[FreeNX-kNX] User authentication

[Jeffrey Borg]

Hi,

Basically nx works by logging in via ssh as the "nx" user which has 
nxserver for it's shell.

You can either use the nomachine key (preinstalled in the client) 
or change this key.

As with all ssh based things - you can have multiple 
keys for the same nx user. - in fact you can use the existing keys. Just 
grab each users ~/.ssh/authorized_keys file and put it into the 
~nx/.ssh/authorized_keys  - then tell the user to paste their private key 
into the nx client )


Once the nx client logs in via nx at hostname the nxserver script can either 
use ssh (using passwords) or su (using passwords) to actually login as 
the user.

If you want nx without this then you can not use the no machine client you 
will have to use nxnode directly. (more complex)

nx is not really equal to ssh BUT it does use ssh.

On Tue, 22 Aug 2006, Bram Biesbrouck wrote:

> On Tuesday 22 August 2006 15:00, Jeffrey Borg wrote:
>> Hi,
>>
>> If your ssh server is configured only to use keys and not passwords. edit
>> the node.conf file and use su authentication instead of ssh.
>
> Hmm, I don't get this. How do I transfer the key from the client to the server
> then? I'm looking for a way to use a RSA key, instead of a password, to log
> in to the server, using nxclient. Since all users have their own key (stored
> on a stick), the key moves around, and needs to be transferred to the server
> somehow.
> I don't know, I'm just thinking out loud, perhaps I'm missing something about
> the inner workings of NX...
>
>> If you want more security don't use the nomachine ssh key for the nx user.
>> Generate your own set and put the private key for the nx user into the
>> nomachine client.
>
> Can I use this approach and define a set of valid keys on the server, instead
> of a single one?
>
> Thanks for the quick answer,
>
> Bram
>>
>> On Tue, 22 Aug 2006, Bram Biesbrouck wrote:
>>> Hi all,
>>>
>>> I'm trying to login into the freenx server, using authentication keys,
>>> instead of passwords. Is there any support for this? Can't find any
>>> option in the Nomachine client for this either...
>>>
>>> Bram
>>
>> ________________________________________________________________
>>      Were you helped on this list with your FreeNX problem?
>>     Then please write up the solution in the FreeNX Wiki/FAQ:
>>   http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ
>>          Don't forget to check the NX Knowledge Base:
>>                  http://www.nomachine.com/kb/
>>
>> ________________________________________________________________
>>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>>       https://mail.kde.org/mailman/listinfo/freenx-knx
>> ________________________________________________________________
> ________________________________________________________________
>     Were you helped on this list with your FreeNX problem?
>    Then please write up the solution in the FreeNX Wiki/FAQ:
>  http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ
>         Don't forget to check the NX Knowledge Base:
>                 http://www.nomachine.com/kb/
>
> ________________________________________________________________
>       FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>      https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________
>