NoMachine audio not working on Mojave

Forum / NoMachine for Mac / NoMachine audio not working on Mojave

Viewing 15 posts - 1 through 15 (of 19 total)
  • Author
    Posts
  • #37058
    mtosti63
    Participant

    Hello – I have an issue with NoMachine 7.7.4 where the audio does not work when connecting via Windows 10 desktop.  This has been an ongoing problem with this box.

    Other macs work fine (but have 10.14 macOS intalled)

    Security settings had nxnode and NoMachine checked in Microphone.  nxnode is installed and checked in accessibility and full disk access.

    SIP is disabled on this mac

    restarting the nxservice does not pop up any errors.

    I can connect fine and control the applications on the mac.

    I have re-installed with no luck.

    kextstat does not show any nx kext installed.

    mediamac01:/ root# kextstat |grep nx
    mediamac01:/ root#

    System report for applications

    NoMachine:

    Version:    7.7.4
    Obtained from:    Identified Developer
    Last Modified:    1/17/22, 11:37 AM
    Kind:    Intel
    64-Bit (Intel):    Yes
    Signed by:    Developer ID Application: NoMachine S.a.r.l. (493C5JZAGR), Developer ID Certification Authority, Apple Root CA
    Location:    /Applications/NoMachine.app
    Get Info String:    NoMachine 7.7.4, Copyright (c) 2002-2021 NoMachine

    From system report Extensions

    nxaudio:

    Version:    4.1
    Last Modified:    10/8/21, 1:11 PM
    Bundle ID:    com.nomachine.driver.nxau
    Notarized:    No
    Loaded:    No
    Get Info String:    NoMachine Audio Adapter Version 4.1.b2 copyright © 2002 – 2016 NoMachine
    Obtained from:    Identified Developer
    Kind:    Intel
    Architectures:    x86_64
    64-Bit (Intel):    Yes
    Location:    /System/Library/Extensions/nxaudio.kext
    Kext Version:    4.1.b2
    Loadable:    Yes
    Dependencies:    Satisfied
    Signed by:    Developer ID Application: NoMachine S.a.r.l. (493C5JZAGR), Developer ID Certification Authority, Apple Root CA

    System report shows No disabled software

    Any ideas here?

    Thanks

    Mike

     

     

    #37078
    kubaszym1
    Participant

    Hello,
    Please check if you see NoMachine Audio Adapter in your audio settings while the session is running.
    If you don’t, please check if you can load nxaudio.kext by running the following command:
    sudo kextutil -vvv /System/Library/Extensions/nxaudio.kext/
    You can check the result by running:
    kextstat | grep nxau
    The output should look similar to this:
    265 0 0xffffff7f83cd6000 0x5000 0x5000 com.nomachine.driver.nxau (4.1.b2) 78172556-B6A4-3112-BA41-E79D18108476
    Then restart NoMachine server:
    sudo /etc/NX/nxserver –restart

    Kuba

    #37086
    mtosti63
    Participant

    I am getting this when trying to install nxaudio

     

    mediamac01:~ root# kextutil -vvv /System/Library/Extensions/nxaudio.kext
    Defaulting to kernel file ‘/System/Library/Kernels/kernel’
    Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
    Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
    Diagnostics for /System/Library/Extensions/nxaudio.kext:

     

     

    #37092
    kubaszym1
    Participant

    Hi,

    Try this. After running the command “sudo kextutil -vvv /System/Library/Extensions/nxaudio.kext” access System Preferences -> Security&Privacy -> General panel and click on the “Allow” button.

    #37093
    mtosti63
    Participant

    I should also mention that in the system preferences->security->general tab, there were no notifications of blocked extensions.

    #37110
    mtosti63
    Participant

    Yes, I had that open and there was no notifications there.  I expected it to be there but it was not.

    #37305
    kubaszym1
    Participant

    Hi,

    First, in System preferences -> Security -> General Tab  in section “Allow apps downloaded from” check if the option “App store and identified developers” is marked.

    Then, please run this command:

    sudo kextload -vvv /System/Library/Extensions/nxaudio.kext

    Then you should be able to see the notifications about blocked software in System Preferences->Security->General Tab. Please allow loading system software from NoMachine S.a.r.l.. Then probably you will have to restart your machine or at least NoMachine server. You can find more information here: https://knowledgebase.nomachine.com/AR01P00962

    #37313
    mtosti63
    Participant

    Hello – I have already tried this, and the popup dialog does not appear on the general page.

    But I get this error.

    mediamac01:~ $ sudo kextload -vvv /System/Library/Extensions/nxaudio.kext
    Password:
    Requesting load of /System/Library/Extensions/nxaudio.kext.
    /System/Library/Extensions/nxaudio.kext failed to load – (libkern/kext) system policy prevents loading; check the system/kernel logs for errors or try kextutil(8).

    How do I check the system kernel logs?

    Thank you for your help

    Mike

    #37318
    kubaszym1
    Participant

    Hello,

    You can check the kernel or system logs with this command:

    tail -f /var/log/system.log

    tail -f /var/log/kernel.log

    You can also use the ‘less’ command, for example:

    less /var/log/kernel.log

    #37327
    mtosti63
    Participant

    There is no kernel log, but I did use log show

    It just shows that the kernel extension is blocked.

     

    2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
    2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
    2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
    2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
    2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
    2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
    2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
    2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
    2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
    2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
    2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}

     

    This is more events around the error

    2022-02-04 09:18:43.016700-0800 0x3e6d71   Default     0x0                  213    0    syspolicyd: (CFNetwork) NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
    2022-02-04 09:18:43.016862-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> HTTP load failed (error code: -1202 [3:-9813])
    2022-02-04 09:18:43.017118-0800 0x3e6db3   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> finished with error – code: -1202
    2022-02-04 09:18:43.017386-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: cloudkit request failed: Error Domain=NSURLErrorDomain Code=-1202 UserInfo={NSURLErrorFailingURLPeerTrustErrorKey=<private>, NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, NSErrorPeerCertificateChainKey=<private>, NSUnderlyingError=0x7fd607d00eb0 {Error Domain=kCFErrorDomainCFNetwork Code=-1202 UserInfo={_kCFStreamPropertySSLClientCertificateState=0, kCFStreamPropertySSLPeerTrust=<private>, _kCFNetworkCFStreamSSLErrorOriginalValue=-9813, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, kCFStreamPropertySSLPeerCertificates=<private>}}, NSLocalizedDescription=<private>, NSErrorFailingURLKey=<private>, NSErrorFailingURLStringKey=<private>, NSErrorClientCertificateStateKey=0}
    2022-02-04 09:18:43.019923-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
    2022-02-04 09:18:43.020022-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
    2022-02-04 09:18:43.020849-0800 0x3e6da0   Activity    0x37cfa9             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.022514-0800 0x3e6da0   Activity    0x37cfaa             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.024510-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
    2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
    2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
    2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
    2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
    2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
    2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
    2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
    2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
    2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
    2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
    2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
    2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}
    2022-02-04 09:18:43.040324-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC Enabling TLS [33:0x7fd6e7c68cc0]
    2022-02-04 09:18:43.040378-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TCP Conn Start [33:0x7fd6e7c68cc0]
    2022-02-04 09:18:43.040440-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] [C33 Hostname#d4ef87ea:443 tcp, url hash: 706b58d4, tls] start
    2022-02-04 09:18:43.040616-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_connection_report_state_with_handler_locked [C33] reporting state preparing
    2022-02-04 09:18:43.040890-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> setting up Connection 33
    2022-02-04 09:18:43.042101-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_socket_handle_socket_event [C33.1:3] Socket received CONNECTED event
    2022-02-04 09:18:43.042182-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_endpoint_flow_protocol_connected [C33.1 IPv4#3234e4f5:443 in_progress socket-flow (satisfied)] Transport protocol connected
    2022-02-04 09:18:43.043007-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 1, Pending(0)
    2022-02-04 09:18:43.047916-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 11, Pending(0)
    2022-02-04 09:18:43.048005-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 14, Pending(0)
    2022-02-04 09:18:43.048285-0800 0x3e6da0   Activity    0x37cfad             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessaryFastAsync
    2

    #37367
    kubaszym1
    Participant

    Hello,

    You can update the NoMachine application to the newest version (7.8.2). Then, after the installation you should see the notification about blocked extensions. Enter the Security & Privacy as before, click the lock to make changes and allow system software from NoMachine. Please note that the possibility to unblock the loading of NoMachine system extensions is available only for 30 minutes  after the system has issued the ‘System Extension Blocked’ dialog.

    #37369
    mtosti63
    Participant

    Still no general security preferences popup

    The installer did not even make a popup that i needed to go to system preferences.

    #37386
    kubaszym1
    Participant

    Hello,

    You can check if NoMachine kernel extensions are in the kext policy database:

    sudo sqlite3 “/var/db/SystemPolicyConfiguration/KextPolicy” “SELECT * FROM kext_policy;” | grep nomachine

    Please send us the result of this command.

    Also, do you use any Mobile Device Management like JAMF?

    #37392
    mtosti63
    Participant

    sqlite3 “/var/db/SystemPolicyConfiguration/KextPolicy” “SELECT * FROM kext_policy;” | grep nomachine
    493C5JZAGR|com.nomachine.driver.nxau|1|NoMachine S.a.r.l.|21

    #37511
    kubaszym1
    Participant

    Hello,

    You can try this command:

    /usr/sbin/spctl kext-consent add 493C5JZAGR

    If it still doesn’t work, please send me any notifications you will get.

Viewing 15 posts - 1 through 15 (of 19 total)

This topic was marked as solved, you can't post.