Mailinglist Archive: opensuse (3337 mails)

< Previous Next >
Re: [SLE] Setting up NXfree to use ssh keys
  • From: Scott Leighton <helphand@xxxxxxxxxxx>
  • Date: Fri, 14 Apr 2006 18:21:53 -0800
  • Message-id: <200604141921.54579.helphand@xxxxxxxxxxx>
On Thursday 13 April 2006 12:28 pm, Greg Freemyer wrote:
> I've been using NXfree as a client in the office where I have not
> worried about ssh keys.
> Does anyone know how to do this with SUSE 10 and the NX server in the
> distro?
> Details:
> Prior to doing anything today I had ssh and NXfree working but they
> used simple password authentication.
> I want to restrict all secure shell access to people with keys so I
> can open up the firewall port.
> I have my server user account ssh working now, but I can't get the
> NXfree client to connect via the same key.
> Is their something special I need to do.
> What I've done so far:
> On my client pc (windows) I used cygwin to create a key pair:
> ssh-keygen -t rsa
> I uploaded the public key to my servers .ssh user directory
> scp .ssh/ gaf@my_server:.ssh/
> logged into server and created the authorized_keys file
> cp > authorized_keys
> Then I tried logging into the server via standard ssh and no password
> from the original client pc. It works. Good.
> Now for NXclient. I start it up on the pc client and go to the
> config. I hit key and import in the private key that pairs with the
> above. That seems to be what the various howto's I found say to do.
> Seems to work, but when I try to connect NXfree fails. Even if I put
> in my user account password for the server, NXfree fails.
> If I go back to the config-key dialog box and reset to the default key
> I can login with my password.
> Ideas?


I could be way off base here, but I think that nxserver uses its
own key system, not the ssh key. If memory serves, you have to
generate a 'custom key' for the server, that key resides at
/var/lib/nxserver/home/.ssh with the file name client.id_dsa.key

That's the key that you have to copy/paste into the config-key
dialog box on the client side.

I know it works with 9.3, I have it working, but I'm not sure
if it is the same for 10.0.


Un idea perplexi na
POPFile, the OpenSource EMail Classifier
Linux x86_64
SuSE Linux 9.3 (x86-64)

< Previous Next >
Follow Ups