<br>
<br><tt><font size=2>William Keaney <keaneyw@gmail.com> wrote on
28/08/2009 18:42:46:<br>
<br>
> Hello,<br>
> <br>
> I have a CentOS 5.3 server on which I have installed FreeNX 0.7.3.
<br>
> This machine has been bound to our Active Directory, and users are
<br>
> able to successfully authenticate against AD when logging into it.<br>
> However, when I connect to the FreeNX service, it logs me in as the
<br>
> 'nx' user. I would like FreeNX to authenticate user names against
<br>
> AD as well, and to log them into the appropriate accounts after <br>
> connecting. I have found a few guides and howtos that seem mostly
<br>
> outdated, and none actually cover the aspect of getting FreeNX <br>
> itself to use AD for authentication. <br>
> Does anyone know if/how I can make this happen?<br>
> <br>
> Thank you for your help, and for a really great tool.</font></tt>
<br>
<br>
<br><tt><font size=2>Most of us try to avoid active directory, including
me !!</font></tt>
<br>
<br>
<br><tt><font size=2>Do you have sshd_config set up to authenticate using
pam (UsePAM yes)????</font></tt>
<br>
<br>
<br><tt><font size=2>It sounds like AD is all set up in /etc/pam.d/system-auth
and /etc/nsswitch.conf and working.</font></tt>
<br>
<br>
<br>
<br><tt><font size=2>The nx user is used ONLY to set up a tunnel over Openssh
using a dsa key and to run /usr/bin/nxserver.</font></tt>
<br>
<br><tt><font size=2>/usr/bin/nxserver then logs in the user via another
ssh session to localhost using PasswordAuthentication which you therefore
must ensure is also enabled in sshd_config.</font></tt>
<br>
<br><tt><font size=2>so</font></tt>
<br>
<br><tt><font size=2>I'm not sure what you mean by FreeNX logging you in
as 'nx' user !!</font></tt>
<br>
<br>
<br><tt><font size=2>Try logging in locally on the server as the remote
user, USING ssh TO LOCALHOST AND PASSWORD authentication.</font></tt>
<br>
<br><tt><font size=2>This will test if the user works over ssh against
AD.</font></tt>
<br>
<br><tt><font size=2>chris</font></tt>
<br>
<br><tt><font size=2><br>
> <br>
> Will Keaney________________________________________________________________<br>
> Were you helped on this list with your FreeNX
problem?<br>
> Then please write up the solution in the FreeNX Wiki/FAQ:<br>
> <br>
> </font></tt><a href="http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ"><tt><font size=2>http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ</font></tt></a><tt><font size=2><br>
> <br>
> Don't forget to check the NX Knowledge
Base:<br>
> </font></tt><a href=http://www.nomachine.com/kb/><tt><font size=2>http://www.nomachine.com/kb/</font></tt></a><tt><font size=2>
<br>
> <br>
> ________________________________________________________________<br>
> FreeNX-kNX mailing list --- FreeNX-kNX@kde.org<br>
> </font></tt><a href="https://mail.kde.org/mailman/listinfo/freenx-knx"><tt><font size=2>https://mail.kde.org/mailman/listinfo/freenx-knx</font></tt></a><tt><font size=2><br>
> ________________________________________________________________</font></tt>