[CentOS] X11 connection rejected because of wrong authentication
Daniel J Walsh
dwalsh at redhat.com
Mon Nov 25 13:56:22 UTC 2013
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 11/25/2013 08:50 AM, James B. Byrne wrote:
>
> On Sun, November 24, 2013 20:08, Timothy Murphy wrote:
>> I'd like to run SELinux on my CentOS server in enforcing mode, but I get
>> the above message when I run sealert. I assume this is because I am
>> accessing the server from my laptop?
>>
>> In any case, I googled for the message, and this threw up dozens of
>> similar queries over many years. Most of the ones I read offered methods
>> of avoiding the problem rather than solving it.
>>
>> Am I right in thinking the message arises from my remote connection?
>
> Yes. It arises from your ssh connection. You are probably using the -Y or
> -X option with xauth.
>
>
>> And if so, is there a simple solution?
>
> Perhaps. The error you have is caused by one of two things: 1. incorrect
> SELinux settings on the ~/.Xauthority file or your home directory. Run
> restorcon -vR ~ to fix those. 2. incorrect ownership or permissions on
> ~/.Xauthority.
>
> The second condition can also be triggered by logging in via ssh as one
> user and su -l to another on the remote host. In my case I find that the
> second circumstance is the most frequent cause of the exact error you
> report.
>
> HTH
>
>
What AVC messages are you getting?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlKTVwYACgkQrlYvE4MpobPk+wCfdWhaWr9nWb9+qoPEndU2yfek
iiwAnjJnV4j868i8g98SZt2sByxYIv72
=ur4z
-----END PGP SIGNATURE-----
More information about the CentOS
mailing list