From owner-freebsd-questions@FreeBSD.ORG Wed Aug 2 03:23:50 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BBAFC16A4EA for ; Wed, 2 Aug 2006 03:23:50 +0000 (UTC) (envelope-from micahjon@ywave.com) Received: from relay2.av-mx.com (relay2.av-mx.com [137.118.16.124]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4C95D43D45 for ; Wed, 2 Aug 2006 03:23:50 +0000 (GMT) (envelope-from micahjon@ywave.com) X-Virus-Scan-Time: 0 Received: from [137.118.16.61] (HELO mx0.av-mx.com) by relay2.av-mx.com (CommuniGate Pro SMTP 4.2.10) with SMTP id 344816499 for questions@freebsd.org; Tue, 01 Aug 2006 23:23:49 -0400 Received: (qmail 16705 invoked from network); 2 Aug 2006 03:23:48 -0000 Received: from dsl17146.ywave.com (HELO ?192.168.1.65?) (micahjon@ywave.com@216.227.104.146) by 0 with SMTP; 2 Aug 2006 03:23:48 -0000 X-CLIENT-IP: 216.227.104.146 X-CLIENT-HOST: dsl17146.ywave.com Message-ID: <44D01AC3.5050705@ywave.com> Date: Tue, 01 Aug 2006 20:23:47 -0700 From: Micah User-Agent: Thunderbird 1.5.0.5 (X11/20060730) MIME-Version: 1.0 To: "Chad Leigh -- Shire.Net LLC" References: <44CFE745.1000206@ywave.com> <974320D7-3E87-4D57-9A79-BD3ED46D1B0C@shire.net> In-Reply-To: <974320D7-3E87-4D57-9A79-BD3ED46D1B0C@shire.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: FreeBSD Questions Subject: Re: X11+ssh+jail X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Aug 2006 03:23:50 -0000 Chad Leigh -- Shire.Net LLC wrote: > > On Aug 1, 2006, at 5:44 PM, Micah wrote: > >> >> I'm having problems trying to get X11 to forward from an ezjail >> created jail environment. Here's what happens: >> >> trisha% ssh -X 10.0.0.1 >> ... >> test% xclock >> X11 connection rejected because of wrong authentication. > > Are you doing an su or something before you run the X program? I have > not had problems launching X programs in side a jail over ssh but I did > get that same error when I did an su first since I was no longer my > username. I copied the .Xauthority over from my user into ~root and it > worked. (In case anyone asks, I was testing a system management app > that needs to run as root to access some stuff and I was just testing it > for someone. I don't normally run X things at all or as root ) > > Chad > >> X connection to test:10.0 broken (explicit kill or server shutdown). >> >> I added "X11UseLocalhost no" to sshd_config as suggested on the lists >> a while back, but it didn't change anything. >> >> Host is: >> trisha# uname -a >> FreeBSD trisha.eidolonworld 6.1-RELEASE-p3 FreeBSD 6.1-RELEASE-p3 #1: >> Sat Jul 15 15:48:17 PDT 2006 >> root@trisha.eidolonworld:/usr/obj/usr/src/sys/TRISHA i386 >> >> Thanks, >> Micah > > --- > Chad Leigh -- Shire.Net LLC > Your Web App and Email hosting provider > chad at shire.net Nope I didn't su, I just ssh'd in as a regular user and immediately tried xclock. I also tried ssh'ing in as root to see if it's a perms problem, but root gets the same error. Maybe I've got a configuration error somewhere? ezjail mounts much of the file system ro, maybe that's causing a problem? Thanks, Micah