Lock down XDMCP?

[Matt Zimmerman]

On Fri, Dec 03, 2004 at 11:53:48PM -0500, Romeyn Prescott wrote:

> I have a box at home that I want to sit headless...no 
> monitor/keyboard/mouse.  I'll "use" it remotely from one of my other 
> computers by logging in via ssh and running 'gdmflexiserver -n'. 
> This works great.
> 
> How do I lock down XDMCP so that commands like 'X :1 -query 
> ip.address.of.box' don't work?  It's not terribly secure.

The X server doesn't listen for XDMCP requests by default in Ubuntu.
This is controlled by the Enable setting in the [xdmcp] section in
/etc/gdm/gdm.conf (the default is "false").

-- 
 - mdz