Home ›

Access Remote GUI Programs Using SSH Forwarding

May 21, 2009  By Shawn Powers
 in
FAIL (the browser should render some flash content, not this).

Run GUI apps on another machine remotely through SSH.

Download in .ogv format

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Root + SSH = No Go!

Anonymous's picture
Submitted by Anonymous (not verified) on Wed, 08/26/2009 - 07:16.

You really shouldn't allow root to login remotely!

That even counts double if you're using plain old password to log in!

You get much more security if you use ssh keys to login and don't allow root to log in remotely. Instead, log in as a normal user and use the command "su -" or "sudo" to become root *after* you have logged into the remote machine.

Last, but not least, don't use port 22 for ssh. Set sshd to listen to some other port > 1024.

I like it! shows that linux

Easteregg's picture
Submitted by Easteregg (not verified) on Sat, 05/30/2009 - 07:32.

I like it! shows that linux has something to say :D

The first time i ran the

Anonymous's picture
Submitted by Anonymous (not verified) on Thu, 05/28/2009 - 21:13.

The first time i ran the command it just worked.. I was really impressed. My server has a 5Mbit upload, so the performance was not bad at all..

however, the next day, and every day since i get the following error when i try the command.

(gnome-terminal:27725): Gtk-WARNING **: cannot open display:

CentOS 5.3 Final

Display Linux apps on a Windows desktop too

copsewood's picture
Submitted by copsewood (not verified) on Tue, 05/26/2009 - 16:42.

I found out how to make a Windows desktop display Linux apps also using the remote X display protocol a couple of weeks ago. The SSH client to use on Windows is Putty and you need to set this in X forwarding mode, and also have the Xming X server on Windows running in multiwindow mode.

If the Linux server is on a broadband connection, you will probably need to forward the SSH port to it from the router/firewall. If the server is running Ubuntu, make sure you run the command:

sudo aptitude install openssh-server

to install and run the SSH server on it too.

Oh and BTW, good idea to install denyhosts or similar on the ssh server to defeat password guessing attacks.

ssh -C server2@address -p

headlice's picture
Submitted by headlice (not verified) on Sat, 05/23/2009 - 19:47.

ssh -C server2@address -p gnome-terminal

Outputs this:

Failed to contact the GConf daemon; exiting.

server setup

David Murch's picture
Submitted by David Murch (not verified) on Sat, 05/23/2009 - 05:51.

To setup a machine to connect to with SSH forwarding simply do the following (ubuntu + SuSe:

make sure to install the package openssh-server on your distro

> vi /etc/ssh/sshd_config

and set:
X11Forwarding yes

> vi /etc/ssh/ssh_config

and set:
ForwardAgent yes
ForwardX11 yes
ForwardX11Trusted yes

> /etc/init.d/ssh restart

Your done and con connect with forwarding

I see a red arrow on the top

The Other Richard's picture
Submitted by The Other Richard (not verified) on Fri, 05/22/2009 - 07:50.

I see a red arrow on the top bar. Don't forget to install your updates.

Yes, this is great for LAN not so much for WAN. But for WAN, ssh to a command line is not so hard. Don't fear the command line. After the learning curve you can accomplish more in quicker time.

And yes, this is from someone who on WinXP has evolution open on a linux box and another ssh xterm shell open to control a OSX box. :)

Thats fascinating but what

Anonymous's picture
Submitted by Anonymous (not verified) on Fri, 05/22/2009 - 05:16.

Thats fascinating but what is required to get that up and running, i.e maybe instead of showing us to use a feature explain how it is setup i.e. how to enable/configure X forwarding, or am to understand that this is just a teaser?

GX

Cool

madspaz's picture
Submitted by madspaz (not verified) on Thu, 05/21/2009 - 20:00.

Been using !NX for some time now to get a remote X session; not quite as simple but with Debian it can be a 3 click process (using the .deb files, literally up and running in 5 minutes) once OpenSSH is installed. Great tip none the less; yes it is slow but more than enough in a bind.

local network will not work

terry's picture
Submitted by terry (not verified) on Thu, 05/21/2009 - 15:37.

I used a ip from a laptop on my local network with this command

( ski@ubuntu:~$ ssh -C -X ski@192.168.X.XXX )

also tried root before the @ sign.came back as

ssh: connect to host 192.168.x.xxx port 22: Connection refused

NOTE :I blocked my local ip with XXs for example only.

SSH?

Shawn Powers's picture
Submitted by Shawn Powers on Thu, 05/21/2009 - 17:26.

Perhaps SSH isn't running on your server?

Shawn Powers is an Associate Editor for Linux Journal. You might find him chatting on the IRC channel, or Twitter

too slow

Jason's picture
Submitted by Jason (not verified) on Thu, 05/21/2009 - 13:35.

This tip is too slow for anything except local area network.

Sorta

Shawn Powers's picture
Submitted by Shawn Powers on Thu, 05/21/2009 - 17:27.

Yes, over a WAN it is pretty painful to use an application -- but for an emergency configuration or something, it's tolerable over broadband.

Shawn Powers is an Associate Editor for Linux Journal. You might find him chatting on the IRC channel, or Twitter

Sneakiness

Anonymous's picture
Submitted by Anonymous (not verified) on Thu, 05/21/2009 - 11:09.

What you really need to show people is how to get around corporate firewalls and web filters by using linux on a home computer to act as a proxy both for HTTP/S and for DNS. The same techniques are also handy for safe web access in places like airports, hotels, and conventions.

Just a suggestion.

Webcast
More Resources
How to Build an Optimal Hadoop Cluster to Store and Maintain Unlimited Amounts of Data Using Microservers

Realizing the promise of Apache® Hadoop® requires the effective deployment of compute, memory, storage and networking to achieve optimal results. With its flexibility and multitude of options, it is easy to over or under provision the server infrastructure, resulting in poor performance and high TCO. Join us for an in depth, technical discussion with industry experts from leading Hadoop and server companies who will provide insights into the key considerations for designing and deploying an optimal Hadoop cluster.

Learn More

Sponsored by AMD

White Paper
More Resources
Red Hat White Paper: Using an Open Source Framework to Catch the Bad Guy

Built-in forensics, incident response, and security with Red Hat Enterprise Linux 6

Every security policy provides guidance and requirements for ensuring adequate protection of information and data, as well as high-level technical and administrative security requirements for a system in a given environment. Traditionally, providing security for a system focuses on the confidentiality of the information on it. However, protecting the data integrity and system and data availability is just as important. For example, when processing United States intelligence information, there are three attributes that require protection: confidentiality, integrity, and availability.

Learn more about catching the bad guy in this free white paper.

Learn More

Sponsored by DLT Solutions