I have xdm running permanently and managing user logins.  In order to make
full use of exmh I had to get xdm authorisation running. I didn't fully
understand the process and I am even more baffled now, because only root
and I are able to log in; all other users get thrown out immediately because
X refuses to run their processes.  On the other hand, a new user (which I
created for testing this problem) IS able to log in!

The size of the .Xauthority file in a failed user's directory is 0.

I tried copying all my own . files into another user's directory, but
this made no difference.  I then looked in /etc and /usr/X* for files which 
might have my ownership; all seems OK.  I don't know if  /etc/X11/config
is right: the documentation file /usr/doc/X11/debian.README does not exist
on my system.  The only altered file in /etc/X11/xdm is Xservers, which
does not seem to be relevant.

Can anyone tell me just how the authorisation procedure works and what
controls which users' processes are allowed to run?

/var/log/xdm-errors says:

AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 4 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
AUDIT: Mon Apr  7 00:41:15 1997: 433 X: client 2 rejected from local host
X connection to :0.0 broken (explicit kill or server shutdown).

/etc/X11/config:
run-xconsole
obey-nologin
allow-user-resources
allow-user-modmap
allow-user-xsession
allow-failsafe
start-xdm
no-xdm-start-server

Xservers:
:0 Local local /usr/bin/X11/X :0

xdm-config:! $XConsortium: xdm-conf.cpp,v 1.2 93/09/28 14:30:32 gildea Exp $
DisplayManager.authDir:         /var/lib/xdm
DisplayManager.errorLogFile:    /var/log/xdm-errors
DisplayManager.pidFile:         /var/run/xdm-pid
DisplayManager.keyFile:         /etc/X11/xdm/xdm-keys
DisplayManager.servers:         /etc/X11/xdm/Xservers
DisplayManager.accessFile:      /etc/X11/xdm/Xaccess
DisplayManager._0.authorize:    true
DisplayManager._0.resources:    /etc/X11/xdm/Xresources_0
DisplayManager._0.setup:        /etc/X11/xdm/Xsetup_0
DisplayManager._0.startup:      /etc/X11/xdm/Xstartup_0
DisplayManager._0.reset:        /etc/X11/xdm/Xreset_0
DisplayManager*resources:       /etc/X11/xdm/Xresources
DisplayManager*setup:           /etc/X11/xdm/Xsetup
DisplayManager*startup:         /etc/X11/xdm/Xstartup
DisplayManager*reset:           /etc/X11/xdm/Xreset
DisplayManager*session:         /etc/X11/Xsession
DisplayManager*userPath:        /usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/
games
DisplayManager*systemPath:      /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/b
in:/sbin:/bin:/usr/bin/X11
DisplayManager*authComplain:    true

Xaccess:
*                                       #any host can get a login window
*               CHOOSER BROADCAST       #any indirect host can get a chooser

-- 
Oliver Elphick                                [EMAIL PROTECTED]
Isle of Wight                      http://homepages.enterprise.net/olly


Attachment: pgp60PiusVWfV.pgp
Description: PGP signature

Reply via email to