X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding
	:in-reply-to; q=dns; s=default; b=LExrFpnhxjhxIScsTdGkttQsCaAaca
	4MLlKGQAhkpsKJN+ENnrIHKy673X/Ni/kzlo35zJrQ4PvnJy0+2wH48Bp2UHaJ/l
	Hc7kN3WE6JlphSbsq24CYqZK/qOlqwPLOLXWpyd/1U4936ZddBTzaalGdwg8aDKG
	/DyApCo+HhrTU=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:references
	:mime-version:content-type:content-transfer-encoding
	:in-reply-to; s=default; bh=1vvT3GDPDnk//zmrf7iAwv2aRVc=; b=bSeD
	hbYcVa0wcZQo/F7itz6nKRsh5CD5cIs63tXRUCm4NNSeC8Pzb1qXw5idaEjOK7Fj
	j43gm9GHJjP0GtiAwgCqvNKNzKXjilKMP5cJ0TjTVWStYKzHsmG02UX6XtFLhFxa
	tk2x/7FJU8wJ1s3hYdeSPhJ4ZklhhKmnjQq6G7A=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=0.3 required=5.0 tests=AWL,BAYES_00,FSL_HELO_BARE_IP_2,RCVD_IN_DNSWL_LOW,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_RP_MATCHES_RCVD autolearn=no version=3.3.2
X-HELO:	plane.gmane.org
To:	cygwin AT cygwin DOT com
From:	Andrew DeFaria <Andrew AT DeFaria DOT com>
Subject:	Re: X11Forward and xauth problems
Date:	Mon, 23 Mar 2015 14:27:30 -0700
Lines:	80
Message-ID:	<meq0g3$hob$1@ger.gmane.org>
References:	<mepu7q$9dr$1 AT ger DOT gmane DOT org> <55108046 DOT 1070206 AT dronecode DOT org DOT uk>
Mime-Version:	1.0
User-Agent:	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
In-Reply-To:	<55108046.1070206@dronecode.org.uk>
X-IsSubscribed:	yes

On 3/23/2015 2:06 PM, Jon TURNEY wrote:
> On 23/03/2015 20:48, Andrew DeFaria wrote:
>> Normally I just turn on -X (or put X11Forward yes in ~/.ssh/config) but
>> that usually results in a noticeable delay in logging in and the
>> following error:
>>
>> Warning: untrusted X11 forwarding setup failed: xauth key data not
>> generated
>> Warning: No xauth data; using fake authentication data for X11
>> forwarding.
>
> Firstly, if you don't want these warnings, use ssh -Y.
>
> (By using ssh -X, you are asking for something which the X server can't
> give you, hence the warnings.  See
> http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-trusted-untrusted-x11-forwarding
> for more details)

Yeah but -Y gives me the same thing:

Adefaria-lt:ssh -Y cm-app-ldev01
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  unable to link authority file 
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
Cm-app-ldev01:

>
>> /usr/bin/xauth:  unable to link authority file
>> /home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
>> Cm-app-ldev01:
>>
>> I've asked about this in the past and I think the answer was that the
>> message was correct but you shouldn't worry about it. If it didn't slow
>
> I'm sorry, I only have a vague memory of this discussion.
>
>> me down I probably would just ignore it. But it slows me down. So I ssh
>> instead without X11Forward turned on then, when I need to run an X
>> client, I do export DISPLAY=adefaria-lt:0 and make sure that I did an
>> xhost + there at least once. But now that's broken!
>>
>> Adefaria-lt:xhost +
>> access control disabled, clients can connect from any host
>> Adefaria-lt:ssh cm-app-ldev01
>> Cm-app-ldev01:export DISPLAY=adefaria-lt:0
>> Cm-app-ldev01:xclock
>> Error: Can't open display: adefaria-lt:0
>> Cm-app-ldev01:
>
> If you want this to work, you will now (since X server 1.17) need to
> start the server with the option '-listen tcp'.

Restarted Xwin with -multimonitor and -listen tcp. Now I get:

Adefaria-lt:ssh -Y cm-app-ldev01
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  unable to link authority file 
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
Cm-app-ldev01:echo $DISPLAY
localhost:10.0
Cm-app-ldev01:xclock
X11 connection rejected because of wrong authentication.
Error: Can't open display: localhost:10.0
Cm-app-ldev01:


>
> [1] https://cygwin.com/ml/cygwin-xfree-announce/2015-02/msg00026.html
> [2]
> http://x.cygwin.com/docs/ug/using-remote-apps.html#using-remote-apps-telnet
> [3]
> http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-remote-clients-cant-connect
>
> [4] https://cygwin.com/ml/cygwin-xfree/2015-02/msg00051.html
>


-- 
Andrew DeFaria
http://defaria.com


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -