xrdp isn't working anymore

[Emrion]

Hi,

xrdp-0.10.4.1,1 works, xrdp-0.10.4.1_1,1 doesn't work.
I don't know if it is linked or not to the last security upgrade of openh264.

The output of rdesktop is:

Autoselecting keyboard map 'fr' from locale
Connection established using plain RDP.
Core(error): ber_parse_header(), expected tag 32614, got 8576
Protocol(error): mcs.c:115: mcs_recv_connect_response(), unexpected stream overrun
0000 03 00 00 09 02 f0 80 21 80

Anyone has a clue?

 

[Emrion]

No one here uses net/xrdp?

 

[Alexander88207]

Hello,

i think open an ticket at FreeBSD Bugzilla for net/xrdp would be more appropriate.

 

[Emrion]

Hello,

i think open an ticket at FreeBSD Bugzilla for net/xrdp would be more appropriate.

For sure. I was waiting for confirmation of the problem before. And perhaps some ideas for the investigation.

 

[bxbzq]

Hello, I'm too running into xrdp not working problem. Any progress on solutions?

 

[Emrion]

I've just found how to make it work yesterday.

In /usr/local/etc/xrdp/xrdp.ini, I changed security_layer from negotiate to tls. You just need to put valid cert and key in the vars certificate and key_file. Beware that you must use the full path for both.

Reference: PR 288935

 

[bxbzq]

I've just found how to make it work yesterday.

In /usr/local/etc/xrdp/xrdp.ini, I changed security_layer from negotiate to tls. You just need to put valid cert and key in the vars certificate and key_file. Beware that you must use the full path for both.

Reference: PR 288935

Great, it works. Thanks.

Did you replace xrdp with _xrdp in sesman.ini, xrdp.ini and make some file permissions changes as PR 289138 instructs?
I followed the PR but wonder if that matters.

 

[Emrion]

Did you replace xrdp with _xrdp in sesman.ini, xrdp.ini and make some file permissions changes as PR 289138 instructs?

No. I created an user & group xrdp and it works perfectly as instructed here: https://github.com/neutrinolabs/xrdp/wiki/Running-the-xrdp-process-as-non-root

Of course, I set the files permissions accordingly.

 

[Emrion]

After a little more investigation, it turns out that, at the base, I put incorrect paths in certificate and key_file.

The 0.10.4.1,1 version connected with plain RDP (maybe because the cert/key paths were wrong). It seems that since 0.10.4.1_1,1, plain RDP doesn't work anymore.

So, to be clear, if security_layer is set to tls or negotiate, it chooses tls. If it's set to rdp, xrdp doesn't work with the error mentioned above.