What controls access control?

[swampler]

We have a NoMachine Workstation server, 5.3.9-8, running on CentOS 7.   It is configured to require local user authorization when a (different) remote user attempts to connect to the physical display.  However, the behavior is inconsistent.  If the remote user comes in from one of our local machines the local user is notified and must authorize the access (and specify the type of access).  However, if the same user comes in from a machine on a different network (e.g. from another site) then the access is automatically granted without requiring authorization from the local user.  I can’t (well, don’t know how to) verify that the use of a local network connection versus a remote network connection is the problem.  In all cases the clients are also NoMachine Workstation based, 5.3.9-8, running on CentOS 7, running the MATE desktop (server does also).

What can cause this?  There are no trusted users on the server.

More importantly, how can we fix it so the local user must always authorize access when a different user attempts a remote connection to the physical display”?

[kroy]

Are you sure that you are connecting to physical session and authenticated user is other then desktop owner during such connection from external network? Is that local user, or some kind of network user (on ldap environment or etc)? We weren’t able to reproduce the problem. Can you enable debug and restart nxserver (sudo /usr/NX/bin/nxserver --restart)? If you were able to reproduce issue please collect logs (all from server side and .nx folder from client side) and send them to forum[at]nomachine[dot]com. Instructions about debug and collecting logs you can find there: https://www.nomachine.com/DT07M00098.

[Author]

Posts