Assuming you have an X session running, try: 'xhost +hostname'

Then, for each client added with xhost, 'application_name -display
address:display.screen' ie: 'xterm -display 192.168.100.1:0.0' (or 'xterm
-display localhost:0.0')

For remote root access on a LAN, I use a secure socket connection with
an authentication script and execute 'su -c "xterm -display
192.168.100.1:0.0"' from a shell script or bash prompt. Recommend using
a script to call the authentication script and silently pass root's
password, otherwise 'su -c "program_name"' asks for root's password
then executes your command.

jk

On Sat, 12 Aug 2000, you wrote:
> Rob Hudson wrote:
> 
> > Where can I tell X to allow root (or anyone from localhost) to be able
> > to connect to the server?  Someone said try 'xset +localhost' but that
> > didn't do anything.
> 
> Short answer: man Xsecurity
> 
> Longer answer:
> 
> You're probably using MIT-MAGIC-COOKIE authorization.
> 
> You have a cookie in ~/.Xauthority.  If you change your home directory
> with su, it won't find the right .Xauthority.  Fix that by setting
> the XAUTHORITY environment variable.
> 
> I do not recommend using host-based authorization, unless your machine
> is off the Internet.
> 
> If you really want to switch from MIT-MAGIC-COOKIE to host-based
> authorization, find the command used to start the X server and
> change the "-auth" argument.  If you use xdm, I think you can edit
> /etc/X11/xdm/xdm-config and change DisplayManger._0.authorize to
> false.  If you use kdm or gnome's dm, I don't know.
> 
> Disclaimer: I don't really understand X security very well.  For many
> years, I had "xhost +" in my .xsession files.
> 
> -- 
>                                         K<bob>
> [EMAIL PROTECTED], http://www.jogger-egg.com/
-- 
-----------------------------
James S. Kaplan KG7FU
Eugene Oregon USA
[EMAIL PROTECTED]
http://www.rio.com/~kg7fu
ICQ # 1227639
Have YOU tried Linux today?
-----------------------------


Reply via email to