[FreeNX-kNX] FreeNX and PAM

[Felix Schumacher]

> -----Ursprüngliche Nachricht-----
> Von: Nick Owen [mailto:nowen at wikidsystems.com] 
> Gesendet: Donnerstag, 1. Juni 2006 20:05
> An: User Support for FreeNX Server and kNX Client
> Betreff: Re: [FreeNX-kNX] FreeNX and PAM
> 
> 
> Wilhelm Meier wrote:
> > Hi,
> > 
> > how do I enable PAM-based authentication in FreeNX?
> > 
> > We use LDAP-based authentication and want all users to be 
> able to login via 
> > FreeNX. But how?
> > 
> > thx,
> > 
> > Wilhelm
> 
> Wilhelm:
> 
> Configure pam sshd for LDAP, then configure freenx for ssh, by IIRC,
> setting FORCE_LOGIN_METHOD=SSH in your node.conf in /etc/nxserver.
No, to enable PAM based login you have to look for the entries

# Authentication directives
# This adds the passdb to the possible authentication methods
#ENABLE_PASSDB_AUTHENTICATION="1"

# This adds SSH to the possible authentication methods. For it to work
sshd
# must be set up at localhost accepting password authentication.
#ENABLE_SSH_AUTHENTICATION="1"

# This adds SU to the possible authentication methods. For it to work
the 
# "nx" user must be in the wheel (RedHat, Fedora) or the users group
(SUSE)
# and the user logging in must have a valid shell that accepts the -c
# parameter.
#ENABLE_SU_AUTHENTICATION="0"

# Require all users to be in the passdb, regardless of authentication
method
#ENABLE_USER_DB="0"

In your node.conf. I believe if you comment those entries out (like done
above)
You will get pam enabled nx logins.

The FORCE_LOGIN_METHOD entry is non-standard and will only be useful for
one-time-passwords. 
(But as Fabian Franz pointed out, the neccessary patch might not be
secure enough)

Bye
 Felix
> 
> HTH,
> 
> Nick
> 
> -- 
> Nick Owen
> WiKID Systems, Inc.
> 404.962.8983
> http://www.wikidsystems.com
> Commercial/Open Source Two-Factor Authentication
> https://www.linkedin.com/in/nickowen
> ________________________________________________________________
>      Were you helped on this list with your FreeNX problem?
>     Then please write up the solution in the FreeNX Wiki/FAQ:
>   http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ
>          Don't forget to check the NX Knowledge Base:
>                  http://www.nomachine.com/kb/ 
> 
> ________________________________________________________________
>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>       https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________
>