1145b7b3cSmrg#
2145b7b3cSmrg# Access control file for XDMCP connections
3145b7b3cSmrg#
4145b7b3cSmrg# To control Direct and Broadcast access:
5145b7b3cSmrg#
6145b7b3cSmrg#	pattern
7145b7b3cSmrg#
8145b7b3cSmrg# To control Indirect queries:
9145b7b3cSmrg#
10145b7b3cSmrg# 	pattern		list of hostnames and/or macros ...
11145b7b3cSmrg#
12145b7b3cSmrg# To use the chooser:
13145b7b3cSmrg#
14145b7b3cSmrg#	pattern		CHOOSER BROADCAST
15145b7b3cSmrg#
16145b7b3cSmrg# or
17145b7b3cSmrg#
18145b7b3cSmrg#	pattern		CHOOSER list of hostnames and/or macros ...
19145b7b3cSmrg#
20145b7b3cSmrg# To define macros:
21145b7b3cSmrg#
22145b7b3cSmrg#       %name		list of hosts ...
23145b7b3cSmrg#
24145b7b3cSmrg# To control which addresses xdm listens for requests on:
25145b7b3cSmrg#
26145b7b3cSmrg#	LISTEN		address [list of multicast groups ... ]
27145b7b3cSmrg#
28145b7b3cSmrg# The first form tells xdm which displays to respond to itself.
29145b7b3cSmrg# The second form tells xdm to forward indirect queries from hosts matching
30145b7b3cSmrg# the specified pattern to the indicated list of hosts.
31145b7b3cSmrg# The third form tells xdm to handle indirect queries using the chooser;
32145b7b3cSmrg# the chooser is directed to send its own queries out via the broadcast
33145b7b3cSmrg# address and display the results on the terminal.
34145b7b3cSmrg# The fourth form is similar to the third, except instead of using the
35145b7b3cSmrg# broadcast address, it sends DirectQuerys to each of the hosts in the list
36145b7b3cSmrg# The fifth form tells xdm which addresses to listen for incoming connections
37629baa8cSmrg# on.  If present, xdm will only listen for connections on the specified
38145b7b3cSmrg# interfaces and/or multicast groups.
39145b7b3cSmrg#
40145b7b3cSmrg# In all cases, xdm uses the first entry which matches the terminal;
41145b7b3cSmrg# for IndirectQuery messages only entries with right hand sides can
42145b7b3cSmrg# match, for Direct and Broadcast Query messages, only entries without
43145b7b3cSmrg# right hand sides can match.
44145b7b3cSmrg#
45145b7b3cSmrg
46145b7b3cSmrg#*					#any host can get a login window
47145b7b3cSmrg
48145b7b3cSmrg#
49145b7b3cSmrg# To hardwire a specific terminal to a specific host, you can
50145b7b3cSmrg# leave the terminal sending indirect queries to this host, and
51145b7b3cSmrg# use an entry of the form:
52145b7b3cSmrg#
53145b7b3cSmrg
54145b7b3cSmrg#terminal-a	host-a
55145b7b3cSmrg
56145b7b3cSmrg
57145b7b3cSmrg#
58145b7b3cSmrg# The nicest way to run the chooser is to just ask it to broadcast
59145b7b3cSmrg# requests to the network - that way new hosts show up automatically.
60145b7b3cSmrg# Sometimes, however, the chooser can't figure out how to broadcast,
61145b7b3cSmrg# so this may not work in all environments.
62145b7b3cSmrg#
63145b7b3cSmrg
64145b7b3cSmrg#*		CHOOSER BROADCAST	#any indirect host can get a chooser
65145b7b3cSmrg
66145b7b3cSmrg#
67145b7b3cSmrg# If you'd prefer to configure the set of hosts each terminal sees,
68145b7b3cSmrg# then just uncomment these lines (and comment the CHOOSER line above)
69145b7b3cSmrg# and edit the %hostlist line as appropriate
70145b7b3cSmrg#
71145b7b3cSmrg
72145b7b3cSmrg#%hostlist	host-a host-b
73145b7b3cSmrg
74145b7b3cSmrg#*		CHOOSER %hostlist	#
75145b7b3cSmrg
76145b7b3cSmrg#
77145b7b3cSmrg# If you have a machine with multiple network interfaces or IP addresses
78145b7b3cSmrg# you can control which interfaces accept XDMCP packets by listing a LISTEN
79145b7b3cSmrg# line for each interface you want to listen on.  You can additionally list
80145b7b3cSmrg# one or more multicast groups after each address to listen on those groups
81145b7b3cSmrg# on that address.
82145b7b3cSmrg#
83145b7b3cSmrg# If no LISTEN is specified, the default is the same as "LISTEN *" - listen on
84145b7b3cSmrg# all unicast interfaces, but not for multicast packets.  If any LISTEN lines
85145b7b3cSmrg# are specified, then only the listed interfaces will be listened on.
86145b7b3cSmrg#
87629baa8cSmrg# IANA has assigned FF0X:0:0:0:0:0:0:12B as the permanently assigned
88145b7b3cSmrg# multicast addresses for XDMCP, where X in the prefix may be replaced
89145b7b3cSmrg# by any valid scope identifier, such as 1 for Node-Local, 2 for Link-Local,
90145b7b3cSmrg# 5 for Site-Local, and so on.  The default is equivalent to the example shown
91145b7b3cSmrg# here using the Link-Local version to most closely match the old IPv4 subnet
92145b7b3cSmrg# broadcast behavior.
93145b7b3cSmrg#
94145b7b3cSmrg# LISTEN		* ff02:0:0:0:0:0:0:12b
95145b7b3cSmrg
96145b7b3cSmrg# This example shows listening for multicast on all scopes up to site-local
97145b7b3cSmrg#
98145b7b3cSmrg# LISTEN	* ff01:0:0:0:0:0:0:12b ff02:0:0:0:0:0:0:12b ff03:0:0:0:0:0:0:12b ff04:0:0:0:0:0:0:12b ff05:0:0:0:0:0:0:12b
99