SUMMARY: SSH X11 question

From: Jonathan Williams (jonathw@shubertorg.com)
Date: Thu Jun 19 2003 - 17:57:45 EDT


Bah! I hate summaries like this one. chalk this one up to user error. =(

There were two problems that I overlooked. One was pointed out by Trevor
Osatchuk. He said: "Before you ssh into the other system make sure that your
DISPLAY variable is set correctly. If this isn't right then the other system
will have the same erroneous or null value."

Sure enough...I was using a user that I had "su"-ed to--so the DISPLAY variable
wasn't set. If I ssh over from a fresh login, the DISPLAY is set correctly, and
X11 apps run fine.

The other problem was that when I tried it using the SSH Secure Shell windows
program, I forgot to put a little checkmark next to the "Tunnel X11
connections?" box. Checked it, and now that works too.

Thanks for everyone that responded. Almost all the responses suggested
modifying the /etc/hosts.allow file, and adding a line something like this:
sshdfwd-X11: .domain.xxx :ALLOW
I put this in, because maybe it will help others with similar problems. I don't
use the hosts.deny file, so the hosts.allow file is unnecessary. From the SSH
admin guide: "If /etc/hosts.allow does not contain a rule allowing access, tcpd
reads /etc/hosts.deny for a rule that would deny access. If neither of the
files contains an accept or deny rule, access is granted by default."

So that's that. Thanks again for the responses.

Jonathan Williams
Unix Systems Administrator
The Shubert Organization, Inc.

----- Original Message -----
From: "Jonathan Williams" <jonathw@shubertorg.com>
To: <tru64-unix-managers@ornl.gov>
Sent: Thursday, June 19, 2003 11:38 AM
Subject: SSH X11 question

> We just got a brand new Alphaserver ES80 (running Tru64 5.1b), and I'm busily
> trying to configure it as a production machine. One of the things that needs
> configuring is SSH.
>
> We have two other machines running SSH and 5.1b, and if I were to ssh2 from
one
> to the other, my DISPLAY variable would automatically be set for me (if I ssh2
> from systemA to systemB, my DISPLAY will be set to something like
> "systemB.shubertorg.com:10.0". And all of the X11 applications work just
fine.
>
> With this new system, I noticed that the DISPLAY variable is blank when I ssh2
> from the other systems to this system, or even from this system to the other
> systems (causing a "cannot open display" error when starting X11 apps). It's
> like something is missing. I don't recall having to do anything special to
the
> other systems to get this to work properly. I compared the ssh2_config and
> sshd2_config files (with a working system), and they seem to be identical
> (including the FORWARDX11 option set to "yes").
>
> One thing I noticed is that this new system seems to be running 5.1b patchkit
2,
> while the others are running patchkit1--I'm not sure if that means anything
> though.
>
> Any suggestions are greatly appreciated.
>
> Jonathan Williams
> Unix Systems Administrator
> The Shubert Organization, Inc.
>
>
>
>



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:49:23 EDT