From mukulagrawal78 at yahoo.com Thu Sep 1 02:21:01 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Thu, 1 Sep 2016 01:21:01 +0000 (UTC) Subject: [winswitch] xpra window will stay on top In-Reply-To: <439164263.3010931.1472668841023@mail.yahoo.com> References: <439164263.3010931.1472668841023.ref@mail.yahoo.com> <439164263.3010931.1472668841023@mail.yahoo.com> Message-ID: <424369469.5151.1472692861612@mail.yahoo.com> I did some more experimentation and this seems to be a problem only with firefox window.? Other windows behave as expected. ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Wednesday, August 31, 2016 6:40 PM, Mukul Agrawal via shifter-users wrote: Like to report a buggy behavior.Running client on windows 7.Used putty to ssh to remote ubuntu machine. Launched a remote firefox app on remote machine.Got the window to pop-up on local windows machine. Good thing is that firefox will stay open even when Putty loses/expires connection. But .... once Putty has lost the connection, firefox window starts behaving weird. It would want to stay on top of all other windows no mater what. Even if I click on some other window, this will not go back. I can only minimize it.I did not experience this as long as Putty connection was active. ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) _______________________________________________ shifter-users mailing list shifter-users at lists.devloop.org.uk http://lists.devloop.org.uk/mailman/listinfo/shifter-users From antoine at nagafix.co.uk Thu Sep 1 04:38:41 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Thu, 1 Sep 2016 10:38:41 +0700 Subject: [winswitch] xpra window will stay on top In-Reply-To: <439164263.3010931.1472668841023@mail.yahoo.com> References: <439164263.3010931.1472668841023.ref@mail.yahoo.com> <439164263.3010931.1472668841023@mail.yahoo.com> Message-ID: On 01/09/16 01:40, Mukul Agrawal via shifter-users wrote: > Like to report a buggy behavior.Running client on windows 7.Used putty to ssh to remote ubuntu machine. > Launched a remote firefox app on remote machine.Got the window to pop-up on local windows machine. > Good thing is that firefox will stay open even when Putty loses/expires connection. > But .... once Putty has lost the connection, firefox window starts behaving weird. It would want to stay on top of all other windows no mater what. Even if I click on some other window, this will not go back. I can only minimize it.I did not experience this as long as Putty connection was active. Try to start firefox directly, without putty. Or start firefox from nohup, screen or tmux so that when the tty goes away when your connection is closed, the application won't lose its controlling tty. ie with the latest builds you can do: xpra_cmd start ssh/username:password at serverhost:sshport/ --start=firefox If you still experience issues, then maybe you're hitting this bug: http://xpra.org/trac/ticket/713 Please add your details there (OS, version, steps, etc.) Cheers Antoine > Regards, > Mukul ( https://sites.google.com/site/mukulagrawal ) > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From antoine at nagafix.co.uk Thu Sep 1 04:45:50 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Thu, 1 Sep 2016 10:45:50 +0700 Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <1131646350.3097961.1472684141503@mail.yahoo.com> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> Message-ID: <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> On 01/09/16 05:55, Mukul Agrawal wrote: > OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 > from beta. Still, cannot get it to work. Any help? > > started proxy like this > -- xpra proxy :13 > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth > > started a couple of servers on same machine like this > -- xpra start :11 --bind-tcp=0.0.0.0:10000 > -- xpra start :12 --bind-tcp=0.0.0.0:10001 > -- DISPLAY=:11 xlclock & > -- DISPLAY=:12 xlogo Don't do that. Same as the other thread about tty. Use this instead: xpra start :DISPLAY --bind-tcp=... --start=COMMAND > try to attach from windows machine > -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/52.53.168.31/10002/11 > > Everything seems to go well in the beginning. No error message. It > simply drops the connection without saying anything. You're not sharing your multifile password file, so I won't be able to reproduce what you did. You're also not showing what versions you've used for testing, the only version shown is from the win32 client, which is well out of date: > Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 There's a debug flag for authentication, try adding "-d auth" to your server command line. Cheers Antoine > > Here is the log from proxy :- > > > > 2016-08-31 22:28:47,740 New unix-domain connection received on > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m > 2016-08-31 22:29:00,624 New tcp connection received from > xx.yy.zz.aa:5792^[[0m > 2016-08-31 22:29:00,625 Authentication required by multi password file > authenticator module^[[0m > 2016-08-31 22:29:00,625 sending challenge for 'ubuntu' using hmac > digest^[[0m > ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m > ^[[33m2016-08-31 22:29:00,955 No module named xvid^[[0m > 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m > 2016-08-31 22:29:00,966 new proxy instance started^[[0m > 2016-08-31 22:29:00,966 for client tcp socket: aa.bb.cc.dd:10002 <- > xx.yy.zz.aa:5792^[[0m > 2016-08-31 22:29:00,967 and server tcp socket: aa.bb.cc.dd:43006 <- > 22.33.44.55:10000^[[0m > 2016-08-31 22:29:00,967 proxy instance now also available using unix > domain socket:^[[0m > 2016-08-31 22:29:00,967 /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m > 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 > <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) > to blocking mode^[[0m > 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m > 2016-08-31 22:29:01,628 removing socket > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m > 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m > > Here is the log from the server itself > > 2016-08-31 22:28:47,738 New unix-domain connection received on > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m > 2016-08-31 22:29:00,974 New tcp connection received from > 22.33.44.55:43006^[[0m > 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m > ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS > server:^[[0m > ^[[31m2016-08-31 22:29:00,980 No module named dbus^[[0m > 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version > 0.16.3-r12203^[[0m > 2016-08-31 22:29:00,981 connected from 'MAGRAWAL? as 'ubuntu' - > 'magrawal'^[[0m > 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 > xenial', 'machine': 'x86_64', 'platform': > 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', > 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', > 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', > 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version > unknown on 'ip-aa-bb-cc-dd'^[[0m > ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be > compatible: remote version not available!^[[0m > 2016-08-31 22:29:00,982 using h264 as primary encoding also available:^[[0m > 2016-08-31 22:29:00,982 vp9, vp8, png, png/P, png/L, rgb24, jpeg, > rgb32^[[0m > 2016-08-31 22:29:00,990 client root window size is 1920x1080 with 1 > display:^[[0m > 2016-08-31 22:29:00,990 Default (508x285 mm - DPI: 96x96)^[[0m > 2016-08-31 22:29:00,990 DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m > 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay > / 33ms interval^[[0m > 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m > 2016-08-31 22:29:01,629 client has requested disconnection: server > shutdown (client connection lost)^[[0m > 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m > 2016-08-31 22:29:01,629 client request^[[0m > 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m > > > Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) > > > On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users > wrote: > > > On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >> I am running xpra server 0.15 that I got from the latest winswitch repo. >> Started proxy like that shown in your basic usage example ProxyServer > ? Xpra >> >> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >> started a xpra server instance on same machine/same account using > several different formatsxpra start :11 >> xpra start :11 --bind-tcp=127.0.0.1:10001 >> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >> When I try to attach to this instance from windows machine using >> Xpra_cmd attach tcp/user at IP /10000/11 >> >> I get authentication error :- " authentication failed: this server > requires authentication, please provide a password." > I assume you must be using an older distribution like Ubuntu Trusty? > > Please try with the current beta packages, the next release will support > those older distribution versions and it includes a large number of > fixes for the proxy server: > http://xpra.org/trac/ticket/952 > http://xpra.org/trac/ticket/1264 > Many of those features and fixes are not available in the branch you are > using. > > Cheers > Antoine > >> >> Another problem >> xpra stop :13 will not stop the proxy.I again get a message asking for > a password. >> Regards, >> Mukul >> ( https://sites.google.com/site/mukulagrawal > ) >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > >> > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > From antoine at nagafix.co.uk Thu Sep 1 04:47:50 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Thu, 1 Sep 2016 10:47:50 +0700 Subject: [winswitch] 0.17 or 1.0 binaries for Ubuntu In-Reply-To: <1536596840.553191.1472578847121@mail.yahoo.com> References: <1536596840.553191.1472578847121.ref@mail.yahoo.com> <1536596840.553191.1472578847121@mail.yahoo.com> Message-ID: <65c40996-b127-a903-97ad-5f143a1a77e0@nagafix.co.uk> On 31/08/16 00:40, Mukul Agrawal via shifter-users wrote: > Where can I find XPRA 0.17 or 1.0 binaries for ubuntu? See: http://xpra.org/trac/wiki/Versions and "Download" section here: http://xpra.org/ > Regards, Mukul > ( https://sites.google.com/site/mukulagrawal ) > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From mukulagrawal78 at yahoo.com Thu Sep 1 07:40:26 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Thu, 1 Sep 2016 06:40:26 +0000 (UTC) Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> Message-ID: <1297761747.3280121.1472712026723@mail.yahoo.com> Some more information :- 1) server works with --auth and --tcp-auth. But proxy only works with tcp-auth. 2) I can connect to each of the servers directly. I can get their displays to local windows machine if I connect to them directly. But no luck getting the display through proxy. Connected like this :- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt tcp/ubuntu at 52.53.168.31/10000Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt tcp/ubuntu at 52.53.168.31/10001 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me authentication error no mater what I do. Finally, I had to use multifil to get rid of authetication errors. 4) auth file just has one line and no next line character (build using echo command). One line is this :-ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 I tried both the internal and external IP address. aa.bb.cc.dd:10001 as well as xx.yy.xx.aa:10001. I dont get authetication errors or connection errors with either. But none of them show me display. On local machine password file pswd.txt just had single word secretpassword. Again no next line character. 5) The xpra versions from the server log is shown like this :- ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m ^[[31m2016-08-31 21:50:45,340? No module named dbus^[[0m 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m 2016-08-31 21:50:45,341? running with pid 6869 on Linux Ubuntu 16.04 xenial^[[0m 2016-08-31 21:50:45,341? connected to X11 display :11^[[0m 2016-08-31 21:50:45,391 xpra is ready.^[[0m ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly after startup.^[[0m And logs from the proxy are here :- 2016-08-31 22:26:59,300 serving html content from '/usr/share/xpra/www'^[[0m 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m 2016-08-31 22:26:59,312? running with pid 7491 on Linux Ubuntu 16.04 xenial^[[0m 2016-08-31 22:26:59,313? connected to X11 display :13^[[0m 2016-08-31 22:26:59,313 xpra is ready.^[[0m 6) Anything else I might have forgotten?I am running out of ideas to try.Let me know? Very motivated to make it work .... but have no more ideas to experiment. ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Wednesday, August 31, 2016 8:45 PM, Antoine Martin wrote: On 01/09/16 05:55, Mukul Agrawal wrote: > OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 > from beta. Still, cannot get it to work. Any help? > > started proxy like this > -- xpra proxy :13 > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth > > started a couple of servers on same machine like this > -- xpra start :11 --bind-tcp=0.0.0.0:10000 > -- xpra start :12 --bind-tcp=0.0.0.0:10001 > -- DISPLAY=:11 xlclock & > -- DISPLAY=:12 xlogo Don't do that. Same as the other thread about tty. Use this instead: xpra start :DISPLAY --bind-tcp=... --start=COMMAND > try to attach from windows machine > -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/52.53.168.31/10002/11 > > Everything seems to go well in the beginning. No error message. It > simply drops the connection without saying anything. You're not sharing your multifile password file, so I won't be able to reproduce what you did. You're also not showing what versions you've used for testing, the only version shown is from the win32 client, which is well out of date: > Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 There's a debug flag for authentication, try adding "-d auth" to your server command line. Cheers Antoine > > Here is the log from proxy :- > > > > 2016-08-31 22:28:47,740 New unix-domain connection received on > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m > 2016-08-31 22:29:00,624 New tcp connection received from > xx.yy.zz.aa:5792^[[0m > 2016-08-31 22:29:00,625 Authentication required by multi password file > authenticator module^[[0m > 2016-08-31 22:29:00,625? sending challenge for 'ubuntu' using hmac > digest^[[0m > ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m > ^[[33m2016-08-31 22:29:00,955? No module named xvid^[[0m > 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m > 2016-08-31 22:29:00,966 new proxy instance started^[[0m > 2016-08-31 22:29:00,966? for client tcp socket: aa.bb.cc.dd:10002 <- > xx.yy.zz.aa:5792^[[0m > 2016-08-31 22:29:00,967? and server tcp socket: aa.bb.cc.dd:43006 <- > 22.33.44.55:10000^[[0m > 2016-08-31 22:29:00,967 proxy instance now also available using unix > domain socket:^[[0m > 2016-08-31 22:29:00,967? /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m > 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 > <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) > to blocking mode^[[0m > 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m > 2016-08-31 22:29:01,628 removing socket > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m > 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >? > Here is the log from the server itself >? > 2016-08-31 22:28:47,738 New unix-domain connection received on > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m > 2016-08-31 22:29:00,974 New tcp connection received from > 22.33.44.55:43006^[[0m > 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m > ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS > server:^[[0m > ^[[31m2016-08-31 22:29:00,980? No module named dbus^[[0m > 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version > 0.16.3-r12203^[[0m > 2016-08-31 22:29:00,981? connected from 'MAGRAWAL? as 'ubuntu' - > 'magrawal'^[[0m > 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 > xenial', 'machine': 'x86_64', 'platform': > 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', > 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', > 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', > 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version > unknown on 'ip-aa-bb-cc-dd'^[[0m > ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be > compatible: remote version not available!^[[0m > 2016-08-31 22:29:00,982? using h264 as primary encoding also available:^[[0m > 2016-08-31 22:29:00,982? vp9, vp8, png, png/P, png/L, rgb24, jpeg, > rgb32^[[0m > 2016-08-31 22:29:00,990? client root window size is 1920x1080 with 1 > display:^[[0m > 2016-08-31 22:29:00,990? Default (508x285 mm - DPI: 96x96)^[[0m > 2016-08-31 22:29:00,990? ? DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m > 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay > / 33ms interval^[[0m > 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m > 2016-08-31 22:29:01,629 client has requested disconnection: server > shutdown (client connection lost)^[[0m > 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m > 2016-08-31 22:29:01,629? client request^[[0m > 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m > > > Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) > > > On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users > wrote: > > > On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >> I am running xpra server 0.15 that I got from the latest winswitch repo. >> Started proxy like that shown in your basic usage example ProxyServer > ? Xpra >> >> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >> started a xpra server instance on same machine/same account using > several different formatsxpra start :11 >> xpra start :11 --bind-tcp=127.0.0.1:10001 >> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >> When I try to attach to this instance from windows machine using >> Xpra_cmd attach tcp/user at IP /10000/11 >> >> I get authentication error :- " authentication failed: this server > requires authentication, please provide a password." > I assume you must be using an older distribution like Ubuntu Trusty? > > Please try with the current beta packages, the next release will support > those older distribution versions and it includes a large number of > fixes for the proxy server: > http://xpra.org/trac/ticket/952 > http://xpra.org/trac/ticket/1264 > Many of those features and fixes are not available in the branch you are > using. > > Cheers > Antoine > >> >> Another problem >> xpra stop :13 will not stop the proxy.I again get a message asking for > a password. >>? Regards, >> Mukul >> ( https://sites.google.com/site/mukulagrawal > ) >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > >> > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > From antoine at nagafix.co.uk Thu Sep 1 17:40:47 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Thu, 1 Sep 2016 23:40:47 +0700 Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <1297761747.3280121.1472712026723@mail.yahoo.com> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> Message-ID: <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> On 01/09/16 13:40, Mukul Agrawal wrote: > Some more information :- > > 1) server works with --auth and --tcp-auth. But proxy only works with > tcp-auth. If you are still stuck, please explain what "doesn't work" exactly here. Do you get an error? If so, please post it. > 2) I can connect to each of the servers directly. I can get their > displays to local windows machine if I connect to them directly. But no > luck getting the display through proxy. Connected like this :- > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10000 > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10001 The username is specified twice in those command lines which is a little bit confusing: once using the "--username=" command line option and again in the URL. I find this form easier to read: xpra attach tcp/username:password at host:port/DISPLAY You only need to specify the DISPLAY if there are going to be more than one matching display for that user. If you are using multifile with a single entry then you don't need it. > 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me > authentication error no mater what I do. Please always include the actual errors, difficult to help you without. You need an authentication module so that the proxy can use it to locate the available sessions, so "none" is not expected to work. "allow" can work, but the username you specify must exist on the target system and if there is more than one session running as that user (including the proxy itself), you will probably need this fix: http://xpra.org/trac/changeset/13533 > Finally, I had to use multifil to get rid of authetication errors. > > 4) auth file just has one line and no next line character (build using > echo command). One line is this :- > ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 > > I tried both the internal and external IP address. aa.bb.cc.dd:10001 as > well as xx.yy.xx.aa:10001. I dont get authetication errors or connection > errors with either. But none of them show me display. Please post the full logs with the "-d auth" switch. These should show the authentication attempt, the sessions found, etc. > On local machine password file pswd.txt just had single word > secretpassword. Again no next line character. > > 5) The xpra versions from the server log is shown like this :- > > ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m > ^[[31m2016-08-31 21:50:45,340 No module named dbus^[[0m > 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m > 2016-08-31 21:50:45,341 running with pid 6869 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 21:50:45,341 connected to X11 display :11^[[0m > 2016-08-31 21:50:45,391 xpra is ready.^[[0m > ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly > after startup.^[[0m > > And logs from the proxy are here :- > > 2016-08-31 22:26:59,300 serving html content from '/usr/share/xpra/www'^[[0m > 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m > 2016-08-31 22:26:59,312 running with pid 7491 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 22:26:59,313 connected to X11 display :13^[[0m > 2016-08-31 22:26:59,313 xpra is ready.^[[0m > > 6) Anything else I might have forgotten? > I am running out of ideas to try. > Let me know? Very motivated to make it work .... but have no more ideas > to experiment. This works fine for me with the latest trunk: Example with multifile: $ cat > multifile.txt < > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > > > On Wednesday, August 31, 2016 8:45 PM, Antoine Martin > wrote: > > > On 01/09/16 05:55, Mukul Agrawal wrote: >> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >> from beta. Still, cannot get it to work. Any help? >> >> started proxy like this >> -- xpra proxy :13 >> > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >> >> started a couple of servers on same machine like this >> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >> -- DISPLAY=:11 xlclock & >> -- DISPLAY=:12 xlogo > Don't do that. Same as the other thread about tty. Use this instead: > xpra start :DISPLAY --bind-tcp=... --start=COMMAND > >> try to attach from windows machine >> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >> tcp/52.53.168.31/10002/11 >> >> Everything seems to go well in the beginning. No error message. It >> simply drops the connection without saying anything. > You're not sharing your multifile password file, so I won't be able to > reproduce what you did. > > You're also not showing what versions you've used for testing, the only > version shown is from the win32 client, which is well out of date: >> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 > > There's a debug flag for authentication, try adding "-d auth" to your > server command line. > > Cheers > Antoine > > >> >> Here is the log from proxy :- >> >> >> >> 2016-08-31 22:28:47,740 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >> 2016-08-31 22:29:00,624 New tcp connection received from >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,625 Authentication required by multi password file >> authenticator module^[[0m >> 2016-08-31 22:29:00,625 sending challenge for 'ubuntu' using hmac >> digest^[[0m >> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m >> ^[[33m2016-08-31 22:29:00,955 No module named xvid^[[0m >> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >> 2016-08-31 22:29:00,966 for client tcp socket: aa.bb.cc.dd:10002 <- >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,967 and server tcp socket: aa.bb.cc.dd:43006 <- >> 22.33.44.55:10000^[[0m >> 2016-08-31 22:29:00,967 proxy instance now also available using unix >> domain socket:^[[0m >> 2016-08-31 22:29:00,967 /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >> to blocking mode^[[0m >> 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m >> 2016-08-31 22:29:01,628 removing socket >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >> >> Here is the log from the server itself >> >> 2016-08-31 22:28:47,738 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >> 2016-08-31 22:29:00,974 New tcp connection received from >> 22.33.44.55:43006^[[0m >> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >> server:^[[0m >> ^[[31m2016-08-31 22:29:00,980 No module named dbus^[[0m >> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >> 0.16.3-r12203^[[0m >> 2016-08-31 22:29:00,981 connected from 'MAGRAWAL? as 'ubuntu' - >> 'magrawal'^[[0m >> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >> xenial', 'machine': 'x86_64', 'platform': >> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >> unknown on 'ip-aa-bb-cc-dd'^[[0m >> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >> compatible: remote version not available!^[[0m >> 2016-08-31 22:29:00,982 using h264 as primary encoding also > available:^[[0m >> 2016-08-31 22:29:00,982 vp9, vp8, png, png/P, png/L, rgb24, jpeg, >> rgb32^[[0m >> 2016-08-31 22:29:00,990 client root window size is 1920x1080 with 1 >> display:^[[0m >> 2016-08-31 22:29:00,990 Default (508x285 mm - DPI: 96x96)^[[0m >> 2016-08-31 22:29:00,990 DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >> / 33ms interval^[[0m >> 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m >> 2016-08-31 22:29:01,629 client has requested disconnection: server >> shutdown (client connection lost)^[[0m >> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >> 2016-08-31 22:29:01,629 client request^[[0m >> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >> >> >> Regards, Mukul ( https://sites.google.com/site/mukulagrawal > ) >> >> >> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >> > wrote: >> >> >> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>> I am running xpra server 0.15 that I got from the latest winswitch repo. >>> Started proxy like that shown in your basic usage example ProxyServer >> ? Xpra >>> >>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>> started a xpra server instance on same machine/same account using >> several different formatsxpra start :11 >>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>> When I try to attach to this instance from windows machine using >>> Xpra_cmd attach tcp/user at IP >/10000/11 >>> >>> I get authentication error :- " authentication failed: this server >> requires authentication, please provide a password." >> I assume you must be using an older distribution like Ubuntu Trusty? >> >> Please try with the current beta packages, the next release will support >> those older distribution versions and it includes a large number of >> fixes for the proxy server: >> http://xpra.org/trac/ticket/952 >> http://xpra.org/trac/ticket/1264 >> Many of those features and fixes are not available in the branch you are >> using. >> >> Cheers >> Antoine >> >>> >>> Another problem >>> xpra stop :13 will not stop the proxy.I again get a message asking for >> a password. >>> Regards, >>> Mukul >>> ( https://sites.google.com/site/mukulagrawal >> ) >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk > >> > >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >>> >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> > > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> > > > From mukulagrawal78 at yahoo.com Fri Sep 2 02:06:13 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 2 Sep 2016 01:06:13 +0000 (UTC) Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> Message-ID: <1091412847.227249.1472778373976@mail.yahoo.com> ?Upgraded my windows client version to 0.17.5 revision 13487 Followed your "--tcp-auth-allow" example. Still, does not work for me. Exact commands and logs attached below. Even with "allow", proxy is still challenging client for password. ?xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :11 -d auth ?xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth xpra attach tcp/ubuntu at 52.53.168.31/10002/11 Following is the log from proxy 2016-09-02 00:52:37,344 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m ^[[33m2016-09-02 00:52:37,454 Warning: failed to load the mdns avahi publisher:^[[0m ^[[33m2016-09-02 00:52:37,454? No module named avahi^[[0m ^[[33m2016-09-02 00:52:37,454? either fix your installation or use the 'mdns=no' option^[[0m 2016-09-02 00:52:37,492 serving html content from '/usr/share/xpra/www'^[[0m ^[[36m2016-09-02 00:52:37,492 get_auth_module(unix-domain, , {..})^[[0m ^[[36m2016-09-02 00:52:37,492 get_auth_module(tcp, allow, {..})^[[0m ^[[36m2016-09-02 00:52:37,505 get_auth_module(ssl, allow, {..})^[[0m ^[[36m2016-09-02 00:52:37,506 get_auth_module(vsock, , {..})^[[0m ^[[36m2016-09-02 00:52:37,506 init_auth(..) auth class=None, tcp auth class=('allow', , {}), ssl auth class=('allow', , {}), vsock auth class=None^[[0m 2016-09-02 00:52:37,506 xpra proxy version 1.0-r13253 64-bit^[[0m 2016-09-02 00:52:37,506? running with pid 10576 on Linux Ubuntu 16.04 xenial^[[0m 2016-09-02 00:52:37,506? connected to X11 display :13^[[0m 2016-09-02 00:52:37,506 xpra is ready.^[[0m 2016-09-02 00:53:04,292 New tcp connection received from uu.vv.ww.xx:11154^[[0m ^[[36m2016-09-02 00:53:04,293 socktype=tcp, auth class=('allow', , {}), encryption=, keyfile=^[[0m ^[[36m2016-09-02 00:53:04,482 creating authenticator ('allow', , {})^[[0m ^[[36m2016-09-02 00:53:04,483 allow=allow^[[0m ^[[36m2016-09-02 00:53:04,483 processing authentication with allow, response=None, client_salt=, challenge_sent=False^[[0m ^[[36m2016-09-02 00:53:04,483 challenge: ('274be8f27a4742d1b0f37616d6fbc4ec', 'hmac')^[[0m 2016-09-02 00:53:04,483 Authentication required by allow authenticator module^[[0m 2016-09-02 00:53:04,483? sending challenge for 'ubuntu' using hmac digest^[[0m 2016-09-02 00:53:04,521 client has requested disconnection: no password available^[[0m 2016-09-02 00:53:04,521 Disconnecting client uu.vv.ww.xx:11154:^[[0m 2016-09-02 00:53:04,521? client request^[[0m Following is the log from server 2016-09-02 00:51:26,418 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m ^[[33m2016-09-02 00:51:26,468 Warning: menu forwarding is disabled:^[[0m ^[[33m2016-09-02 00:51:26,468? cannot load dbus helper: No module named dbus^[[0m ^[[33m2016-09-02 00:51:26,697 Warning: enc_xvid failed its self test^[[0m ^[[33m2016-09-02 00:51:26,698? No module named xvid^[[0m ^[[33m2016-09-02 00:51:26,712 Warning: failed to load the mdns avahi publisher:^[[0m ^[[33m2016-09-02 00:51:26,712? No module named avahi^[[0m ^[[33m2016-09-02 00:51:26,712? either fix your installation or use the 'mdns=no' option^[[0m ^[[33m2016-09-02 00:51:26,717 Warning: no X11 RandR support on :11^[[0m 2016-09-02 00:51:27,327 serving html content from '/usr/share/xpra/www'^[[0m ^[[36m2016-09-02 00:51:27,327 get_auth_module(unix-domain, , {..})^[[0m ^[[36m2016-09-02 00:51:27,327 get_auth_module(tcp, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 get_auth_module(ssl, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 get_auth_module(vsock, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 init_auth(..) auth class=None, tcp auth class=None, ssl auth class=None, vsock auth class=None^[[0m ^[[31m2016-09-02 00:51:27,401 Error: failed to import the virtual video module:^[[0m ^[[31m2016-09-02 00:51:27,401? No module named _dbus_bindings^[[0m 2016-09-02 00:51:27,411 pulseaudio server started with pid 10536^[[0m /bin/sh: 1: pulseaudio: not found Warning: failed to import GStreamer: ?GStreamer 1.0: Namespace Gst not available ?GStreamer 0.10: could not import gobject (could not find _PyGObject_API object) ^[[31m2016-09-02 00:51:27,710 Error: failed to query sound subsystem:^[[0m ^[[31m2016-09-02 00:51:27,711? query did not return any data^[[0m ^[[33m2016-09-02 00:51:27,712 Warning: failed to load or register our dbus notifications forwarder:^[[0m ^[[33m2016-09-02 00:51:27,712? No module named dbus.service^[[0m ^[[33m2016-09-02 00:51:27,712? if you do not have a dedicated dbus session for this xpra instance,^[[0m ^[[33m2016-09-02 00:51:27,712? use the 'notifications=no' option^[[0m ^[[33m2016-09-02 00:51:27,713 cannot load dbus helper: No module named dbus^[[0m ^[[31m2016-09-02 00:51:27,717 Error setting up our dbus server:^[[0m ^[[31m2016-09-02 00:51:27,717? No module named dbus^[[0m 2016-09-02 00:51:27,721 xpra X11 version 1.0-r13253 64-bit^[[0m 2016-09-02 00:51:27,722? running with pid 10500 on Linux Ubuntu 16.04 xenial^[[0m 2016-09-02 00:51:27,722? connected to X11 display :11^[[0m 2016-09-02 00:51:27,831 xpra is ready.^[[0m ^[[33m2016-09-02 00:51:28,723 Warning: pulseaudio has terminated shortly after startup.^[[0m ^[[33m2016-09-02 00:51:28,723? pulseaudio is limited to a single instance per user account,^[[0m ^[[33m2016-09-02 00:51:28,723? and one may be running already for user 'ubuntu'^[[0m ^[[33m2016-09-02 00:51:28,723? to avoid this warning, either fix the pulseaudio command line^[[0m ^[[33m2016-09-02 00:51:28,723? or use the 'pulseaudio=no' option^[[0m Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Thursday, September 1, 2016 4:40 PM, Antoine Martin wrote: On 01/09/16 13:40, Mukul Agrawal wrote: > Some more information :- > > 1) server works with --auth and --tcp-auth. But proxy only works with > tcp-auth. If you are still stuck, please explain what "doesn't work" exactly here. Do you get an error? If so, please post it. > 2) I can connect to each of the servers directly. I can get their > displays to local windows machine if I connect to them directly. But no > luck getting the display through proxy. Connected like this :- > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10000 > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10001 The username is specified twice in those command lines which is a little bit confusing: once using the "--username=" command line option and again in the URL. I find this form easier to read: xpra attach tcp/username:password at host:port/DISPLAY You only need to specify the DISPLAY if there are going to be more than one matching display for that user. If you are using multifile with a single entry then you don't need it. > 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me > authentication error no mater what I do. Please always include the actual errors, difficult to help you without. You need an authentication module so that the proxy can use it to locate the available sessions, so "none" is not expected to work. "allow" can work, but the username you specify must exist on the target system and if there is more than one session running as that user (including the proxy itself), you will probably need this fix: http://xpra.org/trac/changeset/13533 > Finally, I had to use multifil to get rid of authetication errors. > > 4) auth file just has one line and no next line character (build using > echo command). One line is this :- > ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 > > I tried both the internal and external IP address. aa.bb.cc.dd:10001 as > well as xx.yy.xx.aa:10001. I dont get authetication errors or connection > errors with either. But none of them show me display. Please post the full logs with the "-d auth" switch. These should show the authentication attempt, the sessions found, etc. > On local machine password file pswd.txt just had single word > secretpassword. Again no next line character. > > 5) The xpra versions from the server log is shown like this :- > > ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m > ^[[31m2016-08-31 21:50:45,340? No module named dbus^[[0m > 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m > 2016-08-31 21:50:45,341? running with pid 6869 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 21:50:45,341? connected to X11 display :11^[[0m > 2016-08-31 21:50:45,391 xpra is ready.^[[0m > ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly > after startup.^[[0m > > And logs from the proxy are here :- > > 2016-08-31 22:26:59,300 serving html content from '/usr/share/xpra/www'^[[0m > 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m > 2016-08-31 22:26:59,312? running with pid 7491 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 22:26:59,313? connected to X11 display :13^[[0m > 2016-08-31 22:26:59,313 xpra is ready.^[[0m > > 6) Anything else I might have forgotten? > I am running out of ideas to try. > Let me know? Very motivated to make it work .... but have no more ideas > to experiment. This works fine for me with the latest trunk: Example with multifile: $ cat > multifile.txt <? > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > > > On Wednesday, August 31, 2016 8:45 PM, Antoine Martin > wrote: > > > On 01/09/16 05:55, Mukul Agrawal wrote: >> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >> from beta. Still, cannot get it to work. Any help? >> >> started proxy like this >> -- xpra proxy :13 >> > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >> >> started a couple of servers on same machine like this >> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >> -- DISPLAY=:11 xlclock & >> -- DISPLAY=:12 xlogo > Don't do that. Same as the other thread about tty. Use this instead: > xpra start :DISPLAY --bind-tcp=... --start=COMMAND > >> try to attach from windows machine >> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >> tcp/52.53.168.31/10002/11 >> >> Everything seems to go well in the beginning. No error message. It >> simply drops the connection without saying anything. > You're not sharing your multifile password file, so I won't be able to > reproduce what you did. > > You're also not showing what versions you've used for testing, the only > version shown is from the win32 client, which is well out of date: >> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 > > There's a debug flag for authentication, try adding "-d auth" to your > server command line. > > Cheers > Antoine > > >> >> Here is the log from proxy :- >> >> >> >> 2016-08-31 22:28:47,740 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >> 2016-08-31 22:29:00,624 New tcp connection received from >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,625 Authentication required by multi password file >> authenticator module^[[0m >> 2016-08-31 22:29:00,625? sending challenge for 'ubuntu' using hmac >> digest^[[0m >> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m >> ^[[33m2016-08-31 22:29:00,955? No module named xvid^[[0m >> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >> 2016-08-31 22:29:00,966? for client tcp socket: aa.bb.cc.dd:10002 <- >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,967? and server tcp socket: aa.bb.cc.dd:43006 <- >> 22.33.44.55:10000^[[0m >> 2016-08-31 22:29:00,967 proxy instance now also available using unix >> domain socket:^[[0m >> 2016-08-31 22:29:00,967? /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >> to blocking mode^[[0m >> 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m >> 2016-08-31 22:29:01,628 removing socket >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >> >> Here is the log from the server itself >> >> 2016-08-31 22:28:47,738 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >> 2016-08-31 22:29:00,974 New tcp connection received from >> 22.33.44.55:43006^[[0m >> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >> server:^[[0m >> ^[[31m2016-08-31 22:29:00,980? No module named dbus^[[0m >> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >> 0.16.3-r12203^[[0m >> 2016-08-31 22:29:00,981? connected from 'MAGRAWAL? as 'ubuntu' - >> 'magrawal'^[[0m >> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >> xenial', 'machine': 'x86_64', 'platform': >> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >> unknown on 'ip-aa-bb-cc-dd'^[[0m >> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >> compatible: remote version not available!^[[0m >> 2016-08-31 22:29:00,982? using h264 as primary encoding also > available:^[[0m >> 2016-08-31 22:29:00,982? vp9, vp8, png, png/P, png/L, rgb24, jpeg, >> rgb32^[[0m >> 2016-08-31 22:29:00,990? client root window size is 1920x1080 with 1 >> display:^[[0m >> 2016-08-31 22:29:00,990? Default (508x285 mm - DPI: 96x96)^[[0m >> 2016-08-31 22:29:00,990? ? DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >> / 33ms interval^[[0m >> 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m >> 2016-08-31 22:29:01,629 client has requested disconnection: server >> shutdown (client connection lost)^[[0m >> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >> 2016-08-31 22:29:01,629? client request^[[0m >> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >> >> >> Regards, Mukul ( https://sites.google.com/site/mukulagrawal > ) >> >> >> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >> > wrote: >> >> >> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>> I am running xpra server 0.15 that I got from the latest winswitch repo. >>> Started proxy like that shown in your basic usage example ProxyServer >> ? Xpra >>> >>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>> started a xpra server instance on same machine/same account using >> several different formatsxpra start :11 >>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>> When I try to attach to this instance from windows machine using >>> Xpra_cmd attach tcp/user at IP >/10000/11 >>> >>> I get authentication error :- " authentication failed: this server >> requires authentication, please provide a password." >> I assume you must be using an older distribution like Ubuntu Trusty? >> >> Please try with the current beta packages, the next release will support >> those older distribution versions and it includes a large number of >> fixes for the proxy server: >> http://xpra.org/trac/ticket/952 >> http://xpra.org/trac/ticket/1264 >> Many of those features and fixes are not available in the branch you are >> using. >> >> Cheers >> Antoine >> >>> >>> Another problem >>> xpra stop :13 will not stop the proxy.I again get a message asking for >> a password. >>>? Regards, >>> Mukul >>> ( https://sites.google.com/site/mukulagrawal >> ) >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk > >> > >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >>> >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> > > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> > > > From mukulagrawal78 at yahoo.com Fri Sep 2 02:41:02 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 2 Sep 2016 01:41:02 +0000 (UTC) Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <1091412847.227249.1472778373976@mail.yahoo.com> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> <1091412847.227249.1472778373976@mail.yahoo.com> Message-ID: <424526524.216325.1472780462297@mail.yahoo.com> I also tried your "multifile" example.I managed to make it work but still reporting logs here so it might help you guys clean up some remaining bugs. Upgraded my windows client version to 0.17.5 revision 13487 xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :100 -d auth xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=multifile:filename=./multifile.txt -d auth xpra attach tcp/ubuntu1:secretpassword1 at ee.ff.gg.hh:10002 xpra attach tcp/ubuntu2:secretpassword2 at ee.ff.gg.hh:10002 Following error pops in the client. No logs of attempted connection at porxy or at server. ? Tried following two attach command formats. Both gave same error as above. xpra attach --username=ubuntu1 --password-file=pswd.txt tcp/ee.ff.gg.hh:10002 xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh:10002 Finally, following format didn't give any error on the client side. xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh/10002 Following is log at proxy :- 2016-09-02 01:18:39,593 created unix domain socket: /home/ubuntu/.xpra/ip-172-31-4-230-13^[[0m ^[[33m2016-09-02 01:18:39,700 Warning: failed to load the mdns avahi publisher:^[[0m ^[[33m2016-09-02 01:18:39,701? No module named avahi^[[0m ^[[33m2016-09-02 01:18:39,701? either fix your installation or use the 'mdns=no' option^[[0m 2016-09-02 01:18:39,737 serving html content from '/usr/share/xpra/www'^[[0m ^[[36m2016-09-02 01:18:39,737 get_auth_module(unix-domain, , {..})^[[0m ^[[36m2016-09-02 01:18:39,737 get_auth_module(tcp, multifile:filename=./multifile.txt, {..})^[[0m ^[[36m2016-09-02 01:18:39,750 get_auth_module(ssl, multifile:filename=./multifile.txt, {..})^[[0m ^[[36m2016-09-02 01:18:39,750 get_auth_module(vsock, , {..})^[[0m ^[[36m2016-09-02 01:18:39,751 init_auth(..) auth class=None, tcp auth class=('multifile', , {'filename': './multifile.txt'}), ssl auth class=('multifile', , {'filename': './multifile.txt'}), vsock auth class=None^[[0m 2016-09-02 01:18:39,751 xpra proxy version 1.0-r13253 64-bit^[[0m 2016-09-02 01:18:39,751? running with pid 10958 on Linux Ubuntu 16.04 xenial^[[0m 2016-09-02 01:18:39,751? connected to X11 display :13^[[0m 2016-09-02 01:18:39,751 xpra is ready.^[[0m 2016-09-02 01:31:07,871 New tcp connection received from 70.197.3.8:11137^[[0m ^[[36m2016-09-02 01:31:07,872 socktype=tcp, auth class=('multifile', , {'filename': './multifile.txt'}), encryption=, keyfile=^[[0m ^[[36m2016-09-02 01:31:07,873 creating authenticator ('multifile', , {'filename': './multifile.txt'})^[[0m ^[[36m2016-09-02 01:31:07,874 multifile=multi password file^[[0m ^[[36m2016-09-02 01:31:07,874 processing authentication with multi password file, response=None, client_salt=, challenge_sent=False^[[0m ^[[36m2016-09-02 01:31:07,874 challenge: ('5e80847eb31d49f0a1d54612cea8bcd88d7b42f754904563ab2d6603ad77b4e8', 'hmac')^[[0m 2016-09-02 01:31:07,874 Authentication required by multi password file authenticator module^[[0m 2016-09-02 01:31:07,874? sending challenge for 'ubuntu1' using hmac digest^[[0m ^[[36m2016-09-02 01:31:07,984 processing authentication with multi password file, response=efe6b9721d4473013f1cd84e6fa9e3e1, client_salt=38356661383430633664636434653037616165633231623665383138633333626539353765353331326635383436393161393235646533633565653864383863, challenge_sent=True^[[0m ^[[31m2016-09-02 01:31:07,984 Error: password file '/multifile.txt' is missing^[[0m ^[[36m2016-09-02 01:31:07,984 authenticate(ubuntu1) auth-info=None^[[0m ^[[31m2016-09-02 01:31:07,984 Error: authentication failed^[[0m ^[[31m2016-09-02 01:31:07,984? no password for 'ubuntu1' in './multifile.txt'^[[0m ^[[31m2016-09-02 01:31:07,985 Error: authentication failed^[[0m ^[[31m2016-09-02 01:31:07,985? invalid challenge response^[[0m 2016-09-02 01:31:08,985 Disconnecting client 70.197.3.8:11137:^[[0m 2016-09-02 01:31:08,985? invalid challenge response^[[0m No log of attempted connection at the server. Finally, tried giving full path to the multifile :- ?xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=multifile:filename=/home/ubuntu/multifile.txt -d auth and tried these attach commands, they worked!! Yay :) Thanks! xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh/10002 xpra attach --password-file=pswd2.txt tcp/ubuntu2 at ee.ff.gg.hh/10002 Yeah have one question:You said second format connects using TCP. What transport is used for the first format? ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Thursday, September 1, 2016 6:06 PM, Mukul Agrawal wrote: ?Upgraded my windows client version to 0.17.5 revision 13487 Followed your "--tcp-auth-allow" example. Still, does not work for me. Exact commands and logs attached below. Even with "allow", proxy is still challenging client for password. ?xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :11 -d auth ?xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth xpra attach tcp/ubuntu at 52.53.168.31/10002/11 Following is the log from proxy 2016-09-02 00:52:37,344 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m ^[[33m2016-09-02 00:52:37,454 Warning: failed to load the mdns avahi publisher:^[[0m ^[[33m2016-09-02 00:52:37,454? No module named avahi^[[0m ^[[33m2016-09-02 00:52:37,454? either fix your installation or use the 'mdns=no' option^[[0m 2016-09-02 00:52:37,492 serving html content from '/usr/share/xpra/www'^[[0m ^[[36m2016-09-02 00:52:37,492 get_auth_module(unix-domain, , {..})^[[0m ^[[36m2016-09-02 00:52:37,492 get_auth_module(tcp, allow, {..})^[[0m ^[[36m2016-09-02 00:52:37,505 get_auth_module(ssl, allow, {..})^[[0m ^[[36m2016-09-02 00:52:37,506 get_auth_module(vsock, , {..})^[[0m ^[[36m2016-09-02 00:52:37,506 init_auth(..) auth class=None, tcp auth class=('allow', , {}), ssl auth class=('allow', , {}), vsock auth class=None^[[0m 2016-09-02 00:52:37,506 xpra proxy version 1.0-r13253 64-bit^[[0m 2016-09-02 00:52:37,506? running with pid 10576 on Linux Ubuntu 16.04 xenial^[[0m 2016-09-02 00:52:37,506? connected to X11 display :13^[[0m 2016-09-02 00:52:37,506 xpra is ready.^[[0m 2016-09-02 00:53:04,292 New tcp connection received from uu.vv.ww.xx:11154^[[0m ^[[36m2016-09-02 00:53:04,293 socktype=tcp, auth class=('allow', , {}), encryption=, keyfile=^[[0m ^[[36m2016-09-02 00:53:04,482 creating authenticator ('allow', , {})^[[0m ^[[36m2016-09-02 00:53:04,483 allow=allow^[[0m ^[[36m2016-09-02 00:53:04,483 processing authentication with allow, response=None, client_salt=, challenge_sent=False^[[0m ^[[36m2016-09-02 00:53:04,483 challenge: ('274be8f27a4742d1b0f37616d6fbc4ec', 'hmac')^[[0m 2016-09-02 00:53:04,483 Authentication required by allow authenticator module^[[0m 2016-09-02 00:53:04,483? sending challenge for 'ubuntu' using hmac digest^[[0m 2016-09-02 00:53:04,521 client has requested disconnection: no password available^[[0m 2016-09-02 00:53:04,521 Disconnecting client uu.vv.ww.xx:11154:^[[0m 2016-09-02 00:53:04,521? client request^[[0m Following is the log from server 2016-09-02 00:51:26,418 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m ^[[33m2016-09-02 00:51:26,468 Warning: menu forwarding is disabled:^[[0m ^[[33m2016-09-02 00:51:26,468? cannot load dbus helper: No module named dbus^[[0m ^[[33m2016-09-02 00:51:26,697 Warning: enc_xvid failed its self test^[[0m ^[[33m2016-09-02 00:51:26,698? No module named xvid^[[0m ^[[33m2016-09-02 00:51:26,712 Warning: failed to load the mdns avahi publisher:^[[0m ^[[33m2016-09-02 00:51:26,712? No module named avahi^[[0m ^[[33m2016-09-02 00:51:26,712? either fix your installation or use the 'mdns=no' option^[[0m ^[[33m2016-09-02 00:51:26,717 Warning: no X11 RandR support on :11^[[0m 2016-09-02 00:51:27,327 serving html content from '/usr/share/xpra/www'^[[0m ^[[36m2016-09-02 00:51:27,327 get_auth_module(unix-domain, , {..})^[[0m ^[[36m2016-09-02 00:51:27,327 get_auth_module(tcp, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 get_auth_module(ssl, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 get_auth_module(vsock, , {..})^[[0m ^[[36m2016-09-02 00:51:27,328 init_auth(..) auth class=None, tcp auth class=None, ssl auth class=None, vsock auth class=None^[[0m ^[[31m2016-09-02 00:51:27,401 Error: failed to import the virtual video module:^[[0m ^[[31m2016-09-02 00:51:27,401? No module named _dbus_bindings^[[0m 2016-09-02 00:51:27,411 pulseaudio server started with pid 10536^[[0m /bin/sh: 1: pulseaudio: not found Warning: failed to import GStreamer: ?GStreamer 1.0: Namespace Gst not available ?GStreamer 0.10: could not import gobject (could not find _PyGObject_API object) ^[[31m2016-09-02 00:51:27,710 Error: failed to query sound subsystem:^[[0m ^[[31m2016-09-02 00:51:27,711? query did not return any data^[[0m ^[[33m2016-09-02 00:51:27,712 Warning: failed to load or register our dbus notifications forwarder:^[[0m ^[[33m2016-09-02 00:51:27,712? No module named dbus.service^[[0m ^[[33m2016-09-02 00:51:27,712? if you do not have a dedicated dbus session for this xpra instance,^[[0m ^[[33m2016-09-02 00:51:27,712? use the 'notifications=no' option^[[0m ^[[33m2016-09-02 00:51:27,713 cannot load dbus helper: No module named dbus^[[0m ^[[31m2016-09-02 00:51:27,717 Error setting up our dbus server:^[[0m ^[[31m2016-09-02 00:51:27,717? No module named dbus^[[0m 2016-09-02 00:51:27,721 xpra X11 version 1.0-r13253 64-bit^[[0m 2016-09-02 00:51:27,722? running with pid 10500 on Linux Ubuntu 16.04 xenial^[[0m 2016-09-02 00:51:27,722? connected to X11 display :11^[[0m 2016-09-02 00:51:27,831 xpra is ready.^[[0m ^[[33m2016-09-02 00:51:28,723 Warning: pulseaudio has terminated shortly after startup.^[[0m ^[[33m2016-09-02 00:51:28,723? pulseaudio is limited to a single instance per user account,^[[0m ^[[33m2016-09-02 00:51:28,723? and one may be running already for user 'ubuntu'^[[0m ^[[33m2016-09-02 00:51:28,723? to avoid this warning, either fix the pulseaudio command line^[[0m ^[[33m2016-09-02 00:51:28,723? or use the 'pulseaudio=no' option^[[0m Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Thursday, September 1, 2016 4:40 PM, Antoine Martin wrote: On 01/09/16 13:40, Mukul Agrawal wrote: > Some more information :- > > 1) server works with --auth and --tcp-auth. But proxy only works with > tcp-auth. If you are still stuck, please explain what "doesn't work" exactly here. Do you get an error? If so, please post it. > 2) I can connect to each of the servers directly. I can get their > displays to local windows machine if I connect to them directly. But no > luck getting the display through proxy. Connected like this :- > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10000 > Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt > tcp/ubuntu at 52.53.168.31/10001 The username is specified twice in those command lines which is a little bit confusing: once using the "--username=" command line option and again in the URL. I find this form easier to read: xpra attach tcp/username:password at host:port/DISPLAY You only need to specify the DISPLAY if there are going to be more than one matching display for that user. If you are using multifile with a single entry then you don't need it. > 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me > authentication error no mater what I do. Please always include the actual errors, difficult to help you without. You need an authentication module so that the proxy can use it to locate the available sessions, so "none" is not expected to work. "allow" can work, but the username you specify must exist on the target system and if there is more than one session running as that user (including the proxy itself), you will probably need this fix: http://xpra.org/trac/changeset/13533 > Finally, I had to use multifil to get rid of authetication errors. > > 4) auth file just has one line and no next line character (build using > echo command). One line is this :- > ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 > > I tried both the internal and external IP address. aa.bb.cc.dd:10001 as > well as xx.yy.xx.aa:10001. I dont get authetication errors or connection > errors with either. But none of them show me display. Please post the full logs with the "-d auth" switch. These should show the authentication attempt, the sessions found, etc. > On local machine password file pswd.txt just had single word > secretpassword. Again no next line character. > > 5) The xpra versions from the server log is shown like this :- > > ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m > ^[[31m2016-08-31 21:50:45,340? No module named dbus^[[0m > 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m > 2016-08-31 21:50:45,341? running with pid 6869 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 21:50:45,341? connected to X11 display :11^[[0m > 2016-08-31 21:50:45,391 xpra is ready.^[[0m > ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly > after startup.^[[0m > > And logs from the proxy are here :- > > 2016-08-31 22:26:59,300 serving html content from '/usr/share/xpra/www'^[[0m > 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m > 2016-08-31 22:26:59,312? running with pid 7491 on Linux Ubuntu 16.04 > xenial^[[0m > 2016-08-31 22:26:59,313? connected to X11 display :13^[[0m > 2016-08-31 22:26:59,313 xpra is ready.^[[0m > > 6) Anything else I might have forgotten? > I am running out of ideas to try. > Let me know? Very motivated to make it work .... but have no more ideas > to experiment. This works fine for me with the latest trunk: Example with multifile: $ cat > multifile.txt <? > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > > > On Wednesday, August 31, 2016 8:45 PM, Antoine Martin > wrote: > > > On 01/09/16 05:55, Mukul Agrawal wrote: >> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >> from beta. Still, cannot get it to work. Any help? >> >> started proxy like this >> -- xpra proxy :13 >> > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >> >> started a couple of servers on same machine like this >> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >> -- DISPLAY=:11 xlclock & >> -- DISPLAY=:12 xlogo > Don't do that. Same as the other thread about tty. Use this instead: > xpra start :DISPLAY --bind-tcp=... --start=COMMAND > >> try to attach from windows machine >> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >> tcp/52.53.168.31/10002/11 >> >> Everything seems to go well in the beginning. No error message. It >> simply drops the connection without saying anything. > You're not sharing your multifile password file, so I won't be able to > reproduce what you did. > > You're also not showing what versions you've used for testing, the only > version shown is from the win32 client, which is well out of date: >> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 > > There's a debug flag for authentication, try adding "-d auth" to your > server command line. > > Cheers > Antoine > > >> >> Here is the log from proxy :- >> >> >> >> 2016-08-31 22:28:47,740 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >> 2016-08-31 22:29:00,624 New tcp connection received from >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,625 Authentication required by multi password file >> authenticator module^[[0m >> 2016-08-31 22:29:00,625? sending challenge for 'ubuntu' using hmac >> digest^[[0m >> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m >> ^[[33m2016-08-31 22:29:00,955? No module named xvid^[[0m >> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >> 2016-08-31 22:29:00,966? for client tcp socket: aa.bb.cc.dd:10002 <- >> xx.yy.zz.aa:5792^[[0m >> 2016-08-31 22:29:00,967? and server tcp socket: aa.bb.cc.dd:43006 <- >> 22.33.44.55:10000^[[0m >> 2016-08-31 22:29:00,967 proxy instance now also available using unix >> domain socket:^[[0m >> 2016-08-31 22:29:00,967? /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >> to blocking mode^[[0m >> 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m >> 2016-08-31 22:29:01,628 removing socket >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >> >> Here is the log from the server itself >> >> 2016-08-31 22:28:47,738 New unix-domain connection received on >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >> 2016-08-31 22:29:00,974 New tcp connection received from >> 22.33.44.55:43006^[[0m >> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >> server:^[[0m >> ^[[31m2016-08-31 22:29:00,980? No module named dbus^[[0m >> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >> 0.16.3-r12203^[[0m >> 2016-08-31 22:29:00,981? connected from 'MAGRAWAL? as 'ubuntu' - >> 'magrawal'^[[0m >> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >> xenial', 'machine': 'x86_64', 'platform': >> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >> unknown on 'ip-aa-bb-cc-dd'^[[0m >> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >> compatible: remote version not available!^[[0m >> 2016-08-31 22:29:00,982? using h264 as primary encoding also > available:^[[0m >> 2016-08-31 22:29:00,982? vp9, vp8, png, png/P, png/L, rgb24, jpeg, >> rgb32^[[0m >> 2016-08-31 22:29:00,990? client root window size is 1920x1080 with 1 >> display:^[[0m >> 2016-08-31 22:29:00,990? Default (508x285 mm - DPI: 96x96)^[[0m >> 2016-08-31 22:29:00,990? ? DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >> / 33ms interval^[[0m >> 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m >> 2016-08-31 22:29:01,629 client has requested disconnection: server >> shutdown (client connection lost)^[[0m >> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >> 2016-08-31 22:29:01,629? client request^[[0m >> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >> >> >> Regards, Mukul ( https://sites.google.com/site/mukulagrawal > ) >> >> >> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >> > wrote: >> >> >> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>> I am running xpra server 0.15 that I got from the latest winswitch repo. >>> Started proxy like that shown in your basic usage example ProxyServer >> ? Xpra >>> >>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>> started a xpra server instance on same machine/same account using >> several different formatsxpra start :11 >>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>> When I try to attach to this instance from windows machine using >>> Xpra_cmd attach tcp/user at IP >/10000/11 >>> >>> I get authentication error :- " authentication failed: this server >> requires authentication, please provide a password." >> I assume you must be using an older distribution like Ubuntu Trusty? >> >> Please try with the current beta packages, the next release will support >> those older distribution versions and it includes a large number of >> fixes for the proxy server: >> http://xpra.org/trac/ticket/952 >> http://xpra.org/trac/ticket/1264 >> Many of those features and fixes are not available in the branch you are >> using. >> >> Cheers >> Antoine >> >>> >>> Another problem >>> xpra stop :13 will not stop the proxy.I again get a message asking for >> a password. >>>? Regards, >>> Mukul >>> ( https://sites.google.com/site/mukulagrawal >> ) >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk > >> > >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >>> >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> > > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> > > > From antoine at nagafix.co.uk Fri Sep 2 02:56:20 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 2 Sep 2016 08:56:20 +0700 Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <424526524.216325.1472780462297@mail.yahoo.com> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> <1091412847.227249.1472778373976@mail.yahoo.com> <424526524.216325.1472780462297@mail.yahoo.com> Message-ID: <95968e4b-bb38-a669-4fc0-adb1d5ab3e1f@nagafix.co.uk> (snip) > Tried following two attach command formats. Both gave same error as above. > xpra attach --username=ubuntu1 --password-file=pswd.txt tcp/ee.ff.gg.hh:10002 > xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh:10002 > > Finally, following format didn't give any error on the client side. > xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh/10002 Sorry I forgot, the inline password and "tcp/.." format above are only supported in trunk. > Following is log at proxy :- (snip) > 2016-09-02 01:31:07,874 Authentication required by multi password file authenticator module^[[0m > 2016-09-02 01:31:07,874 sending challenge for 'ubuntu1' using hmac digest^[[0m > ^[[36m2016-09-02 01:31:07,984 processing authentication with multi password file, response=efe6b9721d4473013f1cd84e6fa9e3e1, client_salt=38356661383430633664636434653037616165633231623665383138633333626539353765353331326635383436393161393235646533633565653864383863, challenge_sent=True^[[0m > ^[[31m2016-09-02 01:31:07,984 Error: password file '/multifile.txt' is missing^[[0m (snip) > Finally, tried giving full path to the multifile :- > xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=multifile:filename=/home/ubuntu/multifile.txt -d auth > and tried these attach commands, they worked!! Yay :) Thanks! FYI: latest trunk no longer requires absolute paths for those files. > xpra attach --password-file=pswd.txt tcp/ubuntu1 at ee.ff.gg.hh/10002 > xpra attach --password-file=pswd2.txt tcp/ubuntu2 at ee.ff.gg.hh/10002 > Yeah have one question:You said second format connects using TCP. What transport is used for the first format? The other example uses ":100" which uses unix domain sockets. (snip) > Upgraded my windows client version to 0.17.5 revision 13487 > Followed your "--tcp-auth-allow" example. Still, does not work for me. Unless you manually attached the patch I had linked to in the previous email, that would be expected. This minor fix should be included in the 0.17.6 update, until then you can use the beta builds. > Exact commands and logs attached below. Even with "allow", proxy is still challenging client for password. That's expected. Cheers Antoine > xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :11 -d auth > xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth > xpra attach tcp/ubuntu at 52.53.168.31/10002/11 > > Following is the log from proxy > > 2016-09-02 00:52:37,344 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m > ^[[33m2016-09-02 00:52:37,454 Warning: failed to load the mdns avahi publisher:^[[0m > ^[[33m2016-09-02 00:52:37,454 No module named avahi^[[0m > ^[[33m2016-09-02 00:52:37,454 either fix your installation or use the 'mdns=no' option^[[0m > 2016-09-02 00:52:37,492 serving html content from '/usr/share/xpra/www'^[[0m > ^[[36m2016-09-02 00:52:37,492 get_auth_module(unix-domain, , {..})^[[0m > ^[[36m2016-09-02 00:52:37,492 get_auth_module(tcp, allow, {..})^[[0m > ^[[36m2016-09-02 00:52:37,505 get_auth_module(ssl, allow, {..})^[[0m > ^[[36m2016-09-02 00:52:37,506 get_auth_module(vsock, , {..})^[[0m > ^[[36m2016-09-02 00:52:37,506 init_auth(..) auth class=None, tcp auth class=('allow', , {}), ssl auth class=('allow', , {}), vsock auth class=None^[[0m > 2016-09-02 00:52:37,506 xpra proxy version 1.0-r13253 64-bit^[[0m > 2016-09-02 00:52:37,506 running with pid 10576 on Linux Ubuntu 16.04 xenial^[[0m > 2016-09-02 00:52:37,506 connected to X11 display :13^[[0m > 2016-09-02 00:52:37,506 xpra is ready.^[[0m > 2016-09-02 00:53:04,292 New tcp connection received from uu.vv.ww.xx:11154^[[0m > ^[[36m2016-09-02 00:53:04,293 socktype=tcp, auth class=('allow', , {}), encryption=, keyfile=^[[0m > ^[[36m2016-09-02 00:53:04,482 creating authenticator ('allow', , {})^[[0m > ^[[36m2016-09-02 00:53:04,483 allow=allow^[[0m > ^[[36m2016-09-02 00:53:04,483 processing authentication with allow, response=None, client_salt=, challenge_sent=False^[[0m > ^[[36m2016-09-02 00:53:04,483 challenge: ('274be8f27a4742d1b0f37616d6fbc4ec', 'hmac')^[[0m > 2016-09-02 00:53:04,483 Authentication required by allow authenticator module^[[0m > 2016-09-02 00:53:04,483 sending challenge for 'ubuntu' using hmac digest^[[0m > 2016-09-02 00:53:04,521 client has requested disconnection: no password available^[[0m > 2016-09-02 00:53:04,521 Disconnecting client uu.vv.ww.xx:11154:^[[0m > 2016-09-02 00:53:04,521 client request^[[0m > > > Following is the log from server > > 2016-09-02 00:51:26,418 created unix domain socket: /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m > ^[[33m2016-09-02 00:51:26,468 Warning: menu forwarding is disabled:^[[0m > ^[[33m2016-09-02 00:51:26,468 cannot load dbus helper: No module named dbus^[[0m > ^[[33m2016-09-02 00:51:26,697 Warning: enc_xvid failed its self test^[[0m > ^[[33m2016-09-02 00:51:26,698 No module named xvid^[[0m > ^[[33m2016-09-02 00:51:26,712 Warning: failed to load the mdns avahi publisher:^[[0m > ^[[33m2016-09-02 00:51:26,712 No module named avahi^[[0m > ^[[33m2016-09-02 00:51:26,712 either fix your installation or use the 'mdns=no' option^[[0m > ^[[33m2016-09-02 00:51:26,717 Warning: no X11 RandR support on :11^[[0m > 2016-09-02 00:51:27,327 serving html content from '/usr/share/xpra/www'^[[0m > ^[[36m2016-09-02 00:51:27,327 get_auth_module(unix-domain, , {..})^[[0m > ^[[36m2016-09-02 00:51:27,327 get_auth_module(tcp, , {..})^[[0m > ^[[36m2016-09-02 00:51:27,328 get_auth_module(ssl, , {..})^[[0m > ^[[36m2016-09-02 00:51:27,328 get_auth_module(vsock, , {..})^[[0m > ^[[36m2016-09-02 00:51:27,328 init_auth(..) auth class=None, tcp auth class=None, ssl auth class=None, vsock auth class=None^[[0m > ^[[31m2016-09-02 00:51:27,401 Error: failed to import the virtual video module:^[[0m > ^[[31m2016-09-02 00:51:27,401 No module named _dbus_bindings^[[0m > 2016-09-02 00:51:27,411 pulseaudio server started with pid 10536^[[0m > /bin/sh: 1: pulseaudio: not found > Warning: failed to import GStreamer: > GStreamer 1.0: Namespace Gst not available > GStreamer 0.10: could not import gobject (could not find _PyGObject_API object) > ^[[31m2016-09-02 00:51:27,710 Error: failed to query sound subsystem:^[[0m > ^[[31m2016-09-02 00:51:27,711 query did not return any data^[[0m > ^[[33m2016-09-02 00:51:27,712 Warning: failed to load or register our dbus notifications forwarder:^[[0m > ^[[33m2016-09-02 00:51:27,712 No module named dbus.service^[[0m > ^[[33m2016-09-02 00:51:27,712 if you do not have a dedicated dbus session for this xpra instance,^[[0m > ^[[33m2016-09-02 00:51:27,712 use the 'notifications=no' option^[[0m > ^[[33m2016-09-02 00:51:27,713 cannot load dbus helper: No module named dbus^[[0m > ^[[31m2016-09-02 00:51:27,717 Error setting up our dbus server:^[[0m > ^[[31m2016-09-02 00:51:27,717 No module named dbus^[[0m > 2016-09-02 00:51:27,721 xpra X11 version 1.0-r13253 64-bit^[[0m > 2016-09-02 00:51:27,722 running with pid 10500 on Linux Ubuntu 16.04 xenial^[[0m > 2016-09-02 00:51:27,722 connected to X11 display :11^[[0m > 2016-09-02 00:51:27,831 xpra is ready.^[[0m > ^[[33m2016-09-02 00:51:28,723 Warning: pulseaudio has terminated shortly after startup.^[[0m > ^[[33m2016-09-02 00:51:28,723 pulseaudio is limited to a single instance per user account,^[[0m > ^[[33m2016-09-02 00:51:28,723 and one may be running already for user 'ubuntu'^[[0m > ^[[33m2016-09-02 00:51:28,723 to avoid this warning, either fix the pulseaudio command line^[[0m > ^[[33m2016-09-02 00:51:28,723 or use the 'pulseaudio=no' option^[[0m > > > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > > On Thursday, September 1, 2016 4:40 PM, Antoine Martin wrote: > > > On 01/09/16 13:40, Mukul Agrawal wrote: >> Some more information :- >> >> 1) server works with --auth and --tcp-auth. But proxy only works with >> tcp-auth. > If you are still stuck, please explain what "doesn't work" exactly here. > Do you get an error? If so, please post it. > >> 2) I can connect to each of the servers directly. I can get their >> displays to local windows machine if I connect to them directly. But no >> luck getting the display through proxy. Connected like this :- >> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >> tcp/ubuntu at 52.53.168.31/10000 >> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >> tcp/ubuntu at 52.53.168.31/10001 > The username is specified twice in those command lines which is a little > bit confusing: once using the "--username=" command line option and > again in the URL. I find this form easier to read: > xpra attach tcp/username:password at host:port/DISPLAY > > You only need to specify the DISPLAY if there are going to be more than > one matching display for that user. > If you are using multifile with a single entry then you don't need it. > >> 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me >> authentication error no mater what I do. > Please always include the actual errors, difficult to help you without. > > You need an authentication module so that the proxy can use it to locate > the available sessions, so "none" is not expected to work. > "allow" can work, but the username you specify must exist on the target > system and if there is more than one session running as that user > (including the proxy itself), you will probably need this fix: > http://xpra.org/trac/changeset/13533 > >> Finally, I had to use multifil to get rid of authetication errors. >> >> 4) auth file just has one line and no next line character (build using >> echo command). One line is this :- >> ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 >> >> I tried both the internal and external IP address. aa.bb.cc.dd:10001 as >> well as xx.yy.xx.aa:10001. I dont get authetication errors or connection >> errors with either. But none of them show me display. > Please post the full logs with the "-d auth" switch. > These should show the authentication attempt, the sessions found, etc. > >> On local machine password file pswd.txt just had single word >> secretpassword. Again no next line character. >> >> 5) The xpra versions from the server log is shown like this :- >> >> ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m >> ^[[31m2016-08-31 21:50:45,340 No module named dbus^[[0m >> 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m >> 2016-08-31 21:50:45,341 running with pid 6869 on Linux Ubuntu 16.04 >> xenial^[[0m >> 2016-08-31 21:50:45,341 connected to X11 display :11^[[0m >> 2016-08-31 21:50:45,391 xpra is ready.^[[0m >> ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly >> after startup.^[[0m >> >> And logs from the proxy are here :- >> >> 2016-08-31 22:26:59,300 serving html content from '/usr/share/xpra/www'^[[0m >> 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m >> 2016-08-31 22:26:59,312 running with pid 7491 on Linux Ubuntu 16.04 >> xenial^[[0m >> 2016-08-31 22:26:59,313 connected to X11 display :13^[[0m >> 2016-08-31 22:26:59,313 xpra is ready.^[[0m >> >> 6) Anything else I might have forgotten? >> I am running out of ideas to try. >> Let me know? Very motivated to make it work .... but have no more ideas >> to experiment. > This works fine for me with the latest trunk: > > > Example with multifile: > > $ cat > multifile.txt < ubuntu1|secretpassword1|1000|1000|:100|| > ubuntu2|secretpassword2|1000|1000|tcp:127.0.0.1:10000|| > EOF > $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth > $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 \ > --tcp-auth=multifile:filename=./multifile.txt -d auth > $ xpra attach tcp/ubuntu1:secretpassword1 at 127.0.0.1:10002 > > Or if you want the proxy to connect to the server via TCP, use the > second username: > $ xpra attach tcp/ubuntu2:secretpassword2 at 127.0.0.1:10002 > > > Example with allow: > $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth > $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth > $ xpra attach tcp/$USER:foo at 127.0.0.1:10002/100 > (with allow, you must specify the display) > > The same client attach commands also work from win32 or OSX clients, you > will just need to change the server IP to its external one. > > Cheers > Antoine > > > >> >> Regards, >> Mukul >> ( https://sites.google.com/site/mukulagrawal ) >> >> >> On Wednesday, August 31, 2016 8:45 PM, Antoine Martin >> wrote: >> >> >> On 01/09/16 05:55, Mukul Agrawal wrote: >>> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >>> from beta. Still, cannot get it to work. Any help? >>> >>> started proxy like this >>> -- xpra proxy :13 >>> >> --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >>> >>> started a couple of servers on same machine like this >>> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >>> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >>> -- DISPLAY=:11 xlclock & >>> -- DISPLAY=:12 xlogo >> Don't do that. Same as the other thread about tty. Use this instead: >> xpra start :DISPLAY --bind-tcp=... --start=COMMAND >> >>> try to attach from windows machine >>> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>> tcp/52.53.168.31/10002/11 >>> >>> Everything seems to go well in the beginning. No error message. It >>> simply drops the connection without saying anything. >> You're not sharing your multifile password file, so I won't be able to >> reproduce what you did. >> >> You're also not showing what versions you've used for testing, the only >> version shown is from the win32 client, which is well out of date: >>> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 >> >> There's a debug flag for authentication, try adding "-d auth" to your >> server command line. >> >> Cheers >> Antoine >> >> >>> >>> Here is the log from proxy :- >>> >>> >>> >>> 2016-08-31 22:28:47,740 New unix-domain connection received on >>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >>> 2016-08-31 22:29:00,624 New tcp connection received from >>> xx.yy.zz.aa:5792^[[0m >>> 2016-08-31 22:29:00,625 Authentication required by multi password file >>> authenticator module^[[0m >>> 2016-08-31 22:29:00,625 sending challenge for 'ubuntu' using hmac >>> digest^[[0m >>> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self test^[[0m >>> ^[[33m2016-08-31 22:29:00,955 No module named xvid^[[0m >>> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >>> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >>> 2016-08-31 22:29:00,966 for client tcp socket: aa.bb.cc.dd:10002 <- >>> xx.yy.zz.aa:5792^[[0m >>> 2016-08-31 22:29:00,967 and server tcp socket: aa.bb.cc.dd:43006 <- >>> 22.33.44.55:10000^[[0m >>> 2016-08-31 22:29:00,967 proxy instance now also available using unix >>> domain socket:^[[0m >>> 2016-08-31 22:29:00,967 /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >>> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >>> to blocking mode^[[0m >>> 2016-08-31 22:29:01,628 stop(client connection lost, Protocol(None))^[[0m >>> 2016-08-31 22:29:01,628 removing socket >>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >>> >>> Here is the log from the server itself >>> >>> 2016-08-31 22:28:47,738 New unix-domain connection received on >>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >>> 2016-08-31 22:29:00,974 New tcp connection received from >>> 22.33.44.55:43006^[[0m >>> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >>> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >>> server:^[[0m >>> ^[[31m2016-08-31 22:29:00,980 No module named dbus^[[0m >>> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >>> 0.16.3-r12203^[[0m >>> 2016-08-31 22:29:00,981 connected from 'MAGRAWAL? as 'ubuntu' - >>> 'magrawal'^[[0m >>> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >>> xenial', 'machine': 'x86_64', 'platform': >>> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >>> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >>> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >>> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >>> unknown on 'ip-aa-bb-cc-dd'^[[0m >>> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >>> compatible: remote version not available!^[[0m >>> 2016-08-31 22:29:00,982 using h264 as primary encoding also >> available:^[[0m >>> 2016-08-31 22:29:00,982 vp9, vp8, png, png/P, png/L, rgb24, jpeg, >>> rgb32^[[0m >>> 2016-08-31 22:29:00,990 client root window size is 1920x1080 with 1 >>> display:^[[0m >>> 2016-08-31 22:29:00,990 Default (508x285 mm - DPI: 96x96)^[[0m >>> 2016-08-31 22:29:00,990 DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >>> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >>> / 33ms interval^[[0m >>> 2016-08-31 22:29:01,018 keyboard mapping already configured (skipped)^[[0m >>> 2016-08-31 22:29:01,629 client has requested disconnection: server >>> shutdown (client connection lost)^[[0m >>> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >>> 2016-08-31 22:29:01,629 client request^[[0m >>> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >>> >>> >>> Regards, Mukul ( https://sites.google.com/site/mukulagrawal >> ) >>> >>> >>> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >>> > > wrote: >>> >>> >>> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>>> I am running xpra server 0.15 that I got from the latest winswitch repo. >>>> Started proxy like that shown in your basic usage example ProxyServer >>> ? Xpra >>>> >>>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>>> started a xpra server instance on same machine/same account using >>> several different formatsxpra start :11 >>>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>>> When I try to attach to this instance from windows machine using >>>> Xpra_cmd attach tcp/user at IP > >/10000/11 >>>> >>>> I get authentication error :- " authentication failed: this server >>> requires authentication, please provide a password." >>> I assume you must be using an older distribution like Ubuntu Trusty? >>> >>> Please try with the current beta packages, the next release will support >>> those older distribution versions and it includes a large number of >>> fixes for the proxy server: >>> http://xpra.org/trac/ticket/952 >>> http://xpra.org/trac/ticket/1264 >>> Many of those features and fixes are not available in the branch you are >>> using. >>> >>> Cheers >>> Antoine >>> >>>> >>>> Another problem >>>> xpra stop :13 will not stop the proxy.I again get a message asking for >>> a password. >>>> Regards, >>>> Mukul >>>> ( https://sites.google.com/site/mukulagrawal >>> ) >>>> _______________________________________________ >>>> shifter-users mailing list >>>> shifter-users at lists.devloop.org.uk >> >>> > > >>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>> >>>> >>> >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk >> >>> > > >> >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>> >>> >> >> >> > > > > > > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From mukulagrawal78 at yahoo.com Fri Sep 2 10:34:58 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 2 Sep 2016 09:34:58 +0000 (UTC) Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <1bff080e-d83f-ff1b-22ed-a0844ee6ec0e@nagafix.co.uk> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> <1091412847.227249.1472778373976@mail.yahoo.com> <424526524.216325.1472780462297@mail.yahoo.com> <95968e4b-bb38-a669-4fc0-adb1d5ab3e1f@nagafix.co.uk> <2110981818.217080.1472788228953@mail.yahoo.com> <1bff080e-d83f-ff1b-22ed-a0844ee6ec0e@nagafix.co.uk> Message-ID: <624733345.367637.1472808898841@mail.yahoo.com> One question in-line below. > > Yeah have one question:You said second format connects using TCP. What > transport is used for the first format? > > The other example uses ":100" which uses unix domain sockets. > That's wonderful. Does that mean :- 1)? display :100 will not be directly accessible from the client outside of the local machine? From outside of localhost, one has to go through xpra proxy to reach the server running at :100, is that right? 2) I dont need to open the associated TCP port (10000 in this example) to the external inbound traffic, is that right? 3) For the associated server start statement, can I use --bind=:100 to specifically bind to unix socket (i.e. instead of --bind-tcp option)? Or the connection string in the multifile will dominate and this does not ?mater? ? Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Thursday, September 1, 2016 10:55 PM, Antoine Martin wrote: Please re-send to the mailing list without using html mail. Thanks Antoine On 02/09/16 10:50, Mukul Agrawal wrote: > One question in-line below. > >> Yeah have one question:You said second format connects using TCP. What > transport is used for the first format? > > The other example uses ":100" which uses unix domain sockets. > > That's wonderful. Does that mean :- > 1)? display :100 will not be directly accessible from the client outside > of the local machine? From outside of localhost, one has to go through > xpra proxy to reach the server running at :100, is that right? > 2) I dont need to open the associated TCP port (10000 in this example) > to the external inbound traffic, is that right? > 3) For the associated server start statement, can I use --bind=:100 to > specifically bind to unix socket (i.e. instead of --bind-tcp option)? Or > the connection string in the multifile will dominate and this does not > mater? > > > Thanks, > Mukul > > > > Cheers > Antoine > > > >>? xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :11 -d auth >>? xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth >> xpra attach tcp/ubuntu at 52.53.168.31 /10002/11 >> >> Following is the log from proxy >> >> 2016-09-02 00:52:37,344 created unix domain socket: > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >> ^[[33m2016-09-02 00:52:37,454 Warning: failed to load the mdns avahi > publisher:^[[0m >> ^[[33m2016-09-02 00:52:37,454? No module named avahi^[[0m >> ^[[33m2016-09-02 00:52:37,454? either fix your installation or use the > 'mdns=no' option^[[0m >> 2016-09-02 00:52:37,492 serving html content from > '/usr/share/xpra/www'^[[0m >> ^[[36m2016-09-02 00:52:37,492 get_auth_module(unix-domain, , {..})^[[0m >> ^[[36m2016-09-02 00:52:37,492 get_auth_module(tcp, allow, {..})^[[0m >> ^[[36m2016-09-02 00:52:37,505 get_auth_module(ssl, allow, {..})^[[0m >> ^[[36m2016-09-02 00:52:37,506 get_auth_module(vsock, , {..})^[[0m >> ^[[36m2016-09-02 00:52:37,506 init_auth(..) auth class=None, tcp auth > class=('allow', , > {}), ssl auth class=('allow', 'xpra.server.auth.allow_auth.Authenticator'>, {}), vsock auth > class=None^[[0m >> 2016-09-02 00:52:37,506 xpra proxy version 1.0-r13253 64-bit^[[0m >> 2016-09-02 00:52:37,506? running with pid 10576 on Linux Ubuntu 16.04 > xenial^[[0m >> 2016-09-02 00:52:37,506? connected to X11 display :13^[[0m >> 2016-09-02 00:52:37,506 xpra is ready.^[[0m >> 2016-09-02 00:53:04,292 New tcp connection received from > uu.vv.ww.xx:11154^[[0m >> ^[[36m2016-09-02 00:53:04,293 socktype=tcp, auth class=('allow', > , {}), encryption=, > keyfile=^[[0m >> ^[[36m2016-09-02 00:53:04,482 creating authenticator ('allow', 'xpra.server.auth.allow_auth.Authenticator'>, {})^[[0m >> ^[[36m2016-09-02 00:53:04,483 allow=allow^[[0m >> ^[[36m2016-09-02 00:53:04,483 processing authentication with allow, > response=None, client_salt=, challenge_sent=False^[[0m >> ^[[36m2016-09-02 00:53:04,483 challenge: > ('274be8f27a4742d1b0f37616d6fbc4ec', 'hmac')^[[0m >> 2016-09-02 00:53:04,483 Authentication required by allow authenticator > module^[[0m >> 2016-09-02 00:53:04,483? sending challenge for 'ubuntu' using hmac > digest^[[0m >> 2016-09-02 00:53:04,521 client has requested disconnection: no > password available^[[0m >> 2016-09-02 00:53:04,521 Disconnecting client uu.vv.ww.xx:11154:^[[0m >> 2016-09-02 00:53:04,521? client request^[[0m >> >> >> Following is the log from server >> >> 2016-09-02 00:51:26,418 created unix domain socket: > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >> ^[[33m2016-09-02 00:51:26,468 Warning: menu forwarding is disabled:^[[0m >> ^[[33m2016-09-02 00:51:26,468? cannot load dbus helper: No module > named dbus^[[0m >> ^[[33m2016-09-02 00:51:26,697 Warning: enc_xvid failed its self test^[[0m >> ^[[33m2016-09-02 00:51:26,698? No module named xvid^[[0m >> ^[[33m2016-09-02 00:51:26,712 Warning: failed to load the mdns avahi > publisher:^[[0m >> ^[[33m2016-09-02 00:51:26,712? No module named avahi^[[0m >> ^[[33m2016-09-02 00:51:26,712? either fix your installation or use the > 'mdns=no' option^[[0m >> ^[[33m2016-09-02 00:51:26,717 Warning: no X11 RandR support on :11^[[0m >> 2016-09-02 00:51:27,327 serving html content from > '/usr/share/xpra/www'^[[0m >> ^[[36m2016-09-02 00:51:27,327 get_auth_module(unix-domain, , {..})^[[0m >> ^[[36m2016-09-02 00:51:27,327 get_auth_module(tcp, , {..})^[[0m >> ^[[36m2016-09-02 00:51:27,328 get_auth_module(ssl, , {..})^[[0m >> ^[[36m2016-09-02 00:51:27,328 get_auth_module(vsock, , {..})^[[0m >> ^[[36m2016-09-02 00:51:27,328 init_auth(..) auth class=None, tcp auth > class=None, ssl auth class=None, vsock auth class=None^[[0m >> ^[[31m2016-09-02 00:51:27,401 Error: failed to import the virtual > video module:^[[0m >> ^[[31m2016-09-02 00:51:27,401? No module named _dbus_bindings^[[0m >> 2016-09-02 00:51:27,411 pulseaudio server started with pid 10536^[[0m >> /bin/sh: 1: pulseaudio: not found >> Warning: failed to import GStreamer: >>? GStreamer 1.0: Namespace Gst not available >>? GStreamer 0.10: could not import gobject (could not find > _PyGObject_API object) >> ^[[31m2016-09-02 00:51:27,710 Error: failed to query sound subsystem:^[[0m >> ^[[31m2016-09-02 00:51:27,711? query did not return any data^[[0m >> ^[[33m2016-09-02 00:51:27,712 Warning: failed to load or register our > dbus notifications forwarder:^[[0m >> ^[[33m2016-09-02 00:51:27,712? No module named dbus.service^[[0m >> ^[[33m2016-09-02 00:51:27,712? if you do not have a dedicated dbus > session for this xpra instance,^[[0m >> ^[[33m2016-09-02 00:51:27,712? use the 'notifications=no' option^[[0m >> ^[[33m2016-09-02 00:51:27,713 cannot load dbus helper: No module named > dbus^[[0m >> ^[[31m2016-09-02 00:51:27,717 Error setting up our dbus server:^[[0m >> ^[[31m2016-09-02 00:51:27,717? No module named dbus^[[0m >> 2016-09-02 00:51:27,721 xpra X11 version 1.0-r13253 64-bit^[[0m >> 2016-09-02 00:51:27,722? running with pid 10500 on Linux Ubuntu 16.04 > xenial^[[0m >> 2016-09-02 00:51:27,722? connected to X11 display :11^[[0m >> 2016-09-02 00:51:27,831 xpra is ready.^[[0m >> ^[[33m2016-09-02 00:51:28,723 Warning: pulseaudio has terminated > shortly after startup.^[[0m >> ^[[33m2016-09-02 00:51:28,723? pulseaudio is limited to a single > instance per user account,^[[0m >> ^[[33m2016-09-02 00:51:28,723? and one may be running already for user > 'ubuntu'^[[0m >> ^[[33m2016-09-02 00:51:28,723? to avoid this warning, either fix the > pulseaudio command line^[[0m >> ^[[33m2016-09-02 00:51:28,723? or use the 'pulseaudio=no' option^[[0m >> >> >> Regards, >> Mukul >> ( https://sites.google.com/site/mukulagrawal > ) >> >>? ? On Thursday, September 1, 2016 4:40 PM, Antoine Martin > > wrote: >> >> >>? On 01/09/16 13:40, Mukul Agrawal wrote: >>> Some more information :- >>> >>> 1) server works with --auth and --tcp-auth. But proxy only works with >>> tcp-auth. >> If you are still stuck, please explain what "doesn't work" exactly here. >> Do you get an error? If so, please post it. >> >>> 2) I can connect to each of the servers directly. I can get their >>> displays to local windows machine if I connect to them directly. But no >>> luck getting the display through proxy. Connected like this :- >>> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>> tcp/ubuntu at 52.53.168.31 /10000 >>> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>> tcp/ubuntu at 52.53.168.31 /10001 >> The username is specified twice in those command lines which is a little >> bit confusing: once using the "--username=" command line option and >> again in the URL. I find this form easier to read: >> xpra attach tcp/username:password at host :port/DISPLAY >> >> You only need to specify the DISPLAY if there are going to be more than >> one matching display for that user. >> If you are using multifile with a single entry then you don't need it. >> >>> 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me >>> authentication error no mater what I do. >> Please always include the actual errors, difficult to help you without. >> >> You need an authentication module so that the proxy can use it to locate >> the available sessions, so "none" is not expected to work. >> "allow" can work, but the username you specify must exist on the target >> system and if there is more than one session running as that user >> (including the proxy itself), you will probably need this fix: >> http://xpra.org/trac/changeset/13533 >> >>> Finally, I had to use multifil to get rid of authetication errors. >>> >>> 4) auth file just has one line and no next line character (build using >>> echo command). One line is this :- >>> > ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 >>> >>> I tried both the internal and external IP address. aa.bb.cc.dd:10001 as >>> well as xx.yy.xx.aa:10001. I dont get authetication errors or connection >>> errors with either. But none of them show me display. >> Please post the full logs with the "-d auth" switch. >> These should show the authentication attempt, the sessions found, etc. >> >>> On local machine password file pswd.txt just had single word >>> secretpassword. Again no next line character. >>> >>> 5) The xpra versions from the server log is shown like this :- >>> >>> ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m >>> ^[[31m2016-08-31 21:50:45,340? No module named dbus^[[0m >>> 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m >>> 2016-08-31 21:50:45,341? running with pid 6869 on Linux Ubuntu 16.04 >>> xenial^[[0m >>> 2016-08-31 21:50:45,341? connected to X11 display :11^[[0m >>> 2016-08-31 21:50:45,391 xpra is ready.^[[0m >>> ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly >>> after startup.^[[0m >>> >>> And logs from the proxy are here :- >>> >>> 2016-08-31 22:26:59,300 serving html content from > '/usr/share/xpra/www'^[[0m >>> 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m >>> 2016-08-31 22:26:59,312? running with pid 7491 on Linux Ubuntu 16.04 >>> xenial^[[0m >>> 2016-08-31 22:26:59,313? connected to X11 display :13^[[0m >>> 2016-08-31 22:26:59,313 xpra is ready.^[[0m >>> >>> 6) Anything else I might have forgotten? >>> I am running out of ideas to try. >>> Let me know? Very motivated to make it work .... but have no more ideas >>> to experiment. >> This works fine for me with the latest trunk: >> >> >> Example with multifile: >> >> $ cat > multifile.txt <> ubuntu1|secretpassword1|1000|1000|:100|| >> ubuntu2|secretpassword2|1000|1000|tcp:127.0.0.1:10000|| >> EOF >> $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth >> $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 \ >>? ? --tcp-auth=multifile:filename=./multifile.txt -d auth >> $ xpra attach tcp/ubuntu1:secretpassword1 at 127.0.0.1 > :10002 >> >> Or if you want the proxy to connect to the server via TCP, use the >> second username: >> $ xpra attach tcp/ubuntu2:secretpassword2 at 127.0.0.1 > :10002 >> >> >> Example with allow: >> $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth >> $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth >> $ xpra attach tcp/$USER:foo at 127.0.0.1 :10002/100 >> (with allow, you must specify the display) >> >> The same client attach commands also work from win32 or OSX clients, you >> will just need to change the server IP to its external one. >> >> Cheers >> Antoine >> >> >> >>> >>> Regards, >>> Mukul >>> ( https://sites.google.com/site/mukulagrawal > ) >>> >>> >>> On Wednesday, August 31, 2016 8:45 PM, Antoine Martin >>> > wrote: >>> >>> >>> On 01/09/16 05:55, Mukul Agrawal wrote: >>>> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >>>> from beta. Still, cannot get it to work. Any help? >>>> >>>> started proxy like this >>>> -- xpra proxy :13 >>>> >>> > --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >>>> >>>> started a couple of servers on same machine like this >>>> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >>>> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >>>> -- DISPLAY=:11 xlclock & >>>> -- DISPLAY=:12 xlogo >>> Don't do that. Same as the other thread about tty. Use this instead: >>> xpra start :DISPLAY --bind-tcp=... --start=COMMAND >>> >>>> try to attach from windows machine >>>> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>>> tcp/52.53.168.31/10002/11 >>>> >>>> Everything seems to go well in the beginning. No error message. It >>>> simply drops the connection without saying anything. >>> You're not sharing your multifile password file, so I won't be able to >>> reproduce what you did. >>> >>> You're also not showing what versions you've used for testing, the only >>> version shown is from the win32 client, which is well out of date: >>>> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 >>> >>> There's a debug flag for authentication, try adding "-d auth" to your >>> server command line. >>> >>> Cheers >>> Antoine >>> >>> >>>> >>>> Here is the log from proxy :- >>>> >>>> >>>> >>>> 2016-08-31 22:28:47,740 New unix-domain connection received on >>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >>>> 2016-08-31 22:29:00,624 New tcp connection received from >>>> xx.yy.zz.aa:5792^[[0m >>>> 2016-08-31 22:29:00,625 Authentication required by multi password file >>>> authenticator module^[[0m >>>> 2016-08-31 22:29:00,625? sending challenge for 'ubuntu' using hmac >>>> digest^[[0m >>>> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self > test^[[0m >>>> ^[[33m2016-08-31 22:29:00,955? No module named xvid^[[0m >>>> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >>>> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >>>> 2016-08-31 22:29:00,966? for client tcp socket: aa.bb.cc.dd:10002 <- >>>> xx.yy.zz.aa:5792^[[0m >>>> 2016-08-31 22:29:00,967? and server tcp socket: aa.bb.cc.dd:43006 <- >>>> 22.33.44.55:10000^[[0m >>>> 2016-08-31 22:29:00,967 proxy instance now also available using unix >>>> domain socket:^[[0m >>>> 2016-08-31 22:29:00,967 > /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>>> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >>>> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >>>> to blocking mode^[[0m >>>> 2016-08-31 22:29:01,628 stop(client connection lost, > Protocol(None))^[[0m >>>> 2016-08-31 22:29:01,628 removing socket >>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>>> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >>>> >>>> Here is the log from the server itself >>>> >>>> 2016-08-31 22:28:47,738 New unix-domain connection received on >>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >>>> 2016-08-31 22:29:00,974 New tcp connection received from >>>> 22.33.44.55:43006^[[0m >>>> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >>>> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >>>> server:^[[0m >>>> ^[[31m2016-08-31 22:29:00,980? No module named dbus^[[0m >>>> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >>>> 0.16.3-r12203^[[0m >>>> 2016-08-31 22:29:00,981? connected from 'MAGRAWAL? as 'ubuntu' - >>>> 'magrawal'^[[0m >>>> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >>>> xenial', 'machine': 'x86_64', 'platform': >>>> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >>>> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >>>> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >>>> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >>>> unknown on 'ip-aa-bb-cc-dd'^[[0m >>>> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >>>> compatible: remote version not available!^[[0m >>>> 2016-08-31 22:29:00,982? using h264 as primary encoding also >>> available:^[[0m >>>> 2016-08-31 22:29:00,982? vp9, vp8, png, png/P, png/L, rgb24, jpeg, >>>> rgb32^[[0m >>>> 2016-08-31 22:29:00,990? client root window size is 1920x1080 with 1 >>>> display:^[[0m >>>> 2016-08-31 22:29:00,990? Default (508x285 mm - DPI: 96x96)^[[0m >>>> 2016-08-31 22:29:00,990? ? DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >>>> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >>>> / 33ms interval^[[0m >>>> 2016-08-31 22:29:01,018 keyboard mapping already configured > (skipped)^[[0m >>>> 2016-08-31 22:29:01,629 client has requested disconnection: server >>>> shutdown (client connection lost)^[[0m >>>> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >>>> 2016-08-31 22:29:01,629? client request^[[0m >>>> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >>>> >>>> >>>> Regards, Mukul ( https://sites.google.com/site/mukulagrawal >>> ) >>>> >>>> >>>> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >>>> >>> >> wrote: >>>> >>>> >>>> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>>>> I am running xpra server 0.15 that I got from the latest winswitch > repo. >>>>> Started proxy like that shown in your basic usage example ProxyServer >>>> ? Xpra >>>>> >>>>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>>>> started a xpra server instance on same machine/same account using >>>> several different formatsxpra start :11 >>>>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>>>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>>>> When I try to attach to this instance from windows machine using >>>>> Xpra_cmd attach tcp/user at IP > >>> >>/10000/11 >>>>> >>>>> I get authentication error :- " authentication failed: this server >>>> requires authentication, please provide a password." >>>> I assume you must be using an older distribution like Ubuntu Trusty? >>>> >>>> Please try with the current beta packages, the next release will support >>>> those older distribution versions and it includes a large number of >>>> fixes for the proxy server: >>>> http://xpra.org/trac/ticket/952 >>>> http://xpra.org/trac/ticket/1264 >>>> Many of those features and fixes are not available in the branch you are >>>> using. >>>> >>>> Cheers >>>> Antoine >>>> >>>>> >>>>> Another problem >>>>> xpra stop :13 will not stop the proxy.I again get a message asking for >>>> a password. >>>>>? Regards, >>>>> Mukul >>>>> ( https://sites.google.com/site/mukulagrawal >>>> ) >>>>> _______________________________________________ >>>>> shifter-users mailing list >>>>> shifter-users at lists.devloop.org.uk > >>> > >>>> >>> >> >>>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users > >>>> >>>>> >>>> >>>> _______________________________________________ >>>> shifter-users mailing list >>>> shifter-users at lists.devloop.org.uk > >>> > >>>> >>> >> >>> >>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>>> >>>> >>> >>> >>> >> >> >> >>? >> >>? >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk > >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > > From antoine at nagafix.co.uk Fri Sep 2 10:58:42 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 2 Sep 2016 16:58:42 +0700 Subject: [winswitch] Xpra proxy with --auth=allow does not work In-Reply-To: <624733345.367637.1472808898841@mail.yahoo.com> References: <1356904740.2201761.1472575949749.ref@mail.yahoo.com> <1356904740.2201761.1472575949749@mail.yahoo.com> <4c48aff7-a636-0b1b-abb5-2cb0d79bb6a7@nagafix.co.uk> <1131646350.3097961.1472684141503@mail.yahoo.com> <50357285-3064-3cb9-ce84-05005bf18b46@nagafix.co.uk> <1297761747.3280121.1472712026723@mail.yahoo.com> <28a908fb-5cb3-a609-2266-52add0f2c85c@nagafix.co.uk> <1091412847.227249.1472778373976@mail.yahoo.com> <424526524.216325.1472780462297@mail.yahoo.com> <95968e4b-bb38-a669-4fc0-adb1d5ab3e1f@nagafix.co.uk> <2110981818.217080.1472788228953@mail.yahoo.com> <1bff080e-d83f-ff1b-22ed-a0844ee6ec0e@nagafix.co.uk> <624733345.367637.1472808898841@mail.yahoo.com> Message-ID: <3a055143-10f1-6b9f-9cb7-dc2f3fd92103@nagafix.co.uk> On 02/09/16 16:34, Mukul Agrawal via shifter-users wrote: > One question in-line below. >> >> Yeah have one question:You said second format connects using TCP. What >> transport is used for the first format? >> >> The other example uses ":100" which uses unix domain sockets. >> > That's wonderful. Does that mean :- > 1) display :100 will not be directly accessible from the client outside > of the local machine? From outside of localhost, one has to go through > xpra proxy to reach the server running at :100, is that right? Correct. Unix domain sockets are only accessible locally, or via SSH. > 2) I dont need to open the associated TCP port (10000 in this example) > to the external inbound traffic, is that right? Correct. > 3) For the associated server start statement, can I use --bind=:100 to > specifically bind to unix socket (i.e. instead of --bind-tcp option)? Unix domain sockets are created automatically by default, in all the directories listed as "socket-dirs". You can also create unix domain sockets with specific names or in other directories using --bind=/path/to/socketname and --bind=/path/to/dir/ But this should not be needed for your use case, and in fact this may just complicate things unnecessarily. > Or the connection string in the multifile will dominate and this does not > mater? Not sure what you mean here. The connection string in the multifile is what the proxy uses to try to connect to the server. This needs to point to the server you started, which type of connection you use here is up to you. Unix domain sockets are a better choice if the server is on the same system, in other cases you may want to use tcp, ssl, ssh or even vsock. Cheers Antoine > > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > > On Thursday, September 1, 2016 10:55 PM, Antoine Martin wrote: > > > Please re-send to the mailing list without using html mail. > > Thanks > Antoine > > > > On 02/09/16 10:50, Mukul Agrawal wrote: >> One question in-line below. >> >>> Yeah have one question:You said second format connects using TCP. What >> transport is used for the first format? >> >> The other example uses ":100" which uses unix domain sockets. >> >> That's wonderful. Does that mean :- >> 1) display :100 will not be directly accessible from the client outside >> of the local machine? From outside of localhost, one has to go through >> xpra proxy to reach the server running at :100, is that right? >> 2) I dont need to open the associated TCP port (10000 in this example) >> to the external inbound traffic, is that right? >> 3) For the associated server start statement, can I use --bind=:100 to >> specifically bind to unix socket (i.e. instead of --bind-tcp option)? Or >> the connection string in the multifile will dominate and this does not >> mater? >> >> >> Thanks, >> Mukul >> >> >> >> Cheers >> Antoine >> >> >> >>> xpra start --start=xclock --bind-tcp=0.0.0.0:10000 :11 -d auth >>> xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth >>> xpra attach tcp/ubuntu at 52.53.168.31 /10002/11 >>> >>> Following is the log from proxy >>> >>> 2016-09-02 00:52:37,344 created unix domain socket: >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >>> ^[[33m2016-09-02 00:52:37,454 Warning: failed to load the mdns avahi >> publisher:^[[0m >>> ^[[33m2016-09-02 00:52:37,454 No module named avahi^[[0m >>> ^[[33m2016-09-02 00:52:37,454 either fix your installation or use the >> 'mdns=no' option^[[0m >>> 2016-09-02 00:52:37,492 serving html content from >> '/usr/share/xpra/www'^[[0m >>> ^[[36m2016-09-02 00:52:37,492 get_auth_module(unix-domain, , {..})^[[0m >>> ^[[36m2016-09-02 00:52:37,492 get_auth_module(tcp, allow, {..})^[[0m >>> ^[[36m2016-09-02 00:52:37,505 get_auth_module(ssl, allow, {..})^[[0m >>> ^[[36m2016-09-02 00:52:37,506 get_auth_module(vsock, , {..})^[[0m >>> ^[[36m2016-09-02 00:52:37,506 init_auth(..) auth class=None, tcp auth >> class=('allow', , >> {}), ssl auth class=('allow', > 'xpra.server.auth.allow_auth.Authenticator'>, {}), vsock auth >> class=None^[[0m >>> 2016-09-02 00:52:37,506 xpra proxy version 1.0-r13253 64-bit^[[0m >>> 2016-09-02 00:52:37,506 running with pid 10576 on Linux Ubuntu 16.04 >> xenial^[[0m >>> 2016-09-02 00:52:37,506 connected to X11 display :13^[[0m >>> 2016-09-02 00:52:37,506 xpra is ready.^[[0m >>> 2016-09-02 00:53:04,292 New tcp connection received from >> uu.vv.ww.xx:11154^[[0m >>> ^[[36m2016-09-02 00:53:04,293 socktype=tcp, auth class=('allow', >> , {}), encryption=, >> keyfile=^[[0m >>> ^[[36m2016-09-02 00:53:04,482 creating authenticator ('allow', > 'xpra.server.auth.allow_auth.Authenticator'>, {})^[[0m >>> ^[[36m2016-09-02 00:53:04,483 allow=allow^[[0m >>> ^[[36m2016-09-02 00:53:04,483 processing authentication with allow, >> response=None, client_salt=, challenge_sent=False^[[0m >>> ^[[36m2016-09-02 00:53:04,483 challenge: >> ('274be8f27a4742d1b0f37616d6fbc4ec', 'hmac')^[[0m >>> 2016-09-02 00:53:04,483 Authentication required by allow authenticator >> module^[[0m >>> 2016-09-02 00:53:04,483 sending challenge for 'ubuntu' using hmac >> digest^[[0m >>> 2016-09-02 00:53:04,521 client has requested disconnection: no >> password available^[[0m >>> 2016-09-02 00:53:04,521 Disconnecting client uu.vv.ww.xx:11154:^[[0m >>> 2016-09-02 00:53:04,521 client request^[[0m >>> >>> >>> Following is the log from server >>> >>> 2016-09-02 00:51:26,418 created unix domain socket: >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >>> ^[[33m2016-09-02 00:51:26,468 Warning: menu forwarding is disabled:^[[0m >>> ^[[33m2016-09-02 00:51:26,468 cannot load dbus helper: No module >> named dbus^[[0m >>> ^[[33m2016-09-02 00:51:26,697 Warning: enc_xvid failed its self test^[[0m >>> ^[[33m2016-09-02 00:51:26,698 No module named xvid^[[0m >>> ^[[33m2016-09-02 00:51:26,712 Warning: failed to load the mdns avahi >> publisher:^[[0m >>> ^[[33m2016-09-02 00:51:26,712 No module named avahi^[[0m >>> ^[[33m2016-09-02 00:51:26,712 either fix your installation or use the >> 'mdns=no' option^[[0m >>> ^[[33m2016-09-02 00:51:26,717 Warning: no X11 RandR support on :11^[[0m >>> 2016-09-02 00:51:27,327 serving html content from >> '/usr/share/xpra/www'^[[0m >>> ^[[36m2016-09-02 00:51:27,327 get_auth_module(unix-domain, , {..})^[[0m >>> ^[[36m2016-09-02 00:51:27,327 get_auth_module(tcp, , {..})^[[0m >>> ^[[36m2016-09-02 00:51:27,328 get_auth_module(ssl, , {..})^[[0m >>> ^[[36m2016-09-02 00:51:27,328 get_auth_module(vsock, , {..})^[[0m >>> ^[[36m2016-09-02 00:51:27,328 init_auth(..) auth class=None, tcp auth >> class=None, ssl auth class=None, vsock auth class=None^[[0m >>> ^[[31m2016-09-02 00:51:27,401 Error: failed to import the virtual >> video module:^[[0m >>> ^[[31m2016-09-02 00:51:27,401 No module named _dbus_bindings^[[0m >>> 2016-09-02 00:51:27,411 pulseaudio server started with pid 10536^[[0m >>> /bin/sh: 1: pulseaudio: not found >>> Warning: failed to import GStreamer: >>> GStreamer 1.0: Namespace Gst not available >>> GStreamer 0.10: could not import gobject (could not find >> _PyGObject_API object) >>> ^[[31m2016-09-02 00:51:27,710 Error: failed to query sound subsystem:^[[0m >>> ^[[31m2016-09-02 00:51:27,711 query did not return any data^[[0m >>> ^[[33m2016-09-02 00:51:27,712 Warning: failed to load or register our >> dbus notifications forwarder:^[[0m >>> ^[[33m2016-09-02 00:51:27,712 No module named dbus.service^[[0m >>> ^[[33m2016-09-02 00:51:27,712 if you do not have a dedicated dbus >> session for this xpra instance,^[[0m >>> ^[[33m2016-09-02 00:51:27,712 use the 'notifications=no' option^[[0m >>> ^[[33m2016-09-02 00:51:27,713 cannot load dbus helper: No module named >> dbus^[[0m >>> ^[[31m2016-09-02 00:51:27,717 Error setting up our dbus server:^[[0m >>> ^[[31m2016-09-02 00:51:27,717 No module named dbus^[[0m >>> 2016-09-02 00:51:27,721 xpra X11 version 1.0-r13253 64-bit^[[0m >>> 2016-09-02 00:51:27,722 running with pid 10500 on Linux Ubuntu 16.04 >> xenial^[[0m >>> 2016-09-02 00:51:27,722 connected to X11 display :11^[[0m >>> 2016-09-02 00:51:27,831 xpra is ready.^[[0m >>> ^[[33m2016-09-02 00:51:28,723 Warning: pulseaudio has terminated >> shortly after startup.^[[0m >>> ^[[33m2016-09-02 00:51:28,723 pulseaudio is limited to a single >> instance per user account,^[[0m >>> ^[[33m2016-09-02 00:51:28,723 and one may be running already for user >> 'ubuntu'^[[0m >>> ^[[33m2016-09-02 00:51:28,723 to avoid this warning, either fix the >> pulseaudio command line^[[0m >>> ^[[33m2016-09-02 00:51:28,723 or use the 'pulseaudio=no' option^[[0m >>> >>> >>> Regards, >>> Mukul >>> ( https://sites.google.com/site/mukulagrawal >> ) >>> >>> On Thursday, September 1, 2016 4:40 PM, Antoine Martin >> > wrote: >>> >>> >>> On 01/09/16 13:40, Mukul Agrawal wrote: >>>> Some more information :- >>>> >>>> 1) server works with --auth and --tcp-auth. But proxy only works with >>>> tcp-auth. >>> If you are still stuck, please explain what "doesn't work" exactly here. >>> Do you get an error? If so, please post it. >>> >>>> 2) I can connect to each of the servers directly. I can get their >>>> displays to local windows machine if I connect to them directly. But no >>>> luck getting the display through proxy. Connected like this :- >>>> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>>> tcp/ubuntu at 52.53.168.31 /10000 >>>> Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>>> tcp/ubuntu at 52.53.168.31 /10001 >>> The username is specified twice in those command lines which is a little >>> bit confusing: once using the "--username=" command line option and >>> again in the URL. I find this form easier to read: >>> xpra attach tcp/username:password at host :port/DISPLAY >>> >>> You only need to specify the DISPLAY if there are going to be more than >>> one matching display for that user. >>> If you are using multifile with a single entry then you don't need it. >>> >>>> 3) --tcp-auth=none or --tcp-auth=allow do not work. They kept giving me >>>> authentication error no mater what I do. >>> Please always include the actual errors, difficult to help you without. >>> >>> You need an authentication module so that the proxy can use it to locate >>> the available sessions, so "none" is not expected to work. >>> "allow" can work, but the username you specify must exist on the target >>> system and if there is more than one session running as that user >>> (including the proxy itself), you will probably need this fix: >>> http://xpra.org/trac/changeset/13533 >>> >>>> Finally, I had to use multifil to get rid of authetication errors. >>>> >>>> 4) auth file just has one line and no next line character (build using >>>> echo command). One line is this :- >>>> >> ubuntu|secretpassword|1000|1000|tcp:aa.bb.cc.dd:10001|EXAMPLE_ENV=VALUE|compression=0 >>>> >>>> I tried both the internal and external IP address. aa.bb.cc.dd:10001 as >>>> well as xx.yy.xx.aa:10001. I dont get authetication errors or connection >>>> errors with either. But none of them show me display. >>> Please post the full logs with the "-d auth" switch. >>> These should show the authentication attempt, the sessions found, etc. >>> >>>> On local machine password file pswd.txt just had single word >>>> secretpassword. Again no next line character. >>>> >>>> 5) The xpra versions from the server log is shown like this :- >>>> >>>> ^[[31m2016-08-31 21:50:45,340 Error setting up our dbus server:^[[0m >>>> ^[[31m2016-08-31 21:50:45,340 No module named dbus^[[0m >>>> 2016-08-31 21:50:45,341 xpra X11 version 1.0-r13253 64-bit^[[0m >>>> 2016-08-31 21:50:45,341 running with pid 6869 on Linux Ubuntu 16.04 >>>> xenial^[[0m >>>> 2016-08-31 21:50:45,341 connected to X11 display :11^[[0m >>>> 2016-08-31 21:50:45,391 xpra is ready.^[[0m >>>> ^[[33m2016-08-31 21:50:46,343 Warning: pulseaudio has terminated shortly >>>> after startup.^[[0m >>>> >>>> And logs from the proxy are here :- >>>> >>>> 2016-08-31 22:26:59,300 serving html content from >> '/usr/share/xpra/www'^[[0m >>>> 2016-08-31 22:26:59,312 xpra proxy version 1.0-r13253 64-bit^[[0m >>>> 2016-08-31 22:26:59,312 running with pid 7491 on Linux Ubuntu 16.04 >>>> xenial^[[0m >>>> 2016-08-31 22:26:59,313 connected to X11 display :13^[[0m >>>> 2016-08-31 22:26:59,313 xpra is ready.^[[0m >>>> >>>> 6) Anything else I might have forgotten? >>>> I am running out of ideas to try. >>>> Let me know? Very motivated to make it work .... but have no more ideas >>>> to experiment. >>> This works fine for me with the latest trunk: >>> >>> >>> Example with multifile: >>> >>> $ cat > multifile.txt <>> ubuntu1|secretpassword1|1000|1000|:100|| >>> ubuntu2|secretpassword2|1000|1000|tcp:127.0.0.1:10000|| >>> EOF >>> $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth >>> $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 \ >>> --tcp-auth=multifile:filename=./multifile.txt -d auth >>> $ xpra attach tcp/ubuntu1:secretpassword1 at 127.0.0.1 >> :10002 >>> >>> Or if you want the proxy to connect to the server via TCP, use the >>> second username: >>> $ xpra attach tcp/ubuntu2:secretpassword2 at 127.0.0.1 >> :10002 >>> >>> >>> Example with allow: >>> $ xpra start --start=xterm --bind-tcp=0.0.0.0:10000 :100 -d auth >>> $ xpra proxy :13 --bind-tcp=0.0.0.0:10002 --tcp-auth=allow -d auth >>> $ xpra attach tcp/$USER:foo at 127.0.0.1 :10002/100 >>> (with allow, you must specify the display) >>> >>> The same client attach commands also work from win32 or OSX clients, you >>> will just need to change the server IP to its external one. >>> >>> Cheers >>> Antoine >>> >>> >>> >>>> >>>> Regards, >>>> Mukul >>>> ( https://sites.google.com/site/mukulagrawal >> ) >>>> >>>> >>>> On Wednesday, August 31, 2016 8:45 PM, Antoine Martin >>>> > wrote: >>>> >>>> >>>> On 01/09/16 05:55, Mukul Agrawal wrote: >>>>> OK. Upgraded my ubuntu distributon to Xenial and then got the xpra 1.0 >>>>> from beta. Still, cannot get it to work. Any help? >>>>> >>>>> started proxy like this >>>>> -- xpra proxy :13 >>>>> >>>> >> --bind-tcp=0.0.0.0:10002--tcp-auth=multifile:filename=/home/ubuntu/xpra-auth >>>>> >>>>> started a couple of servers on same machine like this >>>>> -- xpra start :11 --bind-tcp=0.0.0.0:10000 >>>>> -- xpra start :12 --bind-tcp=0.0.0.0:10001 >>>>> -- DISPLAY=:11 xlclock & >>>>> -- DISPLAY=:12 xlogo >>>> Don't do that. Same as the other thread about tty. Use this instead: >>>> xpra start :DISPLAY --bind-tcp=... --start=COMMAND >>>> >>>>> try to attach from windows machine >>>>> -- Xpra_cmd.exe attach --username=ubuntu --password-file=pswd.txt >>>>> tcp/52.53.168.31/10002/11 >>>>> >>>>> Everything seems to go well in the beginning. No error message. It >>>>> simply drops the connection without saying anything. >>>> You're not sharing your multifile password file, so I won't be able to >>>> reproduce what you did. >>>> >>>> You're also not showing what versions you've used for testing, the only >>>> version shown is from the win32 client, which is well out of date: >>>>> Python/Gtk2 Microsoft Windows 7 client version 0.16.3-r12203 >>>> >>>> There's a debug flag for authentication, try adding "-d auth" to your >>>> server command line. >>>> >>>> Cheers >>>> Antoine >>>> >>>> >>>>> >>>>> Here is the log from proxy :- >>>>> >>>>> >>>>> >>>>> 2016-08-31 22:28:47,740 New unix-domain connection received on >>>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-13^[[0m >>>>> 2016-08-31 22:29:00,624 New tcp connection received from >>>>> xx.yy.zz.aa:5792^[[0m >>>>> 2016-08-31 22:29:00,625 Authentication required by multi password file >>>>> authenticator module^[[0m >>>>> 2016-08-31 22:29:00,625 sending challenge for 'ubuntu' using hmac >>>>> digest^[[0m >>>>> ^[[33m2016-08-31 22:29:00,955 Warning: enc_xvid failed its self >> test^[[0m >>>>> ^[[33m2016-08-31 22:29:00,955 No module named xvid^[[0m >>>>> 2016-08-31 22:29:00,966 proxy video encoders: x264^[[0m >>>>> 2016-08-31 22:29:00,966 new proxy instance started^[[0m >>>>> 2016-08-31 22:29:00,966 for client tcp socket: aa.bb.cc.dd:10002 <- >>>>> xx.yy.zz.aa:5792^[[0m >>>>> 2016-08-31 22:29:00,967 and server tcp socket: aa.bb.cc.dd:43006 <- >>>>> 22.33.44.55:10000^[[0m >>>>> 2016-08-31 22:29:00,967 proxy instance now also available using unix >>>>> domain socket:^[[0m >>>>> 2016-08-31 22:29:00,967 >> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>>>> 2016-08-31 22:29:00,967 setting sockets (tcp socket: aa.bb.cc.dd:10002 >>>>> <- xx.yy.zz.aa:5792, tcp socket: aa.bb.cc.dd:43006 <- 22.33.44.55:10000) >>>>> to blocking mode^[[0m >>>>> 2016-08-31 22:29:01,628 stop(client connection lost, >> Protocol(None))^[[0m >>>>> 2016-08-31 22:29:01,628 removing socket >>>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-proxy-7553^[[0m >>>>> 2016-08-31 22:29:01,638 proxy instance 7553 stopped^[[0m >>>>> >>>>> Here is the log from the server itself >>>>> >>>>> 2016-08-31 22:28:47,738 New unix-domain connection received on >>>>> /home/ubuntu/.xpra/ip-aa-bb-cc-dd-11^[[0m >>>>> 2016-08-31 22:29:00,974 New tcp connection received from >>>>> 22.33.44.55:43006^[[0m >>>>> 2016-08-31 22:29:00,977 Handshake complete; enabling connection^[[0m >>>>> ^[[31m2016-08-31 22:29:00,980 Error setting up the source's DBUS >>>>> server:^[[0m >>>>> ^[[31m2016-08-31 22:29:00,980 No module named dbus^[[0m >>>>> 2016-08-31 22:29:00,981 Python/Gtk2 Microsoft Windows 7 client version >>>>> 0.16.3-r12203^[[0m >>>>> 2016-08-31 22:29:00,981 connected from 'MAGRAWAL? as 'ubuntu' - >>>>> 'magrawal'^[[0m >>>>> 2016-08-31 22:29:00,981 via {'': 'linux2', 'name': 'Linux Ubuntu 16.04 >>>>> xenial', 'machine': 'x86_64', 'platform': >>>>> 'Linux-4.4.0-36-generic-x86_64-with-Ubuntu-16.04-xenial', >>>>> 'architecture': ['64bit', 'ELF'], 'release': '4.4.0-36-generic', >>>>> 'processor': 'Intel(R) Xeon(R) CPU E5-2670 v2 @ 2.50GHz', >>>>> 'linux_distribution': ['Ubuntu', '16.04', 'xenial']} proxy version >>>>> unknown on 'ip-aa-bb-cc-dd'^[[0m >>>>> ^[[33m2016-08-31 22:29:00,981 Warning: proxy version may not be >>>>> compatible: remote version not available!^[[0m >>>>> 2016-08-31 22:29:00,982 using h264 as primary encoding also >>>> available:^[[0m >>>>> 2016-08-31 22:29:00,982 vp9, vp8, png, png/P, png/L, rgb24, jpeg, >>>>> rgb32^[[0m >>>>> 2016-08-31 22:29:00,990 client root window size is 1920x1080 with 1 >>>>> display:^[[0m >>>>> 2016-08-31 22:29:00,990 Default (508x285 mm - DPI: 96x96)^[[0m >>>>> 2016-08-31 22:29:00,990 DISPLAY1 (677x381 mm - DPI: 72x72)^[[0m >>>>> 2016-08-31 22:29:01,017 setting key repeat rate from client: 500ms delay >>>>> / 33ms interval^[[0m >>>>> 2016-08-31 22:29:01,018 keyboard mapping already configured >> (skipped)^[[0m >>>>> 2016-08-31 22:29:01,629 client has requested disconnection: server >>>>> shutdown (client connection lost)^[[0m >>>>> 2016-08-31 22:29:01,629 Disconnecting client 22.33.44.55:43006:^[[0m >>>>> 2016-08-31 22:29:01,629 client request^[[0m >>>>> 2016-08-31 22:29:01,630 xpra client 5 disconnected.^[[0m >>>>> >>>>> >>>>> Regards, Mukul ( https://sites.google.com/site/mukulagrawal >>>> ) >>>>> >>>>> >>>>> On Wednesday, August 31, 2016 4:05 AM, Antoine Martin via shifter-users >>>>> > >>>> > >> wrote: >>>>> >>>>> >>>>> On 30/08/16 23:52, Mukul Agrawal via shifter-users wrote: >>>>>> I am running xpra server 0.15 that I got from the latest winswitch >> repo. >>>>>> Started proxy like that shown in your basic usage example ProxyServer >>>>> ? Xpra >>>>>> >>>>>> xpra proxy :13 --bind-tcp=0.0.0.0:10000 --auth=allow >>>>>> started a xpra server instance on same machine/same account using >>>>> several different formatsxpra start :11 >>>>>> xpra start :11 --bind-tcp=127.0.0.1:10001 >>>>>> xpra start :11 --auth=allow --bind-tcp=127.0.0.1:10001 >>>>>> When I try to attach to this instance from windows machine using >>>>>> Xpra_cmd attach tcp/user at IP > > >>>> >>/10000/11 >>>>>> >>>>>> I get authentication error :- " authentication failed: this server >>>>> requires authentication, please provide a password." >>>>> I assume you must be using an older distribution like Ubuntu Trusty? >>>>> >>>>> Please try with the current beta packages, the next release will support >>>>> those older distribution versions and it includes a large number of >>>>> fixes for the proxy server: >>>>> http://xpra.org/trac/ticket/952 >>>>> http://xpra.org/trac/ticket/1264 >>>>> Many of those features and fixes are not available in the branch you are >>>>> using. >>>>> >>>>> Cheers >>>>> Antoine >>>>> >>>>>> >>>>>> Another problem >>>>>> xpra stop :13 will not stop the proxy.I again get a message asking for >>>>> a password. >>>>>> Regards, >>>>>> Mukul >>>>>> ( https://sites.google.com/site/mukulagrawal >>>>> ) >>>>>> _______________________________________________ >>>>>> shifter-users mailing list >>>>>> shifter-users at lists.devloop.org.uk >> >>>> > > >>>>> > >>>> > >> >>>>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >>>>> >>>>>> >>>>> >>>>> _______________________________________________ >>>>> shifter-users mailing list >>>>> shifter-users at lists.devloop.org.uk >> >>>> > > >>>>> > >>>> > >> >>>> >>>>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>>>> >>>>> >>>> >>>> >>>> >>> >>> >>> >>> >>> >>> >>> _______________________________________________ >>> shifter-users mailing list >>> shifter-users at lists.devloop.org.uk >> >>> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >>> >> >> _______________________________________________ >> shifter-users mailing list >> shifter-users at lists.devloop.org.uk >> >> http://lists.devloop.org.uk/mailman/listinfo/shifter-users >> >> > > > > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From mukulagrawal78 at yahoo.com Fri Sep 2 18:36:38 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 2 Sep 2016 17:36:38 +0000 (UTC) Subject: [winswitch] HTML5 client with xpra proxy References: <1687243186.592484.1472837798941.ref@mail.yahoo.com> Message-ID: <1687243186.592484.1472837798941@mail.yahoo.com> Can HTML5 cleint work with xpra proxy to access several xpra servers behind the proxy? The login webpage that shows up does not have options to enter display number instead of port. ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) From mukulagrawal78 at yahoo.com Sat Sep 3 01:26:49 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Sat, 3 Sep 2016 00:26:49 +0000 (UTC) Subject: [winswitch] HTML5 client with secure websockets References: <674984917.11019.1472862409724.ref@mail.yahoo.com> Message-ID: <674984917.11019.1472862409724@mail.yahoo.com> Another question with respect to HTML5 cleint.Would it work with ssl instead of TCP?I got the basic ssl setup done fine ... meaning I can connect using the client program.I would like to wrap this up in the websocket protocol if possible? And second question :-If a firewall on the client side is stopping the ssl traffic to the server, would it obviously block the secure websocket traffic to same server as well? Or is that not a necessity? Firewall does not block ssh connection to same server but it does block tcp or ssl (both on port 80). ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) From antoine at nagafix.co.uk Sat Sep 3 05:39:51 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Sat, 3 Sep 2016 11:39:51 +0700 Subject: [winswitch] HTML5 client with xpra proxy In-Reply-To: <1687243186.592484.1472837798941@mail.yahoo.com> References: <1687243186.592484.1472837798941.ref@mail.yahoo.com> <1687243186.592484.1472837798941@mail.yahoo.com> Message-ID: <0a86f3da-336f-7312-420a-90e790c51be6@nagafix.co.uk> On 03/09/16 00:36, Mukul Agrawal via shifter-users wrote: > Can HTML5 cleint work with xpra proxy to access several xpra servers behind the proxy? I've never tried it, but this should work. > The login webpage that shows up does not have options to enter display number instead of port. Correct, you would have to use multifile. (this could be added but it wouldn't be very intuitive I think, it would be more useful when generating session URLs on the fly - feel free to create a ticket for it) Cheers Antoine > Regards, > Mukul > ( https://sites.google.com/site/mukulagrawal ) > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From antoine at nagafix.co.uk Sat Sep 3 05:41:27 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Sat, 3 Sep 2016 11:41:27 +0700 Subject: [winswitch] HTML5 client with secure websockets In-Reply-To: <674984917.11019.1472862409724@mail.yahoo.com> References: <674984917.11019.1472862409724.ref@mail.yahoo.com> <674984917.11019.1472862409724@mail.yahoo.com> Message-ID: On 03/09/16 07:26, Mukul Agrawal via shifter-users wrote: > Another question with respect to HTML5 cleint. > Would it work with ssl instead of TCP? I guess you meant https / wss. > I got the basic ssl setup done fine ... meaning I can connect using the client program. > I would like to wrap this up in the websocket protocol if possible? There is a ticket for this, but I'm not sure how feasible it is to have SSL for both xpra and http due to some python ssl API restrictions: http://xpra.org/trac/ticket/1213 > And second question : > If a firewall on the client side is stopping the ssl traffic to the server, would it obviously block the secure websocket traffic to same server as well? That sounds likely. How does your firewall decide to block this traffic? Layer-7 filtering doesn't really work for SSL traffic, only for the initial certificate exchange which is plain text. And if it is just based on port numbers, why would it care what sort of traffic flows on that port? > Or is that not a necessity? Firewall does not block ssh connection to same server but it does block tcp or ssl (both on port 80). Well, you will obviously need a port to connect to. So either open one up (ie: 443) or use an existing one. It might even be possible to use xpra on port 22 and forward ssh traffic to a tcp-proxy so you can have both on the same port (untested). But if something goes wrong... you would lose the ability to login via ssh.. Cheers Antoine > Regards, > Mukul ( https://sites.google.com/site/mukulagrawal ) > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From mukulagrawal78 at yahoo.com Fri Sep 9 08:03:09 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 9 Sep 2016 07:03:09 +0000 (UTC) Subject: [winswitch] HTML5 client with secure websockets In-Reply-To: References: <674984917.11019.1472862409724.ref@mail.yahoo.com> <674984917.11019.1472862409724@mail.yahoo.com> Message-ID: <1708938108.2246810.1473404589491@mail.yahoo.com> ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) > And second question : > If a firewall on the client side is stopping the ssl traffic to the server, would it obviously block the secure websocket traffic to same server as well? That sounds likely. How does your firewall decide to block this traffic? Layer-7 filtering doesn't really work for SSL traffic, only for the initial certificate exchange which is plain text. And if it is just based on port numbers, why would it care what sort of traffic flows on that port? First ssl handshake message from client successfully goes to the server as I can see connection request in the xpra server logs.But client never gets the message back from server. Seems like firewall decides to block this. I set up xpra server on port 443 for testing this. If I setup a https server on port 443 ... that is not blocked by firewall.Any idea what is going on? Or anyway to avoid getting ssl blocked? Cheers Antoine >? Regards, > Mukul ( https://sites.google.com/site/mukulagrawal ) > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > _______________________________________________ shifter-users mailing list shifter-users at lists.devloop.org.uk http://lists.devloop.org.uk/mailman/listinfo/shifter-users From e.grammatico at gmail.com Fri Sep 9 11:10:31 2016 From: e.grammatico at gmail.com (Eric Grammatico) Date: Fri, 09 Sep 2016 10:10:31 +0000 Subject: [winswitch] Unable to setup xpra proxy with authenticated xpra server Message-ID: Hello there ! I am going further in experiencing xpra proxy. I had successfully setup xpra proxy with opened xpra server. It works like a sharm. But once I tried to setup an xpra server authentication, it's like the proxy is passing a wrong user/password: Command line from the proxy with logs: $> xpra proxy :100 --daemon=no --bind-tcp=${HOSTNAME}:10000 --tcp-auth=multifile:filename=/home/proxy/.xpra/proxy_auth 2016-09-09 11:49:47,201 xpra proxy version 0.17.5-r13455 2016-09-09 11:49:47,205 running with pid 67 on Linux CentOS Linux 7.2.1511 Core 2016-09-09 11:49:47,206 on display :100 2016-09-09 11:49:47,208 xpra is ready. 2016-09-09 11:55:51,126 New tcp connection received from 192.168.122.1:49196 2016-09-09 11:55:51,158 Authentication required by multi password file authenticator module 2016-09-09 11:55:51,159 sending challenge for 'eric' using hmac digest 2016-09-09 11:55:52,248 proxy video encoders: x264 2016-09-09 11:55:52,249 new proxy instance started 2016-09-09 11:55:52,252 for client tcp socket: 172.19.0.3:10000 xpra attach --encoding=h264 --username=eric tcp:xspice.local:10000 2016-09-09 14:03:03,589 Xpra gtk2 client version 0.17.5-r13455 2016-09-09 14:03:03,589 running on Linux Fedora 23 Twenty Three 2016-09-09 14:03:03,590 Warning: failed to import opencv: 2016-09-09 14:03:03,590 No module named cv2 2016-09-09 14:03:03,590 webcam forwarding is disabled 2016-09-09 14:03:03,782 GStreamer version 1.6 for Python 2.7 -:6: error: unexpected character ':', expected character '}' -:6: error: unexpected character ':', expected character '}' 2016-09-09 14:03:04,309 OpenGL_accelerate module loaded 2016-09-09 14:03:04,315 Warning: OpenGL windows will be clamped to the maximum texture size 8192x8192 2016-09-09 14:03:04,315 for OpenGL 3.0 renderer 'Gallium 0.4 on NV96' 2016-09-09 14:03:04,315 OpenGL enabled with Gallium 0.4 on NV96 2016-09-09 14:03:08,122 detected keyboard: rules=evdev, model=pc105, layout=fr 2016-09-09 14:03:08,129 desktop size is 1680x1050 with 1 screen: 2016-09-09 14:03:08,129 :0.0 (444x277 mm - DPI: 96x96) workarea: 1680x1016 2016-09-09 14:03:08,129 monitor 1 (474x296 mm - DPI: 90x90) 2016-09-09 14:03:10,192 server failure: disconnected before the session could be established 2016-09-09 14:03:10,193 server requested disconnect: server shutdown (disconnect from server: invalid challenge response) 2016-09-09 14:03:10,221 Connection lost Thanks for your support. Best regards, - _/) Eric Grammatico. From antoine at nagafix.co.uk Fri Sep 9 12:41:46 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 9 Sep 2016 18:41:46 +0700 Subject: [winswitch] HTML5 client with secure websockets In-Reply-To: <1708938108.2246810.1473404589491@mail.yahoo.com> References: <674984917.11019.1472862409724.ref@mail.yahoo.com> <674984917.11019.1472862409724@mail.yahoo.com> <1708938108.2246810.1473404589491@mail.yahoo.com> Message-ID: >> And second question : >> If a firewall on the client side is stopping the ssl traffic to the > server, would it obviously block the secure websocket traffic to same > server as well? > That sounds likely. > How does your firewall decide to block this traffic? > Layer-7 filtering doesn't really work for SSL traffic, only for the > initial certificate exchange which is plain text. > And if it is just based on port numbers, why would it care what sort of > traffic flows on that port? > > First ssl handshake message from client successfully goes to the server as I can see connection request in the xpra server logs.But client never gets the message back from server. Seems like firewall decides to block this. I think you're just hitting this bug which is already fixed in trunk: http://xpra.org/trac/ticket/1213 Do you get the same problem with the python client in SSL mode or just the html5 client over https? > I set up xpra server on port 443 for testing this. > If I setup a https server on port 443 ... that is not blocked by firewall.Any idea what is going on? Make sure you're running the very latest code for SSL support. You should run the server with "-d network" or even "-d all" to get some debugging information. > Or anyway to avoid getting ssl blocked? Assuming that is the case, consult with your firewall vendor? Cheers Antoine From antoine at nagafix.co.uk Fri Sep 9 13:04:35 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 9 Sep 2016 19:04:35 +0700 Subject: [winswitch] Unable to setup xpra proxy with authenticated xpra server In-Reply-To: References: Message-ID: On 09/09/16 17:10, Eric Grammatico via shifter-users wrote: > Hello there ! > > I am going further in experiencing xpra proxy. I had successfully setup xpra proxy with opened xpra server. It works like a sharm. But once I tried to setup an xpra server authentication, it's like the proxy is passing a wrong user/password: > > Command line from the proxy with logs: > $> xpra proxy :100 --daemon=no --bind-tcp=${HOSTNAME}:10000 --tcp-auth=multifile:filename=/home/proxy/.xpra/proxy_auth (...) > 2016-09-09 14:03:10,192 server failure: disconnected before the session could be established > 2016-09-09 14:03:10,193 server requested disconnect: server shutdown (disconnect from server: invalid challenge response) > 2016-09-09 14:03:10,221 Connection lost Version 0.17.x does not support proxy-to-server authentication: http://xpra.org/trac/ticket/1264#comment:3 Either use the latest beta or wait for the final release. A more general note on "invalid challenge response": always make sure there are no trailing newlines in your password file, if you use one. Cheers Antoine From mukulagrawal78 at yahoo.com Thu Sep 15 05:39:42 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Thu, 15 Sep 2016 04:39:42 +0000 (UTC) Subject: [winswitch] multifile format References: <316295073.1356939.1473914382283.ref@mail.yahoo.com> Message-ID: <316295073.1356939.1473914382283@mail.yahoo.com> If I want xpra proxy on machine1 to connect to xpra server on machine2 using ssh with public key authentication and no password, then how should I set it up? Public keys are already in default locations and xpra is able to attach directly from machine2 to machine 1 using standard format:? xpra attach ssh:username at machine1:display. But when I try to connect via proxy from client machine3, proxy is not being able to authenticate. It sends the challenge but then there is no log after that. I am using multifile like this :- username|pswd|1000|1000|ssh:machine1:display|| and attach command from machine3 like this:-xpra attach tcp:username:pswd at machine2:proxyPORT Are the usernames and passwords actually associated with login accounts on the target machine or their significance is only with respect to multifile resolution? Can password be left blank for public key authentication? Thanks. From antoine at nagafix.co.uk Thu Sep 15 18:24:42 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 16 Sep 2016 00:24:42 +0700 Subject: [winswitch] multifile format In-Reply-To: <316295073.1356939.1473914382283@mail.yahoo.com> References: <316295073.1356939.1473914382283.ref@mail.yahoo.com> <316295073.1356939.1473914382283@mail.yahoo.com> Message-ID: <90f4530e-a726-72dd-531b-381e21b34c3e@nagafix.co.uk> On 15/09/16 11:39, Mukul Agrawal via shifter-users wrote: > If I want xpra proxy on machine1 to connect to xpra server on machine2 using ssh with public key authentication and no password, then how should I set it up? I have not tested this, but SSH connections from the proxy should be using the public key of the user running the proxy server process and not the key of the user you authenticate as. (which may not have a user account at all on the system running the proxy) > Public keys are already in default locations and xpra is able to attach directly from machine2 to machine 1 using standard format: xpra attach ssh:username at machine1:display. I thought the server you wanted to connect to was "machine 2" and not the other way around? > But when I try to connect via proxy from client machine3, proxy is not being able to authenticate. Have you checked your ssh server logs for an answer? > It sends the challenge but then there is no log after that. Please share the log sample up to that point to help clarify things. Note: when using SSH connections, the server does not need to use another socket authentication module. That's usually just redundant. > I am using multifile like this :- > username|pswd|1000|1000|ssh:machine1:display|| > and attach command from machine3 like this:-xpra attach tcp:username:pswd at machine2:proxyPORT > > Are the usernames and passwords actually associated with login accounts on the target machine or their significance is only with respect to multifile resolution? It depends: if the proxy server runs as root, each proxied connection will run as the uid and gid you defined. (ie: 1000 above) But the connection to the backend server is made before changing uid, so the ssh key used will not be the one of the user specified in multifile. If you don't mind using SSH with passwords, you should be able to use something like this (untested): |username|pswd|1000|1000|ssh/username2:password2 at machine2/display|| We could also change the code to: * add support for ssh options to multifile, so you could specify the keyfile for each user * change the ordering so the connection to the backend server happens after changing uid and gid (but this would only work with the proxy running as root) Feel free to create tickets for this. > Can password be left blank for public key authentication? That doesn't make sense: the password in multifile is for authentication to the proxy, not to the backend server. Unless you're trying to connect via ssh to your proxy? (but why?) Cheers Antoine > > Thanks. > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > From mukulagrawal78 at yahoo.com Fri Sep 16 19:35:21 2016 From: mukulagrawal78 at yahoo.com (Mukul Agrawal) Date: Fri, 16 Sep 2016 18:35:21 +0000 (UTC) Subject: [winswitch] multifile format In-Reply-To: <90f4530e-a726-72dd-531b-381e21b34c3e@nagafix.co.uk> References: <316295073.1356939.1473914382283.ref@mail.yahoo.com> <316295073.1356939.1473914382283@mail.yahoo.com> <90f4530e-a726-72dd-531b-381e21b34c3e@nagafix.co.uk> Message-ID: <444063744.2356810.1474050921849@mail.yahoo.com> Thanks for the clarifications.I simplified the setup (non-sudo user for proxy; same usernames on both machines) to be able to debug. But it still does not work. Multifile authentication on proxy succeeds. But seems like it not using correct ssh command line to connect to backened server.? Logs on the proxy are attached below. There are no logs on the backend xpra server. The sshd logs on the backend server says that the connection was closed by the proxy [preauth]. 1. I now start proxy as non-sudo user1 on machine1 and attach it to non-priveldged tcp port1. Give it a display number disp1. ?xpra proxy :disp1 --bind-tcp=0.0.0.0:port1 --tcp-auth=multifile:filename=path-to-multifile -d auth Machine1 is running newer version of XPRA (xpra proxy version 1.0-r13637). multifile looks like following :- user1|pswd1|1000|1000|ssh:user1 at machine2:disp2|| 2. start an xpra server on machine2 under the user account with with same username user1. Give it a display number disp2. xpra start :disp2DISPLAY=:disp2 xeyes & Machine2 is using older version of XPRA (0.15.10 r11439). Not sure if this creates any problems. 3. Try attaching to backend server on machine2 from machine 1 using ssh transport and public key authentication. xpra attach ssh:user1 at machine2:disp2 This works fine. So seems like different versions are compatible. 4. Try attaching from xpra clent running on machine3 (win7 machine). xpra attach --password-file=pswd.txt tcp:user1 at machine1:port1 OR xpra attach tcp:user1:pswd1 at machine1:port1 Proxy Logs :- 2016-09-16 11:03:55,160 New tcp connection received from IP3:1834^[[0m^[[36m2016-09-16 11:03:55,160 socktype=tcp, authclass=('multifile', , {'filename': 'path-to-multifile2.txt'}),encryption=, keyfile=^[[0m^[[36m2016-09-16 11:03:55,161 creating authenticator ('multifile',, {'filename': 'path-to-multifile2.txt'})with username=user1^[[0m^[[36m2016-09-16 11:03:55,161 multifile=multi passwordfile^[[0m^[[36m2016-09-16 11:03:55,161 processing authentication withmulti password file, response=None, client_salt=, challenge_sent=False^[[0m^[[36m2016-09-16 11:03:55,161 challenge:('dc743d422f664331be64f48c22913d8144207dcab83c4ec2bdd6ed21a88a7567','hmac')^[[0m2016-09-16 11:03:55,161 Authentication required by multipassword file authenticator module^[[0m2016-09-16 11:03:55,162?sending challenge for 'user1' using hmac digest^[[0m^[[36m2016-09-16 11:03:55,271 processing authentication withmulti password file, response=864f4fff84caf265599ff84726295167, client_salt=38643238663234613531386134353065386363383266363131346438393164356338383537383062303665363431396162633432363735643634643066346133,challenge_sent=True^[[0m^[[36m2016-09-16 11:03:55,271 mtime(path-to-multifile2.txt)=1473994487.22^[[0m^[[36m2016-09-16 11:03:55,271 loaded 184 bytes from 'path-to-multifile2.txt'^[[0m^[[36m2016-09-16 11:03:55,272 line 1: ^[[36m2016-09-1611:03:55,272 found 7 fields^[[0m?. Something here ?hex(salt)=5c07050c5556005307570e57000603545a06550c54520e5203065d090a555c04570c0a05005c5303520e565500545a530007500453530755570c5c5151015704,hash=864f4fff84caf265599ff84726295167^[[0m^[[36m2016-09-16 11:03:55,272 authentication challengepassed^[[0m^[[36m2016-09-16 11:03:55,272 start_proxy(Protocol(tcpsocket: internalIP1:port1<- IP3:1834), {..}, None) found sessions: (1000,1000, ['ssh:user1 at IP2:disp2'], {}, {})^[[0m^[[36m2016-09-16 11:03:55,273 start_proxy:proxy-virtual-display=:disp1 (ignored), user specified display=None, founddisplays=['ssh:user1 at IP2:disp2']^[[0m2016-09-16 11:03:55,499 proxy video encoders: x264^[[0m2016-09-16 11:03:55,499 new proxy instance started^[[0m2016-09-16 11:03:55,499?for client tcp socket: internalIP1:port1<- IP3:1834^[[0m2016-09-16 11:03:55,499?and server Pipe(ssh:user1 at IP2:disp2)^[[0m2016-09-16 11:03:55,500 proxy instance now also availableusing unix domain socket:^[[0m2016-09-16 11:03:55,500?path-to-.xpra/ip-internal-IP1-proxy-11703^[[0m^[[31m2016-09-16 11:03:55,503 Error: SSH connection to thexpra server failed^[[0m^[[31m2016-09-16 11:03:55,504? check your username, hostname, displaynumber, firewall, etc^[[0m^[[31m2016-09-16 11:03:55,504? for server: ssh:user1 at IP2:disp2^[[0m^[[31m2016-09-16 11:03:55,504? the command line used was:^[[0m^[[31m2016-09-16 11:03:55,504? ssh -x -l user1 -T IP2 sh -c 'xprainitenv;~/.xpra/run-xpra _proxy :disp2 || $XDG_RUNTIME_DIR/xpra/run-xpra _proxy:disp2 || xpra _proxy :disp2'^[[0m2016-09-16 11:03:55,504 stop(server connection lost,Protocol(None))^[[0m2016-09-16 11:03:55,505 removing socket path-to-.xpra/ip-internal-IP1-proxy-11703^[[0m2016-09-16 11:03:55,505 proxy instance 11703 stopped^[[0m ?Regards, Mukul ( https://sites.google.com/site/mukulagrawal ) On Thursday, September 15, 2016 10:24 AM, Antoine Martin via shifter-users wrote: On 15/09/16 11:39, Mukul Agrawal via shifter-users wrote: > If I want xpra proxy on machine1 to connect to xpra server on machine2 using ssh with public key authentication and no password, then how should I set it up? I have not tested this, but SSH connections from the proxy should be using the public key of the user running the proxy server process and not the key of the user you authenticate as. (which may not have a user account at all on the system running the proxy) > Public keys are already in default locations and xpra is able to attach directly from machine2 to machine 1 using standard format:? xpra attach ssh:username at machine1:display. I thought the server you wanted to connect to was "machine 2" and not the other way around? > But when I try to connect via proxy from client machine3, proxy is not being able to authenticate. Have you checked your ssh server logs for an answer? > It sends the challenge but then there is no log after that. Please share the log sample up to that point to help clarify things. Note: when using SSH connections, the server does not need to use another socket authentication module. That's usually just redundant. > I am using multifile like this :- > username|pswd|1000|1000|ssh:machine1:display|| > and attach command from machine3 like this:-xpra attach tcp:username:pswd at machine2:proxyPORT > > Are the usernames and passwords actually associated with login accounts on the target machine or their significance is only with respect to multifile resolution? It depends: if the proxy server runs as root, each proxied connection will run as the uid and gid you defined. (ie: 1000 above) But the connection to the backend server is made before changing uid, so the ssh key used will not be the one of the user specified in multifile. If you don't mind using SSH with passwords, you should be able to use something like this (untested): |username|pswd|1000|1000|ssh/username2:password2 at machine2/display|| We could also change the code to: * add support for ssh options to multifile, so you could specify the keyfile for each user * change the ordering so the connection to the backend server happens after changing uid and gid (but this would only work with the proxy running as root) Feel free to create tickets for this. > Can password be left blank for public key authentication? That doesn't make sense: the password in multifile is for authentication to the proxy, not to the backend server. Unless you're trying to connect via ssh to your proxy? (but why?) Cheers Antoine > > Thanks. > > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users > _______________________________________________ shifter-users mailing list shifter-users at lists.devloop.org.uk http://lists.devloop.org.uk/mailman/listinfo/shifter-users From mujahid.sultan at ryerson.ca Sat Sep 17 07:45:00 2016 From: mujahid.sultan at ryerson.ca (Mujahid) Date: Sat, 17 Sep 2016 02:45:00 -0400 Subject: [winswitch] Unable to connect to a session from windows Message-ID: <57dce670.d7a86b0a.6a42d.2365@mx.google.com> - Started session on the server - The windows client keeps asking for password From antoine at nagafix.co.uk Sat Sep 17 08:49:11 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Sat, 17 Sep 2016 14:49:11 +0700 Subject: [winswitch] Unable to connect to a session from windows In-Reply-To: <57dce670.d7a86b0a.6a42d.2365@mx.google.com> References: <57dce670.d7a86b0a.6a42d.2365@mx.google.com> Message-ID: <02e93956-a1b5-bf7e-9ec9-bc616e3a5e90@nagafix.co.uk> On 17/09/16 13:45, Mujahid via shifter-users wrote: > - Started session on the server > - The windows client keeps asking for password Please try to provide more details (note: the mailing list scrubs attachments). For guidelines, see: http://xpra.org/trac/wiki/ReportingBugs Cheers Antoine From dalkema6 at gmail.com Thu Sep 29 18:40:03 2016 From: dalkema6 at gmail.com (David Alkema) Date: Thu, 29 Sep 2016 12:40:03 -0500 Subject: [winswitch] winswitch issues on OSX 10.11.6 (El Capitan) Message-ID: I'm having issues with the winswitch applet not showing in the menu bar. Is this the right place to come for help? Thanks, David From antoine at nagafix.co.uk Fri Sep 30 05:39:25 2016 From: antoine at nagafix.co.uk (Antoine Martin) Date: Fri, 30 Sep 2016 11:39:25 +0700 Subject: [winswitch] winswitch issues on OSX 10.11.6 (El Capitan) In-Reply-To: References: Message-ID: <31643260-2143-7d78-1f9d-4d143d4ee44a@nagafix.co.uk> On 30/09/16 00:40, David Alkema via shifter-users wrote: > I'm having issues with the winswitch applet not showing in the menu bar. Is > this the right place to come for help? Yes, so is IRC or the bug tracker where you created this ticket: https://winswitch.org/trac/ticket/292 Just wait a little while for someone to answer. Cheers Antoine > > Thanks, > David > _______________________________________________ > shifter-users mailing list > shifter-users at lists.devloop.org.uk > http://lists.devloop.org.uk/mailman/listinfo/shifter-users >