You are not logged in.

#1 2010-05-12 11:25:57

Mektub
Member
From: Lisbon /Portugal
Registered: 2008-01-02
Posts: 647

[SOLVED] nxclient will not validate if sshd has passauthentication=no

I have a VPS at Linode.

Following the wiki http://wiki.archlinux.org/index.php/FreeNX FreeNX is working at the server but only
if the sshd at the server has the parameter PasswordAuthentication set to yes.

Now, I would prefer not to allow password logins, and have only pubkeyauthentication.

But in this case the nxclient insists in sending a password and fails.

At the server I took a look at /opt/NX/etc/node.conf but could find a way of using key authentication only.

Does any of you have more experience with it ?

Thanks,

Mektub

Last edited by Mektub (2010-05-14 11:25:00)


Follow me on twitter: https://twitter.com/johnbina

Offline

#2 2010-05-13 23:19:55

Mektub
Member
From: Lisbon /Portugal
Registered: 2008-01-02
Posts: 647

Re: [SOLVED] nxclient will not validate if sshd has passauthentication=no

Answering to myself:

Mektub wrote:

Now, I would prefer not to allow password logins, and have only pubkeyauthentication.

Well, after spending some time beating on the wall, hoping to transform it into a door, I achieved want I wanted
doing the following:

First I tried this CentOS tutorial:

http://wiki.centos.org/HowTos/FreeNX

It looked promising, but after doing the setup I couldn't even login through SSH, with a public-key failure, even though I
didn't see any problem with it (I kept a session open at the remote, just to not be locked out).

So I followed this mailing list post:

http://readlist.com/lists/kde.org/freen … /3924.html

In short I edited /opt/NX/etc/node.conf (on the server):

ENABLE_SSH_AUTHENTICATION="0"
ENABLE_SU_AUTHENTICATION="1"

Added nx user to wheel group so that su - works for the nx user.

That was it, and nxclient is  working now.

/etc/ssh/sshd_config on the server has:

PubkeyAuthentication yes
PasswordAuthentication no

I am amazed at the blazing speed of NX. Of course the VPS at Linode is very responsive, recomended.

Mektub


Follow me on twitter: https://twitter.com/johnbina

Offline

Board footer

Powered by FluxBB