[FreeNX-kNX] FreeNX and Active Directory

[Verner Kjærsgaard]

chris at ccburton.com skrev:
> 
> 
> William Keaney <keaneyw at gmail.com> wrote on 28/08/2009 18:42:46:
> 
>> Hello,
>>
>> I have a CentOS 5.3 server on which I have installed FreeNX 0.7.3. 
>> This machine has been bound to our Active Directory, and users are
>> able to successfully authenticate against AD when logging into it.
>> However, when I connect to the FreeNX service, it logs me in as the
>> 'nx' user.  I would like FreeNX to authenticate user names against
>> AD as well, and to log them into the appropriate accounts after
>> connecting.  I have found a few guides and howtos that seem mostly
>> outdated, and none actually cover the aspect of getting FreeNX
>> itself to use AD for authentication. 
>> Does anyone know if/how I can make this happen?
>>
>> Thank you for your help, and for a really great tool.
> 
> 
> Most of us try to avoid active directory, including me !!
> 
> 
> Do you have sshd_config set up to authenticate using pam (UsePAM yes)????
> 
> 
> It sounds like AD is all set up in /etc/pam.d/system-auth and
> /etc/nsswitch.conf and working.
> 
> 
> 
> The nx user is used ONLY to set up a tunnel over Openssh using a dsa key
> and to run /usr/bin/nxserver.
> 
> /usr/bin/nxserver then logs in the user via another ssh session to
> localhost using PasswordAuthentication which you therefore must ensure
> is also enabled in sshd_config.
> 
> so
> 
> I'm not sure what you mean by FreeNX logging you in as 'nx' user !!
> 
> 
> Try logging in locally on the server as the remote user, USING ssh TO
> LOCALHOST AND PASSWORD authentication.
> 
> This will test if the user works over ssh against AD.
> 
> chris
> 
> 
>>
>> Will
> Keaney________________________________________________________________
>>      Were you helped on this list with your FreeNX problem?
>>     Then please write up the solution in the FreeNX Wiki/FAQ:
>>
>> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>>  
>>          Don't forget to check the NX Knowledge Base:
>>                  http://www.nomachine.com/kb/
>>
>> ________________________________________________________________
>>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>>       https://mail.kde.org/mailman/listinfo/freenx-knx
>> ________________________________________________________________
> 
> 
> ------------------------------------------------------------------------
> 
> ________________________________________________________________
>      Were you helped on this list with your FreeNX problem?
>     Then please write up the solution in the FreeNX Wiki/FAQ:
> 
> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>   
>          Don't forget to check the NX Knowledge Base:
>                  http://www.nomachine.com/kb/ 
> 
> ________________________________________________________________
>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>       https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________

I once made it work...only I don't recall all details.
One thing though...if the login is in the form of

user\domain

then remember to double the backslash a ka

user\\domain

- if it's of any help...


-- 
------------------------------
Med venlig hilsen/Best regards
Verner Kjærsgaard