[FreeNX-kNX] authentication failed message

[Rob Thomas]

Hi,
I'm using CentOS3.3 (was Whitebox until a couple of days ago) which
does use PAM. My default settings were ....
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="0"
ENABLE_PASSDB_AUTHENTICATION="1"
Which allows users to be PAM authenticated. 

After some testing I found this on my system which I'm assuming is
configured correctly ....

1) With 
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="1"
ENABLE_PASSDB_AUTHENTICATION="1"
System user and nx user can log on with their approriate passwords

2) With 
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="1"
ENABLE_PASSDB_AUTHENTICATION="0"
User can log on with the system password but not the nx password

3)With
ENABLE_PAM_AUTHENTICATION="0"
ENABLE_USER_DB="0"
Neither system user or nx user can log on

4) With
ENABLE_PAM_AUTHENTICATION="0"
ENABLE_USER_DB="1"
ENABLE_PASSDB_AUTHENTICATION="0"
Neither system user or nx user can log on 

5) With
ENABLE_PAM_AUTHENTICATION="0"
ENABLE_USER_DB="1"
ENABLE_PASSDB_AUTHENTICATION="1"
User can log on with the nx password but not the system password.

6) With
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="0"
ENABLE_PASSDB_AUTHENTICATION="1"
User can log on with their system or nx password.

7) With
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="0"
ENABLE_PASSDB_AUTHENTICATION="0"
User can log on with system password but not nx password.

I think the above is correct. This is not every permutation of these
parameters or users (I used the same ID within system and nx but
different passwords).
So in answer to your question Roderick yes your understanding in 1 is
correct and it doesn't look as if your PAM authentication is working
properly. Although in 2 because the PAM id must the same as the nx id
then the nx users password is used.
What linux distrib are you using?
Cheers
Rob
---------- Forwarded message ----------
From: Marcin Bukat <wodz at soliton.ch.pw.edu.pl>
Date: Thu, 09 Dec 2004 12:23:22 +0100
Subject: Re: [FreeNX-kNX] authentication failed message
To: 
Cc: freenx-knx at kde.org


Roderick Johnstone wrote:



> Hi
>
> 1) Is it intended that with the following settings in nxserver I
> should be able to establish an nx connection to the server without having
> explicitly added users to the nxserver password database with nxserver
> --adduser and nxserver --passwd commnds, and using the regular login
> password? I've never been able to get this to work; it gives me
> "authentication failed for user blah".
>
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="0"
> ENABLE_PASSDB_AUTHENTICATION="0"
>
> 2) If I set: ENABLE_PASSDB_AUTHENTICATION="1" and add the user and
> password with nxserver --adduser and nxserver --passwd as above then
> it works fine so I don't think anything is too badly wrong in my setup.
>
> Can anyone advise please whether my expectations in 1) are correct and
> suggest what debugging I can do to find out whats going wrong.
>
> This is on Fedora Core 2 (both server and client), and using the
> packages (freenx 0.2.7, nx 1.4.0, nx-client 1.4.0) and instructions
> from Rick Stout's page at:
> http://www.fedoranews.org/contributors/rick_stout/freenx/
>
> Thanks
>
> Roderick Johnstone

I'm using FreeNX-0.25 on slackware-10 (which has no PAM at all) and setting
ENABLE_PAM_AUTHENTICATION="1"
ENABLE_USER_DB="1"
ENABLE_PASSDB_AUTHENTICATION="0"

works for me as designed (added to internal database users are
authenticated against system passwords). This supprised me a bit but it
seems  sshd is used to authenticate users so PAM in name is missleading.
(or I'am wrong?)

regards
Marcin Bukat




_______________________________________________
FreeNX-kNX mailing list
FreeNX-kNX at kde.org
https://mail.kde.org/mailman/listinfo/freenx-knx