From owner-freebsd-bugs@FreeBSD.ORG Fri Feb 22 07:50:02 2008 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2651B16A401 for ; Fri, 22 Feb 2008 07:50:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 0721813C46E for ; Fri, 22 Feb 2008 07:50:02 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.2/8.14.2) with ESMTP id m1M7o1tL043985 for ; Fri, 22 Feb 2008 07:50:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.2/8.14.1/Submit) id m1M7o18I043984; Fri, 22 Feb 2008 07:50:01 GMT (envelope-from gnats) Resent-Date: Fri, 22 Feb 2008 07:50:01 GMT Resent-Message-Id: <200802220750.m1M7o18I043984@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Tateoka Takamichi Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id D625F16A400 for ; Fri, 22 Feb 2008 07:46:34 +0000 (UTC) (envelope-from tate@gilbert.cs.uec.ac.jp) Received: from mx-west.uec.ac.jp (adm2-bge0.cc.uec.ac.jp [130.153.8.66]) by mx1.freebsd.org (Postfix) with SMTP id 618E613C461 for ; Fri, 22 Feb 2008 07:46:34 +0000 (UTC) (envelope-from tate@gilbert.cs.uec.ac.jp) Received: (qmail 14678 invoked by uid 0); 22 Feb 2008 16:19:53 +0900 Received: from unknown (HELO gilbert.cs.uec.ac.jp) (130.153.150.155) by adm2.cc.uec.ac.jp with SMTP; 22 Feb 2008 16:19:53 +0900 Received: from gilbert.cs.uec.ac.jp (localhost [127.0.0.1]) by gilbert.cs.uec.ac.jp (8.14.2/8.14.2) with ESMTP id m1M7IUhq044204; Fri, 22 Feb 2008 16:18:30 +0900 (JST) (envelope-from tate@gilbert.cs.uec.ac.jp) Received: (from tate@localhost) by gilbert.cs.uec.ac.jp (8.14.2/8.14.2/Submit) id m1M7ITVX044203; Fri, 22 Feb 2008 16:18:29 +0900 (JST) (envelope-from tate) Message-Id: <200802220718.m1M7ITVX044203@gilbert.cs.uec.ac.jp> Date: Fri, 22 Feb 2008 16:18:29 +0900 (JST) From: Tateoka Takamichi To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: tate@cs.uec.ac.jp Subject: bin/120963: X11 forwarding cannot work X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Tateoka Takamichi List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Feb 2008 07:50:02 -0000 >Number: 120963 >Category: bin >Synopsis: X11 forwarding cannot work >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Feb 22 07:50:01 UTC 2008 >Closed-Date: >Last-Modified: >Originator: Tateoka Takamichi >Release: FreeBSD 6.3-RELEASE i386 >Organization: University of Electro-Communications >Environment: System: FreeBSD gilbert.cs.uec.ac.jp 6.3-RELEASE FreeBSD 6.3-RELEASE #1: Mon Jan 28 16:42:21 JST 2008 tate@gilbert.cs.uec.ac.jp:/usr/obj/usr/src/sys/GENERIC i386 /usr/sbin/sshd ports/x11/xauth (installed to /usr/local/bin/xauth) >Description: sshd cannot find xauth. because /usr/X11R6/bin/xauth is hard-coded in /usr/bin/sshd. So, X11Fowarding cannot work. >How-To-Repeat: Login from remote host with X11 forwarding like that. leaf:tate[168]% ssh -v -Y gilbert.cs.uec.ac.jp OpenSSH_4.5p1 FreeBSD-20061110, OpenSSL 0.9.7e-p1 25 Oct 2004 debug1: Reading configuration data /home/tate/.ssh/config debug1: Reading configuration data /etc/ssh/ssh_config [snip] debug1: Requesting X11 forwarding with authentication spoofing. debug1: Remote: No xauth program; cannot forward with spoofing. gilbert:tate[1]% echo $DISPLAY DISPLAY: Undefined variable. gilbert:tate[2]% which xauth /usr/local/bin/xauth gilbert:tate[3]% We can find /usr/X11R6/bin/xauth is hard-coded like that: gilbert:tate[2]% strings /usr/sbin/sshd |grep xauth xauthlocation maxauthtries /usr/X11R6/bin/xauth No xauth program; cannot forward with spoofing. gilbert:tate[3]% >Fix: For workaround, make a symbolic-link from /usr/X11R6 to /usr/local. set X11BASE to /usr/local in make.conf? I'm not sure. >Release-Note: >Audit-Trail: >Unformatted: