Forum / NoMachine for Mac / 2FA on Mac
- This topic has 8 replies, 3 voices, and was last updated 4 days, 23 hours ago by Guro.
-
AuthorPosts
-
February 1, 2024 at 16:13 #46898MartinCYParticipant
Hello,
I am using NoMachine Free ver. 8.11.3_5. I cannot see where to enable 2FA and to use my authentication app.
Also, in one thread from June 2023, I saw that you are working on your own 2FA solution, which will be included in ver. 9 but still no signs for that version.
Regards,
Martin
February 8, 2024 at 19:02 #46977BritgirlKeymasterOur own 2FA functionality will be made available with the next major release, version 9. Can I ask what authentication app you are using?
February 9, 2024 at 10:32 #46983MartinCYParticipantHello,
I saw a post from 9 months ago that you will implement 2FA in version 9. It is almost an year. Do you have a release date for version 9? And is there a beta we can test.
I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.
Currently we use Microsoft Authenticator.
Thank you for your response!
Regards,
Martin
February 9, 2024 at 17:24 #46990BritgirlKeymasterIndeed NoMachine’s built-in 2FA will be in version 9. We are little late with delivering NoMachine 9, we know, but it’s coming 🙂
To use your own 2FA, you need to first enable 2FA in PAM.
1) open a terminal on the Mac server side
2) make a back up sudo cp /etc/pam.d/nx /etc/pam.d/nx-ori
3) then run sudo cp /etc/pam.d/sshd /etc/pam.d/nx (to enable 2fa in PAM)
4) start a NoMachine connection (no need to set anything in the Edit – Authentication section of your connection)
5) you will then be prompted for the password and code.Let us know how you get on.
February 12, 2024 at 11:26 #46993MartinCYParticipantThank you for the help.
I followed the steps but nothing has changed in regards to 2FA.
How can I add the 2FA in the Microsoft Authenticator app?
As per your 4th step I do not need to change anything in the NoMachine app on the client side, so it should look like the attached photo?
Thank you in advance,
Martin
Attachments:
February 14, 2024 at 10:12 #47014GuroContributorhello
I was looking in the forum, in the KB but couldn’t find where to go in app to setup 2FA for mac.
Please check next command result on your mac host after preparing PAM for 2AF.
(if install path is standard):
cd /Applications/NoMachine.app/Contents/Frameworks/bin
./nxexec –authTerminal will ask for username, then it should ask for password and probably verification code depending on your PAM nx configuration.
Please paste here a screenshot of the results or paste the output directly. Also pay attention to any errors showing in the log output.
Thanks
February 26, 2024 at 10:41 #47163MartinCYParticipantHello,
Please find attached 2 screenshots.
On file ‘nxexec command’ the first user ‘it’ is local admin and the second ‘mvladimirov’ is a domain user, with no privileges. Also there is an error for the second user, which if resolved might give us the possibility to login with AD users, because now it is impossible.
Regards,
Martin
Attachments:
February 26, 2024 at 13:47 #47169MartinCYParticipantHi,
Let me add that /etc/pam.d/nx is empty.
Regards,
Martin
April 23, 2024 at 06:48 #47913GuroContributorhello
it seems issue is related to AD user recognition.
Could you check
/nxexec --auth
with sudo or root access account for mvladimirov like:sudo ./nxexec --auth
Also provide information about AD integration of macOS host, do you some third party tools or only macos standards?
Thanks
-
AuthorPosts
You must be logged in to reply to this topic.