[CentOS] FreeNx doesn't work?

[b.j. mcclure]

IIRC, nx defaults to /home/user/.ssh/authorized_keys2 whereas we always
use /home/user/.ssh/authorized_keys.  I would ensure nx is configured to
look in the correct directory for the public key.  We have zero windows
boxes in my shop so I do not know how or if windows can be configured
with key authorization.  You could try temporarily enabeling password
authorization on the server and see if that works.

HTH,
B.J.
CentOS 5.5, Linux 2.6.18-194.11.1.el5 athlon 11:29:14 up 15:54, 1 user,
load average: 0.07, 0.16, 0.15


On Sun, 2010-08-15 at 23:17 +0800, gaohu wrote:
> I have installed freenx with this article
>  
> http://wiki.centos.org/HowTos/FreeNX 
>  
> but when I use freenx-client on windows to connect to server, 
> I always get an "freenx Authentication failed."
>  
> client err log output as this:
> NX> 203 NXSSH running with pid: 1584
> NX> 285 Enabling check on switch command
> NX> 285 Enabling skip of SSH config files
> NX> 285 Setting the preferred NX options
> NX> 200 Connected to address: 192.168.253.5 on port: 22
> NX> 202 Authenticating user: nx
> NX> 208 Using auth method: publickey
> NX> 204 Authentication failed.
>  
> My sshd configed as use rsa key, and ssh soft like xshell can work
> well.
>  
> nxsetup output as this: Pleas care the following red commented two
> line. I just think this is the point.
> But why , and what shoud I do to solver ?
>  
> [root at tigertall ~]# nxsetup --test
> 
> ----> Testing your nxserver configuration ...
> Warning: Could not find nxdesktop in /usr/bin. RDP sessions won't work.
> Warning: Could not find nxviewer in /usr/bin. VNC sessions won't work.
> Warning: Invalid value "APPLICATION_LIBRARY_PRELOAD=/usr/lib/libX11.so.6.2:/usr/lib/libXext.so.6.4:/usr/lib/libXcomp.so.2:/usr/lib/libXcompext.so:/usr/lib/libXrender.so.1.2". /usr/lib/libX11.so.6.2 could not be found. Users will not be able to run a single application in non-rootless mode.
> Warning: Invalid value "DEFAULT_X_SESSION=/etc/X11/xdm/Xsession"
>          Users might not be able to request a default X session.
> Warning: Invalid value "COMMAND_START_CDE=cdwm"
>          Users will not be able to request a CDE session.
> Warning: Invalid value "COMMAND_SMBMOUNT=smbmount". You'll not be able to use SAMBA. 
> Warning: Invalid value "COMMAND_SMBUMOUNT=smbumount". You'll not be able to use SAMBA.
> Error: Could not find 1.5.0 or 2.[01].0 or 3.[01].0 version string in nxagent. NX 1.5.0 or 2.[01].0 or 3.[012].0 backend is needed for this version of FreeNX.
> 
>   Warnings occured during config check.
>   To enable these features please correct the configuration file.
> 
> <---- done
> 
> ----> Testing your nxserver connection ...
> Permission denied (publickey,gssapi-with-mic).
> Fatal error: Could not connect to NX Server.
> 
> Please check your ssh setup:
> 
> The following are _examples_ of what you might need to check.
> 
> - Make sure "nx" is one of the AllowUsers in sshd_config.
>     (or that the line is outcommented/not there)
> - Make sure "nx" is one of the AllowGroups in sshd_config.
>     (or that the line is outcommented/not there)
> - Make sure your sshd allows public key authentication.
> - Make sure your sshd is really running on port 22.
> - Make sure your sshd_config AuthorizedKeysFile in sshd_config is set to authorized_keys2.
>     (this should be a filename not a pathname+filename)
>   - Make sure you allow ssh on localhost, this could come from some
>     restriction of:
>       -the tcp wrapper. Then add in /etc/hosts.allow: ALL:localhost
>       -the iptables. add to it:
>          $ iptables -A INPUT  -i lo -j ACCEPT
>          $ iptables -A OUTPUT -o lo -j ACCEPT
> [root at tigertall ~]# 
>  
>  
> Thanks you!
>  
> 2010-08-15 
> 
> 
> ______________________________________________________________________
> 
> gaohu 
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20100815/be69822f/attachment.html>