Groups > linux.debian.user > #201334

X11 Forwarding and inet6 support on loopback (Was: Micro-report: using Stable without systemd)

From	Étienne Mollier <etienne.mollier@mailoo.org>
Newsgroups	linux.debian.user
Subject	X11 Forwarding and inet6 support on loopback (Was: Micro-report: using Stable without systemd)
Date	2018-10-16 22:40 +0200
Message-ID	<wJEie-9d-9@gated-at.bofh.it> (permalink)
References	(1 earlier) <wJzBU-5O8-5@gated-at.bofh.it> <wJAeB-6gG-1@gated-at.bofh.it> <wJB0Z-6LZ-3@gated-at.bofh.it> <wJBkl-6Sn-3@gated-at.bofh.it> <wJD2N-7VG-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 10/16/18 8:57 PM, mick crane wrote:
> On 2018-10-16 18:11, Greg Wooledge wrote:
>> On Tue, Oct 16, 2018 at 12:43:40PM -0400, Gene Heskett wrote:
>>> #1 is ssh -Y has been killed from jessie on. No excuse for doing it and
>>> bug filing is ignored.
>>
>> I don't know what you mean by this.  I just performed the following
>> experiment on my stretch workstation (wooledg), in communications with
>> a stretch server (arc3) elsewhere on our network.
>>
>> 1) Already logged into wooledg, I opened a new urxvt window.
>>
>> 2) In this window, I typed: ssh -Y arc3
>>
>> 3) After authenticating to arc3 with a password, at the shell prompt, I
>>    typed: xterm
>>
>> 4) After a moment, a new xterm window appeared on my display.
>>
>> 5) Inside this xterm, to confirm that the xterm was running on arc3,
>>    I typed: uname -a
>>
>> Terminal sessions shown without modification:
> 
> works here with Buster.
> "ssh -Y me@otherPC"
> "xclock"
> 
> xclock appears
> 
> mick
> 

Hi all,

I believe the following problem was referred to, which somehow,
is network specific:

	https://lists.debian.org/debian-user/2018/09/msg00836.html

Digging more in that issue shows that, somehow, the forwarding
expects the loopback address to be reachable in inet6.  Indeed
the following command, run on SSH server side, is sufficient to
trigger the issue:

	server$ sudo ip address del ::1/128 dev lo

On client side (whatever the real network interface configuration
is, IPv4 or 6, on client or server):

	client$ ssh -Y server
	login@server's password:
	X11 forwarding request failed on channel 0
	[...]

Putting back IPv6 support in the loopback does the trick:

	server$ sudo ip address add ::1/128 dev lo

	client$ ssh -Y server
	login@server's password:
	[...]
	$ echo $DISPLAY
	localhost:10.0

(this or the solution proposed previously, in the sshd_config file)

Perhaps, it could be commonly expected that, whatever the
situation is, being either at the capital, or in the middle of
the Kamchatka, the loopback would better be always addressable
both in IPv4 (127.0.0.1/8) and IPv6 (::1/128).  (Modulo kernel
support maybe...)

Actually, the problem seems more complex than that, and lurks
for some years:

	2007: https://bugzilla.mindrot.org/show_bug.cgi?id=1356
	2013: https://bugzilla.mindrot.org/show_bug.cgi?id=2143
	2017: https://bugzilla.redhat.com/show_bug.cgi?id=1436097

I understand that there is no fix in sight because SSH devs
fear to undo a fix for an old vulnerability.  Given the
purpose of SSH, better be careful on the way patches are
brought indeed.

Kind Regards,
-- 
Étienne Mollier <etienne.mollier@mailoo.org>

Thread

Micro-report: using Stable without systemd Dan Ritter <dsr@randomstring.org> - 2018-10-14 16:40 +0200
  Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-14 18:20 +0200
    Re: Pico-report: using Stable without sysvinit Brian <ad44@cityscape.co.uk> - 2018-10-14 20:30 +0200
      Re: Pico-report: using Stable without sysvinit Default User <hunguponcontent@gmail.com> - 2018-10-14 22:10 +0200
        Re: Pico-report: using Stable without sysvinit Brian <ad44@cityscape.co.uk> - 2018-10-14 22:30 +0200
          Re: Pico-report: using Stable without sysvinit <tomas@tuxteam.de> - 2018-10-15 10:10 +0200
            Re: Pico-report: using Stable without sysvinit Reco <recoverym4n@enotuniq.net> - 2018-10-15 10:50 +0200
              OT (as was to be expected) Trolling [was: Pico-report: using Stable  without sysvinit] <tomas@tuxteam.de> - 2018-10-15 11:10 +0200
              Re: Pico-report: using Stable without sysvinit Default User <hunguponcontent@gmail.com> - 2018-10-15 16:50 +0200
  Re: Micro-report: using Stable without systemd Tixy <tixy@yxit.co.uk> - 2018-10-14 18:20 +0200
    Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-14 18:40 +0200
      Re: Micro-report: using Stable without systemd Tixy <tixy@yxit.co.uk> - 2018-10-14 19:50 +0200
  Re: Micro-report: using Stable without systemd john doe <johndoe65534@mail.com> - 2018-10-14 18:30 +0200
    Re: Micro-report: using Stable without systemd Dan Ritter <dsr@randomstring.org> - 2018-10-14 19:30 +0200
  Re: Micro-report: using Stable without systemd Patrick Bartek <nemommxiv@gmail.com> - 2018-10-14 22:00 +0200
    Re: Micro-report: using Stable without systemd Erik Christiansen <dvalin@internode.on.net> - 2018-10-15 07:20 +0200
  Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-15 15:50 +0200
    Re: Micro-report: using Stable without systemd Kenneth Parker <sea7kenp@gmail.com> - 2018-10-15 16:20 +0200
      Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-16 11:20 +0200
        Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-16 11:40 +0200
          Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-16 17:40 +0200
            Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-16 18:20 +0200
              Re: Micro-report: using Stable without systemd Default User <hunguponcontent@gmail.com> - 2018-10-16 18:40 +0200
                Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-16 19:10 +0200
                Re: Micro-report: using Stable without systemd Default User <hunguponcontent@gmail.com> - 2018-10-16 20:20 +0200
                Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-16 22:40 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-16 23:50 +0200
                Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-17 10:30 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-17 11:20 +0200
                Re: Micro-report: using Stable without systemd <tomas@tuxteam.de> - 2018-10-17 12:00 +0200
                Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-17 10:50 +0200
                Re: Micro-report: using Stable without systemd Greg Wooledge <wooledg@eeg.ccf.org> - 2018-10-17 14:50 +0200
                Re: Micro-report: using Stable without systemd Richard Owlett <rowlett@cloud85.net> - 2018-10-17 15:50 +0200
              Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-16 19:10 +0200
                Re: Micro-report: using Stable without systemd Greg Wooledge <wooledg@eeg.ccf.org> - 2018-10-16 19:30 +0200
                Re: Micro-report: using Stable without systemd mick crane <mick.crane@gmail.com> - 2018-10-16 21:20 +0200
                X11 Forwarding and inet6 support on loopback (Was: Micro-report:  using Stable without systemd) Étienne Mollier <etienne.mollier@mailoo.org> - 2018-10-16 22:40 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-17 00:20 +0200
                Re: Micro-report: using Stable without systemd David Wright <deblis@lionunicorn.co.uk> - 2018-10-17 01:20 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-17 02:20 +0200
                Re: Micro-report: using Stable without systemd Felmon Davis <davisf@union.edu> - 2018-10-17 08:40 +0200
                Re: Micro-report: using Stable without systemd mick crane <mick.crane@gmail.com> - 2018-10-17 06:00 +0200
                Re: Micro-report: using Stable without systemd David Wright <deblis@lionunicorn.co.uk> - 2018-10-17 07:00 +0200
                Re: Micro-report: using Stable without systemd mick crane <mick.crane@gmail.com> - 2018-10-17 09:50 +0200
                Re: Micro-report: using Stable without systemd David Wright <deblis@lionunicorn.co.uk> - 2018-10-18 00:40 +0200
                Re: Micro-report: using Stable without systemd Morel Bérenger <berenger.morel@sga-automation.com> - 2018-10-17 10:40 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-17 11:00 +0200
                Re: Micro-report: using Stable without systemd Morel Bérenger <berenger.morel@sga-automation.com> - 2018-10-17 12:20 +0200
                Re: Micro-report: using Stable without systemd Gene Heskett <gheskett@shentel.net> - 2018-10-17 19:20 +0200
                Re: Micro-report: using Stable without systemd Morel Bérenger <berenger.morel@sga-automation.com> - 2018-10-18 12:00 +0200
                Re: Micro-report: using Stable without systemd Morel Bérenger <berenger.morel@sga-automation.com> - 2018-10-17 11:40 +0200
                Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-16 22:40 +0200
              Re: Micro-report: using Stable without systemd Joe <joe@jretrading.com> - 2018-10-16 21:50 +0200
        Re: Micro-report: using Stable without systemd john doe <johndoe65534@mail.com> - 2018-10-16 16:40 +0200
          Re: Micro-report: using Stable without systemd Jonathan Dowland <jmtd@debian.org> - 2018-10-16 18:10 +0200
            Re: Micro-report: using Stable without systemd Alessandro Vesely <vesely@tana.it> - 2018-10-16 20:40 +0200
  Re: Micro-report: using Stable without systemd Morel Bérenger <berenger.morel@sga-automation.com> - 2018-10-16 21:30 +0200
    Re: Micro-report: using Stable without systemd Alessandro Vesely <vesely@tana.it> - 2018-10-17 11:00 +0200

csiph-web