* Eric Mosley <ericm@iol.ie> writes:
How do I get rid of this and stil use X11. Is using MIT-Cookies, xauth a real big change??
Do you start your X-Server using "startx"? You could try starting it using "xdm" instead. That way the file ~/.Xauthority will be created. Or you change "/etc/rc.config" DISPLAYMANAGER="xdm". They same should work for "kdm". You can make these changes using "yast", Administration des Systems, Login-Konfiguration, ... The above worked for me, if I run Nesssus as a normal user. If I run Nessus as root I still get the message. You should try "man xauth" to get further information. Also check "/usr/X11R6/lib/X11/xdm/xdm-config". There you should find the entry: DisplayManager._0.authorize: true DisplayManager._1.authorize: true DisplayManager.*.authName: MIT-MAGIC-COOKIE-1 You see: the correct settings for MIT-Cookies are already set by SuSE (SuSE 6.0). Here some information SATAN tells you about MIT-Magic-Cookies: * Use the X magic cookie mechanism or equivalent. With logins under control of xdm, you turn on authentication by editing the xdm-config file and setting the DisplayManager*authorize attribute to true. * When granting access to the screen from another machine, use the xauth command in preference to the xhost command. The protection scheme used by SATAN is in essence the same as the scheme used by many implementations of the X Window system: MIT magic cookies. These secrets are normally kept in the user's home directory, in a file called .Xauthority. Before it is granted access to the screen, keyboard and mouse, an X client program needs to prove that it is authorized, by handing over the correct magic cookie. This requirement prevents unauthorized access, provided that the magic cookie information is kept secret.
Also, can I comment out in inetd.conf telnet shell and login and still start a new xterm?
I think xterm has nothing to do with telnet. Just comment out everything, do a "/sbin/init.d/inetd stop" and "/sbin/init.d/inetd start" and try to start "xterm". It will work! BTW: SuSE 6.0: There is a typo in "/sbin/init.d/inetd". That's why "/sbin/init.d/inetd restart" won't work. Use "resart" instead or fix it. PS: SuSE: Could someone please configure this mailing list, so that I will not get a dozen errors, if someone is on vacation or if his or her e-mail address doesnt exist. It's pissing me of. :-( -- Mark Lutz Accept German and English