similar to: [Bug 3197] New: reset X11 forward timeout

http://bugzilla.mindrot.org/show_bug.cgi?id=803 Summary: Security Bug: X11 Forwarding is more powerful than it needs to be. Product: Portable OpenSSH Version: -current Platform: All OS/Version: All Status: NEW Severity: major Priority: P2 Component: ssh AssignedTo: openssh-bugs

$ ssh -v OpenSSH_5.1, OpenSSL 0.9.8j 07 Jan 2009 $ ssh -vvv -X example.com [ Relevant debug info: ] debug1: Remote protocol version 2.0, remote software version OpenSSH_5.1 [OpenSSH_5.1, OpenSSL 0.9.7j 04 May 2006] debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-TLLOFKxvay/xauthfile generate :0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null Warning: untrusted X11 forwarding

On 2005-01-11 at 6:36:13 Darren Tucker said: > kochera at postfinance.ch wrote: > > We upgraded from 3.7.1p2 to 3.9p1. The behaviour of the X11 forwarding > > changed significantly, it is much slower. See below the truss output > > (server side which runs 3.7.1p2) an check for the timestamp (6 seconds > > delay). Do you have any idea what may causes this behaviour?

in reply to: 5.1p1 and X11 forwarding failing http://lists.mindrot.org/pipermail/openssh-unix-dev/2009-February/027183.html I have the impression that SSH is running xauth with a filename in a temporary directory that does not exist: local:~ $ ssh -vv user at remote ... debug2: x11_get_proto: /usr/bin/xauth -f /tmp/ssh-VskgWb3776/xauthfile generate :0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200

I am using the openssh-2.1.0p3-1 RPM, but i seem to have a similar problem. the debug doesn't say anything about "X11 connection uses different authentication protocol." it just kicks me out. I can't figure it out. very strange. please CC me, because i am not subscribed. thanks, e:~> echo $XAUTHORITY XAUTHORITY: Undefined variable. e:~> xauth list

http://bugzilla.mindrot.org/show_bug.cgi?id=185 Summary: --with-ipv4-default breaks X11-forwarding on HP-UX 10.20 Product: Portable OpenSSH Version: 3.1p1 Platform: HPPA OS/Version: HP-UX Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: openssh-unix-dev at mindrot.org

Dear people, since openssh-3.8.1p1 I experience problems with the automatic X11 forwarding. I installed openssh-3.9p1 yesterday hoping the problems should disappear, but alas no. It looks like the X11 autorization times out after some time, I don't know exactly but after half an hour it surely is gone. When I installed openssh-3.8.1p1 I also had opgraded openssl from 0.9.7c to 0.9.7d then,

http://bugzilla.mindrot.org/show_bug.cgi?id=338 Summary: X11 forwarding no longer works after upgrading from 2.9.9p2 to 3.4p1 Product: Portable OpenSSH Version: -current Platform: Sparc URL: ftp://gandalf.cc.purdue.edu/pub/ssh/ssh-X11-bug.tgz OS/Version: Solaris Status: NEW Severity: normal

Hello, I know this is likely to give me a brute force attack hit, but the only thing anyone can accomplish by ssh-ing to my machine is to provide me with a tunnel into your machine. So don't bother. Anyway, my server machine is running this: /usr/bin/ssh -X -R ${port}:localhost:22 -o BatchMode=yes \ -o StrictHostKeyChecking=no ${user}@${my_home_machine} On my local machine: ssh -vvv -X

The following message is a courtesy copy of an article that has been posted to comp.emacs.xemacs as well. [This message has been CC'ed to the OpenSSH list in a plea to at least consider supporting more advanced usages of Xauth] Chris Green <sprout at dok.org> writes: > Its not configurable behavior. It always generates a new random file > in /tmp. Then they should probably

Hello, I am new at ssh, think it is a simple config problem, but have not found the error. Wenn I connect from an client (winpc vai cygwin) to server A (hpup) the connectionon and xlogo ist okay. Wenn I connect from the same client to server B I got the following error message. The problem is only by starting xlogo, the connection via ssh to Server A+B ist okay. The sshd_config on server a+b is

I still don't understand the point of authenticating myself to my own local X server when using X11 forwarding, I tried: ssh -R /tmp/.X11-unix/X0:/tmp/.X11-unix/X0 user at server # and then DISPLAY=:0 xterm and everything is working fine without the mess with xauth, so why it is required to use use xauth when doing X11 forwarding with ssh?

I can't seem to get X11 forwarding to work. Similar problems seem to have been reported and possibly fixed with earlier versions of openssh, but I believe I have the latest release: openssh-server-2.9p1-1 for RedHat 6.2. When I connect with ssh -v, I get: pac2: Requesting X11 forwarding with authentication spoofing. pac2: Remote: X11 forwarding disabled in server configuration file. Warning:

Hi folks, I've got a problem with X11 forwarding on an AIX 5.2 system thats stumped me. I've installed the same patched + compiled installp package on all our aix boxes but one of them won't play ball with X11 ssh -X -v -v user at host gives (grepped out X11 looking lines) debug2: we sent a password packet, wait for reply debug1: Authentication succeeded (password). debug1:

This has to be a FAQ, but I can't find anything on it at the web site. I've installed openssh on several computers now and have yet to get X11 forwarding to work. I get the following when I log into a computer with ssh: Warning: Remote host denied X11 forwarding, perhaps xauth program could not be run on the server side. However: $ which xauth /usr/X11R6/bin/xauth Please reply by

Hi. I see this XAUTHORITY=/tmp/ssh-*/cookies issue has been discussed repeatedly, but I haven't seen a solution to the following problem. Remote user logs into firewall. On firewall, DISPLAY var set to secure channel, XAUTHORITY set to /tmp/ssh-*/cookies. X11 forwarding from firewall works fine. User logs into machine behind firewall, and sets DISPLAY var to firewall:X11DisplayOffset.0.

https://bugzilla.mindrot.org/show_bug.cgi?id=1785 Summary: configurable timeout for x11 cookies Product: Portable OpenSSH Version: 5.5p1 Platform: All OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: ssh AssignedTo: unassigned-bugs at mindrot.org ReportedBy:

I'm seeing that warning quite often. I can easily reproduce it by doing something like this: # for i in $(seq 50);do ssh <server> date&;done That's a cvs/ssh server and has 'MaxStartups 50' in /etc/ssh/sshd_config. Server sshd is: OpenSSH_4.3p2 Debian-9etch3 pat OpenSSH Client ssh is: OpenSSH_5.1p1 Debian-3, OpenSSL 0.9.8g 19 Oct 2007 I've also seen

On Thu, 15 Nov 2001, Dan Astoorian wrote: > Date: Thu, 15 Nov 2001 16:09:20 -0500 > From: Dan Astoorian <djast at cs.toronto.edu> > To: Ed Phillips <ed at UDel.Edu> > Subject: Re: X11 cookies and forwarding > > On Thu, 15 Nov 2001 15:46:22 EST, Ed Phillips writes: > > I'm guess I wasn't following the whole cookies discussion completely > >

I think I have resolved my problem, but having typed most of this I might as well send it. I have OpenSSH_2.5.1p2 which I am trying to build on Irix 5 In Irix /usr/include/paths.h _PATH_ROOTPATH and _PATH_USERPATH are defined. defines.h looks for USER_PATH and _PATH_STDPATH and misses this, so that sshd does not include the path for X11 when users login. I copied a chunk of ifdef viz. #ifdef