ssh i x11forwarding
Paweł Lęcznar
maillistpld w gmail.com
Pon, 15 Kwi 2013, 15:45:43 CEST
witam,
czy obecnie działa komuś forwardowanie X'ów przez ssh? po stronie
serwera mam:
[root w server ~]# grep -v "^#" /etc/ssh/sshd_config | grep .
Port 22
AddressFamily any
PermitRootLogin no
AuthorizedKeysFile .ssh/authorized_keys
IgnoreRhosts yes
PasswordAuthentication yes
PermitEmptyPasswords no
GSSAPIAuthentication yes
GSSAPICleanupCredentials yes
UsePAM yes
AllowTcpForwarding yes
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost yes
UsePrivilegeSeparation sandbox # Default for new installations.
AcceptEnv LANG LC_* LANGUAGE TZ GIT_*
Subsystem sftp /usr/lib/openssh/sftp-server
po stronie klienta:
[root w laptop ~]# grep -v "^#" /etc/ssh/ssh_config | grep .
Host *
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no
ForwardAgent no
ForwardX11 yes
ForwardX11Trusted yes
StrictHostKeyChecking no
ServerAliveInterval 60
ServerAliveCountMax 10
TCPKeepAlive no
SendEnv LANG LC_* LANGUAGE TZ GIT_*
próba logowania wygląda tak (bez fragmentów nieskojarzonych z forwardem
x11):
[user w laptop ~]# ssh 172.16.0.1 -l user -X -vvv
...
debug2: x11_get_proto: /usr/bin/xauth list :0 2>/dev/null
debug1: Requesting X11 forwarding with authentication spoofing.
debug2: channel 0: request x11-req confirm 1
...
debug2: X11 forwarding request accepted on channel 0
...
[user w server ~]$ echo $DISPLAY
localhost:10.0
[user w server ~]$ iceweasel
debug1: client_input_channel_open: ctype x11 rchan 3 win 65536 max 16384
debug1: client_request_x11: request from 127.0.0.1 41516
debug2: fd 7 setting O_NONBLOCK
debug3: fd 7 is O_NONBLOCK
debug1: channel 1: new [x11]
debug1: confirm x11
debug1: client_input_channel_open: ctype x11 rchan 4 win 65536 max 16384
debug1: client_request_x11: request from 127.0.0.1 41517
debug2: fd 8 setting O_NONBLOCK
debug3: fd 8 is O_NONBLOCK
debug1: channel 2: new [x11]
debug1: confirm x11
[ i tutaj sobie wisi - nic się nie dzieje... ]
na serwerze i kliencie wszystkie pakiety mam aktualne, gdzie szukać
problemu?
Więcej informacji o liście pld-users-pl