Hi all, I recently installed F11 Preview (from live CD) on 2 of my laptops and I cannot run X apps remotely from these machines anymore. I get a message like: "(gedit:4221): Gtk-WARNING **: cannot open display: localhost:10.0". That means that the app is running on the remote machine (there's a PID) but I can't get the display on the local machine. The F11 machines can successfully run remote X apps from any machine that's not running F11. I've been looking for a solution for several days and I'm getting desperate
John wrote:
Hi all, I recently installed F11 Preview (from live CD) on 2 of my laptops and I cannot run X apps remotely from these machines anymore. I get a message like: "(gedit:4221): Gtk-WARNING **: cannot open display: localhost:10.0". That means that the app is running on the remote machine (there's a PID) but I can't get the display on the local machine. The F11 machines can successfully run remote X apps from any machine that's not running F11. I've been looking for a solution for several days and I'm getting desperate
First read:
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Then look at the -Y option of ssh, and your sshd server config file.
Mikkel
Sorry if I'm bending some rules or guidelines, it's the first time I use a mailing list. I've already tried the -Y option with no results. Here is the content of the pertinent section of sshd_config:
#AllowAgentForwarding yes #AllowTcpForwarding yes #GatewayPorts no #X11Forwarding no X11Forwarding yes #X11DisplayOffset 10 #X11UseLocalhost yes #PrintMotd yes #PrintLastLog yes #TCPKeepAlive yes #UseLogin no #UsePrivilegeSeparation yes #PermitUserEnvironment no #Compression delayed #ClientAliveInterval 0 #ClientAliveCountMax 3 #ShowPatchLevel no #UseDNS yes #PidFile /var/run/sshd.pid #MaxStartups 10 #PermitTunnel no #ChrootDirectory none
Any help will be grealy appreciated :-(
On Sun, May 31, 2009 at 10:15 AM, Mikkel L. Ellertson < mikkel@infinity-ltd.com> wrote:
John wrote:
Hi all, I recently installed F11 Preview (from live CD) on 2 of my laptops aof
thend I
cannot run X apps remotely from these machines anymore. I get a message like: "(gedit:4221): Gtk-WARNING **: cannot open display: localhost:10.0". That means that the app is running on the remote machine (there's a PID) but I can't get the display on the local machine. The F11 machines can successfully run remote X apps from any machine that's not running F11. I've been looking for a solution for several days and I'm getting desperate
First read:
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Then look at the -Y option of ssh, and your sshd server config file.
Mikkel
Do not meddle in the affairs of dragons, for thou art crunchy and taste good with Ketchup!
-- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
On 05/31/2009 10:53 AM, John Foisy wrote:
I've already tried the -Y option with no results. Here is the content of the pertinent section of sshd_config:
That's odd. I have two machines running F11 with all of the updates, and X11 forwarding between them works just fine with both -X and -Y.
From one of the F11 hosts, log in to the other with: ssh -v <f11host> -X
Once you're logged in, check the X cookie file: ls -lZ $XAUTHORITY
Finally, try a simple X11 application: gedit
If it doesn't work, send the output of all of the commands.
Gordon Messmer wrote:
On 05/31/2009 10:53 AM, John Foisy wrote:
I've already tried the -Y option with no results. Here is the content of the pertinent section of sshd_config:
That's odd. I have two machines running F11 with all of the updates, and X11 forwarding between them works just fine with both -X and -Y.
From one of the F11 hosts, log in to the other with: ssh -v <f11host> -X
Once you're logged in, check the X cookie file: ls -lZ $XAUTHORITY
Finally, try a simple X11 application: gedit
If it doesn't work, send the output of all of the commands.
Hi Gordon, I tried your suggestion and it did'nt work. Here is the output:
[john@LT-02 ~]$ ssh -v LT-01 -X OpenSSH_5.1p1, OpenSSL 0.9.8g 19 Oct 2007 debug1: Reading configuration data /etc/ssh/ssh_config debug1: Applying options for * debug1: Connecting to LT-01 [192.168.1.101] port 22. debug1: Connection established. debug1: identity file /home/john/.ssh/identity type -1 debug1: identity file /home/john/.ssh/id_rsa type 1 debug1: identity file /home/john/.ssh/id_dsa type -1 debug1: Remote protocol version 2.0, remote software version OpenSSH_5.2 debug1: match: OpenSSH_5.2 pat OpenSSH* debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_5.1 debug1: SSH2_MSG_KEXINIT sent debug1: SSH2_MSG_KEXINIT received debug1: kex: server->client aes128-cbc hmac-md5 none debug1: kex: client->server aes128-cbc hmac-md5 none debug1: SSH2_MSG_KEX_DH_GEX_REQUEST(1024<1024<8192) sent debug1: expecting SSH2_MSG_KEX_DH_GEX_GROUP debug1: SSH2_MSG_KEX_DH_GEX_INIT sent debug1: expecting SSH2_MSG_KEX_DH_GEX_REPLY debug1: Host 'lt-01' is known and matches the RSA host key. debug1: Found key in /home/john/.ssh/known_hosts:7 debug1: ssh_rsa_verify: signature correct debug1: SSH2_MSG_NEWKEYS sent debug1: expecting SSH2_MSG_NEWKEYS debug1: SSH2_MSG_NEWKEYS received debug1: SSH2_MSG_SERVICE_REQUEST sent debug1: SSH2_MSG_SERVICE_ACCEPT received debug1: Authentications that can continue: publickey,gssapi-with-mic,password debug1: Next authentication method: gssapi-with-mic debug1: Unspecified GSS failure. Minor code may provide more information No credentials cache found
debug1: Unspecified GSS failure. Minor code may provide more information No credentials cache found
debug1: Unspecified GSS failure. Minor code may provide more information
debug1: Next authentication method: publickey debug1: Offering public key: /home/john/.ssh/id_rsa debug1: Server accepts key: pkalg ssh-rsa blen 277 debug1: Authentication succeeded (publickey). debug1: channel 0: new [client-session] debug1: Requesting no-more-sessions@openssh.com debug1: Entering interactive session. debug1: Requesting X11 forwarding with authentication spoofing. debug1: Sending environment. debug1: Sending env LANG = en_US.UTF-8 Last login: Sun May 31 14:45:58 2009 from lt-02.localdomain [john@LT-01 ~]$ ls -lZ $XAUTHORITY drwxrwxr-x. john john unconfined_u:object_r:user_home_t:s0 bin drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Desktop drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Documents drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Download drwxrwxr-x. john john unconfined_u:object_r:user_home_t:s0 DT-01 drwxrwxr-x. john john unconfined_u:object_r:user_home_t:s0 LT-02 drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Music drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Pictures drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Public -rw-rw-r--. john john unconfined_u:object_r:user_home_t:s0 smolt-LT-01 -rw-rw-r--. john john unconfined_u:object_r:user_home_t:s0 smolt-LT-01~ drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Templates drwxr-xr-x. john john unconfined_u:object_r:user_home_t:s0 Videos [john@LT-01 ~]$ gedit
(gedit:2402): Gtk-WARNING **: cannot open display: localhost:11.0 [john@LT-01 ~]$
On 05/31/2009 11:53 AM, John wrote:
[john@LT-02 ~]$ ssh -v LT-01 -X
...
debug1: Requesting X11 forwarding with authentication spoofing.
...
[john@LT-01 ~]$ ls -lZ $XAUTHORITY drwxrwxr-x. john john unconfined_u:object_r:user_home_t:s0 bin
...
It looks like XAUTHORITY isn't set, which means that you probably don't have "xauth" in your path (it's probably not installed). Install xorg-x11-xauth, and then log in again. On your next login, sshd should create the XAUTHORITY file.
Having said that, if xauth is missing, you should see an error stating that in the output of "ssh -v", which you don't. That's very odd. I'm fairly certain that the problem is the missing XAUTHORITY variable, I'm just not sure why it's missing.
If xauth is present, try creating a new user on the system, and see if you have the same problem when you log in to that account.
Gordon Messmer wrote:
On 05/31/2009 11:53 AM, John wrote:
[john@LT-02 ~]$ ssh -v LT-01 -X
...
debug1: Requesting X11 forwarding with authentication spoofing.
...
[john@LT-01 ~]$ ls -lZ $XAUTHORITY drwxrwxr-x. john john unconfined_u:object_r:user_home_t:s0 bin
...
It looks like XAUTHORITY isn't set, which means that you probably don't have "xauth" in your path (it's probably not installed). Install xorg-x11-xauth, and then log in again. On your next login, sshd should create the XAUTHORITY file.
Having said that, if xauth is missing, you should see an error stating that in the output of "ssh -v", which you don't. That's very odd. I'm fairly certain that the problem is the missing XAUTHORITY variable, I'm just not sure why it's missing.
If xauth is present, try creating a new user on the system, and see if you have the same problem when you log in to that account.
xorg-x11-xauth was already installed. I created a new user and tried to login. Here is the output:
[john@LT-02 ~]$ ssh -X tom@lt-01 tom@lt-01's password: /usr/bin/xauth: creating new authority file /home/tom/.Xauthority [tom@LT-01 ~]$ gedit
(gedit:2969): Gtk-WARNING **: cannot open display: localhost:10.0 [tom@LT-01 ~]$
On 05/31/2009 08:06 PM, John wrote:
xorg-x11-xauth was already installed. I created a new user and tried to login. Here is the output:
[john@LT-02 ~]$ ssh -X tom@lt-01 tom@lt-01's password: /usr/bin/xauth: creating new authority file /home/tom/.Xauthority [tom@LT-01 ~]$ gedit (gedit:2969): Gtk-WARNING **: cannot open display: localhost:10.0
When you log in to that account, what do you get from: ls -l $XAUTHORITY echo "$XAUTHORITY"
-
Gordon Messmer -
John -
Mikkel