[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: NEWBIE TIP #110 [was Re: suggestion[data in .sig file]]



On Thu, Mar 07, 2002 at 11:21:28AM -0600, Dimitri Maziuk wrote:
> * Crispin Wellington (crispin@aeonline.net) spake thusly:
> > On Thu, 2002-03-07 at 18:13, Hans Ekbrand wrote:
> ...
> > > I fail to understand why you came up with the example above. No one
> > > have suggested or commented any such thing.
> > 
> > I wasn't subscribed when the first post came in so Im exempt. But I
> > agree completely. Leave out the export DISPLAY.
> > 
> > Doing the above *works* but bypasses any X forwarding ssh sets up for
> > you and sends the X forwarding directly to the client without
> > encryption. In fact the default DISPLAY setting on a -X login is
> > connected to the server itself...

Crispin, it does *not* work, at least not in Woody. And, as Joseph
Dane pointed out, it will *not* bypass, the ssh tunnel.

> Crispin, Hans: I think you need to work on your reading comprehension.
> Which part of "ssh won't forward X connections if *local* DISPLAY is
> not set" escapes you? Try this at home:
> 
> client # export DISPLAY=
> client # ssh -X server
> server # netscape
> 
> If local $DISPLAY is not set, ssh assumes X is not running on local
> machine, so there is nowhere to forward X connections *to*. Is that
> so hard to figure out?

No, it's not.

But:

1. The tip did not work.
2. Even *if* it had work, it would not have been a
very good NEWBIE tip. IMHO a much better tip is

client~>ssh -X server
server~>netscape

*Not* messing with $DISPLAY is a *good* rule of thumb for a newbie.
There are situations where it is needed, though. I have self used it
once or twice.

> An experienced unix user would probably know to try 
> both, but a newbie will simply turn around and decide that Great 
> Debian Newbie Tips database is not worth crap.

Indeed.

-- 
Note that I use Debian version 3.0
Linux emac140 2.4.17 #1 sön feb 10 20:21:22 CET 2002 i686 unknown

Hans Ekbrand

Attachment: pgphyxKoPEIsE.pgp
Description: PGP signature


Reply to: