On 10/19/2016 06:38 PM, Rick Stevens wrote:
1. Ensure "X11Forwarding yes" is set in the REMOTE system's
/etc/ssh/sshd_config file and make sure sshd has been restarted
to read it.
2. Run "xhost +" as root on the LOCAL system to permit everyone
to make connections to the LOCAL system's X server.
2. "su - unprivileged-user-name" on the LOCAL machine.
3. "ssh -X user@REMOTEHOST" to log into the REMOTE machine.
4. Verify you have a DISPLAY variable set by doing
"echo $DISPLAY" on the REMOTE machine. You should get a value
like "localhost:10.0", indicating you have X forwarded.
5. Run "firefox" on the REMOTE machine. The display should pop
up on your local machine.
I'm not sure that step 3 will be able to use the local X as
"su -l" could have unset the DISPLAY variable, you may
need "export DISPLAY=:0".
At step 2.5 you can check if you are able to open windows on your X
e.g. by doing:
xclock
or
DISPLAY=:0 xclock
If only the second one works, you need "export DISPLAY=:0" before proceeding.
Anyway, step 2 is a little too permissive.
Better:
xhost +SI:localuser:xxxxx
where xxxxx is your unprivileged-user-name.
Regards.
--
Roberto Ragusa mail at robertoragusa.it