From nobody@FreeBSD.ORG  Thu Jun  1 01:24:04 2000
Return-Path: <nobody@FreeBSD.ORG>
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 26E1837BE9F; Thu,  1 Jun 2000 01:24:04 -0700 (PDT)
Message-Id: <20000601082404.26E1837BE9F@hub.freebsd.org>
Date: Thu,  1 Jun 2000 01:24:04 -0700 (PDT)
From: larson@pa.dec.com
Sender: nobody@FreeBSD.ORG
To: freebsd-gnats-submit@FreeBSD.org
Subject: X11 forwarding not requested with DISPLAY defined
X-Send-Pr-Version: www-1.0

>Number:         18934
>Category:       misc
>Synopsis:       X11 forwarding not requested with DISPLAY defined
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Thu Jun 01 01:30:00 PDT 2000
>Closed-Date:    Wed Nov 8 08:45:38 PST 2000
>Last-Modified:  Wed Nov 08 08:45:54 PST 2000
>Originator:     Alan Larson
>Release:        4.0 release
>Organization:
Compaq Computer Corp.
>Environment:
FreeBSD alan.pa.dec.com 4.0-RELEASE FreeBSD 4.0-RELEASE #0: Mon Mar 20 22:50:22 GMT 2000     root@monster.cdrom.com:/usr/src/sys/compile/GENERIC  i386        
>Description:
The man page says X11 forwarding is requested when DISPLAY is set
on the originating system.  It is apparently not so, as -X needs
to be set as well in the originating command.

This might be related to the defaulting of X11 to disabled in sshd
referred to in a previous bug report, in that someone turned them
both off, but why?

>How-To-Repeat:
verify DISPLAY set to your display
ssh remote-host-that-allows-xforwards

>Fix:


>Release-Note:
>Audit-Trail:

From: Johan Karlsson <Johan.Karlsson@sm.luth.se>
To: freebsd-gnats-submit@FreeBSD.org, larson@pa.dec.com
Cc:  
Subject: Re: misc/18934: X11 forwarding not requested with DISPLAY defined
Date: Wed, 02 Aug 2000 16:42:52 +0200

 Hi
 
 From ssh(1) on a 4.1-Stable
 
 "Forwarding of X11 connections weakens the security of ssh and is 
 disabled by default.  X11 forwarding can be enabled on the command line
 or in configuration files."
 
 Hence you need to uncomment 
 #   ForwardX11 yes
 in the ssh_config file (in /etc/ssh for 4.2-stable with OpenSSH).
 
 /Johan K
 
 
 -- 
 Johan Karlsson              Phone : +46 (0)920 720 16 
 Systemteknik, Datalogi      Fax   : +46 (0)920 721 91 
 Lule Tekniska Universitet  E-mail: Johan.Karlsson@SM.LuTH.SE
 S-971 87 LULE, SWEDEN
 
State-Changed-From-To: open->feedback 
State-Changed-By: sheldonh 
State-Changed-When: Wed Aug 2 08:12:52 PDT 2000 
State-Changed-Why:  
Are you happy with Johan's explanation? 

http://www.freebsd.org/cgi/query-pr.cgi?pr=18934 
State-Changed-From-To: feedback->closed 
State-Changed-By: dirk 
State-Changed-When: Wed Nov 8 08:45:38 PST 2000 
State-Changed-Why:  
Feedback timeout... 

http://www.freebsd.org/cgi/query-pr.cgi?pr=18934 
>Unformatted:
