<div dir="ltr">I agree with the rabbit hole concept. I am finding that for my application, vnc4server/vnc4viewer/xfce works a lot better than simple X11 forwarding over ssh.<div><br></div><div>Thanks for all the help!</div><div><br></div><div>Mark</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Apr 19, 2018 at 7:56 PM, James Mcphee <span dir="ltr"><<a href="mailto:jmcphe@gmail.com" target="_blank">jmcphe@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">This works if you've enabled root logins via ssh. If you're forced to disable remote root logins, like I am, it takes a bit more bouncing around. You may or may not require the -Y, though the programs I'm using do not and the security team frowns upon using it. Effectively, the difference (on systems where ForwardX11Trusted no) is straight -X only forwards the window, whereas -Y gives you access to all of the X extensions. Some apps don't work or are wonky without trusted x11 forwarding. As you can see, it's a deep rabbit hole, and dependent on the environment you're operating in. Praise unix for giving us options!</div><div class="gmail_extra"><div><div class="h5"><br><div class="gmail_quote">On Thu, Apr 19, 2018 at 5:06 AM, <span dir="ltr"><<a href="mailto:kitepilot@kitepilot.com" target="_blank">kitepilot@kitepilot.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I just do:<br>
ssh -fCXY root@turboviking /usr/bin/gnome-calculator<br>
And get my banana... :)<br>
ET <br><div class="m_672354249396750675HOEnZb"><div class="m_672354249396750675h5">
<br>
<br>
Mark Phillips writes: <br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
There is an application I need to run as root on my Linode server, but it<br>
has to run in a gui. <br>
I have ssh and X11 forwarding set up between my Ubuntu 14.04 system and my<br>
Linode (swordfish). It works just great for a non-root user (xcalc,<br>
xconsole, the application I need to run, etc). However, when I try to run<br>
the application on the server as root, I get the error message "X11<br>
connection rejected because of wrong authentication." For xcalc running as<br>
root, I get<br>
X11 connection rejected because of wrong authentication.<br>
Error: Can't open display: swordfish:10.0 <br>
I have tried all sorts of google solutions - copying the user's .Xauthority<br>
to /root/ (also changing the ownership and permissions). But I just can't<br>
seem to log into swordfish as a normal user using ssh -X, su to root, and<br>
get the X11 forwarding to work. <br>
I also went so far as to install vnc4server on the Linode, xfce window<br>
manager, and vnc4viewer on my Ubuntu machine. That all works when I access<br>
the vnc server as a normal user, but I can't get any X11 apps to run as<br>
root (ie from a root command line in a terminal in the vnc window). The<br>
error message when I try to run xcalc or other X11 apps is "No protocol<br>
specified. Can't open display :1". <br>
What are the special Linux guru magical incantations/spells to make X11<br>
forwarding work for root? <br>
Thanks! <br>
Mark<br>
</blockquote></div></div><div class="m_672354249396750675HOEnZb"><div class="m_672354249396750675h5">
------------------------------<wbr>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org" target="_blank">PLUG-discuss@lists.phxlinux.or<wbr>g</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" rel="noreferrer" target="_blank">http://lists.phxlinux.org/mail<wbr>man/listinfo/plug-discuss</a></div></div></blockquote></div><br><br clear="all"><div><br></div></div></div><span class="HOEnZb"><font color="#888888">-- <br><div class="m_672354249396750675gmail_signature" data-smartmail="gmail_signature">James McPhee<br><a href="mailto:jmcphe@gmail.com" target="_blank">jmcphe@gmail.com</a></div>
</font></span></div>
<br>------------------------------<wbr>---------------------<br>
PLUG-discuss mailing list - <a href="mailto:PLUG-discuss@lists.phxlinux.org">PLUG-discuss@lists.phxlinux.<wbr>org</a><br>
To subscribe, unsubscribe, or to change your mail settings:<br>
<a href="http://lists.phxlinux.org/mailman/listinfo/plug-discuss" rel="noreferrer" target="_blank">http://lists.phxlinux.org/<wbr>mailman/listinfo/plug-discuss</a><br></blockquote></div><br></div>