Sudo and ssh X11 fowarding
 

We have a bunch of application administrators that use a certain Application USERID to administer their application. We are trying to push them to log in directly as their personal ID and then su over to the application ID. They need to run some GUI tools in order to administer their application and the tools need to run as the application ID. I have tried implementing this in sudo but it did not work.

Has anyone had any luck implementing X11 fowarding through sudo?

Thank you in advance for your help.

Sure.

I guess I don't see what the issue is. You ssh in with your personal ID, then sudo -u appUserID to invoke whatever you need to run. I not only do it personally, I have shell scripts that do it.

Or, they can log in this way:

ssh -Y -f appUserID@server xterm

and get logged in directly with the appuserid.