[CentOS] ssh x11 forwarding problem

[Tony Schreiner]

On Feb 18, 2006, at 10:47 AM, Ron Yorston wrote:

> Tony Schreiner <schreian at bc.edu> wrote:
>> Now, when using
>> X11UseLocalhost no
>>
>> no X applications work
>>
>> ssh myserver
>> # echo $DISPLAY
>> myserver.fqdn:10.0
>> # xdpyinfo
>> xdpyinfo:  unable to open display "myserver.fqdn:10.0".
>
> It appears that in FC4 setting 'X11UseLocalhost no' causes sshd to  
> listen
> for X connections only on the IPV6 port:
>
> $ netstat -ant | grep 6010
> tcp        0      0 ::: 
> 6010                     :::*                        LISTEN
>
> I'd say this was a bug, and indeed there is such a report in the  
> openssh
> bugzilla, but it's supposed to have been fixed years ago.  I've tried
> forcing sshd to use IPV4 only (with the -4 flag) but that just gets me
> back into the land of X authentication failures.
>
> Ron


One more addendum

If X11UseLocalhost no
is required for the application

It can be made to work with

ListenAddress 0.0.0.0
X11UseLocalhost no

in /etc/ssh/sshd_config

but also, set

OPTIONS=-4

in /etc/sysconfig/sshd

then restart sshd

I remember this was a bug that developed in OpenSSH for Solaris, and  
I don't know if it was ever fixed there either.
Tony Schreiner