Re: More SSH Fun (X11 forwarding)
Yes, I found that. ssh is setting DISPLAY to localhost:X, but only adding an xauth entry for `uname -n`/unix:X
hofmann:~$ ssh compileit
compileit:~$ xauth list
compileit/unix:11 MIT-MAGIC-COOKIE-1 e212a6688726a059503e0c9535289c17
compileit:~$ echo $DISPLAY
localhost:11.0
compileit:~$ xload
X11 connection rejected because of wrong authentication.
X connection to localhost:11.0 broken (explicit kill or server shutdown).
compileit:~$ xauth add localhost/unix:11 MIT-MAGIC-COOKIE-1 \
e212a6688726a059503e0c9535289c17
compileit:~$ xload
X11 connection rejected because of wrong authentication.
X connection to localhost:11.0 broken (explicit kill or server shutdown).
compileit:~$ xauth add localhost:11 MIT-MAGIC-COOKIE-1 \
e212a6688726a059503e0c9535289c17
compileit:~$ xload
compileit:~$
I thought it was just because the system has a non-standard localhost config where gethostbyname(localhost) == gethostbyname(`uname -n`) != 127.0.0.1.
Anyway, this isn't the correct forum for this discussion - I've logged a bug in the BTS - number 152250.
Cheers,
Sam.
On Mon, 1 Jul 2002 13:24:34 -0700
Anne Carasik <gator@cacr.caltech.edu> wrote:
> Hi all,
>
> I'm having really weird problem with X11 forwarding and two
> Debian boxes.
>
> I can login with OpenSSH and scp and everything else no
> problem.
>
> However, when I try to launch an xterm, I get either:
> can't open DISPLAY
>
> Or the display is set to server:10.0.
>
> I don't have this problem SSH'ing into any RH boxes.
>
> The version I'm running on both the client and server is:
> OpenSSH_3.4p1 Debian 1:3.4p1-2, SSH protocols 1.5/2.0, OpenSSL 0x0090604f
>
> Let me know if you have any ideas. Running the client and server in both
> verbose and debugging modes provides me with nothing useful :(
>
> -Anne
> --
> .-"".__."``". Anne Carasik, System Administrator
> .-.--. _...' (/) (/) ``' gator at cacr dot caltech dot edu
> (O/ O) \-' ` -="""=. ', Center for Advanced Computing Research
> ~`~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>
>
--
Sam Vilain, sv@easyspace.com Easyspace: an accredited ICANN
GPG: http://sam.vilain.net/sam.asc registrar & web hosting company
7D74 2A09 B2D3 C30F F78E Have your domain run by techies
278A A425 30A9 05B5 2F13 with a clue. www.easyspace.com
"Acid is not for every brain - only the healthy, happy, wholesome,
handsome, hopeful, humorous, high-velocity should seek these
experiences. This elitism is totally self-determined.
"Unless you are self-confident, self-directed, self-selected, please
abstain."
- Dr. Timothy Leary, Pd.D.
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: