[TriLUG] Another forwarding X11 question

[Andrew Perrin]

Jeff,

In general you need to make sure each hop - including authentication hops
- has a path back to the actual display. 

> Host (B) tries to connect via ssh -X host.A

When you say "tries," I assume you mean also "succeeds," right? Does ssh
-v -X tell you anything interesting?

> Host (B) tries to run an application that requires X -- ethereal, tried
> running as both root, and normal user and Host (B) gets this error:

To get to root on A, do you use su or ssh? If su, you're breaking the
chain - there's no channel for the X packets to get through. 

If you seem to have a chain, try something other than ethereal, just to
make sure it's not the app -- maybe just xterm or rxvt.

I'd be happy to come over sometime in person and play around if you'd like
- call or email, I'm at 2-6876.

Best,
Andy

----------------------------------------------------------------------
Andrew J Perrin - http://www.unc.edu/~aperrin
Assistant Professor of Sociology, U of North Carolina, Chapel Hill
clists at perrin.socsci.unc.edu * andrew_perrin (at) unc.edu


On Tue, 23 Apr 2002, Jeff Bollinger wrote:

> Host (A) has sshd running, enabling forward X11 packets
> Host (B) tries to connect via ssh -X host.A
> 
> Host (B) tries to run an application that requires X -- ethereal, tried 
> running as both root, and normal user and Host (B) gets this error:
> 
> X11 connection rejected because of wrong authentication.
> Gdk-ERROR **: X connection to localhost:10.0 broken (explicit kill or 
> server shutdown).
> 
> 
> What can I change that will allow Host (B) to run ethereal from Host (A)?
> 
> Thanks,
> Jeff
> 
> -- 
> Jeff Bollinger
> University of North Carolina
> IT Security Analyst
> 105 Abernethy Hall
> mailto: jeff_bollinger at unc dot edu
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iEYEARECAAYFAjzETQsACgkQvoVlxVBmgsXunQCg1Pjc14nTjWiP8FCy+NNDK97E
> HMAAoIRhikBeM5Lm+6Iu/0h3MX6lDgiR
> =LpiV
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> TriLUG mailing list
>     http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ:
>     http://www.trilug.org/~lovelace/faq/TriLUG-faq.html
>