From owner-freebsd-questions@FreeBSD.ORG  Tue Jun 14 16:58:11 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9AEFB16A41C
	for <freebsd-questions@freebsd.org>;
	Tue, 14 Jun 2005 16:58:11 +0000 (GMT)
	(envelope-from hartzell@kestrel.alerce.com)
Received: from merlin.alerce.com (w094.z064001164.sjc-ca.dsl.cnc.net
	[64.1.164.94]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5F66843D1D
	for <freebsd-questions@freebsd.org>;
	Tue, 14 Jun 2005 16:58:11 +0000 (GMT)
	(envelope-from hartzell@kestrel.alerce.com)
Received: from merlin.alerce.com (localhost [127.0.0.1])
	by merlin.alerce.com (Postfix) with ESMTP id 573E22161;
	Tue, 14 Jun 2005 09:58:05 -0700 (PDT)
Received: from satchel.alerce.com (w092.z064001164.sjc-ca.dsl.cnc.net
	[64.1.164.92])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(Client CN "satchel.alerce.com",
	Issuer "Alerce Certificate Authority" (verified OK))
	by merlin.alerce.com (Postfix) with ESMTP id 2A870215D;
	Tue, 14 Jun 2005 09:58:05 -0700 (PDT)
Received: from satchel.alerce.com (localhost [127.0.0.1])
	by satchel.alerce.com (8.13.1/8.13.1) with ESMTP id j5EGwMa4040450
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK);
	Tue, 14 Jun 2005 09:58:23 -0700 (PDT)
	(envelope-from hartzell@satchel.alerce.com)
Received: (from hartzell@localhost)
	by satchel.alerce.com (8.13.1/8.13.1/Submit) id j5EGwMWh040447;
	Tue, 14 Jun 2005 09:58:22 -0700 (PDT) (envelope-from hartzell)
From: George Hartzell <hartzell@kestrel.alerce.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <17071.3245.824836.806622@satchel.alerce.com>
Date: Tue, 14 Jun 2005 09:58:21 -0700
To: freebsd-questions@freebsd.org
In-Reply-To: <44zmttxbxb.fsf@be-well.ilk.org>
References: <17070.20363.683173.186043@satchel.alerce.com>
	<44zmttxbxb.fsf@be-well.ilk.org>
X-Mailer: VM 7.17 under 21.4 (patch 15) "Security Through Obscurity" XEmacs
	Lucid
X-Virus-Scanned: ClamAV using ClamSMTP
Cc: hartzell@alerce.com
Subject: Re: Can't make X tunnelling via SSH work,
	probably loosing my mind....
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: hartzell@alerce.com
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 14 Jun 2005 16:58:11 -0000

Lowell Gilbert writes:
 > George Hartzell <hartzell@kestrel.alerce.com> writes:
 > 
 > > I just noticed that I couldn't ssh -X from a machine into a fully
 > > configured jail on the same machine and have an X app display back on
 > > the desktop.
 > > [...]
 > 
 > You're going to have problems with ssh authentication there, I would
 > think.  Have you tried the -Y option to ssh?

Thanks, that worked!

I'm not really sure why though....  I've been through the xauth
section on trusted vs. untrusted, and skimmed the X11 SECURITY
extension specification.

Using ssh -X works on my 5.3BETA4 system from 10/2004.  It's running
an Xorg 6.7 server.

Is this the result of an X change, and ssh change, or a butterfly
flapping it's wings over Brazil?

Thanks again for the help!

g.