From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 8C5251384B4 for ; Sat, 14 Nov 2015 06:07:35 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C490821C08D; Sat, 14 Nov 2015 06:07:20 +0000 (UTC) Received: from mail101c7.megamailservers.com (mail728.megamailservers.com [69.49.98.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id C8EA221C079 for ; Sat, 14 Nov 2015 06:07:19 +0000 (UTC) X-Authenticated-User: info.sys-concept.com Received: from [10.0.0.100] (S01060050da7ae68c.ed.shawcable.net [68.149.90.13]) (authenticated bits=0) by mail101c7.megamailservers.com (8.14.9/8.13.1) with ESMTP id tAE67F6F032103 for ; Sat, 14 Nov 2015 01:07:17 -0500 To: Gentoo mailing list From: thelma@sys-concept.com Subject: [gentoo-user] openssh-7.1_p1-r2 won't allow "nxserver" to connect X-Enigmail-Draft-Status: N1110 Message-ID: <5646CFD7.9030708@sys-concept.com> Date: Fri, 13 Nov 2015 23:08:23 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.3.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-CTCH-RefID: str=0001.0A020206.5646CF95.0068,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 X-CTCH-VOD: Unknown X-CTCH-Spam: Unknown X-CTCH-Score: 0.000 X-CTCH-Rules: X-CTCH-Flags: 0 X-CTCH-ScoreCust: 0.000 X-CSC: 0 X-CHA: v=2.1 cv=do/iVTQ4 c=1 sm=1 tr=0 a=C3ZDv51cNVt4vJz/79I2xQ==:117 a=C3ZDv51cNVt4vJz/79I2xQ==:17 a=SDcUNfBxAAAA:8 a=BDKbP5mgAAAA:8 a=046jbqsEAAAA:8 a=IkcTkHD0fZMA:10 a=Oy2McPZrBccxPA8PpJcA:9 a=QEXdDO2ut3YA:10 X-Archives-Salt: b295d2a5-112d-4ba9-9a60-2b3e6f647580 X-Archives-Hash: 7a70caedfbe26c68ccef967bbe532fe4 I'm running: nxserver-freenx-0.7.3_p104-r7 After recent upgrade, system installed new stable openssh-7.1_p1-r2 The problem is the new openssh-7.1_p1-r2 will not allow my my "nxserver" to connect, I get an error: Permission denied (publickey,keyboard-interactive) see below: nxsetup --test ... <---- done ----> Testing your nxserver connection ... Permission denied (publickey,keyboard-interactive). Fatal error: Could not connect to NX Server. Please check your ssh setup: The following are _examples_ of what you might need to check. - Make sure "nx" is one of the AllowUsers in sshd_config. (or that the line is outcommented/not there) - Make sure "nx" is one of the AllowGroups in sshd_config. (or that the line is outcommented/not there) - Make sure your sshd allows public key authentication. - Make sure your sshd is really running on port 22. - Make sure your sshd_config AuthorizedKeysFile in sshd_config is set to authorized_keys2. (this should be a filename not a pathname+filename) - Make sure you allow ssh on localhost, this could come from some restriction of: -the tcp wrapper. Then add in /etc/hosts.allow: ALL:localhost -the iptables. add to it: $ iptables -A INPUT -i lo -j ACCEPT $ iptables -A OUTPUT -o lo -j ACCEPT What I should be getting is this: ----> Testing your nxserver connection ... HELLO NXSERVER - Version 3.2.0-74-TEAMBZR104 OS (GPL, using backend: 3.5.0) NX> 105 quit Quit NX> 999 Bye <--- done I did not change anything in sshd_config. But I downgraded to: openssh-6.9_p1-r2 and nxserver connects OK. What could be the problem with new: openssh-7.1_p1-r2 -- Thelma