[FreeNX-kNX] FreeNX and Active Directory

[chris at ccburton.com]

William Keaney <keaneyw at gmail.com> wrote on 28/08/2009 18:42:46:

> Hello,
> 
> I have a CentOS 5.3 server on which I have installed FreeNX 0.7.3.  
> This machine has been bound to our Active Directory, and users are 
> able to successfully authenticate against AD when logging into it.
> However, when I connect to the FreeNX service, it logs me in as the 
> 'nx' user.  I would like FreeNX to authenticate user names against 
> AD as well, and to log them into the appropriate accounts after 
> connecting.  I have found a few guides and howtos that seem mostly 
> outdated, and none actually cover the aspect of getting FreeNX 
> itself to use AD for authentication.  
> Does anyone know if/how I can make this happen?
> 
> Thank you for your help, and for a really great tool.


Most of us try to avoid active directory, including me !!


Do you have sshd_config set up to authenticate using pam (UsePAM yes)????


It sounds like AD is all set up in /etc/pam.d/system-auth and 
/etc/nsswitch.conf and working.



The nx user is used ONLY to set up a tunnel over Openssh using a dsa key 
and to run /usr/bin/nxserver.

/usr/bin/nxserver then logs in the user via another ssh session to 
localhost using PasswordAuthentication which you therefore must ensure is 
also enabled in sshd_config.

so

I'm not sure what you mean by FreeNX logging you in as 'nx' user !!


Try logging in locally on the server as the remote user, USING ssh TO 
LOCALHOST AND PASSWORD authentication.

This will test if the user works over ssh against AD.

chris


> 
> Will 
Keaney________________________________________________________________
>      Were you helped on this list with your FreeNX problem?
>     Then please write up the solution in the FreeNX Wiki/FAQ:
> 
> 
http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
> 
>          Don't forget to check the NX Knowledge Base:
>                  http://www.nomachine.com/kb/ 
> 
> ________________________________________________________________
>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>       https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20090829/f3874fbc/attachment.html>