Xaccess revision 145b7b3c
1145b7b3cSmrg# $XdotOrg: Xaccess,v 1.3 2000/08/17 19:54:17 cpqbld Exp $
2145b7b3cSmrg# $Xorg: Xaccess,v 1.3 2000/08/17 19:54:17 cpqbld Exp $
3145b7b3cSmrg# $XFree86: xc/programs/xdm/config/Xaccess,v 1.4 2003/07/09 15:27:40 tsi Exp $
4145b7b3cSmrg#
5145b7b3cSmrg# Access control file for XDMCP connections
6145b7b3cSmrg#
7145b7b3cSmrg# To control Direct and Broadcast access:
8145b7b3cSmrg#
9145b7b3cSmrg#	pattern
10145b7b3cSmrg#
11145b7b3cSmrg# To control Indirect queries:
12145b7b3cSmrg#
13145b7b3cSmrg# 	pattern		list of hostnames and/or macros ...
14145b7b3cSmrg#
15145b7b3cSmrg# To use the chooser:
16145b7b3cSmrg#
17145b7b3cSmrg#	pattern		CHOOSER BROADCAST
18145b7b3cSmrg#
19145b7b3cSmrg# or
20145b7b3cSmrg#
21145b7b3cSmrg#	pattern		CHOOSER list of hostnames and/or macros ...
22145b7b3cSmrg#
23145b7b3cSmrg# To define macros:
24145b7b3cSmrg#
25145b7b3cSmrg#       %name		list of hosts ...
26145b7b3cSmrg#
27145b7b3cSmrg# To control which addresses xdm listens for requests on:
28145b7b3cSmrg#
29145b7b3cSmrg#	LISTEN		address [list of multicast groups ... ]
30145b7b3cSmrg#
31145b7b3cSmrg# The first form tells xdm which displays to respond to itself.
32145b7b3cSmrg# The second form tells xdm to forward indirect queries from hosts matching
33145b7b3cSmrg# the specified pattern to the indicated list of hosts.
34145b7b3cSmrg# The third form tells xdm to handle indirect queries using the chooser;
35145b7b3cSmrg# the chooser is directed to send its own queries out via the broadcast
36145b7b3cSmrg# address and display the results on the terminal.
37145b7b3cSmrg# The fourth form is similar to the third, except instead of using the
38145b7b3cSmrg# broadcast address, it sends DirectQuerys to each of the hosts in the list
39145b7b3cSmrg# The fifth form tells xdm which addresses to listen for incoming connections
40145b7b3cSmrg# on.  If present, xdm will only listen for connections on the specified 
41145b7b3cSmrg# interfaces and/or multicast groups.
42145b7b3cSmrg#
43145b7b3cSmrg# In all cases, xdm uses the first entry which matches the terminal;
44145b7b3cSmrg# for IndirectQuery messages only entries with right hand sides can
45145b7b3cSmrg# match, for Direct and Broadcast Query messages, only entries without
46145b7b3cSmrg# right hand sides can match.
47145b7b3cSmrg#
48145b7b3cSmrg
49145b7b3cSmrg#*					#any host can get a login window
50145b7b3cSmrg
51145b7b3cSmrg#
52145b7b3cSmrg# To hardwire a specific terminal to a specific host, you can
53145b7b3cSmrg# leave the terminal sending indirect queries to this host, and
54145b7b3cSmrg# use an entry of the form:
55145b7b3cSmrg#
56145b7b3cSmrg
57145b7b3cSmrg#terminal-a	host-a
58145b7b3cSmrg
59145b7b3cSmrg
60145b7b3cSmrg#
61145b7b3cSmrg# The nicest way to run the chooser is to just ask it to broadcast
62145b7b3cSmrg# requests to the network - that way new hosts show up automatically.
63145b7b3cSmrg# Sometimes, however, the chooser can't figure out how to broadcast,
64145b7b3cSmrg# so this may not work in all environments.
65145b7b3cSmrg#
66145b7b3cSmrg
67145b7b3cSmrg#*		CHOOSER BROADCAST	#any indirect host can get a chooser
68145b7b3cSmrg
69145b7b3cSmrg#
70145b7b3cSmrg# If you'd prefer to configure the set of hosts each terminal sees,
71145b7b3cSmrg# then just uncomment these lines (and comment the CHOOSER line above)
72145b7b3cSmrg# and edit the %hostlist line as appropriate
73145b7b3cSmrg#
74145b7b3cSmrg
75145b7b3cSmrg#%hostlist	host-a host-b
76145b7b3cSmrg
77145b7b3cSmrg#*		CHOOSER %hostlist	#
78145b7b3cSmrg
79145b7b3cSmrg#
80145b7b3cSmrg# If you have a machine with multiple network interfaces or IP addresses
81145b7b3cSmrg# you can control which interfaces accept XDMCP packets by listing a LISTEN
82145b7b3cSmrg# line for each interface you want to listen on.  You can additionally list
83145b7b3cSmrg# one or more multicast groups after each address to listen on those groups
84145b7b3cSmrg# on that address.
85145b7b3cSmrg#
86145b7b3cSmrg# If no LISTEN is specified, the default is the same as "LISTEN *" - listen on
87145b7b3cSmrg# all unicast interfaces, but not for multicast packets.  If any LISTEN lines
88145b7b3cSmrg# are specified, then only the listed interfaces will be listened on.
89145b7b3cSmrg#
90145b7b3cSmrg# IANA has assigned FF0X:0:0:0:0:0:0:12B as the permanently assigned 
91145b7b3cSmrg# multicast addresses for XDMCP, where X in the prefix may be replaced
92145b7b3cSmrg# by any valid scope identifier, such as 1 for Node-Local, 2 for Link-Local,
93145b7b3cSmrg# 5 for Site-Local, and so on.  The default is equivalent to the example shown
94145b7b3cSmrg# here using the Link-Local version to most closely match the old IPv4 subnet
95145b7b3cSmrg# broadcast behavior.
96145b7b3cSmrg#
97145b7b3cSmrg# LISTEN		* ff02:0:0:0:0:0:0:12b
98145b7b3cSmrg
99145b7b3cSmrg# This example shows listening for multicast on all scopes up to site-local
100145b7b3cSmrg#
101145b7b3cSmrg# LISTEN	* ff01:0:0:0:0:0:0:12b ff02:0:0:0:0:0:0:12b ff03:0:0:0:0:0:0:12b ff04:0:0:0:0:0:0:12b ff05:0:0:0:0:0:0:12b
102