Re: server xloads on my desktop

In the sshd_config file, the convention is that all defaults are listed as
comments. To set something other than the default, copy the commented line,
uncomment it, and change it. I guess this is so that you don't need to read
a manual to find out what the default settings are.

===============================
Dave Annis, Unix System Administrator
Schneider National, Inc. (920) 592-8398



Mark Schlechte
<mschlechte@REGIN
A.CA> To
Sent by: IBM AIX aix-l@xxxxxxxxxxxxx
Discussion List cc
<aix-l@Princeton.
EDU> Subject
Re: server xloads on my desktop

04/26/2007 09:42
AM


Please respond to
IBM AIX
Discussion List
<aix-l@Princeton.
EDU>






Got it working.
I figured the option '#X11Forwarding no' would be the same as
'X11Forwarding yes' but I guess not.
I changed that and it is now working however I also had to go back to ksh
instead of bash as that was causing some problems as well.

"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007 3:17 pm



There is a slim chance that it is the "ForwardX11Trusted yes" in
sshd_config, but I might also try comparing the results of the following
commands:


ssh -v -v -X aixserver /usr/bin/X11/xload


"ssh -v -v -X linuxserver /usr/bin/X11/xload"


ssh -X aixserver /usr/bin/cat $HOME/.ssh/config


ssh -X linuxserver /usr/bin/cat $HOME/.ssh/config


ssh -X aixserver /usr/bin/env | sort


ssh -X aixserver /usr/bin/env | grep DISPLAY


ssh -X linuxserver /usr/bin/env | sort


ssh -X linuxserver /usr/bin/env | grep DISPLAY


ssh -X aixserver /usr/bin/truss /usr/bin/X11/xload


"ssh -X linuxserver /usr/bin/strace /usr/bin/X11/xload" or "ssh -X
linuxserver /usr/bin/ltrace /usr/bin/X11/xload"


Some versions of ssh allow a -Y instead of -X to request "trusted X11
connection forwarding."





Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation
Office Phone: (585) 771-4952

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Mark Schlechte
Sent: Tuesday, April 24, 2007 4:57 PM
To: aix-l@xxxxxxxxxxxxx
Subject: Re: server xloads on my desktop



My .profile used to have a script to try and set the DISPLAY variable so I
removed that.
(I've recently changed from ksh to bash and had that reflected in my
.bashrc file also).

My sshd_config files are pretty much generic. If I look for something
similar to what you suggest I see.

Aix server sshd_config:
(Most everyting is commented out including)
# GSSAPI options
#GSSAPIAuthentication no
#GSSAPICleanupCredentials yes

# Set this to 'yes' to enable PAM authentication (via challenge-response)
# and session processing. Depending on your PAM configuration, this may
# bypass the setting of 'PasswordAuthentication' and 'PermitEmptyPasswords'
#UsePAM no

#AllowTcpForwarding yes
#GatewayPorts no
#X11Forwarding no
#X11DisplayOffset 10
#X11UseLocalhost yes
#PrintMotd yes
#PrintLastLog yes
#TCPKeepAlive yes
#UseLogin no
#UsePrivilegeSeparation yes
#PermitUserEnvironment no
#Compression yes

RedHat server sshd_config file:
# Host *
# ForwardAgent no
# ForwardX11 no
# RhostsRSAAuthentication no
# RSAAuthentication yes
# PasswordAuthentication yes
# HostbasedAuthentication no
# BatchMode no
# CheckHostIP yes
# AddressFamily any
# ConnectTimeout 0
# StrictHostKeyChecking ask
# IdentityFile ~/.ssh/identity
# IdentityFile ~/.ssh/id_rsa
# IdentityFile ~/.ssh/id_dsa
# Port 22
# Protocol 2,1
# Cipher 3des
# Ciphers
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
# EscapeChar ~
Host *
GSSAPIAuthentication yes
# If this option is set to yes then the remote X11 clients will have full
access
# to the local X11 display. As virtually no X11 client supports the
untrusted
# mode correctly we set this to yes.
ForwardX11Trusted yes
Aix Server > ssh -V
OpenSSH_3.8p1, SSH protocols 1.5/2.0, OpenSSL 0.9.6l 04 Nov 2003

Red Hat server > ssh -V
OpenSSH_3.9p1, OpenSSL 0.9.7a Feb 19 2003


"Davignon, Edward" <Edward.Davignon@xxxxxxxxxxxxxx> 24/Apr/2007 2:00:40
pm >>>


Is there something in your .profile or $ENV (usually .kshrc or .env) that
might be overriding the DISPLAY environment variable?


Is your sshdconfig file set to allow X11 port forwarding?


Edward.Davignon@xxxxxxxxxxxxxx
Lead Analyst - Distributed Systems
Utility Shared Services - IT
Energy East Corporation

From: IBM AIX Discussion List [mailto:aix-l@xxxxxxxxxxxxx] On Behalf Of
Mark Schlechte
Sent: Tuesday, April 24, 2007 12:37 PM
To: aix-l@xxxxxxxxxxxxx
Subject: server xloads on my desktop



Is anybody else sending Aix server xloads to their desktop for an overview
of the servers?
I was doing this using open Suse 10.1 on my desktop and if I recall I found
I had to do some tuning to make it all work (get rid of nolisten tcp
option).
Some of that was since I was originally using rsh commands and exporting my
display.
Then I started using ssh -X servername which seemed to work as well with
less 'tuning' done on my desktop.
Unfortunately I didn't do a good job of documenting my changes before I
ended up having to re-install my OS on my pc.

I went with Novell's SLED since we are a Novell customer and I thought it
would be a good test as we may use it.

The real question is how come I can run 'ssh -X linuxserver
/usr/bin/X11/xload' and have it pop up on my desktop.
While 'ssh -X aixserver /usr/bin/X11/xload' doesn't work. Executable
exists, etc.

I don't think the desktop OS has anything to do with it but I did disbale
my firewall for now.
Any suggestions?

Mark


DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.






DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.






DISCLAIMER: The information transmitted is intended only
for the addressee and may contain confidential,
proprietary and/or privileged material. Any
unauthorized review, distribution or other use
of or the taking of any action in reliance upon
this information is prohibited. If you received
this in error, please contact the sender and
delete or destroy this message and any copies.



Relevant Pages

  • Re: Partial SNAFUs - X11Forwarding etc.
    ... to the base server machine via SSH, or it it also supposed to protect ... back "up the line" to the client machine? ... the ssh server host is compromised or otherwise untrustworthy, ... refrain from running the program via ssh X11 forwarding - there's no ...
    (comp.security.ssh)
  • Re: [SLE] export DISPLAY and xhost +
    ... >>impression that remote X using DISPLAY travels over ssh just because you ... > X11 and TCP forwarding ... the connection to the X11 display is auto­ ... and the connection to the real X server will be made from the ...
    (SuSE)
  • Re: server xloads on my desktop
    ... server xloads on my desktop ... # If this option is set to yes then the remote X11 clients will have ... Red Hat server> ssh -V ... Is your sshdconfig file set to allow X11 port forwarding? ...
    (AIX-L)
  • Re: Help in understanding XDMCP required
    ... with a second ssh hop onto my workstation from ... server on the workstation and then ssh ... to your firewall (with X forwarding) and run VNCviewer there to ...
    (Debian-User)
  • Re: server xloads on my desktop
    ... This will be useful when I finally need to get "ssh ... Lead Analyst - Distributed Systems ... server xloads on my desktop ... Is your sshdconfig file set to allow X11 port forwarding? ...
    (AIX-L)