X11 connection rejected - wrong authentication

[ajcamp]

Can anyone help me fix X11 Xauth authentication? I get the error message "X11 connection rejected because of wrong authentication".

It occurs when I switch from root user to any other non-root account.

# ssh -X {hostname}
{hostname}# xclock (works)
{hostname}# su - user
{hostname}$ xclock
X11 connection rejected because of wrong authentication.

This is normally the case when switching from a root X connection to a non-root user. There are Xauth methods to allow the authentication to pass from root to a non-root user, but they are all failing:

I have included in /etc/pam.d/su
session optional /lib/security/$ISA/pam_xauth.so
Added "X11Forwarding yes" to /etc/ssh/sshd_config

I Created ~{user}/.ssh/config file.
Host *
ForwardX11 no

Tried Xauth add

??????????????
Thanks for any help.
Andrew

[cereal]

Try to change "ForwardX11 no" to YES, in your ssh server.

[ajcamp]

Ya, I had already done that in /etc/ssh/sshd_config:

#X11Forwarding no
X11Forwarding yes

Any other ideas?
Thanks

Andrew