adding command to startup

[Matt Cahill]

Monday, February 14, 2005, 2:33:42 PM, you wrote:

TW> lsorense-1wCw9BSqJbv44Nm34jS7GywD8/FfD2ys at public.gmane.org (Lennart Sorensen) writes:

>> On Mon, Feb 14, 2005 at 11:30:34AM -0500, Matt Cahill wrote:
>> >    Well, this is the thing (strange as it is):  if I type 'xauth merge
>> >    /home/matt/.Xauthority' (as root), it works for as long as my
>> >    computer is running.  As soon as I reboot, I need to do it again.
>> >    As this is an area I have very little knowledge of, I'm not sure
>> >    what's 'right' and what's 'weird'.  I *do* know that it's
>> >    inconvenient ;)
>> 
>> Well I haven't really played with xauth for some years, so it is likely
>> what used to work, is now considered a security problem, and that is not
>> generates new xauth cookies on each startup of X.

TW> Quoting from the xauth man page:

TW>     Normally xauth is not used to create the authority file entry in the
TW>     first place; xdm does that.

TW> And on my system, X is run (from gdm) like this:

TW>     /usr/X11R6/bin/X :0 -br -audit 0 -auth /var/lib/gdm/:0.Xauth \
TW>        -nolisten tcp vt7

TW> which strongly suggests the authority file is generated by gdm.

TW> In any case, the authorization information used by the X server is usually
TW> specific to each instance (of the X server), so you would have to merge your
TW> credentials whenever you login (to X) as [xgk]dm may start a new instance of
TW> the X server whenever you login.  If you're using gdm, you can do this in
TW> your /etc/gdm/PostLogin/Default script which is run as root, just after
TW> you've authenticated but before your session is started.  This is documented
TW> in the gdm reference manual available from the GNOME help system.  There are
TW> similar mechanisms for xdm and kdm.  The rc scripts (/etc/init.d/rc?.d/* or
TW> /etc/rc.d/*) are not the right place for this kind of thing because it's
TW> user specific and needs to be done at login not at boot.



 Tim,

  That makes a lot of sense.  I wonder if this is related to switching
  over to kdm (from gdm).  In light of what you're saying, I'd bet
  money the answer lies in the kdm config.

  Thank you very much for laying it out as clearly as you did.  It's
  hard to connect the dots when I'm focusing on singular issues
  (without knowing how they interrelate).

  Cheers,

  Matt

-- 

Matt Cahill
                      m dash cahill at rogers dot com


 “Where did this idea come from that everybody deserves free education?
 Free medical care? Free whatever? It comes from Moscow. From Russia.
 It comes straight out of the pit of hell.”
 - Texas state Rep. Debbie Riddle

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml