Re: [infosec-discuss] x11 forwarding problems

From: Oliver Leitner (shadow333_at_gmail.com)
Date: 05/17/05

  • Next message: Foster, Dale: "RE: x11 forwarding problems" 
    Date: Tue, 17 May 2005 08:17:13 +0200
To: infosec-discuss@googlegroups.com

    Andre Charbonneau wrote:
    >
    > Hi,
    > If I connect to a openssh server (SSH-1.99-OpenSSH_3.8p1, running on
    > SuSE Linux 9.1 (i586)) using a openssh client (OpenSSH_3.9p1, OpenSSL
    > 0.9.7d 17 Mar 2004, running on SuSE Linux 9.2 (i586)), then X11
    > forwarding works fine.
    >
    > But, if I use j2ssh as a ssh client to connect to the same sshd, then I
    > get the following error in the sshd debug output:
    >
    > debug1: channel 3: new [X11 connection from 127.0.0.1 port 36470]
    > channel 3: open failed: connect failed: Connection refused
    >
    > I've been trying to find what might be the problem for a few days now
    > but with no success.
    > I understand that this is not the place to ask questions about j2ssh.
    > But what I would like to know is the following: In general, is there a
    > well known condition, either at the client or server side, which would
    > cause such a 'connection refused'?
    >
    > Thanks,
    > Andre
    >
    >

    sounds like the problem is not on the x11 side, take a look on the
    client that is running j2ssh, maybe something's wrong there...

    im myself not yet using j2ssh, but id look on the local setup, are there
    any firewalls on the client, how about proxies, and so on...

    i hope i could help you.

    Greetings
    Oliver Leitner
    Technical Staff
    http://www.shells.at

  • Next message: Foster, Dale: "RE: x11 forwarding problems"

    Relevant Pages

    • Re: HP-UX: ssh connections ignore CTRL+C interrupts
      ... > When I start sshd from an interactive shell, ... stty settings should probably be considered "uninitialized variables". ... The proper way for stty settings to be established is by the client. ... If you start a Unix/Linux based SSH client from a shell session, ...
      (SSH)
    • Disabling reverse dns lookups
      ... My situation is that I have sshd behind a NAT. ... record, as this is a cable modem connection, so the ISP controls that. ... /etc/krb5.conf on the client, yet this doesn't seem to have had any ... The client is Kerberos 1.6.2 on Fedora 8, ...
      (comp.protocols.kerberos)
    • opehssh shows two new processes upon connection
      ... When the client connects and additional 2 sshd processes are seen ... This is imporant to us because we want to use pam login_limits. ...
      (comp.security.ssh)
    • Re: Logingrace time and debug mode
      ... > following options in debug mode ... > I conneted my client and waited over the gracetime, ... > But the SSHD works perfectly when it is started in normal mode. ... > Is this a correct behaviour? ...
      (comp.security.ssh)
    • Re: Help request: problems with a 5.1 server and large numbers of ssh users.
      ... >It is my intuition from this behavior that the sshd master process ... >listening for connections is unable to spawn a new process to complete ... >There is no information of use in dmesg, nor in the system logs. ... the 150th client logs in to the results when the 151st client ...
      (freebsd-hackers)