[FreeNX-kNX] freenx not 'cooperating' with non-standard openssh install (i think ...)
OpenMacNews
openmacnews at gmail.com
Tue Feb 14 03:43:16 UTC 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
hi all,
i've freenx & NX installed on OpenSuSE 10.0/ KDE 3.4.
on attempt to connect from a localhost NX client, my nxclient logs report: "pubkey
authentication failed ..."
after a bit of monkeying around, i suspect this has to do with the fact that my sshd is setup to
use a NONSTANDARD config file/location, and there's some sort of 'collision' with nxssh's
'expectations' ...
specifically, i've setup /etc/sysconfig/sshd to define $SSHD_OPTS, called explicitly by
/etc/rc.d/sshd, to:
SSHD_OPTS = "-f /a/non/standard/location/for/ssh/files/sshd_config
and the config is for machine-to-machine connect/auth via pubkey auth only. for reference,
% cat /a/non/standard/location/for/ssh/files/sshd_config
=====================================================================
HostKey /a/non/standard/location/for/ssh/files/ssh.myhost.dsa
ListenAddress 10.0.0.6:22
ListenAddress 127.0.0.1:22
AuthorizedKeysFile /a/non/standard/location/for/ssh/files/authorized_keys2
Protocol 2
AllowUsers root nx
AllowGroups wheel root
PermitRootLogin yes
PidFile /var/Process/sshd.pid
Subsystem sftp /usr/local/openssh/libexec/sftp-server
###################
## Logging
#
SyslogFacility AUTH
LogLevel INFO
PubkeyAuthentication yes
ChallengeResponseAuthentication no
HostbasedAuthentication no
PasswordAuthentication no
RhostsRSAAuthentication no
RSAAuthentication no
Ciphers
aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc,aes128-ctr,aes192-ctr,aes256-ctr
MACs hmac-md5,hmac-sha1,hmac-ripemd160,hmac-sha1-96,hmac-md5-96
Compression yes
GatewayPorts no
IgnoreRhosts yes
IgnoreUserKnownHosts no
ServerKeyBits 2048
LoginGraceTime 120
MaxStartups 10
PermitEmptyPasswords no
StrictModes no
UseDNS no
UseLogin no
UsePAM no
UsePrivilegeSeparation yes
AllowTcpForwarding no
X11Forwarding yes
X11UseLocalhost yes
X11DisplayOffset 10
PrintMotd no
TCPKeepAlive yes
=====================================================================
question(s):
CAN freenx be setup to co-exist with my current openssh/sshd setup?
if so, HOW do i 'point' nx at *my* config file/location, and its referenced DSA host key?
any pointers are much appreciated!
cheers,
richard
- --
/"\
\ / ASCII Ribbon Campaign
X against HTML email, vCards
/ \ & micro$oft attachments
[GPG] OpenMacNews at gmail dot com
fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (Darwin)
iEYEAREDAAYFAkPxUdMACgkQlffdvTZxCMZBEgCgpTGUGYV+TvXQqlFm5I6iSvFI
UjwAn0/awIemEkEGohmClB+u9m+pTFky
=aG3Y
-----END PGP SIGNATURE-----
More information about the FreeNX-kNX
mailing list