2FA on Mac

[MartinCY]

Hello,

I am using NoMachine Free ver. 8.11.3_5. I cannot see where to enable 2FA and to use my authentication app.

Also, in one thread from June 2023, I saw that you are working on your own 2FA solution, which will be included in ver. 9 but still no signs for that version.

Regards,

Martin

[Britgirl]

Our own 2FA functionality will be made available with the next major release, version 9. Can I ask what authentication app you are using?

[MartinCY]

Hello,

I saw a post from 9 months ago that you will implement 2FA in version 9. It is almost an year. Do you have a release date for version 9? And is there a beta we can test.

I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.

Currently we use Microsoft Authenticator.

Thank you for your response!

Regards,

Martin

[Britgirl]

Indeed NoMachine’s built-in 2FA will be in version 9. We are late with delivering NoMachine 9, we know, but it’s coming 🙂

To use your own 2FA, you need to first enable 2FA in PAM.

1) open a terminal on the Mac server side
2) make a back up sudo cp /etc/pam.d/nx /etc/pam.d/nx-ori
3) then run sudo cp /etc/pam.d/sshd /etc/pam.d/nx (to enable 2fa in PAM)
4) start a NoMachine connection (no need to set anything in the Edit – Authentication section of your connection)
5) you will then be prompted for the password and code.

Let us know how you get on.

[MartinCY]

Thank you for the help.

I followed the steps but nothing has changed in regards to 2FA.

How can I add the 2FA in the Microsoft Authenticator app?

As per your 4th step I do not need to change anything in the NoMachine app on the client side, so it should look like the attached photo?

Thank you in advance,

Martin

Attachments:

1. 

   NoMachine.png
   

[Guro]

hello

I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.

Please check next command result on your mac host after preparing PAM for 2AF.

(if install path is standard):
cd /Applications/NoMachine.app/Contents/Frameworks/bin
./nxexec –auth

Terminal will ask for username, then it should ask for password and probably verification code depending on your PAM nx configuration.

Please paste here a screenshot of the results or paste the output directly. Also pay attention to any errors showing in the log output.

Thanks

[MartinCY]

Hello,

Please find attached 2 screenshots.

On file ‘nxexec command’ the first user ‘it’ is local admin and the second ‘mvladimirov’ is a domain user, with no privileges. Also there is an error for the second user, which if resolved might give us the possibility to login with AD users, because now it is impossible.

Regards,

Martin

Attachments:

1. 

   nxexec-command.jpg
   

2. 

   PAM-nx-cfg.jpg
   

[MartinCY]

Hi,

Let me add that /etc/pam.d/nx is empty.

Regards,

Martin

[Guro]

hello

it seems issue is related to AD user recognition.

Could you check /nxexec --auth with sudo or root access account for mvladimirov like:

sudo ./nxexec --auth

Also provide information about AD integration of macOS host, do you some third party tools or only macos standards?

Thanks

[Author]

Posts