Explanation of NX ssh key versus our own ssh key.

1 files changed, 37 insertions, 11 deletions

diff --git a/freenx/build/README.slackware b/freenx/build/README.slackware
index 2dacd255..4324ce45 100644
--- a/freenx/build/README.slackware
+++ b/freenx/build/README.slackware
@@ -1,8 +1,9 @@
 Setting up Freenx on Slackware Linux
-------------------------------------
+-------------------------------------------------------------------------------
+
 
-Introduction
-------------
+Introduction:
+-------------------------------------------------------------------------------
 
 Many thanks to Rick Stout <zipsonic.AT.gmail.com> who wrote a small HOWTO for
 Redhat/Fedora users, however much of it applies to Slackware too.
@@ -13,16 +14,33 @@ Once you've started using NX, you'll never go back to VNC.
 
 Prerequisite: sshd must be running as a daemon on port 22
 
+
+The server:
+-------------------------------------------------------------------------------
+
 The Slackware package of FreeNX takes care of the installation and setup, so there is no need to run "nxsetup". The nx package needs to be installed to, as the FreeNX package (which really just consists of a number of shell scripts) wrap around Nomachine's nx libraries.
 
 After installing the nx and freenx packages, the server side of the setup is done!
 
-Clients
--------
+
+Clients:
+-------------------------------------------------------------------------------
 
 Next, you will need a client. Client programs for several Operating Systems are available at http://www.nomachine.com/download.php - they are all released under the GPL, just as the nx libraries. Installation help can be found at the 'resources' link: http://www.nomachine.com/resources.php
 
-The most important part of the initial connection is the key file. This file, "client.id_dsa.key", must be copied from the server to your client machine. For example:
+
+Using the NoMachine SSH key
+---------------------------
+After installation, the FreeNX server package is configured to accept connections from NX clients with their default SSH key. This is done to give you an "out-of-the-box" NX experience: install the server, get a client, connect, ready!
+If you do not want every NX client to make successful connections to your server, you will need to delete the line with the NoMachine key (the line that ends with "root@nettuno") from the file "~nx/.ssh/authorized_keys".
+
+NOTE:
+The NX-server's SSH key (or any other key that you might want to use as replacement) is not used for *authentication*. The key is only used to make the automated initial 'null'-connection from NX client to the NX server. The real user authentication occurs at a later stage.
+
+
+Enforcing use of our own SSH key ('more secure' say the paranoid)
+-----------------------------------------------------------------
+In case you decide not to use the Nomachine SSH key, the most important part of the initial connection is the correct key file. This file, "client.id_dsa.key", must be copied from the server to your client machine. For example:
 
 # On the server
 scp /var/lib/nxserver/home/.ssh/client.id_dsa.key <user>@<client.machine>:
@@ -37,6 +55,10 @@ If you are using win32 client, its nx/share is located at:
 C:\Program Files\NX Client for Windows\share
 
 If you want to use a key file with a different name (for instance when you connect to more than one FreeNX server, or FreeNX and NomachineNX servers) you can click the "Import" button in the client configuration, and select the key-file that you want to use.
+
+
+Setting up the connection parameters
+------------------------------------
 The easiest way to setup the client is to run the wizard. Most settings are pretty self-explanatory. Make sure you select:
 
 * Unix, and Gnome (or kde, or whatever wm you use, ymmv)
@@ -46,16 +68,20 @@ The easiest way to setup the client is to run the wizard. Most settings are pret
 Click next and finish.
 
 Time to Connect! Start the client. Type your username, password and select the session.
-Note:
-If you created the connection icon, it will only prompt for username and password. Your first connection will give you an error about cache - This is normal.
 Voila! You're connected.
 
+Note
+----
+If you created the connection icon, it will only prompt for username and password. Your first connection will give you an error about cache - This is normal.
 
-Sound
------
+
+Sound:
+-------------------------------------------------------------------------------
 
 If you want sound, the Linux NX client uses artsd and the Windows/Mac clients use esd. Gnome sessions will work out of the box (Gnome uses esd) but to get sound in KDE, you'll have to configure your client to use "UNIX/Custom" and then finn in "nxesddsp startkde" for the command to run. In KDE, enable "networked sound" and select the "Enlightened Sound Daemon". Now, sound will work!
 
--------------------------------------------------------------------------------
+
+#-----------------------------------------------------------------------------#
 Eric Hameleers <alien@sox.homeip.net> :: 18aug2005
+
 $Id$