[Bug 1718] Messages "X11 connection rejected because of wrong authentication."

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Thu Nov 25 01:45:12 EST 2010


https://bugzilla.mindrot.org/show_bug.cgi?id=1718

--- Comment #6 from Vincent Lefevre <vincent at vinc17.org> 2010-11-25 01:45:12 EST ---
(In reply to comment #5)
> It looks like you are using untrusted X11 forwarding.

I'm currently using untrusted X11 forwarding, but between 2006-04-25
and 2010-07-30, I had "ForwardX11Trusted yes" in my .ssh/config file
(then I removed this line due to potential security problems, according
to
http://dailypackage.fedorabook.com/index.php?/archives/48-Wednesday-Why-Trusted-and-Untrusted-X11-Forwarding-with-SSH.html
-- so that I now use trusted X11 forwarding only when necessary, i.e.
under Mac OS X, but this is out of the scope of this bug report).

> By default, this will time out and stop accepting connections after
> 20 minutes but you can change this using ForwardX11Timeout.

Note that the X11 connection came back automatically. Is this normal?
And why isn't ForwardX11Timeout documented in the ssh_config man page?

Otherwise I'm thinking of a possible network failure. In any case, the
error message is not helpful.

> Otherwise, if you are on a shared machine

Yes, this is a computation server of the lab.

> and others are trying to connect to the X11 socket then you might
> encounter this error.

OK, I was wondering something about this (e.g. due to someone that had
localhost:10.0 hardcoded or outdated, which is possible when using the
screen utility). I hadn't managed to trigger the message, but probably
because I did it wrong. Not I've tried

  telnet localhost 6010

on the remote machine and typed random characters, then got

  X11 connection rejected because of wrong authentication.

in the other terminal. So, a connection by someone else was probably
the cause of this problem. Shouldn't the possible causes of this error
message be in the manual or in the FAQ?

-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list