Re: server xloads on my desktop

Mark,

Thanks for the resolution.

I thought '#X11Forwarding no' was the same as 'X11Forwarding yes' too.

I use "ssh -X linuxserver" all the time at home, but haven't setup "ssh
-X aixserver" at work, since 99% of what I do can be done from PuTTY or
an HMC using WebSM. This will be useful when I finally need to get "ssh
-X" working at work.

Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation


________________________________

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Mark Schlechte
Sent: Thursday, April 26, 2007 10:42 AM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: server xloads on my desktop



Got it working.

I figured the option '#X11Forwarding no' would be the same as
'X11Forwarding yes' but I guess not.

I changed that and it is now working however I also had to go back to
ksh instead of bash as that was causing some problems as well.

"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007 3:17
pm >>>

There is a slim chance that it is the "ForwardX11Trusted yes" in
sshd_config, but I might also try comparing the results of the following
commands:

ssh -v -v -X aixserver /usr/bin/X11/xload

"ssh -v -v -X linuxserver /usr/bin/X11/xload"

ssh -X aixserver /usr/bin/cat $HOME/.ssh/config

ssh -X linuxserver /usr/bin/cat $HOME/.ssh/config

ssh -X aixserver /usr/bin/env | sort

ssh -X aixserver /usr/bin/env | grep DISPLAY

ssh -X linuxserver /usr/bin/env | sort

ssh -X linuxserver /usr/bin/env | grep DISPLAY

ssh -X aixserver /usr/bin/truss /usr/bin/X11/xload

"ssh -X linuxserver /usr/bin/strace /usr/bin/X11/xload" or "ssh -X
linuxserver /usr/bin/ltrace /usr/bin/X11/xload"

Some versions of ssh allow a -Y instead of -X to request "trusted X11
connection forwarding."



Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation
Office Phone: (585) 771-4952

________________________________

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Mark Schlechte
Sent: Tuesday, April 24, 2007 4:57 PM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: server xloads on my desktop



My .profile used to have a script to try and set the DISPLAY variable so
I removed that.

(I've recently changed from ksh to bash and had that reflected in my
.bashrc file also).



My sshd_config files are pretty much generic. If I look for something
similar to what you suggest I see.



Aix server sshd_config:

(Most everyting is commented out including)

# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes



# Set this to 'yes' to enable PAM authentication (via
challenge-response)
# and session processing. Depending on your PAM configuration, this may
# bypass the setting of 'PasswordAuthentication' and
'PermitEmptyPasswords'
#UsePAM no



#AllowTcpForwarding yes
#GatewayPorts no
#X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression yes



RedHat server sshd_config file:

# Host *
# ForwardAgent no
# ForwardX11 no
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
# Port 22
# Protocol 2,1
# Cipher 3des
# Ciphers
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-c
bc
# EscapeChar ~
Host *
GSSAPIAuthentication yes
# If this option is set to yes then the remote X11 clients will have
full access
# to the local X11 display. As virtually no X11 client supports the
untrusted
# mode correctly we set this to yes.
ForwardX11Trusted yes

Aix Server > ssh -V
OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.6l 04 Nov 2003



Red Hat server > ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003




"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007
2:00:40 pm >>>

Is there something in your .profile or $ENV (usually .kshrc or .env)
that might be overriding the DISPLAY environment variable?

Is your sshdconfig file set to allow X11 port forwarding?

Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation

________________________________

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Mark Schlechte
Sent: Tuesday, April 24, 2007 12:37 PM
To: aix-l@xxxxxxxxxxxxx
Subject: server xloads on my desktop



Is anybody else sending Aix server xloads to their desktop for an
overview of the servers?

I was doing this using open Suse 10.1 on my desktop and if I recall I
found I had to do some tuning to make it all work (get rid of nolisten
tcp option).

Some of that was since I was originally using rsh commands and exporting
my display.

Then I started using ssh -X servername which seemed to work as well with
less 'tuning' done on my desktop.

Unfortunately I didn't do a good job of documenting my changes before I
ended up having to re-install my OS on my pc.



I went with Novell's SLED since we are a Novell customer and I thought
it would be a good test as we may use it.



The real question is how come I can run 'ssh -X linuxserver
/usr/bin/X11/xload' and have it pop up on my desktop.

While 'ssh -X aixserver /usr/bin/X11/xload' doesn't work. Executable
exists, etc.



I don't think the desktop OS has anything to do with it but I did
disbale my firewall for now.

Any suggestions?



Mark


DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.




DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.




DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.


Relevant Pages

  • Re: Partial SNAFUs - X11Forwarding etc.
    ... to the base server machine via SSH, or it it also supposed to protect ... back "up the line" to the client machine? ... the ssh server host is compromised or otherwise untrustworthy, ... refrain from running the program via ssh X11 forwarding - there's no ...
    (comp.security.ssh)
  • Re: [SLE] export DISPLAY and xhost +
    ... >>impression that remote X using DISPLAY travels over ssh just because you ... > X11 and TCP forwarding ... the connection to the X11 display is auto­ ... and the connection to the real X server will be made from the ...
    (SuSE)
  • Re: server xloads on my desktop
    ... server xloads on my desktop ... # If this option is set to yes then the remote X11 clients will have ... Red Hat server> ssh -V ... Is your sshdconfig file set to allow X11 port forwarding? ...
    (AIX-L)
  • Re: Help in understanding XDMCP required
    ... with a second ssh hop onto my workstation from ... server on the workstation and then ssh ... to your firewall (with X forwarding) and run VNCviewer there to ...
    (Debian-User)
  • RE: Email Rules Forwarding and Fax Forwarding Not Working
    ... In Exchange 2003, "Allow automatic forward" is disabled by default. ... On the SBS server, ... Microsoft CSS Online Newsgroup Support ... Email Rules Forwarding and Fax Forwarding Not Working ...
    (microsoft.public.windows.server.sbs)