From freenx-knx  Sat Dec 15 08:58:06 2007
From: Blindauer Emmanuel <freenx () mooby ! net>
Date: Sat, 15 Dec 2007 08:58:06 +0000
To: freenx-knx
Subject: Re: [FreeNX-kNX] kerberos authentication
Message-Id: <200712150958.06398.freenx () mooby ! net>
X-MARC-Message: https://marc.info/?l=freenx-knx&m=119770916001564

Le Saturday 15 December 2007 09:25:55 william@cobradevil.org, vous avez 
écrit :
> Hello people,
>
> I have a question regards kerberos authentication.
>
> I am running a single firefox session trough nx.
>
> When i localy login from a kdm session i get a kerberos ticket from my kdc.
> Then when is start firefox and connect to squid my user gets authenticated
> (sso) with the proxy server (squid_kerb_auth). This is for user logging.
>
> When i start a nx session i get logged in with pam_krb but the nxnode then
> connects with a public key, so no kerberos ticket.


It depend on your setup.
I have ENABLE_SU_AUTHENTICATION="1"
in my node.conf

My pam.d/su file use pam.d/common-auth for auth:

auth    sufficient      pam_krb5.so nullok_secure

And the user gets its ticket.

I've briefly tried with ENABLE_SSH_AUTHENTICATION="1" but without success

Emmanuel
________________________________________________________________
     Were you helped on this list with your FreeNX problem?
    Then please write up the solution in the FreeNX Wiki/FAQ:
  http://openfacts.berlios.de/index-en.phtml?title=FreeNX_FAQ
         Don't forget to check the NX Knowledge Base:
                 http://www.nomachine.com/kb/ 

________________________________________________________________
       FreeNX-kNX mailing list --- FreeNX-kNX@kde.org
      https://mail.kde.org/mailman/listinfo/freenx-knx
________________________________________________________________