SCIENTIFIC-LINUX-USERS Archives

August 2008

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"P. Larry Nelson" <[log in to unmask]>
Reply To:
P. Larry Nelson
Date:
Wed, 27 Aug 2008 11:48:54 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (55 lines)
Yep, 'ssh -X -Y' does the trick.  Thanks!!

- Larry

Stephen John Smoogen wrote on 8/27/2008 11:38 AM:
> On Wed, Aug 27, 2008 at 10:31 AM, P. Larry Nelson <[log in to unmask]> wrote:
>> We've run into a problem with ssh X11 forwarding, apparently since
>> the 8/23/2008 yum update of openssh packages.
>>
>> In the very recent past we were able to 'ssh -X' from an SL 4.6 host
>> to another SL 4.6 system, and from there do an 'ssh -X' to a third
>> SL 4.6 system and have X11 traffic pipe its way back to the original
>> host with no problems.
>>
>> Now, in the last few days, we find that the 'ssh -X' from first host
>> to second works fine, but then an 'ssh -X' to the third results in:
>>
>> Warning: untrusted X11 forwarding setup failed: xauth key data not generated
>> Warning: No xauth data; using fake authentication data for X11 forwarding.
>>
>> And firing up any X11 app on the third host fails with:
>>
>> X11 connection rejected because of wrong authentication.
>> X connection to localhost:12.0 broken (explicit kill or server shutdown).
>>
> 
> This actually sounds like the security fix is working. Does ssh -X -Y
> do what you want?
> 
> Say hi to Andy at roadkill for me :).
> 
>> I've started googling for this, but thought I'd throw it out in case
>> others are experiencing the same problem or maybe Troy/Connie have a
>> thought or fix.
>>
>> Thanks!
>> - Larry
>> --
>> P. Larry Nelson (217-244-9855) | Systems/Network Administrator
>> 461 Loomis Lab                 | High Energy Physics Group
>> 1110 W. Green St., Urbana, IL  | Physics Dept., Univ. of Ill.
>> MailTo:[log in to unmask]        | http://www.roadkill.com/lnelson/
>> -------------------------------------------------------------------
>>  "Information without accountability is just noise."  - P.L. Nelson



-- 
P. Larry Nelson (217-244-9855) | Systems/Network Administrator
461 Loomis Lab                 | High Energy Physics Group
1110 W. Green St., Urbana, IL  | Physics Dept., Univ. of Ill.
MailTo:[log in to unmask]        | http://www.roadkill.com/lnelson/
-------------------------------------------------------------------
  "Information without accountability is just noise."  - P.L. Nelson

ATOM RSS1 RSS2