sshd failed to allocate X11 socket - why?
in [Solaris]
|
From: Thomas Maier-Komor on 13 Jan 2006 11:08 I got the following message in my syslog. Jan 13 16:44:53 anarmacil sshd[12316]: [ID 800047 auth.error] error: Failed to allocate internet-domain X11 display socket. What could the reason be for this?! In consequence the DISPLAY variable does not get set... I am clueless... Tom
From: Oscar del Rio on 13 Jan 2006 11:59 Thomas Maier-Komor wrote: > I got the following message in my syslog. > > Jan 13 16:44:53 anarmacil sshd[12316]: [ID 800047 auth.error] error: > Failed to allocate internet-domain X11 display socket. > > > What could the reason be for this?! In consequence the DISPLAY variable > does not get set... Look for the sockfs patch for your version of Solaris, e.g. 118335-04 or later for Solaris 9 SPARC. Alternatively, change the sshd script in init.d to start the daemon with "sshd -4" AND edit the sshd_config file to # IPv4 only ListenAddress 0.0.0.0 # IPv4 & IPv6 #ListenAddress :: and restart "sshd -4"
From: Alan Coopersmith on 13 Jan 2006 12:01 Thomas Maier-Komor <maierkom(a)lpr.e-technik.no-spam.tu-muenchen.de> writes in comp.unix.solaris: |I got the following message in my syslog. | |Jan 13 16:44:53 anarmacil sshd[12316]: [ID 800047 auth.error] error: |Failed to allocate internet-domain X11 display socket. | | |What could the reason be for this?! In consequence the DISPLAY variable |does not get set... Are all the ports around 6010 already in use? I know on Sun Ray servers people have to set X11DisplayOffset in /etc/ssh/sshd_config to a high enough number to avoid conflicting with the displays used by the Sun Rays. (X display sockets are tcp port 6000+display_number, so the usual ssh default display of :10 is 6010.) -- Alan Coopersmith * alanc(a)alum.calberkeley.org * Alan.Coopersmith(a)Sun.COM http://blogs.sun.com/alanc/ * http://people.freedesktop.org/~alanc/ http://del.icio.us/alanc/ * http://www.csua.berkeley.edu/~alanc/ Working for, but definitely not speaking for, Sun Microsystems, Inc.
From: Thomas Maier-Komor on 13 Jan 2006 14:26 Oscar del Rio wrote: > Thomas Maier-Komor wrote: >> I got the following message in my syslog. >> >> Jan 13 16:44:53 anarmacil sshd[12316]: [ID 800047 auth.error] error: >> Failed to allocate internet-domain X11 display socket. >> >> >> What could the reason be for this?! In consequence the DISPLAY >> variable does not get set... > > Look for the sockfs patch for your version of Solaris, > e.g. 118335-04 or later for Solaris 9 SPARC. > no, this is on a Solaris 10 machine. > Alternatively, change the sshd script in init.d to start > the daemon with "sshd -4" AND edit the sshd_config file to > > # IPv4 only > ListenAddress 0.0.0.0 > # IPv4 & IPv6 > #ListenAddress :: > > and restart "sshd -4" That didn't do the trick. But thanks anyway. Unfortunately, this is the machine where I detected the crle upgrade bug, which I posted on opensolaris' discussion list for bugs. So it could be that the upgrade is faulty. Cheers, Tom
From: Thomas Maier-Komor on 13 Jan 2006 14:27
Alan Coopersmith wrote: > Thomas Maier-Komor <maierkom(a)lpr.e-technik.no-spam.tu-muenchen.de> writes in comp.unix.solaris: > |I got the following message in my syslog. > | > |Jan 13 16:44:53 anarmacil sshd[12316]: [ID 800047 auth.error] error: > |Failed to allocate internet-domain X11 display socket. > | > | > |What could the reason be for this?! In consequence the DISPLAY variable > |does not get set... > > Are all the ports around 6010 already in use? I know on Sun Ray servers > people have to set X11DisplayOffset in /etc/ssh/sshd_config to a high > enough number to avoid conflicting with the displays used by the Sun > Rays. (X display sockets are tcp port 6000+display_number, so the > usual ssh default display of :10 is 6010.) > no, there should be enough open ports. The machine is almost nothing to do... $ netstat -P tcp TCP: IPv4 Local Address Remote Address Swind Send-Q Rwind Recv-Q State -------------------- -------------------- ----- ------ ----- ------ ------- anarmacil.32784 anarmacil.32774 49152 0 49152 0 ESTABLISHED anarmacil.32774 anarmacil.32784 49152 0 49152 0 ESTABLISHED anarmacil.961 nobody.nfsd 5840 0 49640 0 ESTABLISHED anarmacil.ssh ernie.lpr.e-technik.tu-muenchen.de.51970 15456 0 49232 0 ESTABLISHED anarmacil.964 aquila.lpr.e-technik.tu-muenchen.de.nfsd 49640 0 49640 0 ESTABLISHED anarmacil.32773 aquila.lpr.e-technik.tu-muenchen.de.46370 49640 0 49640 0 ESTABLISHED anarmacil.34878 aquila.lpr.e-technik.tu-muenchen.de.nfsd 49640 0 49640 0 TIME_WAIT anap.34879 aquilap.nfsd 49640 0 49640 0 TIME_WAIT anarmacil.34880 aquila.lpr.e-technik.tu-muenchen.de.nfsd 49640 0 49640 0 TIME_WAIT anap.34881 aquilap.nfsd 49640 0 49640 0 TIME_WAIT anap.960 aquilap.nfsd 49640 0 49640 0 ESTABLISHED anarmacil.ssh ernie.lpr.e-technik.tu-muenchen.de.51974 15456 0 49232 0 ESTABLISHED anarmacil.34876 nobody.997 5840 0 49640 0 TIME_WAIT anarmacil.34877 nobody.997 5840 0 49640 0 TIME_WAIT Active UNIX domain sockets Address Type Vnode Conn Local Addr Remote Addr 60001bedb08 stream-ord 600024a1d40 00000000 /var/run/atokserver/atokusermanagedaemon 60001bedc88 stream-ord 600024628c0 00000000 /var/run/jd_sockV6 60001bede08 stream-ord 60001be7400 00000000 /var/run/.inetd.uds This it the correct way to see all used tcp ports, isn't it? Tom |