[FreeNX-kNX] 0.3: Authentification failed but sshd logs says OK

[Fabian Franz]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am Donnerstag, 10. März 2005 12:05 schrieb Blindauer Emmanuel:
> I had a working 0.2.7 freenx server,  working mostly (sometime  client
> timeout, but it was working sometime). I've upgraded to get lesser
> problems, now, no one can log in :)

;-) Well, I'll try to help.

>
> I used knx and nxclient from NX to test. I use my own key, clients uses
> them. The logs from freenx shows that:

Ok.

>
> -- NX SERVER START:
> HELLO NXSERVER - Version 1.4.0-03 OS (GPL)
> NX> 105 hello NXCLIENT - Version 1.4.0
> NX> 134 Accepted protocol: 1.4.0
> NX> 105 SET SHELL_MODE SHELL
> NX> 105 SET AUTH_MODE PASSWORD
> NX> 105 login
> NX> 101 User: blindaue
> NX> 102 Password:
> Auth method: ssh
> NX> 404 ERROR: wrong password or login
> NX> 999 Bye

Ok.


>
> In the auth.log, I can see sshd log:
>
> Mar 10 09:39:39 pipit sshd[10871]: Accepted publickey for blindaue
> from ::ffff:130.79.80.98 port 33753 ssh2
> Mar 10 09:39:39 pipit sshd(pam_unix)[10873]: session opened for user
> blindaue by (uid=15507)
> Mar 10 09:39:39 pipit sshd(pam_unix)[10873]: session closed for user
> blindaue
>
> So the connexion is immediatly closed.

That is ok at that stage.

> Anyone having an idea about that ?

Lets see:

Try the following command manually:

. $(which nxloadconfig)
read -s P; echo $P | $PATH_BIN/nxnode-login ssh blindaue 22 $PATH_BIN/nxnode 
- --check ""; unset P

You should get:

NX> 1000 NXNODE - Version 1.4.0-03 OS (GPL)
NX> 716 finished
NX> 1001 Bye.

And:

# echo $?
0

Please post your results.

You can also try to set:

ENABLE_SU_AUTHENTICATION="1" in $NX_ETC_DIR/node.conf.

(and if it works set ENABLE_SSH_AUTHENTICATION="0")

Btw: To use public keys, better use the build in passdb:

nxserver --adduser myuser
nxserver --passwd myuser

It'll then login into ssh by use of a public key.

cu

Fabian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCMDLuI0lSH7CXz7MRArmMAJ9Own8EBujRxawEMZlkyvNPeixKYwCeOpf9
eiGZHAnlH/SL4o+Ryfo/Eho=
=W/y3
-----END PGP SIGNATURE-----