NXClient fails to connect with authentication failed for user.

View: New views
2 Messages — Rating Filter:   Alert me  

NXClient fails to connect with authentication failed for user.

by Bugzilla from dion@thinkmoult.com :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Been trying to get FreeNX up and running for a few days now without any result
so I'm going to ask for help here. I am running on Gentoo AMD64 and I install
nxclient and nxserver-freenx from Portage. The ebuild suggests, as do many
online guides that I do this:

 * To complete the installation, run:
 *  nxsetup --install --setup-nomachine-key --clean --purge
 * This will use the default Nomachine SSH key

So I run nxsetup --install --setup-nomachine-key --clean --purge and it
completes with a couple of warnings saying I can't request a GNOME session or
printing or CDE (which is fine because I don't use/have those in the first
place). Opening up nxclient and trying to connect using the default key and my
user account fails to connect with authentication failed with public key
authentication. Looking in var/log/messages gives me:
sshd[10239]: User nx not allowed because account is locked

I unlock it with usermod -p foo nx, where foo is the same password that I use
for my system account named "dion". I try to connect again using the default
nomachine key, with the username dion and the password for the account dion on
the computer. It fails with "Authentication failed for user dion". Looking in
/var/log/messages (with SSH loglevel set to verbose), I see:

sshd[13479]: Connection from 127.0.0.1 port 40791
sshd[13479]: Found matching DSA key: blahblahblahblah
sshd[13479]: Accepted publickey for nx from 127.0.0.1 port 40791 ssh2
sshd[13479]: pam_unix(sshd:session): session opened for user nx by (uid=0)
sshd[13479]: User child is on pid 13481
nxserver[13611]: (nx) Failed login for user=dion from IP=127.0.0.1

I have checked that the public key is in /home/dion/.ssh/authorized_keys. If I
do ssh -p 443 localhost on the computer with the account dion it asks for my
passphrase of my private keypair (not the NX one) and I can log in and SSH in
remotely fine without problems. I'm not sure whether it helps but when I try
ssh -p 443 nx@localhost it asks for a Password, of which nothing I try can log
it in.

This is my sshd_config:
Port 443
Protocol 2
SyslogFacility AUTH
PermitRootLogin no
RSAAuthentication yes
PubkeyAuthentication yes
PasswordAuthentication no
PermitEmptyPasswords no
UsePAM yes
Compression yes
KeepAlive yes
ClientAliveInterval 30
ClientAliveCountMax 4
AuthorizedKeysFile      .ssh/authorized_keys
LogLevel VERBOSE

(Note: I run SSH on port 443 on purpose, not by accident)

Summary: When trying to connect using username and password for the account
"dion" which exists on the box running freenx it says Authentication failed
for user dion.

Any ideas? Much appreciated.

--
Dion Moult :-)


________________________________________________________________
     Were you helped on this list with your FreeNX problem?
    Then please write up the solution in the FreeNX Wiki/FAQ:

http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
 
         Don't forget to check the NX Knowledge Base:
                 http://www.nomachine.com/kb/ 

________________________________________________________________
       FreeNX-kNX mailing list --- FreeNX-kNX@...
      https://mail.kde.org/mailman/listinfo/freenx-knx
________________________________________________________________

signature.asc (205 bytes) Download Attachment

Re: NXClient fails to connect with authentication failed for user.

by ChrisB-6 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message



Dion Moult <dion@...> wrote on 25/09/2009 18:09:17:


SNIP



>
> sshd[13479]: Connection from 127.0.0.1 port 40791
> sshd[13479]: Found matching DSA key: blahblahblahblah
> sshd[13479]: Accepted publickey for nx from 127.0.0.1 port 40791 ssh2
> sshd[13479]: pam_unix(sshd:session): session opened for user nx by (uid=0)
> sshd[13479]: User child is on pid 13481
> nxserver[13611]: (nx) Failed login for user=dion from IP=127.0.0.1

Yup

>
> I have checked that the public key is in /home/dion/.
> ssh/authorized_keys. If I
> do ssh -p 443 localhost on the computer with the account dion it asks for my
> passphrase of my private keypair (not the NX one) and I can log in and SSH in

You need to use password authentication for the local user after connecting via ssh as user nx.

Some distros disable this by default because it allows brute force attacks . . . .

> remotely fine without problems. I'm not sure whether it helps but when I try
> ssh -p 443 nx@localhost it asks for a Password, of which nothing I
> try can log
> it in.
>
> This is my sshd_config:
> Port 443
> Protocol 2
> SyslogFacility AUTH
> PermitRootLogin no
> RSAAuthentication yes
> PubkeyAuthentication yes
> PasswordAuthentication no

Here

Just change to PasswordAuthentication  yes


> PermitEmptyPasswords no
> UsePAM yes
> Compression yes
> KeepAlive yes
> ClientAliveInterval 30
> ClientAliveCountMax 4
> AuthorizedKeysFile      .ssh/authorized_keys
> LogLevel VERBOSE
>
> (Note: I run SSH on port 443 on purpose, not by accident)
>
> Summary: When trying to connect using username and password for the account
> "dion" which exists on the box running freenx it says Authentication failed
> for user dion.
>
> Any ideas? Much appreciated.
>



 
> --
> Dion Moult :-)
> [attachment "signature.asc" deleted by chris burton/solar-
> system/local] ________________________________________________________________
>      Were you helped on this list with your FreeNX problem?
>     Then please write up the solution in the FreeNX Wiki/FAQ:
>
>
http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
>  
>          Don't forget to check the NX Knowledge Base:
>                  
http://www.nomachine.com/kb/
>
> ________________________________________________________________
>        FreeNX-kNX mailing list --- FreeNX-kNX@...
>      
https://mail.kde.org/mailman/listinfo/freenx-knx
> ________________________________________________________________

________________________________________________________________
     Were you helped on this list with your FreeNX problem?
    Then please write up the solution in the FreeNX Wiki/FAQ:

http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
 
         Don't forget to check the NX Knowledge Base:
                 http://www.nomachine.com/kb/ 

________________________________________________________________
       FreeNX-kNX mailing list --- FreeNX-kNX@...
      https://mail.kde.org/mailman/listinfo/freenx-knx
________________________________________________________________