XDM connections

[Nitsulenko Sergey]

Hello!
HP-UX 11.0.
How to prohibit all XDM connections except several (concretely specified)?
Thank's.

[Lior Mishkovsky]

Hi,

I guess you want to limit X connections to a specific server:

1. Use sam to configure the `dtspc` process :
sam->Networking and Communications->System Access->Internet Services

Please note that there is a "System Permission" coloumn that you can modify according your network configuration.

2. Good but not necessary - limit the client XDMCP to a specified server and not broadcast...

Lior./

[Steve Steel]

Hi

You are using CDE I guess

Then

/etc/dt/config/Xaccess

If not there copy from /usr/dt/config

/usr/dt/config >pg Xaccess
######################################################################
#
# Xaccess
# Common Desktop Environment
#
# (c) Copyright 1993, 1994 Hewlett-Packard Company
# (c) Copyright 1993, 1994 International Business Machines Corp.
# (c) Copyright 1993, 1994 Sun Microsystems, Inc.
# (c) Copyright 1993, 1994 Novell, Inc.
#
# ************** DO NOT EDIT THIS FILE **************
#
# /usr/dt/config/Xaccess is a factory-default file and will
# be unconditionally overwritten upon subsequent installation.
# Before making changes to the file, copy it to the configuration
# directory, /etc/dt/config. You must also update the accessFile
# resource in /etc/dt/config/Xconfig.
#
# $Revision: 1.5 $
#
######################################################################
#
# This file contains a list of host names which are allowed or
# denied XDMCP connection access to this machine. When a remote
# display (typically an X-termimal) requests login service, Dtlogin
# will consult this file to determine if service should be granted
# or denied.
#
# # Access control file for XDMCP connections
#
# To control Direct and Broadcast access:



Steve Steel

[Nicolas Portais]

Hi,

You can specify in the /etc/dt/config/Xaccess (make a copy from /usr/dt/config) file , the hosts which are allowed (or not) XDMCP connection access.

Regards,
Nicolas

[Nitsulenko Sergey]

In /etc/dt/config/Xaccess :
......
!*

and Xmanager or Reflection connect successfully.
:(

[Nitsulenko Sergey]

In /var/adm/inetd.sec :
......
dtspc deny 192.168
dtspc allow myhost

and any others can connect by XDM Indirect
:(

[Zeev Schultz]

I don't think dtspcd can stop even a cde login
/ connection.From
http://docs.hp.com/hpux/onlinedocs/B1171-90162/B1171-90162.html
------------
The desktop subprocess control (SPC) service provides client/server command execution.

The desktop subprocess control daemon (dtspcd) is used by the desktop to launch remote applications. It is an inet daemon that accepts requests from remote clients to execute commands.

------------
So its definetelly Xaccess file that dtlogin
is checking before establishing connection.Check the syntax,use ! addr,for
specific host and most important - run /usr/dt/bin/dtconfig -reset although I beleive its updated automatically.

Zeev

[Nitsulenko Sergey]

I readed.
.....
myhost.lan.aommz.com CHOOSER BROADCAST
!192.168.102.78 CHOOSER BROADCAST
myhost.lan.aommz.com
!*
......

Nothing is not changed.