X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:mime-version
	:content-type:content-transfer-encoding; q=dns; s=default; b=jC3
	68tcnN6mJXNhnWrGszfIvD6AaOizubh5kH1CUhACJuUPc4mhBP7VtXGS3GdP8T5V
	UMuCAKMbYCtN5rdHuRBBEUqW6WrmsBxKX/SdKRtafWPYA3p8Ge4N3BYVaKXUagcb
	sp/a1ngdbpSpINEDD935ANVt6rpOSNC0siW75wvM=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:mime-version
	:content-type:content-transfer-encoding; s=default; bh=rhdPvCWEl
	Zg8NLTx8vB+I0cZ+OE=; b=VBut6P2huoDs7Kz24w/hArO6vXby41z8ksHVj6xXY
	utlV1ZK44Oc+eCvj7TTkgaOT6k3fnK9JKc198/whCjIxgHP/KSk3NwjxiF/LZ5vy
	AIX3g/735wWCMX4hzaxsEWJfhSofO1r6bj9WWKmQytKaxvUTiN2GboGbvxp7LHUE
	5A=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=-0.1 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO:	plane.gmane.org
To:	cygwin AT cygwin DOT com
From:	Andrew DeFaria <Andrew AT DeFaria DOT com>
Subject:	Trusted vs untrusted ssh/X connections
Date:	Thu, 19 Jun 2014 13:25:12 -0700
Lines:	39
Message-ID:	<lnvgv8$j3e$1@ger.gmane.org>
Mime-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0
X-IsSubscribed:	yes

This is something that's been bothering me for a long time and I thought 
I might look into it a little deeper. I'm not sure if I should post this 
here because it involves Cygwin/X but it also involves OpenSSh.

When I ssh into a Linux machine using ForwardX11 I get those familiar 
messages:

Warning: untrusted X11 forwarding setup failed: xauth key data not generated

and according to 
https://cygwin.com/ml/cygwin-xfree/2008-11/msg00154.html: The warning 
can be silenced by using ssh -Y, since that
is what ssh -X is doing now anyway.

However, I find -Y to be 20 times slower to log in than -X:

Adefaria-lt:time ssh cm-job-ldev01 echo 'hi'
Warning: untrusted X11 forwarding setup failed: xauth key data not generated
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  error in locking authority file /home/adefaria/.Xauthority
hi

real    0m2.387s
user    0m0.075s
sys     0m0.446s
Adefaria-lt:time ssh -Y cm-job-ldev01 echo 'hi'
Warning: No xauth data; using fake authentication data for X11 forwarding.
hi
/usr/bin/xauth:  error in locking authority file /home/adefaria/.Xauthority

real    0m22.476s
user    0m0.091s
sys     0m0.477s
Adefaria-lt:

Bonus points if you can help me get right of the other errors!
-- 
Andrew DeFaria
http://defaria.com


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -