[FreeNX-kNX] connection to freeNX server with dsa keys ?

Fabian Franz FabianFranz at gmx.de
Tue Mar 15 14:21:57 UTC 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am Dienstag, 15. März 2005 15:10 schrieb Gian Filippo Pinzari:
> Jon Severinsson wrote:
> > Using FreeNX 0.3 or later you can set login through SU instead of
> > through SSH in the node.conf file. Fist login of the nx user is still
> > done with dsa, but the second login of the user is not done by ssh. It
> > is still done through passwords, but ssh does not have to accept
> > password authentification. You will have to add the nx user to the users
> > (SuSE) or wheel (most other distors) group for su to work though.
>
> When this mechanism is in use, how does FreeNX prevent that a user
> that has taken over the nxserver would become any user in the system,
> even users that are not NX users?

You still need a password for "su - username". Its just that you no longer use 
SSH to login the user with a password, but su.

cu

Fabian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFCNu+PI0lSH7CXz7MRAlkUAJ9lJaf7UfIqH51nwh1uPAMoWac8swCfUMY6
W7P6fqCxNyzyRtttnq/sS9o=
=1sCX
-----END PGP SIGNATURE-----




More information about the FreeNX-kNX mailing list