Bug 63748

Summary:	pam_xauth doesn't copy correct cookie.
Product:	[Retired] Red Hat Linux	Reporter:	Need Real Name <antony.riley>
Component:	pam	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Aaron Brown <abrown>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	7.2
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-10-21 13:53:51 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Need Real Name 2002-04-18 11:20:31 UTC

Description of Problem:

pam_xauth doesn't copy the cookie that is actually used by xlib.

Version-Release number of selected component (if applicable):
7.2 latest upgrades, as of 17th April 2002

How Reproducible:
4 Servers, all had exactly the same problem.

Steps to Reproduce:

1. 
Log in via ssh (with X tunneling)
2. 
Su to root "su -"
3. 
Try and run an X application.

Actual Results:
It fails, because the cookie hasn't been copied.

Expected Results:
X application should run.

Additional Information:
/etc/hosts
----------------------------------------------------------------------------
127.0.0.1 localhost.localdomain localhost
192.168.0.1 MachineName
----------------------------------------------------------------------------

Changes to sshd_config (openssh from openssh-3.1p1-2)
----------------------------------------------------------------------------
Protocol 2
PermitRootLogin no
PasswordAuthentication no
X11UseLocalHost yes
----------------------------------------------------------------------------

Unclear how much these affect the problem.

X11UseLocalHost causes only 1 xauth cookie to be set (instead of two).

Basically:

If you have DISPLAY set to localhost:10, then the cookie that is used is
MachineName/unix:10, pam_xauth doesn't copy this.

-Antony

Comment 1 Tomas Mraz 2004-10-21 13:53:51 UTC

It works just fine with Fedora Core 2.