Authorize a group of users in AD to access group of nodes

[Steve92]

Hi,

Is this syntax OK to authorize a group of users defined in Active Directory “DOMMAIN\groupname_01” to access a group of nodes “NodeGroup_01” :

sudo /etc/NX/nxserver --ruleadd --class node --type NodeGroup_01 --value yes –group DOMMAIN\groupname_01

If not, what is the right syntax ?

Thanks,

Regards,

Steve.

[fisherman]

Hi,

I have noted that in your command there was a missing hyphen, as you wrote -group instead of –group.

I would recommend checking these two articles for future reference
https://kb.nomachine.com/AR04U01198 and https://kb.nomachine.com/AR01V01217

Based on my understanding, you would like to block access to a specific group of nodes for all users and then allow for a particular group of users.

In this case, you can use the following:

Create node group:
sudo /etc/NX/nxserver --nodegroupadd NodeGroup_01

Add your node to the newly created node group.
sudo /etc/NX/nxserver --nodeedit IP_of_the_node --node-group NodeGroup_01

Disable access for all users to access hosts in the created node group.
sudo /etc/NX/nxserver --ruleadd --class node --type NodeGroup_01 --value no

Allow access for specify AD system group to access node group
sudo /etc/NX/nxserver --ruleadd --class node --type NodeGroup_01 --value yes --group DOMAIN\groupname_01

[Author]

Posts