[linux] ssh: denied X11 forwarding

Jarry guru jarry na gmx.net
Úterý Leden 18 06:41:15 CET 2000


Stefan Petrucha wrote:

>> "Warning: Remote host denied X11 forwarding."
>
> Mozno je to hovadina, ale nepomohlo by xhost +masina, na ktoru som sa
> pripojil a kde spustam X-aplikacie (X client)? xhost samozrejme tam, kde
> mam pustene X-y (X server).

Je v tom nejaky zmatok, tak to skusim lepsie popisat:
Sedim (a som prihlaseny v X-soch) za masinou A, chcem sa cez ssh prihlasit
na masinu B. Cize:

Na "A" bezi X-server a spustam na nej ssh klienta,
Na "B" bezi sshd server, chcem na nej spustit X-klientov a zobrazit
       ich na X-serveri pocitaca A.

Tolko k tomu ujasneniu, co je klient a co server (A aj B su jedno aj
druhe, ibaze kazdy pre nieco ine). 
Ked sa prihlasim z A na B cez ssh, objavi sa ta hlaska:
  "Warning: Remote host denied X11 forwarding."
Znamena to, ze host B odmieta posunut display na x-server beziaci
na A. Inak prihlaseny som, v terminali mozem pracovat, ale X-klientov
nemozem spustit a zobrazovat si ich na A.

K tvojmu tipu tolko: Problem je niekde na B, cize nepomoze, ak na A
dam "xhost + B". A okrem toho, xhost je medzera v bezpecnosti, ktorej
sa (vraj) pomocou ssh da vyhnut.

Citujem
(Security-HOWTO-6.html#ss6.11):
This (xhost) is not very secure at all, because if someone has access
to your machine, they can xhost + their machine and get in easily. 
...
You can also use ssh (see ssh , above) to allow secure X connections.
This has the advantage of also being transparent to the end user, and
means that no unencrypted data flows across the network. 

(Remote-X-Apps-6.html#ss6.3):
Authority records are transmitted with no encryption. If you're even
worried someone might snoop on your connections, use ssh, the secure
shell. It will do X forwarding over encrypted connections.

Len by som uz rad vedel, ako na to ten ssh pouzit (to uz citujem sam
seba)...

Jarry

-- 
Sent through Global Message Exchange - http://www.gmx.net




Další informace o konferenci linux