Bug#452552: xdm: pattern in Xaccess

[Ulrike Nitzsche <U.Nitzsche@ifw-dresden.de>]

Package: xdm
Version: 1:1.0.5-2
Severity: important


After switching to Debian/etch there is the following problem in xdm:
Xaccess accepts the pattern
*
172.16.3.3
test.testdomain.org

but

172.16.3.* or
*.testdomain.org

are not accepted anymore. Pattern with wildcards *.domain or net.* are
still
described in the manpage. Pattern matching is important for a little bit
more security using X-Terminals in larger organizations and works in
Debian/potato and Debian/sarge.

=======================
Debug output with full address (172.16.5.56) in Xaccess:
=======================
creating socket to listen on port 177 of address 0.0.0.0
startup successful; entering main loop
WaitForSomething
select returns 1.  Rescan: 0  ChildReady: 0
ProcessRequestSocket
header: 1 2 1
query respond 1
ConvertAddr returning 0 for family 2
all_query_respond: conntype=0, addr=172.16.5.56, len=4
send willing  3 users, load: 0.00, 0.00, 0.00

=======================
creating socket to listen on port 177 of address 0.0.0.0
Debug output with wildcard (172.16.5.*) in Xaccess:
=======================
creating socket to listen on port 177 of address 0.0.0.0
startup successful; entering main loop
WaitForSomething
select returns 1.  Rescan: 0  ChildReady: 0
ProcessRequestSocket
header: 1 2 1
query respond 1
ConvertAddr returning 0 for family 2
all_query_respond: conntype=0, addr=172.16.5.56, len=4
send unwilling  Display not authorized to connect
WaitForSomething


Are there any hints? In the case it would help I can send the output
of an "strace" in both cases.

Thanks in advance - Ulli

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (990, 'stable'), (20, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-noipv6
Locale: LANG=en_US, LC_CTYPE=de_DE.iso88591 (charmap=ISO-8859-1)

Versions of packages xdm depends on:
ii  cpp                    4:4.1.1-15        The GNU C preprocessor (cpp)
ii  debconf [debconf-2.0]  1.5.11            Debian configuration management sy
ii  libc6                  2.3.6.ds1-13etch2 GNU C Library: Shared libraries
ii  libice6                1:1.0.1-2         X11 Inter-Client Exchange library
ii  libpam0g               0.79-4            Pluggable Authentication Modules l
ii  libselinux1            1.32-3            SELinux shared libraries
ii  libsm6                 1:1.0.1-3         X11 Session Management library
ii  libx11-6               2:1.0.3-7         X11 client-side library
ii  libxau6                1:1.0.1-2         X11 authorisation library
ii  libxaw7                1:1.0.2-4         X11 Athena Widget library
ii  libxdmcp6              1:1.0.1-2         X11 Display Manager Control Protoc
ii  libxext6               1:1.0.1-2         X11 miscellaneous extension librar
ii  libxinerama1           1:1.0.1-4.1       X11 Xinerama extension library
ii  libxmu6                1:1.0.2-2         X11 miscellaneous utility library
ii  libxpm4                1:3.5.5-2         X11 pixmap library
ii  libxt6                 1:1.0.2-2         X11 toolkit intrinsics library
ii  x11-common             1:7.1.0-19        X Window System (X.Org) infrastruc
ii  xbase-clients          1:7.1.ds1-2       miscellaneous X clients

xdm recommends no packages.

-- debconf information:
  xdm/stop_running_server_with_children: false
  xdm/daemon_name: /usr/bin/X11/xdm
* shared/default-x-display-manager: xdm

-- 
Ulrike Nitzsche           | email: u.nitzsche@ifw-dresden.de
                          | phone: +49-351-4659-463

Standards are wonderful. Everyone should have one!