Re: X Forwarding via SSH

[Kent West <westk@acu.edu>]

Greg Norris wrote:
> On Sat, Apr 06, 2002 at 03:21:34PM -0600, Kent West wrote:
> > I've got a Sid box at home, and one in the office.
> >
> > At home, I'm on Cox Cable, going through a Netgear 
> > router/switch/firewall, then through a SurfBoard cable modem.
> >
> > At the office, I'm on a LAN connected via T1s to the world.
> >
> > I can do "ssh -X canaan.acu.edu" from home, and log onto this Solaris
> > box at work, and run X apps remotely, displaying them to my home X
> > display.
> >
> > I can do :ssh -X westek.acu.edu" from home, and log onto this Sid box
> > at work, and can *not* run X apps remotely; instead, I get the error
> > message:
> >   
> > ====
> > westek[westk]:/home/westk> gqview &
> > [1] 9885
> >
> > Gtk-WARNING **: cannot open display:
> > [1]+  Exit 1                  gqview
> > ====
> >
> > Can anyone tell me how to forward X apps from my ofice Sid box to my 
> > home Sid box?
> > Thanks!
> >
> > Kent
> >     
>
> Greg responded with:
>     
> Try running ssh in verbose mode (add "-v" to the command-line).  The
> output should help to pinpoint what's failing.
>       
      
Thanks for the response. The following was echoed, in case anyone can see
what the problem might be:
EnJaeLove[westk]:/home/westk> ssh -v -X westek.acu.edu      
OpenSSH_3.0.2p1 Debian 1:3.0.2p1-8.3, SSH protocols 1.5/2.0, OpenSSL 0x0090603f
debug1: Reading configuration data /etc/ssh/ssh_config
debug1: Seeding random number generator
debug1: Rhosts Authentication disabled, originating port will not be trusted.
debug1: restore_uid
debug1: ssh_connect: getuid 1001 geteuid 1001 anon 1
debug1: Connecting to westek.acu.edu [the IP address] port 22.
debug1: temporarily_use_uid: 1001/1001 (e=1001)
debug1: restore_uid
debug1: temporarily_use_uid: 1001/1001 (e=1001)
debug1: restore_uid
debug1: Connection established.
debug1: identity file /home/westk/.ssh/identity type -1
debug1: identity file /home/westk/.ssh/id_rsa type -1
debug1: identity file /home/westk/.ssh/id_dsa type -1
debug1: Remote protocol version 1.99, remote software version OpenSSH_3.0.2p1
Debian 1:3.0.2p1-8.3
debug1: match: OpenSSH_3.0.2p1 Debian 1:3.0.2p1-8.3 pat ^OpenSSH
Enabling compatibility mode for protocol 2.0
debug1: Local version string SSH-2.0-OpenSSH_3.0.2p1 Debian 1:3.0.2p1-8.3
debug1: SSH2_MSG_KEXINIT sent
debug1: SSH2_MSG_KEXINIT received
debug1: kex: server->client aes128-cbc hmac-md5 none
debug1: kex: client->server aes128-cbc hmac-md5 none
debug1: SSH2_MSG_KEX_DH_GEX_REQUEST sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP
debug1: dh_gen_key: priv key bits set: 138/256
debug1: bits set: 1582/3191
debug1: SSH2_MSG_KEX_DH_GEX_INIT sent
debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY
debug1: Host 'westek.acu.edu' is known and matches the RSA host key.
debug1: Found key in /home/westk/.ssh/known_hosts:7
debug1: bits set: 1596/3191
debug1: ssh_rsa_verify: signature correct
debug1: kex_derive_keys
debug1: newkeys: mode 1
debug1: SSH2_MSG_NEWKEYS sent
debug1: waiting for SSH2_MSG_NEWKEYS
debug1: newkeys: mode 0
debug1: SSH2_MSG_NEWKEYS received
debug1: done: ssh_kex2.
debug1: send SSH2_MSG_SERVICE_REQUEST
debug1: service_accept: ssh-userauth
debug1: got SSH2_MSG_SERVICE_ACCEPT
debug1: authentications that can continue: publickey,password,keyboard-interactive
debug1: next auth method to try is publickey
debug1: try privkey: /home/westk/.ssh/identity
debug1: try privkey: /home/westk/.ssh/id_rsa
debug1: try privkey: /home/westk/.ssh/id_dsa
debug1: next auth method to try is keyboard-interactive
debug1: authentications that can continue: publickey,password,keyboard-interactive
debug1: next auth method to try is password
westk@westek.acu.edu's password: 
debug1: packet_send2: adding 64 (len 58 padlen 6 extra_pad 64)
debug1: ssh-userauth2 successful: method password
debug1: fd 5 setting O_NONBLOCK
debug1: channel 0: new [client-session]
debug1: send channel open 0
debug1: Entering interactive session.
debug1: ssh_session2_setup: id 0
debug1: Requesting X11 forwarding with authentication spoofing.
debug1: channel request 0: shell
debug1: channel 0: open confirm rwindow 0 rmax 16384
Last login: Sat Apr  6 17:58:56 2002 from <the IP address>.cox.net
on pts/2
Linux westek 2.4.17 #4 Tue Feb 5 10:41:49 CST 2002 i686 unknown
      
Most of the programs included with the Debian GNU/Linux system are
freely redistributable; the exact distribution terms for each program
are described in the individual files in /usr/share/doc/*/copyright
      
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
No mail.
      
--------------
westek[westk]:/home/westk> gqview &
[1] 9974
      
--------------
westek[westk]:/home/westk> 
Gtk-WARNING **: cannot open display: 
      
[1]+  Exit 1                  gqview