| View previous topic :: View next topic |
| Author |
Message |
Epyon
l33t
Joined: 11 Sep 2003
Posts: 754
Location: NJ, USA
|
 Posted: Sat Nov 20, 2004 4:54 pm Post subject: pam_xauth question |
 |
|
Not sure if this is the right forum for this but...
After the last shadow update VNC stopped working. I was reading bug 69925 and saw this:
| Quote: |
notice that if PAM is enabled, DISPLAY/XAUTHORITY are not propogated ... you're supposed to setup the propogation of these vars yourself (gasp!) via pam_xauth |
Now though DISPLAY is set in /etc/security/pam_env.conf and it is set incorrectly for remote X sessions. When you run VNC it tries to open the apps on :0.0 which fails.
If you remove this line
| Code: | DISPLAY DEFAULT=${REMOTEHOST}:0.0 OVERRIDE=${DISPLAY}
|
it starts working again.
There is a problem with this though. When using "su -" DISPLAY is not set. I could set it in .bashrc or whatever but it wouldn't always be correct especially if using VNC.
According to the comment in that bug report the DISPLAY variable is supposed to be set via pam_xauth. How would I go about getting pam_xauth to set that variable? |
|
| Back to top |
|
 |
hds
Advocate
Joined: 21 Aug 2004
Posts: 2629
Location: Sprockhoevel [GER]
|
|
| Back to top |
|
|
Epyon
l33t
Joined: 11 Sep 2003
Posts: 754
Location: NJ, USA
|
| Posted: Mon Nov 22, 2004 7:40 am Post subject: |
|
|
| My specific question wasn't asked or answered in that thread. For now I still have to manually set the DISPLAY variable when I su - to root in X if I want to start a graphical app. |
|
| Back to top |
|
|
hds
Advocate
Joined: 21 Aug 2004
Posts: 2629
Location: Sprockhoevel [GER]
|
| Posted: Mon Nov 22, 2004 9:59 am Post subject: |
|
|
| Epyon wrote: | My specific question wasn't asked or answered in that thread.
|
sorry - just thought your question would fit there better, because the problem started for you infact of the same reason - X authority in PAM?
| Epyon wrote: |
For now I still have to manually set the DISPLAY variable when I su - to root in X if I want to start a graphical app. |
i always had to do this anyway. also prior to the changes to the PAM config. hmm.. |
|
| Back to top |
|
|
|
Networking & Security
