1145b7b3cSmrg# 2145b7b3cSmrg# Access control file for XDMCP connections 3145b7b3cSmrg# 4145b7b3cSmrg# To control Direct and Broadcast access: 5145b7b3cSmrg# 6145b7b3cSmrg# pattern 7145b7b3cSmrg# 8145b7b3cSmrg# To control Indirect queries: 9145b7b3cSmrg# 10145b7b3cSmrg# pattern list of hostnames and/or macros ... 11145b7b3cSmrg# 12145b7b3cSmrg# To use the chooser: 13145b7b3cSmrg# 14145b7b3cSmrg# pattern CHOOSER BROADCAST 15145b7b3cSmrg# 16145b7b3cSmrg# or 17145b7b3cSmrg# 18145b7b3cSmrg# pattern CHOOSER list of hostnames and/or macros ... 19145b7b3cSmrg# 20145b7b3cSmrg# To define macros: 21145b7b3cSmrg# 22145b7b3cSmrg# %name list of hosts ... 23145b7b3cSmrg# 24145b7b3cSmrg# To control which addresses xdm listens for requests on: 25145b7b3cSmrg# 26145b7b3cSmrg# LISTEN address [list of multicast groups ... ] 27145b7b3cSmrg# 28145b7b3cSmrg# The first form tells xdm which displays to respond to itself. 29145b7b3cSmrg# The second form tells xdm to forward indirect queries from hosts matching 30145b7b3cSmrg# the specified pattern to the indicated list of hosts. 31145b7b3cSmrg# The third form tells xdm to handle indirect queries using the chooser; 32145b7b3cSmrg# the chooser is directed to send its own queries out via the broadcast 33145b7b3cSmrg# address and display the results on the terminal. 34145b7b3cSmrg# The fourth form is similar to the third, except instead of using the 35145b7b3cSmrg# broadcast address, it sends DirectQuerys to each of the hosts in the list 36145b7b3cSmrg# The fifth form tells xdm which addresses to listen for incoming connections 37629baa8cSmrg# on. If present, xdm will only listen for connections on the specified 38145b7b3cSmrg# interfaces and/or multicast groups. 39145b7b3cSmrg# 40145b7b3cSmrg# In all cases, xdm uses the first entry which matches the terminal; 41145b7b3cSmrg# for IndirectQuery messages only entries with right hand sides can 42145b7b3cSmrg# match, for Direct and Broadcast Query messages, only entries without 43145b7b3cSmrg# right hand sides can match. 44145b7b3cSmrg# 45145b7b3cSmrg 46145b7b3cSmrg#* #any host can get a login window 47145b7b3cSmrg 48145b7b3cSmrg# 49145b7b3cSmrg# To hardwire a specific terminal to a specific host, you can 50145b7b3cSmrg# leave the terminal sending indirect queries to this host, and 51145b7b3cSmrg# use an entry of the form: 52145b7b3cSmrg# 53145b7b3cSmrg 54145b7b3cSmrg#terminal-a host-a 55145b7b3cSmrg 56145b7b3cSmrg 57145b7b3cSmrg# 58145b7b3cSmrg# The nicest way to run the chooser is to just ask it to broadcast 59145b7b3cSmrg# requests to the network - that way new hosts show up automatically. 60145b7b3cSmrg# Sometimes, however, the chooser can't figure out how to broadcast, 61145b7b3cSmrg# so this may not work in all environments. 62145b7b3cSmrg# 63145b7b3cSmrg 64145b7b3cSmrg#* CHOOSER BROADCAST #any indirect host can get a chooser 65145b7b3cSmrg 66145b7b3cSmrg# 67145b7b3cSmrg# If you'd prefer to configure the set of hosts each terminal sees, 68145b7b3cSmrg# then just uncomment these lines (and comment the CHOOSER line above) 69145b7b3cSmrg# and edit the %hostlist line as appropriate 70145b7b3cSmrg# 71145b7b3cSmrg 72145b7b3cSmrg#%hostlist host-a host-b 73145b7b3cSmrg 74145b7b3cSmrg#* CHOOSER %hostlist # 75145b7b3cSmrg 76145b7b3cSmrg# 77145b7b3cSmrg# If you have a machine with multiple network interfaces or IP addresses 78145b7b3cSmrg# you can control which interfaces accept XDMCP packets by listing a LISTEN 79145b7b3cSmrg# line for each interface you want to listen on. You can additionally list 80145b7b3cSmrg# one or more multicast groups after each address to listen on those groups 81145b7b3cSmrg# on that address. 82145b7b3cSmrg# 83145b7b3cSmrg# If no LISTEN is specified, the default is the same as "LISTEN *" - listen on 84145b7b3cSmrg# all unicast interfaces, but not for multicast packets. If any LISTEN lines 85145b7b3cSmrg# are specified, then only the listed interfaces will be listened on. 86145b7b3cSmrg# 87629baa8cSmrg# IANA has assigned FF0X:0:0:0:0:0:0:12B as the permanently assigned 88145b7b3cSmrg# multicast addresses for XDMCP, where X in the prefix may be replaced 89145b7b3cSmrg# by any valid scope identifier, such as 1 for Node-Local, 2 for Link-Local, 90145b7b3cSmrg# 5 for Site-Local, and so on. The default is equivalent to the example shown 91145b7b3cSmrg# here using the Link-Local version to most closely match the old IPv4 subnet 92145b7b3cSmrg# broadcast behavior. 93145b7b3cSmrg# 94145b7b3cSmrg# LISTEN * ff02:0:0:0:0:0:0:12b 95145b7b3cSmrg 96145b7b3cSmrg# This example shows listening for multicast on all scopes up to site-local 97145b7b3cSmrg# 98145b7b3cSmrg# LISTEN * ff01:0:0:0:0:0:0:12b ff02:0:0:0:0:0:0:12b ff03:0:0:0:0:0:0:12b ff04:0:0:0:0:0:0:12b ff05:0:0:0:0:0:0:12b 99