Bug#691844: xauth: Failed X11 forwarding when using GDM via XDMCP
On Sun, Nov 04, 2012 at 01:01:12AM +0100, Julien Cristau wrote:
> On Tue, Oct 30, 2012 at 10:41:35 +0100, Stefan Voelkel wrote:
>
> > Package: xauth
> > Version: 1:1.0.4-1
> > Severity: normal
> > Tags: upstream patch
> >
> >
> > When using GDM via XDMCP, for examle when accessing GDM via
> > vncserver->XDMCP->localhost, ssh is no longer able to forward X11.
> >
> > Invalid MIT-MAGIC-COOKIE-1 keyxterm Xt error: Can't open display:
> > localhost:10.0
> >
> > The problem is, that xauth is unable to deal with the Family "FamilyWild" which
> > is used by GDM in XDMCP to store the MIT-MAGIC-COOKIE-1 for the user.
> >
> > Attached are two patches, one for 1.0.4-1 and one for 1.0.7-1. The original
> > Patch is by Dr. Tilmann Bubeck.
> >
> > Upstream Bug is at
> >
> > https://bugs.freedesktop.org/show_bug.cgi?id=43425
> >
> > FWIW, Redhat also has a bug for this:
> >
> > https://bugzilla.redhat.com/show_bug.cgi?id=505545
> >
> Why does gdm do that?
I guess because off:
commit 5e5addf03e94bfe3b56e60f19c2f628e4d395dd9
Author: George Lebl <jirka@5z.com>
Date: Mon Aug 25 21:05:31 2003 +0000
Server auth file now uses FamilyWild and we set up the different access
Mon Aug 25 13:55:09 2003 George Lebl <jirka@5z.com>
* daemon/gdm.h, daemon/auth.[ch], daemon/xdmcp.c, daemon/server.c:
Server auth file now uses FamilyWild and we set up the different
access stuff for the user auth file. Don't add FamilyInternet
stuff to the xauth file if we start the server with
"-nolisten tcp". The purging is done right and doesn't
mistakenly whack entries we didn't add.
* NEWS: update
> How is that not a gdm bug?
AFIUI FamilyWild is a valid option, maybe
https://bugzilla.redhat.com/show_bug.cgi?id=505545#c17
sheds some light on why enhanceing xauth might be the right thing to do.
HTH,
Stefan
--
By trying we can easily learn to endure adversity. Another man's, I mean.
-- Mark Twain
Reply to: