Re: How to transfer X11 auth across sudo invocation

On Feb 27, 7:23 pm, "david.karr" <davidmichaelk...@xxxxxxxxx> wrote:
On Feb 27, 4:02 pm, lahuman9 <lahum...@xxxxxxxxx> wrote:





On Feb 27, 4:59 pm, "david.karr" <davidmichaelk...@xxxxxxxxx> wrote:

On Feb 27, 1:38 pm, "Bruce" <n...@xxxxxxxx> wrote:

"david.karr" <davidmichaelk...@xxxxxxxxx> wrote in message

news:6f74dba1-a91c-4ad7-a5e2-58a0c24a9696@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I connect from my Windows box to a AIX 5.3 box using SecureCRT, which
allows the transfer of X11 packets to my local box.

When I log in as myself into the box, with my local Cygwin-provided X
server running, I can display windows perfectly fine.

However, if after logging in, I then "sudo" to an administrative
account and then try to run something that tries to display windows,
it says that it can't connect.

I tried doing "env | sort" from both my user account and the
administrative account, to compare the differences.  On the admin
shell, I set the following env vars from their value on my user
account:

DISPLAY, SSH_AUTH_SOCK, SSH_CLIENT, SSH_CLIENT, SSH_CONNECTION,
SSH_TTY

However, it still fails to connect.  I imagine that one of these
variables is "tied" to my user account somehow, and won't work if I
just copy the value over (probably a good idea :) ).

So, what can I do to facilitate this connection from the admin account
to my local box's X server?

export DISPLAY?

I exported all of those variables I indicated that I set, including
DISPLAY.- Hide quoted text -

- Show quoted text -

before you sudo:
"xauth list"
copy that, then sudo,
as new user, "xauth add <the output of the above xauth list>"
"export DISPLAY=" the original DISPLAY variable, which is also in the
output of the xauth list command

voila

I'm not certain exactly what you mean by this.  For context, we'll
call my X server box "laptop", and the box I'm trying to run the Xwin
app on as "unixbox".

I have my Cygwin X server running on "laptop".  I've logged into
"unixbox" from "laptop" (using SecureCRT), with the "forward X11
packets" flag set on.

When I log into "unixbox" and run "xauth list", I see output like the
following:

unixbox/unix:10  MIT-MAGIC-COOKIE-1  <longhexstring1>
unixbox/unix:11  MIT-MAGIC-COOKIE-1  <longhexstring2>
unixbox/unix:12  MIT-MAGIC-COOKIE-1  <longhexstring3>
unixbox/unix:13  MIT-MAGIC-COOKIE-1  <longhexstring4>
unixbox/unix:14  MIT-MAGIC-COOKIE-1  <longhexstring5>
unixbox/unix:15  MIT-MAGIC-COOKIE-1  <longhexstring6>

I'm not exactly sure how to pass this to "xauth add" after the sudo,
and the DISPLAY variable value is not in this output, although that's
the easiest variable to copy, as it was only set to "localhost:10.0"
before the sudo.- Hide quoted text -

- Show quoted text -

ok example

xauth list
sudo -u whomever
xauth add "unixbox/unix:10 MIT-MAGIC-COOKIE-1 <longhexstring1>"
DISPLAY=unixbox/unix:10; export DISPLAY
run your x app
.

Relevant Pages