"Marion Hakanson" <hakan...@ohsu.edu> writes:
> Tom, were you using "ssh -Y" to connect from macOS to RHEL?  Somewhere
> in the OpenSSH development chain we all had to switch from using "ssh -X"
> to "ssh -Y", which had some xauth/security ramifications.

Yup, me too.

... although now that I look at it, I have both of these things
set in .ssh/config for that host:

        ForwardX11 yes
        ForwardX11Trusted yes

Does it work to enable only the latter?  Is that better?

BTW, after poking around a bit I found where the config difference
is.  XQuartz installation appends this to /etc/ssh/ssh_config:

        # XAuthLocation added by XQuartz (http://www.xquartz.org)
        Host *
            XAuthLocation /opt/X11/bin/xauth

and then macOS takes that back out again :-(.  Since there's no
/usr/bin/xauth, it's not real surprising that things don't work
without that.

                        regards, tom lane

_______________________________________________
Exmh-users mailing list
Exmh-users@redhat.com
https://www.redhat.com/mailman/listinfo/exmh-users

Reply via email to