Mailinglist Archive: opensuse (1487 mails)
| < Previous | Next > |
Re: [opensuse] Re: 11.3 and ssh X forwarding not working
- From: Adam Tauno Williams <awilliam@xxxxxxxxxxxxx>
- Date: Sun, 01 Aug 2010 19:16:06 -0400
- Message-id: <1280704566.3312.11.camel@xxxxxxxxxxxxxxx>
On Sun, 2010-08-01 at 20:18 +0300, HG wrote:
Which is the correct solution - if a fix is to disable IPv6 then the fix
is broken.
If X forwarding doesn't work with IPv6 enabled the better solution is to
figure out why.
Do both machines have IPv6 addresses? `ip -6 addr`
Can the machines ping each other's IPv6 addresses? `ping6
fdb5:60da:9b8a:1:250:56ff:fea8:27e2` [assuming they are on the same
subnet]
If not then something is broken.
Are the firewalls blocking IPv6 traffic - generally they should mirror
the IPv4 configuration?
--
Adam Tauno Williams <awilliam@xxxxxxxxxxxxx> LPIC-1, Novell CLA
<http://www.whitemiceconsulting.com>
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
I suspect that this is the case with 11.3 too. I was checking theI have IPv6 disabled on 11.3 and on 11.1 on different machine and haveJust upgraded my home server to 11.3. Normal mode for it is headless,Ok, so I really don't know what is wrong, but fix was this... first
but I cannot seem to get X to work over ssh. I really don't know where
to look. So, here is what I have.
I enabled sshd at the install phase (opened the firewall, but
currently firewall is disabled altogether). Only change I did for the
/etc/ssh/sshd_config was to add "AllowGroups ssh_users" (which
includes me). Otherwise I noted that it already has "X11Forwarding
yes"
I login to the system from OS X or another older openSUSE with
ssh -X 192.168.1.2from OS X, I get this warning from both the new 11.3 as well as the
old openSUSE:
Warning: untrusted X11 forwarding setup failed: xauth key data not
generated
Warning: No xauth data; using fake authentication data for X11 forwarding.
However, that doesn't appear if I log in from the older openSUSE and
it doesn't seem to matter much as form the old server, this works
great:
xclock &However, from the new 11.3, all I get is "Error: Can't open display: "
What is wrong with the sshd in 11.3? How to fix this?
let's go back a little. I wrote that this is clean installation with
minimum changes. Well, one of the change was that in Global Network
settings, I removed the tick mark from "Enable IPv6" as the help said:
"To disable IPv6, uncheck this option (...). If the IPv6 protocol is
not used on your network, the response time can be faster."
Well, AFAIK, I'm not using IPv6 and I think that my router is not
supporting it (although, it might). However, seems that while SSH was
completely fine otherwise working without IPv6, the X forwarding
didn't work. Why? I have no idea. But that was the fix: I enabled it,
rebooted and X started to work over SSH just as it should
no problem with X forwarding (ssh -Y ...).
One thing I noticed quite some time ago (I guess, it was 11.1) that
when you disable IPv6 through Global Network Settings in Yast, the
file /etc/hosts still have some IPv6 definitions for local hosts and
some others.
This caused some problems until I removed these entries from
/etc/hosts manually.
hosts file and as I saw the IPv6 addresses there, I remembered that I
had disabled that and therefore went and enabled it again. So,
basically I think that disabling IPv6 breaks things and causes bugs to
show, but I don't know why or how... I just leave it on for now.
Which is the correct solution - if a fix is to disable IPv6 then the fix
is broken.
If X forwarding doesn't work with IPv6 enabled the better solution is to
figure out why.
Do both machines have IPv6 addresses? `ip -6 addr`
Can the machines ping each other's IPv6 addresses? `ping6
fdb5:60da:9b8a:1:250:56ff:fea8:27e2` [assuming they are on the same
subnet]
If not then something is broken.
Are the firewalls blocking IPv6 traffic - generally they should mirror
the IPv4 configuration?
--
Adam Tauno Williams <awilliam@xxxxxxxxxxxxx> LPIC-1, Novell CLA
<http://www.whitemiceconsulting.com>
OpenGroupware, Cyrus IMAPd, Postfix, OpenLDAP, Samba
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx
| < Previous | Next > |