topic Re: Xaccess problems in Operating System - HP-UX

Xaccess problems

Steve Coates — Fri, 01 Aug 2003 12:54:58 GMT

I have been trying to get Xaccess to control who can connect to the Xserver. No mater what I out in the file the system continues to allow everyone on to connect.

As a test in the Xaccess file I have:
!dt7d50cc.ode.state.oh.us

I have restarted dtlogin (/sbin/init.d/dtlogin.rc stop/start). The system is still allowed to connect.

I did a search here and based on past posts this seems right.

Any suggestions?

Steve

Re: Xaccess problems

Steven E. Protter — Fri, 01 Aug 2003 12:58:10 GMT

Your syntax is correct.

It is however possible that the state of Ohio has multiple IP addresses and purposeful discrepencies in its DNS server.

do a dig or nslookup and do it by IP address.

Also, check /var/adm/syslog/syslog.log during your login test so hou can get all of the IP addresses.

SEP

Re: Xaccess problems

Steve Coates — Fri, 01 Aug 2003 13:09:25 GMT

No the DNS is fine. We run our own and everything is as expected.

I tried a Xaccess file with nothing in it , which with how I understaqnd it should prevent any connections. It still allows me to connect even configured that way.

Steve

Re: Xaccess problems

Tyler Easterling — Fri, 01 Aug 2003 14:18:06 GMT

Hi Steve,

Have you updated Xconfig to point to the new access file?

cp /usr/dt/config/Xconfig /etc/dt/config/Xconfig

In /etc/dt/config/Xconfig
Replace
Dtlogin.accessFile: Xaccess
With
Dtlogin.accessFile: /etc/dt/config/Xaccess

Now make any configuration changes you would like in /etc/dt/config/Xaccess file and then run:
/sbin/init.d/dtlogin.rc reset

Tyler

Re: Xaccess problems

Steve Coates — Fri, 01 Aug 2003 14:52:12 GMT

Yes I did change it to point at the /etc/dt/config/Xaccess but by default it looks there first and then at /usr/dt/config.

I did start and stop dtlogin.

From everything I have looked at it seems it never even looks at the Xaccess file.

Steve

Re: Xaccess problems

Tyler Easterling — Fri, 01 Aug 2003 20:01:25 GMT

And by "connect" you mean the X server is still accepting XDMCP connections? Does the server still accept connections after running "/sbin/init.d/dtlogin.rc stop"?

Bastille does something very similar to disable XDMCP connections from remote hosts, so if it's not working I'd like to know.

Tyler

Re: Xaccess problems

Alex Glennie — Mon, 04 Aug 2003 06:34:48 GMT

Steve,

Try cp /usr/dt/config/Xaccess ->

/etc/dt/config/Xaccess : vi ->

!dt7d50cc.ode.state.oh.us
*

(in that order as it's important)

exit CDE

/usr/dt/bin/dtconfig -reset ... or preferably
/sbin/init 2 followed by init 3

result ?