[linux] ssh: denied X11 forwarding
Jarry guru
jarry na gmx.net
Úterý Leden 18 06:41:15 CET 2000
Stefan Petrucha wrote:
>> "Warning: Remote host denied X11 forwarding."
>
> Mozno je to hovadina, ale nepomohlo by xhost +masina, na ktoru som sa
> pripojil a kde spustam X-aplikacie (X client)? xhost samozrejme tam, kde
> mam pustene X-y (X server).
Je v tom nejaky zmatok, tak to skusim lepsie popisat:
Sedim (a som prihlaseny v X-soch) za masinou A, chcem sa cez ssh prihlasit
na masinu B. Cize:
Na "A" bezi X-server a spustam na nej ssh klienta,
Na "B" bezi sshd server, chcem na nej spustit X-klientov a zobrazit
ich na X-serveri pocitaca A.
Tolko k tomu ujasneniu, co je klient a co server (A aj B su jedno aj
druhe, ibaze kazdy pre nieco ine).
Ked sa prihlasim z A na B cez ssh, objavi sa ta hlaska:
"Warning: Remote host denied X11 forwarding."
Znamena to, ze host B odmieta posunut display na x-server beziaci
na A. Inak prihlaseny som, v terminali mozem pracovat, ale X-klientov
nemozem spustit a zobrazovat si ich na A.
K tvojmu tipu tolko: Problem je niekde na B, cize nepomoze, ak na A
dam "xhost + B". A okrem toho, xhost je medzera v bezpecnosti, ktorej
sa (vraj) pomocou ssh da vyhnut.
Citujem
(Security-HOWTO-6.html#ss6.11):
This (xhost) is not very secure at all, because if someone has access
to your machine, they can xhost + their machine and get in easily.
...
You can also use ssh (see ssh , above) to allow secure X connections.
This has the advantage of also being transparent to the end user, and
means that no unencrypted data flows across the network.
(Remote-X-Apps-6.html#ss6.3):
Authority records are transmitted with no encryption. If you're even
worried someone might snoop on your connections, use ssh, the secure
shell. It will do X forwarding over encrypted connections.
Len by som uz rad vedel, ako na to ten ssh pouzit (to uz citujem sam
seba)...
Jarry
--
Sent through Global Message Exchange - http://www.gmx.net
Další informace o konferenci linux