disable MIT-COOKIE-1 authorization

jk

unread,

Mar 21, 2003, 10:11:08 AM3/21/03

to

I have Sun Solaris 2.6 and I like to disable MIT-COOKIE-1. Please shed a
light, how to disable it.
I learned that on HP computer, we can set /etc/dt/config/Xconfig
to Dtlogin*authorize: False.

How about Sun solaris 2.6, how to disable it.
Thanks

David Michaels

unread,

Mar 21, 2003, 10:36:18 AM3/21/03

to

I use this command to disable cookies when I connect to a VaxStation
from Solaris

/usr/openwin/bin/X -ac <hostname>

jk

unread,

Mar 21, 2003, 12:25:18 PM3/21/03

to David Michaels

I got the following error, do I miss anything?

# /usr/openwin/bin/X :hostname -ac

Fatal server error:
Cannot establish any listening sockets - Make sure an X server isn't
already running

Rocke Robertson

unread,

Mar 24, 2003, 1:44:15 PM3/24/03

to jk

jk wrote:

Have you tried /usr/dt/config/Xconfig . It has the:

############################################################################

# To disable R4 MIT-MAGIC-COOKIE-1 per-user authorization.
#
# Dtlogin*authorize: False

section you are looking for ?

~rocker

cljlk

unread,

Mar 25, 2003, 8:39:29 AM3/25/03

to

Rocke,
Thank you very much, I will try it.

cljlk

unread,

Mar 26, 2003, 7:24:46 AM3/26/03

to

I uncomment out "Dtlogin*authorize: False" on /usr/dt/config/Xconfig,
but I stll get:

Xlib: connection to "host:0.0" refused by server
Xlib: Invalid MIT-MAGIC-COOKIE-1 key

Do I miss something?
Thanks

David Michaels

unread,

Mar 26, 2003, 11:08:46 AM3/26/03

to

Sorry,

what I meant was -

/usr/openwin/bin/X -ac -query "ip-address or hostname"

I left out -query

I spent a lot of time packet sniffing OpenVMS so I could run it with a
VT320 local or xdm remotely... OpenVMS doesnt support the MIT-COOKIE as
far as I can tell...

David Michaels
david.m...@uc.edu

Alan Coopersmith

unread,

Mar 26, 2003, 1:30:02 PM3/26/03

to

cljlk <cl...@hotmail.com> writes in comp.sys.sun.admin:

Turning off magic cookie authentication makes the server revert to host
based authentication (xhost +hostname), it doesn't disable all security.

For more on X authentication, see
http://www.xs4all.nl/~zweije/xauth.html

--
________________________________________________________________________
Alan Coopersmith al...@alum.calberkeley.org
http://www.CSUA.Berkeley.EDU/~alanc/ aka: Alan.Coo...@Sun.COM
Working for, but definitely not speaking for, Sun Microsystems, Inc.

cljlk

unread,

Mar 28, 2003, 7:53:42 AM3/28/03

to Alan Coopersmith

How to trun off? Please help. I am still in trouble.
Thanks.

Chuck Dillon

unread,

Mar 28, 2003, 9:43:50 AM3/28/03

to

cljlk wrote:
> I uncomment out "Dtlogin*authorize: False" on /usr/dt/config/Xconfig,
> but I stll get:
>
> Xlib: connection to "host:0.0" refused by server
> Xlib: Invalid MIT-MAGIC-COOKIE-1 key
>
> Do I miss something?

Did you restart the session (i.e. logout and back in)?

If not, try it.

If that doesn't help I suggest you ask in comp.unix.cde.

-- ced

> Thanks
>
> Rocke Robertson wrote:
>
>>
>> jk wrote:
>>
>>
>>> I have Sun Solaris 2.6 and I like to disable MIT-COOKIE-1. Please shed a
>>> light, how to disable it.
>>> I learned that on HP computer, we can set /etc/dt/config/Xconfig
>>> to Dtlogin*authorize: False.
>>>
>>> How about Sun solaris 2.6, how to disable it.
>>> Thanks
>>
>>
>>
>> Have you tried /usr/dt/config/Xconfig . It has the:
>>
>> ############################################################################
>>
>>
>> # To disable R4 MIT-MAGIC-COOKIE-1 per-user authorization.
>> #
>> # Dtlogin*authorize: False
>>
>> section you are looking for ?
>>
>>
>> ~rocker
>>
>

--
Chuck Dillon
Senior Software Engineer
NimbleGen Systems Inc.