topic Re: Restrict X remotely in Operating System - HP-UX

Restrict X remotely

Fredric Vådegård — Thu, 10 Apr 2003 13:43:10 GMT

Hi,

I would like to restrict the X service (CDE etc.) to only a couple of IP-addresses. Can I set up this in the /etc/dt/config/Xsetup or Xservers config file?

//Fredric

Re: Restrict X remotely

Alex Glennie — Thu, 10 Apr 2003 13:45:59 GMT

If it were me I'd cp /usr/dt/config/Xaccess -> /etc/dt/config/Xaccess and edit accordingly see the file for syntax .....

Re: Restrict X remotely

Zafar A. Mohammed_1 — Thu, 10 Apr 2003 13:53:41 GMT

check & edit /usr/dt/config/Xaccess file

Thanks
Zafar

Re: Restrict X remotely

Wodisch — Thu, 10 Apr 2003 23:45:48 GMT

Hi Fredric,

you could use "IPFilter/9000" to restrict ports 6000 (X) and 7000 (X Font Server).

FWIW,
Wodisch

Re: Restrict X remotely

Fredric Vådegård — Fri, 11 Apr 2003 11:05:14 GMT

Could someone please give me an exemple how to configure the Xaccess file?

I want to restrict the access to a couple of hosts, doesn??t matter if it??s the hostname or the IP-address.

I have tested to configure, but it doesn??t work. I did comment the line with CHOOSER BROADCAST and removed the comment for the %hostlist, but still doesn??t work. I also tried differnt ways of adding hosts to the hostlist and deny hosts at the end of the file (ENTRY FORMAT).

//Fredric

Re: Restrict X remotely

Robert-Jan Goossens — Fri, 11 Apr 2003 11:14:40 GMT

Hi Fredric,

take a look at this document,

http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000063236640

Hope it helps,

Robert-Jan.

Re: Restrict X remotely

Stephen Burkwood — Fri, 11 Apr 2003 11:20:00 GMT

Hi Fredric,

Presuming you want to control "direct" xdmcp clients, i.e. those that initiate the comnnection direct to the machine, then all you need to place in the /etc/dt/config/Xaccess file is the hostname (presuming you can reverse lookup the IP from the name) or IP of the chosen client. Place each entry on its own line in the file with nothing else after it e.g.

hostA
hostB
10.0.0.1

etc...

Then run "/usr/dt/bin/dtconfig -reset" to make the changes take effect. The Xaccess file is only read on startup and whenever the above is run.

Regards,
Stephen

Re: Restrict X remotely

Fredric Vådegård — Fri, 11 Apr 2003 13:00:11 GMT

Hi,

thanks for you answears. Case solved!