DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:message-id:date:from:reply-to:mime-version:to
	:cc:subject:references:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=RYLmI6z61BSPCEwo
	YxHyDyIQ9qGNLK89nuY/ZGC3ks+/HSQi59gST6PSqf66/J32RWgDf4pirR/P7vvb
	J3DjcJRbAEp6xNKVp+NPVl7Vz5kcQ10B+FLCi5WLWCbjbThNj7EIIMuFbcS4jPeP
	aWtMWNsQWwEBml1TwHOtZh7cOPE=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Message-ID: <55108046.1070206@dronecode.org.uk>
Date: Mon, 23 Mar 2015 21:06:14 +0000
From: Jon TURNEY <jon DOT turney AT dronecode DOT org DOT uk>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
CC: Andrew AT DeFaria DOT com
Subject: Re: X11Forward and xauth problems
References: <mepu7q$9dr$1 AT ger DOT gmane DOT org>
In-Reply-To: <mepu7q$9dr$1@ger.gmane.org>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 7bit

On 23/03/2015 20:48, Andrew DeFaria wrote:
> Normally I just turn on -X (or put X11Forward yes in ~/.ssh/config) but
> that usually results in a noticeable delay in logging in and the
> following error:
>
> Warning: untrusted X11 forwarding setup failed: xauth key data not
> generated
> Warning: No xauth data; using fake authentication data for X11 forwarding.

Firstly, if you don't want these warnings, use ssh -Y.

(By using ssh -X, you are asking for something which the X server can't 
give you, hence the warnings.  See 
http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-trusted-untrusted-x11-forwarding 
for more details)

> /usr/bin/xauth:  unable to link authority file
> /home/adefaria/.Xauthority, use /home/adefaria/.Xauthority-n
> Cm-app-ldev01:
>
> I've asked about this in the past and I think the answer was that the
> message was correct but you shouldn't worry about it. If it didn't slow

I'm sorry, I only have a vague memory of this discussion.

> me down I probably would just ignore it. But it slows me down. So I ssh
> instead without X11Forward turned on then, when I need to run an X
> client, I do export DISPLAY=adefaria-lt:0 and make sure that I did an
> xhost + there at least once. But now that's broken!
>
> Adefaria-lt:xhost +
> access control disabled, clients can connect from any host
> Adefaria-lt:ssh cm-app-ldev01
> Cm-app-ldev01:export DISPLAY=adefaria-lt:0
> Cm-app-ldev01:xclock
> Error: Can't open display: adefaria-lt:0
> Cm-app-ldev01:

If you want this to work, you will now (since X server 1.17) need to 
start the server with the option '-listen tcp'.

[1] https://cygwin.com/ml/cygwin-xfree-announce/2015-02/msg00026.html
[2] 
http://x.cygwin.com/docs/ug/using-remote-apps.html#using-remote-apps-telnet
[3] 
http://x.cygwin.com/docs/faq/cygwin-x-faq.html#q-remote-clients-cant-connect
[4] https://cygwin.com/ml/cygwin-xfree/2015-02/msg00051.html

-- 
Jon TURNEY
Volunteer Cygwin/X X Server maintainer

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple