openssh unix dev - May 2002 - (no subject)X-forward

No "ssh -X hostname" doesn't work.

But when you "export DISPLAY=..." it works!?

I set the the Display Hack so that I can see my IP with "env" or
"echo
SSH_CLIENT" when I'm connect via VPN-Tunnel and I don't know my IP
in
the Net I'm connected through.



Andreas Kerl

-----------------------------------------
DTS Medien GmbH
Heidestrasse 38
32051 Herford

Tel:  +49-5221-1011082
Fax: +49-5221-1012001

mailto: andreas.kerl at dts.de
pgp-id:0xCE58889B
web: www.dts.de
-----------------------------------------


-----Original Message-----
From: Austin Gonyou [mailto:austin at coremetrics.com] 
Sent: Friday, May 31, 2002 8:51 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: Re: (no subject)


so does ssh -X hostname work, and allow forward?



On Fri, 2002-05-31 at 07:07, Kerl, Andreas wrote:
> Hello,
> I've got the Problem that the Display Variable is not set when I 
> connect to sshd.
> X-Forward is active.
> I think I tested all Configurations but it doesn't work.
> Sorry :-)
> Solaris 8   openssh 3.2.3
>  
> 
> Andreas Kerl
> 
> 
> 
> 
> _______________________________________________
> openssh-unix-dev at mindrot.org mailing list 
> http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
-- 
Austin Gonyou
Systems Architect, CCNA
Coremetrics, Inc.
Phone: 512-698-7250
email: austin at coremetrics.com

"One ought never to turn one's back on a threatened danger and 
try to run away from it. If you do that, you will double the danger. 
But if you meet it promptly and without flinching, you will 
reduce the danger by half."
Sir Winston Churchill

[This email is either empty or too large to be displayed at this time]

To get my IP is not the problem.
The Problem is the sshd ,I build it (Solaris8)and x-forward is enabled
but the DISPLAY variable is not set when connecting to it (with "ssh -X
hostname").
When yot set it manually, X is working.


Andreas Kerl

-----------------------------------------
DTS Medien GmbH
Heidestrasse 38
32051 Herford

Tel:  +49-5221-1011082
Fax: +49-5221-1012001

mailto: andreas.kerl at dts.de
pgp-id:0xCE58889B
web: www.dts.de
-----------------------------------------


-----Original Message-----
From: Austin Gonyou [mailto:austin at coremetrics.com] 
Sent: Saturday, June 01, 2002 10:17 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: RE: (no subject)X-forward

The OpenSSH client needs to know the LOCAL display name in
order to accept X11 forwarding requests from the remote SSH
end and to know where to relay X11 traffic to.

That's why the DISPLAY variable MUST be set on the client side
for X11 forwarding to work.

Nico
--  
> -----Original Message-----
> From: Austin Gonyou [mailto:austin at coremetrics.com]
> Sent: Monday, June 03, 2002 12:32 PM
> To: Kerl, Andreas
> Cc: openssh-unix-dev at mindrot.org
> Subject: RE: (no subject)X-forward
> 
> 
> 
> Well..you should *never* have to set the DISPLAY variable, because it
> *is* populated as something like :10 or so. exporting the DISPLAY
> variable is *not* tunneling X.
> 
> On Sat, 2002-06-01 at 15:44, Kerl, Andreas wrote:
> > To get my IP is not the problem.
> > The Problem is the sshd ,I build it (Solaris8)and x-forward is
> > enabled
> > but the DISPLAY variable is not set when connecting to it (with
"ssh
> > -X
> > hostname").
> > When yot set it manually, X is working.
> > 
> > 
> > Andreas Kerl
> > 
> > -----------------------------------------
> > DTS Medien GmbH
> > Heidestrasse 38
> > 32051 Herford
> > 
> > Tel:  +49-5221-1011082
> > Fax: +49-5221-1012001
> > 
> > mailto: andreas.kerl at dts.de
> > pgp-id:0xCE58889B
> > web: www.dts.de
> > -----------------------------------------
> > 
> > 
> > -----Original Message-----
> > From: Austin Gonyou [mailto:austin at coremetrics.com] 
> > Sent: Saturday, June 01, 2002 10:17 PM
> > To: Kerl, Andreas
> > Cc: openssh-unix-dev at mindrot.org
> > Subject: RE: (no subject)X-forward
> > 
> > 
> > From the sounds of it, the remote sshd may not have any support for
> > X
> > forwarding at all, or it's been turned off in
/etc/ssh/sshd_config.
> > 
> > To find out you're IP that you're coming from, use
> > www.whatismyip.com it
> > will tell you what you're IP is. Either that or who -l should show
> > you
> > as well, when you're ssh'd into the system.(the one that the
VPN is
> > talking to)
> > 
> > 
> > 
> > On Fri, 2002-05-31 at 17:05, Kerl, Andreas wrote:
> > > No "ssh -X hostname" doesn't work.
> > > 
> > > But when you "export DISPLAY=..." it works!?
> > > 
> > > I set the the Display Hack so that I can see my IP with
"env" or
> > "echo
> > > SSH_CLIENT" when I'm connect via VPN-Tunnel and I
don't know my IP
> > > in
> > > the Net I'm connected through.
> > > 
> > > 
> > > 
> > > Andreas Kerl
> > > 
> > > -----------------------------------------
> > > DTS Medien GmbH
> > > Heidestrasse 38
> > > 32051 Herford
> > > 
> > > Tel:  +49-5221-1011082
> > > Fax: +49-5221-1012001
> > > 
> > > mailto: andreas.kerl at dts.de
> > > pgp-id:0xCE58889B
> > > web: www.dts.de
> > > -----------------------------------------
> > > 
> > > 
> > > -----Original Message-----
> > > From: Austin Gonyou [mailto:austin at coremetrics.com]
> > > Sent: Friday, May 31, 2002 8:51 PM
> > > To: Kerl, Andreas
> > > Cc: openssh-unix-dev at mindrot.org
> > > Subject: Re: (no subject)
> > > 
> > > 
> > > so does ssh -X hostname work, and allow forward?
> > > 
> > > 
> > > 
> > > On Fri, 2002-05-31 at 07:07, Kerl, Andreas wrote:
> > > > Hello,
> > > > I've got the Problem that the Display Variable is not
set when I
> > > > connect to sshd.
> > > > X-Forward is active.
> > > > I think I tested all Configurations but it doesn't work.
> > > > Sorry :-)
> > > > Solaris 8   openssh 3.2.3
> > > >  
> > > > 
> > > > Andreas Kerl
> > > > 
> > > > 
> > > > 
> > > > 
> > > > _______________________________________________
> > > > openssh-unix-dev at mindrot.org mailing list
> > > > http://www.mindrot.org/mailman/listinfo/openssh-unix-dev
> > > --
> > > Austin Gonyou
> > > Systems Architect, CCNA
> > > Coremetrics, Inc.
> > > Phone: 512-698-7250
> > > email: austin at coremetrics.com
> > > 
> > > "One ought never to turn one's back on a threatened
danger and
> > > try to run away from it. If you do that, you will double the
> > danger.
> > > But if you meet it promptly and without flinching, you will 
> > > reduce the danger by half."
> > > Sir Winston Churchill
> > -- 
> > Austin Gonyou
> > Systems Architect, CCNA
> > Coremetrics, Inc.
> > Phone: 512-698-7250
> > email: austin at coremetrics.com
> > 
> > "One ought never to turn one's back on a threatened danger
and
> > try to run away from it. If you do that, you will double the danger.
> > But if you meet it promptly and without flinching, you will 
> > reduce the danger by half."
> > Sir Winston Churchill
> -- 
> Austin Gonyou
> Systems Architect, CCNA
> Coremetrics, Inc.
> Phone: 512-698-7250
> email: austin at coremetrics.com
> 
> "One ought never to turn one's back on a threatened danger and 
> try to run away from it. If you do that, you will double the danger. 
> But if you meet it promptly and without flinching, you will 
> reduce the danger by half."
> Sir Winston Churchill
> 
Visit our website at http://www.ubswarburg.com

This message contains confidential information and is intended only 
for the individual named.  If you are not the named addressee you 
should not disseminate, distribute or copy this e-mail.  Please 
notify the sender immediately by e-mail if you have received this 
e-mail by mistake and delete this e-mail from your system.

E-mail transmission cannot be guaranteed to be secure or error-free 
as information could be intercepted, corrupted, lost, destroyed, 
arrive late or incomplete, or contain viruses.  The sender therefore 
does not accept liability for any errors or omissions in the contents 
of this message which arise as a result of e-mail transmission.  If 
verification is required please request a hard-copy version.  This 
message is provided for informational purposes and should not be 
construed as a solicitation or offer to buy or sell any securities or 
related financial instruments.

Hello,
I think I must tell you the problem more clearly.
ssh -X Linuxhost_xy  - there is an older sshd version I didn't build
2.9.9p1, works!
ssh -X Solarishost   - doesn't work (it's a 3.2.3p1 I build myself)
because the $DISPLAY is not automatically set when I connect to it.

the problem is not the X-Forwarding and how to get it working,the
problem is the new ssh version on Solaris8 that will not set $DISPLAY!
I tested all options in sshd_config but nothing happend.

regards,

Andreas Kerl

Yeah that's it,
compiled with --with-xauth=...
and it works

Thank you very much.

Andreas Kerl

-----Original Message-----
From: Kevin Steves [mailto:kevin at atomicgears.com] 
Sent: Tuesday, June 04, 2002 4:12 PM
To: Kerl, Andreas
Cc: Nicolas.Williams at ubsw.com; Austin Gonyou;
openssh-unix-dev at mindrot.org; stevesk at pobox.com
Subject: Re: (no subject)X-forward


On Tue, Jun 04, 2002 at 09:45:58AM +0200, Kerl, Andreas
wrote:
> I think I must tell you the problem more clearly.
> ssh -X Linuxhost_xy  - there is an older sshd version I didn't build 
> 2.9.9p1, works!
> ssh -X Solarishost   - doesn't work (it's a 3.2.3p1 I build myself)
> because the $DISPLAY is not automatically set when I connect to it.
> 
> the problem is not the X-Forwarding and how to get it working,the 
> problem is the new ssh version on Solaris8 that will not set $DISPLAY!
> I tested all options in sshd_config but nothing happend.
Run sshd -d on sun, then ssh -v to sun host.  I will guess the xauth
program is not found.

My System:

# uname -a
SunOS testsun 5.8 Generic_108528-07 sun4u sparc SUNW,Ultra-5_10

Configured without "--with-xauth":

# grep xauth config.log
configure:15449: checking for xauth

Andreas Kerl




-----Original Message-----
From: Tim Rice [mailto:tim at multitalents.net] 
Sent: Tuesday, June 04, 2002 6:24 PM
To: Kevin Steves
Cc: Kerl, Andreas; openssh-unix-dev at mindrot.org; stevesk at pobox.com
Subject: Re: (no subject)X-forward


On Tue, 4 Jun 2002, Kevin Steves wrote:
> On Tue, Jun 04, 2002 at 05:44:16PM +0200, Kerl, Andreas wrote:
> > Yeah that's it,
> > compiled with --with-xauth=...
> > and it works
>
> ok, great.  configure detection for an xauth program is broken post 
> 3.1 on solaris (for me it does not work on solaris 8), but i'm not 
> sure why.
>
> can someone look into this?
Hmm, works here.
...
tim at sun1 1% echo $DISPLAY
localhost:10.0
tim at sun1 2% uname -a
SunOS sun1 5.8 Generic_108528-14 sun4m sparc SUNW,SPARCstation-5
tim at sun1 3% env | grep SSH SSH_CLIENT=192.168.34.65 34565 22
SSH_TTY=/dev/pts/3 ...

Andreas, rerun configure without using the --with-xauth option and tell
me what "grep xauth config.log" says.

-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net

I use autoconf.
Before configure I make clean.

Config-log:

configure:15449: checking for xauth
configure:15482: result: no


But xauth is in /usr/openwin/bin


Andreas Kerl



-----Original Message-----
From: Tim Rice [mailto:tim at multitalents.net] 
Sent: Tuesday, June 04, 2002 7:19 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: RE: (no subject)X-forward


On Tue, 4 Jun 2002, Kerl, Andreas wrote:
> My System:
>
> # uname -a
> SunOS testsun 5.8 Generic_108528-07 sun4u sparc SUNW,Ultra-5_10
>
> Configured without "--with-xauth":
>
> # grep xauth config.log
> configure:15449: checking for xauth
>
> Andreas Kerl
Are you generating your own configure with autoconf or are you using a
configure from a tarball?

Look in config.log an see if you can see what is going wrong.
>
>
> -----Original Message-----
> From: Tim Rice [mailto:tim at multitalents.net]
> Sent: Tuesday, June 04, 2002 6:24 PM
> To: Kevin Steves
> Cc: Kerl, Andreas; openssh-unix-dev at mindrot.org; stevesk at pobox.com
> Subject: Re: (no subject)X-forward
>
>
> On Tue, 4 Jun 2002, Kevin Steves wrote:
>
> > On Tue, Jun 04, 2002 at 05:44:16PM +0200, Kerl, Andreas wrote:
> > > Yeah that's it,
> > > compiled with --with-xauth=...
> > > and it works
> >
> > ok, great.  configure detection for an xauth program is broken post 
> > 3.1 on solaris (for me it does not work on solaris 8), but i'm not
> > sure why.
> >
> > can someone look into this?
>
> Hmm, works here.
> ...
> tim at sun1 1% echo $DISPLAY
> localhost:10.0
> tim at sun1 2% uname -a
> SunOS sun1 5.8 Generic_108528-14 sun4m sparc SUNW,SPARCstation-5 
> tim at sun1 3% env | grep SSH SSH_CLIENT=192.168.34.65 34565 22 
> SSH_TTY=/dev/pts/3 ...
>
> Andreas, rerun configure without using the --with-xauth option and 
> tell me what "grep xauth config.log" says.
>
>
-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net

On Tue, 4 Jun 2002, Kerl, Andreas wrote:
> I use autoconf.
What version?
> Before configure I make clean.
>
> Config-log:
>
> configure:15449: checking for xauth
> configure:15482: result: no
Maybe lines 15449 to 15482 of your configure will give you a clue
as to what is going wrong.
>
> But xauth is in /usr/openwin/bin
>
>
> Andreas Kerl
-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net

Oh I think I'm wrong.
I thought autoconf is automatically used when I run
./configure
 
# autoconf -V
autoconf (GNU Autoconf) 2.52
Written by David J. MacKenzie.

I use the tar.gz from the offical openssh site.

Here the lines from configure:

# Check whether --with-xauth or --without-xauth was given.
if test "${with_xauth+set}" = set; then
  withval="$with_xauth"

                if test "x$withval" != "xno" ; then
                        xauth_path=$withval
                fi

else
_________________________________________________________________
 15449:               # Extract the first word of "xauth", so it can
be
a program name
 with args.
set dummy xauth; ac_word=$2
echo "$as_me:$LINENO: checking for $ac_word" >&5
echo $ECHO_N "checking for $ac_word... $ECHO_C" >&6
if test "${ac_cv_path_xauth_path+set}" = set; then
  echo $ECHO_N "(cached) $ECHO_C" >&6
else
  case $xauth_path in
  [\\/]* | ?:[\\/]*)
  ac_cv_path_xauth_path="$xauth_path" # Let the user override the test
with a pa
th.
  ;;
  *)
  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
for as_dir in
$PATH:/usr/X/bin:/usr/bin/X11:/usr/X11R6/bin:/usr/openwin/bin
do
  IFS=$as_save_IFS
  test -z "$as_dir" && as_dir=.
  for ac_exec_ext in '' $ac_executable_extensions; do
  if $as_executable_p "$as_dir/$ac_word$ac_exec_ext"; then
    ac_cv_path_xauth_path="$as_dir/$ac_word$ac_exec_ext"
    echo "$as_me:$LINENO: found $as_dir/$ac_word$ac_exec_ext"
>&5
    break 2
  fi
Done
done

  ;;
esac
fi
xauth_path=$ac_cv_path_xauth_path

if test -n "$xauth_path"; then
  echo "$as_me:$LINENO: result: $xauth_path" >&5
15482: echo "${ECHO_T}$xauth_path" >&6
__________________________________________________________________
else
  echo "$as_me:$LINENO: result: no" >&5
echo "${ECHO_T}no" >&6
fi

Andreas Kerl


-----Original Message-----
From: Tim Rice [mailto:tim at multitalents.net] 
Sent: Tuesday, June 04, 2002 7:31 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: RE: (no subject)X-forward


On Tue, 4 Jun 2002, Kerl, Andreas wrote:
> I use autoconf.
What version?
> Before configure I make clean.
>
> Config-log:
>
> configure:15449: checking for xauth
> configure:15482: result: no
Maybe lines 15449 to 15482 of your configure will give you a clue as to
what is going wrong.
>
> But xauth is in /usr/openwin/bin
>
>
> Andreas Kerl
-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net

Sorry I'm not a programmer  :-) ,
I didn't used autoconf.
I used the offical configure.


Andreas Kerl

Yes,that worked.

xauth was found.



Andreas Kerl


-----Original Message-----
From: Tim Rice [mailto:tim at multitalents.net] 
Sent: Tuesday, June 04, 2002 8:40 PM
To: Kerl, Andreas
Cc: openssh-unix-dev at mindrot.org
Subject: RE: (no subject)X-forward


On Tue, 4 Jun 2002, Kerl, Andreas wrote:
> Oh I think I'm wrong.
> I thought autoconf is automatically used when I run ./configure
>
> # autoconf -V
> autoconf (GNU Autoconf) 2.52
> Written by David J. MacKenzie.
Try renaming configure (mv configure configure.sav) and run autoconf.
Try the configure your autoconf builds.
>
> I use the tar.gz from the offical openssh site.
>
> Here the lines from configure:
[snip]
>
> On Tue, 4 Jun 2002, Kerl, Andreas wrote:
>
> > I use autoconf.
>
> What version?
>
> > Before configure I make clean.
> >
> > Config-log:
> >
> > configure:15449: checking for xauth
> > configure:15482: result: no
>
> Maybe lines 15449 to 15482 of your configure will give you a clue as 
> to what is going wrong.
>
> >
> > But xauth is in /usr/openwin/bin
> >
> >
> > Andreas Kerl
>
>
-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net