From owner-freebsd-current Fri Apr 21 1:19: 0 2000 Delivered-To: freebsd-current@freebsd.org Received: from sr14.nsw-remote.bigpond.net.au (sr14.nsw-remote.bigpond.net.au [24.192.3.29]) by hub.freebsd.org (Postfix) with ESMTP id 216E937B6DC for ; Fri, 21 Apr 2000 01:18:57 -0700 (PDT) (envelope-from a.reilly@lake.com.au) Received: from areilly.bpc-users.org (CPE-144-132-171-71.nsw.bigpond.net.au [144.132.171.71]) by sr14.nsw-remote.bigpond.net.au (Pro-8.9.3/8.9.3) with SMTP id SAA11614 for ; Fri, 21 Apr 2000 18:16:18 +1000 (EST) Received: (qmail 78361 invoked by uid 1000); 21 Apr 2000 08:16:17 -0000 From: "Andrew Reilly" Date: Fri, 21 Apr 2000 18:16:17 +1000 To: Warner Losh Cc: Andrew Reilly , Brian Fundakowski Feldman , Chris Piazza , Brooks Davis , Shin-ichi YOSHIMOTO , freebsd-current@FreeBSD.ORG Subject: Re: Anyone have OpenSSH + X11-fwd working? Message-ID: <20000421181617.A77984@gurney.reilly.home> References: <20000421103210.A42545@gurney.reilly.home> <20000420153837.A81163@norn.ca.eu.org> <20000421103210.A42545@gurney.reilly.home> <200004210725.BAA16026@harmony.village.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0pre2i In-Reply-To: <200004210725.BAA16026@harmony.village.org> Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Fri, Apr 21, 2000 at 01:25:20AM -0600, Warner Losh wrote: > In message <20000421103210.A42545@gurney.reilly.home> "Andrew Reilly" writes: > : Have you got "X11Forwarding yes" > > Ahem. "ForwardX11 yes" is what's documented and is known to work. Bzzzt. Man sshd(8): X11Forwarding Specifies whether X11 forwarding is permitted. The default is ``yes''. Note that disabling X11 forwarding does not improve se- curity in any way, as users can always install their own for- warders. Man ssh(1): ForwardX11 Specifies whether X11 connections will be automatically redirect- ed over the secure channel and DISPLAY set. The argument must be ``yes'' or ``no''. What man ssh(1) doesn't tell you in this paragraph is that even if you say "ForwardX11 yes" in ~/.ssh/config, you will not get a proxy X session unless the server has "X11Forwarding yes" in /etc/ssh/sshd_config. The default that my system configured itself with was "X11Forwarding no", and I've just changed it, and now it works. That's what I found out as a result of this conversation. -- Andrew To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message