Re: Warning: No xauth data; using fake authentication data for X11 forwarding. (solved)

[Jerry Feldman <gaf@xxxxxxx>]

On 10/15/2008 08:36 PM, Aldo Foot wrote:
> On Wed, Oct 15, 2008 at 1:48 PM, Jerry Feldman <gaf@xxxxxxx> wrote:
>   
> > I am using Fedora 9 on an IA64 workstation. When I ssh -X to another host,
> > the ssh authentication succeeds in under a second, but the X11
> > authentication takes about 20 seconds and issues the warning:
> > Warning: No xauth data; using fake authentication data for X11 forwarding.
> >     
>
> Not sure whether this will help, but it's worth a try:
> Find out the hard coded path of the xauth binary in the sshd executable.
>   > strings `which sshd` | grep xauth
> the above command should show a line like "/usr/bin/xauth", take note
> of whatever
> path you see.
> Add a line to your /etc/ssh/sshd_config to read "XAuthLocation /usr/bin/xauth".
> Restart sshd and see what happens.
>
>   
First, the issue is NOT ssh at all. In any case, I've been 
experimenting. I was able to log out of the console. This removed the 
/var/run/auth-cookie-XXIIWBJU-for-gaf. I then logged into the server 
from my (ugh) Windows XP box with Exceed (X server) and putty. I then 
performed and 'ssh -X'. There was absolutely no delay. From the log and 
running xauth, it appears that GDM is locking the auth cookie.
[gaf@boslc01 ~]$ /usr/bin/xauth list
/usr/bin/xauth:  timeout in locking authority file 
/var/run/gdm/auth-cookie-XXIIWBJU-for-gaf

After googling on this specific message I found a solution:
1. the permission for /var/run/gdm is:
drwxr-xr-t  2 root gdm  4096 2008-10-16 08:20

2. After changing the permission to drwxrwxrwt  2 root       
gdm          4096 2008-10-16 10:14 gdm
Xauth was able to successfully establish the lock. I checked my home 
Fedora9 system and it was set to drwxrwxrwt.

So, I think the problem is with the Fedora 9 installation on  IA64.

--
Jerry Feldman <gaf@xxxxxxx>
Boston Linux and Unix
PGP key id: 537C5846
PGP Key fingerprint: 3D1B 8377 A3C0 A5F2 ECBB  CA3B 4607 4319 537C 5846

Attachment: signature.asc
Description: OpenPGP digital signature

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines