[ILUG] Small Distro to use as an X server

[Brian O'Mahony]

In regards to the systems being compromised, these are development boxes that get blown away on a regular basis. We even give some people the root password on occasions as worst case scenario we reinstall the box. They are used as app/db servers for application testing. We try to keep it as simple as possible. We don’t use the same passwords for live systems as that would be stupid. :)

I will try your suggestions this afternoon (hopefully)

Thanks again

B

-----Original Message-----
From: Kevin Lyda [mailto:kevin at ie.suberic.net] 
Sent: Friday, October 08, 2010 2:06 PM
To: Brian O'Mahony
Cc: Ivan Griffin; ilug at linux.ie
Subject: Re: [ILUG] Small Distro to use as an X server

On Fri, Oct 8, 2010 at 13:22, Brian O'Mahony
<brian.omahony at curamsoftware.com> wrote:
> Ye the tech was a bit underwhelming. But he was a clearquest tech not an AIX tech. And AIX support wouldn’t touch it as it works fine to Linux & solaris. So he was our only option.
>
> In regards to the ssh -Y option, I don’t think im following you. AIX doesn’t come with ssh. I know, a crime in its self, but these are development boxes that get wiped so telnet is fine for us.

Er...

When you log onto the AIX box you type a password.  That's sent in the
clear.  If you use the same password on the AIX box as you use on
other servers, you can assume anyone has access to those servers now
with your credentials.

All X traffic is being sent in clear text as well.  Any sensitive info
is therefore also compromised.

For your issue, what you might do is do the following:

  aix-host$ DISPLAY=linux-host:0 xdpyinfo > linux-x-server-info
  aix-host$ DISPLAY=cygwin-host:0 xdpyinfo > cygwin-x-server-info

See which extensions are different.  Perhaps there are missing ones on
cygwin that you could enable?  Or perhaps there are ones that are
buggy on cygwin that the AIX X client is using; you could see about
disabling them.

Kevin

-- 
Kevin Lyda
Dublin, Ireland
US Citizen overseas? We can vote.
Register now: http://www.votefromabroad.org/


The information in this email is confidential and may be legally privileged.
It is intended solely for the addressee. Access to this email by anyone else
is unauthorized. If you are not the intended recipient, any disclosure,
copying, distribution or any action taken or omitted to be taken in reliance
on it, is prohibited and may be unlawful. If you are not the intended
addressee please contact the sender and dispose of this e-mail. Thank you.