From: Andrew DeFaria <Andrew@DeFaria.com>
To: cygwin@cygwin.com
Subject: Re: X11Forward and xauth problems
Date: Mon, 23 Mar 2015 22:03:00 -0000 [thread overview]
Message-ID: <meq0g3$hob$1@ger.gmane.org> (raw)
In-Reply-To: <55108046.1070206@dronecode.org.uk>
On 3/23/2015 2:06 PM, Jon TURNEY wrote:
> On 23/03/2015 20:48, Andrew DeFaria wrote:
>> Normally I just turn on -X (or put X11Forward yes in ~/.ssh/config) but
>> that usually results in a noticeable delay in logging in and the
>> following error:
>>
>> Warning: untrusted X11 forwarding setup failed: xauth key data not
>> generated
>> Warning: No xauth data; using fake authentication data for X11
>> forwarding.
>
> Firstly, if you don't want these warnings, use ssh -Y.
>
> (By using ssh -X, you are asking for something which the X server can't
> give you, hence the warnings. See
> http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-trusted-untrusted-x11-forwarding
> for more details)
Yeah but -Y gives me the same thing:
Adefaria-lt:ssh -Y cm-app-ldev01
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth: unable to link authority file
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
Cm-app-ldev01:
>
>> /usr/bin/xauth: unable to link authority file
>> /home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
>> Cm-app-ldev01:
>>
>> I've asked about this in the past and I think the answer was that the
>> message was correct but you shouldn't worry about it. If it didn't slow
>
> I'm sorry, I only have a vague memory of this discussion.
>
>> me down I probably would just ignore it. But it slows me down. So I ssh
>> instead without X11Forward turned on then, when I need to run an X
>> client, I do export DISPLAY=adefaria-lt:0 and make sure that I did an
>> xhost + there at least once. But now that's broken!
>>
>> Adefaria-lt:xhost +
>> access control disabled, clients can connect from any host
>> Adefaria-lt:ssh cm-app-ldev01
>> Cm-app-ldev01:export DISPLAY=adefaria-lt:0
>> Cm-app-ldev01:xclock
>> Error: Can't open display: adefaria-lt:0
>> Cm-app-ldev01:
>
> If you want this to work, you will now (since X server 1.17) need to
> start the server with the option '-listen tcp'.
Restarted Xwin with -multimonitor and -listen tcp. Now I get:
Adefaria-lt:ssh -Y cm-app-ldev01
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth: unable to link authority file
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
Cm-app-ldev01:echo $DISPLAY
localhost:10.0
Cm-app-ldev01:xclock
X11 connection rejected because of wrong authentication.
Error: Can't open display: localhost:10.0
Cm-app-ldev01:
>
> [1] https://cygwin.com/ml/cygwin-xfree-announce/2015-02/msg00026.html
> [2]
> http://x.cygwin.com/docs/ug/using-remote-apps.html#using-remote-apps-telnet
> [3]
> http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-remote-clients-cant-connect
>
> [4] https://cygwin.com/ml/cygwin-xfree/2015-02/msg00051.html
>
--
Andrew DeFaria
http://defaria.com
--
Problem reports: http://cygwin.com/problems.html
FAQ: http://cygwin.com/faq/
Documentation: http://cygwin.com/docs.html
Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple
next prev parent reply other threads:[~2015-03-23 21:27 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-03-23 21:06 Andrew DeFaria
2015-03-23 21:26 ` Jon TURNEY
2015-03-23 22:03 ` Andrew DeFaria [this message]
2015-03-24 13:35 ` Jon TURNEY
2015-03-25 22:11 ` Andrew DeFaria
2015-03-26 20:39 ` Jon TURNEY
2015-03-26 22:17 ` Andrew DeFaria
2015-03-27 3:12 ` Andrew DeFaria
2015-03-30 13:40 ` Jon TURNEY
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='meq0g3$hob$1@ger.gmane.org' \
--to=andrew@defaria.com \
--cc=cygwin@cygwin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).