Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Secure-Shell
[Top] [All Lists]

Re: X forwarding and X11UseLocalhost

Subject: Re: X forwarding and X11UseLocalhost
Date: Wed, 1 Dec 2004 09:45:14 +0100
I had the same problem on Gentoo a week or two ago, suddenly 'ssh -X' stopped 
working. The remote display was pointing to the remote machines real display, 
not to the forwarded one. The problem was caused by a change in the 
pam-package.

Am Mittwoch, 24. November 2004 21:56 schrieb Michael J. Barillier:
I've been using X11 forwarding, but since switching from XFree86 to
X.org (on both local and remote hosts, both running Gentoo Linux,
2.6.9 kernel and OpenSSH v3.8.1p1) I've observed that `ssh -X
userid@remotehost' results in DISPLAY being set in the remote shell to
`thishost:0.0' (where thishost is the system system from which I'm
connecting) rather than `localhost:10.0' as it had before.  The server
does have X11UseLocalhost set to `yes' in sshd_config, so I'm a little
stumped.  I'd like to get the old behavior working, rather than use
`xhost +remotehost' on thishost.

Where can I start looking for the cause of this change (short of the
source code itself - I'm hoping it won't come to that and someone will
know the fix off-hand)?

Check if you activated UsePamEnv in your sshd_config. If activated, 
edit /etc/security/pam_env.conf and comment the following two lines out:

REMOTEHOST     DEFAULT= OVERRIDE=@{PAM_RHOST} 
DISPLAY                DEFAULT=${REMOTEHOST}:0.0 OVERRIDE=${DISPLAY}

Original posting on forums.gentoo.org:
http://forums.gentoo.org/viewtopic.php?p=1823616


-- 
  Mok wat du wullt, de Lüd snackt doch.

  Lars Rehe
  Alfred Wegener Institut für Polar- und Meeresforschung


<Prev in Thread] Current Thread [Next in Thread>