Mailinglist Archive: opensuse (3337 mails)

< Previous Next >
Re: [SLE] Setting up NXfree to use ssh keys
  • From: Scott Leighton <helphand@xxxxxxxxxxx>
  • Date: Fri, 14 Apr 2006 18:21:53 -0800
  • Message-id: <200604141921.54579.helphand@xxxxxxxxxxx>
On Thursday 13 April 2006 12:28 pm, Greg Freemyer wrote:
> I've been using NXfree as a client in the office where I have not
> worried about ssh keys.
>
> Does anyone know how to do this with SUSE 10 and the NX server in the
> distro?
>
> Details:
> Prior to doing anything today I had ssh and NXfree working but they
> used simple password authentication.
>
> I want to restrict all secure shell access to people with keys so I
> can open up the firewall port.
>
> I have my server user account ssh working now, but I can't get the
> NXfree client to connect via the same key.
>
> Is their something special I need to do.
>
> What I've done so far:
>
> On my client pc (windows) I used cygwin to create a key pair:
>
> ssh-keygen -t rsa
>
> I uploaded the public key to my servers .ssh user directory
>
> scp .ssh/id_rsa.pub gaf@my_server:.ssh/
>
> logged into server and created the authorized_keys file
>
> cp id_rsa.pub > authorized_keys
>
> Then I tried logging into the server via standard ssh and no password
> from the original client pc. It works. Good.
>
> Now for NXclient. I start it up on the pc client and go to the
> config. I hit key and import in the private key that pairs with the
> above. That seems to be what the various howto's I found say to do.
>
> Seems to work, but when I try to connect NXfree fails. Even if I put
> in my user account password for the server, NXfree fails.
>
> If I go back to the config-key dialog box and reset to the default key
> I can login with my password.
>
> Ideas?
>

Greg,

I could be way off base here, but I think that nxserver uses its
own key system, not the ssh key. If memory serves, you have to
generate a 'custom key' for the server, that key resides at
/var/lib/nxserver/home/.ssh with the file name client.id_dsa.key

That's the key that you have to copy/paste into the config-key
dialog box on the client side.

I know it works with 9.3, I have it working, but I'm not sure
if it is the same for 10.0.

Scott





--
Un idea perplexi na
POPFile, the OpenSource EMail Classifier http://popfile.sourceforge.net/
Linux 2.6.11.4-21.11-default x86_64
SuSE Linux 9.3 (x86-64)

< Previous Next >
Follow Ups
References