> >>> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded >>> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size >>> 8192x8192 >>> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 >>> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr >>> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: >>> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) >>> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established >>> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) >> >> "no sessions found" is quite likely to be caused by this bug: >> http://xpra.org/trac/ticket/1264 >> >>> 2016-07-27 16:01:42,241 Connection lost >>> And commands from proxy side and logs: >>> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth >>> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 >>> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh >>> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 >>> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 >>> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core >>> 2016-07-27 14:00:42,606 on display :100 >>> 2016-07-27 14:00:42,607 xpra is ready. >>> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 >>> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module >>> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest >>> >>> If I try to type a stupid password on client side: >>> [eric at lys ~]$ export XPRA_PASSWORD="stupid" >>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >>> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 >>> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three >>> 2016-07-27 16:05:52,185 Warning: failed to import opencv: >>> 2016-07-27 16:05:52,185 No module named cv2 >>> 2016-07-27 16:05:52,185 webcam forwarding is disabled >>> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 >>> -:6: error: unexpected character ':', expected character '}' >>> -:6: error: unexpected character ':', expected character '}' >>> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded >>> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size >>> 8192x8192 >>> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 >>> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr >>> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: >>> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) >>> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established >>> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response >>> 2016-07-27 16:05:58,725 Connection lost >> >> Good debugging. Changing the password does make a difference. >> >>> And form proxy side: >>> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 >>> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module >>> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest >>> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match >>> 2016-07-27 14:05:56,684 Error: authentication failed >>> 2016-07-27 14:05:56,685 invalid challenge response >>> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: >>> 2016-07-27 14:05:57,688 invalid challenge response >>> 2016-07-27 14:05:57,691 Connection lost >>> >>> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. >> >> So, this bug: >> http://xpra.org/trac/ticket/1264 >> was fixed a few days ago and has already been applied to the v0.17.x >> branch, it will be included in the 0.17.5 release. >> >> In the meantime, you can try a newer beta build: >> http://xpra.org/beta >> or downgrade to the 0.14.x LTS branch, which should be immune to this >> particular regression. >> >> Cheers >> Antoine >> >>> thanks and best regards, >>> >>> - >>> _/) Eric Grammatico. >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From e.grammatico at gmail.com Fri Jul 29 15:21:49 2016 From: e.grammatico at gmail.com (Eric Grammatico) Date: Fri, 29 Jul 2016 14:21:49 +0000 Subject: [winswitch] Unable to authenticate to xpra proxy In-Reply-To: <89f0a3b0-9fd1-2e30-94aa-a8a3b5115ee2@nagafix.co.uk> References: <89f0a3b0-9fd1-2e30-94aa-a8a3b5115ee2@nagafix.co.uk> <54d7b02f-4a71-e603-2066-5ee57621ac1a@nagafix.co.uk> <19572d3538b6e94eef06009605bb5e5c@webmail.grammatico.me> Message-ID: <482a6da4f6631657652b5a72614a5e34@webmail.grammatico.me> Hi Antoine, Thanks ! That worked ! Thank you for your support. Regards, - _/) Eric Grammatico. 28 juillet 2016 16:54 "Antoine Martin" a ?crit: > On 28/07/16 21:17, Eric Grammatico wrote: > >> Hi Antoine, >> >> I have followed your suggestion to make a test with the last Beta for Centos 7. Thanks to this I >> made some progress. Now the server sees client connexion attempt. >> >> Please find below logs from client side: >> $> xpra attach --username=eric --auth=env tcp:xspice.local:10000 > > As per my previous reply: "--auth" does not do anything for the client. > >> 2016-07-28 15:23:23,425 Xpra gtk2 client version 1.0-r13105 64-bit >> 2016-07-28 15:23:23,425 running on Linux Fedora 23 TwentyThree >> 2016-07-28 15:23:23,426 Warning: failed to import opencv: >> 2016-07-28 15:23:23,426 No module named cv2 >> 2016-07-28 15:23:23,426 webcam forwarding is disabled >> 2016-07-28 15:23:23,623 GStreamer version 1.6 for Python 2.7 64-bit >> -:6: error: unexpected character ':', expected character '}' >> -:6: error: unexpected character ':', expected character '}' > > Still not sure where this is from. > The output "xpra _sound_query" that you sent doesn't contain it, so this > must be coming from somewhere else. > > (snip) > >> 2016-07-28 13:23:24,482 Authentication required by multi password file authenticator module >> 2016-07-28 13:23:24,485 sending challenge for 'eric' using hmac digest >> Warning: invalid option: 'shadow-fullscreen' > > This warning is probably due to an old /etc/xpra/xpra.conf laying > around. Make sure to install the latest one that comes with the RPM > package. (maybe it was installed as rpmnew?) > >> desc={'local': False, 'host': '172.19.0.2', 'display_name': 'tcp:172.19.0.2:10000', 'port': 10000, >> 'type': 'tcp'} >> 2016-07-28 13:23:25,577 read thread of None has not yet exited (timeout=0.6) >> 2016-07-28 13:23:25,578 some network IO threads have failed to terminate! >> Traceback (most recent call last): >> File "/usr/lib64/python2.7/multiprocessing/queues.py", line 266, in _feed >> send(obj) >> IOError: [Errno 32] Broken pipe > > There was a problem with the naming of the RPM packages in the beta > area, so you may have ended up downloading an older build. Sorry about that. > The latest version does include the fix for this particular bug, > included right at the top: > http://xpra.org/trac/ticket/1264 > > Please try downloading again, you may have to: > yum remove xpra xpra-common > yum clean all > Before you yum install again. > The package file should have today's date in the filename. > > (snip) > >> Regarding the new URL format to attach from the client (eg: tcp/username:password at IPADDRESS:PORT), >> will it be supported in the multifile authentication module ? > > Not yet, but this could be added. Please file a ticket. > >> the auth file could looks like this: >> eric|bonjour|1000|1000|tcp/eric:bonjour at 172.19.0.2:10000|EXAMPLE_ENV=VALUE|compression=0 >> This way, the servers are proxied, but still secured with password to avoid direct connexion from >> the local area. > > You can achieve this already by adding your username and password to the > session options (where compression=0 is set). ie: > eric|bonjour|1000|1000|172.19.0.2:10000|EXAMPLE_ENV=VALUE|username=eric,password=bonjour,compression > 0 > > Cheers > Antoine > >> Thanks and best regards, >> >> - >> _/) Eric Grammatico. >> 27 juillet 2016 17:09 "Antoine Martin" a ?crit: >>> On 27/07/16 21:08, Eric Grammatico wrote: >>> >>>> Hello There, >>>> >>>> I am evaluating xpra proxy feature, and I am desperately trying to setup authentication. Here is >>>> commands launch from client side and logs: >>>> >>>> [eric at lys ~]$ export XPRA_PASSWORD="bonjour" >>>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >>> >>> FYI: authentication modules are used to verify client authentication >>> tokens, they are not used by the client. >>> Client side, use the "password-file" option, or the XPRA_PASSWORD >>> environment variable. >>> >>> Newer versions will also support this form: >>> xpra attach tcp/username:password at IPADDRESS:PORT >>> >>>> 2016-07-27 16:01:37,203 Xpra gtk2 client version 0.17.4-r12942 >>>> 2016-07-27 16:01:37,203 running on Linux Fedora 23 Twenty Three >>>> 2016-07-27 16:01:37,203 Warning: failed to import opencv: >>>> 2016-07-27 16:01:37,204 No module named cv2 >>>> 2016-07-27 16:01:37,204 webcam forwarding is disabled >>>> 2016-07-27 16:01:37,389 GStreamer version 1.6 for Python 2.7 >>>> -:6: error: unexpected character ':', expected character '}' >>>> -:6: error: unexpected character ':', expected character '}' >>> >>> That's odd, can you please post the output of: >>> xpra _sound_query >>> >>>> 2016-07-27 16:01:37,894 OpenGL_accelerate module loaded >>>> 2016-07-27 16:01:37,901 Warning: OpenGL windows will be clamped to the maximum texture size >>>> 8192x8192 >>>> 2016-07-27 16:01:37,901 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>>> 2016-07-27 16:01:37,901 OpenGL enabled with Gallium 0.4 on NV96 >>>> 2016-07-27 16:01:41,744 detected keyboard: rules=evdev, model=pc105, layout=fr >>>> 2016-07-27 16:01:41,745 desktop size is 1680x1050 with 1 screen: >>>> 2016-07-27 16:01:41,745 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>>> 2016-07-27 16:01:41,745 monitor 1 (474x296 mm - DPI: 90x90) >>>> 2016-07-27 16:01:42,221 server failure: disconnected before the session could be established >>>> 2016-07-27 16:01:42,221 server requested disconnect: session not found error (no sessions found) >>> >>> "no sessions found" is quite likely to be caused by this bug: >>> http://xpra.org/trac/ticket/1264 >>> >>>> 2016-07-27 16:01:42,241 Connection lost >>>> And commands from proxy side and logs: >>>> [root at xpra_proxy /]# cat /home/proxy/.xpra/proxy_auth >>>> eric|bonjour|1000|1000|tcp:172.19.0.3:10000|EXAMPLE_ENV=VALUE|compression=0 >>>> [root at xpra_proxy /]# /home/proxy/.xpra/start_xpra.sh >>>> 2016-07-27 14:00:41,225 created unix domain socket: /root/.xpra/xpra_proxy-100 >>>> 2016-07-27 14:00:42,604 xpra proxy version 0.17.4-r12942 >>>> 2016-07-27 14:00:42,605 running with pid 42 on Linux CentOS Linux 7.2.1511 Core >>>> 2016-07-27 14:00:42,606 on display :100 >>>> 2016-07-27 14:00:42,607 xpra is ready. >>>> 2016-07-27 14:01:40,725 New tcp connection received from 192.168.122.1:48496 >>>> 2016-07-27 14:01:40,740 Authentication required by multi password file authenticator module >>>> 2016-07-27 14:01:40,744 sending challenge for 'eric' using hmac digest >>>> >>>> If I try to type a stupid password on client side: >>>> [eric at lys ~]$ export XPRA_PASSWORD="stupid" >>>> [eric at lys ~]$ xpra attach --username=eric --tcp-auth=env tcp:192.168.122.125:10000 >>>> 2016-07-27 16:05:52,185 Xpra gtk2 client version 0.17.4-r12942 >>>> 2016-07-27 16:05:52,185 running on Linux Fedora 23 Twenty Three >>>> 2016-07-27 16:05:52,185 Warning: failed to import opencv: >>>> 2016-07-27 16:05:52,185 No module named cv2 >>>> 2016-07-27 16:05:52,185 webcam forwarding is disabled >>>> 2016-07-27 16:05:52,413 GStreamer version 1.6 for Python 2.7 >>>> -:6: error: unexpected character ':', expected character '}' >>>> -:6: error: unexpected character ':', expected character '}' >>>> 2016-07-27 16:05:53,234 OpenGL_accelerate module loaded >>>> 2016-07-27 16:05:53,240 Warning: OpenGL windows will be clamped to the maximum texture size >>>> 8192x8192 >>>> 2016-07-27 16:05:53,240 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' >>>> 2016-07-27 16:05:53,241 OpenGL enabled with Gallium 0.4 on NV96 >>>> 2016-07-27 16:05:57,209 detected keyboard: rules=evdev, model=pc105, layout=fr >>>> 2016-07-27 16:05:57,210 desktop size is 1680x1050 with 1 screen: >>>> 2016-07-27 16:05:57,211 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 >>>> 2016-07-27 16:05:57,211 monitor 1 (474x296 mm - DPI: 90x90) >>>> 2016-07-27 16:05:58,688 server failure: disconnected before the session could be established >>>> 2016-07-27 16:05:58,689 server requested disconnect: invalid challenge response >>>> 2016-07-27 16:05:58,725 Connection lost >>> >>> Good debugging. Changing the password does make a difference. >>> >>>> And form proxy side: >>>> 2016-07-27 14:05:56,188 New tcp connection received from 192.168.122.1:48528 >>>> 2016-07-27 14:05:56,210 Authentication required by multi password file authenticator module >>>> 2016-07-27 14:05:56,210 sending challenge for 'eric' using hmac digest >>>> 2016-07-27 14:05:56,683 Error: hmac password challenge for 'eric' does not match >>>> 2016-07-27 14:05:56,684 Error: authentication failed >>>> 2016-07-27 14:05:56,685 invalid challenge response >>>> 2016-07-27 14:05:57,687 Disconnecting client 192.168.122.1:48528: >>>> 2016-07-27 14:05:57,688 invalid challenge response >>>> 2016-07-27 14:05:57,691 Connection lost >>>> >>>> The xpra server 172.19.0.3 has never seen any connexion attempt.... any support welcome. >>> >>> So, this bug: >>> http://xpra.org/trac/ticket/1264 >>> was fixed a few days ago and has already been applied to the v0.17.x >>> branch, it will be included in the 0.17.5 release. >>> >>> In the meantime, you can try a newer beta build: >>> http://xpra.org/beta >>> or downgrade to the 0.14.x LTS branch, which should be immune to this >>> particular regression. >>> >>> Cheers >>> Antoine >>> >>>> thanks and best regards, >>>> >>>> - >>>> _/) Eric Grammatico. >>>> _______________________________________________ >>>> shifter-users mailing list >>>> shifter-users at lists.devloop.org.uk >>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>> >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users