Re: XForwarding problem



Denny White wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1


On Thu, Feb 28, 2008 at 02:46:41AM -0700, Predrag Punosevac sez:
Denny White wrote:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

For the last couple of days I've tried everything I can think of to
make XForwarding work with ssh. As per the FAQ, I have set it like so:


In sshd_config

X11Forwarding yes


In ssh_config

ForwardAgent yes
ForwardX11 yes

I can use it passably well in one direction from a box across the
room to the one I do most of my work on. But, when I try it from
this box to the one across the room, I get the xauth error message
along with all typed characters doubled on the screen. I went ahead
anyway and typed 'display somefile.jpg' just to see what I'd get &
got this:

Xlib: connection to "localhost:10.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key
display: unable to open X server `localhost:10.0'.

I've read the man page on xauth(1) and experimented with its
commands. I've even wiped out the .Xauthority file on both boxes
and restarted X, to no avail. Possibly I should mention too, that
I boot on both boxes to a xdm login. I don't know if that would
have any bearing on the problem or not. Thanks for any help I
can get on this.
What happens when you try to do the following?


Try to do remote login with as follows
ssh -Y username@xxxxxxxxxxxxxx

I get this:

Warning: No xauth data; using fake authentication data for X11
forwarding.

And, everything I type at the prompt is doubled.
you should be now in the shell on the remote host

try to start x client like xdvi or xfig or something like emacs by typing xdvi

If xdvi pops up that means that the client is running on the remote host but it is displayer on the local X server

Okay, if after getting in I try to open something like xzgv, I get:

Xlib: connection to "localhost:10.0" refused by server
Ok you do have a permission problem

Read carefully man pages for sshd_config file . You need to uncomment few lines for X tunneling.
You can also look at the "Secure Architectures with OpenBSD" section about OpenSSH.

I do not think that the problem is with X server though.
Best,
Predrag



Xlib: Invalid MIT-MAGIC-COOKIE-1 key

Gtk-WARNING **: cannot open display: localhost:10.0
Like I said earlier, I read the man page too on xauth & tried
sending

xauth extract - $DISPLAY | rsh otherhost xauth merge -

but it doesn't appear to help. I still get the error messages
and double typed characters.


_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Apache Software Foundation Server compromised, resecured. (fwd)
    ... this was one "result" of the comromised ssh binary at sourceforge. ... a public server of the Apache Software Foundation ... > (ASF) was illegally accessed by unknown crackers. ... > exhaustive audit of all Apache source code and binary distributions ...
    (FreeBSD-Security)
  • Re: FreeBSD Crash without Errors, Warnings, or Panics
    ... I suppose I could run on stable until the driver is fixed in a release branch, but I need this box up and online, and I've always read that the stable branch is not the place for production servers. ... I'm running 6.0-RELEASE-p5 on a Toshiba built server: dual Xeon Intel motherboard with a LSILogic MegaRAID controller. ... Also, some network ports still respond, like a telnet to port 22 to test SSH will yield an SSH banner, but trying to connect with SSH just hangs. ... The box runs a web-based app and connects to a local Postgres DB which seemed to be unable to start new connections being requested by the PHP scripts. ...
    (freebsd-hackers)
  • Re: restrict ssh access
    ... > We have one ssh server which receives about 6000 failed attempts to ... > unsuccessful login attempts per client IP address? ... the remote server is also running OpenSSH. ...
    (comp.security.ssh)
  • Re: SSH as root
    ... Subject: SSH as root ... but it doesn't require having a key on the server that could be ... If they compromise a server, and the passphrase, etc. is there, they only ... private key to anyone. ...
    (SSH)
  • Re: Explanation of SSH
    ... I am still unclear on how SSH works exactly. ... Client issues SSH command and names server ... "Shopper" says "server sends back its public host and server keys ... Surely there is only one public key it sends ...
    (comp.security.ssh)