On Mon, 10 Jun 2002, Brad Thomson wrote: > > debian woody... > > > > I have tried to set up my gateway for forwarding x so that I can use one > > of the firewall builder products. > > > > I have editted the ssh_config and sshd_config to include X11forwarding > > options to yes. How do I get this to work properly? > > You're probably not doing anything wrong, openssh in woody/sid seems to be > broken for some people at the moment in this regard. > > There's a Debian developer on this list who should see this and might be > willing to provide access to some packages that fix the problem, or you
That would be me. As to whether they fix the problem, that's Brad's call - I haven't actually tried the packages, they were a drunk packaging for Brad, so they're missing most of the goodnesses of a real SSH package. First off you should probably add your support to bug #147293, saying that you, too, would like a new version of SSH. Next, go to http://ieee.uow.edu.au/~mjp16/debian/ and grab openssh_3.2.3p1-1_i386.deb which is a binary package of the newer SSH, which (and Brad can correct me when I'm wrong) should fix the X forwarding issue. They're basically pristine source packages, without much added at all. There are no Debian patches, the defaults are (I think) more secure, and there is NO AUTO CONFIGRATION. I put that in caps because it will bite you on the arse if you aren't careful. I've made openssh conflict with ssh because there are binary naming issues, but I'm not making config files. So, you need to make a backup of your entire /etc/ssh directory, install openssh, then put the config files back in /etc/ssh. Please note that this isn't a perfect (or even particularly good solution). I'm working (well, not at this moment, Uni exams are looming) with the SSH maintainer, Matthew Vernon, to make SSH a much cleaner package than it is now. Hopefully there will be high quality official .debs of a newer, shinier, working version of SSH available RSN. Until then, these .debs might work for you if your really lucky. If they don't work, do not blame me. Most certainly, I wouldn't try installing this over a remote connection... -- ----------------------------------------------------------------------- #include <disclaimer.h> Matthew Palmer [EMAIL PROTECTED] -- SLUG - Sydney Linux User's Group - http://slug.org.au/ More Info: http://lists.slug.org.au/listinfo/slug
