From Bugzilla Helper: User-Agent: Mozilla/4.77 [en] (X11; U; Linux 2.2.19-1t i686) After RedHat finally ships an OpenSSH with its products, it is annoying to install all the XFree86 packages just to get the sshd calling xauth for X11 display forwarding. On a server, it should be enough to install the libs and a RPM which contains just xauth This is especially annoying if disk space is tight. Reproducible: Always Steps to Reproduce: rpm -ql XFree86 | grep xauth Just create a new RPM, e.g. XFree86-xauth from the XFree86 SRPM which contains just /usr/X11R6/bin/xauth and its man-page. Make it require XFree86-libs. Done.
I agree that this is annoying, and will do something about it after looking deeper into the matter. This has annoyed me since before I worked here as well. <grin> Thanks for pointing out this pet peeve. I'll try to roll something into a future release to eliminate the bloatitis. No doubt there are other similar issues that might be solveable in a unified way.
The problem is not with xauth, it is with the locale data not being in the libs subpackage. The locale data is moved from the XFree86 package to the libs packge now. Please upgrade to XFree86-4.0.3-15 from: ftp://people.redhat.com/mharris/testing
No, wrong. A program like the sshd needs xauth to set authentication for X Forwarding. At the moment, I must install XFree and XFree-libs to get X-Forwarding from SSH. I just want to install XFree-libs (which I need anyway) and XFree-xauth. I built a custom XFree distribution for my internal usage and this split works fine and is reasonable.
After talking with Nalin about this, he says it is a bug in openssh which is about to be fixed shortly, reassigning.
Duh, I just noticed this is fixed in rawhide... closing fix verified in openssh-2.9p2-5
Hm. Is it possible that you didn't understand me? I have a server. This server hast just one X application for managing one of the services (let's call it a backup system). I want to do the following thing: - Log into it with ssh - the X-Display for the session gets forwarded over the ssh tunnel by enabling it with xauth - start my application (let's call it "ARKEIA" for sake of having a name) I need for this: - SSH - The application - /usr/X11R6/bin/xauth - The X Libraries Why should I install _all_ of the XFree86 including lots of potentially harmful programs like "pcitweak" or "xvidtune" that will be never ever used on this server if all I need is - SSH - The Application - XFree86-libs - XFree86-xauth with just one lone binary So what has all of this to do with "a bug fix in rawhide"? It seems to me that you don't understand the problem at first.
XF4 will also require you to install Mesa or Glide3 and several fontsets, xfs... .. all just to get (for example) ssh -f -X headlesserver xload
Just reread the whole report, and indeed at first I did misunderstand the problem. My initial prognosis was indeed incorrect at the time (concerning locale data). The problem is what you describe, and could be solved by creating a separate xauth package like you suggest, or by making openssl not require xauth. I presumed that the latter was done when the bug was closed as confirmed. I do agree the better solution is to have a separate xauth package however, and as such I have just done so. XFree86-xauth will appear in rawhide soon.
*** Bug 62426 has been marked as a duplicate of this bug. ***
Thanks a lot!