Irix Xvnc via inetd - anybody know how?

["Beerse, Corné"]

> -----Original Message-----
> From: Richard Gillman [mailto:rgi "at" itss.nerc.ac.uk]
> 
> I'm trying to get a VNC service running on an Irix 6.5 system. But I
> keep getting


Can you do `Xvnc :1` and then view the grey screen with `vncviewer irix:1`?

Then try `Xvnc :1 -query localhost` and see a login window.

If you have the above working, the next must somehow work too.

> 
> vncviewer: ConnectToTcpAddr: connect: Connection refused
> Unable to connect to VNC server

Somehow the viewer cannot connect to the server. Is this with a time-out or
immediate?

> 
>>>>>>>>>>log partly removed <<<<<<<<<<<<<<<<
> Fatal server error:
> XDMCP fatal error: Session declined No valid address

This indicates that `Xvnc :1` above should work but `Xvnc :1 -query
localhost` does not. Try `Xvnc :1 -query irix` where irix is the name or ip
address of the irix machine. Then also try localhost and 127.0.0.1.

If it works manually but not from the inetd, i think you have a security
violation.

> 
> I've used Jeff Vincent's "Setting up VNC on Linux" as a guide.
> 
> What I've done: in /etc/inetd.conf, added
> 
> vnc-640x480x8   stream tcp nowait root /packages/vnc/3.3.3r2/bin/Xvnc
> Xvnc -inetd -query localhost -once -geometry 640x480 -depth 8
> vnc-800x600x8   stream tcp nowait root /packages/vnc/3.3.3r2/bin/Xvnc
> Xvnc -inetd -query localhost  -once -geometry 800x600 -depth 8
> vnc-800x600x16  stream tcp nowait root /packages/vnc/3.3.3r2/bin/Xvnc
> Xvnc -inetd -query localhost  -once -geometry 800x600 -depth 16

You use the root user. Exchange that with an other user like sys, bin, or a
plain (new created) user.

SOme systems have restrictions for users with user numbers below 100 or
above 60000.


> 
> (run as root so it has permissions to write to its log file) and
> /etc/services,

There is no need for the above to have access to /etc/services, that's
handled by inetd.

For writing it's log file, better give the user used the write rights, if
needed. I don't know irix on this detail but does it need to have write
access there, isn't it handled by inetd too? or even by the syslog stuff?

> 
> vnc-640x480x8  5950/tcp                        # VNC
> vnc-800x600x8  5951/tcp
> vnc-800x600x16 5952/tcp
> 
> and restarted inetd.
> 
> All this works fine on Solaris.
> 
> I've checked /var/X11/xdm/xdm-config to see if there is a line
> DisplayManager.requestPort: 0 to comment out, there isn't. Xaccess has
> "* # any host".

Can you adapt one of the lines on the solaris machine? Exchange "-query
localhost" with "-query irix" and see if you get a xdmcp login at the irix
machine if you select a view to the changed port at the solaris machine:
`vncviewer solaris:port` where solaris is the solaris machine and port is
the port with the altered line.

If the solaris machine has CDE, can you select a 'remote login' at the
solaris login window? THen select the irix machine from the list.

> 
> I found a suggestion to modify Xservers, add the lines 
> 1: local /usr/bin/X11/X -bs -nobitscale -c -pseudomap 4sight 
> -solidroot
> sgilightblue -cursorFG red -cursorBG white
> 2: local /usr/bin/X11/X -bs -nobitscale -c -pseudomap 4sight 
> -solidroot
> sgilightblue -cursorFG red -cursorBG white
> 
> ..this just confused xdm, got error messages in SYSLOG when I 
> restarted,
> the error message in X1msgs didn't change.

You should exchange "/usr/bin/X11/X" with "/path/to/vnc/Xvnc". That would
have given  you a for-ever running Xvnc server. Also check the syntax of the
Xservers file to see if you need to specify the display number if it is not
:0. Then specify :1 (and :2) if needed.

> 
> So, has anyone had this "Session declined No valid address" 
> problem, how
> did you get over it? Is there anything else I can try.

The messages that the used user is restricted are most times verry confusing
to guide hackers into darkness.

> 
> I've seen this question asked before, but haven't seen any answers.

Checked the arghives?


CBee