Dear Carl,

> SSH1 compiles on all the development machines (SUN, DEC, AIX) machines
> and the workstations (Linux). None of the below problems appear

That's so weird.

Would you be able to use your personal workstation as a test box?
I mean, you mentioned having root on it, and you can test by just
ssh'ing to localhost and seeing if the problem persists.

> Maybe it's a Kerberos problem.

I didn't know Kerberos was involved. Have no experience with it at all.

> SSH never sets DISPLAY correctly anywhere.

Um, does it set display to "computer:n" where n>=10?

That is "correctly," as far as ssh is concerned.

Does netstat show an open TCP port (6000+n) on the remote end? Say, your
DISPLAY is 10, and netstat -an | grep 6010 should produce something like

tcp        0      0  *.6010                 *.*                   LISTEN      

If you have lsof, fuser, or similar, you should be able to find the
process that has this port open. I don't know about AIX, but it seems
that Solaris (7) and Tru64 (4.0F) fusers don't have the net port option.
Bummer. It is there on IRIX. lsof can help.

$ /sbin/fuser 6010/tcp          # this is on IRIX
6010/tcp:    39943o

then use ps to find out...

$ ps -fp 39943
     UID        PID       PPID  C    STIME TTY     TIME CMD
    root      39943        426  0 12:33:18 ?       0:00 sshd

But really, you should be running sshd in debug mode and the client in
verbose mode just to see what it is exactly that is happening.

If your personal workstation has the same problem if you ssh localhost
as everything else does, that's fine - you have root on it and can do it
no problem...

However, you don't _need_ root to do that; you can run sshd if you have
a host key, which you can generate with ssh-keygen, and you just need to
specify a port above 1024. Of course, then only you yourself can connect
to that sshd, but that doesn't stop you from testing, does it?

-- 
Atro Tossavainen (Mr.), Systems Analyst, contact info at URL
Institute of Biotechnology, University of Helsinki, Finland
My opinions may freely be shared by my employers if they want to.

"We're not net nazis. We're dot communists." - Walter Arnold, June 20, 2000,
on <[EMAIL PROTECTED]> in news.admin.net-abuse.email

< URL : http : / / www . iki . fi / atro . tossavainen / >

Reply via email to