Tftp Security On Font Servers - Bay Networks 3395A Configuration Manual

Model 3395A Server Support for the Xremote Protocol

tftp Security on Font Servers

7-4
These commands specify the font servers:
• DEFINE/SET SERVER XREMOTE PRIMARY FONT SERVER
[domain-name/internet-address/NONE]
• DEFINE/SET]SERVER XREMOTE SECONDARY FONT SERVER
[domain-name/internet-address/NONE]
You can use either a domain name or an Internet address to specify a font
server. The keyword NONE removes a previously specified domain name, and
Internet address 0.0.0.0 removes a previously specified Internet address.
To use a remote font server once you establish an Xremote session, you must
load the fonts from the server with the appropriate command from the Xterm
window. This is an example of a command that loads fonts from the misc
directory:
xset fp+ /usr/lib/X11/fonts/misc
If a subsequent Xclient requires a font file within the misc directory, then the
specific file is loaded through tftp.
You can add the xset command to the Xsession file in the XDM directory or to
the .xsession files in the user's home directory. Doing so loads the font lists for
a user automatically at session initialization time.
Errors may occur during the font loading process. For example, the tftp file
transfer may time out, tftp may not find the file, or tftp may not have access to
the directory where the font files reside on the remote font server. Check the
NCD Setup Menu Diagnostic Session for errors.
Because the communication server uses tftp to transfer fonts from the font
server to the communication server and then across the NCD serial line, you
need to ensure that tftp has access to the font file directories on the font server.
In many XWindows environments, tftp runs with the secure option disabled.
If the secure option is enabled, however, be sure that all of the font files are in
subdirectories of the secure tftp home directory. Check the Internet
configu-ration file on the UNIX font server to determine whether tftp runs with
the secure option enabled or disabled. Refer to the man page for tftpd for
informa-tion on how to set up tftpd on your UNIX system.
This example shows a SUN OS.4.1 system configured to run with tftp in secure
mode. On this font server, the Internet configuration file /etc/inetd.conf has a
command line that starts up the tftp server daemon, tftpd, with the secure
option:
tftp dgram udp wait root /usr/etc/in.tftpd in.tftpd -s /tftpboot
In this example, the tftp daemon starts with the secure -s option and searches
for files within /tftpboot, which is the default tftp home directory. When a font
server such as this runs with the secure option, all font files must be in
subdirectories of the tftp home directory, such as the font directory /tftpboot/
fonts/misc. The directory /tftpboot is the default home directory for tftp files,
but you can edit the file inetd.conf to change this.
893-826-A