What is MIT-MAGIC-COOKIE error

Hello all,
I have a user that connects to a server "Server1" using username "User1" in order to run an application they must switch user "User2" and rlogin to a diffrent server "Server2" to run the X application.
When they start the application they get invalid MIT-MAGIC-COOKIE. What is this error mean. Here are the steps they are doing
User1 loggs on to Server1 using CDE.
User1r starts an command tool.
User1 does a su User2
User2 does a rlogin to Server2
User2 sets the DISPALY to Server1
start the x application
What is wrong here ?
Thanks

What is wrong here ?Aside from the fact that you're using rlogin? :P
Aniway, you don't specify whether USER1 logs in to SERVER1 directly (is it a Sun workstation running CDE) or whether he/she does this through Exceed or something similar.
If it's the first scenario the previous person to reply is most probably right.
If it's the second scenario, setting $DISPLAY to SERVER1:0.0 (and adding SERVER2 to the xhost setting) will not work. You'll have to set your $DISPALY to $WORKSTATION:0.0 and verify that Exceed (or whatever you're using) is configured properly.

Similar Messages

  • Dtlogin fails after changing UID - invalid MIT-MAGIC-COOKIE

    The environment is a small stand-alone network of Suns running Solaris 5.10 with no central admin, no DNS. One of the users had login accounts on several machines and asked me to fix it up while he was away. So I consolidated his several home directories onto one machine, changed all the different UIDs on the various Suns to be the same UID, did a chown to match on all the files in his new consolidated home directory, then modified /etc/auto_home on all the machines to point to the new home.
    It all works with console or ssh logins and with dtlogin from the machine on which I didn't change the UID (also where his home now resides). But on the other machines where the UID was changed, trying to log into either CDE or JDS soon comes back to the login screen with an error in .dt/startlog: "invalid MIT-MAGIC-COOKIE-1 key", "Xlib: connection to :0.0 refused by server". I'm guessing the problem is because the user's current UID is different that what it was before on this machine.
    I tried deleting his ~/.*authority files, moving his ~/.dt directory out of the way, and even deleted and recreated the user on one of the remote machines with no joy. This user is going to be mighty unhappy with me when he gets back from vacation next week! Help.
    Edited by: SanDiegoDweller on Aug 12, 2010 7:18 PM -- added a bit more clarification

    Thanks to these suggestions I was able to determine that the X stuff was still referring to the user's old home directory on the local machine rather than his automounted home directory.
    All the local disks were called /export/home -- in an effort to deconfuse myself and make sure I knew which disk space was being used, I changed them to /export/home-A and /export/home-B on machines A and B (renamed the directory and changed /etc/vfstab). All normal logins work, but no X logins work. When logged in as the user, xauth says "error in locking authority file /export/home/user/.Xauthority" but there are no longer any /export/home directories! This is after I've deleted his .Xauthority file. Apparently, the X stuff is remembering somewhere an old path. How can I clean this up?
    Edited by: SanDiegoDweller on Aug 16, 2010 12:54 PM

  • Cannot open X application (Invalid MIT-MAGIC-COOKIE-1 key)

    Hi all.
    I'm using SGD EE4 on Fedora 3 and cannot start any X application
    through TTA (not even default xclock).
    The application launch dialog's Launch Details says:
    Xlib: connection to "localhost:10.0" refused by server
    Xlib: Invalid MIT-MAGIC-COOKIE-1 key
    Error: Can't open display: localhost:10.0
    Connection to <my-server> closed.
    And logs says...
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #0
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    AUDIT: Sun Apr 10 11:53:09 2005: 16966 ttaxpe:
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #2
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    client 1 rejected from IP 127.0.0.1 port 57737
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #4
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    Auth name: MIT-MAGIC-COOKIE-1
    I think this may be a permission problem trying to open
    display. X11Forwarding is already set to yes in ssh.
    Any ideas on what else should be customized on a default
    Fedora 3 installation?
    TIA
    Alan.

    Thanks Carmelo.
    That solved my problem.
    Mel O wrote:
    Alan,
    From the command line
    $ tarantella config edit --security-xsecurity 0
    or from the Array Manager
    http://www.tarantella.com/documentation/sgd/ee/4.0/help/en-us/base/standard/am_security.html
    -> xauth
    Regards,
    Carmelo
    Alan Weber wrote:
    Hi all.
    I'm using SGD EE4 on Fedora 3 and cannot start any X application
    through TTA (not even default xclock).
    The application launch dialog's Launch Details says:
    Xlib: connection to "localhost:10.0" refused by server
    Xlib: Invalid MIT-MAGIC-COOKIE-1 key
    Error: Can't open display: localhost:10.0
    Connection to <my-server> closed.
    And logs says...
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #0
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    AUDIT: Sun Apr 10 11:53:09 2005: 16966 ttaxpe:
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #2
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    client 1 rejected from IP 127.0.0.1 port 57737
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #4
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    Auth name: MIT-MAGIC-COOKIE-1
    I think this may be a permission problem trying to open
    display. X11Forwarding is already set to yes in ssh.
    Any ideas on what else should be customized on a default
    Fedora 3 installation?
    TIA
    Alan.

  • Invalid MIT-MAGIC-COOKIE-1 key

    I am receiving the following message when trying to install oracle 9.2 on Solaris 5.8.
    xlib: Connection to 10.163.14.23:0.0 refused
    xlib: Invalid MIT-MAGIC-COOKIE-1 key
    I have my DISPLAY variable set to <IP>:0.0
    I am running this from the Console and the IP address I am using is the IP address of the server.
    Thanks

    Thanks Carmelo.
    That solved my problem.
    Mel O wrote:
    Alan,
    From the command line
    $ tarantella config edit --security-xsecurity 0
    or from the Array Manager
    http://www.tarantella.com/documentation/sgd/ee/4.0/help/en-us/base/standard/am_security.html
    -> xauth
    Regards,
    Carmelo
    Alan Weber wrote:
    Hi all.
    I'm using SGD EE4 on Fedora 3 and cannot start any X application
    through TTA (not even default xclock).
    The application launch dialog's Launch Details says:
    Xlib: connection to "localhost:10.0" refused by server
    Xlib: Invalid MIT-MAGIC-COOKIE-1 key
    Error: Can't open display: localhost:10.0
    Connection to <my-server> closed.
    And logs says...
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #0
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    AUDIT: Sun Apr 10 11:53:09 2005: 16966 ttaxpe:
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #2
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    client 1 rejected from IP 127.0.0.1 port 57737
    2005/04/10 11:53:09.390 (pid 16966) xpe/xpe #4
    Tarantella Secure Global Desktop Enterprise Edition(4.0) ERROR:
    Auth name: MIT-MAGIC-COOKIE-1
    I think this may be a permission problem trying to open
    display. X11Forwarding is already set to yes in ssh.
    Any ideas on what else should be customized on a default
    Fedora 3 installation?
    TIA
    Alan.

  • How do I setup a MIT-Magic Cookie for multiple users?

    I need to be able to use TTauthority to allow mutliple users to have access to one main MIT-Magic Cookie random sequence. Currently, we have multiple cookies being created each time a user logs in. However, we cannot see each others processes. This is a huge drawback we are having with depending on Tooltalk. Any suggestions to setup ttauth to allow multiple users to share the same cookie?

    It might work if you don't leave mails on the server.
    In IMAP are the mails from the other accounts showing up at that accounts inbox on the server (webmail) If so you could as well redirect it on server level and not download and then upload.
    What happen if you want to un-delete a message?
    A solution would be send it to a local folder. That way it will be deleted on the mail server and you still have the opportunity to '''move''' it into one of the inboxes

  • Invalid magic cookie

    I just installed arch and kde. Everything was fine until I noticed that after I run vim as root I get weird errors. More specifically the error is:
    Invalid MIT-MAGIC-COOKIE-1 keyInvalid MIT-MAGIC-COOKIE-1 keyInvalid MIT-MAGIC-COOKIE-1 key
    It's not preventing me from doing anything, but it's annoying nonetheless. Does anyone know how to fix this?

    The method posted by @onguarde is NOT recommened as Access  is  granted  to  everyone,  even  if they aren't on the list to open windows on your machine.
    As normal user, you should run:
    xhost local:root
    and then root will be able to open X programs. You can edit /root/.bashrc and add the following line:
    export XAUTHORITY=/home/username/.Xauthority
    Where "username" is the user account name that you use. After editing /root/.bashrc, you won't have to issue the command "xhost local:root" anymore after X starts.
    OR even simpler, make a symbolic link to the current - correct - cookie (not tested this but I think it might work):
    su -
    cd /root (if not already there)
    ln -sf /home/username/.Xauthority
    But as @parintachin said is better to run GUI programs with root privileges using ALT+F2 and kdesu(if using KDE) or gksu(if using GNOME) + name of the application.
    I know this thread is a little bit old, but I faced this problem today and wanted to help in some way or another.
    Last edited by Mahara (2010-04-05 12:00:29)

  • Cookies error in Safari only

    For some reason -- in Safari only I think -- me on a PC and several  other Mac users are getting a Cookies error message when going to this  page:
    Code:
    rosepilates.com/schedulefees/index.html
    ?  It probably has to do with the iframe and VBScript code. I'm  not familiar with this code.  I just set up the iframe.  Do you know how  to fix? 
    Thank you!

    I haven't had a chance to look before now.  Was in the process of upgrading my Mac to Lion.  I definitely see the error only in Safari.  I don't think it's the VBScript, although that can't be seen from the client side since it's processed by the server.  My gut here is telling me that your iframe is causing the issue and passing an insecure cookie to a website other than the domain that is currently being accessed.  Thus the default Safari security settings are blocking access to the site.
    Can you explain a little more of how that 3rd party website (mindbodyonline) works?  For instance, what information are you passing in the cookie?  Login information?
    From what I've been able to read in the developer documentation from MindBodyOnline ( http://training.mindbodyonline.com/manual/advanced ) you can generate an .ics file which can be parsed by a server side script.  Unfortunately the one that comes to mind is phpicalendar (as I work more with PHP than ASP).  Or you can tap into the API to generate an XML file which can then be parsed using Dreamweaver.  The .ics option is easier, but the API would allow you to eliminate the iframe altogether and fit the schedule how you want it to appear on the page.

  • Why am I getting the NO COOKIE ERROR

    For the past month I've been getting the No Cookie Error message for frequently used sites. Not sure what happened or what I've done. Please help

    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
    *Do not click the Reset button on the Safe mode start window or otherwise make changes.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
    Clear the cache and the cookies from sites that cause problems.
    "Clear the Cache":
    *Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Tools > Options > Privacy > Cookies: "Show Cookies"
    If clearing cookies doesn't work then it is possible that the <i>cookies.sqlite</i> file that stores the cookies is corrupted.
    Rename (or delete) <b>cookies.sqlite</b> (cookies.sqlite.old) and delete other present cookie files like <b>cookies.sqlite-journal</b> in the Firefox Profile Folder in case the file cookies.sqlite got corrupted.
    *http://kb.mozillazine.org/Cookies
    *https://support.mozilla.org/kb/Deleting+cookies

  • What is an "Unexpected conversion error?"

    What is an "unexpected conversion error" and how do I overcome it?

    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
    *Do NOT click the Reset button on the Safe Mode start window or otherwise make changes.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes
    You can remove all data stored in Firefox from a specific domain via "Forget About This Site" in the right-click context menu of an history entry ("History > Show All History" or "View > Sidebar > History") or via the about:permissions page.
    Using "Forget About This Site" will remove all data stored in Firefox from that domain like bookmarks, cookies, passwords, cache, history, and exceptions, so be cautious and if you have a password or other data from that domain that you do not want to lose then make a note of those passwords and bookmarks.
    You can't recover from this 'forget' unless you have a backup of the affected files.
    It doesn't have any lasting effect, so if you revisit such a 'forgotten' website then data from that website will be saved once again.

  • TS1436 I received this message twice on 2 new & separate attempts to burn a playlist to a NEW cd:  "The attempt to burn a disc failed.  The burn failed because of a medium write error."  What is a "medium write error" and how can I deal with this?

    I received this message twice on 2 new & separate attempts to burn a playlist to a NEW cd:  "The attempt to burn a disc failed.  The burn failed because of a medium write error."  What is a "medium write error" and how can I deal with this?

    Hello Pat,
    The following article provides troublehsooting steps and information that can help get iTunes burning discs again.
    Can't burn a CD in iTunes for Windows
    http://support.apple.com/kb/TS1436
    Cheers,
    Allen

  • Do you have any idea, what makes to fix this error in creating PO.

    The error is u201CDocument 101600 does not existu201D
    Do you have any idea, what makes to fix this error in creating PO.The error is u201CDocument 101600 does not existu201D  Here the 101600 is PO no.

    Hi
    Please check in t.code: RZ20 .
    You can find out the nature of this error
    Regards
    G.Ganesh Kumar

  • What does "ajax submit failed: error = 403, forbidden" mean when trying to sign up for eprint?

    what does "ajax submit failed: error = 403, forbidden" mean when trying to sign up for eprint?

    Hi,
    Please use different browser such as Firefox or Chrome and try again.
    Regards.
    BH
    **Click the KUDOS thumb up on the left to say 'Thanks'**
    Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

  • TS1277 How do I fix this? I cant get iTunes to let me sign it. I keep getting cookies error. I have allowed iTunes in cookies.

    How do I fix this? I cant get iTunes to let me sign it. I keep getting cookies error. I have allowed iTunes in cookies.
    I am also getting review acct, which I have.

    That may be an incompatibility between Hotmail and Firefox 10.
    Clear the cache and the cookies from sites that cause problems.
    "Clear the Cache":
    *Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
    "Remove Cookies" from sites causing problems:
    *Tools > Options > Privacy > Cookies: "Show Cookies"
    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.com/kb/Safe+Mode

  • What do I do about Error Code 0x80070057 when I attempt to upload a mpg 4 file into MobileMe?

    What do I do about Error Code 0x80070057 when I attempt to upload a mpg 4 file into MobileMe?

    MobileMe is in the process of being shutdown. Perhaps the error is related to MobileMe going away.

  • TS3297 What can I do about error 42408?

    What can I do about error 42408? I can't download my purchased and matched music from the store.

    Ruleo,
    It is common to have a reading on a disconnected channel. Generally speaking for measurement devices, un-connected voltage inputs tend to float around to either the positive or negative supply rail of the measuring device and current inputs will float around the 0 mA range. This is due both to device design and the real world behavior of components as opposed to the ideal behavior model. Some devices such as the FP-TC-120, will have circuitry to cause un-connected outputs to go to a specific level (in the case of the FP-TC-120, unconnected outputs will always read full scale of the range).
    When you say you are getting a reading on that channel, is it a reading that is close to mininum scale, or is it a reading in the middle of the
    scale, i.e. 10.2 mA? If the channel is not reading close to minimum scale, it is possible that the channel has been damaged. On the FP-AI-111, you can use a DMM to measure between the Iin pin and any of the C or Com pins. First disconnect any external wiring to the channel, then hook in the DMM. The resistance (within the accuracy of the DMM) should be exactly 100 Ohms. If the resistance is greater than 100 Ohms, then the channel was damaged by an over-current condition that exceeded the published specifications of the module (30 mA). In that case, the module will have to be sent to National Instruments for repair.
    Regards,
    Aaron

Maybe you are looking for