new solaris 10 installation - allowing xdmcp from local network

Hello everyone,

I just installed Solaris 10 on a Sun Enterprise 220R and I would like to have access to xdmcp from within my network (port 177 is closed on my external routers)

I have checked the gdm config file and its all set.

I am trying to connect using reflectionx or xming.

I heard I might need to enable the udp port in SMF but I have no idea how to do that.

Thank you

Luc

[423 byte] By [LumaMa] at [2007-11-27 5:25:58]
# 1

If nobody gives you an answer, below are some

links that might get you in the right direction.

http://docs.sun.com/app/docs/coll/47.16

-everything you ever wanted to know about Solaris 10

http://www.oreillynet.com/pub/a/sysadmin/2006/04/13/using-solaris-smf.html?page =1

-just a brief O'Reilly getting to know SMF

http://sunfreeware.nssl.noaa.gov/

-the openssh pkg for Solaris 10 has a step-by-step for using SMF with openssh

cat /etc/services

add your port/protocol there

cloakesa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 2
I reinstalled Solaris from start and I selected to install EVERYTHING (it took a while!) then I checked and it appears cde-login is still not in there. if I do a svcs cde-login it says its not found.Any ideas how I can fix this?ThanksLuc
LumaMa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 3

which solaris 10 update are you running? 01/06 06/06 or 11/06?

which kernel revision are you running? uname -a

# cd /var/svc/profile

# grep -i cde-login *

one of the profiles should have a cde-login

(and generic.xml should be linked to one that contains it)

Also you did a fresh (destructive) install, not an upgrade?

cloakesa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 4

External services (like XMDCP) are disabled under the "secure by default" profile, beginning with update 3.

You have to edit the 'udpport' property on the dtlogin service. It's probably set to zero. Remove it entirely and the service will allow external connections.

--

Darren

Darren_Dunhama at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 5

Hi there,

I am running a 220R and yes I did a destructive install and not an upgrade.

not sure which version I am running but here is the info from the uname -a

bash-3.00# uname -a

SunOS nammu 5.10 Generic_118833-17 sun4u sparc SUNW,Ultra-60

bash-3.00# cd /var/svc/profile/

bash-3.00# grep -i cde-login *

bash-3.00#

perhaps when I get home I should download the latest release of Solaris 10 and burn it and give that a try?

I have an actual dvd copy of Solaris but it won't boot on the 220R :(

Thanks

Luma

LumaMa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 6

ok I have renistalled solairs u3 and now I have the cde-login stuff.

I then set null to the smf service dtlogin/args

I rebooted and checked the prop and its still set to null, its actually the same as my working work server.

I try to connect and same problem.

no firewall in the way (local to local)

anything else I need to enable/check?

Thanks

Luc

LumaMa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 7
Hi darrenWhat do you mean by "secure by default" profile in Solaris 10U3?Also how to view/edit the 'udpport' in the dtlogin service?Many thanks
goSolarisa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 8

If you choose "secure by default" when doing a fresh install of Solaris 10 11/06 (also called Update 3) then ssh is the only service enabled by default for remote access.

To allow XDMCP from the local network, you should create a file called /etc/dt/config/Xaccess with this in it:

*.your.domain.name

*.your.domain.nameCHOOSER BROADCAST

and then, as mentioned previously, fix the dtlogin command line args to stop it setting udpPort to 0. you do this with

svccfg -s cde-login setprop dtlogin/args=\"\"

svcadm restart cde-login

(or, if you hadn't enabled it yet, "svcadm enable cde-login" as the second step).

If you want the chooser to work, you'll also need to do:

svccfg -s x11-server setprop options/tcp_listen=true

svcadm restart cde-login

mind you, having done all this I now find myself unable to get back to the "local" login prompt - you can't exit the chooser like you used to be able to do in earlier Solaris 10 releases - if anybody has any ideas on this, I'd love to hear it!

Cheers,

Cos.

ajcosa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 9
Anyone know how to get an Xnest tunnelled back through the ssh only deafult setup? I would have thought doing an ssh me@host -X "/usr/X/bin/Xnest -query localhost" would have worked?
Spanglywiresa at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...
# 10

> Anyone know how to get an Xnest tunnelled back

> through the ssh only deafult setup?

>

> I would have thought doing an ssh me@host -X

> "/usr/X/bin/Xnest -query localhost" would have worked?

I don't think it'll be quite that simple. If -query is doing a normal XDMCP thing, then there's no tunnel for it.

SSH (with -X) sets up a single forward tunnel as an X proxy. So you can reach the local X server (on port 6000). There is no tunnel by default for XDMCP.

I'm not as familiar with how xnest does all it's stuff. Sorry if I'm misunderstanding part of it.

--

Darren

Darren_Dunhama at 2007-7-12 14:46:26 > top of Java-index,Solaris Operating System,Solaris 10 Features...