On Tue, Jun 19, 2001 at 09:55:19AM +1000, Luke Mewburn wrote:

 > Have a look at the way that X11Forwarding is implemented. It effectively
 > comprises of:
 > 	* creating a tunnel for the X traffic (ssh & sshd)
 > 	* creating a one-time $DISPLAY (e.g, "server:55") and and
 > 	  appropriate xauth cookie for that session (ssh)
 > 	* passing this new $DISPLAY and cookie (ssh to remote sshd to deal with)
 > 
 > Our login(1) can't handle the cookie (or the DISPLAY, unless it's in the
 > environment before-hand). Hacking login(1) to support this cookie
 > munging is something that I strongly object to.

The bug is that OpenSSH has REALLY CRAPPY child environment variable
handling.

(Note that FreSSH does not have the same fundamental problem as OpenSSH
in this regard, although X11 forwarding is not yet implemented in FreSSH.)

-- 
        -- Jason R. Thorpe <thorpej@zembu.com>