Re: X11 forwarding setup correctly?

From: Darren Tucker (dtucker@dodgy.net.au)
Date: 11/23/02


From: dtucker@dodgy.net.au (Darren Tucker)
Date: Sat, 23 Nov 2002 08:31:50 GMT

In article <3DDF36B6.1000802@doe.carleton.ca>,
Shing-Fat Fred Ma <fma@doe.carleton.ca> wrote:
> Host *
> ForwardX11 yes
>
>But that didn't help. I checked our
>/opt/ssh/etc/ssh[d]_config (there are
>no such files in /etc/ or /etc/ssh/).
>They *do* disable X11 forwarding, but
>those lines are commented out.

The default for ForwardX11 is "no". You need to actually put "ForwardX11
yes" into sshd_config to enable it.

The other thing to check is that you have xauth and sshd knows where to
find it (with XAuthLocation if necessary).

-- 
Darren Tucker (dtucker at zip.com.au)
GPG key 8FF4FA69 / D9A3 86E9 7EEE AF4B B2D4  37C9 C982 80C7 8FF4 FA69
    Good judgement comes with experience. Unfortunately, the experience
usually comes from bad judgement.


Relevant Pages

  • Re: scp over several hops
    ... >but one host in the chain, ... Then that would be just like a local port forward but with the traffic ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: ssh X-forwarding not working aix
    ... Any host that can connect to the server's forwarded ports ... or can guess the "magic cookie" then they won't be able to. ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Assistence with OpenSSH build/config on Red Hat 7.2
    ... Brian wrote: ... [snip lots of good info] ... >host via ssh with that user id and password. ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: Supressing ssh yes/no message
    ... >The authenticity of host 'xxx.xxx.xxx.xxx' can't be established. ... >RSA key fingerprint is ... Good judgement comes with experience. ...
    (comp.security.ssh)
  • Re: ssh -b bind_address not working?
    ... "The address must be one assigned to a network ... > interface on the host." ... Good judgement comes with experience. ...
    (comp.security.ssh)