[opensuse] Suse 12.3 - SSH X application server - X11 forwarding not working?
Hello All, I have just installed Suse 12.3 on a new DELL box. The installation process seems to take much longer than before. But one thing more noticeable is that X11 forwarding is not working.
From a client host,
ssh -X suse123-host I can log on okay, but echo $DISPLAY is not defined any more, whereas it works to another suse box. On the suse123-host, I have checked /etc/ssh/sshd_config, and made sure AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes Restarted sshd, still no joy. I have also found in yast - Security and Users - Security Centre and Hardening and turned Remote Access to the X server from Di to En, presumably means disabled to enabled. Again no joy. Did also check the doc: http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.ss... not that helpful. Does anyone has any idea on this? Below are some logs: ======================================================================= [root@aspre UsefulNotes]# cat /etc/issue # client os Scientific Linux release 6.4 (Carbon) Kernel \r on an \m [root@aspre UsefulNotes]# ssh -X surya-s2k # ssh to suse 11 host, works Last login: Thu Apr 25 15:46:17 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-s2k:~ # echo $DISPLAY localhost:10.0 surya-s2k:~ # cat /etc/issue Welcome to openSUSE 11.1 - Kernel \r (\l). surya-s2k:~ # exit logout Connection to surya-s2k closed. [root@aspre UsefulNotes]# ssh -X surya-egse # ssh to suse 12.3, DISPLAY env symbol lost Last login: Thu Apr 25 15:46:25 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-egse:~ # echo $DISPLAY surya-egse:~ # if [ "${DISPLAY}" == "" ]; then echo yes; fi yes surya-egse:~ # cat /etc/issue Welcome to openSUSE 12.3 "Dartmouth" - Kernel \r (\l). surya-egse:/etc/ssh # grep -v "^#" /etc/ssh/sshd_config AuthorizedKeysFile .ssh/authorized_keys PasswordAuthentication no UsePAM yes AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes Subsystem sftp /usr/lib/ssh/sftp-server AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL surya-egse:/etc/ssh # surya-egse:/etc/ssh # service sshd status sshd.service - OpenSSH Daemon Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled) Active: active (running) since Thu, 2013-04-25 15:46:07 BST; 17min ago Process: 2645 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS) Process: 3531 ExecStartPre=/usr/sbin/sshd-gen-keys-start (code=exited, status=0/SUCCESS) Main PID: 3536 (sshd) CGroup: name=systemd:/system/sshd.service â 3536 /usr/sbin/sshd -D Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Starting OpenSSH Daemon... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Started OpenSSH Daemon. Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on 0.0.0.... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on :: por... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: Accepted publickey for roo... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: pam_unix(sshd:session): se... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: Accepted publickey for roo... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: pam_unix(sshd:session): se... surya-egse:/etc/ssh # -- Scanned by iCritical. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Could be known issue. If you disable IPv6, you should set AddressFamily INET in sshd_conf Regards, -- Mark On Thu, Apr 25, 2013 at 6:11 PM, <peter.chiu@stfc.ac.uk> wrote:
Hello All,
I have just installed Suse 12.3 on a new DELL box.
The installation process seems to take much longer than before.
But one thing more noticeable is that X11 forwarding is not working.
From a client host,
ssh -X suse123-host
I can log on okay, but
echo $DISPLAY is not defined any more, whereas it works to another suse box.
On the suse123-host, I have checked /etc/ssh/sshd_config, and made sure
AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes
Restarted sshd, still no joy.
I have also found in yast - Security and Users - Security Centre and Hardening and turned Remote Access to the X server from Di to En, presumably means disabled to enabled.
Again no joy.
Did also check the doc: http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.ss... not that helpful.
Does anyone has any idea on this?
Below are some logs: ======================================================================= [root@aspre UsefulNotes]# cat /etc/issue # client os Scientific Linux release 6.4 (Carbon) Kernel \r on an \m
[root@aspre UsefulNotes]# ssh -X surya-s2k # ssh to suse 11 host, works Last login: Thu Apr 25 15:46:17 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-s2k:~ # echo $DISPLAY localhost:10.0 surya-s2k:~ # cat /etc/issue Welcome to openSUSE 11.1 - Kernel \r (\l).
surya-s2k:~ # exit logout Connection to surya-s2k closed. [root@aspre UsefulNotes]# ssh -X surya-egse # ssh to suse 12.3, DISPLAY env symbol lost Last login: Thu Apr 25 15:46:25 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-egse:~ # echo $DISPLAY surya-egse:~ # if [ "${DISPLAY}" == "" ]; then echo yes; fi yes surya-egse:~ # cat /etc/issue Welcome to openSUSE 12.3 "Dartmouth" - Kernel \r (\l).
surya-egse:/etc/ssh # grep -v "^#" /etc/ssh/sshd_config
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no
UsePAM yes
AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes
Subsystem sftp /usr/lib/ssh/sftp-server AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL
surya-egse:/etc/ssh #
surya-egse:/etc/ssh # service sshd status sshd.service - OpenSSH Daemon Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled) Active: active (running) since Thu, 2013-04-25 15:46:07 BST; 17min ago Process: 2645 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS) Process: 3531 ExecStartPre=/usr/sbin/sshd-gen-keys-start (code=exited, status=0/SUCCESS) Main PID: 3536 (sshd) CGroup: name=systemd:/system/sshd.service â 3536 /usr/sbin/sshd -D
Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Starting OpenSSH Daemon... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Started OpenSSH Daemon. Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on 0.0.0.... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on :: por... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: Accepted publickey for roo... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: pam_unix(sshd:session): se... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: Accepted publickey for roo... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: pam_unix(sshd:session): se... surya-egse:/etc/ssh #
-- Scanned by iCritical. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Thanks, Mark, found out that after a bit of search http://forums.fedoraforum.org/showthread.php?t=270333 thanks for explaining this too. Peter -----Original Message----- From: Mark Goldstein [mailto:goldstein.mark@gmail.com] Sent: 25 April 2013 16:31 Cc: OS-en Subject: Re: [opensuse] Suse 12.3 - SSH X application server - X11 forwarding not working? Could be known issue. If you disable IPv6, you should set AddressFamily INET in sshd_conf Regards, -- Mark On Thu, Apr 25, 2013 at 6:11 PM, <peter.chiu@stfc.ac.uk> wrote:
Hello All,
I have just installed Suse 12.3 on a new DELL box.
The installation process seems to take much longer than before.
But one thing more noticeable is that X11 forwarding is not working.
From a client host,
ssh -X suse123-host
I can log on okay, but
echo $DISPLAY is not defined any more, whereas it works to another suse box.
On the suse123-host, I have checked /etc/ssh/sshd_config, and made sure
AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes
Restarted sshd, still no joy.
I have also found in yast - Security and Users - Security Centre and Hardening and turned Remote Access to the X server from Di to En, presumably means disabled to enabled.
Again no joy.
Did also check the doc: http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/ cha.ssh.html not that helpful.
Does anyone has any idea on this?
Below are some logs: ======================================================================= [root@aspre UsefulNotes]# cat /etc/issue # client os Scientific Linux release 6.4 (Carbon) Kernel \r on an \m
[root@aspre UsefulNotes]# ssh -X surya-s2k # ssh to suse 11 host, works Last login: Thu Apr 25 15:46:17 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-s2k:~ # echo $DISPLAY localhost:10.0 surya-s2k:~ # cat /etc/issue Welcome to openSUSE 11.1 - Kernel \r (\l).
surya-s2k:~ # exit logout Connection to surya-s2k closed. [root@aspre UsefulNotes]# ssh -X surya-egse # ssh to suse 12.3, DISPLAY env symbol lost Last login: Thu Apr 25 15:46:25 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-egse:~ # echo $DISPLAY surya-egse:~ # if [ "${DISPLAY}" == "" ]; then echo yes; fi yes surya-egse:~ # cat /etc/issue Welcome to openSUSE 12.3 "Dartmouth" - Kernel \r (\l).
surya-egse:/etc/ssh # grep -v "^#" /etc/ssh/sshd_config
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no
UsePAM yes
AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes
Subsystem sftp /usr/lib/ssh/sftp-server AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL
surya-egse:/etc/ssh #
surya-egse:/etc/ssh # service sshd status sshd.service - OpenSSH Daemon Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled) Active: active (running) since Thu, 2013-04-25 15:46:07 BST; 17min ago Process: 2645 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS) Process: 3531 ExecStartPre=/usr/sbin/sshd-gen-keys-start (code=exited, status=0/SUCCESS) Main PID: 3536 (sshd) CGroup: name=systemd:/system/sshd.service â 3536 /usr/sbin/sshd -D
Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Starting OpenSSH Daemon... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Started OpenSSH Daemon. Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on 0.0.0.... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on :: por... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: Accepted publickey for roo... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: pam_unix(sshd:session): se... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: Accepted publickey for roo... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: pam_unix(sshd:session): se... surya-egse:/etc/ssh #
-- Scanned by iCritical. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
-- Mark Goldstein -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org -- Scanned by iCritical. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Found a solution - insert AddressFamily inet into sshd_config and restart. Peter -----Original Message----- From: Chiu, Peter (STFC,RAL,RALSP) Sent: 25 April 2013 16:11 To: SLE Cc: Chiu, Peter (STFC,RAL,RALSP) Subject: Suse 12.3 - SSH X application server - X11 forwarding not working? Hello All, I have just installed Suse 12.3 on a new DELL box. The installation process seems to take much longer than before. But one thing more noticeable is that X11 forwarding is not working.
From a client host,
ssh -X suse123-host I can log on okay, but echo $DISPLAY is not defined any more, whereas it works to another suse box. On the suse123-host, I have checked /etc/ssh/sshd_config, and made sure AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes Restarted sshd, still no joy. I have also found in yast - Security and Users - Security Centre and Hardening and turned Remote Access to the X server from Di to En, presumably means disabled to enabled. Again no joy. Did also check the doc: http://doc.opensuse.org/documentation/html/openSUSE/opensuse-security/cha.ss... not that helpful. Does anyone has any idea on this? Below are some logs: ======================================================================= [root@aspre UsefulNotes]# cat /etc/issue # client os Scientific Linux release 6.4 (Carbon) Kernel \r on an \m [root@aspre UsefulNotes]# ssh -X surya-s2k # ssh to suse 11 host, works Last login: Thu Apr 25 15:46:17 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-s2k:~ # echo $DISPLAY localhost:10.0 surya-s2k:~ # cat /etc/issue Welcome to openSUSE 11.1 - Kernel \r (\l). surya-s2k:~ # exit logout Connection to surya-s2k closed. [root@aspre UsefulNotes]# ssh -X surya-egse # ssh to suse 12.3, DISPLAY env symbol lost Last login: Thu Apr 25 15:46:25 2013 from aspre.badc.rl.ac.uk Have a lot of fun... surya-egse:~ # echo $DISPLAY surya-egse:~ # if [ "${DISPLAY}" == "" ]; then echo yes; fi yes surya-egse:~ # cat /etc/issue Welcome to openSUSE 12.3 "Dartmouth" - Kernel \r (\l). surya-egse:/etc/ssh # grep -v "^#" /etc/ssh/sshd_config AuthorizedKeysFile .ssh/authorized_keys PasswordAuthentication no UsePAM yes AllowAgentForwarding yes AllowTcpForwarding yes X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes Subsystem sftp /usr/lib/ssh/sftp-server AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT AcceptEnv LC_IDENTIFICATION LC_ALL surya-egse:/etc/ssh # surya-egse:/etc/ssh # service sshd status sshd.service - OpenSSH Daemon Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled) Active: active (running) since Thu, 2013-04-25 15:46:07 BST; 17min ago Process: 2645 ExecReload=/bin/kill -HUP $MAINPID (code=exited, status=0/SUCCESS) Process: 3531 ExecStartPre=/usr/sbin/sshd-gen-keys-start (code=exited, status=0/SUCCESS) Main PID: 3536 (sshd) CGroup: name=systemd:/system/sshd.service â 3536 /usr/sbin/sshd -D Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Starting OpenSSH Daemon... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk systemd[1]: Started OpenSSH Daemon. Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on 0.0.0.... Apr 25 15:46:07 surya-egse.ag.rl.ac.uk sshd[3536]: Server listening on :: por... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: Accepted publickey for roo... Apr 25 15:46:25 surya-egse.ag.rl.ac.uk sshd[3537]: pam_unix(sshd:session): se... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: Accepted publickey for roo... Apr 25 16:00:16 surya-egse.ag.rl.ac.uk sshd[3674]: pam_unix(sshd:session): se... surya-egse:/etc/ssh # -- Scanned by iCritical. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (2)
-
Mark Goldstein -
peter.chiu＠stfc.ac.uk