mtosti63

[mtosti63]

Logs have been emailed.  Thank you for your help

 

I did the following:

stopped the server

set sessionlog and websession log to 9

started the server

rebooted

kextload the driver

restarted the server via command line twice

I noticed the NoMachine device was not in the volume dropdown, but the driver was loaded.

Thanks

Mike

[mtosti63]

This was in the system log on a fresh reboot – no audio kext

kextload -vvvv /System/Library/Extensions/nxaudio.kext

Apr 13 14:10:28 mediamac01 nxnode.bin[325]: BUG in libdispatch client: mach_recv, monitored resource vanished before the source cancel handler was invoked { 0x7fe1d4ece420[source], ident: 151043 / 0x24e03, handler: 0x7fff618fdca7 }

no NoMachine driver under the speaker dropdown.

/etc/NX/nxserver --restart

Apr 13 14:17:41 mediamac01 nxnode.bin[789]: BUG in libdispatch client: mach_recv, monitored resource vanished before the source cancel handler was invoked { 0x7fee23c6c190[source], ident: 208391 / 0x32e07, handler: 0x7fff618fdca7 }

Now there is a NoMachine item in the speaker dropdown and audio plays

There was no crash report.

I did find these 2 items in the system reports =========================== (attached as one file)

Attachments:

1. nomachine-not-working-mojave-system-reports.zip

[mtosti63]

Sorry, ran the wrong command, the module is loaded

 

kextstat |grep nx
174    0 0xffffff7f84a9c000 0x5000     0x5000     com.nomachine.driver.nxau (4.1.b2) 78172556-B6A4-3112-BA41-E79D18108476 <101 6 5 3 1>

[mtosti63]

Thank you  – we may have a recipe for wellness!

I can hear audio from a NoMachine session now.

Although the list command does not return anything

root# kextload -vvv /System/Library/Extensions/nxaudio.kext
Requesting load of /System/Library/Extensions/nxaudio.kext.
/System/Library/Extensions/nxaudio.kext loaded successfully (or already loaded).

root# spctl –list | grep nx
root#

We do have audio.

Thank you for your patience

Mike

 

[mtosti63]

mac:~ root# /usr/sbin/spctl kext-consent add 493C5JZAGR
spctl: failed to store new configuration.

[mtosti63]

sqlite3 “/var/db/SystemPolicyConfiguration/KextPolicy” “SELECT * FROM kext_policy;” | grep nomachine
493C5JZAGR|com.nomachine.driver.nxau|1|NoMachine S.a.r.l.|21

[mtosti63]

Still no general security preferences popup

The installer did not even make a popup that i needed to go to system preferences.

[mtosti63]

There is no kernel log, but I did use log show

It just shows that the kernel extension is blocked.

 

2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}

 

This is more events around the error

2022-02-04 09:18:43.016700-0800 0x3e6d71   Default     0x0                  213    0    syspolicyd: (CFNetwork) NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813)
2022-02-04 09:18:43.016862-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> HTTP load failed (error code: -1202 [3:-9813])
2022-02-04 09:18:43.017118-0800 0x3e6db3   Error       0x0                  213    0    syspolicyd: (CFNetwork) Task <E3816861-4BDB-4DBF-BA8C-FDD24FCD0A5F>.<32> finished with error – code: -1202
2022-02-04 09:18:43.017386-0800 0x3e6d71   Error       0x0                  213    0    syspolicyd: cloudkit request failed: Error Domain=NSURLErrorDomain Code=-1202 UserInfo={NSURLErrorFailingURLPeerTrustErrorKey=<private>, NSLocalizedRecoverySuggestion=Would you like to connect to the server anyway?, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, NSErrorPeerCertificateChainKey=<private>, NSUnderlyingError=0x7fd607d00eb0 {Error Domain=kCFErrorDomainCFNetwork Code=-1202 UserInfo={_kCFStreamPropertySSLClientCertificateState=0, kCFStreamPropertySSLPeerTrust=<private>, _kCFNetworkCFStreamSSLErrorOriginalValue=-9813, _kCFStreamErrorDomainKey=3, _kCFStreamErrorCodeKey=-9813, kCFStreamPropertySSLPeerCertificates=<private>}}, NSLocalizedDescription=<private>, NSErrorFailingURLKey=<private>, NSErrorFailingURLStringKey=<private>, NSErrorClientCertificateStateKey=0}
2022-02-04 09:18:43.019923-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.020022-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.020849-0800 0x3e6da0   Activity    0x37cfa9             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.022514-0800 0x3e6da0   Activity    0x37cfaa             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.024510-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.024634-0800 0x3e6b58   Default     0x37cfaa             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.028939-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:security_exception] MacOS error: 3
2022-02-04 09:18:43.029020-0800 0x3e6da0   Default     0x0                  213    0    syspolicyd: (Security) [com.apple.securityd:SecError] Error checking with notarization daemon: 3
2022-02-04 09:18:43.029360-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Non-notarized kext blocked: <private>, Thu Oct 29 16:07:29 2020
2022-02-04 09:18:43.029702-0800 0x3e6da0   Error       0x0                  213    0    syspolicyd: Kernel Extension BLOCKED: <private>
2022-02-04 09:18:43.029945-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] Kext rejected due to system policy: <OSKext 0x7f8769431c90 [0x7fffa54cd920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
2022-02-04 09:18:43.030007-0800 0x380      Error       0x0                  72     0    kextd: (IOKit) [com.apple.kext:kextlog] com.nomachine.driver.nxau failed security checks; failing.
2022-02-04 09:18:43.031854-0800 0x3e6db1   Activity    0x37cfab             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.033510-0800 0x3e6db1   Activity    0x37cfac             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessary
2022-02-04 09:18:43.035650-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:rvc] asynchronously fetching CRL (http://crl.apple.com/root.crl) for client (syspolicyd[213]/0#-1 LF=0)
2022-02-04 09:18:43.035731-0800 0x3e6b58   Default     0x37cfac             201    0    trustd: [com.apple.securityd:policy] cert[2]: AnchorTrusted =(leaf)[force]> 0
2022-02-04 09:18:43.039772-0800 0x3e6db2   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> resuming, QOS(0x19)
2022-02-04 09:18:43.040126-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) [com.apple.CFNetwork:ATS] Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> {strength 0, tls 4, ct 0, sub 0, sig 1, ciphers 0, bundle 1, builtin 0}
2022-02-04 09:18:43.040324-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC Enabling TLS [33:0x7fd6e7c68cc0]
2022-02-04 09:18:43.040378-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TCP Conn Start [33:0x7fd6e7c68cc0]
2022-02-04 09:18:43.040440-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] [C33 Hostname#d4ef87ea:443 tcp, url hash: 706b58d4, tls] start
2022-02-04 09:18:43.040616-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_connection_report_state_with_handler_locked [C33] reporting state preparing
2022-02-04 09:18:43.040890-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) Task <E7A09516-2E07-497A-A4EC-6DEF9C19F9D5>.<33> setting up Connection 33
2022-02-04 09:18:43.042101-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_socket_handle_socket_event [C33.1:3] Socket received CONNECTED event
2022-02-04 09:18:43.042182-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (libnetwork.dylib) [com.apple.network:] nw_endpoint_flow_protocol_connected [C33.1 IPv4#3234e4f5:443 in_progress socket-flow (satisfied)] Transport protocol connected
2022-02-04 09:18:43.043007-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 1, Pending(0)
2022-02-04 09:18:43.047916-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 11, Pending(0)
2022-02-04 09:18:43.048005-0800 0x3e6db3   Default     0x0                  213    0    syspolicyd: (CFNetwork) TIC TLS Event [33:0x7fd6e7c68cc0]: 14, Pending(0)
2022-02-04 09:18:43.048285-0800 0x3e6da0   Activity    0x37cfad             213    0    syspolicyd: (Security) SecTrustEvaluateIfNecessaryFastAsync
2

[mtosti63]

Hello – I have already tried this, and the popup dialog does not appear on the general page.

But I get this error.

mediamac01:~ $ sudo kextload -vvv /System/Library/Extensions/nxaudio.kext
Password:
Requesting load of /System/Library/Extensions/nxaudio.kext.
/System/Library/Extensions/nxaudio.kext failed to load – (libkern/kext) system policy prevents loading; check the system/kernel logs for errors or try kextutil(8).

How do I check the system kernel logs?

Thank you for your help

Mike

[mtosti63]

Yes, I had that open and there was no notifications there.  I expected it to be there but it was not.

[mtosti63]

I should also mention that in the system preferences->security->general tab, there were no notifications of blocked extensions.

[mtosti63]

I am getting this when trying to install nxaudio

 

mediamac01:~ root# kextutil -vvv /System/Library/Extensions/nxaudio.kext
Defaulting to kernel file ‘/System/Library/Kernels/kernel’
Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
Kext rejected due to system policy: <OSKext 0x7f7fb6d06160 [0x7fffa565d920]> { URL = “file:///Library/StagedExtensions/System/Library/Extensions/nxaudio.kext/”, ID = “com.nomachine.driver.nxau” }
Diagnostics for /System/Library/Extensions/nxaudio.kext:

 

 

[Author]

Posts