Securing Remote Connection Through SSH

Asked by MyLeftFoot

Section 2.6 of the GDM Overview talks about Securing Remote Connection Through SSH.

In Dapper is GDM compiled with the option --enable-secureremote? And if so how do I use it?

 - lefty

Question information

English Edit question
Ubuntu gdm Edit question
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Dennis Kaarsemaker (dennis) said :

> In Dapper is GDM compiled with the option --enable-secureremote?

DEB_CONFIGURE_EXTRA_FLAGS := --disable-dependency-tracking
--localstatedir=/var/lib --with-selinux --enable-secureremote=yes
--with-xdmcp --disable-scrollkeeper --with-prefetch=yes

So: yes it is.

Revision history for this message
Sebastien Bacher (seb128) said :

no, it's not, the menu item is sort of hack and not marked as translatable, not something to push without translation just before dapper

Revision history for this message
Bogdan Butnaru (bogdanb) said :

Any new info on this? I'd really like to be able to do a remote login and unsecure XDMCP is not possible.

Is there any way to sort of manually forward an X display through ssh and have the remote session manager take control of it? I'm ready for some hacking on GDM if necessary, but I do need a few pointers before.

(My situation is simple: I have a laptop I do most of my work on (because it's with me all the time) and a computer at work that just happens to have a better display; I'd like to use it pretty much as a dumb terminal.)

Revision history for this message
Bogdan Butnaru (bogdanb) said :

I forgot to mention again: I'm using Feisty here.

Revision history for this message
Bernard Banko (beernarrd) said :

Try this one:

Quoting possible solution:


TARGETHOST=`zenity --title "Host to connect to" --entry --text "Enter the name of the host you want to log in to"`
#@@@ should probably get a user name too; I don't need it so didn't set it up that way
#@@@ should it do an ssh-add so the user doesn't have to enter its passphrase again?
SSH_ASKPASS=/etc/alternative/ssh-askpass /usr/bin/ssh -A -X -T -n "$TARGETHOST" /usr/bin/x-session-manager

The other file is the one responsible to linking that session manager from GDM; it’s a simple .desktop file, which I placed at


[Desktop Entry]
Comment=This session logs you into a remote host using ssh

Can you help with this problem?

Provide an answer of your own, or ask MyLeftFoot for more information if necessary.

To post a message you must log in.