[FreeNX-kNX] FreeNX and Active Directory

[William Keaney]

I don't know what's changed since Friday, but it's working this morning.  I
didn't change any configs, or reboot the server.  Weird.

Thanks for your suggestions.

Will Keaney

On Sat, Aug 29, 2009 at 12:06 PM, Verner Kjærsgaard <vk at os-academy.dk>wrote:

>
>
> chris at ccburton.com skrev:
> >
> >
> > William Keaney <keaneyw at gmail.com> wrote on 28/08/2009 18:42:46:
> >
> >> Hello,
> >>
> >> I have a CentOS 5.3 server on which I have installed FreeNX 0.7.3.
> >> This machine has been bound to our Active Directory, and users are
> >> able to successfully authenticate against AD when logging into it.
> >> However, when I connect to the FreeNX service, it logs me in as the
> >> 'nx' user.  I would like FreeNX to authenticate user names against
> >> AD as well, and to log them into the appropriate accounts after
> >> connecting.  I have found a few guides and howtos that seem mostly
> >> outdated, and none actually cover the aspect of getting FreeNX
> >> itself to use AD for authentication.
> >> Does anyone know if/how I can make this happen?
> >>
> >> Thank you for your help, and for a really great tool.
> >
> >
> > Most of us try to avoid active directory, including me !!
> >
> >
> > Do you have sshd_config set up to authenticate using pam (UsePAM yes)????
> >
> >
> > It sounds like AD is all set up in /etc/pam.d/system-auth and
> > /etc/nsswitch.conf and working.
> >
> >
> >
> > The nx user is used ONLY to set up a tunnel over Openssh using a dsa key
> > and to run /usr/bin/nxserver.
> >
> > /usr/bin/nxserver then logs in the user via another ssh session to
> > localhost using PasswordAuthentication which you therefore must ensure
> > is also enabled in sshd_config.
> >
> > so
> >
> > I'm not sure what you mean by FreeNX logging you in as 'nx' user !!
> >
> >
> > Try logging in locally on the server as the remote user, USING ssh TO
> > LOCALHOST AND PASSWORD authentication.
> >
> > This will test if the user works over ssh against AD.
> >
> > chris
> >
> >
> >>
> >> Will
> > Keaney________________________________________________________________
> >>      Were you helped on this list with your FreeNX problem?
> >>     Then please write up the solution in the FreeNX Wiki/FAQ:
> >>
> >>
> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
> >>
> >>          Don't forget to check the NX Knowledge Base:
> >>                  http://www.nomachine.com/kb/
> >>
> >> ________________________________________________________________
> >>        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
> >>       https://mail.kde.org/mailman/listinfo/freenx-knx
> >> ________________________________________________________________
> >
> >
> > ------------------------------------------------------------------------
> >
> > ________________________________________________________________
> >      Were you helped on this list with your FreeNX problem?
> >     Then please write up the solution in the FreeNX Wiki/FAQ:
> >
> >
> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
> >
> >          Don't forget to check the NX Knowledge Base:
> >                  http://www.nomachine.com/kb/
> >
> > ________________________________________________________________
> >        FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
> >       https://mail.kde.org/mailman/listinfo/freenx-knx
> > ________________________________________________________________
>
> I once made it work...only I don't recall all details.
> One thing though...if the login is in the form of
>
> user\domain
>
> then remember to double the backslash a ka
>
> user\\domain
>
> - if it's of any help...
>
>
> --
> ------------------------------
> Med venlig hilsen/Best regards
> Verner Kjærsgaard
> ________________________________________________________________
>     Were you helped on this list with your FreeNX problem?
>    Then please write up the solution in the FreeNX Wiki/FAQ:
>
> http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>
>         Don't forget to check the NX Knowledge Base:
>                 http://www.nomachine.com/kb/
>
> ________________________________________________________________
>       FreeNX-kNX mailing list --- FreeNX-kNX at kde.org
>      https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20090831/0a667806/attachment.html>