centos7 免密登陆 问题跪求！

Question

问题:
设置免密登陆还是需要输入密码
环境：
centos7.6
尝试解决了以下问题还是无法实现免密登陆：
/root/root/.ssh/root/.ssh/authorized_keys文件权限问题
/etc/ssh/sshd_config文件配置问题
日志:
/var/log/secure的日志
Jun1319:01:42edcsshd[23062]:Authenticationrefused:badownershipormodesfordirectory/root
[[e-mail]]#ssh-vvvroot@edc
OpenSSH_7.4p1,OpenSSL1.0.2k-fips26Jan2017
debug1:Readingconfigurationdata/etc/ssh/ssh_config
debug1:/etc/ssh/ssh_configline49:Applyingoptionsfor*
debug2:resolving"edc"port22
debug2:ssh_connect_direct:needpriv0
debug1:Connectingtoedc[10.0.2.25]port22.
debug1:Connectionestablished.
debug1:permanently_set_uid:0/0
debug1:identityfile/root/.ssh/id_rsatype1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_rsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_dsatype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_dsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ecdsatype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ecdsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ed25519type-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ed25519-certtype-1
debug1:Enablingcompatibilitymodeforprotocol2.0
debug1:LocalversionstringSSH-2.0-OpenSSH_7.4
debug1:Remoteprotocolversion2.0,remotesoftwareversionOpenSSH_7.4
debug1:match:OpenSSH_7.4patOpenSSH*compat0x04000000
debug2:fd3settingO_NONBLOCK
debug1:Authenticatingtoedc:22as'root'
debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"
debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1
debug3:load_hostkeys:loaded1keysfromedc
debug3:order_hostkeyalgs:preferhostkeyalgs:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3:sendpacket:type20
debug1:SSH2_MSG_KEXINITsent
debug3:receivepacket:type20
debug1:SSH2_MSG_KEXINITreceived
debug2:localclientKEXINITproposal
debug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
debug2:hostkeyalgorithms:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[e-mail],[e-mail],[e-mail],ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc
debug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc
debug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:compressionctos:none,[e-mail],zlib
debug2:compressionstoc:none,[e-mail],zlib
debug2:languagesctos:
debug2:languagesstoc:
debug2:first_kex_follows0
debug2:reserved0
debug2:peerserverKEXINITproposal
debug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2:hostkeyalgorithms:ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc
debug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,cast128-cbc,3des-cbc
debug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:compressionctos:none,[e-mail]
debug2:compressionstoc:none,[e-mail]
debug2:languagesctos:
debug2:languagesstoc:
debug2:first_kex_follows0
debug2:reserved0
debug1:kex:algorithm:curve25519-sha256
debug1:kex:hostkeyalgorithm:ecdsa-sha2-nistp256
debug1:kex:server->clientcipher:[e-mail]:compression:none
debug1:kex:client->servercipher:[e-mail]:compression:none
debug1:kex:curve25519-sha256need=64dh_need=64
debug1:kex:curve25519-sha256need=64dh_need=64
debug3:sendpacket:type30
debug1:expectingSSH2_MSG_KEX_ECDH_REPLY
debug3:receivepacket:type31
debug1:Serverhostkey:ecdsa-sha2-nistp256SHA256:TSpKfnuXf9K8PhEx0GJFRIbrlFVzYimsQ44la5Cxq3s
debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"
debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1
debug3:load_hostkeys:loaded1keysfromedc
debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"
debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1
debug3:load_hostkeys:loaded1keysfrom10.0.2.25
debug1:Host'edc'isknownandmatchestheECDSAhostkey.
debug1:Foundkeyin/root/.ssh/known_hosts:1
debug3:sendpacket:type21
debug2:set_newkeys:mode1
debug1:rekeyafter134217728blocks
debug1:SSH2_MSG_NEWKEYSsent
debug1:expectingSSH2_MSG_NEWKEYS
debug3:receivepacket:type21
debug1:SSH2_MSG_NEWKEYSreceived
debug2:set_newkeys:mode0
debug1:rekeyafter134217728blocks
debug2:key:/root/.ssh/id_rsa(0x55c9dee5eab0)
debug2:key:/root/.ssh/id_dsa((nil))
debug2:key:/root/.ssh/id_ecdsa((nil))
debug2:key:/root/.ssh/id_ed25519((nil))
debug3:sendpacket:type5
debug3:receivepacket:type7
debug1:SSH2_MSG_EXT_INFOreceived
debug1:kex_input_ext_info:server-sig-algs=
debug3:receivepacket:type6
debug2:service_accept:ssh-userauth
debug1:SSH2_MSG_SERVICE_ACCEPTreceived
debug3:sendpacket:type50
debug3:receivepacket:type51
debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,password
debug3:startover,passedadifferentlistpublickey,gssapi-keyex,gssapi-with-mic,password
debug3:preferredgssapi-keyex,gssapi-with-mic,publickey,keyboard-interactive,password
debug3:authmethod_lookupgssapi-keyex
debug3:remainingpreferred:gssapi-with-mic,publickey,keyboard-interactive,password
debug3:authmethod_is_enabledgssapi-keyex
debug1:Nextauthenticationmethod:gssapi-keyex
debug1:NovalidKeyexchangecontext
debug2:wedidnotsendapacket,disablemethod
debug3:authmethod_lookupgssapi-with-mic
debug3:remainingpreferred:publickey,keyboard-interactive,password
debug3:authmethod_is_enabledgssapi-with-mic
debug1:Nextauthenticationmethod:gssapi-with-mic
debug1:UnspecifiedGSSfailure.Minorcodemayprovidemoreinformation
NoKerberoscredentialsavailable(defaultcache:KEYRING:persistent:0)
debug1:UnspecifiedGSSfailure.Minorcodemayprovidemoreinformation
NoKerberoscredentialsavailable(defaultcache:KEYRING:persistent:0)
debug2:wedidnotsendapacket,disablemethod
debug3:authmethod_lookuppublickey
debug3:remainingpreferred:keyboard-interactive,password
debug3:authmethod_is_enabledpublickey
debug1:Nextauthenticationmethod:publickey
debug1:OfferingRSApublickey:/root/.ssh/id_rsa
debug3:send_pubkey_test
debug3:sendpacket:type50
debug2:wesentapublickeypacket,waitforreply
debug3:receivepacket:type51
debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,password
debug1:Tryingprivatekey:/root/.ssh/id_dsa
debug3:nosuchidentity:/root/.ssh/id_dsa:Nosuchfileordirectory
debug1:Tryingprivatekey:/root/.ssh/id_ecdsa
debug3:nosuchidentity:/root/.ssh/id_ecdsa:Nosuchfileordirectory
debug1:Tryingprivatekey:/root/.ssh/id_ed25519
debug3:nosuchidentity:/root/.ssh/id_ed25519:Nosuchfileordirectory
debug2:wedidnotsendapacket,disablemethod
debug3:authmethod_lookuppassword
debug3:remainingpreferred:,password
debug3:authmethod_is_enabledpassword
debug1:Nextauthenticationmethod:password
root@edc'spassword:
debug3:sendpacket:type50
debug2:wesentapasswordpacket,waitforreply
eedpriv0
debug1:Connectingtoedc[10.0.2.25]port22.
debug1:Connectionestablished.
debug1:permanently_set_uid:0/0
debug1:identityfile/root/.ssh/id_rsatype1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_rsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_dsatype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_dsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ecdsatype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ecdsa-certtype-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ed25519type-1
debug1:key_load_public:Nosuchfileordirectory
debug1:identityfile/root/.ssh/id_ed25519-certtype-1
debug1:Enablingcompatibilitymodeforprotocol2.0
debug1:LocalversionstringSSH-2.0-OpenSSH_7.4
debug1:Remoteprotocolversion2.0,remotesoftwareversionOpenSSH_7.4
debug1:match:OpenSSH_7.4patOpenSSH*compat0x04000000
debug2:fd3settingO_NONBLOCK
debug1:Authenticatingtoedc:22as'root'
debug3:hostkeys_foreach:readingfile"/root/.ssh/known_hosts"
debug3:record_hostkey:foundkeytypeECDSAinfile/root/.ssh/known_hosts:1
debug3:load_hostkeys:loaded1keysfromedc
debug3:order_hostkeyalgs:preferhostkeyalgs:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521
debug3:sendpacket:type20
debug1:SSH2_MSG_KEXINITsent
debug3:receivepacket:type20
debug1:SSH2_MSG_KEXINITreceived
debug2:localclientKEXINITproposal
debug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c
debug2:hostkeyalgorithms:[e-mail],[e-mail],[e-mail],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[e-mail],[e-mail],[e-mail],ssh-ed25519,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss
debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc
debug2:ciphersstoc:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],[e-mail],aes128-cbc,aes192-cbc,aes256-cbc
debug2:MACsctos:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:MACsstoc:[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],[e-mail],hmac-sha2-256,hmac-sha2-512,hmac-sha1
debug2:compressionctos:none,[e-mail],zlib
debug2:compressionstoc:none,[e-mail],zlib
debug2:languagesctos:
debug2:languagesstoc:
debug2:first_kex_follows0
debug2:reserved0
debug2:peerserverKEXINITproposal
debug2:KEXalgorithms:curve25519-sha256,[e-mail],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1
debug2:hostkeyalgorithms:ssh-rsa,rsa-sha2-512,rsa-sha2-256,ecdsa-sha2-nistp256,ssh-ed25519
debug2:ciphersctos:[e-mail],aes128-ctr,aes192-ctr,aes256-ctr,[e-mail],aes256-gcm@opendebug3:receivepacket:type51
debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,password
Permissiondenied,pleasetryagain.
root@edc'spassword:
debug3:sendpacket:type50
debug2:wesentapasswordpacket,waitforreply
debug3:send_pubkey_test
debug3:sendpacket:type50
debug2:wesentapublickeypacket,waitforreply
debug3:receivepacket:type51
debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,password
debug1:Tryingprivatekey:/root/.ssh/id_dsa
debug3:nosuchidentity:/root/.ssh/id_dsa:Nosuchfileordirectory
debug1:Tryingprivatekey:/root/.ssh/id_ecdsa
debug3:nosuchidentity:/root/.ssh/id_ecdsa:Nosuchfileordirectory
debug1:Tryingprivatekey:/root/.ssh/id_ed25519
debug3:nosuchidentity:/root/.ssh/id_ed25519:Nosuchfileordirectory
debug2:wedidnotsendapacket,disablemethod
debug3:authmethod_lookuppassword
debug3:remainingpreferred:,password
debug3:authmethod_is_enabledpassword
debug1:Nextauthenticationmethod:passworddebug3:receivepacket:type51
debug1:Authenticationsthatcancontinue:publickey,gssapi-keyex,gssapi-with-mic,password
Permissiondenied,pleasetryagain.
各文件权限：
drwx------2rootroot80Jun1318:25.
drwxr-xrwx.22rootroot4096Jun1303:33..
-rw-------1rootroot1566Jun1318:25authorized_keys
-rwxrwxrwx1rootroot1675Jun1318:22id_rsa
-rwxrwxrwx1rootroot390Jun1318:22id_rsa.pub
-rwxrwxrwx1rootroot175Jun1303:33known_hosts
sshd_config文件配置：
#$OpenBSD:sshd_config,v1.802008/07/0202:24:18djmExp$
#Thisisthesshdserversystem-wideconfigurationfile.See
#sshd_config(5)formoreinformation.
#ThissshdwascompiledwithPATH=/usr/local/bin:/bin:/usr/bin
#Thestrategyusedforoptionsinthedefaultsshd_configshippedwith
#OpenSSHistospecifyoptionswiththeirdefaultvaluewhere
#possible,butleavethemcommented.Uncommentedoptionschangea
#defaultvalue.
#Port22
#AddressFamilyany
#ListenAddress0.0.0.0
#ListenAddress::
#Disablelegacy(protocolversion1)supportintheserverfornew
#installations.Infuturethedefaultwillchangetorequireexplicit
#activationofprotocol1
Protocol2
#HostKeyforprotocolversion1
#HostKey/etc/ssh/ssh_host_key
#HostKeysforprotocolversion2
#HostKey/etc/ssh/ssh_host_rsa_key
#HostKey/etc/ssh/ssh_host_dsa_key
#Lifetimeandsizeofephemeralversion1serverkey
#KeyRegenerationInterval1h
#ServerKeyBits1024
#Logging
#obsoletesQuietModeandFascistLogging
#SyslogFacilityAUTH
SyslogFacilityAUTHPRIV
LogLevelDEBUG3
#Authentication:
#LoginGraceTime2m
#PermitRootLoginyes
StrictModesno
#MaxAuthTries6
#MaxSessions10
RSAAuthenticationyes
PubkeyAuthenticationyes
AuthorizedKeysFile.ssh/authorized_keys
AuthorizedKeysCommandnone
AuthorizedKeysCommandRunAsnobody
#Forthistoworkyouwillalsoneedhostkeysin/etc/ssh/ssh_known_hosts
#RhostsRSAAuthenticationno
#similarforprotocolversion2
#HostbasedAuthenticationno
#Changetoyesifyoudon'ttrust~/.ssh/known_hostsfor
#RhostsRSAAuthenticationandHostbasedAuthentication
#IgnoreUserKnownHostsno
#Don'treadtheuser's~/.rhostsand~/.shostsfiles
#IgnoreRhostsyes
#Todisabletunneledcleartextpasswords,changetonohere!
#PasswordAuthenticationyes
#PermitEmptyPasswordsno
PasswordAuthenticationyes
#Changetonotodisables/keypasswords
#ChallengeResponseAuthenticationyes
ChallengeResponseAuthenticationno
#Kerberosoptions
#KerberosAuthenticationno
#KerberosOrLocalPasswdyes
#KerberosTicketCleanupyes
#KerberosGetAFSTokenno
#KerberosUseKuserokyes
#GSSAPIoptions
GSSAPIAuthenticationno
#GSSAPIAuthenticationyes
#GSSAPICleanupCredentialsyes
#GSSAPICleanupCredentialsyes
#GSSAPIStrictAcceptorCheckyes
#GSSAPIKeyExchangeno
#Setthisto'yes'toenablePAMauthentication,accountprocessing,
#andsessionprocessing.Ifthisisenabled,PAMauthenticationwill
#beallowedthroughtheChallengeResponseAuthenticationand
#PasswordAuthentication.DependingonyourPAMconfiguration,
#PAMauthenticationviaChallengeResponseAuthenticationmaybypass
#thesettingof"PermitRootLoginwithout-password".
#IfyoujustwantthePAMaccountandsessioncheckstorunwithout
#PAMauthentication,thenenablethisbutsetPasswordAuthentication
#andChallengeResponseAuthenticationto'no'.
#UsePAMno
UsePAMyes
#Acceptlocale-relatedenvironmentvariables
AcceptEnvLANGLC_CTYPELC_NUMERICLC_TIMELC_COLLATELC_MONETARYLC_MESSAGES
AcceptEnvLC_PAPERLC_NAMELC_ADDRESSLC_TELEPHONELC_MEASUREMENT
AcceptEnvLC_IDENTIFICATIONLC_ALLLANGUAGE
AcceptEnvXMODIFIERS
#AllowAgentForwardingyes
#AllowTcpForwardingyes
#GatewayPortsno
#X11Forwardingno
X11Forwardingyes
#X11DisplayOffset10
#X11UseLocalhostyes
#PrintMotdyes
#PrintLastLogyes
#TCPKeepAliveyes
#UseLoginno
#UsePrivilegeSeparationyes
#PermitUserEnvironmentno
#Compressiondelayed
#ClientAliveInterval0
#ClientAliveCountMax3
#ShowPatchLevelno
#UseDNSyes
#PidFile/var/run/sshd.pid
#MaxStartups10:30:100
#PermitTunnelno
#ChrootDirectorynone
#nodefaultbannerpath
#Bannernone
#overridedefaultofnosubsystems
Subsystemsftp/usr/libexec/openssh/sftp-server
#Exampleofoverridingsettingsonaper-userbasis
#MatchUseranoncvs
#X11Forwardingno
#AllowTcpForwardingno
#ForceCommandcvsserver
ssh_config配置：
#$OpenBSD:ssh_config,v1.252009/02/1701:28:32djmExp$
#Thisisthesshclientsystem-wideconfigurationfile.See
#ssh_config(5)formoreinformation.Thisfileprovidesdefaultsfor
#users,andthevaluescanbechangedinper-userconfigurationfiles
#oronthecommandline.
#Configurationdataisparsedasfollows:
#1.commandlineoptions
#2.user-specificfile
#3.system-widefile
#Anyconfigurationvalueisonlychangedthefirsttimeitisset.
#Thus,host-specificdefinitionsshouldbeatthebeginningofthe
#configurationfile,anddefaultsattheend.
#Site-widedefaultsforsomecommonlyusedoptions.Foracomprehensive
#listofavailableoptions,theirmeaningsanddefaults,pleaseseethe
#ssh_config(5)manpage.
#Host*
#ForwardAgentno
#ForwardX11no
#RhostsRSAAuthenticationno
#RSAAuthenticationyes
#PasswordAuthenticationyes
#HostbasedAuthenticationno
#GSSAPIAuthenticationno
#GSSAPIDelegateCredentialsno
#GSSAPIKeyExchangeno
#GSSAPITrustDNSno
#BatchModeno
#CheckHostIPyes
#AddressFamilyany
#ConnectTimeout0
#StrictHostKeyCheckingask
#IdentityFile~/.ssh/identity
#IdentityFile~/.ssh/id_rsa
#IdentityFile~/.ssh/id_dsa
#Port22
#Protocol2,1
#Cipher3des
#Ciphersaes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,aes128-cbc,3des-cbc
#MACshmac-md5,hmac-sha1,[e-mail],hmac-ripemd160
#EscapeChar~
#Tunnelno
#TunnelDeviceany:any
#PermitLocalCommandno
#VisualHostKeyno
Host*
GSSAPIAuthenticationyes
#IfthisoptionissettoyesthenremoteX11clientswillhavefullaccess
#totheoriginalX11display.AsvirtuallynoX11clientsupportstheuntrusted
#modecorrectlywesetthistoyes.
ForwardX11Trustedyes
#Sendlocale-relatedenvironmentvariables
SendEnvLANGLC_CTYPELC_NUMERICLC_TIMELC_COLLATELC_MONETARYLC_MESSAGES
SendEnvLC_PAPERLC_NAMELC_ADDRESSLC_TELEPHONELC_MEASUREMENT
SendEnvLC_IDENTIFICATIONLC_ALLLANGUAGE
SendEnvXMODIFIERS