NoMachine < Computing < CLASSE Wiki

For instructions specific to CHESS Remote Operations, please see RemoteUserGuide.

Available NoMachine servers and options for new installations.

CLASSE supports four versions of NoMachine. Please submit a ServiceRequest for help selecting or setting up NoMachine for your workstation or desktop.

LNX201

LNX201 is available through NoMachine as a general-use remote login node. Any CPU or memory intensive operations should be run on the CLASSE ComputeFarm or on individual workstations - not on lnx201.

NoMachine

The default version of NoMachine is available free of charge for the following use case.

  1. Only allows access to your physical display (not virtual desktops or individual applications).
  2. Must be on a CLASSE Network or connected to the ClasseVPN (only supports the NX protocol, not SSH).
  3. Only allows one remote connection at a time.

NoMachine Enterprise Desktop

With a license purchase, CLASSE can install the "NoMachine Enterprise Desktop" on your desktop or workstation.

  1. Only allows access to your physical display (not virtual desktops or individual applications).
  2. Allows multiple simultaneous connections to a single desktop (although the owner of the desktop must be connected to approve the connection requests from other users).
  3. Does not require you to be on site or connected to the ClasseVPN (supports the ssh protocol, in addition to NX).

NoMachine Workstation

With an additional license, CLASSE can install the "NoMachine Workstation" on your desktop or workstation.

  1. Allows connecting to both the physical display and creating up to four virtual desktops.
  2. Allows multiple simultaneous connections to a single desktop (although the owner of the desktop must be connected to approve the connection requests from other users).
  3. Does not require you to be on site or connected to the ClasseVPN (supports the ssh protocol, in addition to NX).

Connecting with a web browser

In addition to using the NoMachine client (see below), you can simply browse to https://nomachine.classe.cornell.edu from any web browser and login using your CLASSE username and password.

This is the simplest method to connect, but in some cases we find the NoMachine client to be more responsive and reliable.

Connecting with the NoMachine Client

Client Installation

  1. Download and install the free "NoMachine Enterprise Client" from: https://download.nomachine.com/enterprise/?product=enterprise-client
    • On a CLASSE-managed Windows computer
      • Choose the NoMachine for Windows download link, then choose the 64bit version.
      • You should get a shortcut to the NoMachine executable on your desktop.
    • The NoMachine app is part of the base image on CLASSE-managed Macs

Client Setup

  1. Start NoMachine
  2. click on "Add"
  3. Fill in the details for your desired connection.
    1. For using our cloud server to connect to any computer you have access.
      • Host = "nomachine.classe.cornell.edu"
      • Protocol = "NX"
    2. For using lnx201 - our general use login node (not appropriate for CPU or memory-intensive applications)
      • Host = "lnx201.classe.cornell.edu"
      • Protocol = "SSH"
    3. For using your own CLASSE Public desktop or workstation
      • Host = the hostname of your desktop or workstation. For example, "lnx1234.classe.cornell.edu"
      • Protocol = "SSH"
  4. If Prompted, select "Password" authentication method, and click on "Continue"
  5. If you get a proxy checkbox, leave "Don't use a proxy" selected, and click "Continue."
  6. Change the connection name if desired, and click on "Done."

Connecting

  1. Start NoMachine, and double-click on the connection created above.
  2. The first time connecting, click "Yes" to accept the remote host certificate and verify its identity.
  3. Login with your CLASSE username and password.
  4. Double click on the computer you'd like to control.
  5. Click "OK" to accept the default Audio streaming setting (if desired).

Virtual Desktops

Depending on the version of nomachine installed on your computer, you may be able to create Virtual desktops in addition to controlling the physical display.

To start a full XFCE virtual desktop:

  1. start a connection to nomachine.classe.cornell.edu using either the NX or SSH protocols
  2. double-click on your desired computer
  3. click on the “New desktop” button (or double-click on “Create a new desktop or custom session”)
  4. double-click on “Create a new virtual desktop”
  5. Select desired display preferences. Good initial defaults might be “Show remote display at its resolution using scrollbars” and “Resize the remote display to match the client monitor” to should give you a nice full-screen display. Please see below for changing the display settings after starting a connection.

To kill an existing virtual desktop or custom session:

  1. start a connection to nomachine.classe.cornell.edu
  2. double-click on your desired computer
  3. right-click on the existing “virtual” session you see
  4. click on “Terminate”

Change connection settings (display, keyboard, etc.).

Once you've connected to your remote computer, enter the key combination Ctrl+Alt+0 to open the menu panel or:

  1. move your cursor to the NoMachine icon in your taskbar and click on it.
    • The NoMachine icon and menu:
      station connect.jpg
  2. Click on "Open menu panel" to open the menu panel of your current connection

Click on "Display" and then "Change settings" to fine-tune quality, performance, resolution, etc.

Click on "Input" and the "Grab the keyboard input" to pass the Windows or Mac OS command keys to the remote computer.

Managing your computers

Please submit a ServiceRequest if you would like the ability to manage NoMachine connections on your desktop or workstation.

Access Controls

Nomachine supports two sets of controls.

  1. What computer a user sees when connecting to the cloud server.
  2. What physical displays a user can take control of regardless of who is logged in (the "trusted users" list). If they connect to a computer but aren't in the trusted users list, they can only take control of the physical display if any of the following are true:
    1. They are connecting using the same user account that is logged in to the physical display. b. No-one is logged in to the physical display. c. Whoever is logged in to the physical display manually grants them access (either full control or view only) when they try to connect.

In general, CLASSE groups managed by staff members are used to control who can request connections to a computer and who can take control of a computer without having to be granted access. Please submit a ServiceRequest if you don't know the correct groups to use, would like a new group created, or would like to be able to manage an existing group.

Pausing Remote Access, switching between interactive and view-only, and Disconnecting Remote Users

To view current connections when logged in to a desktop, you can use the little NoMachine icon in the upper right on the top menu bar.

  • Hover over "Desktop shared" and click on "Desktop not shared" to disable desktop sharing.
  • Hover over "Connected users" to see a list of connected users that you can disconnect change from view-only to interactive mode

view-only.png

In addition, you should have the ability to view connections and a history using the command line as follows. Please note that all sudo commands need to be run as individual users - not using shared accounts such as the chess_ station user accounts:

  • view list of current sessions : sudo /usr/NX/bin/nxserver --list
  • view historical list of connections : sudo/usr/NX/bin/nxserver --history
  • disconnect a user : sudo /usr/NX/bin/nxserver --disconnect <username, session> (replace <username, session> with either the username or session id of the session you'd like to disconnect)

If connections are disabled using the GUI, they can be re-enabled from the command-line as follows:

  • Check if "Screen sharing" is disabled : sudo /usr/NX/bin/nxserver --userlist
  • Enable "Screen sharing" for the physical display : sudo /usr/NX/bin/nxserver --useredit station_account  --screen-sharing yes (replacing "station_account" with the name of the user logged in to the physical display)

In addition, the nxserver itself can be stopped and started using:

  • stop accepting new connections : sudo /usr/NX/bin/nxserver --stop
  • disconnect existing sessions as described above
  • resume accepting new connections : sudo /usr/NX/bin/nxserver --start

Troubleshooting

If you are unable to open new virtual desktops, it may help to delete your ~/.nx directory from your CLASSE Linux box.

  1. make sure you have closed all virtual desktops and logged out of any physical displays
  2. execute rm -rf ~/.nx from a terminal