<br><tt><font size=2>freenx-knx-bounces@kde.org wrote on 22/02/2014 18:49:23:<br>
<br>
>> So <br>
>> <br>
>> now you know <br>
>> your nx account is fine <br>
>> and <br>
>> nxserver is installed . . . <br>
>> which <br>
>> should log you in as <br>
>> user
"glen" <br>
>> provided <br>
>> your user "glen" account can log in <br>
>> set in /etc/ssh/sshd_config)
</font></tt>
<br><tt><font size=2>> I guess I don't quite understand why PasswordAuth
needs to be <br>
> enabled in SSH. It does look like I'm logging in fine through SSH
<br>
> (since the welcome message shows up in NX's client log).<br>
</font></tt>
<br><tt><font size=2>NX uses s key pair for the user </font></tt>
<br><tt><font size=2> nx</font></tt>
<br><tt><font size=2>to set up an ssh "encrypted tunnel" to move
your compressed</font></tt>
<br><tt><font size=2>X session over the network.</font></tt>
<br>
<br><tt><font size=2>It then logs in the normal user to ANOTHER LOCAL ssh</font></tt>
<br><tt><font size=2>session using</font></tt>
<br>
<br><tt><font size=2> ssh PasswordAuthentication</font></tt>
<br>
<br><tt><font size=2>from</font></tt>
<br><tt><font size=2>the end of the tunnel on the NX server </font></tt>
<br><tt><font size=2>to</font></tt>
<br><tt><font size=2>the same NX server ie. ssh 127.0.0.1</font></tt>
<br>
<br><tt><font size=2>The first ssh session uses user nx and the nx key
pair</font></tt>
<br><tt><font size=2>so</font></tt>
<br><tt><font size=2>you add the nx key to the nxclient</font></tt>
<br><tt><font size=2>and</font></tt>
<br><tt><font size=2>don't worry about user nx 'cos the client knows</font></tt>
<br>
<br><tt><font size=2>The second session uses</font></tt>
<br><tt><font size=2> your username
(glen)</font></tt>
<br><tt><font size=2>and</font></tt>
<br><tt><font size=2> glen's password
on the FreeNX server</font></tt>
<br><tt><font size=2>so</font></tt>
<br><tt><font size=2>you put glen & glen's password into the nxclient</font></tt>
<br><tt><font size=2>login entry fields.</font></tt>
<br>
<br>
<br><tt><font size=2>You do NOT need your ssh key OR username nx</font></tt>
<br><tt><font size=2>ANYWHERE for NXv3 login unless you have moved</font></tt>
<br><tt><font size=2>away from the default login method</font></tt>
<br>
<br><tt><font size=2> <br>
> I've tried enabling PasswordAuth anyways (and restarting the <br>
> machine), and here's the result:<br>
</font></tt>
<br><tt><font size=2>> Pseudo-terminal will not be allocated because
stdin is not a terminal.<br>
> <br>
> Permission denied (publickey,password).<br>
</font></tt>
<br><tt><font size=2>Different error. which user are you attemting to log
ing in as??</font></tt>
<br>
<br><tt><font size=2> nx ??</font></tt>
<br>
<br><tt><font size=2>> <br>
> And I'm entering the exact password I normally use to log into my
<br>
> account on the machine.<br>
</font></tt>
<br><tt><font size=2>OK , so what's new in the nx server log just after
this attempt ??</font></tt>
<br>
<br>
<br><tt><font size=2>>> Here's another annoying test to help you
along <br>
>>> <br>
>> 1/ Add the nx private key (as a new key file) to your .ssh/ directory
<br>
>> in the same format as the other private
keys. <br>
>> Sounds like you generated your own
pair 2me <br>
>> <br>
>> 2/ run <br>
>> <br>
>> ssh -l nx -i ~/.ssh/new-nx-private-key.file
your-server-IP </font></tt>
<br>
<br>
<br><tt><font size=2>> Alright, so I go to /var/lib/nxserver/home/default_keys
(which is <br>
> where the key is stored, I believe).</font></tt>
<br><tt><font size=2>> I copy the key named client.id_dsa.key dated
at Mar 22 2012</font></tt>
<br><tt><font size=2>> to ~/.ssh/nx_priv_key.dsa,</font></tt>
<br><tt><font size=2>> then I run</font></tt>
<br><tt><font size=2>> ssh -l nx -i ~/ssh/nx_priv_key.dsa 192.168.1.133.</font></tt>
<br><tt><font size=2>> SSH continues to</font></tt>
<br><tt><font size=2>> warn me about the authenticity of the server,</font></tt>
<br>
<br><tt><font size=2>normal</font></tt>
<br>
<br><tt><font size=2>> asks me if I want to continue (I say yes),</font></tt>
<br><tt><font size=2>> says it was permanentlyadded to the list of known
hosts,</font></tt>
<br>
<br><tt><font size=2>normal</font></tt>
<br>
<br><tt><font size=2>> warns me about an unprotected key file,</font></tt>
<br><tt><font size=2>> warns that permissions are too open,</font></tt>
<br><tt><font size=2>> then tells me that it will be ignored.</font></tt>
<br>
<br><tt><font size=2>The key file will be ignored unless its mode 0700</font></tt>
<br>
<br><tt><font size=2>> It then asks me for nx's password, of which I
have no clue,</font></tt>
<br>
<br><tt><font size=2>cos it can't use the (ignored) key file so it tries
password</font></tt>
<br>
<br><tt><font size=2>*** user nx should have NO password set ***</font></tt>
<br>
<br>
<br><tt><font size=2>> so after trying my own password,</font></tt>
<br><tt><font size=2>> I send a SIGINT to ssh and go about changing
the permissions</font></tt>
<br><tt><font size=2>> on the key file.</font></tt>
<br>
<br><tt><font size=2>Well done</font></tt>
<br>
<br><tt><font size=2>> I give myself (and only myself) read permissions
on the new</font></tt>
<br><tt><font size=2>> copy of the key file, and run the previous ssh
command again.<br>
</font></tt>
<br><tt><font size=2>well done again. I could list all these detail things
but most</font></tt>
<br><tt><font size=2>people already know or work or ask . . .</font></tt>
<br>
<br><tt><font size=2> <br>
> At this point, the SSH welcome message is printed,</font></tt>
<br>
<br><tt><font size=2>right</font></tt>
<br>
<br><tt><font size=2>> and to my great surprise,</font></tt>
<br>
<br><tt><font size=2>. . . but it's not surprising to me . . . </font></tt>
<br>
<br><tt><font size=2>You are now connected using the correct name(nx) and
key pair.</font></tt>
<br>
<br>
<br>
<br><tt><font size=2>*** You need this key for the nxclient. ***</font></tt>
<br>
<br><tt><font size=2>copy it from the file into the entry field in the
nx client</font></tt>
<br>
<br>
<br><tt><font size=2>> nxserver says hello and gives me a prompt of
its own!</font></tt>
<br><tt><font size=2>> I don't know what to do at this point so I say
"BYE".<br>
</font></tt>
<br><tt><font size=2>You can at this point test log in as your user</font></tt>
<br>
<br><tt><font size=2>( yup, another annoying test )</font></tt>
<br>
<br><tt><font size=2>at that</font></tt>
<br><tt><font size=2> "NX
> 105 " prompt</font></tt>
<br><tt><font size=2> ( your version will probably be different )</font></tt>
<br><tt><font size=2>enter</font></tt>
<br><tt><font size=2> login <return></font></tt>
<br><tt><font size=2>expect</font></tt>
<br><tt><font size=2> "NX>
101 User:"</font></tt>
<br><tt><font size=2>enter</font></tt>
<br><tt><font size=2> "glen"
<return></font></tt>
<br><tt><font size=2>expect</font></tt>
<br><tt><font size=2> "NX> 102
Password:</font></tt><font size=2 face="sans-serif">"</font>
<br>
<br><font size=2 face="sans-serif">now enter user account "glen"'s
password and return</font>
<br><font size=2 face="sans-serif">(you still have PasswordAuthentication
yes I hope )</font>
<br>
<br><tt><font size=2>expect</font></tt>
<br><tt><font size=2> "NX> 103
Welcome to: harrow user: glen</font></tt>
<br><tt><font size=2> NX> 105"</font></tt>
<br>
<br><tt><font size=2>If you <return> you will see a "quit"
reply</font></tt>
<br>
<br><tt><font size=2>eg.</font></tt>
<br>
<br>
<br><tt><font size=2>HELLO NXSERVER - Version 3.2.0-73 OS (GPL, using backend:
3.5.0)
</font></tt>
<br><tt><font size=2>NX> 105 login</font></tt>
<br><tt><font size=2>login</font></tt>
<br><tt><font size=2>NX> 101 User: glen</font></tt>
<br><tt><font size=2>glen</font></tt>
<br><tt><font size=2>NX> 102 Password:</font></tt>
<br><tt><font size=2>NX> 103 Welcome to: servername user: glen</font></tt>
<br><tt><font size=2>NX> 105</font></tt>
<br>
<br><tt><font size=2>quit</font></tt>
<br><tt><font size=2>Quit</font></tt>
<br><tt><font size=2>NX> 999 Bye</font></tt>
<br>
<br><tt><font size=2>> <br>
> Now, going back to the nomachine client on my windows computer, I
<br>
> try logging in again over the ssh protocol with the nomachine login
<br>
> and using the nxserver private key. I again attempt logging in with
<br>
> my ubuntu user and password, although authentication fails once again:<br>
</font></tt>
<br><tt><font size=2>> Pseudo-terminal will not be allocated because
stdin is not a terminal.<br>
> <br>
> Permission denied (publickey,password).</font></tt>
<br><tt><font size=2>> Any further ideas?<br>
</font></tt>
<br><tt><font size=2>Yup.</font></tt>
<br>
<br><tt><font size=2>put the correct key ( for user nx ) into the client</font></tt>
<br><tt><font size=2>with</font></tt>
<br><tt><font size=2>your username and password ( glen, glen's password
)</font></tt>
<br>
<br>
<br><tt><font size=2>Have</font></tt>
<br><tt><font size=2> PasswordAuthentication
yes</font></tt>
<br><tt><font size=2>in ssh</font></tt>
<br>
<br>
<br><tt><font size=2>Look in the log if it doesn't work and tell us what
it says</font></tt>
<br><tt><font size=2>for the session you just tried</font></tt>
<br><tt><font size=2>( you may have another issue too )</font></tt>
<br>
<br><tt><font size=2>Let us know how you get on . . </font></tt>
<br>
<br>
<br>
<br>
<br>