diff --git a/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.html b/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.html new file mode 100644 index 0000000..d973561 --- /dev/null +++ b/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.html @@ -0,0 +1,38 @@ + + + + + +

SSH into your destination:

+ +
ssh -vv -X <hostname>
+
+ +

If you see a line near the end that says “debug1: Remote: No xauth program; cannot forward with spoofing.“, you need to install xauth and reconnect. In Debian, run:

+ +
apt-get install xbase-clients
+
+ +

Next, ensure that you’re getting a DISPLAY variable through:

+ +
echo $DISPLAY
+
+ +

If that command outputs just a blank line, X forwarding is probably being denied by the server. Edit your sshd_config (/etc/ssh/sshd_config on Debian) and change/add the line:

+ +
X11Forwarding yes
+
+ +

If you change this, you’ll need to restart your SSH server:

+ +
/etc/init.d/ssh restart
+
+ +

Once your DISPLAY is being passed correctly, some programs may run but act oddly (”Gdk-error: […] BadAtom”, etc.) SSH uses “SECURITY” extensions by default, and some programs don’t work correctly with them. Try:

+ +
ssh -Y <hostname>
+
+ +

Note that this command may expose your local machine to compromise if someone malicious is in control of the host you’re connecting to.

+ + diff --git a/index.html b/index.html index 4316856..13d730a 100644 --- a/index.html +++ b/index.html @@ -40,6 +40,7 @@
  • 2009-Sep-11: Confusing BIND with CNAMEs
  • 2009-Feb-19: The odd case of my mugging
  • 2009-Feb-03: 5-packet TCP connection?
  • +
  • 2006-Feb-07: Why is my SSH X Window forwarding broken?
  • 2006-Feb-06: Installing Debian from a USB stick
  • 2006-Feb-02: Rebooting Linux when it doesn’t feel like it
  • 2006-Jan-25: New MySQL toys
  • diff --git a/markdown/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.md b/markdown/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.md new file mode 100644 index 0000000..fbe8c60 --- /dev/null +++ b/markdown/2006-02-07-why-is-my-ssh-x-window-forwarding-broken.md @@ -0,0 +1,32 @@ + + + + + +SSH into your destination: + + ssh -vv -X + +If you see a line near the end that says “_debug1: Remote: No xauth program; cannot forward with spoofing._“, you need to install xauth and reconnect. In Debian, run: + + apt-get install xbase-clients + +Next, ensure that you’re getting a DISPLAY variable through: + + echo $DISPLAY + +If that command outputs just a blank line, X forwarding is probably being denied by the server. Edit your sshd\_config (/etc/ssh/sshd\_config on Debian) and change/add the line: + + X11Forwarding yes + +If you change this, you’ll need to restart your SSH server: + + /etc/init.d/ssh restart + +Once your DISPLAY is being passed correctly, some programs may run but act oddly (”Gdk-error: […] BadAtom”, etc.) SSH uses “SECURITY” extensions by default, and some programs don’t work correctly with them. Try: + + ssh -Y + +Note that this command may expose your local machine to compromise if someone malicious is in control of the host you’re connecting to. + + diff --git a/markdown/index.md b/markdown/index.md index 76389e1..c491280 100644 --- a/markdown/index.md +++ b/markdown/index.md @@ -39,6 +39,7 @@ 1. 2009-Sep-11: [Confusing BIND with CNAMEs](2009-09-11-confusing-bind-with-cnames.html) 1. 2009-Feb-19: [The odd case of my mugging](2019-02-19-the-odd-case-of-my-mugging.html) 1. 2009-Feb-03: [5-packet TCP connection?](2009-02-03-5-packet-tcp-connection.html) +1. 2006-Feb-07: [Why is my SSH X Window forwarding broken?](2006-02-07-why-is-my-ssh-x-window-forwarding-broken.html) 1. 2006-Feb-06: [Installing Debian from a USB stick](2006-02-06-installing-debian-from-a-usb-stick.html) 1. 2006-Feb-02: [Rebooting Linux when it doesn’t feel like it](2006-02-02-rebooting-linux-when-it-doesnt-feel-like-it.html) 1. 2006-Jan-25: [New MySQL toys](2006-01-25-new-mysql-toys.html)