Well done Patrice, I'll have a try on it as soon as possible.
Best regards, Massimo B.T.W. Have a look at a pacage called zebedee it's an encrypting tool wich can encrypt udp as well as tcp. [EMAIL PROTECTED] wrote: > --__--__-- > > Message: 15 > Date: Tue, 13 Nov 2001 13:49:08 +0100 > From: Dumas Patrice <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: [Ltsp-discuss] X over ssh done > > Hi Massimo and all, > > I finally got X over ssh to work. (The trick was to add an ORIG_DISPLAY.) > I added what I did to my lts_ssh package available at > > http://www.geocities.com/patpertusus/ > > It didn't slowed much my workstation, however my setup is only one workstation, > so maybe it slows down the server. > > Basically it works the following way: > > The user authenticate on the tty against the ssh server and at the same > time download his private key. ssh-agent/ssh-add adds the private key, and then > > xinit /usr/bin/ssh -X server 'ORIG_DISPLAY=workstation:0 start-window-manager' -- >Xserver > > begins the X session. > > The advantage of this setup is that there is no secret to be shared with the > server, and at the same time all the X stuff, the password, and so on is > encrypted. > > It doesn't protect against man in the middle attack, but I think nothing can > protect an Xterminal from such an attack. > > Maybe it would be even better if everything was graphical, and if it was > possible to choose a server among other, or if the server could advertise how > loaded he is, or if it was possible to choose vnc or X at the login. > > Pat -- ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~ Massimo Mongardini _______________________________________________ /____/\ Collaboratore Tecnico E.R. Servizio Calcolo e Reti /____/ \ Istituto Nazionale Fisica Nucleare - Perugia \____\ / [EMAIL PROTECTED] \____\/ t. 075-585-2777
begin:vcard n:Mongardini;Massimo tel;work:075-585-2777 x-mozilla-html:FALSE org:INFN - PG adr:;;;;;; version:2.1 email;internet:[EMAIL PROTECTED] x-mozilla-cpt:;-25280 fn:Massimo Mongardini end:vcard
