IIRC, nx defaults to /home/user/.ssh/authorized_keys2 whereas we always use /home/user/.ssh/authorized_keys. I would ensure nx is configured to look in the correct directory for the public key. We have zero windows boxes in my shop so I do not know how or if windows can be configured with key authorization. You could try temporarily enabeling password authorization on the server and see if that works.
HTH, B.J. CentOS 5.5, Linux 2.6.18-194.11.1.el5 athlon 11:29:14 up 15:54, 1 user, load average: 0.07, 0.16, 0.15
On Sun, 2010-08-15 at 23:17 +0800, gaohu wrote:
I have installed freenx with this article
http://wiki.centos.org/HowTos/FreeNX
but when I use freenx-client on windows to connect to server, I always get an "freenx Authentication failed."
client err log output as this: NX> 203 NXSSH running with pid: 1584 NX> 285 Enabling check on switch command NX> 285 Enabling skip of SSH config files NX> 285 Setting the preferred NX options NX> 200 Connected to address: 192.168.253.5 on port: 22 NX> 202 Authenticating user: nx NX> 208 Using auth method: publickey NX> 204 Authentication failed.
My sshd configed as use rsa key, and ssh soft like xshell can work well.
nxsetup output as this: Pleas care the following red commented two line. I just think this is the point. But why , and what shoud I do to solver ?
[root@tigertall ~]# nxsetup --test
----> Testing your nxserver configuration ... Warning: Could not find nxdesktop in /usr/bin. RDP sessions won't work. Warning: Could not find nxviewer in /usr/bin. VNC sessions won't work. Warning: Invalid value "APPLICATION_LIBRARY_PRELOAD=/usr/lib/libX11.so.6.2:/usr/lib/libXext.so.6.4:/usr/lib/libXcomp.so.2:/usr/lib/libXcompext.so:/usr/lib/libXrender.so.1.2". /usr/lib/libX11.so.6.2 could not be found. Users will not be able to run a single application in non-rootless mode. Warning: Invalid value "DEFAULT_X_SESSION=/etc/X11/xdm/Xsession" Users might not be able to request a default X session. Warning: Invalid value "COMMAND_START_CDE=cdwm" Users will not be able to request a CDE session. Warning: Invalid value "COMMAND_SMBMOUNT=smbmount". You'll not be able to use SAMBA. Warning: Invalid value "COMMAND_SMBUMOUNT=smbumount". You'll not be able to use SAMBA. Error: Could not find 1.5.0 or 2.[01].0 or 3.[01].0 version string in nxagent. NX 1.5.0 or 2.[01].0 or 3.[012].0 backend is needed for this version of FreeNX.
Warnings occured during config check. To enable these features please correct the configuration file.
<---- done
----> Testing your nxserver connection ... Permission denied (publickey,gssapi-with-mic). Fatal error: Could not connect to NX Server.
Please check your ssh setup:
The following are _examples_ of what you might need to check.
- Make sure "nx" is one of the AllowUsers in sshd_config. (or that the line is outcommented/not there)
- Make sure "nx" is one of the AllowGroups in sshd_config. (or that the line is outcommented/not there)
- Make sure your sshd allows public key authentication.
- Make sure your sshd is really running on port 22.
- Make sure your sshd_config AuthorizedKeysFile in sshd_config is set to authorized_keys2. (this should be a filename not a pathname+filename)
- Make sure you allow ssh on localhost, this could come from some restriction of: -the tcp wrapper. Then add in /etc/hosts.allow: ALL:localhost -the iptables. add to it: $ iptables -A INPUT -i lo -j ACCEPT $ iptables -A OUTPUT -o lo -j ACCEPT
[root@tigertall ~]#
Thanks you!
2010-08-15
gaohu
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos