On Thu, 11 Sep 2003, ScruLoose wrote:

> On Tue, Sep 09, 2003 at 11:44:22PM -0400, ScruLoose wrote:
> >
> > So I want to log in to X as one regular (non-root) user, and then allow
> > a different regular user to run X apps.
> >
> >   Xlib: connection to ":0.0" refused by server
> >   Xlib: Client is not authorized to connect to Server
>
>   xauth -merge ~<xserver-user>/.xauthority
          ^                       ^

merge is a command to xauth, not an option (something like 'show' in
'apt-cache show').

The file containing the MIT-magic-cookie is named .Xauthority. Case is
important here.

> gave me a usage message, so I did:
>   xauth merge ~<xserver-user>/.xauthority
> which executed silently, but had no apparent effect.

Hmm, did you set the DISPLAY environment variable first?

Try this invocation and see what happens:

$ export DISPLAY=:0.0
$ xauth merge ~username/.Xauthority
$ some_x_app &

As far as I know this should work in almost any situation I can think
of.

>
>   xhost +local:
> did exactly what I wanted.

This effectively allows any local user to connect to your X.
Non-repudiation is gone if you do that. Please adhere to "the principle
of least privilege" if you want to keep your system secure. Stick to the
xauth method.

Grx HdV




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to