X11 Problem

[Arockia Jegan]

My hpux 11.0 system has ssh with X11 forwarding on. I'm using putty software to login to the hp system from my workstation(win2k). X server is running on my work station. When I'm trying to open xterm it's giving the following errors..

Xlib: connection to "localhost:13.0" refused by server
Xlib: Authentication failed at PuTTY X11 proxy
Error: Can't open display: localhost:13.0

But I'm able to access sam,xclock and xload. I don't have any issues with that x utilites. Display setting are setup properly. Even I have the same problem when I use solaris box to access xterm of hpux.

[MANOJ SRIVASTAVA]

Hi


Can you try exporting teh DISPLAY parameter with the IP address instead of the name like

export DISPLAY=10.2.10.30:0.0

and try using the software.


Manoj Srivastava

[Arockia Jegan]

I tried earler with the IP address. It didn't work.

[MANOJ SRIVASTAVA]

Does your WIN2K server have some VPN software running , or services running . We had this issue taht whenever we start the win2K bcoz of some Cisco VPN services no body else would be able to even pin the IP of the win2k server.

The best way to figure is to boot the win2k server with basic services and netwrok enabled ie I think press f4 or f8 while the win2k is booting adn then it will give u options for start up.and tehn try to coneect.

One moer to find this out is to just do a telnet from the HP or SUN system to that win2k Serve IP adress when the worksstation is full up and working , I bet the Unix server will not be able to ping it even , hence the problem.


Manoj Srivastava

[Steve Steel]

Hi

Could be MIT cookies

If /etc/dt/config/Xconfig not there then
cp /usr/dt/config/Xconfig /etc/dt/config/Xconfig

NOTE: Following modifications can be made to the file /etc/dt/config/Xconfig .


Uncomment the following line in file
Ensure no leading spaces:

Dtlogin*authorize: False


Execute the following command to get change
/usr/dt/bin/dtconfig


Log out and back in to CDE.

Steve Steel

[Santosh Nair_1 · Accepted solution]

I had to set use X11UserLocalhost=no as described below.

This exerpt from Kevin Steves' paper on configuring OpenSSH on HPUX (URL given below):

http://www.atomicgears.com/papers/osshhpux.html

Starting with OpenSSH 3.1, the X11 forwarding server binds to the loopback address by default; see the X11UseLocalhost sshd(8) option:

X11UseLocalhost
Specifies whether sshd should bind the X11 forwarding server to
the loopback address or to the wildcard address. By default,
sshd binds the forwarding server to the loopback address and sets
the hostname part of the DISPLAY environment variable to
``localhost''. This prevents remote hosts from connecting to the
fake display. However, some older X11 clients may not function
with this configuration. X11UseLocalhost may be set to ``no'' to
specify that the forwarding server should be bound to the wild-
card address. The argument must be ``yes'' or ``no''. The de-
fault is ``yes''.

In general, for this more secure configuration to function, X11 clients need to use the X11R6 libraries. Unfortunately, not all X clients are linked with R6 libs on HP-UX 11.11. You can check by using the chatr command:

$ chatr /usr/bin/X11/xterm
/usr/bin/X11/xterm:
shared executable
shared library dynamic path search:
SHLIB_PATH disabled second
embedded path enabled first ::/opt/audio/lib:/opt/image/lib:/opt/video/lib:/usr/lib
shared library list:
dynamic /view/x_r5dummy00_1020/vobs/swdev/pvt/r5dummy00_1020/X11R5/lib/libXt.1
dynamic /view/x_r5dummy00_1020/vobs/swdev/pvt/r5dummy00_1020/X11R5/lib/libXext.1
dynamic /view/x_r5dummy00_1020/vobs/swdev/pvt/r5dummy00_1020/X11R5/lib/libX11.1
[...]

/usr/bin/X11/xterm uses R5 libs, and will not work with X11UseLocalhost=yes. However /usr/contrib/bin/X11/xterm uses R6 libs and will work. Most clients in /usr/bin/X11 do use the R6 libs. However, depending on your usage you may need to set X11UseLocalhost=no.

Hope this helps.

-Santosh

[Arockia Jegan]

Hi santosh,

The problem got resolved. You are absolutely right. I have also seen the docs and resolved the problem on the same day. But couldn't post the status on time.