On Mon, 06 Sep 1999 23:58:54 +0200, Jacek J�drzejczak <[EMAIL PROTECTED]> wrote:
>Can anyone tell me how to get rid of those messages:
>
>[in ssh2]
>sh: /usr/X11R6/bin/xauth: Permission denied
>
>[and in ssh1]
>Warning: Remote host denied X11 forwarding, perhaps xauth program could not be
>run on the server side.
>
>I'm looking for a solution that wouldn't force me to give rights to run x
>applications to all users.

In sshd_config:

        X11Forwarding no

Alternatively, if you control the client machines, set up ssh_config
with:

        Host *
                ForwardX11 no

The latter won't disable X11 forwarding, but it will make the client stop
trying to use it, which will eliminate the error message.

Note that port forwarding can be used to achieve (much less secure)
X11 forwarding, so you might want to disable that too.  

If the users can install arbitrary programs on the server side, they
can create any tunnel they like and you will lose all control of what
is forwarded and what isn't.

-- 
I don't speak for Corel, I just work for them.  Use [EMAIL PROTECTED] for work, 
[EMAIL PROTECTED] for play, and [EMAIL PROTECTED] for PGP.
PGP fingerprint: 01 94 0F B3 46 B7 71 C3  D4 98 39 99 1B 34 45 A1
PGP public key:  http://www.hungrycats.org/~zblaxell/pgp-public.txt

Reply via email to