From owner-freebsd-jail@FreeBSD.ORG Sat Mar 22 01:01:53 2014 Return-Path: Delivered-To: freebsd-jail@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 6DF8A248 for ; Sat, 22 Mar 2014 01:01:53 +0000 (UTC) Received: from chibanda.earlham.edu (chibanda.earlham.edu [159.28.1.168]) by mx1.freebsd.org (Postfix) with ESMTP id 3CEFCB2A for ; Sat, 22 Mar 2014 01:01:52 +0000 (UTC) X-ASG-Debug-ID: 1395449188-06e52b16d0eca10001-dVRlEP Received: from sunstone.earlham.edu (sunstone.earlham.edu [159.28.3.91]) by chibanda.earlham.edu with ESMTP id rv1pohjImobHmJzn; Fri, 21 Mar 2014 20:46:28 -0400 (EDT) X-Barracuda-Envelope-From: schulra@earlham.edu X-Barracuda-Apparent-Source-IP: 159.28.3.91 Received: from tdream.lly.earlham.edu (tdream.lly.earlham.edu [159.28.7.241]) by sunstone.earlham.edu (Postfix) with ESMTP id 84339171D540; Fri, 21 Mar 2014 20:46:28 -0400 (EDT) Date: Fri, 21 Mar 2014 20:46:28 -0400 (EDT) From: Randy Schultz X-X-Sender: schulra@localhost To: 'Devin Teske' Subject: RE: jails and X forwarding In-Reply-To: <008e01cf453e$f31d0d10$d9572730$@FreeBSD.org> X-ASG-Orig-Subj: RE: jails and X forwarding Message-ID: References: <008e01cf453e$f31d0d10$d9572730$@FreeBSD.org> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Barracuda-Connect: sunstone.earlham.edu[159.28.3.91] X-Barracuda-Start-Time: 1395449188 X-Barracuda-URL: http://159.28.1.168:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at earlham.edu X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: -1002.00 X-Barracuda-Spam-Status: No, SCORE=-1002.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=1000.0 Cc: freebsd-jail@freebsd.org X-BeenThere: freebsd-jail@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Discussion about FreeBSD jail\(8\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Mar 2014 01:01:53 -0000 On Fri, 21 Mar 2014, dteske@FreeBSD.org wrote: -} -}> I am trying to allow a jail to do X forwarding ala ssh -Y, but seem to be -}missing -}> something. I have narrowed it down to something with the jail, having -}> successfully done this with non-jails. IOW, sshd_config has -}"X11Forwarding -}> yes" etc. The system is fbsd 9.2-STABLE. The jail is set up using -}ezjail. I have -}> tweaked various jail sysctl settings in case there was something there I -}was -}> missing. I disabled the firewall rules to removed potential interference -}from -}> that angle. All to no avail. I keep getting ye olde -}> -}> xclock -}> X11 connection rejected because of wrong authentication. -}> Error: Can't open display: localhost:10.0 -}> -}> What am I missing? -}> -}[Devin Teske] -} -}Try installing xauth. Ah, I had already done that: Dude ? pkg_info|egrep xauth xauth-1.0.8 X authority file utility -- Randy (schulra@earlham.edu) 765.983.1283 <*> Hatred does not cease by hatred, but only by love; this is the eternal rule. - Siddhartha Gautama