How can I integrate NX (3.5.0) authentication with other authentication systems such as PAM?
This article applies to NX software v. 3.5.0 or previous versions.
Starting from the version 1.5.0 onward, NX Server uses the SSH subsystem for authentication in its default configuration. Users willing to use this mechanism should check that the server configuration file ('/usr/NX/etc/server.cfg') contains the following line:
EnablePasswordDB = "0"
NX Server will then rely on the SSH subsystem for authentication and won't make use of its internal DB: users which can login to the system through ssh by the 'password' method (usually any standard system user), will automatically get authenticated to NX with the system password, and enabled to run a session.
By modifying the PAM and nsswitch configuration you can easly use SAMBA, LDAP and any other directory service you need.
A higher degree of customization can be achieved by specifying, respectively, a remote sshd daemon to be contacted and a port where the service is supposed to bind (if not the standard 'tcp:22'). For more specific details you may refer at:
https://www.nomachine.com/AR06E00470
Please see also:
https://www.nomachine.com/AR03C00169
for more information about NX users.
Note for Solaris users
Solaris users should also refer to the guidelines reported below.
If you're running Sun's bundled SSH then ensure these options are available in the configuration file of the sshd daemon:
AllowTcpForwarding yes
GatewayPorts yes
X11Forwarding yes
X11DisplayOffset 10
PAMAuthenticationViaKBDInt yes
PasswordAuthentication yes
When you're finished making your changes, restart the SSH daemon to apply your changes.
