NoMachine audio not working on Mojave

[mtosti63]

Hello – I have an issue with NoMachine 7.7.4 where the audio does not work when connecting via Windows 10 desktop.  This has been an ongoing problem with this box.

Other macs work fine (but have 10.14 macOS intalled)

Security settings had nxnode and NoMachine checked in Microphone.  nxnode is installed and checked in accessibility and full disk access.

SIP is disabled on this mac

restarting the nxservice does not pop up any errors.

I can connect fine and control the applications on the mac.

I have re-installed with no luck.

kextstat does not show any nx kext installed.

mediamac01:/ root# kextstat |grep nx
mediamac01:/ root#

System report for applications

NoMachine:

Version:    7.7.4
Obtained from:    Identified Developer
Last Modified:    1/17/22, 11:37 AM
Kind:    Intel
64-Bit (Intel):    Yes
Signed by:    Developer ID Application: NoMachine S.a.r.l. (493C5JZAGR), Developer ID Certification Authority, Apple Root CA
Location:    /Applications/NoMachine.app
Get Info String:    NoMachine 7.7.4, Copyright (c) 2002-2021 NoMachine

From system report Extensions

nxaudio:

Version:    4.1
Last Modified:    10/8/21, 1:11 PM
Bundle ID:    com.nomachine.driver.nxau
Notarized:    No
Loaded:    No
Get Info String:    NoMachine Audio Adapter Version 4.1.b2 copyright © 2002 – 2016 NoMachine
Obtained from:    Identified Developer
Kind:    Intel
Architectures:    x86_64
64-Bit (Intel):    Yes
Location:    /System/Library/Extensions/nxaudio.kext
Kext Version:    4.1.b2
Loadable:    Yes
Dependencies:    Satisfied
Signed by:    Developer ID Application: NoMachine S.a.r.l. (493C5JZAGR), Developer ID Certification Authority, Apple Root CA

System report shows No disabled software

Any ideas here?

Thanks

Mike

 

 

[kubaszym1]

Hello,
Please check if you see NoMachine Audio Adapter in your audio settings while the session is running.
If you don’t, please check if you can load nxaudio.kext by running the following command:
sudo kextutil -vvv /System/Library/Extensions/nxaudio.kext/
You can check the result by running:
kextstat | grep nxau
The output should look similar to this:
265 0 0xffffff7f83cd6000 0x5000 0x5000 com.nomachine.driver.nxau (4.1.b2) 78172556-B6A4-3112-BA41-E79D18108476
Then restart NoMachine server:
sudo /etc/NX/nxserver –restart

Kuba

[mtosti63]

I am getting this when trying to install nxaudio

 

mediamac01:~ root# kextutil -vvv /System/Library/Extensions/nxaudio.kext
Defaulting to kernel file ‘/System/Library/Kernels/kernel’
Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
Diagnostics for /System/Library/Extensions/nxaudio.kext:

 

 

[kubaszym1]

Hi,

Try this. After running the command “sudo kextutil -vvv /System/Library/Extensions/nxaudio.kext” access System Preferences -> Security&Privacy -> General panel and click on the “Allow” button.

[mtosti63]

I should also mention that in the system preferences->security->general tab, there were no notifications of blocked extensions.

[mtosti63]

Yes, I had that open and there was no notifications there.  I expected it to be there but it was not.

[kubaszym1]

Hi,

First, in System preferences -> Security -> General Tab  in section “Allow apps downloaded from” check if the option “App store and identified developers” is marked.

Then, please run this command:

sudo kextload -vvv /System/Library/Extensions/nxaudio.kext

Then you should be able to see the notifications about blocked software in System Preferences->Security->General Tab. Please allow loading system software from NoMachine S.a.r.l.. Then probably you will have to restart your machine or at least NoMachine server. You can find more information here: https://knowledgebase.nomachine.com/AR01P00962

[mtosti63]

Hello – I have already tried this, and the popup dialog does not appear on the general page.

But I get this error.

mediamac01:~ $ sudo kextload -vvv /System/Library/Extensions/nxaudio.kext
Password:
Requesting load of /System/Library/Extensions/nxaudio.kext.
/System/Library/Extensions/nxaudio.kext failed to load – (libkern/kext) system policy prevents loading; check the system/kernel logs for errors or try kextutil(8).

How do I check the system kernel logs?

Thank you for your help

Mike

[kubaszym1]

Hello,

You can check the kernel or system logs with this command:

tail -f /var/log/system.log

tail -f /var/log/kernel.log

You can also use the ‘less’ command, for example:

less /var/log/kernel.log

[mtosti63]

There is no kernel log, but I did use log show

It just shows that the kernel extension is blocked.

 

2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}

 

This is more events around the error

2022-02-04 09:18:43.016700-0800 0x3e6d71   Default     0x0                  213    0    syspolicyd: (CFNetwork) NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
2022-02-04 09:18:43.016862-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> HTTP load failed (error code: -1202 [3:-9813])
2022-02-04 09:18:43.017118-0800 0x3e6db3   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> finished with error – code: -1202
2022-02-04 09:18:43.017386-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: cloudkit request failed: Error Domain=NSURLErrorDomain Code=-1202 UserInfo={NSURLErrorFailingURLPeerTrustErrorKey=<private>, NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, NSErrorPeerCertificateChainKey=<private>, NSUnderlyingError=0x7fd607d00eb0 {Error Domain=kCFErrorDomainCFNetwork Code=-1202 UserInfo={_kCFStreamPropertySSLClientCertificateState=0, kCFStreamPropertySSLPeerTrust=<private>, _kCFNetworkCFStreamSSLErrorOriginalValue=-9813, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, kCFStreamPropertySSLPeerCertificates=<private>}}, NSLocalizedDescription=<private>, NSErrorFailingURLKey=<private>, NSErrorFailingURLStringKey=<private>, NSErrorClientCertificateStateKey=0}
2022-02-04 09:18:43.019923-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.020022-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.020849-0800 0x3e6da0   Activity    0x37cfa9             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.022514-0800 0x3e6da0   Activity    0x37cfaa             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.024510-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}
2022-02-04 09:18:43.040324-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC Enabling TLS [33:0x7fd6e7c68cc0]
2022-02-04 09:18:43.040378-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TCP Conn Start [33:0x7fd6e7c68cc0]
2022-02-04 09:18:43.040440-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] [C33 Hostname#d4ef87ea:443 tcp, url hash: 706b58d4, tls] start
2022-02-04 09:18:43.040616-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_connection_report_state_with_handler_locked [C33] reporting state preparing
2022-02-04 09:18:43.040890-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> setting up Connection 33
2022-02-04 09:18:43.042101-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_socket_handle_socket_event [C33.1:3] Socket received CONNECTED event
2022-02-04 09:18:43.042182-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_endpoint_flow_protocol_connected [C33.1 IPv4#3234e4f5:443 in_progress socket-flow (satisfied)] Transport protocol connected
2022-02-04 09:18:43.043007-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 1, Pending(0)
2022-02-04 09:18:43.047916-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 11, Pending(0)
2022-02-04 09:18:43.048005-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 14, Pending(0)
2022-02-04 09:18:43.048285-0800 0x3e6da0   Activity    0x37cfad             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessaryFastAsync
2

[kubaszym1]

Hello,

You can update the NoMachine application to the newest version (7.8.2). Then, after the installation you should see the notification about blocked extensions. Enter the Security & Privacy as before, click the lock to make changes and allow system software from NoMachine. Please note that the possibility to unblock the loading of NoMachine system extensions is available only for 30 minutes  after the system has issued the ‘System Extension Blocked’ dialog.

[mtosti63]

Still no general security preferences popup

The installer did not even make a popup that i needed to go to system preferences.

[kubaszym1]

Hello,

You can check if NoMachine kernel extensions are in the kext policy database:

sudo sqlite3 “/var/db/SystemPolicyConfiguration/KextPolicy” “SELECT * FROM kext_policy;” | grep nomachine

Please send us the result of this command.

Also, do you use any Mobile Device Management like JAMF?

[mtosti63]

sqlite3 “/var/db/SystemPolicyConfiguration/KextPolicy” “SELECT * FROM kext_policy;” | grep nomachine
493C5JZAGR|com.nomachine.driver.nxau|1|NoMachine S.a.r.l.|21

[kubaszym1]

Hello,

You can try this command:

/usr/sbin/spctl kext-consent add 493C5JZAGR

If it still doesn’t work, please send me any notifications you will get.

[Author]

Posts