If we connect to a server and receive a "login failed" message and we haven't got a password, popup to ask the user.
Make it throttled and a configurable option (that can be toggled from the popup) to prevent being DoSed by fake local mDNS servers swarming us.
Maybe we shouldn't even try to login if there are no ssh keys and no password.. (alert user? or ask for password?)

No point in carrying 2 network libraries.
Rewrite SCP code using conch.

Also bundling paramiko does not always seem to work on win32/osx... so this more of priority

Packaging should be done with: ​py2app

Server seems to work OK on OSX (after installing all the required dependencies using macports) and it can authenticate users using python-PAM, but I have added support for Kerberos5 anyway using ​pykpass There is a new server option: "authentication_module" = [pam|pykpass].

We will also need to load the list of X applications from somewhere... and OSX does not follow the freedesktop spec, so we may just test for a few (xterm, ...) and create these "*.desktop" files in ~/shifter/server/menu/ on first start.

TigerVNC can be built on OSX, but I cannot find any ready-made images, see this: ​tigervnc-devel message More info on nasm/ld bug ​here

nxproxy can be built with macports' help (libpng, jpeg): ​nxproxy-apple

xpra: client and server both build fine (with ​this simple patch) But only the client is usable... (keymap issues for server)