dtlogin and logical ip assignment wackiness

[Kent Chow]

OS: HP-UX 11, Dec. 2001
ARCH: A550 (2 heads), 2Gb RAM

After I assign a logical ip to lan0 interface (i.e. lan0:1), I can no longer log in via DCE (the login screen just re-appears after 5 or so seconds), the 'Options'->'Command Line Login' of DCE is greyed out, and the following line repeatedly appears in /var/dt/Xerrors (with different port numbers):

Auth name: MIT-MAGIC-COOKIE-1 ID: -1
AUDIT: Thu Mar 7 15:05:56 2002: 1028 X: client 2 rejected from IP 172.18.1.3 port 49246


The IP of lan0 is 172.18.1.3, lan0:1 is 172.18.1.253. The netmasks for both are 255.255.255.0. Duh?

[Ceesjan van Hattum]

HI
DCE-logins use data as defined in:
/etc/rc.config.d/dce
/etc/opt/dce/dce_com_env
/etc/opt/dce/dce_config_env

In one of these files, you can set or modify RPC_SUPPORTED_NETADDRS=ip:
As you see, RPC_SUPPORTED_NETADDRS can be more than one, but you have to define it yourself.
If you want to set the RPC communication by netwerk interface, use RPC_UNSUPPORTED_NETIFS
,and if you wanna do it all, you can use RPC_RESTRICTED_PORTS as well.
Good luck!

[K.Vijayaragavan.]

Hi,

I thinsk you are facing problem of not able to login using CDE.

Problem could be because of partial updation of new ip address in some files to which X windows relies.

So Just issue the command.
"set_parms initial" and reassign the IP addresses onces again.

Check the permission of the file "/etc/hosts" and it should have read permission granted to owner,group and others.

-K.Vijay

[Steven Sim Kok Leong]

Hi,

Login to command-line login, then run the following infamous command:

# /usr/contrib/bin/X11/dr_dt

It gives very comprehensive diagnostic and solution.

Hope this helps. Regards.

Steven Sim Kok Leong

[Alex Glennie · Accepted solution]

This sounds like a known issue : if it is
then the problem is fixed in the current CDE patch - PHSS_25787 and you must have an older patch evel than PHSS_20176 as that's where the problem was fixed

the following workaround *should* work at least until the patch is applied.

Extract the cookie that has been added for the Unix socket
(hostname/unix:0), and add the cookie back as hostname:0.

1. Create the file /etc/dt/config/Xsession.d/0000.xauth and add the following
lines:#!/usr/bin/ksh# HP-UX 11.0 temporary fix for multiple LAN interfaces
# to guarantee that MIT-MAGIC-COOKIE is added to Xauthority.# for hostname:0
# if [ "$DISPLAY" = "$(hostname):0" ];
then xauth add "$(hostname):0" . $(xauth l "$(hostname)/unix:0" | awk '{print $3}') fi
2. Change the permissions to be executable by all users
'chmod 755 /etc/dt/config/Xsession.d/0000..xauth'

[Steve Steel]

Hi

Question here is do you want the magic cookies.

A workaround is
vi /etc/dt/config/Xconfig
(Copy from /usr/dt/config if not found)

Uncomment this line and remove leading blanks.

Dtlogin*authorize: False


try again or restart cde

Steve Steel

[Kent Chow]

Thanks to all who replied. Yes, it was a CDE patch issue.