[opensuse] Re: envvar DISPLAY not set on bash invocation fr/sshd
Linda Walsh wrote:
LOCAL: lw> printenv DISPLAY :0 WORKING: lw> ssh working working:lw> echo "DISPLAY=$DISPLAY" DISPLAY=localhost:14.0 NOT WORKING: lw> ssh fail fail:lw> echo "DISPLAY=$DISPLAY" DISPLAY=
I don't see how it could be on the client machine (it 'works' to another 'remote' machine as well). It's not in /etc/ssh/sshd_config as it is the same except for the "ListenAddress". the /etc/rc.d/sshd scripts are the same as are the /etc/sysconfig/ssh files on the two systems. /etc/{profile,bash.bashrc} also the same on the two systems.
Maybe some login config...I wouldn't think the PAM_LIB would filter. Anyway, that's where the problem stands.
What's the output of "ssh -v -v fail"? There should be lines like debug2: x11_get_proto: /usr/X11R6/bin/xauth list :0.0 . 2>/dev/null debug1: Requesting X11 forwarding with authentication spoofing. debug2: channel 0: request x11-req confirm 0 (These are three lines, in case it gets broken by my MUA.) Is there additional output? Maybe your X authentication fails. Is your ~/.Xauthority on `fail' writable by you? Call "xauth info" on `fail' to check that. It must output something like puma:bin $ xauth info Authority file: /home/schrod/.Xauthority File new: no File locked: no Number of entries: 640 Changes honored: yes Changes made: no Current input: (argv):1 (As you can see, I do a lot of remote X connections... :-) Btw, it is definitively not necessary to set $DISPLAY on the local host before calling ssh, as recommended by Sam. ":0" is a perfectly good value for a local session. Your ssh client can connect to :0 fine (this is done via Unix domain sockets), no need to force a TCP connection to port 6000. In fact, Sam's proposal is not good performance-wise, as it turns a /unix X session into a TCP X session and adds another TCP hop to the forwarded X session, increasing latency. Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Joachim Schrod wrote:
Linda Walsh wrote:
LOCAL: lw> printenv DISPLAY :0 WORKING: lw> ssh working working:lw> echo "DISPLAY=$DISPLAY" DISPLAY=localhost:14.0 NOT WORKING: lw> ssh fail fail:lw> echo "DISPLAY=$DISPLAY" DISPLAY=
I don't see how it could be on the client machine (it 'works' to another 'remote' machine as well). It's not in /etc/ssh/sshd_config as it is the same except for the "ListenAddress". the /etc/rc.d/sshd scripts are the same as are the /etc/sysconfig/ssh files on the two systems. /etc/{profile,bash.bashrc} also the same on the two systems.
Maybe some login config...I wouldn't think the PAM_LIB would filter. Anyway, that's where the problem stands.
What's the output of "ssh -v -v fail"? There should be lines like
debug2: x11_get_proto: /usr/X11R6/bin/xauth list :0.0 . 2>/dev/null debug1: Requesting X11 forwarding with authentication spoofing. debug2: channel 0: request x11-req confirm 0
(These are three lines, in case it gets broken by my MUA.) Is there additional output? Maybe your X authentication fails. Is your ~/.Xauthority on `fail' writable by you?
Call "xauth info" on `fail' to check that. It must output something like puma:bin $ xauth info Authority file: /home/schrod/.Xauthority File new: no File locked: no Number of entries: 640 Changes honored: yes Changes made: no Current input: (argv):1
(As you can see, I do a lot of remote X connections... :-)
Btw, it is definitively not necessary to set $DISPLAY on the local host before calling ssh, as recommended by Sam. ":0" is a perfectly good value for a local session. Your ssh client can connect to :0 fine (this is done via Unix domain sockets),
But she's not talking about ssh-ing back to the local machine.. she's using ssh to go to another host.
no need to force a TCP connection to port 6000. In fact, Sam's proposal is not good performance-wise, as it turns a /unix X session into a TCP X session and adds another TCP hop to the forwarded X session, increasing latency.
-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Joachim Schrod wrote:
What's the output of "ssh -v -v fail"? There should be lines like
debug2: x11_get_proto: /usr/X11R6/bin/xauth list :0.0 . 2>/dev/null debug1: Requesting X11 forwarding with authentication spoofing. debug2: channel 0: request x11-req confirm 0 ... Call "xauth info" on `fail' to check that.
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2). The 'Fail'ing machine doesn't run an X-server. It is only 'logged into' remotely and has no desktop, so it didn't have an X server installed. Sigh.... I guess I have to install the Xserver now, even though it's on a machine that runs no server. Brilliant! Oh well...thanks...and now we know why my upgrades are painful -- programs keep getting shuffled around randomly out of one RPM into another; moved out of 'X11-support files' (x11-libs) in with the 'X-Server files', even though xauth is needed by clients -- not by the server (i.e. xauth won't run unless the server is already running and one doesn't need xauth to start the server (AFAIK)). Thanks very much for the help! Linda -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Linda Walsh writes:
Joachim Schrod wrote:
What's the output of "ssh -v -v fail"? There should be lines like
debug2: x11_get_proto: /usr/X11R6/bin/xauth list :0.0 . 2>/dev/null debug1: Requesting X11 forwarding with authentication spoofing. debug2: channel 0: request x11-req confirm 0 ... Call "xauth info" on `fail' to check that.
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2). The 'Fail'ing machine doesn't run an X-server. It is only 'logged into' remotely and has no desktop, so it didn't have an X server installed.
Sigh.... I guess I have to install the Xserver now, even though it's on a machine that runs no server. Brilliant!
I don't think you need to install the server package. xorg-x11 contains the core applications, not the server. I.e., stuff like xlsfonts, xwininfo, I'd install xorg-x11, that draws all relevant xorg-x11-lib* packages, and that should be enough to go. Since you really expect X sessions to work in your remote connection, it's probably sensible to have core applications like xhost, xev, et.al. available anyhow.
Oh well...thanks...and now we know why my upgrades are painful -- programs keep getting shuffled around randomly out of one RPM into another; moved out of 'X11-support files' (x11-libs) in with the 'X-Server files', even though xauth is needed by clients -- not by the server (i.e. xauth won't run unless the server is already running and one doesn't need xauth to start the server (AFAIK)).
Yes, the shuffling around bite me quite often as well; after my last 10.3 installation on my notebook I didn't have a working OpenOffice any more, owing to rpm reshuffling. And since I use it seldomly, I discovered that at a customer's site... :-( Anyway, nice that it works for you, Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, 2008-04-01 at 11:22 -0700, Linda Walsh wrote:
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2). The 'Fail'ing machine doesn't run an X-server. It is only 'logged into' remotely and has no desktop, so it didn't have an X server installed.
Sigh.... I guess I have to install the Xserver now, even though it's on a machine that runs no server. Brilliant!
xorg-x11 neither contains nor requires the server to be installed. The server is in xorg-x11-server Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tue, 2008-04-01 at 11:22 -0700, Linda Walsh wrote:
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2).
By the way, where do you get your versions? 10.3 contains 6.9 and 11.0 has 7.3 Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Anders Johansson wrote:
On Tue, 2008-04-01 at 11:22 -0700, Linda Walsh wrote:
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2).
By the way, where do you get your versions? 10.3 contains 6.9 and 11.0 has 7.3
That's odd - einstein: /home/jjs (tty/dev/pts/4): bash: 1006 > rpm -q xorg-x11 xorg-x11-7.2-135.4 einstein: /home/jjs (tty/dev/pts/4): bash: 1007 > cat /etc/SuSE-release openSUSE 10.3 (i586) VERSION = 10.3 Joe -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Tuesday 01 April 2008 22:05:15 Sloan wrote:
Anders Johansson wrote:
On Tue, 2008-04-01 at 11:22 -0700, Linda Walsh wrote:
Arg! SuSE moved the location of 'xauth' out of RPM "xorg-x11-libs" (v6.8), which one would expect to need if one wanted to run X programs, ---> into RPM "xorg-x11" (v7.2).
By the way, where do you get your versions? 10.3 contains 6.9 and 11.0 has 7.3
That's odd -
Yes it is, I was looking at the wrong machine, which was not running 10.3 I'll go to sleep now :) Anders -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (5)
-
Anders Johansson -
Joachim Schrod -
Linda Walsh -
Sam Clemens -
Sloan