search for: x11_request_forwarding_with_spoof

...s the log say the server denied the X11 request. The reason is to be found in ssh.c as recently as v 1.328: /* Request X11 forwarding if enabled and DISPLAY is set. */ display = getenv("DISPLAY"); if (options.forward_x11 && display != NULL) { If display is not NULL, x11_request_forwarding_with_spoofing() is called. If it fails, the error is logged. However, if display is NULL, processing continues. The command ("nedit" in this case) is executed and complains DISPLAY isn't set, but it's completely unclear why not. One reason sshd won't create a DISPLAY variable is...

Hi! Here is the patch to support tcp wrappers with x11-forwarded connections. The patch is for openssh-3.0.1p1 but it works fine with 2.9.9p2 too. I've understood that this will not be included in the official version because it adds complexity (?!) to openssh. Binding the forwarded port to localhost doesn't solve all problems. I've understood that you should also implement

...4053856 -0400 @@ -286,7 +286,7 @@ void channel_set_x11_refuse_time(u_int); int x11_connect_display(void); -int x11_create_display_inet(int, int, int, u_int *, int **); +int x11_create_display_inet(int, int, int, int, u_int *, int **); int x11_input_open(int, u_int32_t, void *); void x11_request_forwarding_with_spoofing(int, const char *, const char *, const char *, int); diff -Naur openssh-portable/servconf.c openssh-portable-maxdisplays/servconf.c --- openssh-portable/servconf.c 2016-06-01 21:14:01.820052926 -0400 +++ openssh-portable-maxdisplays/servconf.c 2016-06-01 21:14:22.976053858 -0400 @@ -96,6...

...01/12/05 20:52:05 @@ -197,8 +197,7 @@ /* x11 forwarding */ int x11_connect_display(void); -char *x11_create_display(int); -char *x11_create_display_inet(int, int); +int x11_create_display_inet(int, int); void x11_input_open(int, int, void *); void x11_request_forwarding(void); void x11_request_forwarding_with_spoofing(int, const char *, const char *); Index: channels.c =================================================================== RCS file: /var/cvs/openssh/channels.c,v retrieving revision 1.111 diff -u -r1.111 channels.c --- channels.c 2001/10/12 01:35:05 1.111 +++ channels.c 2001/12/05 20:52:24 @@ -239...

...nable local authentication information. */ - client_x11_get_proto(display, options.xauth_location, - options.forward_x11_trusted, &proto, &data); - /* Request forwarding with authentication spoofing. */ - debug("Requesting X11 forwarding with authentication spoofing."); - x11_request_forwarding_with_spoofing(id, display, proto, data); - /* XXX wait for reply */ - } - - if (cctx->want_agent_fwd && options.forward_agent) { - debug("Requesting authentication agent forwarding."); - channel_request_start(id, "auth-agent-req at openssh.com", 0); - packet_send(); - } + Ch...