Gentoo Archives: gentoo-user

From: Grant <emailgrant@×××××.com>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] Re: X-forwarding fails with "Invalid MIT-MAGIC-COOKIE-1 key"
Date: Fri, 01 May 2009 15:07:19
Message-Id: 49bf44f10905010807x53cf77fcnf01b185e13e83a63@mail.gmail.com
In Reply to: Re: [gentoo-user] Re: X-forwarding fails with "Invalid MIT-MAGIC-COOKIE-1 key" by Grant
1 >>> $ ssh -Y 192.168.10.1
2 >>> The authenticity of host '192.168.10.1 (192.168.10.1)' can't be
3 >>> established. RSA key fingerprint is.
4 >>> Are you sure you want to continue connecting (yes/no)? yes
5 >>> Failed to add the host to the list of known hosts
6 >>> (/home/grant/.ssh/known_hosts).
7 >>
8 >> I think the problem is here: too strict permissions in ~/.ssh preventing
9 >> ssh to update known_hosts list, needed to continue connection. it
10 >> should be 700 for the .ssh directory and 600 for the file known_hosts.
11 >>
12 >> What is the output of: ls -l .ssh -d ? And ls -l .ssh ?
13 >> Is 192.168.10.1 in your known_hosts?
14 >> With the right RSA key?
15 >>
16 >> Ciao
17 >>        Francesco
18 >
19 > Thanks again everyone, it's working after a reboot.  X has been
20 > strange since the xorg-1.5 upgrade.  I noticed that ssh -X fails with
21 > the same error message I've been getting, but ssh -Y succeeds.  man
22 > ssh says:
23 >
24 > -Y   Enables trusted X11 forwarding.  Trusted X11 forwardings are not
25 > subjected to the X11 SECURITY extension controls.
26 >
27 > Security extension controls sounds like a good thing.  Does anyone
28 > know why -X isn't working?
29 >
30 > - Grant
31
32 I should also add that the following doesn't seem to be necessary on the client:
33
34 /etc/ssh/ssh_config:
35 Host *
36 ForwardAgent yes
37 ForwardX11 yes
38
39 - Grant