access via X

[Piotr Pyda]

I have 11.11, how to limit access via X to server ?

[Robert-Jan Goossens_1]

Hi Piotr,

Check this doc.

Title: Several options to prevent login to CDE
Document ID: CDEKBRC00006846

http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000080093577

Regards,
Robert-Jan

[Piotr Pyda]

Changes did't help.
Still I can login to server, I use log in direct via REFLECION

[Peter Godron]

Piotr,
what are you trying to limit access to?
Only X sessions allowed to connect?

[Joel Girot · Accepted solution]

Hi Piotr,

To limit access by host, see /etc/dt/config/Xaccess file.
This file contains a list of host names which are allowed or denied XDMCP connection access to this machine.
example :
hpjg.gvr.com # grant service to this host
!* # denied service to all others remote displays

To limit access by user, see /etc/dt/config/Xstartup file and add limitation like this :
#only root can use DCE
case "$USER" in
root)
: # do nothing
;;
*)
exit 1
;;
esac
###############################

and add file /etc/dt/config/Xsession.d/0001.nologin :
#!/usr/bin/ksh

#only root can use DCE
case "$USER" in
root)
: # do nothing
;;
*)
/usr/dt/bin/dterror.ds \
'Login to CDE denied for this user\n' \
'nologin' \
'OK'
exit 1
;;
esac
###############################

Rgds, Joel.

[Piotr Pyda]

it's OK, Thanks for help

[Piotr Pyda]

.