Summary:
You can login to our UNIX systems and run programs there that display their graphical output on your computer screen. To do this, you need an XWindows server running on your computer. You can download free software for this.
To login to UNIX and run XWindows programs from a MS Windows computer, follow these steps:
Troubleshooting XWindows problems:
| Problem: | Possible Causes: | Solutions: |
You type the UNIX command (such as "xterm") and you get an error
similar to
X connection to 128.32.138.27:11.0 broken (explicit kill or server shutdown). |
An XWindows server (Xming, XDarwin, etc)
is not running on your local computer.
The .Xauthority file in the user's UNIX directory is old. The UNIX account is over its disk quota; this prevents the .Xauthority file from being written. Your firewall is blocking it. |
Start an XWindows server
on your desktop computer.
Delete .Xauthority file in your UNIX acocunt; login again to UNIX account. Reduce UNIX disk usage and login to the UNIX account again. Turn off the firewall and try again. If that fixes it, then turn the firewall back on and enable the XWindows server (Xming, Exceed, etc). (For the Symantec filewall, turn off "auto protect" and tell it to alert you when it blocks something, so you'll get a chance to "allow" the XWindows connections.) |
You type the UNIX command (such as "xterm") and you
get an error similar to
Error: Can't open display:
|
"X11 Forwarding" is not enabled in the Ssh window.
You have an old 'setenv DISPLAY' command in your .cshrc or .login file. |
Logout from UNIX, enable "X11 Forwarding", login again.
Remove all hard-coded 'setenv DISPLAY' commands, logout, login again. |
| You type "emacs &" and it just hangs for 30 seconds to a minute, then you are disconnected from the server you are logged onto. |
"X11 Forwarding" is enabled in the Ssh window but you
are not running an XWindows server.
You have an old 'setenv DISPLAY' command in your .cshrc or .login file. |
Run the command "emacs -nw &" (-nw = 'no windows').
or Run the command "emacs" (without the &) so you can see any error messages. Remove all hard-coded 'setenv DISPLAY' commands, logout, login again. |
You can decide which email address to give out and whether to have one address forward email to another.
Email for EECS Instructional UNIX accounts:
unsecured "secured"
(home)-------------(computer1)--------------(computer2)
(telnet) (ssh)
^
|
+- This is where a cracker could get anything
you type to computer1 or computer2
| Questions about SSH: | Answers: |
| 1. Is the "pass phrase" like the password on a UNIX account? Does it need to be long, and with nonalphabetic characters etc.? What happens if someone guesses it? |
1. Passphrase is like a password, which is used to enable increased
security (it is not required). "ssh-keygen" creates it. The UNIX
"man ssh-keygen" command says
"The passphrase may be empty to indicate no passphrase (host keys must have empty passphrase), or it may be a string of arbitrary length. Good passphrases are 10-30 characters long and are not simple sentences or otherwise easily guessable..." If someone guesses it, they can login to your account and do bad things. |
| 2. Suppose you work on more than two accounts (for example: my home Mac, my campus Mac, my hera account, from which I access a variety of other accounts). Will one key suffice for the various accounts that I use for initial login, or should I have different keys? | 2. The SSH passphrase is stored in files in your .ssh subdirectory on UNIX, or in your UserKeys folder on Windows. The files could be unique in each account, or they could be copied (do it securely using scp!) to other accounts. |
| 3. Every time I login with ssh, I get the message that hera is sending a previously unknown key (or some such thing). What's going on here, and what's the proper response? | 3. If you answer "yes" to the question, ssh will add the key of the remote host (ie "hera") to your ~/.ssh/known_hosts file (UNIX) and you won't be asked again, unless they change the host key on hera (or someone is pretending to be hera on the network). |