Re: can't su and run X programs
Re: can't su and run X programs
- Subject: Re: can't su and run X programs
- From: Hugh McIntyre <email@hidden>
- Date: Wed, 22 Oct 2003 01:17:58 -0700 (PDT)
|> > Xlib: connection to ":0.0" refused by server
|> > Xlib: No protocol specified
|> >
|> > Error: Can't open display: :0
|> >
|> > What's up? This works fine on my IRIX box.
|> >
|> > Rich
|>
|> IRIX is granting - wrongly - permissions to another user to run xclock
|> on your DISPLAY. OS X does the right thing.
|>
|> Do you have 'xhost +' - URGH - set on IRIX?
The best answer may be to use "ssh -X localhost -l <user>" which should enable
X11 forwarding with authentication set up. If so you need to make sure
/etc/sshd_config contains "X11Forwarding yes".
If not, one other option that's not as good but better than xhost may be to say:
XAUTHORITY=/Users/<yourname>/.Xauthority
export XAUTHORITY
on the Mac, which will cause the root account to use the more secure xauth
authority. (Or if using *csh, "setenv XAUTHORITY ...").
Obviously this depends on a local root user being able to read this file since
it is only normally readable by the owner (plus local root). If you're doing
this as another user then you'd need to give them specific access to this file,
which is insecure. Don't make the file publicly readable since this disables
security.
Hugh.
_______________________________________________
x11-users mailing list | email@hidden
Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/x11-users
X11 for Mac OS X FAQ: http://developer.apple.com/qa/qa2001/qa1232.html
Report issues, request features, feedback: http://developer.apple.com/bugreporter
Do not post admin requests to the list. They will be ignored.