diff --git a/LDP/howto/linuxdoc/Remote-X-Apps.sgml b/LDP/howto/linuxdoc/Remote-X-Apps.sgml index ba87859d..b3d34a8a 100644 --- a/LDP/howto/linuxdoc/Remote-X-Apps.sgml +++ b/LDP/howto/linuxdoc/Remote-X-Apps.sgml @@ -8,7 +8,7 @@ name="Vincent Zweije">, -v0.7.4, 2001-12-07 +v0.7.5, 8 December 2001 @@ -55,25 +55,16 @@ name="http://sunsite.unc.edu/LDP/HOWTO/mini/Remote-X-Apps">. Linux url="http://sunsite.unc.edu/LDP/HOWTO/HOWTO-INDEX-2.html" name="sunsite.unc.edu">. -This is version 0.7.4. No guarantees, only good intentions. I'm open +This is version 0.7.5. No guarantees, only good intentions. I'm open to suggestions, ideas, additions, useful pointers, (typo) corrections, etc... I want this to remain a simple readable document, though, in the -best-meant HOWTO style. Flames to /dev/null. +best-meant HOWTO style. Flames to /dev/null. This document is +released under version 1.1 of the Free Documentation Licence. -Contents last updated on 7 December 2001 by -

-This document is copyrighted 2001 by Vincent Zweije. -Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version -1.1 or any -later version published by the Free Software Foundation; with no Invariant Sections, with no Front-Cover Texts, and with no Back-Cover -Texts. -A copy of the license -is available at . - - Related Reading

@@ -85,10 +76,12 @@ Kenny">. It suggests a similar solution to X authentication to that in this document (xauth). However, Kevin aims more at using xdm to steer xauth for you. -The X System Window System Vol. 8 X ``Window System Administrator's +The X System Window System Vol. 8 ``X Window System Administrator's Guide'' from has also been brought to my attention as a good source of -information. Unfortunately, I've not been able to check it out. +Associates"> has also been brought to my attention and confirmed as a +good source of information. However, it has not been revised since its +original publication in 1992. As such it only covers X11R4 and X11R5, +anything specific to X11R6 will not be covered. Yet another document much like the one you're reading now, titled ``Securing X Windows'', is available at ˜/.Xauthority. Your ˜/.Xauthority must be inaccessible -for group/other users. The xauth program manages these cookies, hence -the nickname xauth for the scheme. +˜/.Xauthority. Your ˜/.Xauthority must +be inaccessible for group/other users. The xauth program manages these +cookies, hence the nickname xauth for the scheme. + +You can specify a different cookie file with the Authority records are transmitted over the network with no encryption. If you're even worried someone might snoop on your connections, use ssh, -the secure shell. It will do X forwarding over encrypted connections. And -besides, it's great in other ways too. It's a good structural improvement -to your system. Just visit , the ssh home page. +the secure shell. It can do X forwarding over encrypted connections. +To turn on X forwarding over ssh, use the command line switch +Host remote.host.name + ForwardX11 yes + + +The ssh server (~/.Xauthority there. So, X authorisation +with ssh is fully automatic. + +By the way, ssh is great in other ways too. It's a good structural +improvement to your system. For more information, visit , the ssh home page. + +

Who knows anything else on authentication schemes or encrypting X connections? Maybe kerberos? @@ -631,6 +645,12 @@ xsu clientuser 'command &' Can't be much easier, unless you get rid of the password. Yes, there are ways for that too ( +The tiny +distribution. + Client User Is Root

@@ -924,7 +944,7 @@ Whether you should want to provide any host in Internet with an X session is arguable. Obviously, any service you provide is one more possible hole in your server's security. On the other hand, the server should be secure itself, and an XDMCP client asking for an X session -has to privide a valid authentication before the X session is granted. +has to provide a valid authentication before the X session is granted.

Furthermore, the X session uses a remote X connection, which is