Re: PermitRootLogin=yes versus su

From: Darren Dunham (ddunham@redwood.taos.com)
Date: 01/27/03 

From: Darren Dunham <ddunham@redwood.taos.com>
Date: Mon, 27 Jan 2003 01:32:32 GMT

Dimitri Maziuk <dima@127.0.0.1> wrote:

> Of course there's plenty of gooey administration tools that you can
> use with ssh -X, and su breaks X forwarding...

Only if you don't keep your environment, or you've put your .xauth file
in a place that root can't read (NFS?) 

-- 
Darren Dunham                                           ddunham@taos.com
Unix System Administrator                    Taos - The SysAdmin Company
Got some Dr Pepper?                           San Francisco, CA bay area
         < This line left intentionally blank to confuse you. >

Relevant Pages

  • Re: Partial SNAFUs - X11Forwarding etc.
    ... to the base server machine via SSH, or it it also supposed to protect ... back "up the line" to the client machine? ... the ssh server host is compromised or otherwise untrustworthy, ... refrain from running the program via ssh X11 forwarding - there's no ...
    (comp.security.ssh)
  • Re: Whats the deal on the -X vs -Y thing?
    ... As a quick fix you could use something like this as your remote ssh ... chain is compromised (eg at either the tty layer, X11 forwarding port ... forwarding would not be needed on the intermediate hosts. ...
    (comp.security.ssh)
  • Re: Openssh Port Forwarding Confusion
    ... >Now for my Port forwarding question. ... So far what I have extracted about ssh port ... You connect to a port on the SSH client. ...
    (comp.security.ssh)
  • Re: [SLE] export DISPLAY and xhost +
    ... >>impression that remote X using DISPLAY travels over ssh just because you ... > X11 and TCP forwarding ... the connection to the X11 display is auto­ ... and the connection to the real X server will be made from the ...
    (SuSE)
  • Re: ssh -X shop problem...
    ... somethings gone fubar in the X11 forwarding. ... When you "su" to gene on the X terminal, ... neither can he forward X over ssh. ... classic conditions, you'd use xhost to allow access from a remote host, ...
    (Fedora)