[gentoo-amd64] x11 not working on ssh

[gentoo-amd64] x11 not working on ssh

[Gavin Seddon]

Hi,
On Debian my ssh x11 interface would start.  Now, on the remote box I
get
'X11 connection rejected because of wrong authentication.'
I have enabled x11 forwarding on both machines and used ssh -X to log
on.  Can anyone help?

-- 
Dr Gavin Seddon
School of Pharmacy and Pharmaceutical Sciences 
University of Manchester
Oxford Road, Manchester 
M13 9PL, U.K.

-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Hemmann, Volker Armin]

On Friday 24 February 2006 16:47, Gavin Seddon wrote:
> Hi,
> On Debian my ssh x11 interface would start.  Now, on the remote box I
> get
> 'X11 connection rejected because of wrong authentication.'
> I have enabled x11 forwarding on both machines and used ssh -X to log
> on.  Can anyone help?

I don't know ssh, but X is started with -nolisten tcp on gentoo, maybe that is 
the showstopper?
-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Mike Doty]

Hemmann, Volker Armin wrote:
> On Friday 24 February 2006 16:47, Gavin Seddon wrote:
> 
>>Hi,
>>On Debian my ssh x11 interface would start.  Now, on the remote box I
>>get
>>'X11 connection rejected because of wrong authentication.'
>>I have enabled x11 forwarding on both machines and used ssh -X to log
>>on.  Can anyone help?
> 
> 
> I don't know ssh, but X is started with -nolisten tcp on gentoo, maybe that is 
> the showstopper?
X11 forwarding is turned off by default, check out 'man sshd_config'
-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Kevin F. Quinn (Gentoo)]

[-- Attachment #1: Type: text/plain, Size: 386 bytes --]

On Fri, 24 Feb 2006 20:44:19 +0100
"Hemmann, Volker Armin" <volker.armin.hemmann@tu-clausthal.de> wrote:

> I don't know ssh, but X is started with -nolisten tcp on gentoo,
> maybe that is the showstopper?

If you're forwarding X clients through ssh, it all works fine with
'-nolisten tcp', since as far as the server is concerned the clients
are local.

-- 
Kevin F. Quinn

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 191 bytes --]

Re: [gentoo-amd64] x11 not working on ssh

[Hemmann, Volker Armin]

On Saturday 25 February 2006 11:31, Kevin F. Quinn (Gentoo) wrote:
> On Fri, 24 Feb 2006 20:44:19 +0100
>
> "Hemmann, Volker Armin" <volker.armin.hemmann@tu-clausthal.de> wrote:
> > I don't know ssh, but X is started with -nolisten tcp on gentoo,
> > maybe that is the showstopper?
>
> If you're forwarding X clients through ssh, it all works fine with
> '-nolisten tcp', since as far as the server is concerned the clients
> are local.

ah, ok, nice to know.

I never was interessted in X forwarding. So I learnt something today ;)
-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Gavin Seddon]

Hi,
I can not find this but, I did find 'tcp keep alive' which I allowed.
Now I get
'
X11 connection rejected because of wrong authentication.
X connection to localhost:10.0 broken (explicit kill or server
shutdown).'

Has anyone any ideas?



On Fri, 2006-02-24 at 20:44 +0100, Hemmann, Volker Armin wrote:
> On Friday 24 February 2006 16:47, Gavin Seddon wrote:
> > Hi,
> > On Debian my ssh x11 interface would start.  Now, on the remote box I
> > get
> > 'X11 connection rejected because of wrong authentication.'
> > I have enabled x11 forwarding on both machines and used ssh -X to log
> > on.  Can anyone help?
> 
> I don't know ssh, but X is started with -nolisten tcp on gentoo, maybe that is 
> the showstopper?
-- 
Dr Gavin Seddon
School of Pharmacy and Pharmaceutical Sciences 
University of Manchester
Oxford Road, Manchester 
M13 9PL, U.K.

-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Joerg Gollnick]

> Hi,
> I can not find this but, I did find 'tcp keep alive' which I allowed.
> Now I get
> '
> X11 connection rejected because of wrong authentication.
> X connection to localhost:10.0 broken (explicit kill or server
> shutdown).'
> 
> Has anyone any ideas?
> 
> 
> 
> On Fri, 2006-02-24 at 20:44 +0100, Hemmann, Volker Armin wrote:
> > On Friday 24 February 2006 16:47, Gavin Seddon wrote:
> > > Hi,
> > > On Debian my ssh x11 interface would start.  Now, on the remote box I
> > > get
> > > 'X11 connection rejected because of wrong authentication.'
> > > I have enabled x11 forwarding on both machines and used ssh -X to log
> > > on.  Can anyone help?
> > 
> > I don't know ssh, but X is started with -nolisten tcp on gentoo, maybe 
that is 
> > the showstopper?
> -- 
Hi Gavin,
ssh sets up an file .Xauthority to exchange some MIT-MAGIC-COOKIE. Is that 
file in the home directory on the remote server. To find out what goes wrong 
I prefer to start the sshd with "-D -d" options at the commandline and 
connect from remote server with a verbose "ssh -X -v <your host>". In most 
cases at the end of the debug output gives you an idea what goes wrong.
Best regards Joerg

 
-- 
gentoo-amd64@gentoo.org mailing list

[gentoo-amd64] Re: x11 not working on ssh

[Duncan]

Hemmann, Volker Armin posted
<200602251330.49802.volker.armin.hemmann@tu-clausthal.de>, excerpted
below,  on Sat, 25 Feb 2006 13:30:49 +0100:

> On Saturday 25 February 2006 11:31, Kevin F. Quinn (Gentoo) wrote:
>> On Fri, 24 Feb 2006 20:44:19 +0100
>>
>> If you're forwarding X clients through ssh, it all works fine with
>> '-nolisten tcp', since as far as the server is concerned the clients
>> are local.
> 
> ah, ok, nice to know.
> 
> I never was interessted in X forwarding. So I learnt something today ;)

Same here.  =8^)  Makes perfect sense, but I never stopped to think
about it beyond the obvious, since I've never had need for it.  Now I
know just in case I ever do.  Thanks!  =8^)

-- 
Duncan - List replies preferred.   No HTML msgs.
"Every nonfree program has a lord, a master --
and if you use the program, he is your master."  Richard Stallman in
http://www.linuxdevcenter.com/pub/a/linux/2004/12/22/rms_interview.html


-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Gavin Seddon]

Hi,
I have tried this debug first before I pursue xauth.  Here is the
output, is anyone wiser?
'debug1: client_input_channel_open: ctype x11 rchan 4 win 65536 max
16384
debug1: client_request_x11: request from 127.0.0.1 32842
debug1: channel 2: new [x11]
debug1: confirm x11
debug1: channel 2: FORCE input drain
debug1: channel 2: free: x11, nchannels 3
debug1: channel 1: FORCE input drain
debug1: channel 1: free: x11, nchannels 2
debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384
debug1: client_request_x11: request from 127.0.0.1 32843
debug1: channel 1: new [x11]
debug1: confirm x11
X Error of failed request:  BadAtom (invalid Atom parameter)
  Major opcode of failed request:  20 (X_GetProperty)
debug1: channel 1: FORCE input drain
  Atom id in failed request:  0x25
  Serial number of failed request:  310
  Current serial number in output stream:  310
2 /home/mbpssgms>>debug1: channel 1: free: x11, nchannels 2'
Gavin.







> Hi Gavin,
> ssh sets up an file .Xauthority to exchange some MIT-MAGIC-COOKIE. Is that 
> file in the home directory on the remote server. To find out what goes wrong 
> I prefer to start the sshd with "-D -d" options at the commandline and 
> connect from remote server with a verbose "ssh -X -v <your host>". In most 
> cases at the end of the debug output gives you an idea what goes wrong.
> Best regards Joerg
> 
>  
-- 
Dr Gavin Seddon
School of Pharmacy and Pharmaceutical Sciences 
University of Manchester
Oxford Road, Manchester 
M13 9PL, U.K.

-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Gavin Seddon]

Hi, 
after thinking about this and rereading the ssh man.  I tried ssh -Y.
This worked for one app.  However, when I tried it for what I need I
received,

'/usr/X11R6/bin/xauth:  timeout in locking authority
file /home/tripos/.Xauthority'
I looked in the home there is no .Xauthority.  Can anyone advise?




-- 
Dr Gavin Seddon
School of Pharmacy and Pharmaceutical Sciences 
University of Manchester
Oxford Road, Manchester 
M13 9PL, U.K.

-- 
gentoo-amd64@gentoo.org mailing list

Re: [gentoo-amd64] x11 not working on ssh

[Brett Johnson]

On Mon, Feb 27, 2006 at 11:28:44AM +0000, Gavin Seddon wrote:
> Hi, 
> after thinking about this and rereading the ssh man.  I tried ssh -Y.
> This worked for one app.  However, when I tried it for what I need I
> received,
> 
> '/usr/X11R6/bin/xauth:  timeout in locking authority
> file /home/tripos/.Xauthority'
> I looked in the home there is no .Xauthority.  Can anyone advise?
> 
It appears you are using two different accounts in the past two posts,
does this account have rights to create .Xauthority? Is home NFS mounted?
-- 
gentoo-amd64@gentoo.org mailing list