Mailing List Archive: 5.1p1 and X11 forwarding failing

5.1p1 and X11 forwarding failing

Feb 2, 2009, 2:49 PM

Post #1 of 4 (3090 views)

I'm really scratching my head on this one. The server
is running OpenSSH 5.1p1 on Solaris 9. The authentication
is via PAM if that matters.

# grep X11 sshd_config | sed '/^#/D'
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
#

Now I attach to my 'master' sshd and follow all children
to look for any evidence of "DISPLAY":

# truss -f -a -e -p 14923 2>&1 | grep DISPLAY

I then fire up ssh -X from a client machine, login, and
truss reports nothing.

If I perform the EXACT same test against stock Solaris 9
sshd (also authenticating against PAM), DISPLAY shows up
(in truss and in the shell) and X11 forwarding works fine.

Any ideas?

Re: 5.1p1 and X11 forwarding failing [ In reply to ]

marco.vannini at gmail

Feb 3, 2009, 9:37 AM

Post #2 of 4 (3020 views)

Permalink

In linux you should have installed xorg-x11-xauth-1.0.2-4 for
X11forward to work. There is a similar package on solaris ?

On Mon, Feb 2, 2009 at 11:49 PM, Jeff Blaine <jblaine@kickflop.net> wrote:
> I'm really scratching my head on this one. The server
> is running OpenSSH 5.1p1 on Solaris 9. The authentication
> is via PAM if that matters.
>
> # grep X11 sshd_config | sed '/^#/D'
> X11Forwarding yes
> X11DisplayOffset 10
> X11UseLocalhost yes
> #
>
> Now I attach to my 'master' sshd and follow all children
> to look for any evidence of "DISPLAY":
>
> # truss -f -a -e -p 14923 2>&1 | grep DISPLAY
>
> I then fire up ssh -X from a client machine, login, and
> truss reports nothing.
>
> If I perform the EXACT same test against stock Solaris 9
> sshd (also authenticating against PAM), DISPLAY shows up
> (in truss and in the shell) and X11 forwarding works fine.
>
> Any ideas?
>

Re: 5.1p1 and X11 forwarding failing [ In reply to ]

jblaine at kickflop

Feb 3, 2009, 1:02 PM

Post #3 of 4 (3003 views)

Permalink

That Linux package provides xauth

Solaris comes with /usr/openwin/bin/xauth

Our OpenSSH instance is configured to reference
/usr/openwin/bin/xauth

Marco Vannini wrote:
> In linux you should have installed xorg-x11-xauth-1.0.2-4 for
> X11forward to work. There is a similar package on solaris ?
>
> On Mon, Feb 2, 2009 at 11:49 PM, Jeff Blaine <jblaine@kickflop.net> wrote:
>> I'm really scratching my head on this one. The server
>> is running OpenSSH 5.1p1 on Solaris 9. The authentication
>> is via PAM if that matters.
>>
>> # grep X11 sshd_config | sed '/^#/D'
>> X11Forwarding yes
>> X11DisplayOffset 10
>> X11UseLocalhost yes
>> #
>>
>> Now I attach to my 'master' sshd and follow all children
>> to look for any evidence of "DISPLAY":
>>
>> # truss -f -a -e -p 14923 2>&1 | grep DISPLAY
>>
>> I then fire up ssh -X from a client machine, login, and
>> truss reports nothing.
>>
>> If I perform the EXACT same test against stock Solaris 9
>> sshd (also authenticating against PAM), DISPLAY shows up
>> (in truss and in the shell) and X11 forwarding works fine.
>>
>> Any ideas?
>>
>

Re: 5.1p1 and X11 forwarding failing [ In reply to ]

vadud3 at gmail

Feb 4, 2009, 2:57 PM

Post #4 of 4 (2994 views)

Permalink

On Mon, Feb 2, 2009 at 5:49 PM, Jeff Blaine <jblaine@kickflop.net> wrote:
> I'm really scratching my head on this one. The server
> is running OpenSSH 5.1p1 on Solaris 9. The authentication
> is via PAM if that matters.
>
> # grep X11 sshd_config | sed '/^#/D'
> X11Forwarding yes
> X11DisplayOffset 10
> X11UseLocalhost yes
> #
>
> Now I attach to my 'master' sshd and follow all children
> to look for any evidence of "DISPLAY":
>
> # truss -f -a -e -p 14923 2>&1 | grep DISPLAY
>
> I then fire up ssh -X from a client machine, login, and
> truss reports nothing.
>
> If I perform the EXACT same test against stock Solaris 9
> sshd (also authenticating against PAM), DISPLAY shows up
> (in truss and in the shell) and X11 forwarding works fine.
>
> Any ideas?

Need more data. Post the output here or to me as we wish

server: sshd -d -p 8000
client: ssh -X -v -p 8000 server

>

--
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu