[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-list
Subject:    Re: SSH problem
From:       Joe Wulf via users <users () lists ! fedoraproject ! org>
Date:       2023-01-10 18:25:31
Message-ID: 2109172322.9845227.1673375131557 () mail ! yahoo ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


 Additional troubleshooting should include including '-vvvv' for the ssh command invocation.

    On Tuesday, January 10, 2023 at 12:23:51 PM EST, Veli-Pekka Kestilä <fedora@guagua.fi> wrote:  
 
 On 10.1.2023 14.28, Frank Elsner via users wrote:
> Hello,
> 
> today I faced the following problem:
> 
> Some of my panel entries do not work. Investigation on the command line level
> shows that every second ssh call doesn't work. But why?
> 
> [frank@siffux ~]$ ssh christo "mate-terminal&" &
> [1] 15817
> 
> This command brings up a window running mate terminal
> 
> [frank@siffux ~]$ ssh christo "mate-terminal&" &
> [2] 15827
> [frank@siffux ~]$ X11 connection rejected because of wrong authentication.
> Failed to parse arguments: Cannot open display:
> 
> This is the error behaviour.
> 
> What's going on? How to solve the problem?

I don't know how to solve the problem but can confirm that I have the 
same one. From what I have deducted so far is that sshd in F36 and F37 
generates new xauth token and replaces the old one every time new 
connection is opened. I can fix the problem by running xauth list after 
the first connection and then xauth add with the data from xauth list to 
restore the original authentication token every time new connection is 
created.

One might make a hack with /etc/ssh/sshrc or .ssh/rc to muck with the 
tokens, but I am not sure it's a good fix on the long run. Would be nice 
to know what changed from F35, but I don't unfortunately have any 
installed anymore.

-vpk
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
  
[Attachment #5 (text/html)]

<html><head></head><body><div class="ydpdb92d6c9yahoo-style-wrap" \
style="font-family:Helvetica Neue, Helvetica, Arial, \
                sans-serif;font-size:16px;"><div></div>
        <div dir="ltr" data-setdir="false">Additional troubleshooting should include \
including '-vvvv' for the ssh command invocation.<br></div><div><br></div>  
        </div><div id="ydpe65d9a9fyahoo_quoted_4037505356" \
                class="ydpe65d9a9fyahoo_quoted">
            <div style="font-family:'Helvetica Neue', Helvetica, Arial, \
sans-serif;font-size:13px;color:#26282a;">  
                <div>
                    On Tuesday, January 10, 2023 at 12:23:51 PM EST, Veli-Pekka \
Kestilä &lt;fedora@guagua.fi&gt; wrote:  </div>
                <div><br></div>
                <div><br></div>
                <div><div dir="ltr">On 10.1.2023 14.28, Frank Elsner via users \
wrote:<br clear="none">&gt; Hello,<br clear="none">&gt; <br clear="none">&gt; today I \
faced the following problem:<br clear="none">&gt; <br clear="none">&gt; Some of my \
panel entries do not work. Investigation on the command line level<br \
clear="none">&gt; shows that every second ssh call doesn't work. But why?<br \
clear="none">&gt; <br clear="none">&gt; [<a shape="rect" href="mailto:frank@siffux" \
rel="nofollow" target="_blank">frank@siffux</a> ~]$ ssh christo "mate-terminal&amp;" \
&amp;<br clear="none">&gt; [1] 15817<br clear="none">&gt; <br clear="none">&gt; This \
command brings up a window running mate terminal<br clear="none">&gt; <br \
clear="none">&gt; [<a shape="rect" href="mailto:frank@siffux" rel="nofollow" \
target="_blank">frank@siffux</a> ~]$ ssh christo "mate-terminal&amp;" &amp;<br \
clear="none">&gt; [2] 15827<br clear="none">&gt; [<a shape="rect" \
href="mailto:frank@siffux" rel="nofollow" target="_blank">frank@siffux</a> ~]$ X11 \
connection rejected because of wrong authentication.<br clear="none">&gt; Failed to \
parse arguments: Cannot open display:<br clear="none">&gt; <br clear="none">&gt; This \
is the error behaviour.<br clear="none">&gt; <br clear="none">&gt; What's going on? \
How to solve the problem?<br clear="none"><br clear="none">I don't know how to solve \
the problem but can confirm that I have the <br clear="none">same one. From what I \
have deducted so far is that sshd in F36 and F37 <br clear="none">generates new xauth \
token and replaces the old one every time new <br clear="none">connection is opened. \
I can fix the problem by running xauth list after <br clear="none">the first \
connection and then xauth add with the data from xauth list to <br \
clear="none">restore the original authentication token every time new connection is \
<br clear="none">created.<br clear="none"><br clear="none">One might make a hack with \
/etc/ssh/sshrc or .ssh/rc to muck with the <br clear="none">tokens, but I am not sure \
it's a good fix on the long run. Would be nice <br clear="none">to know what changed \
from F35, but I don't unfortunately have any <br clear="none">installed anymore.<br \
clear="none"><br clear="none">-vpk<div class="ydpe65d9a9fyqt7959204342" \
id="ydpe65d9a9fyqtfd97167"><br \
clear="none">_______________________________________________<br clear="none">users \
mailing list -- <a shape="rect" href="mailto:users@lists.fedoraproject.org" \
rel="nofollow" target="_blank">users@lists.fedoraproject.org</a><br clear="none">To \
unsubscribe send an email to <a shape="rect" \
href="mailto:users-leave@lists.fedoraproject.org" rel="nofollow" \
target="_blank">users-leave@lists.fedoraproject.org</a><br clear="none">Fedora Code \
of Conduct: <a shape="rect" \
href="https://docs.fedoraproject.org/en-US/project/code-of-conduct/" rel="nofollow" \
target="_blank">https://docs.fedoraproject.org/en-US/project/code-of-conduct/</a><br \
clear="none">List Guidelines: <a shape="rect" \
href="https://fedoraproject.org/wiki/Mailing_list_guidelines" rel="nofollow" \
target="_blank">https://fedoraproject.org/wiki/Mailing_list_guidelines</a><br \
clear="none">List Archives: <a shape="rect" \
href="https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org" \
rel="nofollow" target="_blank">https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org</a><br \
clear="none">Do not reply to spam, report it: <a shape="rect" \
href="https://pagure.io/fedora-infrastructure/new_issue" rel="nofollow" \
target="_blank">https://pagure.io/fedora-infrastructure/new_issue</a><br \
clear="none"></div></div></div>  </div>
        </div></body></html>


[Attachment #6 (text/plain)]

_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic