[opensuse] openSUSE 10.3, ssh and X11 forwarding

Roger Oberholtzer

9 Jun 2010 9 Jun '10

10:36

I am trying to run a remote X application on a 10.3 system. There is a problem connecting to the display from the system I ssh into. I do this all the time, and usually there is no problem. But I have a system that is not working and I do not know why. Perhaps I have forgotten a step in 10.3. I have edited /etc/ssh/ssh_config on the system I ssh from, setting: Host * ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes There is nothing in ~/.ssh/ that overrides this. When I connect to another system with ssh, I would expect the DISPLAY variable to be something like localhost:11.0 But that is not the case. In addition, I would expect to see a port listener on the system I connect from, in this case on port 6011. There is no such thing. I also tried the older method of setting DISPLAY on the remote system to refer to the system I want the app to display on. This does not work either. I ran xhost + on that system. Once again, I would expect to see a port listener on port 6000 that can be connected to from other than localhost. I do not see this. Could there be something on the system I am ssh-ing to that keeps the DISPLAY variable from being set? I am in a real bind as I did not expect this problem and need to run the app urgently! Any suggestions are appreciated! -- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Show replies by date

Johannes Mueller-Lahn

9 Jun 9 Jun

10:48

Hello, I had that case on SLES11. I installed "xorg-x11-xauth" via yast, afterwards I could do a ssh -X -l root <remote> and then Display forwarding worked for me. I dont know how this behaves on 10.3. Best regards, Johannes Müller-Lahn --- Heinz Tröber GmbH & Co KG / Chief Information Officer Sitz: Hamburg / Amtsgericht Hamburg HRB 39527 Geschäftsführer: Klaus Tröber, Reza Etehad Ust.ID Nr: DE 118433283 Volksdorfer Weg 186 / D-22393 Hamburg Tel: 0049 40 - 601 715 96 - Fax: 0049 40 - 601 715 78 johannes.mueller-lahn@troeber.com / http://www.troeber.com Roger Oberholtzer hat am 9. Juni 2010 um 12:36 geschrieben:

...

I am trying to run a remote X application on a 10.3 system. There is a problem connecting to the display from the system I ssh into. I do this all the time, and usually there is no problem. But I have a system that is not working and I do not know why. Perhaps I have forgotten a step in 10.3.

I have edited /etc/ssh/ssh_config on the system I ssh from, setting:

Host * ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes

There is nothing in ~/.ssh/ that overrides this.

When I connect to another system with ssh, I would expect the DISPLAY variable to be something like localhost:11.0 But that is not the case. In addition, I would expect to see a port listener on the system I connect from, in this case on port 6011. There is no such thing.

I also tried the older method of setting DISPLAY on the remote system to refer to the system I want the app to display on. This does not work either. I ran xhost + on that system. Once again, I would expect to see a port listener on port 6000 that can be connected to from other than localhost. I do not see this.

Could there be something on the system I am ssh-ing to that keeps the DISPLAY variable from being set?

I am in a real bind as I did not expect this problem and need to run the app urgently! Any suggestions are appreciated!

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Roger Oberholtzer

12:14

On Wed, 2010-06-09 at 12:48 +0200, Johannes Mueller-Lahn wrote:

...

Hello,

I had that case on SLES11. I installed "xorg-x11-xauth" via yast, afterwards I could do a ssh -X -l root <remote> and then Display forwarding worked for me. I dont know how this behaves on 10.3.

There is no xorg-x11-xauth package on the 10.3. Too bad. Perhaps there is still some missing package. I so did not expect this. Timing for this could not be worse...

...

Best regards,

Johannes Müller-Lahn

--- Heinz Tröber GmbH & Co KG / Chief Information Officer Sitz: Hamburg / Amtsgericht Hamburg HRB 39527 Geschäftsführer: Klaus Tröber, Reza Etehad Ust.ID Nr: DE 118433283

Volksdorfer Weg 186 / D-22393 Hamburg Tel: 0049 40 - 601 715 96 - Fax: 0049 40 - 601 715 78 johannes.mueller-lahn@troeber.com / http://www.troeber.com

Roger Oberholtzer hat am 9. Juni 2010 um 12:36 geschrieben:

...
I am trying to run a remote X application on a 10.3 system. There is a problem connecting to the display from the system I ssh into. I do this all the time, and usually there is no problem. But I have a system that is not working and I do not know why. Perhaps I have forgotten a step in 10.3.

I have edited /etc/ssh/ssh_config on the system I ssh from, setting:

Host * ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes

There is nothing in ~/.ssh/ that overrides this.

When I connect to another system with ssh, I would expect the DISPLAY variable to be something like localhost:11.0 But that is not the case. In addition, I would expect to see a port listener on the system I connect from, in this case on port 6011. There is no such thing.

I also tried the older method of setting DISPLAY on the remote system to refer to the system I want the app to display on. This does not work either. I ran xhost + on that system. Once again, I would expect to see a port listener on port 6000 that can be connected to from other than localhost. I do not see this.

Could there be something on the system I am ssh-ing to that keeps the DISPLAY variable from being set?

I am in a real bind as I did not expect this problem and need to run the app urgently! Any suggestions are appreciated!

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Roger Oberholtzer

14:15

On Wed, 2010-06-09 at 14:14 +0200, Roger Oberholtzer wrote:

...

On Wed, 2010-06-09 at 12:48 +0200, Johannes Mueller-Lahn wrote:

...
Hello,

I had that case on SLES11. I installed "xorg-x11-xauth" via yast, afterwards I could do a ssh -X -l root <remote> and then Display forwarding worked for me. I dont know how this behaves on 10.3.

There is no xorg-x11-xauth package on the 10.3. Too bad. Perhaps there is still some missing package. I so did not expect this. Timing for this could not be worse...

I have now verified that a working source computer (the machine I ssh from) fails against the host I want to run an X app from. When the ssh connection is made, the two machines must, it seems, agree on something before the ssh-from machine will set up the X port. It seems that is failing. So, perhaps there is something mussing on the system I ssh into that makes this not work. It is a rather scaled-down system. ssh is of course installed. Is there anything else that needs to be installed on the ssh destination for X forwarding to work?

...

...
Best regards,

Johannes Müller-Lahn

--- Heinz Tröber GmbH & Co KG / Chief Information Officer Sitz: Hamburg / Amtsgericht Hamburg HRB 39527 Geschäftsführer: Klaus Tröber, Reza Etehad Ust.ID Nr: DE 118433283

Volksdorfer Weg 186 / D-22393 Hamburg Tel: 0049 40 - 601 715 96 - Fax: 0049 40 - 601 715 78 johannes.mueller-lahn@troeber.com / http://www.troeber.com

Roger Oberholtzer hat am 9. Juni 2010 um 12:36 geschrieben:

...
I am trying to run a remote X application on a 10.3 system. There is a problem connecting to the display from the system I ssh into. I do this all the time, and usually there is no problem. But I have a system that is not working and I do not know why. Perhaps I have forgotten a step in 10.3.

I have edited /etc/ssh/ssh_config on the system I ssh from, setting:

Host * ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes

There is nothing in ~/.ssh/ that overrides this.

When I connect to another system with ssh, I would expect the DISPLAY variable to be something like localhost:11.0 But that is not the case. In addition, I would expect to see a port listener on the system I connect from, in this case on port 6011. There is no such thing.

I also tried the older method of setting DISPLAY on the remote system to refer to the system I want the app to display on. This does not work either. I ran xhost + on that system. Once again, I would expect to see a port listener on port 6000 that can be connected to from other than localhost. I do not see this.

Could there be something on the system I am ssh-ing to that keeps the DISPLAY variable from being set?

I am in a real bind as I did not expect this problem and need to run the app urgently! Any suggestions are appreciated!

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

Roger Oberholtzer

14:25

On Wed, 2010-06-09 at 16:15 +0200, Roger Oberholtzer wrote:

...

I have now verified that a working source computer (the machine I ssh from) fails against the host I want to run an X app from. When the ssh connection is made, the two machines must, it seems, agree on something before the ssh-from machine will set up the X port. It seems that is failing.

So, perhaps there is something mussing on the system I ssh into that makes this not work. It is a rather scaled-down system. ssh is of course installed. Is there anything else that needs to be installed on the ssh destination for X forwarding to work?

I should add: By working I mean that the ssh-from machine sets up an X11 port, and sets the DISPLAY variable on the ssh-to host accordingly. If an X program actually runs is something else. -- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Marcus Meissner

14:38

On Wed, Jun 09, 2010 at 04:25:28PM +0200, Roger Oberholtzer wrote:

...

On Wed, 2010-06-09 at 16:15 +0200, Roger Oberholtzer wrote:

...
I have now verified that a working source computer (the machine I ssh from) fails against the host I want to run an X app from. When the ssh connection is made, the two machines must, it seems, agree on something before the ssh-from machine will set up the X port. It seems that is failing.

So, perhaps there is something mussing on the system I ssh into that makes this not work. It is a rather scaled-down system. ssh is of course installed. Is there anything else that needs to be installed on the ssh destination for X forwarding to work?

I should add:

By working I mean that the ssh-from machine sets up an X11 port, and sets the DISPLAY variable on the ssh-to host accordingly. If an X program actually runs is something else.

You do use: ssh -X user@remotemachine (-X enables the X forwarding)? Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Roger Oberholtzer

15:11

On Wed, 2010-06-09 at 16:38 +0200, Marcus Meissner wrote:

...

You do use:

ssh -X user@remotemachine

(-X enables the X forwarding)?

Yes. Even though the -X is not really needed if you set proper values in /etc/ssh/ssh_config (or your private copy). But yes, I did add the -X option 'just in case'. No difference. -- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Marco Calistri

14:31

Roger Oberholtzer ha scritto:

...

On Wed, 2010-06-09 at 14:14 +0200, Roger Oberholtzer wrote:

...
On Wed, 2010-06-09 at 12:48 +0200, Johannes Mueller-Lahn wrote:

...
Hello,

I had that case on SLES11. I installed "xorg-x11-xauth" via yast, afterwards I could do a ssh -X -l root <remote> and then Display forwarding worked for me. I dont know how this behaves on 10.3.

There is no xorg-x11-xauth package on the 10.3. Too bad. Perhaps there is still some missing package. I so did not expect this. Timing for this could not be worse...

I have now verified that a working source computer (the machine I ssh from) fails against the host I want to run an X app from. When the ssh connection is made, the two machines must, it seems, agree on something before the ssh-from machine will set up the X port. It seems that is failing.

So, perhaps there is something mussing on the system I ssh into that makes this not work. It is a rather scaled-down system. ssh is of course installed. Is there anything else that needs to be installed on the ssh destination for X forwarding to work?

...
...
Best regards,

Johannes Müller-Lahn

--- Heinz Tröber GmbH & Co KG / Chief Information Officer Sitz: Hamburg / Amtsgericht Hamburg HRB 39527 Geschäftsführer: Klaus Tröber, Reza Etehad Ust.ID Nr: DE 118433283

Volksdorfer Weg 186 / D-22393 Hamburg Tel: 0049 40 - 601 715 96 - Fax: 0049 40 - 601 715 78 johannes.mueller-lahn@troeber.com / http://www.troeber.com

Roger Oberholtzer hat am 9. Juni 2010 um 12:36 geschrieben:

...
I am trying to run a remote X application on a 10.3 system. There is a problem connecting to the display from the system I ssh into. I do this all the time, and usually there is no problem. But I have a system that is not working and I do not know why. Perhaps I have forgotten a step in 10.3.

I have edited /etc/ssh/ssh_config on the system I ssh from, setting:

Host * ForwardAgent yes ForwardX11 yes ForwardX11Trusted yes

There is nothing in ~/.ssh/ that overrides this.

When I connect to another system with ssh, I would expect the DISPLAY variable to be something like localhost:11.0 But that is not the case. In addition, I would expect to see a port listener on the system I connect from, in this case on port 6011. There is no such thing.

I also tried the older method of setting DISPLAY on the remote system to refer to the system I want the app to display on. This does not work either. I ran xhost + on that system. Once again, I would expect to see a port listener on port 6000 that can be connected to from other than localhost. I do not see this.

Could there be something on the system I am ssh-ing to that keeps the DISPLAY variable from being set?

I am in a real bind as I did not expect this problem and need to run the app urgently! Any suggestions are appreciated!

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

-- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

-- Roger Oberholtzer

OPQ Systems / Ramböll RST

Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden

Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696

Roger, Beside checking the pkgs and related dependencies, I will also check network settings (Firewall) if it is the case. Furthermore, give a look at this page, may be it could be useful to solve your problem: http://www.ssh.com/support/documentation/online/ssh/adminguide/32/X11_Forwar... GL, -- Marco Calistri <amdturion> A false hypothesis is better than none at all. The fact that it is false does not matter so much. However, if it takes root, if it is generally assumed, if it becomes a kind of credo admitting no doubt or scrutiny--that is the real evil, one which has endured through the centuries. -- Goethe -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Roger Oberholtzer

15:14

On Wed, 2010-06-09 at 11:31 -0300, Marco Calistri wrote:

...

Beside checking the pkgs and related dependencies, I will also check network settings (Firewall) if it is the case.

Furthermore, give a look at this page, may be it could be useful to solve your problem:

http://www.ssh.com/support/documentation/online/ssh/adminguide/32/X11_Forwar...

These are set. And for all but one system, things are working as expected. The offending system is a KIWI-based diskless system. The sshd rpm and service is enabled, as I can use it to log in. Just no X11 port on the ssh-from machine nor DISPLAY value on the ssh-to machine. -- Roger Oberholtzer OPQ Systems / Ramböll RST Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Joachim Schrod

10 Jun 10 Jun

17:21

New subject: [opensuse] Re: openSUSE 10.3, ssh and X11 forwarding

Roger Oberholtzer wrote:

...

On Wed, 2010-06-09 at 11:31 -0300, Marco Calistri wrote:

...

The offending system is a KIWI-based diskless system. The sshd rpm and service is enabled, as I can use it to log in. Just no X11 port on the ssh-from machine nor DISPLAY value on the ssh-to machine.

What's the output of "ssh -X -v user@system"? At the end (or the previous-to-last line) there should be: debug1: Requesting X11 forwarding with authentication spoofing. Probably you'll find a message there that xauth is not working or similar. Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Peter Suetterlin

11 Jun 11 Jun

13:29

New subject: [opensuse] Re: openSUSE 10.3, ssh and X11 forwarding

Joachim Schrod wrote:

...

Roger Oberholtzer wrote:

...
On Wed, 2010-06-09 at 11:31 -0300, Marco Calistri wrote:

...
The offending system is a KIWI-based diskless system. The sshd rpm and service is enabled, as I can use it to log in. Just no X11 port on the ssh-from machine nor DISPLAY value on the ssh-to machine.

What's the output of "ssh -X -v user@system"?

At the end (or the previous-to-last line) there should be: debug1: Requesting X11 forwarding with authentication spoofing.

Probably you'll find a message there that xauth is not working or similar.

I second that. You might not really see an error (I don't see one here in a comparable case), but if xauth and/or probably some X libraries are not there, you don't get the X forwarding.... Pit -- Dr. Peter "Pit" Suetterlin http://www.astro.su.se/~pit Institute for Solar Physics Tel.: +34 922 405 590 (Spain) P.Suetterlin@royac.iac.es +46 8 5537 8507 (Sweden) Peter.Suetterlin@astro.su.se -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

Roger Oberholtzer

13 Jun 13 Jun

12:02

New subject: [opensuse] Re: openSUSE 10.3, ssh and X11 forwarding

On Fri, 2010-06-11 at 14:29 +0100, Peter Suetterlin wrote:

...

Joachim Schrod wrote:

...
Roger Oberholtzer wrote:

...
On Wed, 2010-06-09 at 11:31 -0300, Marco Calistri wrote:

...
The offending system is a KIWI-based diskless system. The sshd rpm and service is enabled, as I can use it to log in. Just no X11 port on the ssh-from machine nor DISPLAY value on the ssh-to machine.

What's the output of "ssh -X -v user@system"?

At the end (or the previous-to-last line) there should be: debug1: Requesting X11 forwarding with authentication spoofing.

Probably you'll find a message there that xauth is not working or similar.

I second that. You might not really see an error (I don't see one here in a comparable case), but if xauth and/or probably some X libraries are not there, you don't get the X forwarding....

I am guessing this is what my problem is. The missing libraries are on the system into which ssh is connecting. The system I am connecting from works towards a standard installed openSUSE. As I wrote elsewhere in the thread, the system I an connecting to is a KIWI diskless openSUSE. So I am keeping the installed software to the absolute minimum. Of course, I can add whatever is missing. Provided I can determine what it is. -- Roger Oberholtzer Ramböll RST/OPQ Ramböll Sverige AB Krukmakargatan 21 P.O. Box 17009 SE-104 62 Stockholm, Sweden Office: Int +46 10-615 60 20 Mobile: Int +46 70-815 1696 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org

5072

Age (days ago)

5076

Last active (days ago)

List overview

Download

11 comments

6 participants

participants (6)

Joachim Schrod
Johannes Mueller-Lahn
Marco Calistri
Marcus Meissner
Peter Suetterlin
Roger Oberholtzer