Date: Mon, 21 Apr 2003 11:14:16 +0200 From: Erwin Lansing <erwin@lansing.dk> To: Brian Dean <bsd@bsdhome.com> Cc: freebsd-hackers@freebsd.org Subject: Re: using x11 forwarding with ssh from a jail Message-ID: <20030421091416.GD86753@droso.net> In-Reply-To: <20030420233133.GA593@neutrino.bsdhome.com> References: <20030420233133.GA593@neutrino.bsdhome.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--sdtB3X0nJg68CQEu Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Apr 20, 2003 at 07:31:33PM -0400, Brian Dean wrote: > Hi, Howdy, >=20 > Is anyone having problems connecting to their X server from inside a > jail using ssh's X11 forwarding? >=20 > >From my non-jail environment, I ssh into my jail environment with X11 > forwarding enabled. When I try to invoke an X application, I get: >=20 > % xclock > X11 connection rejected because of wrong authentication. > X connection to localhost:11.0 broken (explicit kill or server shutdown= ). >=20 > It works fine if I uset 'xhost +' in my non-jail environment and the > point my display appropriately from inside the jail (bypassing ssh x11 > forwarding). Any ideas why X11 forwarding doesn't seem to do the > right thing? >=20 This has probably something to do with the mapping of localhost to the external ip address of the jail. Try setting: X11UseLocalhost no in /etc/ssh/sshd_config in your jail should fix this. Cheers, -erwin --=20 _._ _,-'""`-._ Erwin Lansing (,-.`._,'( |\`-/| http://droso.org/ erwin@lansing.dk `-.-' \ )-`( , o o) http://fnidder.dk/ -bf- `- \`_`"'- --sdtB3X0nJg68CQEu Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE+o7Zoqy9aWxUlaZARApnrAKD5K2U9XhZbshMWp79RljStAd4W4wCg50P7 4pRX64tOs2MPz0ejjtH84tg= =GACu -----END PGP SIGNATURE----- --sdtB3X0nJg68CQEu--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030421091416.GD86753>