Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 71342 - PAM-0.77-r3 breaks X-forwarding.
Summary: PAM-0.77-r3 breaks X-forwarding.
Status: RESOLVED DUPLICATE of bug 70585
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: x86 Linux
: High major (vote)
Assignee: PAM Gentoo Team (OBSOLETE)
URL: http://forums.gentoo.org/viewtopic.ph...
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-11-15 17:25 UTC by Kenneth Lakin
Modified: 2005-07-17 13:06 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
Fixes the behaviour described in the bug report. (pam_env.patch,438 bytes, patch)
2004-11-15 17:28 UTC, Kenneth Lakin
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Kenneth Lakin 2004-11-15 17:25:53 UTC
/etc/security/pam_env.conf overrides the $DISPLAY variable so that $DISPLAY is set to hostname.domainname:0.0 when one ssh's into an affected machine.


Reproducible: Always
Steps to Reproduce:
1. emerge =pam-0.7.-r3 openssh
2. Enable X-forwarding.
3. Connect to the afflicted computer.
4. Fire up an X program.



Actual Results:  
I recieved errors when I attempted to run an X program through an SSH tunnel.
The errors all amounted to "Cannot open display: domainname.hostname:0.0"

Expected Results:  
Opened the X application on the remote machine.

I have attached a patch that resolves this issue.

System information:

I have installed:
sys-libs/pam-0.77-r3  
net-misc/openssh-3.8.1_p1-r1

'emerge info':
Portage 2.0.51-r3 (default-linux/x86/2004.0, gcc-3.3.4, glibc-2.3.4.20040808-r1,
2.6.8.1-ck9 i686)
=================================================================
System uname: 2.6.8.1-ck9 i686 AMD Athlon(tm) 
Gentoo Base System version 1.4.16
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [enabled]
Autoconf: sys-devel/autoconf-2.59-r5,sys-devel/autoconf-2.5.7-r1
Automake: sys-devel/automake-1.8.5-r1
Binutils: sys-devel/binutils-2.14.90.0.8-r1
Headers:  sys-kernel/linux-headers-2.4.19-r1,sys-kernel/linux-headers-2.4.21-r1
Libtools: sys-devel/libtool-1.5.2-r5
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O3 -mcpu=athlon-xp -march=athlon-xp -pipe -ffast-math -fstack-protector
-m32"
CHOST="i686-pc-linux-gnu"
COMPILER=""
CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config
/usr/kde/3.3/env /usr/kde/3.3/share/config /usr/kde/3.3/shutdown
/usr/kde/3/share/config /usr/lib/mozilla/defaults/pref /usr/share/config
/usr/share/texmf/dvipdfm/config/ /usr/share/texmf/dvips/config/
/usr/share/texmf/tex/generic/config/ /usr/share/texmf/tex/platex/config/
/usr/share/texmf/xdvi/ /var/bind /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -mcpu=athlon-xp -march=athlon-xp -pipe -ffast-math
-fstack-protector -m32"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs buildpkg ccache distlocks fixpackages sandbox sfperms
userpriv usersandbox"
GENTOO_MIRRORS="ftp://ftp.ussg.iu.edu/pub/linux/gentoo/
http://open-systems.ufl.edu/mirrors/gentoo
http://www.gtlib.cc.gatech.edu/pub/gentoo
ftp://cudlug.cudenver.edu/pub/mirrors/distributions/gentoo/"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow X acpi alsa apache2 apm arts avi berkdb bitmap-fonts bonobo cdr crypt
cups dedicated dga doc dvd dvdr emacs emacs-w3 encode esd evo f77 fam flac flash
foomaticdb fortran gb gbdm gd gdbm gif gnome gphoto2 gpm gps gstreamer gtk gtk2
gtkhtml guile imagemagick imap imlib java jikes joystick jpeg junit kde kerberos
ladcca lcms ldap leim libg++ libgda libwww mad memlimit mikmod mmx motif mozilla
mpeg mpi mysql ncurses network nls odbc offensive oggvorbis opengl oss pam pda
pdflib perl php png pnp postgres ppds python qt quicktime readline ruby samba
sasl scanner sdl slang slp snmp spell sse ssl svga tcltk tcpd tetex tiff
truetype unicode usb videos wmf wxwindows x86 xml xml2 xmms xv yaz zlib"
Comment 1 Kenneth Lakin 2004-11-15 17:28:23 UTC
Created attachment 44027 [details, diff]
Fixes the behaviour described in the bug report.
Comment 2 Kenneth Lakin 2004-11-15 17:30:15 UTC
Comment on attachment 44027 [details, diff]
Fixes the behaviour described in the bug report.

--- pam_env.conf.old	2004-11-15 19:14:55.000000000 -0600
+++ pam_env.conf    2004-11-15 19:15:02.000000000 -0600
@@ -54,7 +54,7 @@
 REMOTEHOST DEFAULT= OVERRIDE=@{PAM_RHOST}
 #
 # Set the DISPLAY variable if it seems reasonable
-DISPLAY	DEFAULT=${REMOTEHOST}:0.0 OVERRIDE=${DISPLAY}
+#DISPLAY	DEFAULT=${REMOTEHOST}:0.0 OVERRIDE=${DISPLAY}
 #
 # Set the XAUTHORITY variable if pam_xauth is used
 XAUTHORITY DEFAULT= OVERRIDE=@{XAUTHORITY}
Comment 3 Uwe Weissenbacher 2004-11-18 02:07:50 UTC
This is a duplicate of the previously filed bug #70585
Comment 4 Martin Schlemmer (RETIRED) gentoo-dev 2005-02-25 11:50:14 UTC

*** This bug has been marked as a duplicate of 70585 ***