- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- ssh/X11 forwarding not working on certain hosts
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Forums
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-16-2008 06:49 AM
04-16-2008 06:49 AM
ssh/X11 forwarding not working on certain hosts
I have OpenSSH_4.1p1 installed and running on HPUX 11iV1, and have "X11Forwarding yes" in my /usr/local/etc/sshd_config file.
On one of my hosts, when I ssh in (I am using SecureCRT and PuTTY), even though I have the "enable X11 forwarding" options set in the clients, I am no able to get the display to work. If I connect to a different server, at the same site, with the same settings, it works perfectly.
I have exceed running and displaying the X11 gui's from the working host, but not the other one.
I've tried it with my DISPLAY variable set and unset, and no matter what I try 4 of my 6 HPUX servers refuse to allow the display. I am sure it is not a firewall issue as the fact I can get a normal ssh session proves port 22 is open OK, and as X11 traffic is set to tunnel, as far as the firewall is concerned, everything is ssh traffic.
Anyone got any ideas ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-16-2008 08:46 AM
04-16-2008 08:46 AM
Re: ssh/X11 forwarding not working on certain hosts
something along the lines of
localhost:10.0 -or-
11.64.88.72:10.0
which one works seems to be related to the version of the o/s, libc, and ssh installed.
try both and see if either works.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-18-2008 06:31 AM
04-18-2008 06:31 AM
Re: ssh/X11 forwarding not working on certain hosts
What firewall ports will need to be open for this to work?
I would have assumed only port 22 as it is tunneled by SSH but as I dont have access to the firewalls, I cannot check.
Does anyone know which ports are needed for tunneled X11 over SSH ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-18-2008 06:57 AM
04-18-2008 06:57 AM
Re: ssh/X11 forwarding not working on certain hosts
When a SSH connection with X11 forwarding is established, the sshd must be able to use the "xauth" command, which writes to the ~/.Xauthority file (or the file defined in XAUTHORITY environment variable, if it exists).
If the xauth command is not available to the user at the destination host or the .Xauthority file is not writeable, the X11 forwarding will fail. This can happen if the disk containing the user's home directory is full. With HP-UX servers, this happens quite often because the default size for the /home LV is tiny by modern standards.
OpenSSH has a compile-time option for libwrap support. If this option was enabled when compiling OpenSSH, the files /etc/hosts.allow and /etc/hosts.deny can be used to control access to sshd... and it can be also used to control various forwarding options, although this feature is not too obvious.
If OpenSSH has libwrap support enabled, you may need to add a line to your /etc/hosts.allow to specifically allow SSH X forwarding. This line could be:
sshdfwd-X11: ALL
or if you want to be more specific:
sshdfwd-X11: 1.2.3.0/255.255.255.0
MK
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2008 05:19 AM
04-24-2008 05:19 AM
Re: ssh/X11 forwarding not working on certain hosts
Thanks for the help guys.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-24-2008 05:21 AM
04-24-2008 05:21 AM