LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 04-11-2011, 06:43 PM   #1
zoltan32
LQ Newbie
 
Registered: Apr 2011
Posts: 2

Rep: Reputation: 0
SSH shell disabled + Remote desktop NX (or another remote desktop software)


Hi,

I'm French so excuse my English

I installed the remote desktop NX on ubuntu server 10.04 and for security reasons I disabled copy and paste from server to client.
The NX users are connecting with NX client perfectly and copy and paste restriction works also great.

NX works with accounts with ssh access so the users can also use their accounts to connect to server with ssh clients like putty or openssh.
The problem is copy and paste is enabled from server to client on these ssh shells.
I tried to disable the user shells like this : usermod -s /bin/false username
After that, the access with ssh clients is forbidden but the nx connection doesn't work anymore, I have this error message : "Authentication failed".
To retrieve nx connection, I did : usermod -s /bin/bash username
I also tried the same thing with another software : X2GO, and I have the same troubles.

So I'd like to know if it's possible to disable ssh shell and use nx remote desktop (or another remote desktop) at the same time.

Thanks, best regards.
 
Old 04-11-2011, 07:19 PM   #2
jefro
Guru
 
Registered: Mar 2008
Posts: 11,781

Rep: Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448Reputation: 1448
Hello and welcome.

This may help.

"4. NX Server Authentication

NX is configured by default to allow access for any system user, as long as the user provides valid credentials for the SSH login. Please note that SSH authentication without password is not supported. NX offers an alternative authentication method, allowing the administrator to specify which user can access the system through NX. This works by implementing a separation between the system password and the NX password, so that, for example, it is possible to forbid remote access to the system by any other means except NX and use the NX tools to implement effective accounting of the system resources used by the user.

The NX administrator can control access to the NX system by configuring the server to use the authentication method better suited:

* System authentication relying on SSHD + PAM authentication
* NX authentication relying on NX Password DB
"

http://www.nomachine.com/documents/admin-guide.php
 
Old 04-12-2011, 03:36 AM   #3
zoltan32
LQ Newbie
 
Registered: Apr 2011
Posts: 2

Original Poster
Rep: Reputation: 0
I'm going to test your solution. Thank you very much
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cross-platform remote control / remote desktop software trafikpolisen Linux - Software 5 01-24-2010 12:27 AM
Remote desktop software to control desktop GUI? Phaethar Linux - Software 3 06-27-2008 09:30 AM
remote desktop+ssh binary_dreamer Debian 10 02-06-2007 05:08 AM
Tell Me About Remote Desktop, VNC, SSH, Laplink and Other Software Like It Mehmoodoman General 2 06-10-2006 02:59 PM
Remote Desktop using SSH tunnel..... help! redhatbeatswin Linux - Newbie 5 08-14-2004 11:51 AM


All times are GMT -5. The time now is 09:29 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration