On Fri, Apr 21, 2000 at 01:25:20AM -0600, Warner Losh wrote:
> In message <[EMAIL PROTECTED]> "Andrew Reilly" writes:
> : Have you got "X11Forwarding yes"
> 
> Ahem.  "ForwardX11 yes" is what's documented and is known to work.

Bzzzt.  Man sshd(8):

     X11Forwarding
             Specifies whether X11 forwarding is permitted.  The default is
             ``yes''. Note that disabling X11 forwarding does not improve se-
             curity in any way, as users can always install their own for-
             warders.

Man ssh(1):

     ForwardX11
             Specifies whether X11 connections will be automatically redirect-
             ed over the secure channel and DISPLAY set.  The argument must be
             ``yes'' or ``no''.


What man ssh(1) doesn't tell you in this paragraph is that even
if you say "ForwardX11 yes" in ~/.ssh/config, you will not get
a proxy X session unless the server has "X11Forwarding yes" in
/etc/ssh/sshd_config.  The default that my system configured
itself with was "X11Forwarding no", and I've just changed it,
and now it works.

That's what I found out as a result of this conversation.

-- 
Andrew


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to