Date: Mon, 21 Apr 2003 11:14:16 +0200 From: Erwin Lansing <erwin@lansing.dk> To: Brian Dean <bsd@bsdhome.com> Cc: freebsd-hackers@freebsd.org Subject: Re: using x11 forwarding with ssh from a jail Message-ID: <20030421091416.GD86753@droso.net> In-Reply-To: <20030420233133.GA593@neutrino.bsdhome.com> References: <20030420233133.GA593@neutrino.bsdhome.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--sdtB3X0nJg68CQEu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Sun, Apr 20, 2003 at 07:31:33PM -0400, Brian Dean wrote:
> Hi,
Howdy,
>=20
> Is anyone having problems connecting to their X server from inside a
> jail using ssh's X11 forwarding?
>=20
> >From my non-jail environment, I ssh into my jail environment with X11
> forwarding enabled. When I try to invoke an X application, I get:
>=20
> % xclock
> X11 connection rejected because of wrong authentication.
> X connection to localhost:11.0 broken (explicit kill or server shutdown=
).
>=20
> It works fine if I uset 'xhost +' in my non-jail environment and the
> point my display appropriately from inside the jail (bypassing ssh x11
> forwarding). Any ideas why X11 forwarding doesn't seem to do the
> right thing?
>=20
This has probably something to do with the mapping of localhost to the
external ip address of the jail. Try setting:
X11UseLocalhost no
in /etc/ssh/sshd_config in your jail should fix this.
Cheers,
-erwin
--=20
_._ _,-'""`-._
Erwin Lansing (,-.`._,'( |\`-/| http://droso.org/
erwin@lansing.dk `-.-' \ )-`( , o o) http://fnidder.dk/
-bf- `- \`_`"'-
--sdtB3X0nJg68CQEu
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE+o7Zoqy9aWxUlaZARApnrAKD5K2U9XhZbshMWp79RljStAd4W4wCg50P7
4pRX64tOs2MPz0ejjtH84tg=
=GACu
-----END PGP SIGNATURE-----
--sdtB3X0nJg68CQEu--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030421091416.GD86753>