DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:to:from:subject:date:message-id:mime-version
	:content-type:content-transfer-encoding; q=dns; s=default; b=fxD
	s/ifz7kFNu3Ktf8rsX9rOabdleXN/6nJPLrWJMZB42LaOkXO57Bjg47lEBPx32+r
	yJq5C1lJ1/t4ZtP9QYU3yU65YOBk7r0ukD2GqfvoUPzcRrjmQ6x8fP52OrcCwvCN
	N+4+A0Mg064Y546pzyTtLfUJEnNRPWdwytwgnjyc=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
To: cygwin AT cygwin DOT com
From: Andrew DeFaria <Andrew AT DeFaria DOT com>
Subject: X11Forward and xauth problems
Date: Mon, 23 Mar 2015 13:48:57 -0700
Lines: 52
Message-ID: <mepu7q$9dr$1@ger.gmane.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0

Normally I just turn on -X (or put X11Forward yes in ~/.ssh/config) but 
that usually results in a noticeable delay in logging in and the 
following error:

Warning: untrusted X11 forwarding setup failed: xauth key data not generated
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  unable to link authority file 
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
Cm-app-ldev01:

I've asked about this in the past and I think the answer was that the 
message was correct but you shouldn't worry about it. If it didn't slow 
me down I probably would just ignore it. But it slows me down. So I ssh 
instead without X11Forward turned on then, when I need to run an X 
client, I do export DISPLAY=adefaria-lt:0 and make sure that I did an 
xhost + there at least once. But now that's broken!

Adefaria-lt:xhost +
access control disabled, clients can connect from any host
Adefaria-lt:ssh cm-app-ldev01
Cm-app-ldev01:export DISPLAY=adefaria-lt:0
Cm-app-ldev01:xclock
Error: Can't open display: adefaria-lt:0
Cm-app-ldev01:

I still don't understand xauth but I've been playing with it and I can 
sometimes get it to work.

Adefaria-lt:rm ~/.Xauthority*
Adefaria-lt:ssh -X cm-app-ldev01 xclock
Warning: untrusted X11 forwarding setup failed: xauth key data not generated
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  creating new authority file /home/adefaria/.Xauthority
Adefaria-lt:ssh -X cm-app-ldev01 xclock
Warning: untrusted X11 forwarding setup failed: xauth key data not generated
Warning: No xauth data; using fake authentication data for X11 forwarding.
/usr/bin/xauth:  unable to link authority file 
/home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
X11 connection rejected because of wrong authentication.
Error: Can't open display: localhost:12.0
Adefaria-lt:

The first ssh to cm-app-ldev01 to run xclock works fine. Do it again and 
it fails.

Ideal solution: ssh -X works with no warnings or musings about .Xauthority.

Workable solution(s): Either that ssh -X complains about .Xauthority but 
still reliably puts up X clients or I can use xhost + and export DISPLAY.
-- 
Andrew DeFaria
http://defaria.com


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple