X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=default; b=jC3 68tcnN6mJXNhnWrGszfIvD6AaOizubh5kH1CUhACJuUPc4mhBP7VtXGS3GdP8T5V UMuCAKMbYCtN5rdHuRBBEUqW6WrmsBxKX/SdKRtafWPYA3p8Ge4N3BYVaKXUagcb sp/a1ngdbpSpINEDD935ANVt6rpOSNC0siW75wvM= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:to:from:subject:date:message-id:mime-version :content-type:content-transfer-encoding; s=default; bh=rhdPvCWEl Zg8NLTx8vB+I0cZ+OE=; b=VBut6P2huoDs7Kz24w/hArO6vXby41z8ksHVj6xXY utlV1ZK44Oc+eCvj7TTkgaOT6k3fnK9JKc198/whCjIxgHP/KSk3NwjxiF/LZ5vy AIX3g/735wWCMX4hzaxsEWJfhSofO1r6bj9WWKmQytKaxvUTiN2GboGbvxp7LHUE 5A= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-0.1 required=5.0 tests=AWL,BAYES_00,RCVD_IN_DNSWL_NONE,RCVD_NUMERIC_HELO,SPF_HELO_PASS,SPF_PASS,T_FSL_HELO_BARE_IP_2,T_RP_MATCHES_RCVD autolearn=no version=3.3.2 X-HELO: plane.gmane.org To: cygwin AT cygwin DOT com From: Andrew DeFaria Subject: Trusted vs untrusted ssh/X connections Date: Thu, 19 Jun 2014 13:25:12 -0700 Lines: 39 Message-ID: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.6.0 X-IsSubscribed: yes This is something that's been bothering me for a long time and I thought I might look into it a little deeper. I'm not sure if I should post this here because it involves Cygwin/X but it also involves OpenSSh. When I ssh into a Linux machine using ForwardX11 I get those familiar messages: Warning: untrusted X11 forwarding setup failed: xauth key data not generated and according to https://cygwin.com/ml/cygwin-xfree/2008-11/msg00154.html: The warning can be silenced by using ssh -Y, since that is what ssh -X is doing now anyway. However, I find -Y to be 20 times slower to log in than -X: Adefaria-lt:time ssh cm-job-ldev01 echo 'hi' Warning: untrusted X11 forwarding setup failed: xauth key data not generated Warning: No xauth data; using fake authentication data for X11 forwarding. /usr/bin/xauth: error in locking authority file /home/adefaria/.Xauthority hi real 0m2.387s user 0m0.075s sys 0m0.446s Adefaria-lt:time ssh -Y cm-job-ldev01 echo 'hi' Warning: No xauth data; using fake authentication data for X11 forwarding. hi /usr/bin/xauth: error in locking authority file /home/adefaria/.Xauthority real 0m22.476s user 0m0.091s sys 0m0.477s Adefaria-lt: Bonus points if you can help me get right of the other errors! -- Andrew DeFaria http://defaria.com -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple