nxserver

[Marco Mandl <marco.mandl@gmx.at>]

Hello,

I want to setup nxserver with public key authentication.

It is easy to have nxclient connect to nxserver after I have placed the
public key of the client into nx/.ssh directory. Then nx uses sshd
again to authenticate the actual user. But sshd does not use PAM but only
public key authentication.

So I think I have to place nx's public key to the user's
.ssh/authorized_keys. I think this is done automatically when I enable a
user via nxserver.

This brings me to security problem. I nx adds its default key then
everybody could use this default key to login to the corresponding user
with a ssh client. Wrong?

I can have nxserver generate a new key. But it
seems that it only generates a key pair for the client. There I want to
use the client's existing key.

Where do I have to place my own generate key pair to authenticate nxserver
to the user?

BTW: Why does nxserver use ssh/authorized_keys2 instead of
ssh/authorized_keys which is used by sshd by default?

Please bring me some light!

Regards,
Marco