Thanks for the info and the response. I was told yesterday that we are
behind a firewall, and you are right, no rules yet. OU and its domain are
also behind a firewall. Maybe in time when our network is secure, we might
move to XDMCP sessions. Alternately, I guess we would have to set up a
computer lab......not really an option.
I also had a look at the link below. I think the ssh/xhost solution is the
easiest.

Thanks for the response. I will be out most of the day but keep em coming.



Yasvir A. Tesiram
Oklahoma Medical Research Foundation
Dept. Free Radical Biology and Ageing
825 NE 13th St, OKC, OK, 73112, USA

P: (405) 271 7126
F: (405) 271 1795
E: [log in to unmask]


On Tue, 16 Dec 2003, Danny G Smith wrote:

> This is one link you might look at.  It is primarily geared toward the
> big OS platforms.
>
> http://www.le.ac.uk/cc/dsss/docs/xsecurity.shtml
>
> I will try and take a look in some of the material that I got from SANS
> several years ago.
>
> thanks,
> Danny
>
> Yasvir Tesiram wrote:
>
> >Hi all,
> >I thought I would initially put his up for discussion on LUG.
> >
> >I have some questions relating to security and potential issues for users
> >of the MRI facilities computers for processing and viewing MRI and NMR
> >data.
> >I will be in most cases responsible for making sure that users get their
> >MRI data until we get a bonafide systems administrator. We will mainly be
> >a Unix based facility. There will be many flavors of Unix. Currently we
> >have RedHat, Debian, MacOSX (Darwin and X11, I guess I'll just call it
> >Net/FreeBSD hotch potch). But most of our users will be using Windows or
> >Macintosh (without Darwin X11) computers. To overcome software
> >incompatibilities we have decided to make the software availble from our
> >computers via X software such as X-Win32. My question is regarding
> >security during remote connections. I would like to provide the users with
> >XDMCP access. But something tells me that we are not behind a firewall. In
> >which case I am reluctant to use XDMCP. Which leaves me with the ssh -X
> >solution. I guess what I am really after is a secure XDMCP connection.
> >
> >1. Does anybody know if there is such a thing.
> >2. Are we behind a firewall?
> >3. Is anyone running a Unix based network inside omrf.ouhsc.edu.
> >4. How have you provided access to specialist software?
> >
> >
> >I'm open to all questions/suggestions/jibes etc. Thanks in advance.
> >
> >Cheers
> >Yas
> >
> >
> >
> >Yasvir A. Tesiram
> >Oklahoma Medical Research Foundation
> >Dept. Free Radical Biology and Ageing
> >825 NE 13th St, OKC, OK, 73112, USA
> >
> >P: (405) 271 7126
> >F: (405) 271 1795
> >E: [log in to unmask]
> >
> >
>