[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference bulova::decw_jan-89_to_nov-90

Title:DECWINDOWS 26-JAN-89 to 29-NOV-90
Notice:See 1639.0 for VMS V5.3 kit; 2043.0 for 5.4 IFT kit
Moderator:STAR::VATNE
Created:Mon Oct 30 1989
Last Modified:Mon Dec 31 1990
Last Successful Update:Fri Jun 06 1997
Number of topics:3726
Total number of notes:19516

179.0. "DECW$SERVER_ACCESS_*.DAT files" by OIWS20::BRYSON () Sat Feb 11 1989 23:47

Let me see if I've gotten these files correct...

There are two files that the server uses for security when a session manager
is NOT running:

	SYS$MANAGER:DECW$SERVER_ACCESS_ALLOWED.DAT
	SYS$MANAGER:DECW$SERVER_ACCESS_TRUSTED.DAT

Their functions are as follows:

1. *_ALLOWED.DAT:    Identifies "protocol node user" that may make CONNECTIONS
		     to the display server.

2. *_TRUSTED.DAT:    Identifies "protocol node user" that may make CONNECTIONS
		     and is allowed to make CHANGES to the current security
		     database through X*Host requests.

I was told at one time that you should have the node/user in both files if
you want CONNECTION permission and permission to MODIFY the security
database.  I've checked the permission on the system and it seems that
if you want connectivity and security modification permission that it is
only required to have the node/user in the *_TRUSTED.DAT file.  Is this
correct?

Then, once the session manager starts upon login, it REDEFINES the security
on the server to be the node::user list found in the DECW$SM_GENERAL.DAT file,
plus the username that started the session.

Is all of this correct?

David

T.RTitleUserPersonal
Name
DateLines
179.1Transport not ProtocolOIWS20::BRYSONSun Feb 12 1989 10:087
    >  "protocol node user"...
    
    Sorry.  That should be "transport node user"
    
    David
    

179.2AlmostSTAR::BRANDENBERGIntelligence - just a good party trick?Mon Feb 13 1989 12:4018
    Almost correct.  The bit about the session manager is fine.  The
    server uses these files in the following manner at every server reset:
    
    Destroy Trusted Access List.
    Destroy Allowed Access List.
    If Trusted file is readable Then
    	Create Trusted Access List from file
    Else
    	Assume Default ("* 0 SYSTEM")
    Endif
    If Allowed file is readable Then
    	Create Allowed Access List from file
    Else
    	Copy Trusted Access List to Allowed Access List
    Endif
    
    						- monty

179.3That explains itOIWS20::BRYSONMon Feb 13 1989 19:398
Thanks!  That explains why when I had lines in BOTH files and performed
an XListHosts, that these lines appeared twice in the permission list output.

Thanks again,

David

179.4Starting a server WITHOUT decw$loginoutDCC::ALDENKen AldenTue Feb 21 1989 11:419
What is the magical incantation to start a server WITHOUT starting the program
that puts up the logo and login window? I would like to have just a simple
server, with no window manager or any other window up on my display. I plan to
push UTOX screen images to the background display, and so the previous notes
are of interest to me.

Thanks,
-Ken

179.5This is how I do it..ASIA::MCLEMANWorkstations 'R' UsWed Feb 22 1989 12:0117
I run a 4 meg WS with just a server and start the session on the 6220 host.

So on the workstation, my systartup is a couple of lines like so:

	$ @startnet
	$ def decw$ignore_subprocess true  ! Let DECW$startup run inline
	$ @decw$startup server      ! P1 = server = just start the server
	$ submit/queue=boot_queue remote$session.com

Where boot_queue is the queue on the boot node and the session command file
just defines a display and executes DECW$STARTLOGIN.EXE.

The DECW$SERVER_ACCESS_ALLOWED/TRUSTED database contains the boot node and 
 the username.  Works fine.

					Jeff

179.6Everthing execept DECW$STARTLOGINOIWS20::BRYSONWed Feb 22 1989 14:3721
    If you are wanting to perform everything that DECW$STARTUP.COM normally
    does  (starts server, libs, and apps) except create a display device
    and run DECW$STARTLOGIN.EXE, then place the following command in
    SYSTARTUP_V5.COM:
    
    $ @SYS$MANAGER:DECW$STARTUP "" 0
    
    If P1 is NULL, then DECW$STARTUP goes through DECW$STARTSERVER,
    DECW$STARTLIBS, and DECW$STARTAPPS.
    
    P2 is the server number and currently all VMS workstations will only
    have one server (Supported that is).  DECW$STARTAPPS will stop
    just before performing the SET DISPLAY and RUN DECW$STARTLOGIN if
    P2 is not NULL.
    
    This method is good because it installs all sharable images and defines
    all the necessary logicals on the system.
    
    David
    

179.7Where is this feature documented?KOBAL::FULLERTONWed Feb 22 1989 17:0510
Can anyone tell me where these files are officially documented?

	SYS$MANAGER:DECW$SERVER_ACCESS_ALLOWED.DAT
	SYS$MANAGER:DECW$SERVER_ACCESS_TRUSTED.DAT

It is not found as one of the components in the V5.1 installation
guide.



179.8Not supported; just another benefit of your handy-dandy notes conferenceDECWIN::FISHERBurns Fisher 381-1466, ZKO3-4/W23Thu Feb 23 1989 12:325
They are not documented.  They are not supported.  They may change.  Note that
we are trying to figure out how to officially support remote session managers.

Burns

179.9VMS login on ultrix server??GIDDAY::KINGDont let the accent fool yuoFri Mar 10 1989 01:3033
    This is sort of related
    I am trying to get sessions started on an Ultrix V3.0 workstation
    from a VMS V5.1 host
    set disp/cre/node=node
    mc decw$startlogin
    
    the login windows appear and I can happily log in
    but what I find is the Window Manager dies in the DECW$SM.Log file
    is messages of the sort
    
    X error event recieved from server BadRequest bad request code
      Failed request major op code 109 X_changehosts
      Failed request minor op code 0 ( if applicable)
      ResourceID )x8006b infailed request (if applicable)
      Serial Number of failed request 45
      Current serial number in output stream 46
    Session error: %NONAME-E-NOMSG, Message Number 02db822A
    
    
    i.e. XLIB-E-ERROREVENT, error event recieved from server
    
    
    
    if I start a window manager on the Ultrix Box then I can quite happily
    start session manager etc... on it.
    
    The only security file I know of is X0.hosts which has the node
    in - ( do you need transport etc in it ?)
    
    just thought I'd ask
    \Tom King TSC Sydney
    

179.10Too Dynamic, sorry.STAR::BRANDENBERGIntelligence - just a good party trick?Fri Mar 10 1989 10:2015
    
    It's probably not going to fly.  Because of the perceived inadequacies
    of the X access control mechanisms, we boosted the VMS server with a
    special protocol type called "FamilyGeneric" used in the ChangeHosts
    request.  This protocol type is what allows us to perform access
    control on transport/node/username triplets instead of the usual
    transport/node pairs as well as change the trusted access list at
    runtime.  I doubt that the ultrix server is prepared to accept
    changehosts requests with this protocol type so, hence, the error.  I
    suppose the session manager should continue from this error trusting
    the remote server to have permitted appropriate access.  You should
    probably QAR this as a suggestion.
    
    						monty

179.11format of decw$server_access_* files?UTROFF::BROUWERSTue Mar 21 1989 04:121