[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freenx-knx
Subject:    Re: [FreeNX-kNX] Avoid double call of ssh?
From:       "Fabian Franz" <FabianFranz () gmx ! de>
Date:       2008-09-01 19:51:11
Message-ID: 20080901195111.124470 () gmx ! net
[Download RAW message or body]

Hi,

you want to use 0.7.3 or do ENABLE_SLAVE_MODE="1" in node.conf.

Best Wishes,

Fabian

-------- Original-Nachricht --------
> Datum: Mon, 01 Sep 2008 17:26:30 +0200
> Von: Joachim Breitner <joachim.breitner@itomig.de>
> An: freenx-knx@kde.org
> CC: Team BB <itomig-bb@lists.itomig.de>
> Betreff: [FreeNX-kNX] Avoid double call of ssh?

> Hi,
> 
> while working on the Linux migration of the City of Boeblingen, I was
> trying to use FreeNX on a machine that makes heavy use of PAM for
> session setup, especially mounting three CIFS file systems with
> pam_mount. Currently, when using ssh authentication with FreeNX 0.7.2,
> FreeNX makes two calls to ssh: One to verify the pasword, and a second
> one to actually log in. This quick repetition caused problems with
> pam_mount. I had to disable the first call to make it work nicely.
> 
> I'm wondering: Why do you need these two calls anyways? Would it be
> possible to skip the first one in a clean manner, as the second one
> already does password checking?
> 
> If the two stages are really required, then please consider adding a PAM
> authentication variant that only calls the "auth" phase of PAM, but
> does
> not create a session by running the "session" stage – after all,
> this is
> what you are doing by the first call to ssh. This can easily be done by
> a program similar to this one:
> http://git.0pointer.de/?p=pam_dotfile.git;a=blob;f=src/pamtest.c
> 
> Greetings and thanks,
> Joachim Breitner
> 
> 
> -- 
> Joachim Breitner .  . . . . . . . . . . . joachim.breitner@itomig.de
> ITOMIG, Inhaber: David Gümbel . . . . . . . . . http://www.itomig.de
> Sand 14 . . . . . . . . . . . . . . . . . . . . . . D-72076 Tübingen
________________________________________________________________
     Were you helped on this list with your FreeNX problem?
    Then please write up the solution in the FreeNX Wiki/FAQ:

http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ
  
         Don't forget to check the NX Knowledge Base:
                 http://www.nomachine.com/kb/ 

________________________________________________________________
       FreeNX-kNX mailing list --- FreeNX-kNX@kde.org
      https://mail.kde.org/mailman/listinfo/freenx-knx
________________________________________________________________

[prev in list] [next in list] [prev in thread] [next in thread]