Re: [SLUG] Enable XDMCP TCP listener in Fedora Core 5

From: John Pugh (jpugh@novell.com)
Date: Wed Sep 27 2006 - 10:32:21 EDT


Wow.

>>> On Wed, Sep 27, 2006 at 9:47 AM, in message
<c4b770890609270647h43b6851aof1eac6fe359468fa@mail.gmail.com>, "Keith
Lelacheur" <themercuryman@gmail.com> wrote:
> Hello sluggers,
>
> I am a little outside of my element with fedora and am running into a
> problem getting a fresh install to allow me to enable the XDMCP broadcast
> enabled. There are a few wrinkles that may or may not be important though.
> The main one is that this is a fedora image running on a VMWARE GSX server.
> I don't think there are any network driver or addressing issues though since
> I can ssh into the os running on the virtual machine. I have tried
> following this basic how- to as found at:
> http://my.opera.com/onyxluo/blog/show.dml/441307
> __________________-
>
> Enable XDMCP under Linux
>
> Saturday, 2. September 2006, 19:26:21
>
> Linux <http://my.opera.com/onyxluo/blog/index.dml/tag/Linux>
> *Fedora Core 5*
> If implementing a default intallation of FC5, it needs to add the xdm
> (xorg- x11- xdm) package
> into FC5 before enabling XDMCP.
>
> 1. Enable xdmcp in gdm configuration by editing the file
> "/etc/gdm/custom.conf" and set xdmcp=ture.
> 2. Set xdmcp listen in "/etc/X11/xdm/xdm- config" by comment out the line "
> DisplayManager.requestPort: 0" (add ! in the head)
> 3. Set the access control in "/etc/X11/xdm/Xaccess"
> * #any host can get a login window
> OR
> 192.168.0.* #any host can get a login window
> 4. Enable xdmcp in firewall. The simplest solution is to turn off the
> firewall. Otherwise you need to edit the file "/etc/sysconfig/ipchains" with
> the following in its' head
> - A input - p udp - s 0/0 - d 0/0 177 - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 telnet - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 ssh - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 login - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 exec - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 shell - j ACCEPT
> - A input - p tcp - s 0/0 - d 0/0 7100 - j ACCEPT
>
> 5. reboot the system to run new configuration.
>
> _____________________________________________________________________
>
> I actually turned off the firewall for the tesing purposes using "service
> iptables stop" for the purposes of this testing.
>
> After rebooting I still am not able to connect to the server using X- Win32.
> It doesn't even seem to see any remote XDMCP server out there. I did a ps
> - ef |grep - i dm to see if gdm/xdm was running and got the following output:
>
> [root@lnxdevsvr xdm]# ps - ef |grep - i dm
> root 1357 1 0 04:01 ? 00:00:00 rpc.idmapd
> root 1609 1 0 04:01 ? 00:00:00 sendmail: accepting
> connections
> smmsp 1618 1 0 04:01 ? 00:00:00 sendmail: Queue
> runner@01:00:00
> for /var/spool/clientmqueue
> root 2829 1 0 04:16 ? 00:00:00 /usr/sbin/gdm- binary
> root 2929 2829 0 04:28 ? 00:00:00 /usr/sbin/gdm- binary
> root 2942 2929 43 04:28 tty7 00:00:00 /usr/bin/Xorg :0 - audit 0
> - auth /var/gdm/:0.Xauth - nolisten tcp vt7
> gdm 2962 2929 0 04:28 ? 00:00:00 /usr/libexec/gdmgreeter
> root 2964 1947 0 04:28 pts/1 00:00:00 grep - i dm
>
>
> I noticed this "--- nolisten tcp vt7-- " in the output that concerned me and
> didn't know if it was part of the problem I was facing.
>
> Any help would be appreciated
>
> Thanks,
>
> Keith
in SLE 10, I simply use YaST and enable the remote desktop (changes 2 settings in /etc/sysconfig), starting xdm, busting a hole in the firewall and voila..everyone can see and use a remote x terminal.

the only thing you didn't mention is actually starting xdm. I would test w/o iptables first as you did mention, but it appears that you are on the right track.

JP
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 17:29:23 EDT