cannot load a remote GUI app.

[Chacalinc]

Hi all,

I'm trying to load a GUI app from my PC (Debian). The procedure is as ussual, but my PC can not load the app:

1. telnet remote_host (SUN Solaris 8)
2. on SUN: export DISPLAY=my_PC:0.0 (my_PC is in /etc/host on SUN, used IP too)
3. on my PC: xhost +remote_host
4. for test on telnet window: "xload" or "xclock"
5. error: can not open display.

Any ideas?

thanks in advance.

 

[flugh]

I know I've seen at least one Debian install I did put the '-nolisten tcp' (something similar to that anyway) option in when it started X. Do a 'netstat -pnat' and see if the Xserver is listening on port 6000. Also could be an iptables or ipchains rule blocking it? You could also try an 'strace -o Xdied.log xclock' just to see where it's dying (maybe /etc/hosts is mangled, or you'll get a more verbose description of the error?).


----
JBR

 

[Chacalinc]

netstat -pnat ... port 6000 is not listening...
iptables/ipchains is not running.
strace command is not the same on Solaris, I can not use it.

Where do you modify the '-nolisten tcp'? I'm not familiar with the X server, I just use it ;o)

Xnest works, (listen to port 6001) but I can not use it because I have not enough fonts, so it get to the login dialog.

Thanks.

 

[Chacalinc]

No ideas yet?
I don't know what to do now, tryed everithing...

 

[daFranze]

"xhost +" (no restriction at all) works?

telnet back to your debian host from Solaris, type "who" (at least in Solaris) the name of your host in () must be the parameter to "xhost +thenameofthehost"

Regards
-- Franz
Sorry I'm not a native spaeker, I'm from Munich, Germany - "Home of the Whopper", oh no, "Home of the Oktoberfest" ;-)
Solaris System Manager; I used to work for Sun Microsystems Support (EMEA) for 5 years

 

[Chacalinc]

No, it does not work...

daFranze, I need to telnet from my PC to run something from SUN (server). Now I must to get in the site to install Oracle, I just want to do it from my station.

I know the problem is my PC, from other stations (Win, RH, etc) it does work.

Thanks anyway.

 

[daFranze]

Sorry for late Reply....

An Example:

[fp@admin6] % rsh spqr -l root
Last login: Wed Feb 4 17:14:14 from admin6.mydomain.de
# who
root pts/1 Feb 17 11:15 (admin6.mydomain.de)
#

I need to set "xhost +admin6.mydomain.de" to allow access to my X Server... If your Host is not listed in /etc/hosts or Nameservice your IP Adress is listed in () you need to 'xhost +ipadress' this!


Regards
-- Franz
Sorry I'm not a native spaeker, I'm from Munich, Germany - "Home of the Whopper", oh no, "Home of the Oktoberfest" ;-)
Solaris System Manager; I used to work for Sun Microsystems Support (EMEA) for 5 years

 

[Chacalinc]

thanks daFranze, but that's not the issue. As you can see in my firsts post (the question) I do the "xhost +host".. in fact I know how it must be done... I do it always!! the problem is my machine. With other machines I do the same and I have no problem.

The problem is pointing out to the flugh's post, regarding '-nolisten tcp'...

when I see the Xprt running with 'ps -ef' I can see the '-nolisten tcp' in the command issued.. so I must to know what file i must to change in order to start the Xprt (Xserver) with NO '-nolisten tcp'.

Thanks anyway for your effort!!!

 

[flugh]

It's somewhere in /etc/X11 I'd say. Start by doing a 'grep -nolisten /etc/X11/*', then 'grep -nolisten /etc/X11/*/*', and so on, until you find the "offending" file. It's probably named 'xserver', 'xinitrc' or similar. Unfortunately, my Redhat 9 box doesn't show it anywhere, or I'd give you more info. It's something I did 'way back when' before the gray hairs depleted my memory ;-)

----
JBR

 

[Chacalinc]

Yes, I saw files 'xserver', 'xinitrc'.. both had '-nolisten tcp', I removed the option, rebooted but the problem was the same... I don't know why but I edited all files with that option but the problem is the same!

<hung>could it be in another file out of these ones? </hung>

Thanks & Cheers.

 

[flugh]

Keep grep'ing! Try telnet'ing to the solaris box (we'll talk about installing ssh and getting rid of telnet later ;-) ), then telnet'ing back home to port 6000, just to make sure it's not a firewall thing.

Found this post (old, but Debian and still informative):

http://lists.debian.org/debian-security/2002/debian-security-200211/msg00308.html

This was good too:

http://www.xs4all.nl/~zweije/xauth-6.html

This page:

http://www.linuxsecurity.com/docs/harden-doc/html/securing-debian-howto/ch-sec-services.en.html

said this:

This is the default behavior in Xfree 4.1.0 (the Xserver provided in Debian 3.0). If you are running Xfree 3.3.6 (i.e. you have Debian 2.2 installed) you can edit /etc/X11/xinit/xserverrcc to have it something along the lines of:

     #!/bin/sh
     exec /usr/bin/X11/X -dpi 100 -nolisten tcp

Can you try running your local X server with:

/usr/bin/X11/X -dpi 100

? Not sure what's causing the problem, but maybe you can bypass it until you nail it down.

----
JBR

 

[Chacalinc]

a step forwad!!!

I edited the file /etc/X11/gdm/gdm.conf and now I have remote GUI from the same network, example:

my pc: 192.168.1.72
solaris: 192.168.1.16

so.. xhost +solaris , telnet solaris, export DISPLAY and &quot;xlogo&quot; works!!

now my problem is another network (i have telnet and ssh, so i can get in to servers):

xhost +hp.ux, telnet (or ssh) hp-ux (192.168.11.100), export DISPLAY (can ping with no problem), xlogo and get the same problem... but almost!!!

at least I have something in my same network.

ps -ef | grep X:

root 433 1 0 00:50 ? 00:00:00 /usr/bin/X11/xfs -daemon
root 508 504 0 00:50 ? 00:00:00 logger -p lpr.notice -t Xprt_64
root 512 506 0 00:50 ? 00:00:00 /usr/X11R6/bin/Xprt -ac -pn -nolisten tcp -audit 4 -fp /usr/X11R6/lib/X11/fonts/Type1,/usr/lib/X11/fonts/Type1,/var/lib/defoma/x-ttcidfont-conf.d/dirs/TrueType,/usr/X11R6/lib/X11/fonts/100dpi,/usr/X11R6/lib/X11/fonts/75dpi,/usr/X11R6/lib/X11/fonts/misc,/usr/lib/X11/fonts/100dpi,/usr/lib/X11/fonts/75dpi,/usr/lib/X11/fonts/misc :64
root 558 555 1 00:50 ? 00:00:12 /usr/X11R6/bin/X :0 -deferglyphs 16 -audit 0 -auth /var/lib/gdm/:0.Xauth vt7
vcuevas 583 1 0 00:52 ? 00:00:00 xterm -class UXTerm -title uxterm -u8


Thanks!

 

[Chacalinc]

now I only need (I guess) to have Xprt with the '-nolisten tcp' out...

 

[flugh]

Is there some kind of security-level setting involved maybe? Sounds like there's a security policy being enforced somewhere.

Also, Xprt seems to be the X print server (Xfree86 4.2.etc). That shouldn't be a problem with opening remote windows. Are you sure there's no firewall rules blocking you along the way? It's working inside the LAN it sounds like, so maybe traffic isn't being forwarded from the 'wild' to your internal box? I'd still try going to the remote box, then telnetting back to the target box's port 6000.

Also, port 6000 is the default port X listens on. Nothing funky has it listening on 6001 or something, does it?

----
JBR

 

[Chacalinc]

actually, I'm not sure if there is some restriction from my PC to the another network (onlu a router), but I will ask tomorrow.. (quite late here).

Anyway, in my same LAN (192.168.1.0) there are several W2K boxes with reflection and they can get GUI from that network (192.168.11.0 I mean), so I think there is no restriction in the network.

If you say Xprt is printer, so I'll let it as is...

Regarding to my PC, ipchains/iptables are not used.

 

[Chacalinc]

BTW: Xnest to solaris (my LAN) no problem (except some fonts, but not an issue).
Xnest to hp-ux (other LAN) cann't reache them...

 

[flugh]

I'm pretty much out of suggestions since I don't have a test situation here at home (running XP right now, getting ready to play some Day of Defeat ;-)). I still have to point my finger at a routing/nat/similar problem somewhere along the line. I have to bow out and hope someone else can offer something.

Good luck on it. Will keep an eye out for the final fix!

----
JBR