Pop up GUI remotely via SSH

Pop up GUI remotely via SSH

[trimat]

Hi all,
I would like to pup up on Windows 7 the GUI of a program started remotely
from SSH. I can't obtain this with *cygstart* even though I see the process
running in Windows Task Manager. Trying to add /--interactive/ flag to
Cygwin service /sshd/, the service doesn't start.

I am aware of the Windows restriction /Session 0 Isolation/ (introduced in
Windows Vista) but I read a few posts in which it seems possible. I have
tried lots of solutions but till now I am able to accomplish that not using
Cygwin but with *PsExec* (utility of /Windows Sysinternals/).

Any clue how to do it with Cygwin?
Thanks



--
View this message in context: http://cygwin.1069669.n5.nabble.com/Pop-up-GUI-remotely-via-SSH-tp122269.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Pop up GUI remotely via SSH

[Larry Hall (Cygwin)]

On 10/26/2015 12:07 PM, trimat wrote:
> Hi all,
> I would like to pup up on Windows 7 the GUI of a program started remotely
> from SSH. I can't obtain this with *cygstart* even though I see the process
> running in Windows Task Manager. Trying to add /--interactive/ flag to
> Cygwin service /sshd/, the service doesn't start.
>
> I am aware of the Windows restriction /Session 0 Isolation/ (introduced in
> Windows Vista) but I read a few posts in which it seems possible. I have
> tried lots of solutions but till now I am able to accomplish that not using
> Cygwin but with *PsExec* (utility of /Windows Sysinternals/).
>
> Any clue how to do it with Cygwin?

There have been a few spurious reports over the years of people getting
this to work post-XP with Cygwin's OpenSSH but never anything reliable and
reproducible.  So if there's a magic bullet, no one has been able to
classify it even if they can find it.  Or at least no one has reported it
here.  And while I would agree that PsExec seems to be able to make some
magic happen where ssh can't, it's also pretty clear that PsExec's magic is
compromising your system security, which is the exact opposite of OpenSSH's
intent.  Maybe it would be possible to take the best of both worlds but one
would at least need the code to PsExec to evaluate first before making a
definitive statement on whether this would even be possible.  Since the
source code to PsExec isn't available from the Sysinternals site, this 
avenue appears to be blocked.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Pop up GUI remotely via SSH

[trimat]

@Larry thanks for the answer.



--
View this message in context: http://cygwin.1069669.n5.nabble.com/Pop-up-GUI-remotely-via-SSH-tp122269p122467.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Pop up GUI remotely via SSH

[Linda Walsh]

trimat wrote:
> Hi all,
> I would like to pup up on Windows 7 the GUI of a program started remotely
> from SSH. I can't obtain this with *cygstart* even though I see the process
> running in Windows Task Manager. Trying to add /--interactive/ flag to
> Cygwin service /sshd/, the service doesn't start.
----
	Am unclear here.  

Where are you starting ssh from and where is sshd running?

	Are you trying - say, when you login to windows, 1st have it
run the Xserver, then have a 2nd program run ssh to a remote (linux? 
Windows?) machine, where it starts an X-GUI, on the remote (linux? cygwin
on windows?) that display back on the machine you just logged into?

Are you are you have the Xserver running locally before you run
the ssh command?

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Pop up GUI remotely via SSH

[trimat]

If I create the service with the command /ssh-host-config/ (and then set up
user and privileges) I can start remotely from SSH a program without the
possibility to see its GUI.

If I modify the /sshd/ service by Windows Services logging on as "Local
System account" with "Allow service to interact with desktop" option
enabled, I get an error: "The CYGWIN sshd service on Local Computer started
and then stopped. Some services stop automatically if they are not in use by
other services or programs".

Moreover, it doesn't start even if I create the service with the command
/cygrunsrv -I sshd --interactive -d "CYGWIN sshd" -p
"C:\APPS\CYGWIN\bin\cygrunsrv.exe" -a -D -e "CYGWIN=ntsec tty" -y tcpip/.

I am not aware of Xserver, how can I check this?
Thanks



--
View this message in context: http://cygwin.1069669.n5.nabble.com/Pop-up-GUI-remotely-via-SSH-tp122269p122540.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Personal use not permitted: (was Re: Pop up GUI remotely via SSH)

[Linda Walsh]

trimat wrote:
> If I create the service with the command /ssh-host-config/ (and
> then set up user and privileges) I can start remotely from SSH
> a program without the possibility to see its GUI.

----

	Where are you expecting the output to come out?  Where it is
executing or where you ran ssh from?  Windows can't do the latter,
it can only do the former, and then only if you get all the security
tokens setup right (never have done it).  They used to have problems
where people would start programs from remote machines and popup
output on a remote PC, and people on the remote PC would respond to
it thinking it was a local system message (when it was really
a remote cracker trying to get their password).


> If I modify the /sshd/ service by Windows Services logging on as
> "Local System account" with "Allow service to interact with
> desktop" option enabled, I get an error: "The CYGWIN sshd service
> on Local Computer started and then stopped. Some services stop
> automatically if they are not in use by other services or
> programs".

---

	Similar problem as above.  You can't forward remote output of
individual Windows programs.  You could try to start
a remote-desktop session -- and those have the ability to run
programs on startup that will have their output go to the person who
ran remote desktop, but what you seem to be asking for is like when
I "ssh" into a linux box and start 'gvim', it runs 'gvim' and
displays it on my local cygwin box.

	That is all premised on ssh automatically forwarding any attempts
to access the remote X-server to your local box, where they will try
to contact your local X-server.

> I am not aware of Xserver, how can I check this?

---

	Read up on 'X11' on the web/google.  It is the main way unix/linux
boxes run programs remotely and have the output displayed locally.
If you know nothing about 'X', or how output from 'ssh' run programs
is forwarded through an encrypted connection back to your machine to
connect to the X-server (called Xwin.exe on cygwin), then you need
to learn alot more about what you are attempting to do -- much more
than I can relate in a "short" email.

	Windows was designed around a 1 person/computer system, with
allowances for more than 1 person with the server editions of
windows.  If someone is logged into a windows PC (non-server
edition), you cannot log into it with remote-desktop, for example,
without it either blocking you (because someone is already using the
"1" Windows output channel), or "2" forcing the remote user to
log-out -- which can then allow you to create a 'remote desktop
session' where the remote pc's desktop is forwarded to you.

	If you had a server and used "thin-clients" that would only be
used for keyboard and display (no local processing), MS didn't want
you to be able to grab the 100-cheap clients and all log into the
powerful server and share applications (like all of them running
their own version of WORD) -- because, instead, they wanted to sell
100-copies of Windows and
100 copies of WORD - even if only 1-5 out of 100 would use WORD at
any point in time.  They compromised on server editions by allowing
people to by "seats", which allow a "small", fixed number of users
to run an application (or to access the server remotely) -- but they
keep track of each user who uses a 'remote desktop', and accesses
a program like WORD, to make sure you only can use the number of
"remote sessions" you paid for.

	If you want a multi-user computer, you need to run linux or
something else.  But both apple and MS have gone with the
1-user-1-licence model.

	The recent push to convert linux to use systemd -- is all about
reducing the functionality of linux to require the same thing -- so 
1 system monitor (systemd) can keep track of how many users are
using "licensed seats" --- so vendors can force you to pay 10-100
times for the same program.  It's also about locking down linux so
that you can't easily your own programs to get around such licensing
mechanisms (you'd have to "jailbreak" your computer -- as is done
with smartphones these days, to allow you to run what you want on
your own computer).

	If you want the remote display thing, use 'X' while it is still
available and not replaced by some encrypted-proprietary (but open
source) replacement that restrict what you can do on your computer
(effectively reducing it to a "console" -- as in gaming console that
only runs the programs that the manufacturer permits).




--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

Re: Personal use not permitted: (was Re: Pop up GUI remotely via SSH)

[trimat]

Very thanks for your thorough response.

We wanted to achieve that triggering commands from a Windows/Linux to a
Windows (7), so in a mono-directional way. We realize the difficulty to
realize it and so we decided to shake our architecture up.



--
View this message in context: http://cygwin.1069669.n5.nabble.com/Pop-up-GUI-remotely-via-SSH-tp122269p122747.html
Sent from the Cygwin list mailing list archive at Nabble.com.

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple