From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id D29D21384B4 for ; Sun, 15 Nov 2015 11:15:12 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 086F921C02F; Sun, 15 Nov 2015 11:15:03 +0000 (UTC) Received: from mail.digimed.co.uk (82-69-83-178.dsl.in-addr.zen.co.uk [82.69.83.178]) by pigeon.gentoo.org (Postfix) with ESMTP id C045A21C019 for ; Sun, 15 Nov 2015 11:14:36 +0000 (UTC) Received: from digimed.co.uk (fenchurch.digimed.co.uk [192.168.1.6]) by mail.digimed.co.uk (Postfix) with ESMTPA id 066E11FECA8 for ; Sun, 15 Nov 2015 09:22:01 +0000 (GMT) Date: Sun, 15 Nov 2015 09:21:55 +0000 From: Neil Bothwick To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] openssh-7.1_p1-r2 won't allow "nxserver" to connect Message-ID: <20151115092155.0074b70b@digimed.co.uk> In-Reply-To: <5647C35F.2000404@sys-concept.com> References: <5646CFD7.9030708@sys-concept.com> <5646D972.4010300@sys-concept.com> <201511141111.26221.michaelkintzios@gmail.com> <5647593E.9050404@sys-concept.com> <20151114212213.602d411e@digimed.co.uk> <5647C35F.2000404@sys-concept.com> Organization: Digital Media Production X-Mailer: Claws Mail 3.13.0-66-gbffd6c (GTK+ 2.24.28; x86_64-pc-linux-gnu) X-GPG-Fingerprint: 7260 0F33 97EC 2F1E 7667 FE37 BA6E 1A97 4375 1903 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; boundary="Sig_/lQQJplYy8czdLDPWlPpeyuw"; protocol="application/pgp-signature" X-Archives-Salt: fdc432f0-5d2f-4954-ab5c-10dd4b0b6bfc X-Archives-Hash: 3e95452e710610d04a88753acd10e3f4 --Sig_/lQQJplYy8czdLDPWlPpeyuw Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sat, 14 Nov 2015 16:27:27 -0700, thelma@sys-concept.com wrote: > >> ----> Testing your nxserver connection ... =20 > >> Permission denied (publickey,password,keyboard-interactive). > >> Fatal error: Could not connect to NX Server. =20 > >=20 > > That doesn't look like the error you get from an unsupported key, > > which is something like > >=20 > > Unable to negotiate with x.x.x.x: no matching host key type found. > > Their offer: ssh-dss > >=20 > > Is nxserver trying to connect as root? It looks more like the > > disabling of passworded root logins in OpenSSH. =20 >=20 > Here is my sshd_config: (nxserver works with openssh-6.9_p1-r2) > As soon as I upgrade to openssh-7, enable: > PubkeyAcceptedKeyTypes=3D+ssh-dss >=20 > restart: sshd > and nxserver gives me an error message (like above). Which has nothing to do with keys =20 > Yes, I'm running "nxsetup --test" as root. and everything to do with this. While the use of DSS keys may cause a problem, you haven't reached that point yet because the default config not blocks root logins. Add "PermitRootLogin without-password" to your config. --=20 Neil Bothwick The computer revolution is over. The computers won. --Sig_/lQQJplYy8czdLDPWlPpeyuw Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlZITrMACgkQum4al0N1GQMa4wCgze/0FuXtraSkKODFhHqlCpZT I98An35mjj0RWv1yeMoNYpFpEcRyukaB =uU/r -----END PGP SIGNATURE----- --Sig_/lQQJplYy8czdLDPWlPpeyuw--