No "ssh -X hostname" doesn't work. But when you "export DISPLAY=..." it works!? I set the the Display Hack so that I can see my IP with "env" or "echo SSH_CLIENT" when I'm connect via VPN-Tunnel and I don't know my IP in the Net I'm connected through. Andreas Kerl ----------------------------------------- DTS Medien GmbH Heidestrasse 38 32051 Herford Tel: +49-5221-1011082 Fax: +49-5221-1012001 mailto: andreas.kerl at dts.de pgp-id:0xCE58889B web: www.dts.de ----------------------------------------- -----Original Message----- From: Austin Gonyou [mailto:austin at coremetrics.com] Sent: Friday, May 31, 2002 8:51 PM To: Kerl, Andreas Cc: openssh-unix-dev at mindrot.org Subject: Re: (no subject) so does ssh -X hostname work, and allow forward? On Fri, 2002-05-31 at 07:07, Kerl, Andreas wrote:> Hello, > I've got the Problem that the Display Variable is not set when I > connect to sshd. > X-Forward is active. > I think I tested all Configurations but it doesn't work. > Sorry :-) > Solaris 8 openssh 3.2.3 > > > Andreas Kerl > > > > > _______________________________________________ > openssh-unix-dev at mindrot.org mailing list > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev-- Austin Gonyou Systems Architect, CCNA Coremetrics, Inc. Phone: 512-698-7250 email: austin at coremetrics.com "One ought never to turn one's back on a threatened danger and try to run away from it. If you do that, you will double the danger. But if you meet it promptly and without flinching, you will reduce the danger by half." Sir Winston Churchill
[This email is either empty or too large to be displayed at this time]
To get my IP is not the problem. The Problem is the sshd ,I build it (Solaris8)and x-forward is enabled but the DISPLAY variable is not set when connecting to it (with "ssh -X hostname"). When yot set it manually, X is working. Andreas Kerl ----------------------------------------- DTS Medien GmbH Heidestrasse 38 32051 Herford Tel: +49-5221-1011082 Fax: +49-5221-1012001 mailto: andreas.kerl at dts.de pgp-id:0xCE58889B web: www.dts.de ----------------------------------------- -----Original Message----- From: Austin Gonyou [mailto:austin at coremetrics.com] Sent: Saturday, June 01, 2002 10:17 PM To: Kerl, Andreas Cc: openssh-unix-dev at mindrot.org Subject: RE: (no subject)X-forward
The OpenSSH client needs to know the LOCAL display name in order to accept X11 forwarding requests from the remote SSH end and to know where to relay X11 traffic to. That's why the DISPLAY variable MUST be set on the client side for X11 forwarding to work. Nico --> -----Original Message----- > From: Austin Gonyou [mailto:austin at coremetrics.com] > Sent: Monday, June 03, 2002 12:32 PM > To: Kerl, Andreas > Cc: openssh-unix-dev at mindrot.org > Subject: RE: (no subject)X-forward > > > > Well..you should *never* have to set the DISPLAY variable, because it > *is* populated as something like :10 or so. exporting the DISPLAY > variable is *not* tunneling X. > > On Sat, 2002-06-01 at 15:44, Kerl, Andreas wrote: > > To get my IP is not the problem. > > The Problem is the sshd ,I build it (Solaris8)and x-forward is > > enabled > > but the DISPLAY variable is not set when connecting to it (with "ssh > > -X > > hostname"). > > When yot set it manually, X is working. > > > > > > Andreas Kerl > > > > ----------------------------------------- > > DTS Medien GmbH > > Heidestrasse 38 > > 32051 Herford > > > > Tel: +49-5221-1011082 > > Fax: +49-5221-1012001 > > > > mailto: andreas.kerl at dts.de > > pgp-id:0xCE58889B > > web: www.dts.de > > ----------------------------------------- > > > > > > -----Original Message----- > > From: Austin Gonyou [mailto:austin at coremetrics.com] > > Sent: Saturday, June 01, 2002 10:17 PM > > To: Kerl, Andreas > > Cc: openssh-unix-dev at mindrot.org > > Subject: RE: (no subject)X-forward > > > > > > From the sounds of it, the remote sshd may not have any support for > > X > > forwarding at all, or it's been turned off in /etc/ssh/sshd_config. > > > > To find out you're IP that you're coming from, use > > www.whatismyip.com it > > will tell you what you're IP is. Either that or who -l should show > > you > > as well, when you're ssh'd into the system.(the one that the VPN is > > talking to) > > > > > > > > On Fri, 2002-05-31 at 17:05, Kerl, Andreas wrote: > > > No "ssh -X hostname" doesn't work. > > > > > > But when you "export DISPLAY=..." it works!? > > > > > > I set the the Display Hack so that I can see my IP with "env" or > > "echo > > > SSH_CLIENT" when I'm connect via VPN-Tunnel and I don't know my IP > > > in > > > the Net I'm connected through. > > > > > > > > > > > > Andreas Kerl > > > > > > ----------------------------------------- > > > DTS Medien GmbH > > > Heidestrasse 38 > > > 32051 Herford > > > > > > Tel: +49-5221-1011082 > > > Fax: +49-5221-1012001 > > > > > > mailto: andreas.kerl at dts.de > > > pgp-id:0xCE58889B > > > web: www.dts.de > > > ----------------------------------------- > > > > > > > > > -----Original Message----- > > > From: Austin Gonyou [mailto:austin at coremetrics.com] > > > Sent: Friday, May 31, 2002 8:51 PM > > > To: Kerl, Andreas > > > Cc: openssh-unix-dev at mindrot.org > > > Subject: Re: (no subject) > > > > > > > > > so does ssh -X hostname work, and allow forward? > > > > > > > > > > > > On Fri, 2002-05-31 at 07:07, Kerl, Andreas wrote: > > > > Hello, > > > > I've got the Problem that the Display Variable is not set when I > > > > connect to sshd. > > > > X-Forward is active. > > > > I think I tested all Configurations but it doesn't work. > > > > Sorry :-) > > > > Solaris 8 openssh 3.2.3 > > > > > > > > > > > > Andreas Kerl > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > openssh-unix-dev at mindrot.org mailing list > > > > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev > > > -- > > > Austin Gonyou > > > Systems Architect, CCNA > > > Coremetrics, Inc. > > > Phone: 512-698-7250 > > > email: austin at coremetrics.com > > > > > > "One ought never to turn one's back on a threatened danger and > > > try to run away from it. If you do that, you will double the > > danger. > > > But if you meet it promptly and without flinching, you will > > > reduce the danger by half." > > > Sir Winston Churchill > > -- > > Austin Gonyou > > Systems Architect, CCNA > > Coremetrics, Inc. > > Phone: 512-698-7250 > > email: austin at coremetrics.com > > > > "One ought never to turn one's back on a threatened danger and > > try to run away from it. If you do that, you will double the danger. > > But if you meet it promptly and without flinching, you will > > reduce the danger by half." > > Sir Winston Churchill > -- > Austin Gonyou > Systems Architect, CCNA > Coremetrics, Inc. > Phone: 512-698-7250 > email: austin at coremetrics.com > > "One ought never to turn one's back on a threatened danger and > try to run away from it. If you do that, you will double the danger. > But if you meet it promptly and without flinching, you will > reduce the danger by half." > Sir Winston Churchill >Visit our website at http://www.ubswarburg.com This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments.
Hello, I think I must tell you the problem more clearly. ssh -X Linuxhost_xy - there is an older sshd version I didn't build 2.9.9p1, works! ssh -X Solarishost - doesn't work (it's a 3.2.3p1 I build myself) because the $DISPLAY is not automatically set when I connect to it. the problem is not the X-Forwarding and how to get it working,the problem is the new ssh version on Solaris8 that will not set $DISPLAY! I tested all options in sshd_config but nothing happend. regards, Andreas Kerl
Yeah that's it, compiled with --with-xauth=... and it works Thank you very much. Andreas Kerl -----Original Message----- From: Kevin Steves [mailto:kevin at atomicgears.com] Sent: Tuesday, June 04, 2002 4:12 PM To: Kerl, Andreas Cc: Nicolas.Williams at ubsw.com; Austin Gonyou; openssh-unix-dev at mindrot.org; stevesk at pobox.com Subject: Re: (no subject)X-forward On Tue, Jun 04, 2002 at 09:45:58AM +0200, Kerl, Andreas wrote:> I think I must tell you the problem more clearly. > ssh -X Linuxhost_xy - there is an older sshd version I didn't build > 2.9.9p1, works! > ssh -X Solarishost - doesn't work (it's a 3.2.3p1 I build myself) > because the $DISPLAY is not automatically set when I connect to it. > > the problem is not the X-Forwarding and how to get it working,the > problem is the new ssh version on Solaris8 that will not set $DISPLAY!> I tested all options in sshd_config but nothing happend.Run sshd -d on sun, then ssh -v to sun host. I will guess the xauth program is not found.
My System: # uname -a SunOS testsun 5.8 Generic_108528-07 sun4u sparc SUNW,Ultra-5_10 Configured without "--with-xauth": # grep xauth config.log configure:15449: checking for xauth Andreas Kerl -----Original Message----- From: Tim Rice [mailto:tim at multitalents.net] Sent: Tuesday, June 04, 2002 6:24 PM To: Kevin Steves Cc: Kerl, Andreas; openssh-unix-dev at mindrot.org; stevesk at pobox.com Subject: Re: (no subject)X-forward On Tue, 4 Jun 2002, Kevin Steves wrote:> On Tue, Jun 04, 2002 at 05:44:16PM +0200, Kerl, Andreas wrote: > > Yeah that's it, > > compiled with --with-xauth=... > > and it works > > ok, great. configure detection for an xauth program is broken post > 3.1 on solaris (for me it does not work on solaris 8), but i'm not > sure why. > > can someone look into this?Hmm, works here. ... tim at sun1 1% echo $DISPLAY localhost:10.0 tim at sun1 2% uname -a SunOS sun1 5.8 Generic_108528-14 sun4m sparc SUNW,SPARCstation-5 tim at sun1 3% env | grep SSH SSH_CLIENT=192.168.34.65 34565 22 SSH_TTY=/dev/pts/3 ... Andreas, rerun configure without using the --with-xauth option and tell me what "grep xauth config.log" says. -- Tim Rice Multitalents (707) 887-1469 tim at multitalents.net
I use autoconf. Before configure I make clean. Config-log: configure:15449: checking for xauth configure:15482: result: no But xauth is in /usr/openwin/bin Andreas Kerl -----Original Message----- From: Tim Rice [mailto:tim at multitalents.net] Sent: Tuesday, June 04, 2002 7:19 PM To: Kerl, Andreas Cc: openssh-unix-dev at mindrot.org Subject: RE: (no subject)X-forward On Tue, 4 Jun 2002, Kerl, Andreas wrote:> My System: > > # uname -a > SunOS testsun 5.8 Generic_108528-07 sun4u sparc SUNW,Ultra-5_10 > > Configured without "--with-xauth": > > # grep xauth config.log > configure:15449: checking for xauth > > Andreas KerlAre you generating your own configure with autoconf or are you using a configure from a tarball? Look in config.log an see if you can see what is going wrong.> > > -----Original Message----- > From: Tim Rice [mailto:tim at multitalents.net] > Sent: Tuesday, June 04, 2002 6:24 PM > To: Kevin Steves > Cc: Kerl, Andreas; openssh-unix-dev at mindrot.org; stevesk at pobox.com > Subject: Re: (no subject)X-forward > > > On Tue, 4 Jun 2002, Kevin Steves wrote: > > > On Tue, Jun 04, 2002 at 05:44:16PM +0200, Kerl, Andreas wrote: > > > Yeah that's it, > > > compiled with --with-xauth=... > > > and it works > > > > ok, great. configure detection for an xauth program is broken post > > 3.1 on solaris (for me it does not work on solaris 8), but i'm not > > sure why. > > > > can someone look into this? > > Hmm, works here. > ... > tim at sun1 1% echo $DISPLAY > localhost:10.0 > tim at sun1 2% uname -a > SunOS sun1 5.8 Generic_108528-14 sun4m sparc SUNW,SPARCstation-5 > tim at sun1 3% env | grep SSH SSH_CLIENT=192.168.34.65 34565 22 > SSH_TTY=/dev/pts/3 ... > > Andreas, rerun configure without using the --with-xauth option and > tell me what "grep xauth config.log" says. > >-- Tim Rice Multitalents (707) 887-1469 tim at multitalents.net
On Tue, 4 Jun 2002, Kerl, Andreas wrote:> I use autoconf.What version?> Before configure I make clean. > > Config-log: > > configure:15449: checking for xauth > configure:15482: result: noMaybe lines 15449 to 15482 of your configure will give you a clue as to what is going wrong.> > But xauth is in /usr/openwin/bin > > > Andreas Kerl-- Tim Rice Multitalents (707) 887-1469 tim at multitalents.net
Oh I think I'm wrong.
I thought autoconf is automatically used when I run
./configure
# autoconf -V
autoconf (GNU Autoconf) 2.52
Written by David J. MacKenzie.
I use the tar.gz from the offical openssh site.
Here the lines from configure:
# Check whether --with-xauth or --without-xauth was given.
if test "${with_xauth+set}" = set; then
withval="$with_xauth"
if test "x$withval" != "xno" ; then
xauth_path=$withval
fi
else
_________________________________________________________________
15449: # Extract the first word of "xauth", so it can
be
a program name
with args.
set dummy xauth; ac_word=$2
echo "$as_me:$LINENO: checking for $ac_word" >&5
echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6
if test "${ac_cv_path_xauth_path+set}" = set; then
echo $ECHO_N "(cached) $ECHO_C" >&6
else
case $xauth_path in
[\\/]* | ?:[\\/]*)
ac_cv_path_xauth_path="$xauth_path" # Let the user override the test
with a pa
th.
;;
*)
as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
for as_dir in
$PATH:/usr/X/bin:/usr/bin/X11:/usr/X11R6/bin:/usr/openwin/bin
do
IFS=$as_save_IFS
test -z "$as_dir" && as_dir=.
for ac_exec_ext in '' $ac_executable_extensions; do
if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
ac_cv_path_xauth_path="$as_dir/$ac_word$ac_exec_ext"
echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext"
>&5
break 2
fi
Done
done
;;
esac
fi
xauth_path=$ac_cv_path_xauth_path
if test -n "$xauth_path"; then
echo "$as_me:$LINENO: result: $xauth_path" >&5
15482: echo "${ECHO_T}$xauth_path" >&6
__________________________________________________________________
else
echo "$as_me:$LINENO: result: no" >&5
echo "${ECHO_T}no" >&6
fi
Andreas Kerl
-----Original Message-----
From: Tim Rice [mailto:tim at multitalents.net]
Sent: Tuesday, June 04, 2002 7:31 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: RE: (no subject)X-forward
On Tue, 4 Jun 2002, Kerl, Andreas wrote:
> I use autoconf.
What version?
> Before configure I make clean.
>
> Config-log:
>
> configure:15449: checking for xauth
> configure:15482: result: no
Maybe lines 15449 to 15482 of your configure will give you a clue as to
what is going wrong.
>
> But xauth is in /usr/openwin/bin
>
>
> Andreas Kerl
--
Tim Rice Multitalents (707) 887-1469
tim at multitalents.net
Sorry I'm not a programmer :-) , I didn't used autoconf. I used the offical configure. Andreas Kerl
Yes,that worked. xauth was found. Andreas Kerl -----Original Message----- From: Tim Rice [mailto:tim at multitalents.net] Sent: Tuesday, June 04, 2002 8:40 PM To: Kerl, Andreas Cc: openssh-unix-dev at mindrot.org Subject: RE: (no subject)X-forward On Tue, 4 Jun 2002, Kerl, Andreas wrote:> Oh I think I'm wrong. > I thought autoconf is automatically used when I run ./configure > > # autoconf -V > autoconf (GNU Autoconf) 2.52 > Written by David J. MacKenzie.Try renaming configure (mv configure configure.sav) and run autoconf. Try the configure your autoconf builds.> > I use the tar.gz from the offical openssh site. > > Here the lines from configure:[snip]> > On Tue, 4 Jun 2002, Kerl, Andreas wrote: > > > I use autoconf. > > What version? > > > Before configure I make clean. > > > > Config-log: > > > > configure:15449: checking for xauth > > configure:15482: result: no > > Maybe lines 15449 to 15482 of your configure will give you a clue as > to what is going wrong. > > > > > But xauth is in /usr/openwin/bin > > > > > > Andreas Kerl > >-- Tim Rice Multitalents (707) 887-1469 tim at multitalents.net