-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Kern Sibbald wrote: > On Tuesday 11 July 2006 22:58, Bennett, Silas (GE Indust, Security) wrote: >> You should use ssh -X not ssh -Y, read below... > > After seeing everyone's kind responses, I realized that I had gone through > this 5 or 6 years ago and simply turned on X11 forwarding in my default ssh > conf file, and over all those years, when I upgraded, it remained turned on. > > When the problem happened now with a new distro, and thus X11 forwarding not > turned on by default (quite reasonable), I went down the wrong track thinking > it was an X permissions problem, and totally forgot that it is ssh that does > the X forwarding. Duh ...
A little of both actually. You could also have solved the problem by setting the DISPLAY variable to $REMOTEHOST:0.0 where REMOTEHOST is your remote host name, if that's not already defined. The corresponding requirement on the client end (which for X is really the server end -- but I digress) is to set xhost +<remote server name>, to allow the host machine to send data to the display machine. What the SSH forwarding does is sets the DISPLAY variable to localhost:## where ## is the offset defined in sshd_config. It then sets up an SSH tunnel from localhost to the display machine, and takes care of the auth portion for you. -X is essentially a big short cut, not a replacement for the standard X11 permissions. - -- ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | |Ryan Novosielski - Systems Programmer III |$&| |__| | | |__/ | \| _| |[EMAIL PROTECTED] - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEtIchmb+gadEcsb4RAuMbAJ9l9UnBkr/qL5MabbsQE1OAbawd7wCbBXZf JH6HWs+9NJbMiFOJWI1Sulg= =/TP9 -----END PGP SIGNATURE----- ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
