From owner-freebsd-questions@FreeBSD.ORG  Tue Jun 19 20:24:00 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 7DEA616A46E
	for <freebsd-questions@freebsd.org>;
	Tue, 19 Jun 2007 20:24:00 +0000 (UTC)
	(envelope-from tundra@tundraware.com)
Received: from eskimo.tundraware.com (eskimo.tundraware.com [66.92.130.161])
	by mx1.freebsd.org (Postfix) with ESMTP id 14F6C13C43E
	for <freebsd-questions@freebsd.org>;
	Tue, 19 Jun 2007 20:24:00 +0000 (UTC)
	(envelope-from tundra@tundraware.com)
Received: from [127.0.0.1] (eskimo.tundraware.com [66.92.130.161])
	(authenticated bits=0)
	by eskimo.tundraware.com (8.14.1/8.14.1) with ESMTP id l5JKNpoU001448
	(version=TLSv1/SSLv3 cipher=DHE-DSS-AES256-SHA bits=256 verify=NO)
	for <freebsd-questions@freebsd.org>;
	Tue, 19 Jun 2007 15:23:53 -0500 (CDT)
	(envelope-from tundra@tundraware.com)
Message-ID: <46783B57.8030609@tundraware.com>
Date: Tue, 19 Jun 2007 15:23:51 -0500
From: Tim Daneliuk <tundra@tundraware.com>
Organization: TundraWare Inc.
User-Agent: Thunderbird 1.5.0.9 (X11/20060911)
MIME-Version: 1.0
To: freebsd-questions@freebsd.org
References: <46781626.3010400@tundraware.com>	<20070619181106.GB15696@ayn.mi.celestial.com>	<467836FD.3020901@tundraware.com>	<20070619161238.c7160e20.wmoran@potentialtech.com>
	<4678395D.3070002@tundraware.com>
	<2196830142E9AFBC39B295C2@vortex.es.net>
In-Reply-To: <2196830142E9AFBC39B295C2@vortex.es.net>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-tundraware.com-MailScanner-Information: Please contact the ISP for more
	information
X-tundraware.com-MailScanner: Found to be clean
X-tundraware.com-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
	score=-4.399, required 1, autolearn=not spam, ALL_TRUSTED -1.80,
	BAYES_00 -2.60)
X-tundraware.com-MailScanner-From: tundra@tundraware.com
X-Spam-Status: No
Subject: Re: Interesting Change In ssh Behavior
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: tundra@tundraware.com
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 19 Jun 2007 20:24:00 -0000

John Webster wrote:
> 
> --On Tuesday, June 19, 2007 15:15:25 -0500 Tim Daneliuk <tundra@tundraware.com> wrote:
> 
>> Bill Moran wrote:
>>> In response to Tim Daneliuk <tundra@tundraware.com>:
>>>
>>>> Bill Campbell wrote:
>>>>> On Tue, Jun 19, 2007, Tim Daneliuk wrote:
>>>>>> I just recently update one 6.2 and one 4.11 machine to the latest stable
>>>>>> sources and built world.  Now, for some odd reason, I cannot tunnel X
>>>>>> via ssh from remote clients.  Did the defaults for sshd change lately
>>>>>> or is there some other culprit?
>>>>> First make sure that the sshd_config file on the server machine
>>>>> has ``X11Forwarding yes'' set.
>>>>>
>>>> Nope, that's not it. I did set it manually and restarted sshd (even though I believe
>>>> this is the default).  Still no go...
>>> Are you using the -Y option to ssh when you connect?
>>>
>> I've tried both -X and -Y - neither work.  This *used* to work, so I am trying to
>> determine if this is a "me" problem or if some default changed somewhere in the
>> source tree that may be causing me grief...
> 
> 
> What does ssh'ing with verbose mode show?
> 
> 

I was just doing this as your email arrived.  This looks suspicious (!):

             Remote: No xauth program; cannot forward with spoofing


This is on an old 4.11 system updated to latest stable.  xauth does indeed exist in:

         /usr/X11R6/bin/xauth


Very strange ...