Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Apr 2000 13:23:07 -0700
From:      Ted Faber <faber@ISI.EDU>
To:        Robert Withrow <bwithrow@nortelnetworks.com>
Cc:        hackers@freebsd.org, witr@rwwa.com
Subject:   Re: Authorization broken in 4.0 REL/XDM? 
Message-ID:  <200004132023.NAA28889@ted.isi.edu>
In-Reply-To: Your message of "Thu, 13 Apr 2000 14:40:25 EDT." <200004131840.OAA35578@tuva.engeast.baynetworks.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Content-Type: text/plain; charset=us-ascii

Robert Withrow wrote:
>I asked about this in questions...
>
>It appears that authorization is broken in XDM in 4.0 REL.  At least
>if I start XDM using the default everything, just the way I have
>for the last several releases, all attempts to log into the server
>fail with authentication rejections.
>
>The only suggestion on questions was to turn off authorization on
>the :0 display, which doesn't seem safe.

I just had this one upgrading to 4.0-stable.  Edit
/usr/X11R6/lib/X11/xdm/xdm-config and add:

DisplayManager._0.authName: MIT-MAGIC_COOKIE-1

(If you use more than DISPLAY :0 add lines for them, too...)

xdm seems to have been compiled to use both MIT-MAGIC_COOKIE-1 and
XDM-AUTHORIZATION-1 authorization schemes, although the other
parameters in the default configuration don't seem to support
XDM-AUTHORIZATION-1.  This results in the spurious failures.  It took
me an hour to figure this out today, and I'll be delighted if it
solves your problem. :-)

- ----------------------------------------------------------------------
Ted Faber                                                faber@isi.edu
USC/ISI Computer Scientist                   http://www.isi.edu/~faber
(310) 448-9190         PGP Keys: http://www.isi.edu/~faber/pubkeys.asc



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Charset: noconv

iQA/AwUBOPYsq2lM93/mX/l7EQKNPwCgxKwJbn+6xtoEml6hoz41zImuGfEAniTS
7/4LPAc2/DimmHp0TQBLiSGd
=lF09
-----END PGP SIGNATURE-----



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200004132023.NAA28889>