Re: [CentOS] remote ssh to machine how display firefox
I've looked over the man page for `ssh' and `ssh_config' on several systems and I think people have it backwards. The pages I read indicate that `-X' is more secure than `-Y'. Under the `-X' part on several systems I have access to says: "For this reason, X11 forwarding is subjected to X11 SECURITY extension restrictions by default." The `-Y' says: "Trusted X11 forwardings are not subjected to the X11 SECURITY extension controls." I would think being subjected to security controls would be more secure than not being subjected to them. -- Brent L. Bates (UNIX Sys. Admin.) M.S. 912 Phone:(757) 865-1400, x204 NASA Langley Research CenterFAX:(757) 865-8177 Hampton, Virginia 23681-0001 Email: [EMAIL PROTECTED] http://www.vigyan.com/~blbates/ ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On Sat, Dec 08, 2007, Les Mikesell wrote: >Les Bell wrote: >>Les Mikesell <[EMAIL PROTECTED]> wrote: >> >>What's a 'trusted' forwarding mean as opposed to any other kind? >><< >> >>A trusted X11 client will bypass the security controls specified in the X11 >>Security Extension Specification (see >>http://refspecs.freestandards.org/X11/security.pdf). In general, you don't >>want to enable this unless you have to. Notice that "trusted forwarding" >>trusts the users to all be good guys. > >Is there a way to describe it in more than 2 words but less than 18 >pages? The main point seems to be that almost nothing works if your >forwarding isn't trusted. But shouldn't being able to log in via ssh >mean that you are trusted? One would hope so, assuming authorized_keys and proper pass phrases (but then putty and others allow this from the Microsoft Virus, Windows and I don't trust anything coming from Windows). On the few systems where we permit ssh authentication with user name and password, access is tightly controlled via tcp_wrappers to specific IP addresses. Recently we have been using OpenVPN to allow secure access from remote users which makes restricting ssh access easier when people are roaming so can't be easily identified by IP address. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX:(206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 Cutting the space budget really restores my faith in humanity. It eliminates dreams, goals, and ideals and lets us get straight to the business of hate, debauchery, and self-annihilation. -- Johnny Hart ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Les Bell wrote: Les Mikesell <[EMAIL PROTECTED]> wrote: What's a 'trusted' forwarding mean as opposed to any other kind? << A trusted X11 client will bypass the security controls specified in the X11 Security Extension Specification (see http://refspecs.freestandards.org/X11/security.pdf). In general, you don't want to enable this unless you have to. Notice that "trusted forwarding" trusts the users to all be good guys. Is there a way to describe it in more than 2 words but less than 18 pages? The main point seems to be that almost nothing works if your forwarding isn't trusted. But shouldn't being able to log in via ssh mean that you are trusted? -- Les Mikesell [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Amos Shapira wrote: On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote: I am not doubting that -X will mostly work, but perhaps we should be promoting the idea of -Y a bit more. I'm totally with you about promoting security, but I got the impression it's the other way around and -X is the more secure one: -Y Enables trusted X11 forwarding. Trusted X11 forwardings are not subjected to the X11 SECURITY extension controls. -X is "more secure" in the sense that almost nothing works with it if trusted forwarding is turned off by default as in the more recent openssh packages. I still don't have much of a clue what trusted vs. untrusted forwarding actually means, though. -- Les Mikesell [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote: > I am not doubting that -X will mostly work, but perhaps we should be > promoting the idea of -Y a bit more. I'm totally with you about promoting security, but I got the impression it's the other way around and -X is the more secure one: -Y Enables trusted X11 forwarding. Trusted X11 forwardings are not subjected to the X11 SECURITY extension controls. --Amos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Bill Campbell <[EMAIL PROTECTED]> wrote: >> >(In fact, if you're on a trusted network, you shouldn't need to use SSH at >all, since you trust the devices (and their users) attached to the network >not to do nasty things like network sniffing, MitM attacks, etc.). True enough, but ssh makes the X11 DISPLAY things so easy! One doesn't have to much with xhosts and such. << Let me amplify (sorry for another post!): I was really making a point about the nature of trust, not the convenience of SSH. If you think you want to enabled trusted forwarding (-Y), ask yourself "Would I be happy telneting into this host?". If the answer is yes, then use trusted forwarding. If the answer is no, then don't. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Bill Campbell <[EMAIL PROTECTED]> wrote: >> True enough, but ssh makes the X11 DISPLAY things so easy! One doesn't have to much with xhosts and such. << Absolutely - you might *want* to use SSH for the convenience, but you shouldn't *need* to. I preach "SSH Everywhere" as SOP, even on trusted networks. This is probably the case almost everywhere, now that telnet is pretty much dead. Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Caveat to using firefox over X11... you will sometimes get corrupted images and icons. This is because firefox (and many other X11 applications) use shared memory to store images. The corruption comes because your local X11 server cant see that memory location and will write whatever it can get to fit that space. There are supposedly ways to fix this.. but I don't know of them off hand. -- Stephen J Smoogen. -- CSIRT/Linux System Administrator How far that little candle throws his beams! So shines a good deed in a naughty world. = Shakespeare. "The Merchant of Venice" ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On Sat, Dec 08, 2007, Les Bell wrote: > >Les Mikesell <[EMAIL PROTECTED]> wrote: > >>> >What's a 'trusted' forwarding mean as opposed to any other kind? ><< > >A trusted X11 client will bypass the security controls specified in the X11 >Security Extension Specification (see >http://refspecs.freestandards.org/X11/security.pdf). In general, you don't >want to enable this unless you have to. Notice that "trusted forwarding" >trusts the users to all be good guys. > >(In fact, if you're on a trusted network, you shouldn't need to use SSH at >all, since you trust the devices (and their users) attached to the network >not to do nasty things like network sniffing, MitM attacks, etc.). True enough, but ssh makes the X11 DISPLAY things so easy! One doesn't have to much with xhosts and such. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX:(206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 It is surprising how much new stuff users find that developers never do. You put a copy in front of a normal user and they find all these bugs that you would think developers would find. The real users and developers are completely different species as far as I am concerned. --Linux creator Linus Torvalds ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Les Mikesell <[EMAIL PROTECTED]> wrote: >> What's a 'trusted' forwarding mean as opposed to any other kind? << A trusted X11 client will bypass the security controls specified in the X11 Security Extension Specification (see http://refspecs.freestandards.org/X11/security.pdf). In general, you don't want to enable this unless you have to. Notice that "trusted forwarding" trusts the users to all be good guys. (In fact, if you're on a trusted network, you shouldn't need to use SSH at all, since you trust the devices (and their users) attached to the network not to do nasty things like network sniffing, MitM attacks, etc.). Best, --- Les Bell, RHCE, CISSP [http://www.lesbell.com.au] Tel: +61 2 9451 1144 FreeWorldDialup: 800909 ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On Fri, Dec 07, 2007, Les Mikesell wrote: >Karanbir Singh wrote: > >ssh -X firefox you prolly meant -Y :D >>>Ok well just double checked and tested it here and -X works here. I >>>knew about -Y but thought you only use that if you absolutely have too :) >> >>the reason I would prefer -Y is that its ( well, the man page says >>anyway ) more secure than -X. Also, these days a lot of admins will >>disable -X functionality on machines. Have not come across anywhere -Y >>didnt work ( and the host OS was installed in the last 5 years ). >> >>I am not doubting that -X will mostly work, but perhaps we should be >>promoting the idea of -Y a bit more. > >Coming from a fedora client, you have had to specify -Y for a while for >most things to work. But I don't think the man page makes it very clear >what the difference is. What's a 'trusted' forwarding mean as opposed >to any other kind? This is controlled by setting ForwardX11Trusted yes|no in the ssh_config file so my guess is that earlier versions of Fedora didn't set this. I first ran into a problem with this when connecting to a FreeBSD 4.8 system. It took me a while to figure out why X11 clients didn't work from my Linux desktops. The strange thing was that xeyes would work, but xterms would not. Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell; Celestial Software LLC URL: http://www.celestial.com/ PO Box 820; 6641 E. Mercer Way FAX:(206) 232-9186 Mercer Island, WA 98040-0820; (206) 236-1676 But how is this legal plunder to be identified? Quite simply. See if the law takes from some persons what belongs to them, and gives it to other persons to whom it does not belong. See if the law benefits one citizen at the expense of another by doing what the citizen himself cannot do without committing a crime. -- Frederic Bastiat, The Law ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Les Mikesell wrote: > Karanbir Singh wrote: > > ssh -X firefox you prolly meant -Y :D >>> Ok well just double checked and tested it here and -X works here. I >>> knew about -Y but thought you only use that if you absolutely have >>> too :) >> >> the reason I would prefer -Y is that its ( well, the man page says >> anyway ) more secure than -X. Also, these days a lot of admins will >> disable -X functionality on machines. Have not come across anywhere -Y >> didnt work ( and the host OS was installed in the last 5 years ). >> >> I am not doubting that -X will mostly work, but perhaps we should be >> promoting the idea of -Y a bit more. > > Coming from a fedora client, you have had to specify -Y for a while for > most things to work. But I don't think the man page makes it very clear > what the difference is. What's a 'trusted' forwarding mean as opposed > to any other kind? > here is ( a badly formated scrape from the man page ) 8< X11 forwarding should be enabled with caution. Users with the ability to bypass file permissions on the remote host (for the user’s X authorization database) can access the local X11 display through the forwarded connection. An attacker may then be able to perform activities such as keystroke monitor-ing. 8< and the -Y option indicates: -Y Enables trusted X11 forwarding. Trusted X11 forwardings are not subjected to the X11 SECURITY extension controls. 8< I am not quite sure about the implications of the X11 Security extension controls myself. But, i suppose thats worth some investigation. -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Karanbir Singh wrote: ssh -X firefox you prolly meant -Y :D Ok well just double checked and tested it here and -X works here. I knew about -Y but thought you only use that if you absolutely have too :) the reason I would prefer -Y is that its ( well, the man page says anyway ) more secure than -X. Also, these days a lot of admins will disable -X functionality on machines. Have not come across anywhere -Y didnt work ( and the host OS was installed in the last 5 years ). I am not doubting that -X will mostly work, but perhaps we should be promoting the idea of -Y a bit more. Coming from a fedora client, you have had to specify -Y for a while for most things to work. But I don't think the man page makes it very clear what the difference is. What's a 'trusted' forwarding mean as opposed to any other kind? -- Les Mikesell [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Akemi Yagi wrote: > ssh -D 1080 > > In firefox, Go to Edit -> Preferences -> Advanced -> Network -> Settings > Does firefox honour the Gnome Network Proxy settings ? If so, that might be another way to setup socks for the client side. It would allow you to have a fair few apps 'just work'. -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Clint Dilks wrote: >>> ssh -X firefox >> you prolly meant -Y :D >> > Ok well just double checked and tested it here and -X works here. I > knew about -Y but thought you only use that if you absolutely have too :) the reason I would prefer -Y is that its ( well, the man page says anyway ) more secure than -X. Also, these days a lot of admins will disable -X functionality on machines. Have not come across anywhere -Y didnt work ( and the host OS was installed in the last 5 years ). I am not doubting that -X will mostly work, but perhaps we should be promoting the idea of -Y a bit more. -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On Dec 7, 2007 7:53 AM, Jon Stanley <[EMAIL PROTECTED]> wrote:
> Or better yet use ssh -d and set your local SOCKS
> proxy to localhost: in your browser.
Yes, the SOCKS proxy method is indeed handy and you can redirect only
selected URLs fairly easily. In my case, there are web sites I can
access only from work computers and I need to get to them from home
but do not want to redirect all traffic through work.
Here is a brief howto.
ssh -D 1080
In firefox, Go to Edit -> Preferences -> Advanced -> Network -> Settings
In the Connection Settings box, select "Automatic proxy configuration
URL:" and enter:
file:///path/to/proxylist.pac
The proxylist.pac file may look like this:
function FindProxyForURL(url, host)
{
// Proxy direct connections to these hosts
if (
shExpMatch(url, "http://www.jbc.com/*";) ||
shExpMatch(url, "*.sgmjournals.org/*") ||
shExpMatch(url, "http://www.ncbi.nih.gov/*";)
) {
return "SOCKS localhost:1080; DIRECT";
}
// Otherwise go directly
else return "DIRECT";
}
For more details on the pac file and auto config, see
http://en.wikipedia.org/wiki/Proxy_auto-config
Akemi
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On Dec 6, 2007 11:22 PM, Amos Shapira <[EMAIL PROTECTED]> wrote: > > You can take it further (if you have more than one site/port to > connect to) - install a proxy on the remote machine (e.g. "squid" or > maybe apache's mod_proxy) and forward a tunnel to it as you describe > then setup localhost:8080 as your proxy (firefox extensions can allow > you to use this proxy only for certain sites). Or better yet use ssh -d and set your local SOCKS proxy to localhost: in your browser. ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On 07/12/2007, Ross Cavanagh <[EMAIL PROTECTED]> wrote: > John R Pierce wrote: > > Jerry Geis wrote: > >> I can ssh into a remote machine. > >> I can start X on that machine with startx > >> > >> How do I then start firefox on that machine (from the ssh prompt) and > >> have it display on my machine in my office. > >> > >> So I want to be using firefox on the remote machine but displaying the > >> screen output from firefox in my office. > >> Both boxes are running centos 5. > > > > don't startx on the REMOTE machine, have it running on the LOCAL machine. > > > > local$ ssh -X remote > > ...authenticate... > > remote$ firefox & > > > > and firefox should open on the local... > or you can do a port forward if you wanted to just use your local browser. > > ssh -L :localhost: @ > > eg. ssh -L 8080:localhost:80 [EMAIL PROTECTED] > > then, in your local browser, simply type localhost:8080 as the url to > display port 80 from the remote server. That's a good one. You can take it further (if you have more than one site/port to connect to) - install a proxy on the remote machine (e.g. "squid" or maybe apache's mod_proxy) and forward a tunnel to it as you describe then setup localhost:8080 as your proxy (firefox extensions can allow you to use this proxy only for certain sites). Cheers, --Amos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Karanbir Singh wrote: Clint Dilks wrote: ssh -X firefox you prolly meant -Y :D Ok well just double checked and tested it here and -X works here. I knew about -Y but thought you only use that if you absolutely have too :) Anyway Have a Great Day ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
John R Pierce wrote: Jerry Geis wrote: I can ssh into a remote machine. I can start X on that machine with startx How do I then start firefox on that machine (from the ssh prompt) and have it display on my machine in my office. So I want to be using firefox on the remote machine but displaying the screen output from firefox in my office. Both boxes are running centos 5. don't startx on the REMOTE machine, have it running on the LOCAL machine. local$ ssh -X remote ...authenticate... remote$ firefox & and firefox should open on the local... or you can do a port forward if you wanted to just use your local browser. ssh -L :localhost: @ eg. ssh -L 8080:localhost:80 [EMAIL PROTECTED] then, in your local browser, simply type localhost:8080 as the url to display port 80 from the remote server. More information can be found at http://www.ssh.com/support/documentation/online/ssh/adminguide/32/Port_Forwarding.html ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On 07/12/2007, Jerry Geis <[EMAIL PROTECTED]> wrote:
>
>
> >
> > Jerry Geis wrote:
> > >/ I can ssh into a remote machine.
> > />/ I can start X on that machine with startx
> > />/
> > />/ How do I then start firefox on that machine (from the ssh prompt) and
> > />/ have it display on my machine in my office.
> > />/
> > />/ So I want to be using firefox on the remote machine but displaying the
> > />/ screen output from firefox in my office.
> > />/ Both boxes are running centos 5.
> > /
> > don't startx on the REMOTE machine, have it running on the LOCAL machine.
> >
> > local$ ssh -X remote
> > ...authenticate...
> > remote$ firefox
>
> &
> >
> > and firefox should open on the local...
>
> I tried the above (without the &) and firefox just returns.
>
> I looked at /etc/ssh/sshd_config and X11Forwarding is yes.
>
>
> ssh -X remoteIP firefox
>
> It just took a really long time through the internet...
Then consider:
1. turning on maximum compression ("-C" switch to ssh).
2. If you can switch to VNC or NX then do it, apparently it works
better than X11 over long distances (and from the docs I understand
it's possible to have VNC/NX for one window, no need to setup an
entire desktop for that).
--Amos
___
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On 07/12/2007, Karanbir Singh <[EMAIL PROTECTED]> wrote: > Clint Dilks wrote: > > > > ssh -X firefox > > you prolly meant -Y :D Why? It's less secure and -X is good enough 99% of the time (I always use -X). --Amos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
On 07/12/2007, Jerry Geis <[EMAIL PROTECTED]> wrote: > > > Jerry Geis wrote: > > I can ssh into a remote machine. > > I can start X on that machine with startx > > > > How do I then start firefox on that machine (from the ssh prompt) and > > have it display on my machine in my office. > > > > So I want to be using firefox on the remote machine but displaying the > > screen output from firefox in my office. > > Both boxes are running centos 5. > > don't startx on the REMOTE machine, have it running on the LOCAL machine. > > local$ ssh -X remote > ...authenticate... > remote$ firefox & > > and firefox should open on the local... > > I tried the above (without the &) and firefox just returns. > > I looked at /etc/ssh/sshd_config and X11Forwarding is yes. First - make sure you have "xauth" installed on the remote machine. With CenttOS 5 it comes in xorg-x11-xauth. Ssh needs it to pass over the x11 authentication cookies (e.g. I don't install X environment on my servers so I have to remember to install this package separately). Secondly - when you login through SSH, type "echo $DISPLAY" and see if you get anything - if not then X11 isn't being forwarded yet. Also I hope you start ssh after having X11 environment started on your local machine and from a shell which has $DISPLAY set correctly *locally*. When all these tests are passed I usually try to run a basic X11 program like "xlogo" but you might not have it so just try to run firefox again and see what happens. --Amos ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Clint Dilks wrote: ssh -X firefox you prolly meant -Y :D -- Karanbir Singh : http://www.karan.org/ : [EMAIL PROTECTED] ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] remote ssh to machine how display firefox
>/ />/ Jerry Geis wrote: />/ >/ I can ssh into a remote machine. />/ />/ I can start X on that machine with startx />/ />/ />/ />/ How do I then start firefox on that machine (from the ssh prompt) and />/ />/ have it display on my machine in my office. />/ />/ />/ />/ So I want to be using firefox on the remote machine but displaying the />/ />/ screen output from firefox in my office. />/ />/ Both boxes are running centos 5. />/ / />/ don't startx on the REMOTE machine, have it running on the LOCAL machine. />/ />/ local$ ssh -X remote />/ ...authenticate... />/ remote$ firefox / /& />/ />/ and firefox should open on the local... / I tried the above (without the &) and firefox just returns. I looked at /etc/ssh/sshd_config and X11Forwarding is yes. ssh -X remoteIP firefox It just took a really long time through the internet... Thanks, Jerry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] remote ssh to machine how display firefox
Jerry Geis wrote: >/ I can ssh into a remote machine. />/ I can start X on that machine with startx />/ />/ How do I then start firefox on that machine (from the ssh prompt) and />/ have it display on my machine in my office. />/ />/ So I want to be using firefox on the remote machine but displaying the />/ screen output from firefox in my office. />/ Both boxes are running centos 5. / don't startx on the REMOTE machine, have it running on the LOCAL machine. local$ ssh -X remote ...authenticate... remote$ firefox & and firefox should open on the local... I tried the above (without the &) and firefox just returns. I looked at /etc/ssh/sshd_config and X11Forwarding is yes. Jerry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
I can ssh into a remote machine. I can start X on that machine with startx No need to start X on the remote machine. You need to do "ssh -X " so that X is forwarded (back to the machine that you ssh'ed from). Make sure that "X11Forwarding yes" is set in the /etc/ ssh/sshd_config file (restart the sshd if it was not). Then you can simply type "firefox &" and it will appear on the machine you started the ssh from (assuming of course that a X server is running locally). This of course works for any X11 application, not just Firefox. Alfred ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jerry Geis wrote: > > So I want to be using firefox on the remote machine but displaying the > screen output from firefox in my office. > Both boxes are running centos 5. > > how is that done? First, man ssh, so you can read the ssh manual. Second, make sure on the remote host that this line is in /etc/ssh/sshd_config. X11Forwarding yes Then run ssh while forwarding X [EMAIL PROTECTED] ~]$ ssh -X [EMAIL PROTECTED] [EMAIL PROTECTED] ~]$ /usr/bin/firefox Regards, Max -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFHWK4oHoeeepPau2ERAprrAJ4xwyzkVAxaHfYibjnIQgbJR1EZAACglSuR Rj4AbSA13VW/64kbGzaOW8g= =nZOy -END PGP SIGNATURE- ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Jerry Geis wrote: I can ssh into a remote machine. I can start X on that machine with startx How do I then start firefox on that machine (from the ssh prompt) and have it display on my machine in my office. So I want to be using firefox on the remote machine but displaying the screen output from firefox in my office. Both boxes are running centos 5. don't startx on the REMOTE machine, have it running on the LOCAL machine. local$ ssh -X remote ...authenticate... remote$ firefox & and firefox should open on the local... ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
Re: [CentOS] remote ssh to machine how display firefox
Jerry Geis wrote: I can ssh into a remote machine. I can start X on that machine with startx How do I then start firefox on that machine (from the ssh prompt) and have it display on my machine in my office. So I want to be using firefox on the remote machine but displaying the screen output from firefox in my office. Both boxes are running centos 5. how is that done? Jerry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos Hi you dont need to start X on the remote system at all ssh -X firefox ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
[CentOS] remote ssh to machine how display firefox
I can ssh into a remote machine. I can start X on that machine with startx How do I then start firefox on that machine (from the ssh prompt) and have it display on my machine in my office. So I want to be using firefox on the remote machine but displaying the screen output from firefox in my office. Both boxes are running centos 5. how is that done? Jerry ___ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
