Re: server xloads on my desktop


Got it working.
I figured the option '#X11Forwarding no' would be the same as 'X11Forwarding yes' but I guess not.
I changed that and it is now working however I also had to go back to ksh instead of bash as that was causing some problems as well.

"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007 3:17 pm >>>

There is a slim chance that it is the "ForwardX11Trusted yes" in sshd_config, but I might also try comparing the results of the following commands:ssh -v -v -X aixserver /usr/bin/X11/xload"ssh -v -v -X linuxserver /usr/bin/X11/xload"ssh -X aixserver /usr/bin/cat $HOME/.ssh/configssh -X linuxserver /usr/bin/cat $HOME/.ssh/configssh -X aixserver /usr/bin/env | sortssh -X aixserver /usr/bin/env | grep DISPLAYssh -X linuxserver /usr/bin/env | sortssh -X linuxserver /usr/bin/env | grep DISPLAYssh -X aixserver /usr/bin/truss /usr/bin/X11/xload"ssh -X linuxserver /usr/bin/strace /usr/bin/X11/xload" or "ssh -X linuxserver /usr/bin/ltrace /usr/bin/X11/xload"Some versions of ssh allow a -Y instead of -X to request "trusted X11 connection forwarding." Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation
Office Phone: (585) 771-4952

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of Mark Schlechte
Sent: Tuesday, April 24, 2007 4:57 PM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: server xloads on my desktop
My .profile used to have a script to try and set the DISPLAY variable so I removed that.
(I've recently changed from ksh to bash and had that reflected in my .bashrc file also).

My sshd_config files are pretty much generic. If I look for something similar to what you suggest I see.

Aix server sshd_config:
(Most everyting is commented out including)
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

# Set this to 'yes' to enable PAM authentication (via challenge-response)
# and session processing. Depending on your PAM configuration, this may
# bypass the setting of 'PasswordAuthentication' and 'PermitEmptyPasswords'
#UsePAM no

#AllowTcpForwarding yes
#GatewayPorts no
#X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression yes

RedHat server sshd_config file:
# Host *
# ForwardAgent no
# ForwardX11 no
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
# Port 22
# Protocol 2,1
# Cipher 3des
# Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
# EscapeChar ~
Host *
GSSAPIAuthentication yes
# If this option is set to yes then the remote X11 clients will have full access
# to the local X11 display. As virtually no X11 client supports the untrusted
# mode correctly we set this to yes.
ForwardX11Trusted yes
Aix Server > ssh -V
OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.6l 04 Nov 2003

Red Hat server > ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003


"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007 2:00:40 pm >>>
Is there something in your .profile or $ENV (usually .kshrc or .env) that might be overriding the DISPLAY environment variable?Is your sshdconfig file set to allow X11 port forwarding?Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of Mark Schlechte
Sent: Tuesday, April 24, 2007 12:37 PM
To: aix-l@xxxxxxxxxxxxx
Subject: server xloads on my desktop
Is anybody else sending Aix server xloads to their desktop for an overview of the servers?
I was doing this using open Suse 10.1 on my desktop and if I recall I found I had to do some tuning to make it all work (get rid of nolisten tcp option).
Some of that was since I was originally using rsh commands and exporting my display.
Then I started using ssh -X servername which seemed to work as well with less 'tuning' done on my desktop.
Unfortunately I didn't do a good job of documenting my changes before I ended up having to re-install my OS on my pc.

I went with Novell's SLED since we are a Novell customer and I thought it would be a good test as we may use it.

The real question is how come I can run 'ssh -X linuxserver /usr/bin/X11/xload' and have it pop up on my desktop.
While 'ssh -X aixserver /usr/bin/X11/xload' doesn't work. Executable exists, etc.

I don't think the desktop OS has anything to do with it but I did disbale my firewall for now.
Any suggestions?

Mark

DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.


DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.





<html><body><font face = "arial" size = "1">
DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.
</font><body></html>

Relevant Pages

  • Re: 400 remote sites connected via DSL
    ... distribution point server share. ... If the SMS server is getting hit by all the clients at once, ... 2000 roaming clients downloading from remote distribution points. ...
    (microsoft.public.sms.swdist)
  • Re: server xloads on my desktop
    ... server xloads on my desktop ... GSSAPIAuthentication yes ... for the addressee and may contain confidential, ... unauthorized review, distribution or other use ...
    (AIX-L)
  • Re: schannel.dll, secur32.dll, and DSCLIENT.EXE redistribution
    ... > include it in the distribution package. ... > when not present in a client attempting to access server. ... >> distributing these DLLs to them, ...
    (microsoft.public.platformsdk.security)
  • Re: SCCM Distribution Point Server share
    ... Actually there is one site server with all roles, but we want to place the distribution share Role on a seperate server. ... You said, that this szenario is not supported, so what kind of architecture works with storage who is not managed by Windows-OS like NetApp? ... Actually we don't want to use block based protocols like iSCSI which should work of course, but we need to access the packages and other files from different clients. ...
    (microsoft.public.sms.setup)
  • Re: server xloads on my desktop
    ... My .profile used to have a script to try and set the DISPLAY variable so I removed that. ... RedHat server sshd_config file: ... GSSAPIAuthentication yes ... unauthorized review, distribution or other use ...
    (AIX-L)