From owner-freebsd-questions@freebsd.org Thu May 10 17:27:32 2018 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A0285FD12BF for ; Thu, 10 May 2018 17:27:32 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms-10.1blu.de (mail.dpedia.de [178.254.4.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 38D7C6F65D for ; Thu, 10 May 2018 17:27:31 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from [88.217.102.219] (helo=localhost.unixarea.de) by ms-10.1blu.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.86_2) (envelope-from ) id 1fGpLi-0001my-Oq; Thu, 10 May 2018 19:27:26 +0200 Received: from localhost.my.domain (localhost [127.0.0.1]) by localhost.unixarea.de (8.15.2/8.14.9) with ESMTPS id w4AHROu9003948 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO); Thu, 10 May 2018 19:27:24 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by localhost.my.domain (8.15.2/8.14.9/Submit) id w4AHRNBO003947; Thu, 10 May 2018 19:27:23 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: localhost.my.domain: guru set sender to guru@unixarea.de using -f Date: Thu, 10 May 2018 19:27:23 +0200 From: Matthias Apitz To: Bruce Ferrell Cc: freebsd-questions@freebsd.org Subject: Re: ssh -X remote does not work due to problem with xauth Message-ID: <20180510172723.GA3877@c720-r314251> Reply-To: Matthias Apitz Mail-Followup-To: Bruce Ferrell , freebsd-questions@freebsd.org References: <587e3b37-c5c7-4af2-80e2-f7c040a4d221@unixarea.de> <7edbad31-8ac8-9c27-2536-9a9a37a579b6@kicp.uchicago.edu> <20180510150154.GA2699@c720-r314251> <0b7b1b99-36cb-d22c-b2a2-84120f6f1359@baywinds.org> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="cWoXeonUoKmBZSoM" Content-Disposition: inline In-Reply-To: <0b7b1b99-36cb-d22c-b2a2-84120f6f1359@baywinds.org> X-Operating-System: FreeBSD 12.0-CURRENT r314251 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. User-Agent: Mutt/1.8.0 (2017-02-23) X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 88.217.102.219 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 May 2018 17:27:32 -0000 --cWoXeonUoKmBZSoM Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable El d=C3=ADa jueves, mayo 10, 2018 a las 08:46:00a. m. -0700, Bruce Ferrell = escribi=C3=B3: > I think this output is key: >=20 > couldn't query Security extension on display ":0" Yes, I agree. > xauth (at the sshd end) is attempting to interrogate the X server on the= =20 > ssh end and not getting an expected response, and as a result failing to= =20 > generate the necessary entries in the file xauth file. No. I straced the remote sshd while I ssh'ed into the server. On the remote= side there is no xauth called: $ grep exec sshd.tr 1369 execve("/usr/sbin/sshd", ["/usr/sbin/sshd", "-D", "-R"], [/* 3 vars *= /] 1369 <... execve resumed> ) =3D 0 1373 execve("/bin/bash", ["-bash"], [/* 12 vars */]) =3D 0 1375 execve("/usr/bin/readlink", ["readlink", "/proc/1373/exe"], [/* 15 va= rs */]) =3D 0 1377 execve("/usr/bin/tty", ["tty"], [/* 15 vars */]) =3D 0 1379 execve("/bin/uname", ["/bin/uname", "-n"], [/* 16 vars */]) =3D 0 1381 execve("/bin/uname", ["/bin/uname", "-m"], [/* 16 vars */]) =3D 0 1383 execve("/usr/bin/manpath", ["/usr/bin/manpath", "-q"], [/* 32 vars */= ]) =3D 0 1385 execve("/usr/bin/ls", ["ls", "/etc/bash_completion.d"], [/* 38 vars *= /]) =3D 0 1387 execve("/usr/bin/tty", ["tty"], [/* 43 vars */]) =3D 0 1391 execve("/usr/bin/sed", ["sed", "-r", "s@/*:|([^\\\\]):@\\1\\n@g;H;x;s= @/\\n@"...], [/* 48 vars */]) =3D 0 1395 execve("/usr/bin/sed", ["sed", "-r", "s@/*:|([^\\\\]):@\\1\\n@g;H;x;s= @/\\n@"...], [/* 49 vars */]) =3D 0 1397 execve("/usr/bin/dircolors", ["/usr/bin/dircolors", "-b", "/etc/DIR_C= OLORS"], [/* 53 vars */]) =3D 0 1399 execve("/usr/bin/tput", ["/usr/bin/tput", "hs"], [/* 55 vars */]) =3D= 0 1401 execve("/usr/bin/tput", ["/usr/bin/tput", "tsl"], [/* 55 vars */]) = =3D 0 1403 execve("/usr/bin/tput", ["/usr/bin/tput", "fsl"], [/* 55 vars */]) = =3D 0 1405 execve("/usr/bin/tput", ["tput", "sc"], [/* 55 vars */]) =3D 0 1407 execve("/usr/bin/tput", ["tput", "rc"], [/* 55 vars */]) =3D 0 1410 execve("/usr/bin/tty", ["tty"], [/* 55 vars */]) =3D 0 $ grep xauth sshd.tr $=20 The problem is LOCAL on FreeBSD. (Btw: my colleagues use Ubuntu and do not have this problem.) I will move this thread to freebsd-x11@ because it has more todo with X11 t= han with the ssh client. matthias --=20 Matthias Apitz, =E2=9C=89 guru@unixarea.de, http://www.unixarea.de/ +49-176= -38902045 Public GnuPG key: http://www.unixarea.de/key.pub May, 9: =D0=A1=D0=BF=D0=B0=D1=81=D0=B8=CC=81=D0=B1=D0=BE =D0=BE=D1=81=D0=B2= =D0=BE=D0=B1=D0=BE=D0=B4=D0=B8=D1=82=D0=B5=D0=BB=D0=B8! Thank you very much= , Russian liberators! --cWoXeonUoKmBZSoM Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXmn7rBYYViyzy/vBR8z35Hb+nREFAlr0gPgACgkQR8z35Hb+ nRGzbw/9Gsj2t4ckToDh62qjGZwEuLn21gAbNSuCD2Ds3mx2ThqwN7MY8yjbodVG 31E2HsSsnJqcx33k4S+ozrzLJCZ9mq1f/7dB5noA8yY38kYNSMej1TZw8cxbERS9 +gc8uzi1rPLa5q68bX/KBnkd4sxYuxTw/FT2MYW4ii6i4mR7usQycChYLiwaJLnd xX+SAFIglva08WLGHOGOwujBW8qLh46B2Mi570Vrx9OK1J0JPnBSpjZ0Uscghl9f ZSv0V+LeK9x5O3v22WHOXmXRw8Ye7Zz+qm/RxFzN/WZwSpdM7y9qFVuWO/xEX06U A3ymI51yCqb1ODPm0mIQ35+k+Zde/29qQgnetbv3SJlutZNtIEI3xnCWx0u63m6/ /qGf6MFJAXFlYedvU7ugft7jFYs8cJrxRIXIMA7HCe/yxqmQJyNPoCFQz/uQHHQE whp7wAhpcVjsYpWc+qol1buOo0yZSygN0VVLAukQRUxp85Rp14ZGayJwq3ottrho hYgowfwO2eLmjLFwveUKi/I3DVG/Bq0MZQDIDF9f5YB2RTq+xSHj85LI15D/khSL jr23fErib40OPVnT4+PeBUX4isATe0IhBx8M4TXWEqrspjoo0YwX082GLydJCl3L n/8yB9nFdh/p+OoykoApy9Pf0muJUWVCCUIZmnYWZy/ExJEz4IE= =P4Re -----END PGP SIGNATURE----- --cWoXeonUoKmBZSoM--