Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
Gene;
On 1/29/07, Gene Heskett gene.heskett@verizon.net wrote:
Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
Try the -Y option, as in "ssh -vY -lusername boxinworkshop.domain.com .
-P
On Monday 29 January 2007 18:33, P Jones wrote:
Gene;
On 1/29/07, Gene Heskett gene.heskett@verizon.net wrote:
Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
Try the -Y option, as in "ssh -vY -lusername boxinworkshop.domain.com .
-P
Worked like a champ, thanks.
Gene Heskett wrote:
On Monday 29 January 2007 18:33, P Jones wrote:
Gene;
On 1/29/07, Gene Heskett gene.heskett@verizon.net wrote:
Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
Try the -Y option, as in "ssh -vY -lusername boxinworkshop.domain.com .
-P
Worked like a champ, thanks.
Those defaults are in: /etc/ssh/ssh_config
change: # ForwardX11 no to # ForwardX11 no ForwardX11 yes
That will make it permanently 'revert' to the old behavior.
P Jones wrote:
Try the -Y option, as in "ssh -vY -lusername boxinworkshop.domain.com .
Gene Heskett wrote:
Worked like a champ, thanks.
Phil Meyer wrote:
Those defaults are in: /etc/ssh/ssh_config
change: # ForwardX11 no to # ForwardX11 no ForwardX11 yes
That will make it permanently 'revert' to the old behavior.
Gene may need to ensure that "ForwardX11Trusted yes" is also set (it is by default). If ssh -X doesn't work and ssh -Y does, then that's the setting to look at.
Hope this helps,
James.
James Wilkinson wrote:
Try the -Y option, as in "ssh -vY -lusername boxinworkshop.domain.com .
Gene Heskett wrote:
Worked like a champ, thanks.
Phil Meyer wrote:
Those defaults are in: /etc/ssh/ssh_config
change: # ForwardX11 no to # ForwardX11 no ForwardX11 yes
That will make it permanently 'revert' to the old behavior.
Gene may need to ensure that "ForwardX11Trusted yes" is also set (it is by default). If ssh -X doesn't work and ssh -Y does, then that's the setting to look at.
And if anyone actually understands what 'Trusted' means in this context, please explain or add it to the man page.
On Mon, 2007-01-29 at 18:07 -0500, Gene Heskett wrote:
Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
By default, ssh doesn't do X forwarding any longer. Use the "-X" or "-Y" options to ssh, or turn on "ForwardX11Trusted" in your ssh_config.
---------------------------------------------------------------------- - Rick Stevens, Senior Systems Engineer rstevens@vitalstream.com - - VitalStream, Inc. http://www.vitalstream.com - - - - You possess a mind not merely twisted, but actually sprained. - ----------------------------------------------------------------------
On Monday 29 January 2007 19:24, Rick Stevens wrote:
On Mon, 2007-01-29 at 18:07 -0500, Gene Heskett wrote:
Greetings all;
I have a kubuntu box out in the workshop that I normally admin either from its own keyboard or from here over an ssh link. Then I installed FC6 on this box.
Now the various graphical stuff fails with a can't determine display message. I just checked in the /etc/ssh/ssh_config, and in the /etc/ssh/sshd_config files on that box and 'X11Forwarding yes' is present in both files, so its apparently something on this end.
What do I enable, in what file, what it takes to restore this functionality with FC6 that worked so nicely in FC2?
By default, ssh doesn't do X forwarding any longer. Use the "-X" or "-Y" options to ssh,
or turn on "ForwardX11Trusted" in your ssh_config.
That's what was puzzling Rick, ForwardX11Trusted, was already 'yes', both here and on the machine I was accessing.
- Rick Stevens, Senior Systems Engineer rstevens@vitalstream.com -
- VitalStream, Inc. http://www.vitalstream.com -
-
- You possess a mind not merely twisted, but actually sprained. -
On Mon, 2007-01-29 at 20:27 -0500, Gene Heskett wrote:
By default, ssh doesn't do X forwarding any longer. Use the "-X" or "-Y" options to ssh,
or turn on "ForwardX11Trusted" in your ssh_config.
That's what was puzzling Rick, ForwardX11Trusted, was already 'yes', both here and on the machine I was accessing.
Do you have "ForwardX11Trusted" in your local ~/.ssh/config file and is it being used when you access the remote machine?
ssh should pattern match against all the "Host name" entries, using the earliest matched entries first.
The "Host *" represents the default and should be last in ~/.ssh/config
If you do "ssh -v -v -v name", it should say something like: debug1: Reading configuration data /home/rsewill/.ssh/config
If I construct my ~/.ssh/config file, and have ~/.ssh and ~/.ssh/config have the correct file permissions, as follows:
Host laptop laptop-* *-laptop *-laptop-* HostKeyAlias laptop HostName laptop IdentityFile ~/.ssh/id_dsa-home User rsewill
Host x11 x11-* *-x11 *-x11-* ForwardX11 yes ForwardX11Trusted yes
Host * Cipher blowfish Compression yes ForwardX11 no ForwardX11Trusted no GatewayPorts no IdentitiesOnly yes MACs hmac-sha1 PasswordAuthentication no Protocol 2 PubkeyAuthentication yes
I can then do: rsewill@rsewill:~ <2:3> $ ssh laptop Last login: Mon Jan 29 20:09:46 2007 from desktop.rsewill.cableone.net rsewill@laptop:~ <1:1> $ echo $DISPLAY
rsewill@laptop:~ <1:2> $ exit rsewill@rsewill:~ <2:4> $ ssh laptop-x11 Last login: Mon Jan 29 20:11:49 2007 from desktop.rsewill.cableone.net rsewill@laptop:~ <1:13> $ echo $DISPLAY localhost:10.0 rsewill@laptop:~ <1:14> $
Only in the second case, is X forwarding enabled.
On Monday 29 January 2007 21:21, Rick Sewill wrote:
On Mon, 2007-01-29 at 20:27 -0500, Gene Heskett wrote:
By default, ssh doesn't do X forwarding any longer. Use the "-X" or "-Y" options to ssh,
or turn on "ForwardX11Trusted" in your ssh_config.
That's what was puzzling Rick, ForwardX11Trusted, was already 'yes', both here and on the machine I was accessing.
Do you have "ForwardX11Trusted" in your local ~/.ssh/config file and is it being used when you access the remote machine?
ssh should pattern match against all the "Host name" entries, using the earliest matched entries first.
That part doesn't seem to match but its late, I've printed this and will check things out in the morning. Many thanks.
The "Host *" represents the default and should be last in ~/.ssh/config
If you do "ssh -v -v -v name", it should say something like: debug1: Reading configuration data /home/rsewill/.ssh/config
If I construct my ~/.ssh/config file, and have ~/.ssh and ~/.ssh/config have the correct file permissions, as follows:
Host laptop laptop-* *-laptop *-laptop-* HostKeyAlias laptop HostName laptop IdentityFile ~/.ssh/id_dsa-home User rsewill
Host x11 x11-* *-x11 *-x11-* ForwardX11 yes ForwardX11Trusted yes
Host * Cipher blowfish Compression yes ForwardX11 no ForwardX11Trusted no GatewayPorts no IdentitiesOnly yes MACs hmac-sha1 PasswordAuthentication no Protocol 2 PubkeyAuthentication yes
I can then do: rsewill@rsewill:~ <2:3> $ ssh laptop Last login: Mon Jan 29 20:09:46 2007 from desktop.rsewill.cableone.net rsewill@laptop:~ <1:1> $ echo $DISPLAY
rsewill@laptop:~ <1:2> $ exit rsewill@rsewill:~ <2:4> $ ssh laptop-x11 Last login: Mon Jan 29 20:11:49 2007 from desktop.rsewill.cableone.net rsewill@laptop:~ <1:13> $ echo $DISPLAY localhost:10.0 rsewill@laptop:~ <1:14> $
Only in the second case, is X forwarding enabled.
-- Rick Sewill