Your message dated Mon, 12 Oct 2026 22:48:12 -0400
with message-id <[email protected]>
and subject line Re: sddm: auth file passed to Xserver doesn't allow tcp 
connections
has caused the Debian Bug report #875721,
regarding sddm: auth file passed to Xserver doesn't allow tcp connections
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
875721: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=875721
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sddm
Version: 0.14.0-4
Severity: important

Dear Maintainer,

I'm running testing (buster) on one of my PCs. This uses sddm instead of the
previous kdm.

kdm generates an auth file for passing to the Xserver that uses the
wildcard value for connection method. e.g.
    #ffff##:  MIT-MAGIC-COOKIE-1  68389d0b79e85041a85532b41264b110

sddm instead generates an auth file for passing to the XServer that uses the
computer hostname and unix connection method. e.g.
    hostname/unix:0  MIT-MAGIC-COOKIE-1  68389d0b79e85041a85532b41264b110
This is true even after I have created a /etc/sddm.conf file with the line
    ServerArguments=-listen tcp
to enable tcp connections to the Xserver.

Because of this change to the Xserver auth file it is not possible with sddm
to authorise tcp connections to the Xserver using MIT-MAGIC-COOKIE-1 entries
in the .XAuthority file on a remote computer.


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.12.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sddm depends on:
ii  adduser                 3.116
ii  debconf                 1.5.63
ii  libc6                   2.24-17
ii  libgcc1                 1:7.2.0-4
ii  libpam0g                1.1.8-3.6
ii  libqt5core5a            5.9.1+dfsg-9
ii  libqt5dbus5             5.9.1+dfsg-9
ii  libqt5gui5              5.9.1+dfsg-9
ii  libqt5network5          5.9.1+dfsg-9
ii  libqt5qml5              5.9.1-6
ii  libqt5quick5            5.9.1-6
ii  libstdc++6              7.2.0-4
ii  libsystemd0             234-3
ii  libxcb-xkb1             1.12-1
ii  libxcb1                 1.12-1
ii  qml-module-qtquick2     5.9.1-6
ii  x11-common              1:7.7+19
ii  xserver-xorg [xserver]  1:7.7+19

Versions of packages sddm recommends:
ii  libpam-systemd                       234-3
ii  sddm-theme-debian-maui [sddm-theme]  0.14.0-4

Versions of packages sddm suggests:
pn  libpam-kwallet5  <none>

-- debconf information:
  sddm/daemon_name: /usr/bin/sddm
* shared/default-x-display-manager: sddm

--- End Message ---
--- Begin Message ---
Version: 0.20.0-1

On Thu, 14 Sep 2017 01:17:38 +0100 Bruce Robson <[email protected]> wrote:
Package: sddm
Version: 0.14.0-4
Severity: important

Dear Maintainer,

I'm running testing (buster) on one of my PCs. This uses sddm instead of the
previous kdm.

kdm generates an auth file for passing to the Xserver that uses the
wildcard value for connection method. e.g.
    #ffff##:  MIT-MAGIC-COOKIE-1  68389d0b79e85041a85532b41264b110

sddm instead generates an auth file for passing to the XServer that uses the
computer hostname and unix connection method. e.g.
    hostname/unix:0  MIT-MAGIC-COOKIE-1  68389d0b79e85041a85532b41264b110
This is true even after I have created a /etc/sddm.conf file with the line
    ServerArguments=-listen tcp
to enable tcp connections to the Xserver.

Because of this change to the Xserver auth file it is not possible with sddm
to authorise tcp connections to the Xserver using MIT-MAGIC-COOKIE-1 entries
in the .XAuthority file on a remote computer.


-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.12.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sddm depends on:
ii  adduser                 3.116
ii  debconf                 1.5.63
ii  libc6                   2.24-17
ii  libgcc1                 1:7.2.0-4
ii  libpam0g                1.1.8-3.6
ii  libqt5core5a            5.9.1+dfsg-9
ii  libqt5dbus5             5.9.1+dfsg-9
ii  libqt5gui5              5.9.1+dfsg-9
ii  libqt5network5          5.9.1+dfsg-9
ii  libqt5qml5              5.9.1-6
ii  libqt5quick5            5.9.1-6
ii  libstdc++6              7.2.0-4
ii  libsystemd0             234-3
ii  libxcb-xkb1             1.12-1
ii  libxcb1                 1.12-1
ii  qml-module-qtquick2     5.9.1-6
ii  x11-common              1:7.7+19
ii  xserver-xorg [xserver]  1:7.7+19

Versions of packages sddm recommends:
ii  libpam-systemd                       234-3
ii  sddm-theme-debian-maui [sddm-theme]  0.14.0-4


Upstream commit cb5c07b4c5bafa27b21981a8f4039eadbe0fafdf
rewrote Xauthority handling using libXau. XAuth::writeCookieToFile() writes the 
same cookie
as both FamilyLocal and FamilyWild, including the authentication file passed to 
the Xserver by
XorgDisplayServer. This addresses the missing wildcard-family entry described 
in this report.

The fix is included in upstream 0.20.0 and Debian 0.20.0-1. Closing with
that historical fixed version. TCP listening still requires explicit 
configuration.

Regards,
Boyuan Yang

Attachment: OpenPGP_0xC293E7B461825ACE.asc
Description: OpenPGP public key

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature


--- End Message ---

Reply via email to