--- Begin Message ---
Package: xdm
Version: 1:1.0.5-2
Severity: important
After switching to Debian/etch there is the following problem in xdm:
Xaccess accepts the pattern
*
172.16.3.3
test.testdomain.org
but
172.16.3.* or
*.testdomain.org
are not accepted anymore. Pattern with wildcards *.domain or net.* are
still
described in the manpage. Pattern matching is important for a little bit
more security using X-Terminals in larger organizations and works in
Debian/potato and Debian/sarge.
=======================
Debug output with full address (172.16.5.56) in Xaccess:
=======================
creating socket to listen on port 177 of address 0.0.0.0
startup successful; entering main loop
WaitForSomething
select returns 1. Rescan: 0 ChildReady: 0
ProcessRequestSocket
header: 1 2 1
query respond 1
ConvertAddr returning 0 for family 2
all_query_respond: conntype=0, addr=172.16.5.56, len=4
send willing 3 users, load: 0.00, 0.00, 0.00
=======================
creating socket to listen on port 177 of address 0.0.0.0
Debug output with wildcard (172.16.5.*) in Xaccess:
=======================
creating socket to listen on port 177 of address 0.0.0.0
startup successful; entering main loop
WaitForSomething
select returns 1. Rescan: 0 ChildReady: 0
ProcessRequestSocket
header: 1 2 1
query respond 1
ConvertAddr returning 0 for family 2
all_query_respond: conntype=0, addr=172.16.5.56, len=4
send unwilling Display not authorized to connect
WaitForSomething
Are there any hints? In the case it would help I can send the output
of an "strace" in both cases.
Thanks in advance - Ulli
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (990, 'stable'), (20, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-noipv6
Locale: LANG=en_US, LC_CTYPE=de_DE.iso88591 (charmap=ISO-8859-1)
Versions of packages xdm depends on:
ii cpp 4:4.1.1-15 The GNU C preprocessor (cpp)
ii debconf [debconf-2.0] 1.5.11 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch2 GNU C Library: Shared libraries
ii libice6 1:1.0.1-2 X11 Inter-Client Exchange library
ii libpam0g 0.79-4 Pluggable Authentication Modules l
ii libselinux1 1.32-3 SELinux shared libraries
ii libsm6 1:1.0.1-3 X11 Session Management library
ii libx11-6 2:1.0.3-7 X11 client-side library
ii libxau6 1:1.0.1-2 X11 authorisation library
ii libxaw7 1:1.0.2-4 X11 Athena Widget library
ii libxdmcp6 1:1.0.1-2 X11 Display Manager Control Protoc
ii libxext6 1:1.0.1-2 X11 miscellaneous extension librar
ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library
ii libxmu6 1:1.0.2-2 X11 miscellaneous utility library
ii libxpm4 1:3.5.5-2 X11 pixmap library
ii libxt6 1:1.0.2-2 X11 toolkit intrinsics library
ii x11-common 1:7.1.0-19 X Window System (X.Org) infrastruc
ii xbase-clients 1:7.1.ds1-2 miscellaneous X clients
xdm recommends no packages.
-- debconf information:
xdm/stop_running_server_with_children: false
xdm/daemon_name: /usr/bin/X11/xdm
* shared/default-x-display-manager: xdm
--
Ulrike Nitzsche | email: u.nitzsche@ifw-dresden.de
| phone: +49-351-4659-463
Standards are wonderful. Everyone should have one!
--- End Message ---
--- Begin Message ---
Version: 1:1.1.6-3
Ulrike Nitzsche wrote:
> On Sat, Nov 24, 2007 at 11:04:52AM +0100, Brice Goglin wrote:
>
>> Can you try with a more recent xdm? 1.0.5 is very old. We have 1.1.6 in
>> testing.
>>
> I tested the xdm from testing with the same configuration files and all
> is fine. So the Xaccess error occurs only in etch - the current debian
> release.
>
Good to know, I am closing this bug then.
> I don't like debian/testing on productive servers so I'm looking for a
> working xdm in etch. Or is there any way to use xdm from testing but
> without libc6, cpp, x11-common and all the staff from testing?
>
Can you try the xdm package from
http://people.debian.org/~bgoglin/etch/xdm/ ? It is supposed to install
fine on Etch.
Brice
--- End Message ---