Remote Login with CDE

[Helmer van Rhijn]

How can get Remote Login with CDE get to work.

# X -query doesn't help.

MIT-MAGIC-COOKIE errors as result.

Even after modifying Dtlogin*authorize: in Xconfig doesn't do the trick

Previous I work with SUN-CDE. With SUN-CDE the 'Remote Login'-option in the Option menu in the dtgreet screen is available.
With HP I can't get get the option available, even after modifying the dt resources file ?

I assume this problem is related to my first.

Can anyone help me ?

regards,
Helmer

[Alex Glennie]

Could you detail the H/W involved here it would help .

Then explain a little wrt how you are trying to remote connect to CDE from another hpux systems
command line via X -query, what errors do you see :

NB if you received a MIT MAGIC cookie error it maybe comming from the local Xserver not the remote one ! Also remember Xconfig can exist in both /etc/dt and /usr/dt in that order of precedence and you'd need to restart X for the resource change to take effect.

[Dietmar Konermann]

Hi!

Try:

# X -ac -query

Best regards...
Dietmar.

[Helmer van Rhijn]

Thanks for input .

command '-ac' does help.

I attached my 'Xconfig' and an errors-file.
By the way the errors go to stderr, not to /var/dt/Xerrors .

When I do a 'X -query' from another host to mine, I get a black screen with waiting (in progress) mouse pointer.
So it does not respond to XDMCP, right ?

Thanks in advance,
Helmer

[Alex Glennie]

IMHO if you get a black screen &
mouse pointer XDMCP has worked !


try the following on the hpux system running CDE / dtlogin :
set up xfs aka font server

The font server needs to be configured to include the CDE
fonts in its catalog

EDIT: /etc/X11/fs/config

Append ",/usr/dt/conf


ig/xfonts/C" to the end of the
"catalogue = ..." line

EDIT: /etc/rc.config.d/xfs

Set the following variable: "RUN_X_FONT_SERVER=1"

EXECUTE: /sbin/init.d/xfs start
If the font-server is already running, kill it and
restart it.

2 - Force CDE to add the font-server to the X-Server font-path
by editing the Xsetup file. (NOTE: This steps REQUIRES
the IP address of the CDE session server. You can get
this information by running: nslookup `hostname`.)

COPY: /usr/dt/config/Xsetup to /etc/dt/config/Xsetup
EDIT: /etc/dt/config/Xsetup

Add the following line to /etc/dt/config/Xsetup replacing
"IPADDRESS" with the IP address of the server as returned
from "nslookup `hostname`":

$XDIR/xset fp+ tcp/IPADDRESS:7000 1>/dev/null






then add "-fp tcp/hpbrc104:7000" to your X -query -ac line

where hpbrc104 = the hpux system with CDE installed and xfs running aka font server :

ps if that don't fix it PLEASE answer my earlier questions and also note your attached Xconfig does not have X authentication disabled !

[Helmer van Rhijn]

ls,

Hereby I send some required information.

The 'bsmmf01' stands as pilot for Citrix MetaFrame server, and should be x-server for other hosts.
From here we try to execute the 'X -query ..'-command.

Without succes sofar.

I made a typing error earlier, sorry.
The '-ac' option did NOT help.

Helmer

[Dietmar Konermann]

Hi, Helmer!

First we should clarify, what you mean when you say Xserver.

For me this is a piece of software, handling the graphics/keybord/mouse of a workstation or PC (or similar). It acts as server for Xclients, programs that use graphics, and that are diplayed on the server's monitor.

On what machine do you type X -query? Is it an HP workstation?

Best regards...
Dietmar.

[Alex Glennie]

yes the problem description is still unclear !!!!

As to the system your running X please run

ps -ef | grep dtlogin ?

[Helmer van Rhijn]

On all the systems host from the info-doc
I see something like

root 7058 6663 0 10:08:21 ? 0:00 /usr/dt/bin/dtlogin

Initially I started with trying to get CDE login screen from a remote host. But I found no 'Remote Login'-choise available in the option menu (in the login-screen) .
From what I found on internet and from my experienced with SUN-CDE the 'X -query ..'-command is executed at that time.

We use the ica-protocol because of its narrow bandwith and better performance, in stead of X.
Therefor we want Citrix to display a CDE loginscreen to users .

hosts
bsmmf01 D210 Citrix-srvr
nmnsrv K460
nmnwp01 B132L

When I do an X-query from bsmmf01 to nmnwp01 (both HP's) I don't receive response or discribed error like above.
HP to SUN : no response (errors)
SUN to SUN : No problem
SUN to HP : No response

So I believe there is something in the installation or configuration that limits my CDE and/or X-configuration.

[Alex Glennie]

QU: bsmmf01 your D-class citrix server ...does it have an internal graphics card : use /opt/graphics/common/bin/graphinfo or sam or ioscan to check ....

[Helmer van Rhijn]

Apparently it does not have a local graphics cart.
dtlogin IS running.

[Kelli Ward]

Hi Helmer,
This works for me.

On my server without graphics I type /usr/bin/X11/xhost + (or just xhost +)

Then from a command line log in on my workstation:

X -query -terminate

Maybe it'll help.

Good luck,
Kel

(Note: My server running 11i, workstation 11.00)

[Alex Glennie]

if it doesn't have a local graphics card I can't see how you will get X to start locally since it needs a physical device .....

[Helmer van Rhijn]

On the B132L I can get a CDE-login from the K460.
But only once in a specific time-period.
After one time, I receive AUDIT:MIT-COOKIE error messages and no login-screen.
That happen't to my last week and again this morgen.
The same with a X-query to a SUN station (from the B132). And again after one time, again AUDIT-MIT-COOKIE errors

Furthermore ...
The K460 hasn't got a graphic card either.
The absence of a LOCAL graphic cart shouldn't be the reason of NOT being able to generate a REMOTE loginscreen.
As I said dtlogin is already running.
So, if a graphic cart is needed dtlogin should not be running.

[Alex Glennie]

Right finally getting somewhere.

At least I now know what h/w is involved and what you are doing.
Excuse my last post your description of "X-querying from bsmmf01 to nmn
wp01" suggested to me you were running X -query from the command line of the server, I suspect now you are actually doing this on the B-class workstation.
So basically you want to use the B-class as an Xterminal to connect to either your K460 or 210 right ?

If this is the case ->

you need the following :

a) dtlogin running on the servers.

b) disable CDE using the Xserver on the workstation :
cp /usr/dt/config/Xservers ->
/etc/dt/config/Xservers

put a # in front of the line :
* local local@cosole /usr/bin/X11/X :0

kill the current Xserver/dtlogin processes or drop down a run-level and then back up ... CDE should not now automatically start on the B-classes display.

c) run X -query on cmd line of workstation ? however if it were me I'd take note of my earlier reference to setting up xfs and also add the -fp option

ps "-ac" I beleive actually disables auditting Xauthority (thanks to Dietmar K for that info)

d) if you still receive MIT Cookie errors these are likely due to .Xauthority issues .. try disabling this on both the workstation and server involved -> here's how to do it->

cd /usr/dt/config/
cp Xconfig /etc/dt/config/Xconfig
vi /etc/dt/config/Xconfig :

remove the # from
# Dtlogin*authorize: False
wq!

repeat for other system : then on both run /sbin/init 2 followed by /sbin/init 3.

try running X on cmd line of workstation again ... result ?

if that doesn't fix things can you comment on the O/S and patch levels of CDE on the 3 HP systems

[Helmer van Rhijn]

Maybe I'll regret this, but I think in fact you're wright in your believe.
We're trying to use the bsmmf01 as, say 'X-forwarding host', between a remote host (of the bsmmf01) to a client (could be any other also remote host).

The bsmmf01 is citrix server, and has dtlogin already running, but has no graphic cart itself.
But we don't want to use it's own local display (the system is in the computerroom).

This I'm trying (experimenting) on several HP's, servers AND workstations .
What on SUN architecture SEEMS easy to do (which not ment as critic or preference), on it's commonly used installation (configuration), seems diffecult till now, because maybe, of the differences between the commonly used configuration of a HP-system, or just the HP implementation of CDE.
I worked with CDE (on SUN) on accausions, but I don't have expert knowledge (propritry) .
Documentation is rather hard to find.

So, to be clear, I haven't been succesfull in getting ANY remote login screen ON or FROM the involved HP-systems.
Maybe I'm missing something in the HP-configuration, but I've got the feeling it's not the local graphic cart of the X-forwarding host.

Of course I'm glad with all the input.
I will try out your recommendations.

Am I, are we, overlooking something ?

Thanks.

[Alex Glennie]

I have seen suns extra functionality but CDE is vendor specific & HP's implementation does not : my suggestions should work but there maybe something else at work here .... good luck !

[Helmer van Rhijn]

Finally, some possetive results .
From the B132 to the K460 and the D210 I can get a CDE loginscreen, sometimes even after one try.
If I don't use '-once' it takes from 1 to 3 times of doing the query befor I get the screen.
Probable a timing/time-out issue ?

And when I use the '-fp' parameter, I receive ...

Fatal server error:
could not open default font 'fixed'


Still, when I do a query to a SUN ...
/usr/bin/X11/X -query lwp207 -ac -once
X connection to :0.0 broken (explicit kill or server shutdown)

Then my question remains ...
How (if possible with HP-CDE) do get my 'Remote Login' choise in the loginscreen optionmenu ?

[Alex Glennie]

The answer to your very last question is : you can't its not part of HP's CDE functionality and not customisable.

As to timing issues see the Xconfig file resource :

# #########################################################################
# To specify how long the Login Manager waits to connect to an X-server.
#
# Dtlogin*openTimeout:

I beleive the default is 30 secs ..... it may help.

I'd not use -fp option then ;-)

As to the problem with the solaris system ... it looks like network related but I'm not sure at this stage can you nslookup both systems ip & hostnames , are they both on the same subnet etc etc ?

ps anyone else want to suggest anything my brain hurts ;-)

[Dietmar Konermann]

BTW, do you know the -indirect option? This way you receive a chooser from the dtlogin which allows you to select from a list of XDMCP-reachable hosts. Maybe this compensates the missing remote login function a little bit?

Best regards...
Dietmar.