Date: Tue, 11 Dec 2018 19:48:01 +0100 From: Peter Boosten <peter@boosten.org> To: byrnejb@harte-lyne.ca Cc: freebsd-questions <freebsd-questions@freebsd.org> Subject: Re: frebsd jails advice Message-ID: <384E2084-FF12-40BA-8A8D-61F3037FB6CD@boosten.org> In-Reply-To: <109f3022fa5d61d76e455571461e30a1.squirrel@webmail.harte-lyne.ca> References: <mailman.100.1544443202.53946.freebsd-questions@freebsd.org> <c63903580701769959df71f117923b5a.squirrel@webmail.harte-lyne.ca> <b2a80245-49c1-0300-f76e-8bb70401d4f9@netfence.it> <109f3022fa5d61d76e455571461e30a1.squirrel@webmail.harte-lyne.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
> On 11 Dec 2018, at 17:32, James B. Byrne via freebsd-questions = <freebsd-questions@freebsd.org> wrote: > [SNIP] > [root@hll124 ~]# gvim >=20 > X11 connection rejected because of wrong authentication. > [SNIP] >> What about ssh_config and sshd_config? > Both the client host and the jail have pretty much the same settings. >=20 > # Local overrides > AllowTcpForwarding yes > Banner /etc/ssh/ssh_pre_logon.txt > GatewayPorts yes > IgnoreRhosts yes > IgnoreUserKnownHosts no > KeepAlive yes > LoginGraceTime 60 > PermitEmptyPasswords no > PermitRootLogin without-password > PrintMotd yes > PubkeyAuthentication yes > StrictModes yes > ChallengeResponseAuthentication no > MaxAuthTries 6 > PasswordAuthentication yes > Protocol 2 >=20 What=E2=80=99s the setting of X11UseLocalhost in /etc/ssh/sshd_config on = the jail? You should set it to =E2=80=98NO=E2=80=99, because jails and localhost = do not play together very nice. Peter=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?384E2084-FF12-40BA-8A8D-61F3037FB6CD>