XDMCP with XMING via SSH

This is obviously well thought out but so far over my head, I'd need a beanstalk to reach it.

#1 I understand though I cannot figure out how to assign it.

#2 and #3 are a little blurry.  I think I understand you to say that SSH2 text and offers no ability to communicate via XDMCP which is UDP based.   For this reason, to get graphics across SSH2, one has to connect via X11 with pre-configured X11Forwarding which will subsequently allow XDMCP as well as restart SSH2.

#1 - there are at least 4 versions of iLO for PC, and I guess some 10 for UX

SSH X11Forwarding sets up X11 session, which is about same function as XDMCP performs.

XDMCP is a protocol used to manage remote X-windows sessions. XDMCP initiates all the magic that gives you the experience of starting a graphical login screen and ending up with a full CDE/KDE/Gnome desktop.

Unfortunately, XDMCP was designed for local LAN use and it can't be used over a SSH tunnel.

Simple X-windows sessions can be run over ssh. Basically, you ssh to the server (using putty), then start a single X-windows program. You end up with a single application window (e.g. the xclock). Useful, but very different from the user-friendly CDE desktop experience.

I'm not sure what your security concerns are. Do you want to have CDE sessions over the internet ? Or do you simply want to improve local LAN security ?

Both.  I would like to have CDE sessions over the internet but that is secondary and if we never get there, it's OK.

Improve LAN security is clearly my first objective but given my current level of experience access to CDE from everywhere (at least internally) is imperative.

Thanks for your thoughtful response, robocat.  That explanation helps alot.

Then you should use XDMCP broadcasts and multicasts to publish desktops inside intranet, and over internet share only SSH port where limited applications or whole CDE's Xsession can be launched. You can create Xming configs to do one and do another and distribute to user's desktops.

OK, I'm lost again gheist,

What I basically want to know first I guess (at least till I can wrap my brain around it all), is what I will loose?

Currently, I can I still access iLO and CDE if I disable all rlogins and ssh ?

OK, I'm lost again gheist,

What I basically want to know first I guess (at least till I can wrap my brain around it all), is what I will loose?

Currently, I can I still access iLO and CDE if I disable all rlogins and ssh ?

XDMCP allows you to establish X11 session - server computer running X client applications connect to TCP port 6000 on X server on client workstation computer.

rlogin should not be used, ssh covers its workings in secure manner. Xmings Xlaunch can make rlogin connect X11 apps to workstation over network, but set this aside while SSH & company does well.

SSH has side-effect that allows it to perform same job as XDMCP - establish X11 session, but over secure channel.
It does so by emulating X11 server on localhost of computer server and forwarding drawing to X server on client computer, and setting $DISPLAY variable so that X client apps know where to send drawing requests.

I have seen iLO that is separate computer from main host that runs different embedded OS, and can be configured and firmware updated from host, or accessed via its management address when main system is switched off to switch it on or enter IPL loader commands etc. Some advanced iLO reincarnations do read mainboard monitoring info like HW config, temperatures, fan speeds even while system is running.
iLO can provide java applet and activex clients inside web browser, just like ssh and windows remote desktop, to the grade that main system can be reinstalled without even physically attending host. Most UNIX vendors offer this functionality, and it slowly finds its way into blade shelves and other high-end PC equipment.
It is absolutely different autonomous computer with its own access methods. If you know system model you can find operating guides for both - main OS and iLO module which is another computer.

great..  I am most concerned about the CDE desktop environment available in HPUX via XMING.  If I turn off RLOGIN and use only SSH, will I still be able to access the CDE?

yes.

robocat...  you do an excellent job at sticking to the question and answering only what I currently don't understand.  At this stage I am still 'peeling the onion'.  geist, I am learning alot from you but am having difficulty getting my questions answered directly.  you tend to take my questions in a new direction which is nice but not really on-track.

I'm still having trouble understanding where one term stops and another starts.  more information really complicates this.