If you saw the above error you have successfully disabled password authentication logins! Now test your key-based authentication to ensure it still works. Error: Authentication method NX-password is not allowed on this server Now try to connect remotely using NoMachine with password-based authentication, and you should see the following error in the GUI program: Ooops! The session negotation failed. Then restart the NoMachine server ( ): sudo /usr/NX/bin/nxserver -restart Now, just below this commented-out line indicating the default setting: #AcceptedAuthenticationMethods allĪdd this line to change the setting to allow ONLY key-based authentication: AcceptedAuthenticationMethods NX-private-key # client authentication for connections by NX protocol. # See also the EnableNXClientAuthentication key for enabling SSL # This key has to be used in conjunction with ClientConnectionMethod. # AcceptedAuthenticationMethods NX-private-key,SSH-system # have to be set on the system for example in the # SSH authentication methods for the system login # SSH-system : All methods supported for the system login. # Supported method for connections by SSH protocol is: # NX-kerberos : Kerberos ticket-based authentication.
# NX-private-key: Key-based authentication. # Supported methods for connections by NX protocol are:
To specify a subset of methods use a comma-separated # default all the available methods are supported. # Specify how clients will have to authenticate to the server, by On the server, edit server.cfg ( sudo gedit /usr/NX/etc/server.cfg) and find this section: # Note: On Linux, server.cfg is located here: "/usr/NX/etc/server.cfg".
The server.cfg and node.cfg files explained (for server v. Prevent password authentication with NX protocol and key-based authentication. (Not exactly addressing this question, but indirectly helpful in figuring it out) NB: Do NOT do this until key-based authentication is set up & verified to be working, or else you'll lose the ability to remotely connect via NoMachine, & have to manually fix it remotely over ssh, or locally! To disable password-based login to server: Generate a new private/public key pair from the client run this from the client: ssh-keygen -t rsa -b 4096 -C "your personal comment or email"Ĭopy the public (.pub) key only from client to server run this from the client notice the renaming of the file on the destination to avoid conflict with keys already generated on the server: scp ~/.ssh/id_rsa.pub Run from server:Īdd public key now on server to proper NoMachine file run this from the server: cat ~/.ssh/id_rsa_nxclient.pub > ~/.nx/config/authorized.crtĪnd lastly set this file's permissions to 0600 to enable read/write on this file ONLY for the user (owner) of this file, for security: chmod 0600 ~/.nx/config/authorized.crt Here's one example of commands to do that: How to set up key based authentication with NX protocolĮssentially, just add your public key to the $HOME/.nx/config/authorized.crt file on the server. To enable key-based authentication to server: It is not open source, but is no cost to use (personal use only-businesses must pay). NoMachine is an excellent remote login program, with excellent file-sharing/mount abilities and excellent cross-platform support for Windows, Mac, Linux, iOS, Android, Raspberry Pi, and ARM. If you ever need to ssh in, I've documented my various ssh notes here. I originally posted these instructions on my eRCaGuy_dotfiles repo here:
0 kommentar(er)
