[FreeNX-kNX] FreeNX CentOS Permission denied (publickey, gssapi-keyex, gssapi-with-mic)

[OwN-3m-All]

On Fri, Jul 26, 2013 at 5:36 AM, <chris at ccburton.com> wrote:

>
> freenx-knx-bounces at kde.org wrote on 25/07/2013 22:53:10:
>
> [SNIP]
> It's impossible for me to tell exactly what's going on from your
> description
> however
> you can run a few tests (from the server) which may help.
>
> eg.
>         login to the server
>         sudo bash
> to get a root shell
> then
>         su -l -s /bin/bash nx
> to get a shell as user nx
>
> run the line of PASSDB code which seems to be failing . . . .
>
> (   echo "$@" | $COMMAND_SSH -l burtonc 127.0.0.1 -p 22 -x -2 -i
> /etc/nxserner/users.id_dsa -o 'PubkeyAuthentication yes' -o
> 'RSAAuthentication yes' -o 'RhostsAuthentication no' -o
> 'PasswordAuthentication no' -o 'RhostsRSAAuthentication no' -o
> 'StrictHostKeyChecking no' /usr/bin/nxnode "$CMD"  )
>
> . . . but with the blanks filled in . . .
>
> eg.  for your username instead of "user"
>
> /usr/bin/ssh  -l "user" 127.0.0.1 -p 22 -x -2 -i  /
>         /etc/nxserver/users.id_dsa -o 'PubkeyAuthentication yes' /
>         -o 'RSAAuthentication yes' -o 'RhostsAuthentication no' /
>         -o 'PasswordAuthentication no' -o 'RhostsRSAAuthentication no'/
>         -o 'StrictHostKeyChecking no'
>
>
> You should get either an error message or a command prompt.
>
>
When I run the below command as the user nx, I do receive a command prompt:
*
-bash-4.1$ ssh -l "user" 127.0.0.1 -p 45559 -x -2 -i
/etc/nxserver/client.id_dsa.key -o 'PubkeyAuthentication yes' -o
'RSAAuthentication yes' -o 'RhostsAuthentication no' -o
'PasswordAuthentication no' -o 'RhostsRSAAuthentication no' -o
'StrictHostKeyChecking no'
Last login: Fri Jul 26 20:43:23 2013 from localhost.localdomain
[user at localhost ~]$ exit
logout
Connection to 127.0.0.1 closed.
-bash-4.1$*

So, that worked.

Here's my sshd config:

http://pastebin.com/xx6CftDS

And here's my node.conf:

http://pastebin.com/V7tbCWxg

Anything pop out to you?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20130726/ffe7c684/attachment.html>