problems with authorization via `xauth'


 
Thread Tools Search this Thread
Operating Systems BSD problems with authorization via `xauth'
# 1  
Old 12-24-2011
problems with authorization via `xauth'

Dear all,

I've got problems with X server authentication using `xauth'. The problem is, that I have my local computer running NetBSD 5.1 and a remote computer in LAN which is running Debian GNU Linux. During the login to my NetBSD computer `xdm' generates a magic cookie for my DISPLAY. Then I transfer this cookie via `ssh' to the Debian computer:
Code:
xauth extract - "${HOSTNAME}:0"  | ssh debian-comp xauth merge -

After that when making `xauth list', I can see identical magic cookies on both computers. But when I'm trying to start an `xterm' on the Debian computer I only get the following error message:
Code:
Invalid XDM-AUTHORIZATION-1 key (failed address comparison)xterm Xt error: Can't open display: sidorenko.xxx.invention.com:0

Could you please make any further suggestions how to solve this problem.

Kind regards,
Vladimir
# 2  
Old 12-24-2011
Not sure if this is going to help, but lets do this manually and see if this works:

Quote:
a) on your netbsd machine, do a xauth list and get the key for your display
b) on your debian machine, type in xauth, it should give you a xauth> prompt
c) at the xauth prompt>, paste the entire key line which should be of the format "hostname :0 MIT-MAGIC-COOKIE-1 <key>" from step a) and type exit
After step c), your key should have been added. So try connecting now.

Paste the output from xauth list on your netbsd and debian. Lets take a look.

Also post any errors from Xorg.0.log if any when attempting to connect to remote display.

Last edited by dude2cool; 12-24-2011 at 11:52 AM..
# 3  
Old 12-27-2011
Hello dude2cool,

Thanks for your suggestion, but unfortunately it seems not to help. I've tried adding the keys manually, but the result stayed the same. Actually the keys were already correctly added with `ssh', so I think that the problem is not with keys but with something else.
Here is the output of `xauth -list' from both machines. For security reasons I've replaced the magic numbers with key1, key2, etc.:
NetBSD Machine (sidorenko):
Code:
sidorenko.imb.invention.com:0  MIT-MAGIC-COOKIE-1  key1
sidorenko.imb.invention.com/unix:0  MIT-MAGIC-COOKIE-1  key1
sidorenko.imb.invention.com:0  XDM-AUTHORIZATION-1  key2
sidorenko.imb.invention.com/unix:0  XDM-AUTHORIZATION-1  key2

Debian GNU Linux Machine (syn-proxy7):
Code:
syn-proxy/unix:0  MIT-MAGIC-COOKIE-1  key3
syn-proxy.imb.invention.com:0  MIT-MAGIC-COOKIE-1  key3
syn-proxy7/unix:10  MIT-MAGIC-COOKIE-1  key4
sidorenko.imb.invention.com:0  MIT-MAGIC-COOKIE-1  key1
sidorenko.imb.invention.com:0  XDM-AUTHORIZATION-1  key2

Here are the last 15 lines from Xorg.0.log
Code:
>tail -15 /var/log/Xorg.0.log
(**) Option "CoreKeyboard"
(**) <default keyboard>: always reports core events
(**) Option "Protocol" "standard"
(**) <default keyboard>: Protocol: standard
(**) Option "AutoRepeat" "500 30"
(**) Option "XkbRules" "xorg"
(**) <default keyboard>: XkbRules: "xorg"
(**) Option "XkbModel" "pc105"
(**) <default keyboard>: XkbModel: "pc105"
(**) Option "XkbLayout" "us"
(**) <default keyboard>: XkbLayout: "us"
(**) Option "CustomKeycodes" "off"
(**) <default keyboard>: CustomKeycodes disabled
(II) XINPUT: Adding extended input device "<default keyboard>" (type: KEYBOARD)
Failed to switch consoles (Device not configured)

Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Authentication and Authorization from Separate Domains

The company I work for is trying to implement Sudoers.LDAP to centralize their sudoers infrastructure so the access management team and compliance teams don't have to run ragged over all of our servers. The AD team decided it would be better to set up a separate LDAP server rather than put a new... (1 Reply)
Discussion started by: Wolvendeer
1 Replies

2. Red Hat

RADIUS server for SSH authorization

Good day to anyone. I need your help. I want to create a centralization server for authorization my users via SSH connections. My manager suggested me a RADIUS + PAM, but frankly speaking I read a lot information about these and understood one thing - RADIUS could work only with password... (0 Replies)
Discussion started by: jess_t03
0 Replies

3. UNIX for Advanced & Expert Users

LDAP Authentication AND Authorization

I see a lot of thread on LDAP Authentication but I want to enable LDAP Authentication with Authorization. Meaning, removing the user ID's and groups from the local servers and move them to an LDAP server. When a user logs in (via LDAP) they will be given their group memberships and access to the... (3 Replies)
Discussion started by: scottsl
3 Replies

4. Programming

C NTLM Authorization via HTTP

Greetings, I am writing a C socket application that needs NTLM authorization before it can post HTTP requests, and I am having trouble with NTLM authorization messages. :b: I've found the following urls extremely valuable for creating message functions: Davenport WebDAV-SMB Gateway... (1 Reply)
Discussion started by: edvin
1 Replies

5. Linux

Assigning Authorization to a user

Hi, I created a user, however, l want this user to be able to configure some services in REd Hat 8.0 such changing of Network address which is exclusive to root super user. Unlike in Openserver or Unixware were you can assign authorization and privileges to user. I have not being able to figure... (5 Replies)
Discussion started by: kayode
5 Replies

6. UNIX for Advanced & Expert Users

shh authorization problem

I have ssh setup on 2 boxes ( aix / linux ). building a batchjob i have made a plaintext key. I force the command in the authorized_keys file running from aix -> linux ssh -i ~/.ssh/batchkey user@remote works perfect but from linux -> aix it get the following debug1:... (1 Reply)
Discussion started by: progressdll
1 Replies

7. OS X (Apple)

root/admin authorization and PackageMaker

I am building an installable package (.pkg) with PackageMaker 1.1.11 (that's the one that comes with Panther). The package is for installing things both to /Applications and to some folders in /Library (/Library/StartupItems and a new folder that I'm putting in /Library). I do (obviously) not... (4 Replies)
Discussion started by: ropers
4 Replies

8. UNIX for Dummies Questions & Answers

startx, xauth msg and Solaris 8

I just built my first Solaris 8 machine. I start x using this command (assume I'm in the correct directory): ./startx After I run this command, I receive this extremely frustrating message: /startx: XAUTHORITY=//.Xauthority: is not an identifier Can someone tell me what I am doing... (4 Replies)
Discussion started by: rpeteg
4 Replies
Login or Register to Ask a Question