From owner-freebsd-questions  Fri Sep 13 16:15:20 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id QAA25244
          for questions-outgoing; Fri, 13 Sep 1996 16:15:20 -0700 (PDT)
Received: from ghost.mep.ruhr-uni-bochum.de (ghost.mep.ruhr-uni-bochum.de [134.147.6.16])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id QAA25238
          for <questions@freebsd.org>; Fri, 13 Sep 1996 16:15:13 -0700 (PDT)
Received: (from roberte@localhost) by ghost.mep.ruhr-uni-bochum.de (8.7.5/8.7.3) id BAA02614; Sat, 14 Sep 1996 01:14:49 +0200 (MET DST)
From: Robert Eckardt <roberte@mep.ruhr-uni-bochum.de>
Message-Id: <199609132314.BAA02614@ghost.mep.ruhr-uni-bochum.de>
Subject: Re: 'Invalid MIT-MAGIC-COOKIE-1 key' on 2.1.5
In-Reply-To: <3239B7FE.B3B@Colorado.EDU> from Mark O'Lear at "13. Sep. 96 13:34:54"
To: Mark.Olear@Colorado.EDU (Mark O'Lear)
Date: Sat, 14 Sep 1996 01:14:49 +0200 (MET DST)
Cc: roberte@mep.ruhr-uni-bochum.de, questions@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL25 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> Robert Eckardt wrote:
> > Since I upgraded (complete new install) my machine beta to 2.1.5-R
> > MIT-MAGIC-COOKIE-1 doesn't work any longer.
[...]
> I bet you aren't running xdm.  If you run xdm, it sets up the

Yes and no :-)
I don't run xdm on beta (yet).
-- I was just too naive to expect that the xauth trick would work.

However, I _do_ run it on gluon and (right now at home) on
ghost (2.1.5-R, but X11 still from 2.1.0-R).
The .Xauthority file is created nicely everytime I log in.

As generated by xdm:
xauth> list
ghost/unix:0  MIT-MAGIC-COOKIE-1  4c1d794b5d247938064c3c3907404c4b
ghost:0  MIT-MAGIC-COOKIE-1  5b18250d4f786b2752505a761211603c
ghost:0  MIT-MAGIC-COOKIE-1  5b18250d4f786b2752505a761211603c

Nevertheless:
22:40 gluon: /gluon/roberte/tarit 0% xhost
Xlib: connection to "ghost.mep.ruhr-uni-bochum.de:0.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key
xhost:  unable to open display "ghost.mep.ruhr-uni-bochum.de:0.0"

And, more importantly:
23:41 ghost: /home/re 0% setenv DISPLAY :0.0; xhost
access control enabled, only authorized clients can connect
23:41 ghost: /home/re 0% setenv DISPLAY ghost:0; xhost
Xlib: connection to "ghost:0.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key
xhost:  unable to open display "ghost:0"
23:41 ghost: /home/re 1% setenv DISPLAY ghost.mep.ruhr-uni-bochum.de:0; xhost
Xlib: connection to "ghost.mep.ruhr-uni-bochum.de:0.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key
xhost:  unable to open display "ghost.mep.ruhr-uni-bochum.de:0"
23:42 ghost: /home/re 0% setenv DISPLAY ghost/unix:0
23:42 ghost: /home/re 0% xhost
access control enabled, only authorized clients can connect

But, Surprise:

xauth> add ghost:0 MIT-MAGIC-COOKIE-1 4c1d794b5d247938064c3c3907404c4b
xauth> list
ghost/unix:0  MIT-MAGIC-COOKIE-1  4c1d794b5d247938064c3c3907404c4b
ghost:0  MIT-MAGIC-COOKIE-1  4c1d794b5d247938064c3c3907404c4b
ghost:0  MIT-MAGIC-COOKIE-1  5b18250d4f786b2752505a761211603c

23:38 ghost: /home/re 0% setenv DISPLAY ghost:0; xhost
access control enabled, only authorized clients can connect


Suddenly 'DISPLAY ghost:0' and 'ghost.mep.ruhr-uni-bochum.de:0' works !

Not only on ghost, but also on gluon and beta.

It just found that only the 'ghost/unix:0' line is really new.
Thus, obviously it is no longer possible just to copy .Xauthority from
one machine to the other or simply to NFS-share the home directory.
One needs to add explicitly the 'ghost:0' entry.

Is this a bug or a feature (in some lib ?) ?
Can someone verify this please ?
(xdm(of 2.1.0 or 2.1.5) on 2.1.5 (non-DES), DISPLAY to <hostname>:0,
e.g. xhost as test client from host <hostname> and preferrably some other,
check list of entries in .Xauthority)

> xauth authorization automatically for you.  If you don't,
> you will need to tell the X server what authentication
> to use (I believe that xhost is used by default).  I have
[..] 
> Hope this helps.
It did, indeed. Thanx.

> Mark O'Lear             \    e-mail: Mark.Olear@Colorado.EDU
> University of Colorado   \   phone:  (303) 492-3798
> Telecomm. Svcs. (CB 313)  \  fax:    (303) 492-5105
> Boulder, CO  80309         \

Ciao,
Robert