[NMLUG] multiiple hop x-tunnel (ssh)

[aaron at boim.com (Aaron Birenboim)]

I'm having trouble getting a multiple-hop X forward working under ssh.

Here's what I see under ssh -v -X:

aaron@gandalf(101):xterm

debug: client_input_channel_open: ctype x11 rchan 2 win 4096 max 2048
debug: fd 7 setting O_NONBLOCK
debug: fd 7 IS O_NONBLOCK
debug: channel 1: new [x11]
debug: confirm x11
channel 1: istate 8 != open
channel 1: ostate 64 != open
debug: channel 1: read<=0 rfd 7 len 0
debug: channel 1: read failed
debug: channel 1: input open -> drain
debug: channel 1: close_read
debug: channel 1: input: no drain shortcut
debug: channel 1: ibuf empty
debug: channel 1: input drain -> closed
debug: channel 1: send eof
X connection to gandalf:11.0 broken (explicit kill or server shutdown).
debug: channel 1: rcvd eof
debug: channel 1: output open -> drain
debug: channel 1: rcvd close
debug: channel 1: obuf empty
debug: channel 1: output drain -> closed
debug: channel 1: close_write
debug: channel 1: send close
debug: channel 1: full closed2
debug: channel_free: channel 1: status: The following connections are open:
   #0 client-session (t4 r0 i1/0 o16/0 fd 4/5)
   #1 x11 (t4 r2 i8/0 o128/0 fd 7/7)

**********************************
AFAIK, gandalf:11 is not dead.  Its the port I created when i ssh'd into Gandalf.

Basicly, I ssh into dodo (my gateway) and I can run X from dodo
to any X server.  However when I ssh -X hop from dodo to another
machine, and try to relay the X display, i get something like the above.

I know I did this before, although not on this network.
It can be done, and thats how it works.   You need to daisy
chain ssh -X, since the :11 display seems to be loopbacck only.
I have not found a way to make the tunneled port open to the LAN.
(That would be fine.  Once I'm on the gateway, the internal
net is relatively open, and I'd be happy to send cleartext X
over the LAN)

-- 
Aaron Birenboim        | This space available!
Albuquerque, NM        |
aaron_at_birenboim.com |
 >http://aaron.boim.com |