|
|
|
Securing X11 Connections with SSH: Quick Reference Connection Examples
Technical Note 1949
Last Reviewed 20-Apr-2007
Applies To
Reflection X version 12.0 through 14.x
Summary
Technical Note 1949
Last Reviewed 20-Apr-2007
Applies To
Reflection X version 12.0 through 14.x
Summary
This note describes how to secure X11 connections with SSH, which is an effective solution to common security problems.
To launch an X application with Reflection X:
- Launch Reflection X by clicking Start > Programs > Attachmate Reflection (formerly WRQ Reflection) > Reflection X.
- In the left pane of the Reflection X Manager, click the plus symbol next to Client Templates, and then the plus symbol next to Client Startup.
- Select the client template for your host Operating System.
- In the Right pane, under Method, select SECURE SHELL (previously OPENSSH).
- Complete Host and User name fields, and click Connect. The X application preset with the connection template you selected should now appear.
To launch an X application with Reflection for UNIX and OpenVMS version 12.0 – 14.x, and Reflection X version 12.0 – 14.x:
Note: This example will not work when running Reflection X in a thin client session to either a Windows Terminal Server or Citrix Server.
- Launch Reflection X by clicking Start > Programs > Attachmate Reflection (formerly WRQ Reflection) > Reflection X. It can now be minimized as it will be listening for X protocol.
- Launch Reflection for UNIX and OpenVMS by clicking Start > Programs > Attachmate Reflection > Host – UNIX and OpenVMS.
- In Reflection for UNIX and OpenVMS, click Connection > Connection Setup.
- Select Network, and then SECURE SHELL (previously OPENSSH).
- Input the Host and User names, and click Security.
- In version 13.0.4 – 14.x: Select the "Tunnel X11 connections" checkbox and then click OK.
In versions 12.0-13.0.3: Click Port Forwarding, and then click the Local tab. Check the box titled Display remote X applications on local X server, and then click OK twice to return to the Connection Setup window.
- Click Connect and log onto the host.
- At the command prompt, type the command for starting the X client you want, such as "xterm &" (you may need to include the path). The X application should now appear.
To launch an X application with F-Secure SSH Client for Windows version 5.4, and Reflection X:
Note: This example will not work when running Reflection X in a thin client session to either a Windows Terminal Server or Citrix Server.
- Launch Reflection X by clicking Start > Programs > Attachmate Reflection (formerly WRQ Reflection) > Reflection X. It can now be minimized as it will be listening for X protocol.
- Launch the F-Secure SSH Client for Windows by clicking Start > Programs > F-Secure SSH Client > F-Secure SSH Client.
- In the F-Secure Client for Windows, click Edit > Settings.
- Click the plus symbol next to Profile, and then select the word Tunneling.
- On the Tunneling window, check the box entitled Tunnel X11 connections, and click OK.
- Click File > Connect (or the Connect icon in the toolbar).
- Enter the Host and User names, and modify the Authentication Methods list if needed.
- Click Connect and log onto the host.
- At the command prompt, type the command for starting the X client you want, such as "xterm &" (you may need to include the path). The X application should now appear.
