Field note · graphical workloads
An X11 route has dependencies at both ends.
SecureCRT can request X11 forwarding over SSH2, but it does not itself provide the local X server. The SSH server must also permit forwarding.
Prerequisite ledger
| Node | Responsibility | Failure evidence |
|---|
| Local workstation | Compatible X server running | Display unavailable locally |
| SecureCRT session | X11 forwarding requested | Trace output shows request status |
| SSH server | Forwarding allowed | Server policy rejects request |
| User context | Valid X authority | Application cannot authenticate |
Pilot path
- Confirm the operational need and data sensitivity.
- Validate the local display service separately.
- Test a simple application under the original user context.
- Record server-side and client-side diagnostics for support escalation.