Skip to main content
Solved

Login allowed with same username but different credentials across nodes‑Bug or expected feature?

  • August 27, 2026
  • 3 replies
  • 136 views

wanghehe

While using the ETX software, I noticed that users with identical usernames can log in successfully even if their passwords, home directories and shell paths are different. Only a matching username is required for login. My test‑case details are listed below:

 

1. The ETX server is integrated with LDAP. The LDAP user `user` has the password `password123`, home directory `/net_home` and shell path `/bin/csh`. There is also a local user with the same username `user` on the ETX node server, whose password is `password456`, home directory `/home` and shell path `/bin/bash`. Under this scenario, the user `user` is able to launch a virtual desktop successfully on the ETX node. And it picks up the home directory and shell variables from the local `user` account on the node, instead of the values from LDAP.


2. The ETX server uses Node A for account authentication, and Node B for virtual‑desktop loading. Node A and Node B both contain a user named `user`, but their passwords, home directories and shell paths are completely different. Even in this configuration, the user `user` can still launch the virtual desktop successfully on the ETX node. The session loads the home and shell variables from the local user on Node B, not from the authentication server (Node A).

 

Could you please clarify whether this behavior is a bug in the ETX authentication workflow, or an intentional feature designed for compatibility across different node servers?

Best answer by Joyce Kam

Why can my user log in even if the local account password is different?

ETX is designed as a single system with Server and Node components trusting and working together. Some ETX sites do not have synchronized accounts and desire behaviour that once we trust the initial Server login we trust the same username on any node added to the ETX site. This only happens for Xstart profiles using the X Window Host Application startup method and configured with Use session credentials.

To require matching passwords in this scenario, enable Authenticate session credentials for X Window Host Application startup method in Xstart. You can find this setting under Server Manager > Site Settings > Security > Session. Once enabled, Xstart applications will return a "Login incorrect" error if the passwords don't match.

Why do my logins use the local shell and environment?

This is working as intended and is how local Linux/Unix logins work; they read the shell and other environment settings from the local node.  If you desire synchronization with LDAP then configure your node OS to use LDAP as the underlying PAM authentication method.

For deeper troubleshooting please open a case through our Support Portal https://support.rocketsoftware.com/  or email us at support@rocketsoftware.com.

3 replies

  • August 27, 2026

Hi Wang,

Why can my user log in even if the local account password is different?

ETX is designed as a single system with Server and Node components trusting and working together. Some ETX sites do not have synchronized accounts and desire behaviour that once we trust the initial Server login we trust the same username on any node added to the ETX site. This only happens for Xstart profiles using the X Window Host Application startup method and configured with Use session credentials.

To require matching passwords in this scenario, enable Authenticate session credentials for X Window Host Application startup method in Xstart. You can find this setting under Server Manager > Site Settings > Security > Session. Once enabled, Xstart applications will return a "Login incorrect" error if the passwords don't match.

Why do my logins use the local shell and environment?

This is working as intended and is how local Linux/Unix logins work; they read the shell and other environment settings from the local node.  If you desire synchronization with LDAP then configure your node OS to use LDAP as the underlying PAM authentication method.

For deeper troubleshooting please open a case through our Support Portal https://support.rocketsoftware.com/ or email us at support@rocketsoftware.com.

Regards,

Joyce

 


  • Answer
  • August 28, 2026

Why can my user log in even if the local account password is different?

ETX is designed as a single system with Server and Node components trusting and working together. Some ETX sites do not have synchronized accounts and desire behaviour that once we trust the initial Server login we trust the same username on any node added to the ETX site. This only happens for Xstart profiles using the X Window Host Application startup method and configured with Use session credentials.

To require matching passwords in this scenario, enable Authenticate session credentials for X Window Host Application startup method in Xstart. You can find this setting under Server Manager > Site Settings > Security > Session. Once enabled, Xstart applications will return a "Login incorrect" error if the passwords don't match.

Why do my logins use the local shell and environment?

This is working as intended and is how local Linux/Unix logins work; they read the shell and other environment settings from the local node.  If you desire synchronization with LDAP then configure your node OS to use LDAP as the underlying PAM authentication method.

For deeper troubleshooting please open a case through our Support Portal https://support.rocketsoftware.com/  or email us at support@rocketsoftware.com.


Nathan Kidd
  • Rocketeer
  • August 28, 2026

Some ETX sites do not have synchronized accounts

There are a bunch of other reasons password login might not work: A common example is that federated auth is used to connect to ETX Server, so it never gets a password at all.

Admins should only add Nodes to Servers they control; there is an implicit trust relationship.

P.S. Nice question ​@Wang Meng .