Re: S10 sshd X forwarding problem

On 2008-07-16 12:16:31 +0100, Frank Fegert <fra.nospam.nk@xxxxxx> said:

On 2008-07-16, deliziaalcor@xxxxxxxxx <deliziaalcor@xxxxxxxxx> wrote:
On May 26, 2:34 pm, Oscar del Rio <del...@xxxxxxxxxxxxxxx> wrote:
Stuart Anderson wrote:
sshd[1433]: [ID 800047 auth.error] error: Failed to allocate internet-domain
X11 display socket.

bug 6704823

http://bugs.opensolaris.org/view_bug.do?bug_id=6704823

Description:
Looks like the fix for CR 6684003 breaks sshd's ability to bind to a local
socket for X forwarding. bind() returns EADDRNOTAVAIL for every bind call to ::1
for ports 6010->6999, but never tries IPv4 localhost addresses.

Workaround:
Add lo0 for IPv6:
# ifconfig lo0 inet6 plumb up
please try -4 option for ssh. I think that should be enough, without the need of
root privileges to create a loopback with IPv6 address.

Well I tried both and:

if I do ssh -4vAX remotehost
I do not get the display
if on the remote host I touch hostname6.lo0 I get the remote display.
I wonder why the -4 works in some cases and not others?

If you have a support contract open a case with Sun, there is a
IDR available which solves the issue.

As the bug was introduced by patch 126133-03, consider just backing it out. Obviously be aware that this patch fixes a security vulnerability (CVE-2008-1483). 126133-04 also has the bug.

Cheers,

Chris

.

Relevant Pages

  • Re: S10 sshd X forwarding problem
    ... X11 display socket. ... Looks like the fix for CR 6684003 breaks sshd's ability to bind to a local ... if on the remote host I touch hostname6.lo0 I get the remote display. ...
    (comp.unix.solaris)
  • Re: S10 sshd X forwarding problem
    ... X11 display socket. ... Looks like the fix for CR 6684003 breaks sshd's ability to bind to a local ... if on the remote host I touch hostname6.lo0 I get the remote display. ...
    (comp.unix.solaris)
  • RE: Inserting subtotal rows into a datatable
    ... and then bind it onto a webform datagrid. ... the means how to bind the datatable to the grid may ... also change the display order since Only the raw "Rows" collection of the ... verify whether the actual order in the Rows collection is correct. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Listbox: "Could not bind to the new display member"
    ... I tried to create and fill a listbox specifying DataSource, ... I get "Could not bind to the new display member. ... Where real USStates values are? ...
    (comp.lang.pascal.delphi.misc)
  • Re: S10 sshd X forwarding problem
    ... X11 display socket. ... Looks like the fix for CR 6684003 breaks sshd's ability to bind to a local socket for X forwarding. ... I think that should be enough, without the need of root privileges to create a loopback with IPv6 address. ...
    (comp.unix.solaris)