Authentication failed ”Wrong password or login’

[jason.rieg]

Hello,

NoMachine 8.5.3 has been set up on Linux server running Red Hat 9 and on a client computer running Windows 10.

It is impossible for me to connect to the Linux server with NoMachine over Active Directory authentication.

See the error message from the nxserver.log below :

48124 48124 2023-07-04 15:15:49 691.800 NXSERVER ERROR! Reached timeout of 30s while trying nxexec authentication for user ‘cocrij0@zdv.liebherr.i’.

48124 48124 2023-07-04 15:15:49 693.398 NXSERVER WARNING! Process ‘/usr/NX/bin/nxexec –auth’ with pid ‘48195/48195’ finished with signal 9 after 30,027 seconds.

48124 48124 2023-07-04 15:15:49 693.775 NXSERVER ERROR! Authentication with ‘NX-password’ from host ‘10.131.23.16’ failed. Error is ‘Wrong password or login’.

Info: Connection from 10.131.23.16 port 59590 closed on Tue Jul  4 15:15:49 2023.

SSSDCONF file seems OK (ad_gpo_map_network = +nx has been added) and getent password userid@domain is working OK and id username@domain is showing some results as well.

Any ideas what could be the issue here ?

Thanks in advance

[Britgirl]

Hi, just so that we have a clear picture of your set-up. Can you tell us the NoMachine product that you have on the Red Hat server?

[jason.rieg]

Version 8.5.3.1 is installed on Red Hat

[Britgirl]

The free version or one of the evaluation Enterprise products?

[jason.rieg]

Free version

[jason.rieg]

I can add some details.

Connection is now working if the Active Directory user account is part of the admin group.

Any clue how to make the connection work for non-admin users as well ?

Thanks

[Cato]

Hello jason.rieg,

Start terminal as user your want to authenticate on your server host, cd to <nomachine_install_dir>/bin and run ./nxexec –auth.
Provide username and password as asked for. What’s the command’s output? Does execution take more than 30 seconds?

[jason.rieg]

Commande runs OK and displays the list of AD groups the user is member of. Result took around 2 minutes 🙁

[jason.rieg]

Hello,

Commands runs OK and displays the list of AD groups the user is member of.

I have noticed that the response time varies depending on the number of AD groups the user is actually member of.

I have added the option ldap_group_nesting_level to 0 in the sssd.conf as well with no improvements on the the nxexec --auth query unfortunately.

Thanks

[Cato]

Hi,

Please uncomment and set the following key in <NoMachine_install_dir>/etc/server.cfg file on your server host:
#AuthorizationTimeout 30

Value represents authentication timeout in seconds. Increase this value to 200 and see if this allows you to start NoMachine session. Sadly, this won’t fix the large delay itself.

[Author]

Posts