Re: [Sheflug] Firewall config - for Ross.

["Stephen J. Turnbull" <nospam [at] sk.tsukuba.ac.jp>]

>>>>> "Guennadi" == Guennadi Liakhovetski <g.liakhovetski [at] ragingbull.com> writes:

    Guennadi> Emn, I am not quite clear here too... If you run an ssh
    Guennadi> session and from it you start a (remote) X-client - is
    Guennadi> it enough to wrap X in ssh or you have to do something
    Guennadi> else? I couldn't seem to find an answer to this in ssh
    Guennadi> man / info...

It's not very clear, but yes, it should be totally automagic.  Suppose
you have a local machine `here'.  Start an xterm to display on `here',
and you should get ":0.0" from `echo $DISPLAY'.  If you don't, ssh
won't work.

In this xterm, do `ssh -X there' to host `there'.  Do `echo $DISPLAY',
you should get something like "there:10.0".  "But I don't want my X
apps to display `there', I want them `here'!"  It's OK.  Note the "10"
-- that is the ssh program pretending to be an X server.

But ssh does not "serve X", it simply sends the protocol back over the
wire to where it came from, and from there to the local X server.  so
in the ssh session, start an xterm (with no -display argument and
leaving the DISPLAY envvar as ssh set it).  You should get an xterm on
your local X display.  Try asking the shell in the new xterm what the
display is, it will tell you DISPLAY=="there:10.0".

    Guennadi> Yesterday my firewall (quick self-setup, certainly not
    Guennadi> flawless, might want to test it sometime somewhere -
    Guennadi> suggestions?) blocked my attempt to run an X-session
    Guennadi> from ssh...

Check the DISPLAY variable, it's probably set incorrectly for some
reason.  Or you forgot to use the -X flag to ssh.

-- 
University of Tsukuba                Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
Institute of Policy and Planning Sciences       Tel/fax: +81 (298) 53-5091
_________________  _________________  _________________  _________________
What are those straight lines for?  "XEmacs rules."
---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.