Xauth and cygwin-X
Hi I'm trying to get xauth going. From some previous posts and some reading I do the following: On my PC (called bach) $ xauth generate bach:0 . trusted timeout 300 $ xauth nextract - bach:0 | ssh 172.16.2.55 xauth nmerge - $ ssh -f -n 172.16.2.55 xterm -display bach:0 xterm launches, but my application (Analyze, a commercial image processing program) still says: Attempted a 'send' command, but X server insecure (must use xauth-style authorization). I also tried to tunnel X after this $ ssh -f -n -Y 172.16.2.55 xterm but I have exactly the same behaviour as above. Note that ssh still outputs the message Warning: No xauth data; using fake authentication data for X11 forwarding. I had this message already before using xauth, and the tunnel works exactly the same. I get the feeling that I do this wrong. From man Xsecurity I get the impression I should pass -auth to the X server, but there is no such option documented for Xwin. I've seen some emails from other people that they cannot get this to work. Hopefully somebody on this list knows better... Many thanks! Kris Thielemans Hammersmith Imanet, part of GE Healthcare London, United Kingdom -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Re: Using xauth with Cygwin-X
Frodak, thanks for the message. Sorry for the slow reply, but I've been out of town. I was aware of all the information in the User's Guide. Using the xhost commands as recommended actually caused problems with the Xserver on Solaris. I tried the solution you recommended. I didn't get any error messages, but as you mentioned it sometimes doesn't work and that was my experience. So I'm still looking for a solution. Larry Griffith - Original Message - From: Baksik, Frederick (NM75) [EMAIL PROTECTED] To: cygwin-xfree@cygwin.com Sent: Tuesday, August 02, 2005 8:36 PM Subject: RE: Using xauth with Cygwin-X -Original Message- From: cygwin-xfree-owner [mailto:cygwin-xfree-owner] On Behalf Of Larry Griffith Sent: Monday, August 01, 2005 12:28 PM Subject: Using xauth with Cygwin-X I use openSSH running under Cygwin-X to communicate with a Solaris workstation at work. When I logged into Solaris with SSH, I received messages that there was no valid xauth data and that fake data would be used for X11 forwarding. My mail reader (exmh) also complained repeatedly about failures of xauth authentication. I dug out my old X manual (which goes back to X11R5) and looked up xauth. It suggested running this command under Solaris: xauth -extract $DISPLAY | rsh my home PC with Cygwin xauth merge - Since I didn't want to use rsh I did this: 1) (Solaris) xauth -extract $DISPLAY xauth.data 2) I transferred xauth.data to the root directory under Cygwin, using SSH. 3) (Cygwin) xauth -merge /xauth.data The last command told me that a new /home/larry/.Xauthority file was created, which made sense to me. Otherwise there were no messages. I shut down my bash shell, closed my Cygwin X server, and restarted everything. I still get the same errors when I log into the Solaris workstation. Any suggestions? Larry Griffith Here is a link to the Cygwin/X user's guide on Displaying Remote Clients. http://x.cygwin.com/docs/ug/using-remote-apps.html In the past I was messing X11 forwarding with a Sun box and xauth was kind of a pain to use with telnet. In cygwin type xauth generate your_host:0 . trusted timeout 300 xauth nextract - your_host:0 On the remote station: xauth nmerge - Select the output from the cygwin command and copy it to the input of the remote station. Now the remote station can connect to the cygwin Xserver for the next 5 minutes. Also resetting the Cygwin Xserver will invalidate any keys generated. The biggest pain is that it doesn't always seem to work. It seems sometimes that cygwin will always reject the key. Also, some programs will halt with this kind of failure when starting (e.g. dtterm): X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 18 (X_ChangeProperty) Atom id in failed request: 0xda Serial number of failed request: 1720 Current serial number in output stream: 1722 Others will crash while running, also with a BadAtom failure. I didn't see these problems when using the xhost + method in the user's guide. YMMV -- Frodak -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/ -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
RE: Using xauth with Cygwin-X
-Original Message- Subject: Re: Using xauth with Cygwin-X Frodak, thanks for the message. Sorry for the slow reply, but I've been out of town. I was aware of all the information in the User's Guide. Using the xhost commands as recommended actually caused problems with the Xserver on Solaris. I tried the solution you recommended. I didn't get any error messages, but as you mentioned it sometimes doesn't work and that was my experience. So I'm still looking for a solution. Larry Griffith Sorry I'm really kind of confused on what it is you are trying to accomplish. xhost only contacts the display as set in the DISPLAY environment. This is how I use the telnet / xhost solution when I'm at my PC. in the standard Cygwin.bat bash shell 1) startxwin.sh Note: This is nice because I can watch any Xserver errors get displayed in the shell then in the xterm that gets starting with the X server 2) xhost +nm75uw099 // this will allow the sun to connect to the Xserver running in cygwin 3) telnet nm75uw099 4) setenv DISPLAY das-fbaksik:0.0 // I'm using tcsh on the Sun, das-fbaksik is the cygwin/windows box 5) start running X applications from the shell, e.g gvim Does this work? It is not secure because anyone logged into nm75uw099 can access the Xserver running on das-fbaksik, but it is a starting point. Also, have you considered running a XDMCP connection? I'm not sure what you're security requirements are, but this provides a more secure connection then just using telnet. This way a MIT cookie is generated and added to your .Xauthority file in your Sun account. There is no messing with Xhost, and those only with the MIT cookie can access the Xserver (which is still cygwin X). Sorry about the detailed directions, I just want to make sure we are talking about the same thing. Good luck, Frodak -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
RE: Using xauth with Cygwin-X
-Original Message- From: cygwin-xfree-owner [mailto:cygwin-xfree-owner] On Behalf Of Larry Griffith Sent: Monday, August 01, 2005 12:28 PM Subject: Using xauth with Cygwin-X I use openSSH running under Cygwin-X to communicate with a Solaris workstation at work. When I logged into Solaris with SSH, I received messages that there was no valid xauth data and that fake data would be used for X11 forwarding. My mail reader (exmh) also complained repeatedly about failures of xauth authentication. I dug out my old X manual (which goes back to X11R5) and looked up xauth. It suggested running this command under Solaris: xauth -extract $DISPLAY | rsh my home PC with Cygwin xauth merge - Since I didn't want to use rsh I did this: 1) (Solaris) xauth -extract $DISPLAY xauth.data 2) I transferred xauth.data to the root directory under Cygwin, using SSH. 3) (Cygwin) xauth -merge /xauth.data The last command told me that a new /home/larry/.Xauthority file was created, which made sense to me. Otherwise there were no messages. I shut down my bash shell, closed my Cygwin X server, and restarted everything. I still get the same errors when I log into the Solaris workstation. Any suggestions? Larry Griffith Here is a link to the Cygwin/X user's guide on Displaying Remote Clients. http://x.cygwin.com/docs/ug/using-remote-apps.html In the past I was messing X11 forwarding with a Sun box and xauth was kind of a pain to use with telnet. In cygwin type xauth generate your_host:0 . trusted timeout 300 xauth nextract - your_host:0 On the remote station: xauth nmerge - Select the output from the cygwin command and copy it to the input of the remote station. Now the remote station can connect to the cygwin Xserver for the next 5 minutes. Also resetting the Cygwin Xserver will invalidate any keys generated. The biggest pain is that it doesn't always seem to work. It seems sometimes that cygwin will always reject the key. Also, some programs will halt with this kind of failure when starting (e.g. dtterm): X Error of failed request: BadAtom (invalid Atom parameter) Major opcode of failed request: 18 (X_ChangeProperty) Atom id in failed request: 0xda Serial number of failed request: 1720 Current serial number in output stream: 1722 Others will crash while running, also with a BadAtom failure. I didn't see these problems when using the xhost + method in the user's guide. YMMV -- Frodak -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/
Using xauth with Cygwin-X
I use openSSH running under Cygwin-X to communicate with a Solaris workstation at work. When I logged into Solaris with SSH, I received messages that there was no valid xauth data and that fake data would be used for X11 forwarding. My mail reader (exmh) also complained repeatedly about failures of xauth authentication. I dug out my old X manual (which goes back to X11R5) and looked up xauth. It suggested running this command under Solaris: xauth -extract $DISPLAY | rsh my home PC with Cygwin xauth merge - Since I didn't want to use rsh I did this: 1) (Solaris) xauth -extract $DISPLAY xauth.data 2) I transferred xauth.data to the root directory under Cygwin, using SSH. 3) (Cygwin) xauth -merge /xauth.data The last command told me that a new /home/larry/.Xauthority file was created, which made sense to me. Otherwise there were no messages. I shut down my bash shell, closed my Cygwin X server, and restarted everything. I still get the same errors when I log into the Solaris workstation. Any suggestions? Larry Griffith -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://x.cygwin.com/docs/ FAQ: http://x.cygwin.com/docs/faq/