Bug 1949176

Summary: GNOME Shell on Wayland does not generate xauth data, needed for X forwarding over SSH
Product: Red Hat Enterprise Linux 8 Reporter: David Ward <david.ward>
Component: mutterAssignee: Jonas Ådahl <jadahl>
Status: CLOSED ERRATA QA Contact: Michal Odehnal <modehnal>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.4CC: edgar.hoch, extras-qa, fmuellner, hdegoede, jadahl, jjelen, kgrindley, lvrabec, mattias.ellert, meta, mgrepl, mmalik, plautrba, sbarcomb, taisfmq, tmraz, tpelka, vpakolu
Target Milestone: betaKeywords: Triaged
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: mutter-3.32.2-58.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1425250 Environment:
Last Closed: 2021-11-09 19:34:22 UTC Type: Support Patch
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1778159    
Attachments:
Description Flags
Adjusted version of upstream patch for RHEL 8.x hdegoede: review+

Description David Ward 2021-04-13 15:50:04 UTC
Created attachment 1771655 [details]
Adjusted version of upstream patch for RHEL 8.x

+++ This bug was initially created as a clone of Bug #1425250 +++

Description of problem:

GNOME Shell on Wayland is the default desktop environment in RHEL 8. This environment is currently missing the ability to establish an SSH connection with X forwarding, in order to run graphical applications on a remote system -- even though the RHEL 8 desktop environment includes Xwayland for compatibility with X applications.

This happens because the display server (Mutter) does not generate an xauth file (.Xauthority), which contains a "cookie" that the remote system (X client) needs in order to authenticate itself to the local display server. This message is displayed instead when establishing the SSH connection:

$ ssh -o ForwardX11=yes -o ForwardAgent=yes anotherhost
Warning: No xauth data; using fake authentication data for X11 forwarding.


This was fixed upstream in GNOME 3.34 with the following commit by Hans de Goede (Red Hat, cc'd): https://gitlab.gnome.org/GNOME/mutter/commit/a8984a81c2e887623d69ec9989ae8a5025f7bd47

RHEL 8.x currently uses GNOME 3.32. The commit above requires one small contextual change in order to backport correctly. I have attached the adjusted diff. With this diff applied, I am able to run remote X applications over an SSH connection, in the GNOME Shell on Wayland desktop environment.

Please queue this patch for inclusion.

Comment 1 Hans de Goede 2021-04-13 20:08:59 UTC
Comment on attachment 1771655 [details]
Adjusted version of upstream patch for RHEL 8.x

We don't really use bugzilla patch reviews for RHEL, but FWIW the backport looks good to me.

Comment 3 Jonas Ådahl 2021-06-30 16:30:16 UTC
This also needs https://gitlab.gnome.org/GNOME/mutter/-/merge_requests/735 to not regress.

Comment 4 Vit Mojzis 2021-07-02 10:46:54 UTC
*** Bug 1778159 has been marked as a duplicate of this bug. ***

Comment 5 Michal Odehnal 2021-07-19 09:39:15 UTC
All upstream tests executed with full pass as a result and I was not able to reproduce the bug. Switching to Verified:Tested.

Comment 10 errata-xmlrpc 2021-11-09 19:34:22 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: GNOME security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:4381