search for: forwardx11

Hi OpenSSH developers I use OpenSSH under FreeBSD. It's cool and useful for me. By the way, sample line of ForwardX11 in ssh_config was not fit for default setting in readconf.c. I want to change ssh_config. ---------- In ssh source (src/usr.bin/ssh/readconf.c), currently ForwardX11 is disabled. 731 if (options->forward_x11 == -1) 732 options->forward_x11 = 0;...

Because ForwardX11 and ForwardAgent are so useful but introduce risk when used to a not well-secured server, I added a "warn" value to the ForwardX11 and ForwardAgent options which causes the ssh client to print a big warning whenever the forwarding is actually used. I plan to make "ForwardX11=warn&qu...

...ig that allows X11 forwarding to _some_ hosts by default, and not others, viz: ssh baz X11 forwarded ssh baz.my.domain X11 forwarded ssh biff.notmydom.com not forwarded ie I want to trust hosts in my domain but not outside it. I tried various orderings of Host * ForwardX11 yes Host *.my.domain ForwardX11 yes Host *.* ForwardX11 no but couldn't find anything that seemed to work as desired. In particular, it seems it is not possible to override X11 forwarding again once one of the entries has turned it on. Take the notmydomain.com case - it matches *,...

Hello i have a problem on CentOS 4 with starting remote x application on remote CentOS 3 od Solaris 9 boxes. The problem is: When I run it from CentOS 3 it's OK form CentOS 4 I cannot find a bad word in logs ... My local machine stoping firewall [root at klima-pc ~]# service iptables stop [root at klima-pc ~]# iptables-save [root at klima-pc ~]# SELinux is OFF I am connecting by ssh

Hi I think there is a problem is OpenSSH_2.9.9p2. Suppose I have in /etc/ssh/ssh_config just this and nothing more: Host * ForwardX11 yes and in ~/.ssh/config: Host * ForwardX11 no ssh -v tells they are read ok: debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Reading configuration data /home/kaukasoi/.ssh/config debug1: Applying options for * but still it opens the X channel:...

Hi, I have a VM with a git repository whose origin is on github. I have several keys known to github, so I needed to set git's core.sshcommand config parameter in the repository to something like this: ssh -i ~/.ssh/id_ed25519_github2 But it meant that I needed to copy that key to the VM. The same key is available via my forwarded ssh-agent connection. Is it possible to tell ssh to use

...hacked); back-version peers have openssh-3.5p1, XFree86-4.3.0-115, etc. from SuSE 8.2. Symptoms: 1. When the client and server versions are unequal, the Kerberos ticket is not accepted for authentication. All the clients have PreferredAuthentications gssapi-with-mic, gssapi, others. 2. When ForwardX11 is true (ssh -X switch), ForwardX11Trusted is at its default value (false), the client is 3.8p1, and the server is 3.5p1, most X Window System clients work OK, but the following fail with the indicated obscure error messages: xmag BadDrawable (infinite loop of this error) xwd...

...assified OS: Linux Reporter: openssh at richardneill.org Hardware: amd64 Status: NEW Version: 5.9p1 Component: ssh Product: Portable OpenSSH My (simplified) .ssh/config file contains: ------ Host * [Default opts] ForwardX11 yes Host galaxy User root ForwardX11 no ------ If I then run "ssh -v galaxy", it correctly shows that it is picking up the "root" option, but it is failing to pick up the host-specific override to turn off ForwardX11. (What I have is a system-wide default to no X11 Fo...

...47 @@ -98,7 +98,7 @@ then echo echo "There are still ssh processes running. Please shut them down first." echo - exit 1 + #exit 1 fi # Check for ${SYSCONFDIR} directory @@ -234,9 +234,9 @@ then # Site-wide defaults for various options # Host * -# ForwardAgent yes -# ForwardX11 yes -# RhostsAuthentication yes +# ForwardAgent no +# ForwardX11 no +# RhostsAuthentication no # RhostsRSAAuthentication yes # RSAAuthentication yes # PasswordAuthentication yes @@ -244,22 +244,14 @@ then # UseRsh no # BatchMode no # CheckHostIP yes -# StrictHostKeyCheck...

Hi, I just grabed the 2.9p2 and can't forward X11 connections. This worked fine for me under 2.9p1 but with 2.9p2 it seems that $XAUTHORITY isn't getting set and when I try and set it manually connections to the Xserver still fail with: debug1: X11 connection uses different authentication protocol. debug1: X11 rejected 1 i1/o16 Verbose debugs below. client: OpenSSH_2.9p1, SSH

...'' in debian/rules . disable motd & lastlogin messages if HAVE_PAM sshd.pam . Apparently this one works well, but I don't know how widespread pam_unix.o is, so perhaps offering it as an alternative, or as comments in the file sshd_config: . enable ForwardX11. I cannot see a reason to have this disabled on the server, and it's a pain having to switch it back on all the time. ssh-copy-id & ssh-copy-id.1 . A script that uses ssh to install one's identity into a remote authorized_keys, and makes sure that the permissio...

...so options set in ~/.ssh/config took precedence over system-wide defaults. In 2.9.9, the system-wide file seems to be read first, contrary to the man page (cf. ssh.c ll. 631-632). It seems to me that the old behaviour made more sense. (I discovered the change because I could not override a "ForwardX11" option for a particular host when it was specified in the global client config file for all hosts.) Is this a deliberate change, and the man page hasn't been updated? Or should ssh.c be corrected to read the system-wide config file after the per-user config file? -- Dan Astoorian...

...lave sessions. Any thought? The ~/.ssh/config ib below. Host somehost-master ControlMaster yes ControlPath ~/.ssh/somehost.sock HostbasedAuthentication no HostName somehost Host somehost-slave ControlPath ~/.ssh/somehost.sock Host * Ciphers blowfish-cbc,aes128-cbc ForwardAgent no ForwardX11 yes ServerAliveInterval 300 -- Iain Morgan

...ssh.1 7 May 2011 23:20:25 -0000 1.319 +++ ssh.1 25 Aug 2011 19:24:29 -0000 @@ -419,11 +419,13 @@ For full details of the options listed b .It ConnectTimeout .It ControlMaster .It ControlPath +.It ControlPersist .It DynamicForward .It EscapeChar .It ExitOnForwardFailure .It ForwardAgent .It ForwardX11 +.It ForwardX11Timeout .It ForwardX11Trusted .It GatewayPorts .It GlobalKnownHostsFile @@ -438,6 +440,7 @@ For full details of the options listed b .It IdentityFile .It IdentitiesOnly .It IPQoS +.It KbdInteractiveAuthentication .It KbdInteractiveDevices .It KexAlgorithms .It LocalCommand

Hi everyone! Does anyone use, rsync, under windows, without Cygwin? When I type something like this: rsync -auvlHI --delete --partial --modify-window=2 --log-format=" %t %o %l %f " --stats -vv -e "ssh -o ForwardX11=no -vv -i "e:/program/sinc/.ssh/sinc_rsa" -l USER" "e:/program" SERVER:dir_dest rsync answer me with: ssh: e: no address associated with name rsync: read error: Connection reset by peer (104) rsync error: error in rsync protocol data stream (code 12) at io.c(584) I cou...

...0) | ## this works still | | qplot(1:10, 1:10) + xlab("gr??e") | ## ERROR `---- My setup: - locally: Linux (Debian GNU/Linux 9) - remotely Linux (RHEL Server release 7.3 (Maipo) (Maybe) relevant bits of my .ssh/config: ,---- | Host theserver | HostName XXX.XXX.XXX.XXX | ForwardX11 yes | ForwardX11Timeout 596h | IdentityFile ~/.ssh/id_rsa | IdentitiesOnly yes | ForwardAgent yes | ServerAliveInterval 300 `---- Thanks in advance for your help! Best, Andreas

.... In the moment to export X from the server this message show me: [root at server]# mysql-administrator (mysql-administrator-bin:19124): Gtk-WARNING **: cannot open display: The /etc/ssh/sshd_config have X11Forwarding yes and the /etc/ssh/ssh_config have Host * GSSAPIAuthentication yes ForwardX11 yes What's the problem? Thanks -- Cristofer Reyes Aguilera linux-user #353991 http://www.inf.utfsm.cl/~crreyes Laboratorio de Computacion, Departamento de Informatica, UTFSM crreyes (at) inf (dot) utfsm (dot) cl -------------- next part -------------- A non-text at...

I'm running a headless Linux installation (FC11) on Amazon EC2 and need to run some console-based (no window) 32-bit DOS executables... I've been running this fine for the past couple years on another installation (FC10) with v1.1.23, by setting the "TERM" environment variable to "xterm" and I believe it ran the "tty" graphics-driver and worked just great.

Hi, I get this message on the latest Debian potato for i386. --> ssh -f localhost xterm sb at localhost's password: --> xterm Xt error: Can't open display: That happens also when connecting to another linux box: --> ssh -f box2 /usr/X11R6/bin/xterm --> /usr/X11R6/bin/xterm Xt error: Can't open display: The $DISPLAY is :0.0 for box1 undefined for box2 after

...er-specific file # 3. system-wide file # Any configuration value is only changed the first time it is set. # Thus, host-specific definitions should be at the beginning of the # configuration file, and defaults at the end. # Site-wide defaults for various options # Host * # ForwardAgent yes # ForwardX11 yes # RhostsAuthentication yes # RhostsRSAAuthentication yes # RSAAuthentication yes # PasswordAuthentication yes # FallBackToRsh yes # UseRsh no # BatchMode no # CheckHostIP yes # StrictHostKeyChecking no # IdentityFile ~/.ssh/identity # Port 22 # Protocol 2,1 # Cipher 3d...