How to override X security to run a remote network-admin?
I'm trying to run network-admin on a remote[ish] system on my LAN. I.e. I'm using ssh to connect from my desktop machine to another machine on the LAN (same subnet) and I want to run network-admin on that machine. Whatever I do to relax X security I still get:- root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication. (network-admin:9918): Gtk-WARNING **: cannot open display: localhost:10.0 I have connected to the garage system using both 'ssh -X' and 'ssh -Y' and I have done 'xhosts +' on the desktop system so that *any* X connection should be allowed. I'm still getting the above error. What do I need to do? Ah, a little further information, I can run network-admin as the non-root user on the remote system with the display on the desktop system. However it's no use because the 'Unlock' button is greyed out. What's the command line equivalent to network-admin? I know it's not a single program, I just want to 'un static IP' the remote system and the easiest way was (except for the above problem) to run network-admin. What files do I need to edit to undo the static setup? OK, I can find out myself really by looking at an un-static system. -- Chris Green
Hi, 2009/1/23 Chris G <cl@isbd.net>:
root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication.
I was going to post you a link, but I can't seem to reach www.letmegooglethatforyout.com at the moment. So.. have you seen these? http://ubuntuforums.org/showthread.php?t=490925 http://www.cyberciti.biz/faq/x11-connection-rejected-because-of-wrong-authen... Or more generally, have you searched for your problem at all?
What's the command line equivalent to network-admin? I know it's not a single program, I just want to 'un static IP' the remote system and the easiest way was (except for the above problem) to run network-admin. What files do I need to edit to undo the static setup? OK, I can find out myself really by looking at an un-static system.
Surely, that is distro-specific? Look at the man pages/help files/The Internet/etc.. etc.. It will be documented somewhere. (sure, if you want to do it quick 'n' dirty, you can use ifconfig to reconfigure the interface... but you might find your ssh connection drops ;) ) Good luck Srdjan
On Fri, Jan 23, 2009 at 01:32:07PM +0000, Srdjan Todorovic wrote:
Hi,
2009/1/23 Chris G <cl@isbd.net>:
root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication.
I was going to post you a link, but I can't seem to reach www.letmegooglethatforyout.com at the moment.
So.. have you seen these? http://ubuntuforums.org/showthread.php?t=490925 http://www.cyberciti.biz/faq/x11-connection-rejected-because-of-wrong-authen...
Or more generally, have you searched for your problem at all?
Yes, I have found *exactly* those links and they don't address my problem at all. They address the problem of when it's non-root user at the other end. I had to do what they say to get it so that I can run a non-root X process on the remote system. The issue is that, having fixed all those problems so that X works, I *still* can't run network-admin.
What's the command line equivalent to network-admin? I know it's not a single program, I just want to 'un static IP' the remote system and the easiest way was (except for the above problem) to run network-admin. What files do I need to edit to undo the static setup? OK, I can find out myself really by looking at an un-static system.
Surely, that is distro-specific? Look at the man pages/help files/The Internet/etc.. etc.. It will be documented somewhere.
Yes, I sorted out the immediate problem by (as I said) looking at a near identical Ubuntu systems and also googling for what I did to change it to a static address. It was just a matter of un-editing some additions to /etc/network/interfaces. I'd *still* like to know how (or even if it's possible) to run a root X process on a remote machine. -- Chris Green
On Fri, 2009-01-23 at 14:33 +0000, Chris G wrote:
Yes, I have found *exactly* those links and they don't address my problem at all. They address the problem of when it's non-root user at the other end. I had to do what they say to get it so that I can run a non-root X process on the remote system. The issue is that, having fixed all those problems so that X works, I *still* can't run network-admin.
Chris, Are you by any chance using ssh to log in to the remote system as a regular user and then using 'su' to get root access? If so try using plain 'su' rather than 'su - '. This should leave the XAUTHORITY environment variable as ssh had set it and should avoid the issue. Regards, Steve.
On Fri, Jan 23, 2009 at 05:49:59PM +0000, Steve Fosdick wrote:
On Fri, 2009-01-23 at 14:33 +0000, Chris G wrote:
Yes, I have found *exactly* those links and they don't address my problem at all. They address the problem of when it's non-root user at the other end. I had to do what they say to get it so that I can run a non-root X process on the remote system. The issue is that, having fixed all those problems so that X works, I *still* can't run network-admin.
Chris,
Are you by any chance using ssh to log in to the remote system as a regular user and then using 'su' to get root access?
If so try using plain 'su' rather than 'su - '.
This should leave the XAUTHORITY environment variable as ssh had set it and should avoid the issue.
No, I've tried that:- chris$ ssh -X -Y garage chris@garage's password: chris@garage:~$ su Password: root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication. (network-admin:5228): Gtk-WARNING **: cannot open display: localhost:10.0 I've tried just "ssh -X" and "ssh -Y" too. -- Chris Green
On 23 Jan 18:42, Chris G wrote:
On Fri, Jan 23, 2009 at 05:49:59PM +0000, Steve Fosdick wrote:
On Fri, 2009-01-23 at 14:33 +0000, Chris G wrote:
Yes, I have found *exactly* those links and they don't address my problem at all. They address the problem of when it's non-root user at the other end. I had to do what they say to get it so that I can run a non-root X process on the remote system. The issue is that, having fixed all those problems so that X works, I *still* can't run network-admin.
Chris,
Are you by any chance using ssh to log in to the remote system as a regular user and then using 'su' to get root access?
If so try using plain 'su' rather than 'su - '.
This should leave the XAUTHORITY environment variable as ssh had set it and should avoid the issue.
No, I've tried that:-
chris$ ssh -X -Y garage chris@garage's password: chris@garage:~$ su Password: root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication.
(network-admin:5228): Gtk-WARNING **: cannot open display: localhost:10.0
I've tried just "ssh -X" and "ssh -Y" too.
apt-get install sudo Then configure sudo access for your user, then ssh -X in to that box and bob should be your aunties husband if you then use: sudo network-admin as your normal user. Cheers, -- Brett Parker
On Mon, Jan 26, 2009 at 02:33:55PM +0000, Brett Parker wrote:
On 23 Jan 18:42, Chris G wrote:
On Fri, Jan 23, 2009 at 05:49:59PM +0000, Steve Fosdick wrote:
On Fri, 2009-01-23 at 14:33 +0000, Chris G wrote:
Yes, I have found *exactly* those links and they don't address my problem at all. They address the problem of when it's non-root user at the other end. I had to do what they say to get it so that I can run a non-root X process on the remote system. The issue is that, having fixed all those problems so that X works, I *still* can't run network-admin.
Chris,
Are you by any chance using ssh to log in to the remote system as a regular user and then using 'su' to get root access?
If so try using plain 'su' rather than 'su - '.
This should leave the XAUTHORITY environment variable as ssh had set it and should avoid the issue.
No, I've tried that:-
chris$ ssh -X -Y garage chris@garage's password: chris@garage:~$ su Password: root@garage:/home/chris# network-admin X11 connection rejected because of wrong authentication. X11 connection rejected because of wrong authentication.
(network-admin:5228): Gtk-WARNING **: cannot open display: localhost:10.0
I've tried just "ssh -X" and "ssh -Y" too.
apt-get install sudo
Then configure sudo access for your user, then ssh -X in to that box and bob should be your aunties husband if you then use: sudo network-admin
That's where I started from, it's an xubuntu box and has sudo already, I added a root account because I needed it for setting up some backup processes (or at least it was easier). Using sudo produces exactly the same results. However ... back at the ranch (or on the ubuntu list actually) someone else eventually fought their way to an answer:- Get to root on the remote system (using sudo or su, it matters not) and then say:- ck-launch-session services-admin *That* works. Just to confirm, if I do:- chris$ ssh -X garage chris@garage's password: chris@garage:~$ sudo network-admin [sudo] password for root: then I get a network-admin session with the undo button *and* the list of services all greyed out, I can't do anything. However if I do:- chris$ ssh -X garage chris@garage's password: chris@garage:~$ sudo ck-launch-session services-admin Then I get a network-admin session with the list of services enabled so that I can start and stop them etc. -- Chris Green
participants (4)
-
Brett Parker -
Chris G -
Srdjan Todorovic -
Steve Fosdick