Vlákno názorů k článku NX: vzdálená plocha pro šneky od anonym - Tak jsem si zkusil NX a je to...

  • Článek je starý, nové názory již nelze přidávat.
  • 27. 1. 2009 6:14

    bez přezdívky
    Tak jsem si zkusil NX a je to skutecne rychlost. Ovsem uplne kasle na obsah authorized_keys2. At tam dam jakejkoliv klic, nebo zadnej, stejne mne vzdy necha s heslem prihlasit.
    Lze nekde zajistit, aby nebylo mozne se bez klice prihlasit?
  • 14. 11. 2009 0:13

    Dibur_X (neregistrovaný)

    Předpokládám, že jsi myslel tohle (viz. dokumentace http://www.nomachine.com/…in-guide.php)
    4.4. Replacing the Default SSH Key-Pair with Keys Generated for Your Server

    The initial login between client and server happens through a DSA key-pair. The public part is provided during the installation of the server, while the private part is distributed together with the NX Client. In order to replace the default keys used by clients, you need to generate a new DSA key-pair and distribute the private part to those clients you want to get connected to the server.

    Generating a new DSA key-pair

    * Login as root on on the NX server host machine and run:

    /usr/NX/scrip­ts/setup/nxser­ver –keygen

    Distributing the new SSH private key to the clients

    * Change the ownership and permissions on the authorized_keys file. Depending on which O.S. your NX is running on, you may need to execute:

    chown nx:root /usr/NX/home/nx/­.ssh/authorized_ke­ys2
    chmod 0644 /usr/NX/home/nx/­.ssh/authorized_ke­ys2

    Or:

    chown nx:root /usr/NX/home/nx/­.ssh/authorized_ke­ys
    chmod 0644 /usr/NX/home/nx/­.ssh/authorized_ke­ys

    * Change the ownership and permissions on the following file.

    chown nx:root /usr/NX/home/nx/­.ssh/default.id_dsa­.pub
    chmod 0644 /usr/NX/home/nx/­.ssh/default.id_dsa­.pub

    * Distribute the private key from the newly generated key pair located in the file: /usr/NX/share/ke­ys/default.id_dsa­.key

    * Once the new key has been distributed to clients, place it under the subdirectory ‚share/keys‘ of the NX Client installation tree reserved for this purpose.

    When the key has been placed in the above location, use the key management facilities provided by the NX Client GUI in the ‚General‘ tab of the session configuration window, click on the ‚Key‘ button and choose Import to import the new key by navigating to the appropriate directory above. Click Save to save your changes.

    PDF Format Important

    * By renaming the new key uploaded on the client to: server.id_dsa.key the new key will be used as the default key for all NX sessions (except those sessions that have been previously configured to use a specific key).

    Updating the NX Server Manager configuration

    If the new SSH key has been generated, location and file name of the DSA key need to be specified in the NX Server Manager configuration file. Edit the /usr/NX/etc/ma­nager.cfg file and set a proper value for the NXSSHPathIden­tity key.

    Restoring the default SSH key-pair

    Starting from NX Server version 3.3.0, the –keyrestore server command allows to restore the SSH key-pair provided with the server package. The current public key will be moved to default.id_dsa­.pub.backup file, while the current private key will be moved to /usr/NX/share/ke­ys/default.id_dsa­.key.backup file. Run the following command to use the default SSH key-pair:

    /usr/NX/bin/nxs­erver -–keyrestore

    In order to restore the default SSH key in the client, use the key management facilities provided by the NX Client GUI: in the ‚General‘ tab of the session configuration window, click on the ‚Key‘ button and choose Default. Click Save to save your changes.