[ale] SSH through firewall? How do I get X ?

Nomad the Wanderer nomad at orci.com
Thu Jan 7 15:25:42 EST 1999


It is there and no complaints at login.  I can execute "xauth" on both
machines but that's all I know.  The xauth on Dogbert was generated
about 3 logins ago.

Robert

Thus spake Eric Z. Ayers (eric at compgen.com):

> 
> Is the program 'xauth' installed and working on both machines?  Could
> it be that someting is wrong with one or the other .Xauthority files?
> (a file in your home directory)
> 
> -Eric.
> 
> Nomad the Wanderer writes:
>  >   It turns out that the known-hosts was bad.  I cleaned it up and
>  > reconnected.  Now I'm getting this:
>  > 
>  > /home/haro >xterm
>  > Xlib:  connection to "eb-medstat:10.0" refused by server
>  > Xlib:  Invalid MIT-MAGIC-COOKIE-1 key
>  > Error: Can't open display: eb-medstat:10.0
>  > 
>  > 
>  > Thoughts?
>  > 
>  > Robert
>  > 
>  > Thus spake Eric Z. Ayers (eric at compgen.com):
>  > 
>  > > 
>  > > running ssh -v is usually very illuminating, as well as looking in the 
>  > > syslog files on the machine running the server.
>  > > 
>  > > -Eric.
>  > > 
>  > > Nomad the Wanderer writes:
>  > >  >   Ok, you were right.  It just seems that Dogbert has something wrong.
>  > >  > Ratbert who is also in the DMZ works fine when I try to run it as myself.
>  > >  > However, if I run the command under sudo I get an error....  Thoughts?
>  > >  > 
>  > >  > Robert
>  > >  > 
>  > >  > Thus spake Eric Z. Ayers (eric at compgen.com):
>  > >  > 
>  > >  > > Oops - it looks like -x turns it OFF.  I think that you have to turn
>  > >  > > it on in ~/.ssh/config
>  > >  > > 
>  > >  > > Here's something in my config file:
>  > >  > > 
>  > >  > > #
>  > >  > > #
>  > >  > > Host                    myhost1
>  > >  > > #Compression            yes
>  > >  > > #CompressionLevel       9
>  > >  > > FallBackToRsh           no
>  > >  > > IdentityFile            ~/.ssh/identity.myhost1
>  > >  > > ForwardX11              yes
>  > >  > > 
>  > >  > > 
>  > >  > > Then, a regular 'ssh dogbert' should turn it on!
>  > >  > > 
>  > >  > > -Eric.
>  > >  > > 
>  > >  > > 
>  > >  > > Nomad the Wanderer writes:
>  > >  > >  >   When I did this it didn't complain that it couldn't run the
>  > >  > >  > xauth, but when I tried to run "xterm" it complained that the
>  > >  > >  > display wasn't set still.  I verified that $DISPLAY was empty.
>  > >  > >  > 
>  > >  > >  > Robert
>  > >  > >  > 
>  > >  > >  > Thus spake Eric Z. Ayers (eric at compgen.com):
>  > >  > >  > 
>  > >  > >  > > ssh -x dogbert
>  > >  > >  > > 
>  > >  > >  > > Then your display variable will automaticaly be set to something like 
>  > >  > >  > > dogbert:8
>  > >  > >  > > 
>  > >  > >  > > and when you display stuff, the results will come up on dilbert!
>  > >  > >  > > 
>  > >  > >  > > -ERic.
>  > >  > >  > > Nomad the Wanderer writes:
>  > >  > >  > >  > Ok,
>  > >  > >  > >  >   I have to machines,  dilbert and dogbert.  Dilbert is on my desktop.
>  > >  > >  > >  > Dogbert is in my server room, in a "DMZ" behind the firewall.  I can
>  > >  > >  > >  > not set my display as a "who" reports me as loggin in from the firewall.
>  > >  > >  > >  > Anyone know how to set it up so I can run my X back to Dilbert using
>  > >  > >  > >  > ssh?
>  > >  > >  > >  > 
>  > >  > >  > >  > Robert
>  > >  > >  > >  > ---------------------------------------------------------------------------
>  > >  > >  > >  > Robert L. Harris                |    Windows is to Unix 
>  > >  > >  > >  > Senior System Administrator II  |      what 'hooked on phonics'
>  > >  > >  > >  >   at Great West Life.           \_       is to Shakespeare
>  > >  > >  > >  > 
>  > >  > >  > >  > 
>  > >  > >  > >  > http://www.orci.com/~nomad
>  > >  > >  > >  > 
>  > >  > >  > >  > DISCLAIMER:
>  > >  > >  > >  >       These are MY OPINIONS ALONE.  I speak for no-one else.
>  > >  > >  > >  > 
>  > >  > >  > >  > FYI:
>  > >  > >  > >  >  perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'
>  > >  > >  > 
>  > >  > >  > ---------------------------------------------------------------------------
>  > >  > >  > Robert L. Harris                |    Windows is to Unix 
>  > >  > >  > Senior System Administrator II  |      what 'hooked on phonics'
>  > >  > >  >   at Great West Life.           \_       is to Shakespeare
>  > >  > >  > 
>  > >  > >  > 
>  > >  > >  > http://www.orci.com/~nomad
>  > >  > >  > 
>  > >  > >  > DISCLAIMER:
>  > >  > >  >       These are MY OPINIONS ALONE.  I speak for no-one else.
>  > >  > >  > 
>  > >  > >  > FYI:
>  > >  > >  >  perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'
>  > >  > 
>  > >  > ---------------------------------------------------------------------------
>  > >  > Robert L. Harris                |    Windows is to Unix 
>  > >  > Senior System Administrator II  |      what 'hooked on phonics'
>  > >  >   at Great West Life.           \_       is to Shakespeare
>  > >  > 
>  > >  > 
>  > >  > http://www.orci.com/~nomad
>  > >  > 
>  > >  > DISCLAIMER:
>  > >  >       These are MY OPINIONS ALONE.  I speak for no-one else.
>  > >  > 
>  > >  > FYI:
>  > >  >  perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'
>  > 
>  > ---------------------------------------------------------------------------
>  > Robert L. Harris                |    Windows is to Unix 
>  > Senior System Administrator II  |      what 'hooked on phonics'
>  >   at Great West Life.           \_       is to Shakespeare
>  > 
>  > 
>  > http://www.orci.com/~nomad
>  > 
>  > DISCLAIMER:
>  >       These are MY OPINIONS ALONE.  I speak for no-one else.
>  > 
>  > FYI:
>  >  perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'

---------------------------------------------------------------------------
Robert L. Harris                |    Windows is to Unix 
Senior System Administrator II  |      what 'hooked on phonics'
  at Great West Life.           \_       is to Shakespeare


http://www.orci.com/~nomad

DISCLAIMER:
      These are MY OPINIONS ALONE.  I speak for no-one else.

FYI:
 perl -e 'print $i=pack(c5,(41*2),sqrt(7056),(unpack(c,H)-2),oct(115),10);'






More information about the Ale mailing list