Re: X11 forward in F12

2010-05-12 Thread Suvayu Ali
On Wednesday 12 May 2010 02:25 PM, birger wrote: > On Wed, 2010-05-12 at 11:15 -0700, Suvayu Ali wrote: >> On Wednesday 12 May 2010 08:55 AM, Kevin Fenzi wrote: >>> On Tue, 11 May 2010 21:42:35 -0700 >>> Suvayu Ali wrote: >>> I think the man page for ssh is a little misleading (mis-worded >>

Re: X11 forward in F12

2010-05-12 Thread birger
On Wed, 2010-05-12 at 11:15 -0700, Suvayu Ali wrote: > On Wednesday 12 May 2010 08:55 AM, Kevin Fenzi wrote: > > On Tue, 11 May 2010 21:42:35 -0700 > > Suvayu Ali wrote: > > > >> I think the man page for ssh is a little misleading (mis-worded > >> maybe?). I posted the relevant section from `man 5

Re: X11 forward in F12

2010-05-12 Thread Suvayu Ali
On Wednesday 12 May 2010 08:55 AM, Kevin Fenzi wrote: > On Tue, 11 May 2010 21:42:35 -0700 > Suvayu Ali wrote: > >> I think the man page for ssh is a little misleading (mis-worded >> maybe?). I posted the relevant section from `man 5 ssh_config' in >> another message to this thread. That seems to

Re: X11 forward in F12

2010-05-12 Thread Kevin Fenzi
On Tue, 11 May 2010 21:42:35 -0700 Suvayu Ali wrote: > I think the man page for ssh is a little misleading (mis-worded > maybe?). I posted the relevant section from `man 5 ssh_config' in > another message to this thread. That seems to imply otherwise. > > I'm not at all well versed in anything X

Re: X11 forward in F12

2010-05-11 Thread Suvayu Ali
Hi Kevin, On Tuesday 11 May 2010 09:13 PM, Kevin Fenzi wrote: > On Tue, 11 May 2010 14:43:22 -0700 > Suvayu Ali wrote: > >> May I suggest using -Y instead of -X. Its supposed to be more secure. > > This is not a good idea. ;) > > If you use -X it uses all the regular xauth checks for access/secur

Re: X11 forward in F12

2010-05-11 Thread Kevin Fenzi
On Tue, 11 May 2010 14:43:22 -0700 Suvayu Ali wrote: > May I suggest using -Y instead of -X. Its supposed to be more secure. This is not a good idea. ;) If you use -X it uses all the regular xauth checks for access/security. If you use -Y it makes a 'trusted' forward. This could leave you ex

Re: X11 forward in F12

2010-05-11 Thread Suvayu Ali
On Tuesday 11 May 2010 07:25 PM, Tim wrote: > On Tue, 2010-05-11 at 14:43 -0700, Suvayu Ali wrote: >> May I suggest using -Y instead of -X. Its supposed to be more secure. > > That's not clear from the man file: > > -X Enables X11 forwarding. This can also be specified on a per-host >

Re: X11 forward in F12

2010-05-11 Thread Gene Heskett
On Tuesday 11 May 2010, Tim wrote: >On Tue, 2010-05-11 at 14:43 -0700, Suvayu Ali wrote: >> May I suggest using -Y instead of -X. Its supposed to be more secure. > >That's not clear from the man file: > >-X Enables X11 forwarding. This can also be specified on a > per-host basis in a conf

Re: X11 forward in F12

2010-05-11 Thread Tim
On Tue, 2010-05-11 at 14:43 -0700, Suvayu Ali wrote: > May I suggest using -Y instead of -X. Its supposed to be more secure. That's not clear from the man file: -X Enables X11 forwarding. This can also be specified on a per-host basis in a configuration file.

Re: X11 forward in F12

2010-05-11 Thread Marcus D. Leech
On 05/11/2010 05:43 PM, Suvayu Ali wrote: > > May I suggest using -Y instead of -X. Its supposed to be more secure. > > I'm not that worried, given that all the computers involved are mine, on a network that is also mine, behind a virewall that I manage. -- Marcus Leech Principal Investiga

Re: X11 forward in F12

2010-05-11 Thread Suvayu Ali
On Monday 10 May 2010 05:58 PM, Marcus D. Leech wrote: >> >> On Mon, 10 May 2010 20:34:18 -0400 >> "Marcus D. Leech" wrote: >> >> >> You want to: >> >> - make sure the 'xauth' package is installed on the machine you are >>connecting to. >> >> - Use 'ssh -X' (NOTE: cap X, not x). lower case x d

Re: X11 forward in F12

2010-05-10 Thread Marcus D. Leech
> > On Mon, 10 May 2010 20:34:18 -0400 > "Marcus D. Leech" wrote: > > > You want to: > > - make sure the 'xauth' package is installed on the machine you are > connecting to. > > - Use 'ssh -X' (NOTE: cap X, not x). lower case x disables ssh > forwarding. ;) > > kevin > Yup, I was mist

Re: X11 forward in F12

2010-05-10 Thread Kevin Fenzi
On Mon, 10 May 2010 20:34:18 -0400 "Marcus D. Leech" wrote: > What in the name of all that's holy do I need to > install/enable/disable to get X11 forwarding to work > in F12? > > I had a vague recollection that the default SELinux policy blocked it > in F12, but I disabled SELinux, and > I

Re: X11 forward in F12

2010-05-10 Thread Ed Greshko
On 05/11/2010 08:34 AM, Marcus D. Leech wrote: > What in the name of all that's holy do I need to install/enable/disable > to get X11 forwarding to work > in F12? > > I had a vague recollection that the default SELinux policy blocked it in > F12, but I disabled SELinux, and > I still can't get

X11 forward in F12

2010-05-10 Thread Marcus D. Leech
What in the name of all that's holy do I need to install/enable/disable to get X11 forwarding to work in F12? I had a vague recollection that the default SELinux policy blocked it in F12, but I disabled SELinux, and I still can't get X11 forwarding to work. The shell that I get on the system