[FreeNX-kNX] FreeNX CentOS Permission denied (publickey, gssapi-keyex, gssapi-with-mic)

[chris at ccburton.com]

freenx-knx-bounces at kde.org wrote on 27/07/2013 04:50:24:

[SNIP]


> Last login: Fri Jul 26 20:43:23 2013 from localhost.localdomain
> [user at localhost ~]$ exit
> logout
> Connection to 127.0.0.1 closed.
> -bash-4.1$
>  
> So, that worked.

YUP - ssh is ok by the sound of it.
and
that means you have
         the PASSDB private key
 and
        permissions
 correctly set up in your
         ~/.ssh/authorized_keys
file.


So next you need to check the PASSDB password database file
so
what is in:-
        /etc/nxserver/passwords
????

NOTE:-
it ought to contain your username and md5 hashed password in format:-

. . .
user-name:md5-hashed-password
. . .
other-user-name1:md5-hashed-password1
other-user-name2:md5-hashed-password1
other-user-name3:md5-hashed-password1
. . etc . .

*** so be careful what you do with it ***



If you run

        echo "mypassword"|md5sum|cut -d" " -f1

the output should match the hashed password field.



***** WATCH OUT FOR DUPLICATE ENTRIES etc *****





I'm not sure how you have organized your passwords.

The password hashed in the PASSDB file needs to be the

        SAME ONE you use in the nxclient

but
        needn't be the same as your user password in Linux/FreeNX

because you are using key authentication to set up your user session.

This is why it's such a mess cos there are

         two password/databases

to track/sync/de-sync/keep secure


[SNIP]


good luck. Let us know how you get on.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.kde.org/pipermail/freenx-knx/attachments/20130727/6af9cc1a/attachment.html>