Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Jul 2003 12:42:33 +0200
From:      Marc Schoechlin <ms-freebsd@LF.net>
To:        freebsd-isp@freebsd.org
Subject:   SSH && X11 && JAIL-Environment
Message-ID:  <20030717104233.GA78671@LF.net>

next in thread | raw e-mail | index | archive | help
Hi !

I would like to use X11_Forwarding with my Jail-System.

I activated X11-Forwarding and restarted my SSHD.

Trying to start "xclock" provides me the following result:
--
ms@nox:~$ xclock
X11 connection rejected because of wrong authentication.
X connection to localhost:10.0 broken (explicit kill or server shutdown).
--

A workaround for this is possible with that:
--
Client    : ssh <jail> -R 6000:127.0.0.1:6000
Jail-Host : export DISPLAY=<jail>:0.0
Client    : xhost +127.0.0.1
Jail-Host : xclock
--

How unsecure is this ?

This is maybe pretty unsecure - are there better alternatives ?
(Maybe also more comfortable solutions ?)

Best regards

Marc Schoechlin
-- 

Gruss / Best regards  |  LF.net GmbH        |  fon +49 711 90074-413
Marc Schoechlin       |  Ruppmannstr. 27    |  fax +49 711 90074-33
ms@LF.net             |  D-70565 Stuttgart  |  http://www.lf.net



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030717104233.GA78671>