[ILUG] low bandwidch X forwarding protocol?

[Frank Duignan]

Well, yes but it is for the user "nx" - not the real user.  I've found you
have to dig around in your file system at the server end to see where it has
put the keys.  On the client end you can paste the new key into the
appropriate dialogue box in the nxclient software.  I'm using an older
freenx server and its key is located at:
/opt/NX/home/nx/.ssh/id_rsa
On the server end, I've disabled password access to ssh on port 22.  This
upset nx a bit, but I ran a second sshd daemon on localhost port 2022.  You
can tell the nxserver end to pass users through this by setting
SSHD_AUTH_PORT="2022"
in its node.conf file (on my setup this is at /opt/NX/etc/node.conf
Doing this allows you open only port 22 to the big bad web and only those
with the correct signature can get in so it lessens the chance of breakins.
I suspect the need to do this may have disappeared with later versions.
hth
f.
On 10/26/06, Conor Daly <conor.daly_ilug at cod.homelinux.org> wrote:
>
> On Thu, Oct 26, 2006 at 02:57:03PM +0100 or so it is rumoured hereabouts,
> Frank Duignan thought:
> > By the way - if you do go with NX I recommend using your own ssh key -
> don't
> > go with the one that comes with NXClient.  It means you must have a key
> > distribution scheme in mind too.
> > f
>
> Good point.  Is that simply a matter of an ssh-keygen on the server and an
> import of the public key at the client?
>
> Conor
> --
> Conor Daly <conor.daly at cod.homelinux.org>
> -----BEGIN GEEK CODE BLOCK-----
> Version: 3.1
> GCS/G/S/O d+(-) s:+ a+ C++(+) UL++++ US++ P>++ L+++>++++ E--- W++ !N
> PS+ PE Y+ PGP? tv(-) b+++(+) G e+++(*) h-- r+++ z++++
> ------END GEEK CODE BLOCK------
> http://www.geekcode.com/ http://www.ebb.org/ungeek/
> --
> Irish Linux Users' Group mailing list
> About this list : http://mail.linux.ie/mailman/listinfo/ilug
> Who we are : http://www.linux.ie/
> Where we are : http://www.linux.ie/map/
>