OpenSSH
[Top] [All Lists]

Re: X forwarding: trying to forward to busy local port

To: openssh-unix-dev@mindrot.org
Subject: Re: X forwarding: trying to forward to busy local port
From: Lars Kruse <kruse@silicann.com>
Date: Mon, 5 Feb 2007 12:47:11 +0100
Delivered-to: sp-com-lists@consult.net
Delivered-to: openssh-unix-dev-list1@securepoint.com
Delivered-to: openssh-unix-dev-tmda@mindrot.org
Delivered-to: openssh-unix-dev@mindrot.org
In-reply-to: <20070201162824.6d5f8b77@jackdaw.neusy>
List-archive: <http://lists.mindrot.org/pipermail/openssh-unix-dev>
List-help: <mailto:openssh-unix-dev-request@mindrot.org?subject=help>
List-id: Development of portable OpenSSH <openssh-unix-dev.mindrot.org>
List-post: <mailto:openssh-unix-dev@mindrot.org>
List-subscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=subscribe>
List-unsubscribe: <http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev>, <mailto:openssh-unix-dev-request@mindrot.org?subject=unsubscribe>
Organization: Silicann Technologies
References: <20070201162824.6d5f8b77@jackdaw.neusy>
Sender: openssh-unix-dev-bounces+openssh-unix-dev-list1=securepoint.com@mindrot.org
Hi to all of you,

maybe my previous mail
(http://permalink.gmane.org/gmane.network.openssh.devel/13345) was not
clear enough, so I will try to summarize it more concisely:

If I use X-Frowarding, then the ssh-daemon offers DISPLAY settings,
that can not be used. Thus resulting in "cannot connect ..." errors.

>>From my point of view, the ssh-daemon should check, if (for example)
port 6014 is available before it offers the DISPLAY "localhost:4".

This not-checking is especially ugly, as the ssh-daemon itself occupied
the respective port during another X-Forwarding session.


Result:
for now there is no way for me to use X-Forwarding safely. The only
thing, I can do, is to regularly check (by cron), if there is an
X-Forwarding session, that occupies crucial ports (between 6000 and
6100). If this happens, then I have to ask the user to log out and
start his session again.
Otherwise all the other users would complain, that they cannot connect
to the X-Server.

How could I avoid this ugly situation?

Maybe I just do not really get the point?

regards,
Lars
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/listinfo/openssh-unix-dev

<Prev in Thread] Current Thread [Next in Thread>