From owner-freebsd-questions@FreeBSD.ORG Tue Jun 27 22:22:20 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BCEE316A403 for ; Tue, 27 Jun 2006 22:22:20 +0000 (UTC) (envelope-from bill@celestial.com) Received: from mail.mi.celestial.com (hayek.celestial.com [192.136.111.12]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8760144516 for ; Tue, 27 Jun 2006 21:22:45 +0000 (GMT) (envelope-from bill@celestial.com) Received: from localhost (localhost [127.0.0.1]) by mail.mi.celestial.com (Postfix) with ESMTP id ABD70765C5; Tue, 27 Jun 2006 14:22:44 -0700 (PDT) Received: from mail.mi.celestial.com ([127.0.0.1]) by localhost (alexis.mi.celestial.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 21532-01-4; Tue, 27 Jun 2006 14:22:44 -0700 (PDT) Received: by mail.mi.celestial.com (Postfix, from userid 203) id 59CE9764F9; Tue, 27 Jun 2006 14:22:44 -0700 (PDT) Date: Tue, 27 Jun 2006 14:22:44 -0700 From: Bill Campbell To: freebsd-questions@freebsd.org Message-ID: <20060627212244.GA21589@alexis.mi.celestial.com> Mail-Followup-To: freebsd-questions@freebsd.org References: <1151291104.2354.9.camel@LatitudeFC5.network> <20060626054413.GB36779@rebelion.Sisis.de> <1151376465.2354.24.camel@LatitudeFC5.network> <20060627073202.GA1188@rebelion.Sisis.de> <1151442352.2354.29.camel@LatitudeFC5.network> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1151442352.2354.29.camel@LatitudeFC5.network> User-Agent: Mutt/1.4.2.1i X-Virus-Scanned: amavisd-new at mi.celestial.com Subject: Re: SSHD errors: will not forward X11 connections X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: freebsd@celestial.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Jun 2006 22:22:20 -0000 On Tue, Jun 27, 2006, Andrew wrote: ... >Yes, I see that. But it is "complete"; I passed the '-o' flag to truss >to write _all_ output to a file. Just to be sure, I ran it again, and >diff'ed the output files; they are the same. To be clear, I do get a >shell prompt when I login via SSH. > >I'm thinking that trying to this out is going to turn into a large waste >of time... I haven't been following this thread, but from the Subject I would guess that there's may be problems with the client machine's ssh_config file, the target machines sshd_config file, or the command being executed. To enable X11 forwarding on the client side on recent versions of openssh, either the ``ssh -Y'' command or the ssh_config options ``ForwardX11'' and ``ForwardX11Trusted'' must be set to ``yes''. On the server side, the sshd_config file must have ``X11Forwarding'' set to ``yes'' to allow any client X11 forwarding. On older versions of openssh, the ``-X'' option was sufficient, but now ``-Y'' is necessary (although ``-X'' might work if ``X11Forwarding'' is ``yes'' in the ssh_config file). Bill -- INTERNET: bill@Celestial.COM Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX: (206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 The Constitution is a written instrument. As such, its meaning does not alter. That which it meant when it was adopted, it means now. -- SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905)