[FreeNX-kNX] Session startup failed (was No /usr/NX directory after "yum install freenx" and Authetication failure and nothing helped so far)

Thomas Pfrommer pfrommer at phas.ubc.ca
Tue Apr 24 08:26:05 UTC 2007


Hi again,
OK now I did a complete startup after clearing everything also I had to 
clear the user nx in /etc/passwd, /etc/shadow and in the two group files 
as well. Also I got a resh sshd_config and a fresh ssh_config from a 
friend who did not mess it up.
I gave it a next trial with the newest rpms (nx 2.1.0-19.fc6.at-386.rpm 
and freenx 0.6.0-12.fc6.at.i386.rpm)
got the athentication --> yipiiieee!!
BUT the session startup failed. OK I googled again enabled loglevel=7 
in  node.conf, also I  activated ENABLE_2_0_0_BACKEND=1 as I am using 
the 2.1.0 backend.
Hopefully you can help me with this error ....
The nxserver.log gives following output after some successful logs (at 
least some ;-))

NX> 148 Server capacity: not reached for user: lobs
NX> 105 startsession  --link="adsl" --backingstore="1" --nodelay="1" 
--encryption="1" --cache="8M" --images="32M" --media="0" 
--session="lobsNX" --type="unix-gnome" --geometry="1024x768+208+53" 
--kbtype="query" --screeninfo="1024x768x32+render"

&link=adsl&backingstore=1&nodelay=1&encryption=1&cache=8M&images=32M&media=0&session=lobsNX&type=unix-gnome&geometry=1024x768+208+53&kbtype=query&screeninfo=1024x768x32+render&clientproto=1.5.0&user=lobs&userip=154.20.41.180&uniqueid=911474ED5AB68E47B7695E30C529C7E1&display=1000&host=127.0.0.1 

lobs at 127.0.0.1's password:
NX> 1000 NXNODE - Version 1.5.0-60 OS (GPL)
NX> 1004 Error: NX Agent exited with exit status 1.
NX> 105 NX> 596 Session startup failed.
NX> 1006 Session status: closed
NX> 700 Session id: 
localhost.phas.ubc.ca-1000-911474ED5AB68E47B7695E30C529C7E1
NX> 705 Session display: 1000
NX> 703 Session type: unix-gnome
NX> 701 Proxy cookie: 820116f8ec02ff1edbdca3d7a63a45ff
NX> 702 Proxy IP: 127.0.0.1
NX> 706 Agent cookie: 820116f8ec02ff1edbdca3d7a63a45ff
NX> 704 Session cache: unix-gnome
NX> 707 SSL tunneling: 1
NX> 1001 Bye.

Then I activated the SESSION_LOG_CLEAN=0
and session in home/.nx/F-C<session ID>/ gives following error message 
(there is no "error"-file):

/usr/libexec/nx/nxagent: error while loading shared libraries: 
/usr/lib/nx/libXcomp.so.2: cannot restore segment prot after reloc: 
Permission denied

Hm this is the directory:
[root at localhost nx]# ls -l libXc*
-rwxr-xr-x 1 root root   80020 Mar  4 13:03 libXcompext.so.2
-rwxr-xr-x 1 root root   80024 Mar  4 13:03 libXcompext.so.2.1.0
-rwxr-xr-x 1 root root 1108200 Mar  4 13:03 libXcomp.so.2
-rwxr-xr-x 1 root root 1108204 Mar  4 13:03 libXcomp.so.2.1.0

Should I change the permissions? chmod chown? In case it is important 
(?): The end of my /var/log/messages looks like the follwing:

Apr 23 23:23:03 localhost restorecond: Will not restore a file with more 
than one hard link (/etc/resolv.conf) No such file or directory
Apr 23 23:25:18 localhost dhclient: DHCPREQUEST on eth0 to 
142.103.234.100 port 67
Apr 23 23:25:18 localhost dhclient: DHCPACK from 142.103.234.100
Apr 23 23:25:18 localhost dhclient: bound to 142.103.234.64 -- renewal 
in 1353 seconds.
Apr 23 23:47:51 localhost dhclient: DHCPREQUEST on eth0 to 
142.103.234.100 port 67
Apr 23 23:47:52 localhost dhclient: DHCPACK from 142.103.234.100
Apr 23 23:47:52 localhost dhclient: bound to 142.103.234.64 -- renewal 
in 1627 seconds.
Apr 23 23:59:19 localhost kernel: audit(1177397959.569:4): avc:  denied  
{ execmod } for  pid=6547 comm="nxagent" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 23 23:59:19 localhost kernel: audit(1177397959.739:5): avc:  denied  
{ execmod } for  pid=6622 comm="xauth" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:05:47 localhost ntpd[4815]: synchronized to 137.82.1.3, stratum 2
Apr 24 00:14:59 localhost dhclient: DHCPREQUEST on eth0 to 
142.103.234.100 port 67
Apr 24 00:14:59 localhost dhclient: DHCPACK from 142.103.234.100
Apr 24 00:14:59 localhost dhclient: bound to 142.103.234.64 -- renewal 
in 1705 seconds.
Apr 24 00:15:37 localhost kernel: audit(1177398937.299:6): avc:  denied  
{ execmod } for  pid=7183 comm="nxagent" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:15:37 localhost kernel: audit(1177398937.501:7): avc:  denied  
{ execmod } for  pid=7267 comm="xauth" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:21:16 localhost kernel: audit(1177399276.055:8): avc:  denied  
{ execmod } for  pid=7802 comm="nxagent" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:21:16 localhost kernel: audit(1177399276.245:9): avc:  denied  
{ execmod } for  pid=7886 comm="xauth" name="libXcomp.so.2" dev=dm-0 
ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:23:10 localhost kernel: audit(1177399390.821:10): avc:  
denied  { execmod } for  pid=8364 comm="nxagent" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:23:10 localhost kernel: audit(1177399390.888:11): avc:  
denied  { execmod } for  pid=8396 comm="xauth" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:32:54 localhost kernel: audit(1177399974.042:12): avc:  
denied  { execmod } for  pid=8931 comm="nxagent" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:32:54 localhost kernel: audit(1177399974.233:13): avc:  
denied  { execmod } for  pid=9015 comm="xauth" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:40:05 localhost ntpd[4815]: synchronized to LOCAL(0), stratum 10
Apr 24 00:43:24 localhost dhclient: DHCPREQUEST on eth0 to 
142.103.234.100 port 67
Apr 24 00:43:24 localhost dhclient: DHCPACK from 142.103.234.100
Apr 24 00:43:24 localhost dhclient: bound to 142.103.234.64 -- renewal 
in 1701 seconds.
Apr 24 00:47:53 localhost kernel: audit(1177400873.632:14): avc:  
denied  { execmod } for  pid=9577 comm="nxagent" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 00:47:53 localhost kernel: audit(1177400873.756:15): avc:  
denied  { execmod } for  pid=9628 comm="xauth" name="libXcomp.so.2" 
dev=dm-0 ino=1569653 scontext=user_u:system_r:unconfined_t:s0 
tcontext=system_u:object_r:lib_t:s0 tclass=file
Apr 24 01:11:45 localhost dhclient: DHCPREQUEST on eth0 to 
142.103.234.100 port 67
Apr 24 01:11:45 localhost dhclient: DHCPACK from 142.103.234.100
Apr 24 01:11:45 localhost dhclient: bound to 142.103.234.64 -- renewal 
in 1728 seconds.


Thanks already for all your suggestions up to now. It seems i am getting 
closer ....
By the way, NoMachine seems to support shadowing sessions (and also 
transfering the actual real display) with there new server version 3.0. 
Is there plans to implement such a feature in freenx in the near future 
as well?

Thanks a lot
Cheers
Thomas



More information about the FreeNX-kNX mailing list