Re: how to use x11 forwarding?

From: Keith Duffin (kduffin_at_duffin.org)
Date: 09/28/04

  • Next message: Baker, Darryl: "RE: OpenSSH -- a way to block recurrent login failures?" 
    Date: Tue, 28 Sep 2004 07:08:13 -0400 (EDT)
To: Jonathan Loh <kj6loh@yahoo.com>

    It is important to note that ssh tunneling of any kind is an easy way to
    bypass firewall security. If you are on systems that have a large user
    community, it would be wise to run two different sshd instances. You can
    limit access using either the AllowGroups or AllowUsers directive. I will
    typically run one that is used by administrative users and allow tunneling
    while a general instance used by users does not.

    Cheers,

    Keith Duffin

    On Fri, 24 Sep 2004, Jonathan Loh wrote:

    > Yes. there should be a sshd_config file on your system. Most *nixes have it in
    > /etc/ssh/sshd_config. But you need to have superuser status (default) to
    > change the X11Forwarding. Otherwise ask the system administrator.
    > --- Greg Wooledge <wooledg@eeg.ccf.org> wrote:
    >
    > > On Mon, Sep 20, 2004 at 04:07:57PM -0700, Chris Cheshire wrote:
    > > > Sorry for the newbie question, but how do I get X11 forwarding to work?
    > >
    > > Enable X11Forwarding on the server.
    > >
    > > Use "ssh -X" on the client.
    > >
    > > Make sure the server *and* the client both have the "xauth" program in
    > > their respective ${PATH}s. (When you compiled OpenSSH, it should have
    > > told you what the server's $PATH would be... make sure xauth is in a
    > > directory in that $PATH.)
    > >
    >
    >
    >
    >
    > __________________________________
    > Do you Yahoo!?
    > New and Improved Yahoo! Mail - Send 10MB messages!
    > http://promotions.yahoo.com/new_mail
    >

  • Next message: Baker, Darryl: "RE: OpenSSH -- a way to block recurrent login failures?"