From freenx-knx Wed Nov 11 18:31:32 2009 From: Paul van Gerven Date: Wed, 11 Nov 2009 18:31:32 +0000 To: freenx-knx Subject: Re: [FreeNX-kNX] FreeNX with SSH key authentication fails Message-Id: X-MARC-Message: https://marc.info/?l=freenx-knx&m=125796434728213 MIME-Version: 1 Content-Type: multipart/mixed; boundary="--===============0913965752==" --===============0913965752== Content-Type: multipart/alternative; boundary=001517441366c65e8404781ca2fe --001517441366c65e8404781ca2fe Content-Type: text/plain; charset=ISO-8859-1 I completely agree that exposing SSH to the internet with password authentication, even if it is not at port 22, is a bad idea. Avoiding that is exactly what I set out to do by posting here. I feel it is a rather unfortunate choice to use SSH auth in the default configuration, at least it is in Ubuntu land (https://help.ubuntu.com/community/FreeNX). I might add some notes to it :) Thanks Chris, I did not opt for your solution (which is rather elegant actually) but it did put me on the right track. I opted for the PASSDB authentication method and disabled SSH. With custom keys and pw auth disabled, that's more than enough. I think SU authentication may be a bit better though. --001517441366c65e8404781ca2fe Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I completely agree that exposing SSH to the internet with password authenti= cation, even if it is not at port 22, is a bad idea. Avoiding that is exact= ly what I set out to do by posting here. I feel it is a rather unfortunate = choice to use SSH auth in the default configuration, at least it is in Ubun= tu land (https://help.= ubuntu.com/community/FreeNX). I might add some notes to it :)

Thanks Chris, I did not opt for your solution (which is rather elegant = actually) but it did put me on the right track. I opted for the PASSDB auth= entication method and disabled SSH. With custom keys and pw auth disabled, = that's more than enough. I think SU authentication may be a bit better = though.
--001517441366c65e8404781ca2fe-- --===============0913965752== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ________________________________________________________________ Were you helped on this list with your FreeNX problem? Then please write up the solution in the FreeNX Wiki/FAQ: http://openfacts2.berlios.de/wikien/index.php/BerliosProject:FreeNX_-_FAQ Don't forget to check the NX Knowledge Base: http://www.nomachine.com/kb/ ________________________________________________________________ FreeNX-kNX mailing list --- FreeNX-kNX@kde.org https://mail.kde.org/mailman/listinfo/freenx-knx ________________________________________________________________ --===============0913965752==--