RE: lug-bg: ssh and DISPLAY ?
- Subject: RE: lug-bg: ssh and DISPLAY ?
- From: newbivol@email.domain.hidden (Peter Zyumbilev)
- Date: Wed, 4 Jun 2003 15:50:34 +0300
Kkav e problema da si stenesh:
export DISPLAY=ip:0
xhost remote-host-ip
Tova ot RH manuala:
display=IP:0
This command allows remote display forwarding. In this command, IP
should be replaced with the IP address of the system you want the
display to appear on.
On the system you want the display to appear on, you must execute the
command xhost +remotehostname, where remotehostname is the name of the
host you are running the original display from. Using the command xhost
+remotehostname limits access to the remote display terminal and does
not allow access from anyone or any system not specifically authorized
for remote access.
Pozdravi,
BIVOL
<em class="quotelev1">>-----Original Message-----
<em class="quotelev1">>From: owner-lug-bg_at_linux-bulgaria.org
<em class="quotelev1">>[mailto:owner-lug-bg_at_linux-bulgaria.org] On Behalf Of raptor
<em class="quotelev1">>Sent: Wednesday, June 04, 2003 1:33 PM
<em class="quotelev1">>To: lug-bg_at_linux-bulgaria.org
<em class="quotelev1">>Cc: borj_at_gmx.co.uk
<em class="quotelev1">>Subject: Re: lug-bg: ssh and DISPLAY ?
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>XForward si e razresheno, no kato se logna w remote mashinata,
<em class="quotelev1">>DISPLAY ne e setnat waobshte..
<em class="quotelev1">>Problema e move bi zashtoto X servera e startiran pod drug account !!?
<em class="quotelev1">>Ima li nachin w takaw sluchai pak da si pusna programa prez "myaccount"
<em class="quotelev1">>
<em class="quotelev1">>local ---------ssh------> remote (userX has started X, not myaccount)
<em class="quotelev1">>
<em class="quotelev1">>#ssh myaccount_at_remote
<em class="quotelev1">>#echo $DISPLAY
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>#nt
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>(nt:17719): Gtk-WARNING **: cannot open display:
<em class="quotelev1">>#
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev1">>
<em class="quotelev2">>> -----BEGIN PGP SIGNED MESSAGE-----
<em class="quotelev2">>> Hash: SHA1
<em class="quotelev2">>>
<em class="quotelev2">>> On Wednesday 04 June 2003 11:05, raptor wrote:
<em class="quotelev3">>> > na seminara Georgi Chorbadviiski,
<em class="quotelev3">>> >
<em class="quotelev3">>> > zagatna za ssh i XForwarding.. ta waprosa mi e, kak po
<em class="quotelev1">>princip trqbwa da se
<em class="quotelev3">>> > setne DISPLAY promenliwata taka che kato se logna w remote
<em class="quotelev1">>mashinata da
<em class="quotelev3">>> > moga da startiram apps.. Kade se incializira tazi
<em class="quotelev1">>promenliwa...bash_rc,
<em class="quotelev3">>> > /etc/X11/..?
<em class="quotelev2">>>
<em class="quotelev2">>> Ïðåäíîòî ìàé íå áåøå ìíîãî óäà÷åí îòãîâîð, ñúæàëÿâàì.
<em class="quotelev2">>>
<em class="quotelev2">>> man ssh
<em class="quotelev2">>>
<em class="quotelev2">>> X11 and TCP forwarding
<em class="quotelev2">>> If the ForwardX11 variable is set to ?yes? (or, see the
<em class="quotelev1">>description of
<em class="quotelev2">>> the -X and -x options described later) and the user is
<em class="quotelev1">>using X11 (the
<em class="quotelev2">>> DISPLAY environment variable is set), the connection to
<em class="quotelev1">>the X11 display
<em class="quotelev2">>> is automatically forwarded to the remote side in such a
<em class="quotelev1">>way that any X11
<em class="quotelev2">>> programs started from the shell (or command) will go through the
<em class="quotelev2">>> encrypted channel, and the connection to the real X
<em class="quotelev1">>server will be made
<em class="quotelev2">>> from the local machine. The user should not manually
<em class="quotelev1">>set DISPLAY. For-
<em class="quotelev2">>> warding of X11 connections can be configured on the
<em class="quotelev1">>command line or in
<em class="quotelev2">>> configuration files.
<em class="quotelev2">>>
<em class="quotelev2">>> The DISPLAY value set by ssh will point to the server
<em class="quotelev1">>machine, but with a
<em class="quotelev2">>> display number greater than zero. This is normal, and
<em class="quotelev1">>happens because
<em class="quotelev2">>> ssh creates a ?proxy? X server on the server machine
<em class="quotelev1">>for forwarding the
<em class="quotelev2">>> connections over the encrypted channel.
<em class="quotelev2">>>
<em class="quotelev2">>> ssh will also automatically set up Xauthority data on
<em class="quotelev1">>the server machine.
<em class="quotelev2">>> For this purpose, it will generate a random
<em class="quotelev1">>authorization cookie, store
<em class="quotelev2">>> it in Xauthority on the server, and verify that any
<em class="quotelev1">>forwarded connections
<em class="quotelev2">>> carry this cookie and replace it by the real cookie
<em class="quotelev1">>when the connection
<em class="quotelev2">>> is opened. The real authentication cookie is never
<em class="quotelev1">>sent to the server
<em class="quotelev2">>> machine (and no cookies are sent in the plain).
<em class="quotelev2">>>
<em class="quotelev2">>> If the ForwardAgent variable is set to ?yes? (or, see
<em class="quotelev1">>the description of
<em class="quotelev2">>> the -A and -a options described later) and the user is
<em class="quotelev1">>using an authenti-
<em class="quotelev2">>> cation agent, the connection to the agent is
<em class="quotelev1">>automatically forwarded to
<em class="quotelev2">>> the remote side.
<em class="quotelev2">>>
<em class="quotelev2">>> Forwarding of arbitrary TCP/IP connections over the
<em class="quotelev1">>secure channel can be
<em class="quotelev2">>> specified either on the command line or in a
<em class="quotelev1">>configuration file. One
<em class="quotelev2">>> possible application of TCP/IP forwarding is a secure
<em class="quotelev1">>connection to an
<em class="quotelev2">>> electronic purse; another is going through firewalls.
<em class="quotelev2">>>
<em class="quotelev2">>> Ïðåãëåäàé sshd.conf íà ìàøèíàòà îò êîÿòî èñêàø äà ïóñêàø
<em class="quotelev1">>ïðèëîæåíèÿ è ñúîòâåòíèòå ssh.conf íà êëèåíòà çà âåðíèòå îïöèè,
<em class="quotelev1">>ðåôðåø íà äåìîíà àêî ïðîìåíèø íåùî è áè òðÿáâàëî äà ðàáîòè.
<em class="quotelev2">>> - --
<em class="quotelev2">>> Take care
<em class="quotelev2">>>
<em class="quotelev2">>>
<em class="quotelev2">>> Boris Jordanov (borj) <borj_at_gmx.co.uk>
<em class="quotelev2">>> ICQ 10751645
<em class="quotelev2">>>
<em class="quotelev2">>> PGP-key-fingerprint:------------------------------
<em class="quotelev2">>> CB23 8B52 5FBC F36A 1B61 F1ED 2831 E52D AAFF 7B08
<em class="quotelev2">>> - --------------------------------------------------
<em class="quotelev2">>> Public-key:---------------------------------------
<em class="quotelev2">>> http://borj.freeshell.org/borj.asc
<em class="quotelev2">>> - --------------------------------------------------
<em class="quotelev2">>> To err is human...
<em class="quotelev2">>> to really foul up requires the root password.
<em class="quotelev2">>> -----BEGIN PGP SIGNATURE-----
<em class="quotelev2">>> Version: GnuPG v1.2.1 (GNU/Linux)
<em class="quotelev2">>>
<em class="quotelev2">>> iD8DBQE+3boTKDHlLar/ewgRAmMJAJ4+0mWuDt0hqqQsiChs2qYZnGs32gCgufiY
<em class="quotelev2">>> oM+A/TWI59+VsGOtQB/qnQw=
<em class="quotelev2">>> =4H7i
<em class="quotelev2">>> -----END PGP SIGNATURE-----
<em class="quotelev2">>>
<em class="quotelev2">>>
<em class="quotelev1">>===============================================================
<em class="quotelev1">>=============
<em class="quotelev2">>> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
<em class="quotelev2">>> http://www.linux-bulgaria.org - Hosted by Internet Group
<em class="quotelev1">>Ltd. - Stara Zagora
<em class="quotelev2">>> To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
<em class="quotelev2">>>
<em class="quotelev1">>===============================================================
<em class="quotelev1">>=============
<em class="quotelev2">>>
<em class="quotelev1">>===============================================================
<em class="quotelev1">>=============
<em class="quotelev1">>A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
<em class="quotelev1">>http://www.linux-bulgaria.org - Hosted by Internet Group Ltd.
<em class="quotelev1">>- Stara Zagora
<em class="quotelev1">>To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
<em class="quotelev1">>===============================================================
<em class="quotelev1">>=============
<em class="quotelev1">>
============================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers).
http://www.linux-bulgaria.org - Hosted by Internet Group Ltd. - Stara Zagora
To unsubscribe: http://www.linux-bulgaria.org/public/mail_list.html
============================================================================
|