<div dir="ltr">(The bug is <a href="https://bugs.launchpad.net/lightdm/+bug/1206533">https://bugs.launchpad.net/lightdm/+bug/1206533</a> and it was discussed more there)<br></div><div class="gmail_extra"><br><br><div class="gmail_quote">
On 31 July 2013 02:24, <span dir="ltr"><<a href="mailto:b.king@surrey.ac.uk" target="_blank">b.king@surrey.ac.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi Folks<br>
<br>
I'm currently working on configuring Ubuntu 12.04 Linux to match our<br>
user environment - one of the aspects I'm working on is enabling X11<br>
over TCP as we have a large number of graphical applications running on<br>
local (same-subnet) compute server systems. Encrypting the X11 stream<br>
between clients and servers on the same physical network switch inside a<br>
secured floor of offices seems like insanity to me.<br>
<br>
I've obviously configured Lightdm to start the Xorg X11 server with TCP<br>
mode connections enabled, but the -auth argument (which I assume is<br>
provided by lightdm) points to a file called /var/run/lightdm/root/:0.<br>
Despite the TCP mode connection being enabled, the only<br>
MIT-MAGIC-COOKIE-1 key that is placed within this file includes the<br>
"hostname/unix:0" specification which limits it's use to Unix domain<br>
sockets only.<br>
<br>
What I need to do is to have lightdm (assuming it is lightdm that is<br>
creating this authorisation file) create it with simply "hostname:0" so<br>
that the MIT-MAGIC-COOKIE-1 key may be used on X11 over TCP connections<br>
as well as those over X11 over Unix Domain socket connections.<br>
<br>
I have confirmed that extracting the key from the :0 file using Xauth<br>
-f :0 list followed by a correspondingly altered re-insertion of the key<br>
without the /unix part using Xauth -f :0 add ... command does indeed<br>
work.<br>
<br>
My first question is whether there is something I've missed in the<br>
lightdm configuration file that would allow me to specify that I want<br>
the MIT-MAGIC-COOKIE-1 enabled for both TCP and Unix domain connections?<br>
<br>
The second point which follows on from that is whether when allowing TCP<br>
connections to the Xserver, maybe lightdm SHOULD remove the /unix<br>
element from the MIT_MAGIC-COOKIE-1 stored in the :0 file. It would<br>
seem to me to be logical that it should.<br>
<br>
And the final point is seeking advice on the best recommended way to<br>
work around this problem for the time being. I assume I could do the<br>
xauth list/xauth add steps within the display-setup-script if necessary.<br>
Is this the best place to do it?<br>
<br>
Thanks in advance for your help. A matching Ubuntu-bug report has been<br>
sent as requested on the Wiki.<br>
<br>
Regards, Bevis.<br>
<br>
_______________________________________________<br>
LightDM mailing list<br>
<a href="mailto:LightDM@lists.freedesktop.org">LightDM@lists.freedesktop.org</a><br>
<a href="http://lists.freedesktop.org/mailman/listinfo/lightdm" target="_blank">http://lists.freedesktop.org/mailman/listinfo/lightdm</a><br>
</blockquote></div><br></div>