2FA on Mac

Forum / NoMachine for Mac / 2FA on Mac

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • #46898
    MartinCY
    Participant

    Hello,

    I am using NoMachine Free ver. 8.11.3_5. I cannot see where to enable 2FA and to use my authentication app.

    Also, in one thread from June 2023, I saw that you are working on your own 2FA solution, which will be included in ver. 9 but still no signs for that version.

    Regards,

    Martin

    #46977
    Britgirl
    Keymaster

    Our own 2FA functionality will be made available with the next major release, version 9. Can I ask what authentication app you are using?

    #46983
    MartinCY
    Participant

    Hello,

    I saw a post from 9 months ago that you will implement 2FA in version 9. It is almost an year. Do you have a release date for version 9? And is there a beta we can test.

    I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.

    Currently we use Microsoft Authenticator.

    Thank you for your response!

    Regards,

    Martin

    #46990
    Britgirl
    Keymaster

    Indeed NoMachine’s built-in 2FA will be in version 9. We are little late with delivering NoMachine 9, we know, but it’s coming 🙂

    To use your own 2FA, you need to first enable 2FA in PAM.

    1) open a terminal on the Mac server side
    2) make a back up sudo cp /etc/pam.d/nx /etc/pam.d/nx-ori
    3) then run sudo cp /etc/pam.d/sshd /etc/pam.d/nx (to enable 2fa in PAM)
    4) start a NoMachine connection (no need to set anything in the Edit – Authentication section of your connection)
    5) you will then be prompted for the password and code.

    Let us know how you get on.

    #46993
    MartinCY
    Participant

    Thank you for the help.

    I followed the steps but nothing has changed in regards to 2FA.

    How can I add the 2FA in the Microsoft Authenticator app?

    As per your 4th step I do not need to change anything in the NoMachine app on the client side, so it should look like the attached photo?

    Thank you in advance,

    Martin

    Attachments:
    #47014
    Guro
    Contributor

    hello

    I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.

    Please check next command result on your mac host after preparing PAM for 2AF.

    (if install path is standard):
    cd /Applications/NoMachine.app/Contents/Frameworks/bin
    ./nxexec –auth

    Terminal will ask for username, then it should ask for password and probably verification code depending on your PAM nx configuration.

    Please paste here a screenshot of the results or paste the output directly. Also pay attention to any errors showing in the log output.

    Thanks

    #47163
    MartinCY
    Participant

    Hello,

    Please find attached 2 screenshots.

    On file ‘nxexec command’ the first user ‘it’ is local admin and the second ‘mvladimirov’ is a domain user, with no privileges. Also there is an error for the second user, which if resolved might give us the possibility to login with AD users, because now it is impossible.

    Regards,

    Martin

    #47169
    MartinCY
    Participant

    Hi,

    Let me add that /etc/pam.d/nx is empty.

    Regards,

    Martin

    #47913
    Guro
    Contributor

    hello

    it seems issue is related to AD user recognition.

    Could you check /nxexec --auth with sudo or root access account for mvladimirov like:

    sudo ./nxexec --auth

    Also provide information about AD integration of macOS host, do you some third party tools or only macos standards?

    Thanks

Viewing 9 posts - 1 through 9 (of 9 total)

Closed because the user did not provide further feedback. Please notify us if you confirm that it is resolved or open a new topic if you have the same problem.