[FreeNX-kNX] FreeNX Latest + NX 2.1.0 + FC5 + NX.usermode = Possible Bug Fix

[Brian Ferris]

I've spent the last day getting NX working under Fedora Core 5 and I wanted
to mention my fix.  On my remote server, I'm running FreeNX latest from svn
and NX 2.1.0.  On my client, I'm running the most recent NX client.  I'm
also running FreeNX in usermode (as described here:
http://openfacts.berlios.de/index-en.phtml?title=FreeNX_Howto)

After fixing a few config bugs of my own doing, I ran into a show stopper
along the same lines as the problem mentioned here:

[FreeNX-kNX] NX 2.1.0 -
http://mail.kde.org/pipermail/freenx-knx/2006-October/004169.html

    NX> 596 Session startup failed.
    NX> 1004 Error: NX Agent exited with exit status 1.

After examining my session file on the server side, I noticed the nxagent
was waiting for a connection from the remote clients IP address (we'll call
it 192.168.0.100) but the connection was actually coming in from the local
interface (127.0.01) and was rejected.

Specifically, the session log looks like:

    Info: Agent running with pid '19835'.
    Session: Starting session at 'Tue Dec 12 11:15:33 2006'.
    Info: Proxy running in server mode with pid '19835'.
    Info: Waiting for connection from '192.168.0.100' on port '5001'.
    Warning: Refusing connection from '127.0.0.1' on port '5001'.

If we go back and look at the source for nxnode, we find:

    if [ "$ssl_tunnel" = "1" ]
    then
            # we need to use the IP of the "calling" server now
            userip=$(echo $SSH_CLIENT $SSH2_CLIENT | cut -d" " -f1 | sed
's/::ffff://g')

            # TODO: This logic is broken ... ;-)
            [ -z "$userip" ] && userip="127.0.0.1"
            [ -z "$userip" -a "$host" != "127.0.0.1" ] && userip="*"
    fi

I'm running in SSL tunnel mode and $userip is the key variable passed on to
nxagent for accepting connections.    The $userip is set to the remote
client address in the "userip=$(echo $SSH_CLIENT $SSH2_CLIENT | cut -d" "
-f1 | sed 's/::ffff://g')" line, where $SSH_CLIENT="192.168.0.100 blah 49499
22".  I got things working by adding a "userip=127.0.01" in there.

I'm not sure what the appropriate fix here is and the TODO line is a little
ominous.  Any thoughts?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20061212/1203d240/attachment.html>