GNU bug report logs - #23317
openssh: ssh client: xauth path is invalid - "/usr/X11R6/bin/xauth"

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: guix; Reported by: Danny Milosavljevic <dannym@HIDDEN>; dated Tue, 19 Apr 2016 20:40:01 UTC; Maintainer for guix is bug-guix@HIDDEN.

Message received at 23317 <at> debbugs.gnu.org:


Received: (at 23317) by debbugs.gnu.org; 1 Aug 2016 09:51:19 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon Aug 01 05:51:18 2016
Received: from localhost ([127.0.0.1]:52560 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1bU9sU-0004rW-MR
	for submit <at> debbugs.gnu.org; Mon, 01 Aug 2016 05:51:18 -0400
Received: from eggs.gnu.org ([208.118.235.92]:54658)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1bU9sS-0004rJ-UU
 for 23317 <at> debbugs.gnu.org; Mon, 01 Aug 2016 05:51:17 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <ludo@HIDDEN>) id 1bU9sI-0000fA-KJ
 for 23317 <at> debbugs.gnu.org; Mon, 01 Aug 2016 05:51:11 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00,RP_MATCHES_RCVD
 autolearn=disabled version=3.3.2
Received: from fencepost.gnu.org ([2001:4830:134:3::e]:40608)
 by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from <ludo@HIDDEN>)
 id 1bU9sI-0000f6-HE; Mon, 01 Aug 2016 05:51:06 -0400
Received: from pluto.bordeaux.inria.fr ([193.50.110.57]:40148 helo=pluto)
 by fencepost.gnu.org with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128)
 (Exim 4.82) (envelope-from <ludo@HIDDEN>)
 id 1bU9sG-0002de-1P; Mon, 01 Aug 2016 05:51:04 -0400
From: ludo@HIDDEN (Ludovic =?utf-8?Q?Court=C3=A8s?=)
To: Danny Milosavljevic <dannym@HIDDEN>
Subject: Re: bug#23317: openssh: ssh client: xauth path is invalid -
 "/usr/X11R6/bin/xauth"
References: <20160419223929.54f33b36@HIDDEN>
 <20160428073041.36eb3e93@HIDDEN>
Date: Mon, 01 Aug 2016 11:51:01 +0200
In-Reply-To: <20160428073041.36eb3e93@HIDDEN> (Danny Milosavljevic's
 message of "Thu, 28 Apr 2016 07:30:41 +0200")
Message-ID: <87eg68u8ai.fsf@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 2001:4830:134:3::e
X-Spam-Score: -6.3 (------)
X-Debbugs-Envelope-To: 23317
Cc: 23317 <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -6.3 (------)

Hi!

Danny Milosavljevic <dannym@HIDDEN> skribis:

> But
>
>   $ ssh -Y -o XAuthLocation=3D$(which xauth) daya20
>
> works without the patch.
>
> And
>
>   $ ssh -Y daya20
>
> works with the patch.

I pushed the patch as commit 683a4a34cd4a565cbdb0b46a326e30795657814c.
This increases the closure size of OpenSSH from 89 to 118=C2=A0MiB (+33%),
but I think it=E2=80=99s a useful addition.

> But
>
>   $ ssh -X daya20
>
> never works, with or without the patch. Huh.

I=E2=80=99ve straced =E2=80=9Cssh -X=E2=80=9D, and it shows that xauth fail=
s like this:

--8<---------------cut here---------------start------------->8---
4742  write(2, "/gnu/store/86f0c3h99sl9z4x4w30hfy33i7nv2ik9-xauth-1.0.9/bin=
/xauth: (argv):1:  ", 78) =3D 78
4742  write(2, "couldn't query Security extension on display \":0.0\"\n", 5=
2) =3D 52
4742  unlink("/tmp/ssh-FDByknME3mmd/xauthfile-c") =3D 0
4742  unlink("/tmp/ssh-FDByknME3mmd/xauthfile-l") =3D 0
4742  umask(022)                        =3D 077
4742  exit_group(1)                     =3D ?
--8<---------------cut here---------------end--------------->8---

This is because the SECURITY extension are disabled in our xorg-server
package.  We could configure it with --enable-xcsecurity, but upstream
disables it by default and it seems to be deprecated:

  https://www.x.org/wiki/Development/Documentation/Security/

Thoughts?

Ludo=E2=80=99.




Information forwarded to bug-guix@HIDDEN:
bug#23317; Package guix. Full text available.

Message received at 23317 <at> debbugs.gnu.org:


Received: (at 23317) by debbugs.gnu.org; 28 Apr 2016 05:30:53 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Apr 28 01:30:53 2016
Received: from localhost ([127.0.0.1]:51083 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1aveXM-000670-QL
	for submit <at> debbugs.gnu.org; Thu, 28 Apr 2016 01:30:52 -0400
Received: from dd1012.kasserver.com ([85.13.128.8]:53743)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <dannym@HIDDEN>) id 1aveXL-00066r-8Q
 for 23317 <at> debbugs.gnu.org; Thu, 28 Apr 2016 01:30:51 -0400
Received: from localhost (178.115.129.65.wireless.dyn.drei.com
 [178.115.129.65])
 by dd1012.kasserver.com (Postfix) with ESMTPSA id 3A0FF1CA0080
 for <23317 <at> debbugs.gnu.org>; Thu, 28 Apr 2016 07:30:48 +0200 (CEST)
Date: Thu, 28 Apr 2016 07:30:41 +0200
From: Danny Milosavljevic <dannym@HIDDEN>
To: 23317 <at> debbugs.gnu.org
Subject: Re: bug#23317: openssh: ssh client: xauth path is invalid -
 "/usr/X11R6/bin/xauth"
Message-ID: <20160428073041.36eb3e93@HIDDEN>
In-Reply-To: <20160419223929.54f33b36@HIDDEN>
References: <20160419223929.54f33b36@HIDDEN>
X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.28; x86_64-unknown-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 23317
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -0.7 (/)

But

  $ ssh -Y -o XAuthLocation=$(which xauth) daya20

works without the patch.

And

  $ ssh -Y daya20

works with the patch.

But

  $ ssh -X daya20

never works, with or without the patch. Huh.




Information forwarded to bug-guix@HIDDEN:
bug#23317; Package guix. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 19 Apr 2016 20:39:51 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Apr 19 16:39:51 2016
Received: from localhost ([127.0.0.1]:40646 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1ascR4-00049V-UA
	for submit <at> debbugs.gnu.org; Tue, 19 Apr 2016 16:39:51 -0400
Received: from eggs.gnu.org ([208.118.235.92]:34130)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <dannym@HIDDEN>) id 1ascR2-00049I-QV
 for submit <at> debbugs.gnu.org; Tue, 19 Apr 2016 16:39:49 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <dannym@HIDDEN>) id 1ascQw-0004Ol-RG
 for submit <at> debbugs.gnu.org; Tue, 19 Apr 2016 16:39:43 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05 autolearn=disabled
 version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:55442)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <dannym@HIDDEN>) id 1ascQw-0004Oh-Ob
 for submit <at> debbugs.gnu.org; Tue, 19 Apr 2016 16:39:42 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:53323)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <dannym@HIDDEN>) id 1ascQv-0004Y7-R4
 for bug-guix@HIDDEN; Tue, 19 Apr 2016 16:39:42 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <dannym@HIDDEN>) id 1ascQq-0004NM-OY
 for bug-guix@HIDDEN; Tue, 19 Apr 2016 16:39:41 -0400
Received: from dd1012.kasserver.com ([85.13.128.8]:42985)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <dannym@HIDDEN>) id 1ascQq-0004NG-JR
 for bug-guix@HIDDEN; Tue, 19 Apr 2016 16:39:36 -0400
Received: from localhost (178.165.129.116.wireless.dyn.drei.com
 [178.165.129.116])
 by dd1012.kasserver.com (Postfix) with ESMTPSA id D73E51CA00FD
 for <bug-guix@HIDDEN>; Tue, 19 Apr 2016 22:39:34 +0200 (CEST)
Date: Tue, 19 Apr 2016 22:39:29 +0200
From: Danny Milosavljevic <dannym@HIDDEN>
To: <bug-guix@HIDDEN>
Subject: openssh: ssh client: xauth path is invalid - "/usr/X11R6/bin/xauth"
Message-ID: <20160419223929.54f33b36@HIDDEN>
X-Mailer: Claws Mail 3.13.2 (GTK+ 2.24.28; x86_64-unknown-linux-gnu)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 3.x
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -5.0 (-----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.0 (-----)

$ ssh -X daya20
Warning: untrusted X11 forwarding setup failed: xauth key data not generated

Because:

$ strings $(which ssh) |grep  /xauth
/usr/X11R6/bin/xauth
%s/xauthfile

However,

$ which xauth
/home/dannym/.guix-profile/bin/xauth

Adding the following and rebuilding doesn't help either (for some reason):
diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
index b8f107b..d85124b 100644
--- a/gnu/packages/ssh.scm
+++ b/gnu/packages/ssh.scm
@@ -35,6 +35,7 @@
   #:autoload   (gnu packages boost) (boost)
   #:use-module (gnu packages base)
   #:use-module (gnu packages tls)
+  #:use-module (gnu packages xorg)
   #:use-module (gnu packages)
   #:use-module (guix packages)
   #:use-module (guix download)
@@ -131,7 +132,8 @@ a server that supports the SSH-2 protocol.")
    (build-system gnu-build-system)
    (inputs `(("groff" ,groff)
              ("openssl" ,openssl)
-             ("zlib" ,zlib)))
+             ("zlib" ,zlib)
+             ("xauth" ,xauth)))
    (arguments
     `(#:test-target "tests"
       #:phases

But
  $ ssh -o XAuthLocation=$(which xauth) daya20
works.




Acknowledgement sent to Danny Milosavljevic <dannym@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-guix@HIDDEN. Full text available.
Report forwarded to bug-guix@HIDDEN:
bug#23317; Package guix. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 1 Aug 2016 10:00:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.