IPfilter
[Top] [All Lists]

Re: which port is used when one sets DISPLAY=clienthost:0 ?

Subject: Re: which port is used when one sets DISPLAY=clienthost:0 ?
From: cadu <oxyopes@googlemail.com>
Date: Tue, 15 May 2007 18:11:35 +0200
Cc: ipfilter <ipfilter@coombs.anu.edu.au>
Delivered-to: sp-com-lists@consult.net
Delivered-to: ipfilter-list@securepoint.com
Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=googlemail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=tmD++D0B4eD46++PNAFvtPQ69X6rwO2eP3YYJci1RL3+3shhdXjDSdOvA9NZJiUHvErwsAzNTzVZ8uE6XorcQLBdW+4OUtBKOfIke/wBAbFi3nZJmkFETnTSuBSrg9YGqOwLDdxiXw8ckoMeo7Q4E2RONZvbpOfbtMgJg33cvAA=
Domainkey-signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=r0FwN3xEvHbNKT/EUr1prgAjKG1aesUmX64JsquvQdSG1A5UQWEQER6wLjrNUJ3Z2h0UUk9fT29FIljnkHVuLi88iHaLwkWkxaIc0kVlww4zMkTe9k0E+9ygr52lcnD1aSG3wfST1hJ3Mk8O+WTneM5VYnHEI3vQG0le0EARFWk=
In-reply-to: <464996E1.2CD7.004D.1@ems.rmit.edu.au>
References: <98aa46640705141712w2ba5fa4bsaa198bc03ddf47fc@mail.gmail.com> <464996E1.2CD7.004D.1@ems.rmit.edu.au>
Sender: owner-ipfilter@coombs.anu.edu.au
Thanks again Stuart. You are responsible of a greate improvement
of my understanding on that. Just a last question  :-)
If i SSH from user1@A to user1@B, and then `su user2`
inside B, the X forwarding is broken, even if i
setenv DISPLAY localhost:10 or wharever number.
This is the message:
  X11 connection rejected because of wrong authentication.
  X connection to localhost:10.0 broken (explicit kill or server shutdown).

Is it possible to be fixed? Like if user2 is root, i cannot
log in directy to it from SSH. All the best ...


If it's DISPLAY=A:0 it would be a (non-encrypted,
non-tunnelled) TCP connection to A port 6000.

Whereas DISPLAY=A:1 would be to A port 6001
(and the X server would need to know how to
talk to a second display, such as two monitors
or some virtual display setup).


<Prev in Thread] Current Thread [Next in Thread>