SUMMARY: Re: X authentication problems with sshd-1.2.17
Date: December 22, 1996
------------------------------------
My original post with respect to X authentication problems with sshd-1.2.17
for resolved by David Krinsky <krinsky_at_hcs.harvard.edu> with an additional
response from Juha Suhonen <juhas_at_iki.fi>. Thanks to both for the speedy
replies that solved my mis-config.
Below is my original post, followed by their responses.
----------------------------------------------------------------------
Date: Sat, 21 Dec 1996 22:05:32 -0500
Subject: X authentication problems
Good Evening -
Platform Info:
Server - DEC UNIX running ssh-1.2.17 - sshd
Client - BSDi clients ssh login ssh-1.2.17 - ssh
Problem:
We're able to execute standard Xterm, DXterm, Xedit, XMailers, etc.
We're not however able to execute X programs such as XIsso/dxaccounts
Specifics;
we open a session for our UNIX client to the host server..
> xterm -e ssh <host> &
Then we get on the host and get root,
We can run dxterm, xterm, dxcalc, dxcalender, PMConsole...
However, we can not run...
#bash:./dxaccounts &
<the client I'm working in sees....>
Received X11 open request.
Allocated channel 2.
Sending open confirmation to the remote host.
X11 connection uses different authentication protocol:
'MIT-MAGIC-COOKIE-1' vs. ''.
X11 connection rejected because of wrong authentication.
Rejected connection: X11 connection from stalker.oem.net port 2766
The sshd output the following to the logfiles..
Dec 21 20:14:21 stalker sshd[19721]: debug: X11 connection requested.
Dec 21 20:14:21 stalker sshd[19721]: debug: Allocated channel 4.
Dec 21 20:14:21 stalker sshd[19721]: debug: Received channel open
confirmation.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel now open, status bits 0
Dec 21 20:14:21 stalker sshd[19721]: debug: Received channel close
confirmation.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 receives output closed.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 closes incoming
data stream.
Dec 21 20:14:21 stalker sshd[19721]: debug: Received channel close.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 receives input eof.
Dec 21 20:14:21 stalker sshd[19721]: debug: X problem fix: close the
other direction.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 sends ieof.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 closes outgoing
data stream.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 sends oclosed.
Dec 21 20:14:21 stalker sshd[19721]: debug: Channel 4 terminates.
My problem is <obviously> the X11 authentication protocol difference..
I clearly have something mis-optioned. Has anyone seen this same
mis-config, and if so could you please point me to the summary?
------------------------------------------------------------
Date: Sun, 22 Dec 1996 01:33:15 -0500 (EST)
From: David Krinsky <krinsky_at_hcs.harvard.edu>
To: David Hoyt <dhoyt_at_stalker.oem.net>
Subject: Re: X authentication problems with sshd-1.2.17
>
> My problem is <obviously> the X11 authentication protocol difference..
> I clearly have something mis-optioned. Has anyone seen this same
> mis-config, and if so could you please point me to the summary?
>
It sounds as though the programs you're having difficulty with is programs
run from a root shell after su'ing. This is not an ssh problem, but a
simple result of root having a different .Xauthority file from the user
you've ssh'ed in as. I'd recommend just doing a "setenv XAUTHORITY <login
user's home dir>/.Xauthority" [in csh/tcsh] or "XAUTHORITY=<same>; export
XAUTHORITY" [in sh/ksh/bash/zsh]. Alternatively, set your home directory
or link/copy .Xauthority files appropriately.
Good luck!
Dave.
---------------------------------------------------------------
Date: Sun, 22 Dec 1996 10:59:22 +0200 (EET)
Reply-To: Juha Suhonen <juhas_at_iki.fi>
To: David Hoyt <dhoyt_at_stalker.oem.net>
Subject: Re: X authentication problems with sshd-1.2.17
Try to execute something like this as root:
xauth merge /OTHERHOME/.Xauthority
Where the OTHERHOME is path to the other user's home dir (the one you used
to su to root).
!============================
!David Hoyt OEM.NET
!Boston, MA USA, Earth
Received on Sun Dec 22 1996 - 14:32:36 NZDT