From owner-freebsd-hackers Thu Apr 13 13:23:37 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from venera.isi.edu (venera.isi.edu [128.9.176.32]) by hub.freebsd.org (Postfix) with ESMTP id E65C337BDB7 for ; Thu, 13 Apr 2000 13:23:33 -0700 (PDT) (envelope-from faber@ISI.EDU) Received: from ted.isi.edu (ted.isi.edu [128.9.160.104]) by venera.isi.edu (8.8.7/8.8.6) with ESMTP id NAA27410; Thu, 13 Apr 2000 13:22:58 -0700 (PDT) Received: from ted.isi.edu (localhost [127.0.0.1]) by ted.isi.edu (8.9.3/8.9.3) with ESMTP id NAA28889; Thu, 13 Apr 2000 13:23:07 -0700 (PDT) (envelope-from faber@ted.isi.edu) Message-Id: <200004132023.NAA28889@ted.isi.edu> X-Mailer: exmh version 2.1.1 10/15/1999 To: Robert Withrow Cc: hackers@freebsd.org, witr@rwwa.com Subject: Re: Authorization broken in 4.0 REL/XDM? In-Reply-To: Your message of "Thu, 13 Apr 2000 14:40:25 EDT." <200004131840.OAA35578@tuva.engeast.baynetworks.com> X-Url: http://www.isi.edu/~faber Date: Thu, 13 Apr 2000 13:23:07 -0700 From: Ted Faber Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Content-Type: text/plain; charset=us-ascii Robert Withrow wrote: >I asked about this in questions... > >It appears that authorization is broken in XDM in 4.0 REL. At least >if I start XDM using the default everything, just the way I have >for the last several releases, all attempts to log into the server >fail with authentication rejections. > >The only suggestion on questions was to turn off authorization on >the :0 display, which doesn't seem safe. I just had this one upgrading to 4.0-stable. Edit /usr/X11R6/lib/X11/xdm/xdm-config and add: DisplayManager._0.authName: MIT-MAGIC_COOKIE-1 (If you use more than DISPLAY :0 add lines for them, too...) xdm seems to have been compiled to use both MIT-MAGIC_COOKIE-1 and XDM-AUTHORIZATION-1 authorization schemes, although the other parameters in the default configuration don't seem to support XDM-AUTHORIZATION-1. This results in the spurious failures. It took me an hour to figure this out today, and I'll be delighted if it solves your problem. :-) - ---------------------------------------------------------------------- Ted Faber faber@isi.edu USC/ISI Computer Scientist http://www.isi.edu/~faber (310) 448-9190 PGP Keys: http://www.isi.edu/~faber/pubkeys.asc -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.0i for non-commercial use Charset: noconv iQA/AwUBOPYsq2lM93/mX/l7EQKNPwCgxKwJbn+6xtoEml6hoz41zImuGfEAniTS 7/4LPAc2/DimmHp0TQBLiSGd =lF09 -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message