SUMMARY:Re: CDE/Reflection Client Interface/Security

From: unix adm <uunniixx_aaddmmin_at_yahoo.com>
Date: Fri, 30 Jul 1999 05:54:59 -0700 (PDT)

Thanks for

1.richard Frank
2.Oisin McGuinness

for immediate response.
*****************************************
from richard Frank:
if get a message like: "cannot obtain database info on
this terminal..." when you try to connect...
  
 cd /etc/auth/system; mv ttys.db ttysdb.bak

 vi ttys and include info for the terminal(s) you want
to have connect,in this example "aether" is the name
of the PC.

aether\:0|aether\:0.0:t_devname=aether\:0:t_xdisplay:t_login_timeout#0:chkent:

do /usr/tcb/bin/convauth -dt to change ttys file to
ttys.db

***********This worked.***********************

I feel the related url one below ..in compaq's website
is wrong..
http://www.unix.digital.com/unix/faq/graphics.html.

cheers

--- unix adm <uunniixx_aaddmmin_at_yahoo.com> wrote:
> Hi managers
>
> i have recently upgraded to c2 security using proper
> commands.utilities..and I find after that the CDE in
> my m/c is not
> connecting to the server(even with my own
> account..apart from root).it
> gives messages called "Can't obtain database info.
> on this terminal.."
>
> when i check ttys and devassign , looks like there
> is a entry with 0
> and 1 which means my m/c should be allowed to
> use..(i am getting the
> name from a name server)
>
> when I checked the list, i found managers recon that
> to change to * and
> do a edauth.(also there is a security
> implications..) I want to know
> the reasos for the following questions..
>
> 1.Is there any way to alow only one m/c to use CDE ?
> 2.if I use * what sort of security implications will
> come?when I tried
> do a edauth with a cuurent ttys and devassign, i
> faced a security
> problem which I later cleared.
>
> these are the few lines of my current ttys/devassign
>
> # more /etc/auth/system/ttys
> console:t_devname=console:chkent:
>
local\:0|local\:0.0:t_devname=local\:0:t_xdisplay:t_login_timeout#0:chkent:
>
\:0|\:0.0:t_devname=\:0:t_xdisplay:t_login_timeout#0:chkent:
>
\:1|\:1.0:t_devname=\:1:t_xdisplay:t_login_timeout#0:chkent:
>
\:0.1:t_devname=\:0.1:t_xdisplay:t_login_timeout#0:chkent:
> ttyp0:t_devname=ttyp0:chkent:
> ttyp1:t_devname=ttyp1:chkent:
> ttyp2:t_devname=ttyp2:chkent:
> ttyp3:t_devname=ttyp3:chkent:
> ttyp4:t_devname=ttyp4:chkent:
>
>
> your help on this will be nice...
>
> Cheers
> DU Admin
>
>
_____________________________________________________________
> Do You Yahoo!?
> Free instant messaging and more at
> http://messenger.yahoo.com
>
>

_____________________________________________________________
Do You Yahoo!?
Free instant messaging and more at http://messenger.yahoo.com
Received on Fri Jul 30 1999 - 12:56:49 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:39 NZDT