Re: SSH X11 forwarding issues (with verbose data)
On 04/09/2006, Philip H. Schlesinger wrote: Somebody else posted that ZoneAlarm jumps in the way of Cygwin's OpenSSH - even if ZoneAlarm is shut down, but I have a hard time believing that's the issue... Well, you could help convince yourself one way or the other by uninstalling ZoneAlarm for the purposes of testing and try the failing scenario again. -- Larry Hall http://www.rfk.com RFK Partners, Inc. (508) 893-9779 - RFK Office 838 Washington Street (508) 893-9889 - FAX Holliston, MA 01746 -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
Hi Jack. ssh -Y ended up with me doing the following: $ /usr/X11R6/bin/xauth list 127.0.0.1:0.0 /usr/X11R6/bin/xauth: creating new authority file /home/phil/.Xauthority Nothing happened on the other xterm window, so I went looking for /home/phil/.Xauthority - it didn't exist! (yes, I typed ls -a) :) So I tried ssh -X ... and ended up with me doing the following: $ /usr/X11R6/bin/xauth -f /tmp/ssh-Q7ut6XsxFY/xauthfile generate 127.0.0.1:0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 /usr/X11R6/bin/xauth: creating new authority file /tmp/ssh-Q7ut6XsxFY/xauthfile now a file called "xauthfile" was created in that directory, and its contents were: 0MIT-MAGIC-COOKIE-1&<12 character long pseudorandom string> But still, no movement on the xterm window. Here's the oddity: Why could I just start the Cygwin/X server and run putty for windows with X11 forwarding and it'll work just fine? Why would X-Win32 with its built-in StarnetSSH client work just fine completely on its own? Somebody else posted that ZoneAlarm jumps in the way of Cygwin's OpenSSH - even if ZoneAlarm is shut down, but I have a hard time believing that's the issue... - Phil Jack Tanner wrote: No, it should be on the local computer. Try this: run startxwin.bat, then open two xterms. In one, run the ssh -Y -vv ... command. When it freezes, in the other xterm try to run the xauth command by hand. By the way, I gave you the wrong command syntax below. That should've been $ /usr/X11R6/bin/xauth -f /tmp/ssh-WHATEVER/... If I'm wrong, and it is on the remote computer, then from the second xterm you should be able to ssh in without X forwarding, and try it on the remote machine. Philip H. Schlesinger wrote: That appears to be something generated on the fly - and by the looks of it, on the remote computer, as that directory doesn't exist. - Phil Jack Tanner wrote: Philip H. Schlesinger wrote: Jack Tanner wrote: >> debug2: x11_get_proto: /usr/X11R6/bin/xauth -f >> /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 >> MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null > > 1) What do you get if you try that by command hand (sans the /dev/null > redirection)? Not sure what you mean here...forgive my n00b-ness... Err, that should've said "try that command by hand". As in, $ /tmp/ssh-WHATEVER/xauthfile generate [...] timeout 1200 (Drop the 2> /dev/null bit at the end, thus keeping the output from xauthfile from being redirected to /dev/null.) -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
No, it should be on the local computer. Try this: run startxwin.bat, then open two xterms. In one, run the ssh -Y -vv ... command. When it freezes, in the other xterm try to run the xauth command by hand. By the way, I gave you the wrong command syntax below. That should've been $ /usr/X11R6/bin/xauth -f /tmp/ssh-WHATEVER/... If I'm wrong, and it is on the remote computer, then from the second xterm you should be able to ssh in without X forwarding, and try it on the remote machine. Philip H. Schlesinger wrote: That appears to be something generated on the fly - and by the looks of it, on the remote computer, as that directory doesn't exist. - Phil Jack Tanner wrote: Philip H. Schlesinger wrote: Jack Tanner wrote: >> debug2: x11_get_proto: /usr/X11R6/bin/xauth -f >> /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 >> MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null > > 1) What do you get if you try that by command hand (sans the /dev/null > redirection)? Not sure what you mean here...forgive my n00b-ness... Err, that should've said "try that command by hand". As in, $ /tmp/ssh-WHATEVER/xauthfile generate [...] timeout 1200 (Drop the 2> /dev/null bit at the end, thus keeping the output from xauthfile from being redirected to /dev/null.) -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
That appears to be something generated on the fly - and by the looks of it, on the remote computer, as that directory doesn't exist. - Phil Jack Tanner wrote: Philip H. Schlesinger wrote: Jack Tanner wrote: >> debug2: x11_get_proto: /usr/X11R6/bin/xauth -f >> /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 >> MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null > > 1) What do you get if you try that by command hand (sans the /dev/null > redirection)? Not sure what you mean here...forgive my n00b-ness... Err, that should've said "try that command by hand". As in, $ /tmp/ssh-WHATEVER/xauthfile generate [...] timeout 1200 (Drop the 2> /dev/null bit at the end, thus keeping the output from xauthfile from being redirected to /dev/null.) -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
Philip H. Schlesinger wrote: Jack Tanner wrote: >> debug2: x11_get_proto: /usr/X11R6/bin/xauth -f >> /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 >> MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null > > 1) What do you get if you try that by command hand (sans the /dev/null > redirection)? Not sure what you mean here...forgive my n00b-ness... Err, that should've said "try that command by hand". As in, $ /tmp/ssh-WHATEVER/xauthfile generate [...] timeout 1200 (Drop the 2> /dev/null bit at the end, thus keeping the output from xauthfile from being redirected to /dev/null.) -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
Jack Tanner wrote: >> debug2: x11_get_proto: /usr/X11R6/bin/xauth -f >> /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 >> MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null > > 1) What do you get if you try that by command hand (sans the /dev/null > redirection)? Not sure what you mean here...forgive my n00b-ness... > 2) What do you get if you skip X-forwarding altogether? Works fine. > 3) What do you get if you rm the xauthority data on both sides of the > connection? Only .Xauthority was on the remote PC, and problem still exists... debug3: no such identity: /home/phil/.ssh/id_dsa debug2: we did not send a packet, disable method debug3: authmethod_lookup keyboard-interactive debug3: remaining preferred: password debug3: authmethod_is_enabled keyboard-interactive debug1: Next authentication method: keyboard-interactive debug2: userauth_kbdint debug2: we sent a keyboard-interactive packet, wait for reply debug2: input_userauth_info_req debug2: input_userauth_info_req: num_prompts 1 Password: debug3: packet_send2: adding 32 (len 22 padlen 10 extra_pad 64) debug2: input_userauth_info_req debug2: input_userauth_info_req: num_prompts 0 debug3: packet_send2: adding 48 (len 10 padlen 6 extra_pad 64) debug1: Authentication succeeded (keyboard-interactive). debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Entering interactive session. debug2: callback start debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-Xc8hsbJjXZ/xauthfile generate 127.0.0.1:0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null Jack Tanner wrote: Philip H. Schlesinger wrote: I tried the -vvv mode and here's the screen capture: debug1: Authentication succeeded (keyboard-interactive). OK, good. You're authenticated after entering your password. debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null 1) What do you get if you try that by command hand (sans the /dev/null redirection)? 2) What do you get if you skip X-forwarding altogether? 3) What do you get if you rm the xauthority data on both sides of the connection? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
Philip H. Schlesinger wrote: I tried the -vvv mode and here's the screen capture: debug1: Authentication succeeded (keyboard-interactive). OK, good. You're authenticated after entering your password. debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null 1) What do you get if you try that by command hand (sans the /dev/null redirection)? 2) What do you get if you skip X-forwarding altogether? 3) What do you get if you rm the xauthority data on both sides of the connection? -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: SSH X11 forwarding issues (with verbose data)
I tried the -vvv mode and here's the screen capture: debug3: no such identity: /home/phil/.ssh/id_dsa debug2: we did not send a packet, disable method debug3: authmethod_lookup keyboard-interactive debug3: remaining preferred: password debug3: authmethod_is_enabled keyboard-interactive debug1: Next authentication method: keyboard-interactive debug2: userauth_kbdint debug2: we sent a keyboard-interactive packet, wait for reply debug2: input_userauth_info_req debug2: input_userauth_info_req: num_prompts 1 Password: debug3: packet_send2: adding 32 (len 22 padlen 10 extra_pad 64) debug2: input_userauth_info_req debug2: input_userauth_info_req: num_prompts 0 debug3: packet_send2: adding 48 (len 10 padlen 6 extra_pad 64) debug1: Authentication succeeded (keyboard-interactive). debug1: channel 0: new [client-session] debug3: ssh_session2_open: channel_new: 0 debug2: channel 0: send open debug1: Entering interactive session. debug2: callback start debug2: x11_get_proto: /usr/X11R6/bin/xauth -f /tmp/ssh-zfHmWgkGRG/xauthfile generate 127.0.0.1:0.0 MIT-MAGIC-COOKIE-1 untrusted timeout 1200 2>/dev/null Sterling Baker wrote: I believe the use of '-X' has been depreciated. Try using '-Y' instead. Sterling -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Philip H. Schlesinger Sent: Wednesday, April 05, 2006 10:07 PM To: cygwin-xfree@cygwin.com Subject: SSH X11 forwarding issues Hi all. I just upgraded my Cygwin to the latest version and found a rather interesting problem: I can do the following command in the bash window with no problem: ssh @ it prompts me for my password and then takes me in from there. -- However, if I: startx ssh -X @server location> It prompts me for my password and then hangs. -- If I: startxwin.bat ssh -X @server location> same problem: It prompts me for my password and then hangs. -- The only way I've successfully made a connection with X forwarding is: startxwin.bat Execute putty for windows with X11 forwarding enabled Enter username and password And I'm off and running... Help? - Phil -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/