Remote access using NX and OpenSuse 11.1
Friday, 16 January 2009
NoMachine NX is a solution for secure remote access, desktop virtualization, and hosted desktop deployment using  compression, session resilience and resource management. It integrations a powerful audio, printing and resource sharing capabilities and makes it possible to run any graphical application (e.g KDE, Gnome etc.) across the network connection. The NX Free Edition is easy to install and works on almost all Linux distributions. The following workshop describes the installation and the first run on an OpenSuse 11.1 server.

 

The workshop setup could look like this:


 

Step 1: Installing the RPM packages

Download the available rpm packages from the NoMachine Webpage and install it like this:

rpm –i nxclient-3.3.0-3.i386.rpm
rpm –i nxnode-3.3.0-3.i386.rpm
rpm –i nxserver-3.3.0-8.i386.rpm


Please make sure to have the lsof package installed before you run the nxnode installation otherwise you will get a “Failed dependency” error.


Click image to open!
Click image to open!

Step 2: Generate the DSA key-pair

 

The initial login between client and server happens through a DSA key-pair. The public part is provided during the installation of the server, while the private part is distributed together with the NX Client. In order to replace the default keys used by clients, you need to generate a new DSA key-pair and distribute the private part to those clients you want to get connected to the server.
Login as root on  the NX server host machine and run:

/usr/NX/scripts/setup/nxserver --keygen 


Click image to open!

Distribute the private key from the newly generated key pair located in the file:
/usr/NX/share/keys/default.id_dsa.key
to the clients using a USB device or the network connection via scp or WinSCP.


Step 3: Configuring the firewall to allow SSH traffic


First of all, make sure that the NX server is running using the following commands:

/etc/init.d/nxserver start
/etc/init.d/nxserver stop
/etc/init.d/nxserver restart

NX is configured by default to allow access for any system user, as long as the user provides valid credentials for the SSH login. Please note that SSH authentication without password is not supported. To allow ssh traffic, you have to configure the firewall using Yast2 like this:

Open Yast Control Center and go to “Security and Users”. Please check the Firewall configuration. It should start automatically. Then click on “Allowed Services” and allow “Secure Shell Server” by clicking on the “Add” button. Then click “Next” and “Finish”.

Click image to open!
Click image to open!

Step 4: Start your first connection

 

Using your NX client click on Programs – Internet – NX Client for Linux and create a new session to your NX server.

Host: IP address or name of the NX server
Port: 22
Desktop:  UNIX  (KDE, Gnome, CDE, XDM or Custom)
Connection via: MODEM, ISDN, ADSL,WAN or LAN
Display:  Available area

Click image to open!

Save your configuration and create a Desktop Shortcut.

To establish security,  click on “Configure” and in the Server part on “Key”.
To import the key you have generated in step 2, click in the Key Management window on “Import” and search for the file default.id_dsa.key you have stored on your clients (see pictures below). Save the Key and run the connection.

If you receive the following error message:

“Connecting to remote host … Aborting the procedure due to signal 15 … Session terminated at…”

Please double check your configuration in the “Advanced” tab and make sure that the entry in the Network part “Disable encryption of all traffic” is not checked. (see picture below).

Click image to open!
Click image to open!
Click image to open!
Click image to open!


The following scrennshots show step by step how to use NX on a Windows XP client:


Click image to open!
Click image to open!
Click image to open!
Click image to open!
Click image to open!


Click "Next" to see a short video.


This short video shows how to connect to an Opensuse 11.1 server using a Windows XP client: