From owner-freebsd-questions@FreeBSD.ORG Wed Jun 23 11:43:10 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AB90716A4CE for ; Wed, 23 Jun 2004 11:43:10 +0000 (GMT) Received: from smtp1.adl2.internode.on.net (smtp1.adl2.internode.on.net [203.16.214.181]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0ED5243D67 for ; Wed, 23 Jun 2004 11:43:10 +0000 (GMT) (envelope-from malcolm.kay@internode.on.net) Received: from beta.home (ppp129-18.lns1.adl2.internode.on.net [150.101.129.18])i5NBh74Y017399 for ; Wed, 23 Jun 2004 21:13:08 +0930 (CST) From: Malcolm Kay Organization: at home To: freebsd-questions@freebsd.org Date: Wed, 23 Jun 2004 21:13:07 +0930 User-Agent: KMail/1.5.4 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Message-Id: <200406232113.07451.malcolm.kay@internode.on.net> Subject: X via ssh to HP-UX problem X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jun 2004 11:43:10 -0000 Hi, At work I have been using ssh for X connections between FreeBSD an linux=20 machines without problems. Meanwhile X connections to a HP machine 'HP-UX hphendon B.10.20 A 9000/735'= =20 on the network have been established using classical 'rsh' with 'xhost' authentication because the HP-UX system did not have ssh installed. I recently installed openssh-3.7.1p2 on the HP and as a simple terminal=20 connection this seems to work OK. But if I try to tunnel X through ssh I have problems -- the connection is rejected. =46rom one of the FreeBSD machines (FBSD 4.9) issuing the command: $ ssh -v -X -f hphendon xterm yields debug information including the following lines:- debug1: client_input_channel_open: ctype x11 rchan 2 win 65536 max 16384 debug1: client_request_x11: request from 127.0.0.1 1419 debug1: fd 4 setting TCP_NODELAY debug1: fd 4 setting O_NONBLOCK debug1: channel 1: new [x11] debug1: confirm x11 debug1: X11 connection uses different authentication protocol. X11 connection rejected because of wrong authentication. debug1: X11 rejected 1 i0/o0 I assume "X11 connection uses different authentication protocol" is at the core of the problem -- but what does it really mean? Is there a way around the problem? Must I go back to the classical insecure xhost approach? Yes, I did enable X11 in sshd_config on the HP. X on the HP is based on "X consortium" rather than "XFree" -- can this be significant? An X connection can be established in the other direction without problem. I would appreciate any thoughts on this matter. Malcolm Kay