  What to do when Tk reports that your display is insecure
  Kevin B. Kenny <kennykb@crd.ge.com>
  19 May 1997
  The Linux Japanese FAQ Project <JF@linux.or.jp>
  March 08, 2001

  ̕ɂ́Aǂ̂悤 X F؂ݒ肷΁A Tk s "X T
  [oSł͂Ȃ" ƌꂸ send R}hg邩ɂď
  ܂B
  ______________________________________________________________________

  ڎ

  1. ͂߂
     1.1 Copyright notice

  2. ǂ̂悤ɃVXeɃOC܂H
  3. Mac  PC ŁAT[hp[eB X \tgEFAgpĂ܂B
  4. Ȃ́A[JR\[ŎsAX gŋNĂ܂B
  5. Ȃ́AǗĂȂ[gfBXvCŎsĂ܂B
  6. Ȃ́AfBXvC}l[WƂƂł郊[gfBXvCŎsĂ܂AƂ Ă܂B
  7. Ȃ́AǗłfBXvCŎsĂ܂AfBXvC}l[W܂B
     7.1 Step A - VXe xdm ݒt@CҏW܂B
     7.2 Step B - VXe xdm T[ot@CҏW܂B
     7.3 Step C - xdm f[N悤B
     7.4 Step D - f[̋N

  8. Ȃ́AfBXvC}l[WgpĂ܂AT[o͂܂Sł͂܂B
     8.1 Step A - Ȃ̃z[fBNg .Xauthority t@C ׂłB
     8.2 Step B - .Xauthority t@C̓OCƏC͂łB
     8.3 Step C - .Xauthority t@C͂Ȃ̃fBXvC̃Gg͂łB

  9. Ȃ́AǗĂȂ[JR\[ŎsĂ܂B
  10. X T[o͈SłAɁATk ̐ڑۂĂ܂܂B
  11. {ɂ

  ______________________________________________________________________

  1.  ͂߂

  ̕ɂ́Aǂ̂悤 X F؂ݒ肷΁A Tk s "X T
  [oSł͂Ȃ" ƌꂸ send R}hg邩ɂď
  ܂B

  Tk 𓮍삳鎞ɂ̂悤ȕsȂAɂ͂
  @܂Bǂꂪ̂́AȂAǂVXegp
  Ă邩AǂfBXvCgpĂ邩AVXeǗ҂ɂǂ̂
  炢vo邩AƂƂɂČ܂܂B

  L̃`FbNXgǂ΁A̂肤ɂǂ
  傤B (kennykb@crd.ge.com) lƂẮA X Display Manager
  Communication Protocol (XDMCP) gƂ߂܂BĂ̂قƂ
  ǂ XDMCP gƂ߂Ă܂B

  ̃hLg WWW  http://ce-toolkit.crd.ge.com/tkxauth/ ŁA
  ł܂B

  Kevin B. Kenny
  Manufacturing & Design Integration Program
  Manufacturing Technologies Laboratory
  GE Corporate R&D

  1.1.  Copyright notice

  Copyright (C) 1995 General Electric Company. All rights reserved.

  Permission to use, copy, modify, and distribute this
  software and its documentation for any purpose and without
  fee is hereby granted, provided that the above copyright
  notice appear in all copies and that both that copyright
  notice and this permission notice appear in supporting
  documentation, and that the name of General Electric not be used in
  advertising or publicity pertaining to distribution of the
  software without specific, written prior permission.

  General Electric makes no representations about the suitability of
  this software for any purpose.  It is provided ``as is''
  without express or implied warranty.

  This work was supported in part by the ARPA Manufacturing Automation
  and Design Engineering (MADE) Initiative through ARPA contract
  F33615-94-C-4400, P00002 subcontract CS0000762.

  This work was supported in part by the DARPA Initiative in Concurrent
  Engineering (DICE) through DARPA contract MDA972-92-C-0027.

  2.  ǂ̂悤ɃVXeɃOC܂H

  o  OC悤ƂɁÃXN[̓_[ (eLXg
     ̂) ̂悤ɌA'login:'  'Console login:' ̂悤ȃvvg
     \Ă܂BOCƁA'xinit'  'x11start' ̂悤
     ͂ (́A'.login'  '.profile' ̑ɂs
     ܂)A X N܂B

     Ȃ́AǗĂȂ[JR\[ŎsĂ܂B
     ``Section 4'' ֍sĂB

  o  OC悤ƂɁÃXN[ł͊ɃEBhEV
     XeĂāA̒Ƀ[U ID ƃpX[h𑣂
     EBhE\Ă܂B

     Ȃ́AǗꂽfBXvCŎsĂ܂B߂łƂB
     AƂ͊ȒPł傤B ``Section 8'' ֍sĂB

  o  ́AMac  PC ŎsĂ PC-XView, MacX, eXceed, eXodus
     ̂悤Ȑig X N܂B

     Ȃ X T[oƂCɓ̃zXgǂ̂悤ɐݒ肳Ă邩
     āAԂς܂B ``Section 3'' ֍sĂB

  o  ́AX [gpĂāAj[̓X^[gAbv_CA
     O玄̃zXg xterm N܂B

     Ȃ́A[gŁAǗĂȂfBXvCŎsĂ
     B ``Section 5'' ֍sĂB

  o  Lɂ܂B

     j[XO[v͒҂ɂm点΁A悤
     w͂܂BȂ΂ȂAA҂ɂ
     m点BĂ΁A̎菇XVł܂B

  3.  Mac  PC ŁAT[hp[eB X \tgEFAgpĂ
  ܂B

  X ̋NAN܂H

  o  XN[̒ɁAzXgRs[^ւ̃OC𑣂ȃEB
     hE\܂B

     Ȃ́AǗꂽfBXvCŎsĂ܂BƂ͊ȒPȂ͂
     łB ``Section 8'' ֍sĂB

  o  j[̓_CAOACɓ̃zXg xterm 
     ́ANCAgJnȂ΂Ȃ܂B

     Ȃ́A[gŁAǗĂȂfBXvCŎsĂ
     B ``Section 5'' ֍sĂB

  o  ̂ƁB

     j[XO[v͒҂ɂm点΁A悤
     w͂܂BȂ菇cȂAA҂ɂm点
     BĂ΁A̎wXVł܂B

  4.  Ȃ́A[JR\[ŎsAX gŋNĂ܂B

  ̃R\[gNA X11 ȊÕOtBbNAvP[
  VŎg܂H

     ͂
        R\[ŕ̃EBhEVXe𓮂悤ɂ
        łBfBXvC}l[WƓɎgp邱Ƃ͍
        B́AR̂ŁA``Section 9'' ֍sAǂ̂悤
        Ƀ[gzXg̔F؂Lɂ邩ĂB

     
        ǗĂȂR\[gĂ܂AǗꂽ
        ɂł܂B ``Section 7'' ֍sĂB

  5.  Ȃ́AǗĂȂ[gfBXvCŎsĂ܂B

  Ԃ X  fBXvC}l[WƋɓ܂B
  ߂ɁAX \tgEFA XDMCP T|[gĂ܂BX [ƁAPC 
  Mac ̃T[hp[eB X \tgEFAAĂAT|[g
  Ă܂Bj[͕̒ŁA'startup mode' 
  'session' ̂悤Ȃ̂TĂB"XDMCP Query" ~̂ŁA
  OCzXg̖O IP AhXzXg⍇ (query
  host) ɐݒ肵܂B̌AX T[oZbg܂B

  o  [Ul[ƃpX[h𕷂Ă鏬ȃEBhE\ꂽ
     AfBXvC}l[WƂ̐ڑ͐Ă܂B ``Section 8''
     ֍sĂB

  o  ȃEBhE\ꂸAX T[onO悤Ɍ邩A
     ́AfBXvC}l[Wɐڑł܂ƕ
     AfBXvC}l[WTKv܂B ``Section 6'' 
     sĂB

  XDMCP gzXgƂ̂Ƃ̕@TȂȂAȂ X
  T[o\tgEFÁASɂĂЂǂĂƎv܂B Tk
   Makefile  SECURITY_FLAGS ̃Rg͂Ƃ́APɕs
  ̑ËłAȂ̃\tgEFAXV邱ƂB̑֎iłB

  6.  Ȃ́AfBXvC}l[WƂƂł郊[gfBXv
  CŎsĂ܂AƂ Ă܂B

  Cɓ̃zXgŁAׂẴvZX̃Xg𓾂āAxdm 
  vuelogin 삵Ă邩mFĂB̂悤

  ps -ef | grep xdm

  ÁA

  ps -ef | grep vuelogin

  A邢́A

  ps aux | grep xdm

  Ƃ܂ (R}h͎sĂ OS ɂĈقȂ܂)B

  o  xdm sĂzXgAł\\ ``Section 5'' 
     ߂Axdm  vuelogin sĂzXgɁAXDM zXg
     XAēxĂB

  o  ǂɂ xdm  vuelogin ȂȂA``Section 7''
     ֍sĂB

  7.  Ȃ́AǗłfBXvCŎsĂ܂AfBXvC}l
  [W܂B

  ̂ǂ炩̕@ X T[oNĂȂAǗĂȂfB
  XvCƂĎsł܂B

  o  Unix ñVXe x11start  xinit gpĂB

  o  PC-XView, eXodus, eXceed ̂悤ȃT[hp[eB̐igpĂ
     B

  VXeǗ҂𑊎ɂȂÁAȂVXeǗ҂
  ݒt@CȂȂA ``Section 9'' ֍sAxdm 
  g킸AS X T[oɋN邩włB

  X [̂悤ȊǗĂȂ[gfBXvCŎsĂāAfB
  XvC}l[WꂸAVXeǗ҂̏ȂȂAZ
  LeBɐ[Ȗ肪邱ƂɂȂ܂B Tk  Makefile 
  SECURITY_FLAGS ̃Rg͂Ƃ́A󋵂邾łA
  ̊ Tk ׂ̂Ă̋@\gB̕@łB

  fBXvC}l[W邽߂ɁAVXeǗ҂͉L̎菇s
  Ȃ΂Ȃ܂B

  7.1.  Step A - VXe xdm  ݒt@CҏW܂B

  xdm Ȃ΁Ãt@C͒ʏ

       /usr/local/lib/X11/xdm/config

  ɂ܂B

  HP-VUE Ȃ΁ÁA

       /usr/vue/config/Xconfig

  ɂ܂B

  pXȂȂA``Step C of Section 7'' ɈڂāApX𓾂Ă
  BʁAVXeݒu̐ݒ́AقƂǐsĂ
  B

  HP-VUE Ȃ΁AŎn܂s܂B

       Vuelogin*xdmMode

  ́AĂRg͂܂BŎn܂s܂B

       Vuelogin*authorize

  ́AԈႢȂRg͂ĂB

  ɍE܂AVXeǗ҂͂̃t@C̃pXύX
  ȂB

       Vuelogin.servers

  

       DisplayManager.servers

  ́AXftHg̒n_ȊO܂B

  7.2.  Step B - VXe xdm  T[ot@CҏW܂B

  xdm Ȃ΁Ãt@C

       /usr/local/lib/X11/xdm/servers

  ɂ܂BȂ΁A``Step A of Section 7'' ֈڂĂBHP-VUE
  Ȃ΁A

       /usr/vue/config/Xservers

  ɂ܂B

  [JR\[ŃOC邱ƂIԂȂÃt@CɃGg
  Ȃ΂Ȃ܂BʏAĂ̂ŁACɂKv͂
  BAĂȂ΁Axdm  vuelogin  man y[WŒ
  ׁAǂ΂Ă\\ʁÂ悤
       :0 Local local /usr/bin/X11/X :0

  Ə܂B[gfBXvC烍OCÃR\[ŏ X
  sȂȂA̍s폜ׂłBłȂ΁AVXe
  ̗グŃR\[ X T[oN܂I

  7.3.  Step C - xdm f[N悤B

  VXe̋N񂪕ێĂ /etc/rc, /etc/rc.local,
  /etc/rc2.d/S93xdmserver A͈t@CɁAu[gɃfBX
  vC}l[WNsǉ܂BSun VXeȂ΁A
  ʎ̂悤

       /usr/bin/X11/xdm -config /usr/local/lib/X11/xdm/config

  łBHP-VUE Ȃ΁A

       /usr/vue/bin/vuelogin -config /usr/vue/config/Xconfig

  łB

  7.4.  Step D - f[̋N

  root fBNg 'root' ŏL̃R}ḧs邱
  ŁA߂āAf[͋N܂B[JR\[ X s
  ƂȂA}V[u[gĂB

  ^悯΁AfBXvC X T[oZbg邱ƂŁAɁA
  [U ID ƃpX[h₷鏬ȃEBhE\͂łB
  ȂA߂łƂAȂ́AAǗꂽfBXvCŎsĂ
  ܂B ``Section 8'' ֍sÂ͉ĂB

  fobOsĂfBXvC}l[W𓾂邱ƂłȂȂA
  ̓j[XO[vɂm点΁A悤w͂
  BȂ[JR\[gpĂȂA܂AɊǗ
  ĂȂfBXvCƂĎsł܂B΁A ``Section 9''
  ֍sĂB

  8.  Ȃ́AfBXvC}l[WgpĂ܂AT[o͂܂
  Sł͂܂B

  Lɏ]`FbNĂB

  8.1.  Step A - Ȃ̃z[fBNg .Xauthority  t@C 
  ׂłB

  ̃t@ĆAȂ̂߂ xdm ɂč쐬܂BǗꂽ
  fBXvCɍ쐬Kv͂܂Bn xauth  man y[W
  Ă (󒍁Gꂽ́ALq悤
  ŁA2001N0208݁AuʏA xauth ͍ŏɔF؃t@ C쐬
  ߂ɂ͎gȂB xdm sBvƁAXVĂ܂)B

  8.2.  Step B - .Xauthority  t@C̓OCƏC͂
  B

       ls -l $HOME/.Xauthority

  sAׂĂB

  8.3.  Step C - .Xauthority  t@C͂Ȃ̃fBXvC̃Gg
  ͂łB

       xauth list

  sAׂĂB

   step ̂ǂꂩŎsAfBXvC}l[W̃OC
  dg݂ɕs܂B``Section 7'' ̎ēxӐ[`FbN
  ĂBԈႢtȂȂAj[XO[v͒
  ҂ɂm点΁A̐lԈႢ邩܂B
  Ȃ̃VXeɕKvȕʂłȂAPƂŁAA҂ɂ
  m点BĂ΁Ãt@Cɂǉł
  B

   step ׂ̂ĂĂAԂA܂ xhost F؂gp
  ܂Bxauth Sɂ邽߂ɁAF؂zXgĂ͂Ȃ܂B
  ̃VFXNvg͊mɂׂĂ̔F؂zXgXg폜
  B

  #!/bin/sh
  for host in 'xhost | sed 1d' ; do
      echo removing $host from access control list
      xhost -$host
  done
  echo removing general access from access control list
  xhost -

  ̌ATk ͈SɌ͂łB

  l鍢Ƃ܂\\ׂĂƂɁATk
  ׂ͂Ă̂̂̋Nۂ邩܂AȂȂAfBXvC
  ̐ڑۂ邩łBꂪNȂA ``Section 10'' ֍s
  A΂ĂB

  9.  Ȃ́AǗĂȂ[JR\[ŎsĂ܂B

  ́A󋵂łB"xinit"  "x11start" ̂悤ȓ͂
  sƂɂAX T[oNAT[o̓ftHgňSł͂Ȃ[
  hŋNĂ܂B

  Vivek Khera ɂ镶
  <ftp://ftp.aud.alcatel.com/pub/tcl/docs/Xauthority.gz> (
  <ftp://ftp.cs.columbia.edu/archives/tcl/contrib/docs/Xauthority.gz>
  ł܂) ASȃ[h X N@Ă
  B (󒍁G2001N0208݁AO҂͔F؂KvŁA҂̓N؂
  Ă܂B IIJ
  <ftp://ftp.iij.ad.jp/pub/misc/tcl/sorted/packages-7.6/misc/Xautority/Xautority.gz>
  ł܂B)

  Sun ̕ł邱ƂɒӂĂ\\j[XO[v̓ǎ҂
  瑼̃vbgtH[̏ł邩܂B

  Bennett Todd  Vivek Khera ̃hLg̕ <http://ce-
  toolkit.crd.ge.com/tkxauth/bet-1.txt> 쐬ĂāAfBXvC̈
  SɌシ邱ƂĂ܂B

  S X T[o̊Ǘ邽߂̗D
  <http://www.xs4all.nl/~zweije/xauth.html> ({
  <http://www.linux.or.jp/JF/JFdocs/Remote-X-Apps.html>)  Vincent
  Zweije ɂďALinux 'mini-howto' Ƃēł܂B

  10.  X T[o͈SłAɁATk ̐ڑۂĂ܂܂B

  ܂Axterm ̋NĂBN܂H

     ͂
        ȂāAsKȐlł傤BȂ́AUltrix }V[ŎsĂ
        ܂ˁB DEC 񋟂Ă xterm ̂悤ȃNCAg\tgEF
        A /usr/lib/libX11.a NĂɂւ炸ADEC 
        xauth ̋@\ /usr/lib/libX11.a Ɋ܂łȂ߂̕s
        BcOȂAB̉ MIT { X11 ̔zz
        A\AȂ̃VXeŃRpCA libX11.a  Tk
        ăN邱ƂłB

     
        ǂ킯AȂ xdm OC̎dg݂sĂ܂B
        ``Section 7'' ɖ߂AӐ[`FbNĂBs
        łȂȂA ҂̓j[XO[vɂm点
        ΁AĂ炦ł傤Bs̐VΏ@
        AЁA҂ɂm点BĂ΁A̕
        XVł܂B

  11.  {ɂ

  { Linux Japanese FAQ Project s܂B|Ɋւ邲ӌ
   JF vWFNg <JF@linux.or.jp> ɘAĂB

     19 May 1997 ł̖
        |: { _ <hng@ps.ksky.ne.jp>

        Z:
         L <takei@webmasters.gr.jp>A
        { K <kokamoto@itg.hitachi.co.jp>

