Hi,

Passwords and stuff like that should ALWAYS be discarded immediately
after use.

In other words... as soon as your authenticated (or at least tried to
authenticate), get rid of it!





On 02/05/2015 12:40 PM, Sergey Savko wrote:
> Package: x2goclient
> Version: 4.0.3.2
> Severity: grave
> 
> x2goclient start in broker mode with «--broker-autologoff» parameter.
> At the end of the session the user get into the authentication window, we can 
> press the "OK" button and connect without a password under the user who last 
> connected to the system.
> Video: http://youtu.be/dXu_clQfCtc
> 
> Add lines
>     config.brokerPass.clear();
>     config.brokerUser.clear();
> in the function "void ONMainWindow :: slotGetBrokerAuth ()" does not help.
> 
> 


_______________________________________________
x2go-dev mailing list
[email protected]
http://lists.x2go.org/listinfo/x2go-dev

Reply via email to