Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

X11 Forwarding support for Teleport nodes #7799

Closed
Tracked by #8745
pschisa opened this issue Aug 4, 2021 · 4 comments · Fixed by #9897
Closed
Tracked by #8745

X11 Forwarding support for Teleport nodes #7799

pschisa opened this issue Aug 4, 2021 · 4 comments · Fixed by #9897
Assignees
Labels
c-dt Internal Customer Reference c-ju Internal Customer Reference feature-request Used for new features in Teleport, improvements to current should be #enhancements
Milestone

Comments

@pschisa
Copy link
Contributor

pschisa commented Aug 4, 2021

What

Enable the ability to use X11 forwarding through Teleport proxy to a Teleport node. Ideally this would work with tsh and OpenSSH clients but just OpenSSH clients at first would be sufficient.

How

Allow X11 forwarding to Teleport nodes and audit X11 activity in audit events

Why

Enables the ability to maintain the full benefits of Teleport to support applications and workflows that still require X11 forwarding to function.

Workaround

Use and OpenSSH client and OpenSSH node integration for X11 forwarding

@pschisa pschisa added feature-request Used for new features in Teleport, improvements to current should be #enhancements c-ju Internal Customer Reference labels Aug 4, 2021
@deusxanima deusxanima added the c-dt Internal Customer Reference label Sep 24, 2021
@russjones russjones added this to the 8.2 milestone Oct 18, 2021
@russjones
Copy link
Contributor

When adding support for X11 forwarding, we should test with:

@russjones
Copy link
Contributor

@jdconti What version of MobaXterm are you using and what version of Windows?

@jdconti
Copy link

jdconti commented Oct 18, 2021

Windows 10 with MobaXterm 21.2.0.4642 at present; we're also using Xming 7.7.0.10 as a standalone X server. It's also worth mentioning Mac with XQuartz and RHEL 7/8 with native X servers. Let me know if you need any additional info, thanks!

@russjones russjones mentioned this issue Oct 26, 2021
14 tasks
@russjones
Copy link
Contributor

russjones commented Nov 3, 2021

@Joerger Teleport in proxy recording mode will forwarding x11-req from ssh to sshd. However, this only allows OpenSSH clients to talk to OpenSSH servers through Teleport.

Let's take the following approach to rolling out X11 support:

  • Add support for tsh -X. This will allow Teleport clients to talk to an OpenSSH servers through Teleport (in proxy recording mode).
  • Add support for X11 forwarding (handling x11-req) to Teleport servers (in regular mode). Then you will be able to support OpenSSH servers and clients with Teleport.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c-dt Internal Customer Reference c-ju Internal Customer Reference feature-request Used for new features in Teleport, improvements to current should be #enhancements
Projects
None yet
Development

Successfully merging a pull request may close this issue.

5 participants