[FreeNX-kNX] authentication failed message

[Roderick Johnstone]

Rob,

Thanks for the info. Neither 2 nor 7 work for me so I guess my pam 
authentication is broken in some way. This is Fedora Core 2.

Roderick

  thanksRob Thomas wrote:
> Hi,
> I'm using CentOS3.3 (was Whitebox until a couple of days ago) which
> does use PAM. My default settings were ....
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="0"
> ENABLE_PASSDB_AUTHENTICATION="1"
> Which allows users to be PAM authenticated. 
> 
> After some testing I found this on my system which I'm assuming is
> configured correctly ....
> 
> 1) With 
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="1"
> ENABLE_PASSDB_AUTHENTICATION="1"
> System user and nx user can log on with their approriate passwords
> 
> 2) With 
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="1"
> ENABLE_PASSDB_AUTHENTICATION="0"
> User can log on with the system password but not the nx password
> 
> 3)With
> ENABLE_PAM_AUTHENTICATION="0"
> ENABLE_USER_DB="0"
> Neither system user or nx user can log on
> 
> 4) With
> ENABLE_PAM_AUTHENTICATION="0"
> ENABLE_USER_DB="1"
> ENABLE_PASSDB_AUTHENTICATION="0"
> Neither system user or nx user can log on 
> 
> 5) With
> ENABLE_PAM_AUTHENTICATION="0"
> ENABLE_USER_DB="1"
> ENABLE_PASSDB_AUTHENTICATION="1"
> User can log on with the nx password but not the system password.
> 
> 6) With
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="0"
> ENABLE_PASSDB_AUTHENTICATION="1"
> User can log on with their system or nx password.
> 
> 7) With
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="0"
> ENABLE_PASSDB_AUTHENTICATION="0"
> User can log on with system password but not nx password.
> 
> I think the above is correct. This is not every permutation of these
> parameters or users (I used the same ID within system and nx but
> different passwords).
> So in answer to your question Roderick yes your understanding in 1 is
> correct and it doesn't look as if your PAM authentication is working
> properly. Although in 2 because the PAM id must the same as the nx id
> then the nx users password is used.
> What linux distrib are you using?
> Cheers
> Rob
> ---------- Forwarded message ----------
> From: Marcin Bukat <wodz at soliton.ch.pw.edu.pl>
> Date: Thu, 09 Dec 2004 12:23:22 +0100
> Subject: Re: [FreeNX-kNX] authentication failed message
> To: 
> Cc: freenx-knx at kde.org
> 
> 
> Roderick Johnstone wrote:
> 
> 
> 
> 
>>Hi
>>
>>1) Is it intended that with the following settings in nxserver I
>>should be able to establish an nx connection to the server without having
>>explicitly added users to the nxserver password database with nxserver
>>--adduser and nxserver --passwd commnds, and using the regular login
>>password? I've never been able to get this to work; it gives me
>>"authentication failed for user blah".
>>
>>ENABLE_PAM_AUTHENTICATION="1"
>>ENABLE_USER_DB="0"
>>ENABLE_PASSDB_AUTHENTICATION="0"
>>
>>2) If I set: ENABLE_PASSDB_AUTHENTICATION="1" and add the user and
>>password with nxserver --adduser and nxserver --passwd as above then
>>it works fine so I don't think anything is too badly wrong in my setup.
>>
>>Can anyone advise please whether my expectations in 1) are correct and
>>suggest what debugging I can do to find out whats going wrong.
>>
>>This is on Fedora Core 2 (both server and client), and using the
>>packages (freenx 0.2.7, nx 1.4.0, nx-client 1.4.0) and instructions
>>from Rick Stout's page at:
>>http://www.fedoranews.org/contributors/rick_stout/freenx/
>>
>>Thanks
>>
>>Roderick Johnstone
> 
> 
> I'm using FreeNX-0.25 on slackware-10 (which has no PAM at all) and setting
> ENABLE_PAM_AUTHENTICATION="1"
> ENABLE_USER_DB="1"
> ENABLE_PASSDB_AUTHENTICATION="0"
> 
> works for me as designed (added to internal database users are
> authenticated against system passwords). This supprised me a bit but it
> seems  sshd is used to authenticate users so PAM in name is missleading.
> (or I'am wrong?)
> 
> regards
> Marcin Bukat
> 
> 
> 
> 
> _______________________________________________
> FreeNX-kNX mailing list
> FreeNX-kNX at kde.org
> https://mail.kde.org/mailman/listinfo/freenx-knx
> _______________________________________________
> FreeNX-kNX mailing list
> FreeNX-kNX at kde.org
> https://mail.kde.org/mailman/listinfo/freenx-knx