Re: ssh X11forwarding won't work, please help

From: Dances With Crows (danSPANceswitTRAPhcrows_at_usa.net)
Date: 08/02/04


Date: 2 Aug 2004 19:30:54 GMT

On Mon, 02 Aug 2004 19:04:34 GMT, Wayne Throop staggered into the Black
Sun and said:
>> Nils Gorges <noctamid@gmx.de>
>>> But anyways, you mean you are setting DISPLAY to machine1:0 and
>>> launching an X app on machine3, right? And "nothing happens"? The
>>> X app doesn't say something like "can't open display" "not
>>> authorized" or somesuch? Are there any error indications at all?
>> yes exactly, no error messages, nowhere.

Seems a little strange. But read on...

> Then it's probably not an access or networking problem. The bad news
> is, that's strange enough that I can't think of anything to suggest.
>> But now ssh -X sets the DISPLAY variable. There are now firewall
>> rules and the X Server at machine1 is listening for TCP connections.
>> But this isn't even necessary if you use ssh -X or am I wrong?
> Right, ssh -X will bypass both firewalls and even connect to X servers
> that are only listening for local processes with no tcp connections.
> It does this by the ssh server process operating as a local X process
> on the same machine as the X clients, and the ssh client process operating
> as a local X process on the same machine as the X server, and both
> the X server and the X client being unaware that any traffic is going
> to a remote location.

FWIW, I had similar problems on Gentoo machines running recent sshd and
X releases. Like so:
machine1:~$ ssh -X machine2
machine2:~$ xeyes &
(cannot open display localhost:10.0)

...however,
machine1:~$ ssh -Y machine2
machine2:~$ xeyes &
(works)

The -Y option to ssh allows "trusted X11 forwarding", which apparently
does something -X doesn't. I don't really have time to research
specifics right now, maybe later on tonight, but maybe this'll help you
out.

-- 
Matt G|There is no Darkness in Eternity/But only Light too dim for us to see
Brainbench MVP for Linux Admin /    mail: TRAP + SPAN don't belong
http://www.brainbench.com     /                Hire me! 
-----------------------------/ http://crow202.dyndns.org/~mhgraham/resume


Relevant Pages

  • Re: User/pass Request on same IIS
    ... autentication between Client and Server. ... Machine2 is in Domain2. ... There is no ISAPI Filters in this web sites. ... defined in the Sharepoint instalation web site with IIS ...
    (microsoft.public.inetserver.iis)
  • Re: My ISP blocks 25. How to test sendmail?
    ... don't know how to address this mail to machine2. ... > You don't need a POP3 server. ... > does it use an already existing SMTP server? ...
    (microsoft.public.inetserver.iis)
  • Re: ssh X11forwarding wont work, please help
    ... that's strange enough that I can't think of anything to suggest. ... >>It does this by the ssh server process operating as a local X process ... >>on the same machine as the X clients, and the ssh client process operating ...
    (comp.os.linux.x)
  • Bizarre one-way network disconnection
    ... I have a very strange issue with a samba server running Woody. ... eth0, won't respond to pings, no ssh, no samba. ...
    (Debian-User)
  • Re: add background jobs that dont terminate?!
    ... > I need to ssh to a machine, run a background job and ... > then quit the terminal without terminating the job. ... machine1:~$ ssh machine2 ... machine2:~$ nohup someprogram & ...
    (comp.os.linux.misc)