Date: Fri, 4 May 2001 20:49:06 -0700 (PDT) From: Jin Guojun (DSD staff) <jin@iss-p1.lbl.gov> To: FreeBSD-gnats-submit@freebsd.org Subject: ports/27086: OpenSSH does not set X11 forwarding Message-ID: <200105050349.f453n6c00943@iss-p1.lbl.gov>
next in thread | raw e-mail | index | archive | help
>Number: 27086
>Category: ports
>Synopsis: OpenSSH does not set X11 forwarding
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: freebsd-ports
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: sw-bug
>Submitter-Id: current-users
>Arrival-Date: Fri May 04 20:50:01 PDT 2001
>Closed-Date:
>Last-Modified:
>Originator:
>Release: FreeBSD 4.3-RELEASE i386
>Organization:
>Environment:
System: FreeBSD iss-p1.lbl.gov 4.3-RELEASE FreeBSD 4.3-RELEASE #0: Wed May 2 11:12:43 PDT 2001 root@iss-p1.lbl.gov:/usr/src/sys/compile/MinMax i386
OpenSSH client
>Description:
This is ssh client and sshd support to do:
X11 and TCP forwarding
If the user is using X11 (the DISPLAY environment variable is set), the
connection to the X11 display can be forwarded to the remote side in such
a way that any X11 programs started from the shell (or command) will go
through the encrypted channel, and the connection to the real X server
will be made from the local machine. The user should not manually set
DISPLAY. Forwarding of X11 connections weakens the security of ssh and
is disabled by default. X11 forwarding can be enabled on the command
line or in configuration files.
The DISPLAY value set by ssh will point to the server machine, but with a
display number greater than zero. This is normal, and happens because
ssh creates a ``proxy'' X server on the server machine for forwarding the
connections over the encrypted channel.
---
But when Open SSH client connects to a sshd (any, including Open sshd),
the DISPLAY will not set up correctly (see below).
>How-To-Repeat:
# wrong X11 forwarding
OpenSSH % ssh anySSHD-host
anySSHD-host% printenv DISPLAY
OpenSSH
# correct X11 forwarding
NormalSSH % ssh anySSHD-host
anySSHD-host% printenv DISPLAY
NormalSSH:11.0
>Fix:
Do not know.
It seems that OpenSSH client dose not provide correct tunneling info.
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200105050349.f453n6c00943>