From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LzuKd-0007wO-E7 for garchives@archives.gentoo.org; Fri, 01 May 2009 15:07:19 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 74D65E03AD; Fri, 1 May 2009 15:07:13 +0000 (UTC) Received: from mail-gx0-f176.google.com (mail-gx0-f176.google.com [209.85.217.176]) by pigeon.gentoo.org (Postfix) with ESMTP id 5A89AE03AD for ; Fri, 1 May 2009 15:07:13 +0000 (UTC) Received: by gxk24 with SMTP id 24so4760057gxk.10 for ; Fri, 01 May 2009 08:07:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=3/PvCX3Qx4Cig36LorKS/OWJNVhcytno1U/i3iFgDfQ=; b=u+j3DpvM3fjovLHHqIDclu0lTdr2H4sVFLZ18aPt3OEZ4qoUNt9+7W56GQNMHZ7d2O LHQzVWMO/MAp1oI8AqFLUp7/ditCZgdmw0OtTMab/mQmb7uorlKZFfCYxc/rFHzD9SFW PNaJyJ6oZxncFqsg6X7kcDgceaAof62A48NwU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=nd2fgIiwHgiLbNIuX3wuz8Le5FUZ2j1ydqTstyOaPgmggnMJPpofP0XI1rQUhHUyVB qRm8r9lzF+aL4ulDgufA1bTGUMqU5yJ+f0o5+vtAEJch5L9Ndr2YXVImX8pk2d1aMFKX VtTwi5Ug8Cw2/p/Ak4IH2yWAW3t0ipB5lvtrM= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.90.92.16 with SMTP id p16mr770413agb.61.1241190432994; Fri, 01 May 2009 08:07:12 -0700 (PDT) In-Reply-To: <49bf44f10905010805p3174c8ccp73d54178d917989d@mail.gmail.com> References: <49bf44f10904240801x2f5e4236v16c297859cc5c9d7@mail.gmail.com> <49bf44f10905010715j72720a89p93e1ff11a417818c@mail.gmail.com> <200905011700.54281.francesco.talamona@know.eu> <49bf44f10905010805p3174c8ccp73d54178d917989d@mail.gmail.com> Date: Fri, 1 May 2009 08:07:12 -0700 Message-ID: <49bf44f10905010807x53cf77fcnf01b185e13e83a63@mail.gmail.com> Subject: Re: [gentoo-user] Re: X-forwarding fails with "Invalid MIT-MAGIC-COOKIE-1 key" From: Grant To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Archives-Salt: 80c62765-0ccd-4720-a2d2-a4ce6ab01147 X-Archives-Hash: 5c9176c1512092121efe3d6616397769 >>> $ ssh -Y 192.168.10.1 >>> The authenticity of host '192.168.10.1 (192.168.10.1)' can't be >>> established. RSA key fingerprint is. >>> Are you sure you want to continue connecting (yes/no)? yes >>> Failed to add the host to the list of known hosts >>> (/home/grant/.ssh/known_hosts). >> >> I think the problem is here: too strict permissions in ~/.ssh preventing >> ssh to update known_hosts list, needed to continue connection. it >> should be 700 for the .ssh directory and 600 for the file known_hosts. >> >> What is the output of: ls -l .ssh -d ? And ls -l .ssh ? >> Is 192.168.10.1 in your known_hosts? >> With the right RSA key? >> >> Ciao >> =A0 =A0 =A0 =A0Francesco > > Thanks again everyone, it's working after a reboot. =A0X has been > strange since the xorg-1.5 upgrade. =A0I noticed that ssh -X fails with > the same error message I've been getting, but ssh -Y succeeds. =A0man > ssh says: > > -Y =A0 Enables trusted X11 forwarding. =A0Trusted X11 forwardings are not > subjected to the X11 SECURITY extension controls. > > Security extension controls sounds like a good thing. =A0Does anyone > know why -X isn't working? > > - Grant I should also add that the following doesn't seem to be necessary on the cl= ient: /etc/ssh/ssh_config: Host * ForwardAgent yes ForwardX11 yes - Grant