Jason Stelzer on 18 Aug 2010 16:37:41 -0700


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] X11 basics.

  • From: Jason Stelzer <jason.stelzer@gmail.com>
  • To: "Philadelphia Linux User's Group Discussion List" <plug@lists.phillylinux.org>
  • Subject: Re: [PLUG] X11 basics.
  • Date: Wed, 18 Aug 2010 19:37:37 -0400
  • Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=e3CVfc/YHmYPZoTEYfwaTwxoga/axEMWRgsX5xMHy7E=; b=YHhUjKKsKFkUu7qlU9GMcMaPkbZzx73pzDWMw2xetQAgEXEY3KFGT44yZOQ0mDrLCl blZSeiiwrq/Szg7Fv9CdX5kKrM+aGvnuw1EDQlPl8KtONST+wPQjHnORoJHnblg6LL36 5hoDE5aIlTamlD2MWXR5EhF9fUFnk+YUuHd1k=
  • Reply-to: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
  • Sender: plug-bounces@lists.phillylinux.org

Quick note on this.... Right around the time that Theo discovered the
joys of X11 forwarding's hidden uses, the forwarding was split into 2
pieces of functionality.

You have a -X and a -Y parameter you can use when invoking ssh. -X
will do X11 forwarding and works with most remote apps except for the
ones it doesn't. The ones it doesn't work with, are usually programs
that do 'weird' things. Like say... the gimp. For those, you can
enable trusted X11 forwarding with -Y if you choose to and try again.

Short message (an example errors) is this:
http://www.openssh.com/faq.html#3.13

The distinction between trusted and untrusted mit magic cookies is an
exercise for the reader.

On Wed, Aug 18, 2010 at 7:11 PM, Joe Kisela <jkisela@gmail.com> wrote:
>> I just ssh -X from a laptop and the installer displays on the laptop. ÂI
>> have found out from past experie thinknce that if you use DBCA (Database
>> Creation Assistant it fails over SSH. ÂIt still wants to use old way
>> (export DISPLAY=laptopip:0.0)
>
>>Why should there EVER be a GUI on a server? ÂWhy should GUI cruft even
>>live on the server's disk?
>
> Well, you need to remember that for X11, "Client" and "Server" are the
> opposite of what you would normally expect.
>
> You don't need to be running X on a dbserver to run remote X apps, where you
> export DISPLAY (or ssh -X) , run a remote X11 CLIENT program that displays
> on your local X11 SERVER. X11 does not need to be running on the box that
> you are telnet'd/ssh'd into.
>
> It should also be noted that the -X option has been disabled by default in
> sshd since Theo deRaadt got rooted on an exploit. You need to enable it in
> your sshd config on the server you are trying to ssh to.
>
> As for the Ubuntu guys breaking POSIX compliance - I have a large list of
> issues with a lot of "helpful" things that Ubuntu has done. I won't get
> into it. It's pointless, people like to reinvent wheels.
>
> ___________________________________________________________________________
> Philadelphia Linux Users Group     --    Âhttp://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion Â-- Â http://lists.phillylinux.org/mailman/listinfo/plug
>
>



-- 
J.
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug