On Wed, 08 Dec 2004 10:14:08 -0800, Dan Stromberg <strombrg@xxxxxxxxxxxxxxx> wrote: > However, I'm finding that while I can (mostly?) reliably forward xauth > data and $DISPLAY from an RHEL 3 host to AIX 5.1, Solaris 8 and others, > it only works with Fedora Core 2 and Fedora Core 3 -some- of the time. Is your FC3 system the ssh client or the ssh server? Have your tried using the -v option to ssh? Or multiple -v -v -v options to get even more verbose output. In what manner does it "not work". Does the ssh itself fail to connect? Is the DISPLAY not getting set? Do the windows just never appear? Or is there an actual X11 protocol error someplace? Please provide more details. > I tried turning off iptables on the FC[23] sshd servers, but that didn't > help. Typically, X forwarding uses Unix domain sockets on the ssh-server side. That of course depends upon the OS and the sshd.config options. And the X messages are themselved tunneled through the ssh connection (port 22). On the client (X server) side you just need to allow loopback traffic. > I'm using "ssh -X -A". RHEL 3's ssh client doesn't appear to support -Y > yet. The -Y (ForwardX11Trusted) option is only needed on the ssh client (the box running the X server). And then it's only needed if the X server supports untrusted cookie authentication. I don't think that RHEL 3 needs that; and so -Y should not be needed there. You may be interested in looking at bug 138617 for some more insight into -Y and what it means: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=138617 Of course you could always try compiling a new ssh from the official sources (see http://www.openssh.org/). -- Deron Meranda
