From owner-freebsd-jail@FreeBSD.ORG  Fri Mar 21 19:51:50 2014
Return-Path: <owner-freebsd-jail@FreeBSD.ORG>
Delivered-To: freebsd-jail@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8B149806;
 Fri, 21 Mar 2014 19:51:50 +0000 (UTC)
Received: from mx1.fisglobal.com (mx1.fisglobal.com [199.200.24.190])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx1.freebsd.org (Postfix) with ESMTPS id 5761DB08;
 Fri, 21 Mar 2014 19:51:50 +0000 (UTC)
Received: from smarthost.fisglobal.com ([10.132.206.191])
 by ltcfislmsgpa04.fnfis.com (8.14.5/8.14.5) with ESMTP id s2LJpfe0015172
 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NOT);
 Fri, 21 Mar 2014 14:51:41 -0500
Received: from THEMADHATTER (10.242.181.54) by smarthost.fisglobal.com
 (10.132.206.191) with Microsoft SMTP Server id 14.3.174.1; Fri, 21 Mar 2014
 14:51:40 -0500
From: <dteske@FreeBSD.org>
Sender: Devin Teske <devin.teske@fisglobal.com>
To: "'Randy Schultz'" <schulra@earlham.edu>, <freebsd-jail@freebsd.org>
References: <alpine.BSF.2.00.1403211453110.68818@localhost>
In-Reply-To: <alpine.BSF.2.00.1403211453110.68818@localhost>
Subject: RE: jails and X forwarding
Date: Fri, 21 Mar 2014 12:51:26 -0700
Message-ID: <008e01cf453e$f31d0d10$d9572730$@FreeBSD.org>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJGrH9nTyXn+835lHae6SCs1d/utpn9IbxA
Content-Language: en-us
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.11.87, 1.0.14,
 0.0.0000
 definitions=2014-03-21_06:2014-03-21,2014-03-21,1970-01-01 signatures=0
Cc: 'Devin Teske' <dteske@freebsd.org>
X-BeenThere: freebsd-jail@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "Discussion about FreeBSD jail\(8\)" <freebsd-jail.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-jail/>
List-Post: <mailto:freebsd-jail@freebsd.org>
List-Help: <mailto:freebsd-jail-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-jail>,
 <mailto:freebsd-jail-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 21 Mar 2014 19:51:50 -0000



> -----Original Message-----
> From: Randy Schultz [mailto:schulra@earlham.edu]
> Sent: Friday, March 21, 2014 12:17 PM
> To: freebsd-jail@freebsd.org
> Subject: jails and X forwarding
> 
> Hiya,
> 
> I am trying to allow a jail to do X forwarding ala ssh -Y, but seem to be
missing
> something.  I have narrowed it down to something with the jail, having
> successfully done this with non-jails.  IOW, sshd_config has
"X11Forwarding
> yes" etc.  The system is fbsd 9.2-STABLE.  The jail is set up using
ezjail.  I have
> tweaked various jail sysctl settings in case there was something there I
was
> missing.  I disabled the firewall rules to removed potential interference
from
> that angle.  All to no avail.  I keep getting ye olde
> 
>     xclock
>     X11 connection rejected because of wrong authentication.
>     Error: Can't open display: localhost:10.0
> 
> What am I missing?
> 
[Devin Teske] 

Try installing xauth.
-- 
Devin


_____________
The information contained in this message is proprietary and/or confidential. If you are not the intended recipient, please: (i) delete the message and all copies; (ii) do not disclose, distribute or use the message in any manner; and (iii) notify the sender immediately. In addition, please be aware that any message addressed to our domain is subject to archiving and review by persons other than the intended recipient. Thank you.