Subject: RE: ssh chaining?
From: Mac Mason (macmasta@ak.net)
Date: Tue Feb 03 2004 - 09:14:07 AKST
Yes, but that undoes the nice 'encryption' thing we all like ssh for,
and just sends your X traffic in plaintext. ('text'? Sort of...)
Anyway, I'd double-check that you have X forwarding enabled on all the
machines in question, and then I'd install X11 on the openBSD machine,
and just not run it, because I'll bet X11 forwarding relies on some
subset of the X libraries.
~Mac~
On Tue, 2004-02-03 at 09:50, Hassler, Jeff wrote:
> You probably need to set the display; although, I haven't tried this
> going through a 'middle tier'.
>
> From the 'client':
> xhost <host name>
> xhost <middle tier name>
>
> From the 'host'
> export DISPLAY=3D<client name>:0.0
>
> Then test the xclock.
>
> I tried it out, and it worked.=20
>
> -----Original Message-----
> From: aklug-bounce@aklug.org [mailto:aklug-bounce@aklug.org] On Behalf
> Of Thomison, Lee
> Sent: Monday, February 02, 2004 11:08 AM
> To: aklug@aklug.org
> Subject: ssh chaining?
>
>
> I'm trying to do X windows thru a 'chain' of ssh logins...
>
> Me -> ssh box1 -> ssh box2
>
> Is this doable?
>
> I ssh into box1, and then from box1 I ssh into box2. I actually want to
> be doing X work in box2, using my laptop as a X11 'terminal' at kaladi
> bros. In, say, Hawaii....
>
> As you may have guessed tho, it doesn't work. Here's the error:
>
> Error: Can't open display:
>
> My laptop has Xfree on it (gentoo)
>
> Box1 is an openbsd box that does not have X on it. I can ssh into box1
> just fine.
>
> I can ssh into box2 just fine. It has X on it. But typing xclock&
> gives the "error: can't open display:". No display number
>
> Here's the box1 sshd_config:
>
> Port 22
> Protocol 2
> AllowTCPForwarding yes
> X11Forwarding yes
> GatewayPorts yes
>
> Box1 ssh_config:
>
> Host *
> ForwardX11 yes
> Protocol 2
> Port 22
> ForwardAgent yes
>
> box2 sshd_config:
>
> Port 22
> Protocol 2
> AllowTCPForwarding yes
> X11Forwarding yes
> GatewayPorts yes
>
> Box2 ssh_config:
>
> Host *
> ForwardX11 yes
> Protocol 2
> Port 22
> ForwardAgent yes
>
> What am I missing?
>
> Thx,
>
> Lee
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
> ---------
> To unsubscribe, send email to <aklug-request@aklug.org>
> with 'unsubscribe' in the message body.
>
>
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
This archive was generated by hypermail 2a23 : Tue Feb 03 2004 - 09:13:59 AKST