On Thu, 11 Sep 2003, ScruLoose wrote:
> On Tue, Sep 09, 2003 at 11:44:22PM -0400, ScruLoose wrote:
> >
> > So I want to log in to X as one regular (non-root) user, and then allow
> > a different regular user to run X apps.
> >
> > Xlib: connection to ":0.0" refused by server
> > Xlib: Client is not authorized to connect to Server
>
> xauth -merge ~<xserver-user>/.xauthority
^ ^
merge is a command to xauth, not an option (something like 'show' in
'apt-cache show').
The file containing the MIT-magic-cookie is named .Xauthority. Case is
important here.
> gave me a usage message, so I did:
> xauth merge ~<xserver-user>/.xauthority
> which executed silently, but had no apparent effect.
Hmm, did you set the DISPLAY environment variable first?
Try this invocation and see what happens:
$ export DISPLAY=:0.0
$ xauth merge ~username/.Xauthority
$ some_x_app &
As far as I know this should work in almost any situation I can think
of.
>
> xhost +local:
> did exactly what I wanted.
This effectively allows any local user to connect to your X.
Non-repudiation is gone if you do that. Please adhere to "the principle
of least privilege" if you want to keep your system secure. Stick to the
xauth method.
Grx HdV
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]