Auto close session on console and re-open it over xrdp ? #2122

docop · 2022-01-16T21:55:54Z

docop
Jan 16, 2022

Hi So i would like to confirm the proper way to auto close a session currently active, as to when we log, in xrdp and then getting the same session : with all app already open stay intact. Like on a winpc, when you connect via rdp, the main pc close session and will only show the login prompt. And in rdp, you get the same open windowsapp running.
i run xrdp v0.9.15 on xubuntu 21.10(xfce) with dbus-x11 already there.

I check over /etc/ssh/sesman.ini , but as i used xorg at connection prompt, i guess the: ubd,ubi.. are not use.

i also did the startwm.sh mod as on the wiki (running-a-user-logout-script) , but it don't do. And not sure about the as i don't have: /usr/local/bin/xrdp_logout
Thanks for the precision

matt335672 · 2022-01-17T09:37:58Z

matt335672
Jan 17, 2022
Collaborator

This isn't possible I'm afraid. For performance reasons, X11 servers maintain a lot of application-specific state. There's no mechanism provided by X11 to migrate this state from one X server to another.

To meet your use-case you could use x11vnc or vino to export your console session over VNC. You can then connect to this using a VNC viewer tunnelled over ssh (Remmina natively supports this), or by using an RDP client connecting to xrdp. xrdp would then connect to the VNC session.

0 replies

docop · 2022-01-17T19:29:01Z

docop
Jan 17, 2022
Author

Thanks for precision. So i did try to install and while it do connect, by selecting xvnc at xrdp menu.. it do create a new session.

i install via : Xvnc --help do give : xubuntu ?
apt install x11vnc tigervnc-standalone-server

While i do have the 2 auto created file into /home/userpc/.vnc/sesman_passwd....
i copy the config from the post#1849
[localvnc]
name=localvnc
lib=libvnc.so
ip=localhost
port=5900
#username=ask
password=
pamusername=mjb
pampassword=ask
pamsessionmng=127.0.0.1
chansrvport=DISPLAY(0)

I got these into the /var/log/xrdp.log =

O ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.63 port 55330
[20220117-19:19:53] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-19:19:53] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-19:19:53] [WARN ] libxrdp_force_read: header read error
[20220117-19:19:53] [ERROR]   out xrdp_mcs_disconnect error - 2
[20220117-19:19:53] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.63 port 55331
[20220117-19:19:53] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-19:19:53] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-19:19:53] [INFO ] connected client computer name: MAIRIN10
[20220117-19:19:53] [INFO ]   client supports 40 bit encryption
[20220117-19:19:53] [INFO ]   client supports 128 bit encryption
[20220117-19:19:53] [INFO ]   client supports 56 bit encryption
[20220117-19:19:53] [INFO ]   client supports fips encryption
[20220117-19:19:53] [INFO ] adding channel item name rdpdr chan_id 1004 flags 0x80800000
[20220117-19:19:53] [INFO ] adding channel item name rdpsnd chan_id 1005 flags 0xc0000000
[20220117-19:19:53] [INFO ] adding channel item name cliprdr chan_id 1006 flags 0xc0a00000
[20220117-19:19:53] [INFO ] adding channel item name drdynvc chan_id 1007 flags 0xc0800000
[20220117-19:19:53] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc006 size 8
[20220117-19:19:53] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc00a size 8
[20220117-19:19:53] [INFO ] xrdp_load_keyboard_layout: keyboard_type [4] keyboard_subtype [0]
[20220117-19:19:53] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20220117-19:19:53] [INFO ] TLS connection established from ::ffff:192.168.0.63 port 55331: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
[20220117-19:19:54] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20220117-19:19:54] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 5242880 MB cache entries 100
[20220117-19:19:54] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20220117-19:19:54] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20220117-19:19:54] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20220117-19:19:54] [INFO ] Cannot find keymap file /etc/xrdp/km-00011009.ini
[20220117-19:19:54] [INFO ] Cannot find keymap file /etc/xrdp/km-00001009.ini
[20220117-19:19:54] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20220117-19:19:54] [WARN ] local keymap file for 0x00011009 found and doesn't match built in keymap, using local keymap file
[20220117-19:19:54] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-19:19:54] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-19:19:54] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-19:19:54] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-19:19:54] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-19:19:54] [INFO ] drdynvc_process_capability_response: DVC version 3 selected
[20220117-19:20:02] [WARN ] getsockname() failed on socket 18: Bad file descriptor
[20220117-19:20:02] [INFO ] xrdp_wm_log_msg: Reply from access control: Success
[20220117-19:20:05] [ERROR] xrdp_wm_log_msg: Error connecting to: localhost
[20220117-19:20:11] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-19:20:11] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-19:20:11] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-19:20:11] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-19:20:11] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-19:20:14] [ERROR] received Disconnect Provider Ultimatum
[20220117-19:20:14] [ERROR]   out xrdp_mcs_recv appid != MCS_DPUM
[20220117-19:20:14] [ERROR]  out xrdp_sec_recv : error
[20220117-19:20:14] [ERROR] out xrdp_rdp_recv error
[20220117-19:20:14] [ERROR] libxrdp_process_data: xrdp_rdp_recv failed
[20220117-19:20:14] [ERROR]   out xrdp_mcs_disconnect error - 2

-=----
Then also add comments # at the Xorg connect section, then try with droid aRdp. That do connect directly to xvnc with a new session.

If in console i do in terminal: xrdp-chansrv = this don't connect to existing session.

But : if i only do :
x11vnc -N -forever -nopw // then it's a process log running and waiting for connection. With the config with the chansrvport=Display(0) it do connect.
And it do resize the resolution screen as per the one from the console. But it only work if it let run all the time the terminal window open.

[locxvnc]
name=locxvnc
lib=libvnc.so
username=ask
password=ask
ip=127.0.0.1
port=-1
chansrvport=DISPLAY(0)

With the port 5900, i got vnc msg error port.
[locts]
name=locts
lib=libvnc.so
username=ask
password=ask
ip=127.0.0.1
port=5900
chansrvport=DISPLAY(0)
-=-=-=-
Log:

 [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.63 port 55424
[20220117-19:46:25] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-19:46:25] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-19:46:25] [WARN ] libxrdp_force_read: header read error
[20220117-19:46:25] [ERROR]   out xrdp_mcs_disconnect error - 2
[20220117-19:46:25] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.63 port 55425
[20220117-19:46:25] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-19:46:25] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-19:46:25] [INFO ] connected client computer name: MARRIN10
[20220117-19:46:25] [INFO ]   client supports 40 bit encryption
[20220117-19:46:25] [INFO ]   client supports 128 bit encryption
[20220117-19:46:25] [INFO ]   client supports 56 bit encryption
[20220117-19:46:25] [INFO ]   client supports fips encryption
[20220117-19:46:25] [INFO ] adding channel item name rdpdr chan_id 1004 flags 0x80800000
[20220117-19:46:25] [INFO ] adding channel item name rdpsnd chan_id 1005 flags 0xc0000000
[20220117-19:46:25] [INFO ] adding channel item name cliprdr chan_id 1006 flags 0xc0a00000
[20220117-19:46:25] [INFO ] adding channel item name drdynvc chan_id 1007 flags 0xc0800000
[20220117-19:46:25] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc006 size 8
[20220117-19:46:25] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc00a size 8
[20220117-19:46:25] [INFO ] xrdp_load_keyboard_layout: keyboard_type [4] keyboard_subtype [0]
[20220117-19:46:25] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20220117-19:46:25] [INFO ] TLS connection established from ::ffff:192.168.0.63 port 55425: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
[20220117-19:46:25] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20220117-19:46:25] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 5242880 MB cache entries 100
[20220117-19:46:25] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20220117-19:46:25] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20220117-19:46:25] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20220117-19:46:25] [INFO ] Cannot find keymap file /etc/xrdp/km-00011009.ini
[20220117-19:46:25] [INFO ] Cannot find keymap file /etc/xrdp/km-00001009.ini
[20220117-19:46:25] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20220117-19:46:25] [WARN ] local keymap file for 0x00011009 found and doesn't match built in keymap, using local keymap file
[20220117-19:46:25] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-19:46:25] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-19:46:25] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-19:46:25] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-19:46:25] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-19:46:25] [INFO ] drdynvc_process_capability_response: DVC version 3 selected
[20220117-19:46:38] [ERROR] xrdp_wm_log_msg: Error connecting to: 127.0.0.1
[20220117-19:46:44] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-19:46:44] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-19:46:44] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-19:46:44] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-19:46:44] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-19:46:49] [ERROR] received Disconnect Provider Ultimatum
[20220117-19:46:49] [ERROR]   out xrdp_mcs_recv appid != MCS_DPUM
[20220117-19:46:49] [ERROR]  out xrdp_sec_recv : error
[20220117-19:46:49] [ERROR] out xrdp_rdp_recv error
[20220117-19:46:49] [ERROR] libxrdp_process_data: xrdp_rdp_recv failed
[20220117-19:46:49] [ERROR]   out xrdp_mcs_disconnect error - 2

-=-=-=-
So with port=5900 it don't connect, with port -1: it do a new session.

As i see a keyboard keymap. i try to log over a different win10 full english keyboard and here the log i got :

0220117-20:13:59] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.69 port 61539
[20220117-20:13:59] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-20:13:59] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-20:13:59] [WARN ] libxrdp_force_read: header read error
[20220117-20:13:59] [ERROR]   out xrdp_mcs_disconnect error - 2
[20220117-20:14:02] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.0.69 port 61541
[20220117-20:14:02] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20220117-20:14:02] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20220117-20:14:02] [INFO ] connected client computer name: W10LT
[20220117-20:14:02] [INFO ]   client supports 40 bit encryption
[20220117-20:14:02] [INFO ]   client supports 128 bit encryption
[20220117-20:14:02] [INFO ]   client supports 56 bit encryption
[20220117-20:14:02] [INFO ]   client supports fips encryption
[20220117-20:14:02] [INFO ] adding channel item name rdpdr chan_id 1004 flags 0x80800000
[20220117-20:14:02] [INFO ] adding channel item name rdpsnd chan_id 1005 flags 0xc0000000
[20220117-20:14:02] [INFO ] adding channel item name cliprdr chan_id 1006 flags 0xc0a00000
[20220117-20:14:02] [INFO ] adding channel item name drdynvc chan_id 1007 flags 0xc0800000
[20220117-20:14:02] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc006 size 8
[20220117-20:14:02] [ERROR] error unknown xrdp_sec_process_mcs_data tag 0xc00a size 8
[20220117-20:14:02] [INFO ] xrdp_rdp_parse_client_mcs_data: client asked for 32bpp connection but configuration is limited to 16bpp
[20220117-20:14:02] [INFO ] xrdp_load_keyboard_layout: keyboard_type [4] keyboard_subtype [0]
[20220117-20:14:02] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20220117-20:14:02] [INFO ] TLS connection established from ::ffff:192.168.0.69 port 61541: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
[20220117-20:14:02] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20220117-20:14:02] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20220117-20:14:02] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20220117-20:14:02] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20220117-20:14:02] [INFO ] xrdp_caps_process_codecs: RemoteFX, codec id 3, properties len 49
[20220117-20:14:02] [INFO ] Cannot find keymap file /etc/xrdp/km-00011009.ini
[20220117-20:14:02] [INFO ] Cannot find keymap file /etc/xrdp/km-00001009.ini
[20220117-20:14:02] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20220117-20:14:02] [WARN ] local keymap file for 0x00011009 found and doesn't match built in keymap, using local keymap file
[20220117-20:14:02] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-20:14:02] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-20:14:02] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-20:14:02] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-20:14:02] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-20:14:02] [INFO ] drdynvc_process_capability_response: DVC version 3 selected
[20220117-20:14:14] [WARN ] getsockname() failed on socket 18: Bad file descriptor
[20220117-20:14:14] [INFO ] xrdp_wm_log_msg: Reply from access control: Success
[20220117-20:14:17] [ERROR] xrdp_wm_log_msg: Error connecting to: localhost
[20220117-20:14:21] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-20:14:21] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-20:14:21] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-20:14:21] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-20:14:21] [ERROR] libxrdp_query_channel - Channel out of range 4
[20220117-20:14:35] [ERROR] xrdp_wm_log_msg: Error connecting to: 127.0.0.1
[20220117-20:14:41] [ERROR] libxrdp_query_channel - Channel 0 name rdpdr
[20220117-20:14:41] [ERROR] libxrdp_query_channel - Channel 1 name rdpsnd
[20220117-20:14:41] [ERROR] libxrdp_query_channel - Channel 2 name cliprdr
[20220117-20:14:41] [ERROR] libxrdp_query_channel - Channel 3 name drdynvc
[20220117-20:14:41] [ERROR] libxrdp_query_channel - Channel out of range 4
ubuts@xubu:~$

So i;m quite not sure how to get the same session, without have the x11 running all the time. Or do i need to remove x11vnc and only put tigervnc ? i also confirm same thing if the user is connected with console open or when console is with the login prompt.. as when screensave is active. I also try at maxbp 16 or 32.. getting same.
Thanks in advance

0 replies

docop · 2022-01-17T21:57:52Z

docop
Jan 17, 2022
Author

Oh here is the .log that i just check : /var/log/xrdp-sesman.log :

-19:46:06] [INFO ] A connection received from ::ffff:127.0.0.1 port 42156
[20220117-19:46:06] [INFO ] ++ reconnected session: username ubuts, display :12.0, session_pid 4353, ip ::ffff:192.168.0.63:55422 - socket: 12

-20:14:14] [INFO ] A connection received from ::ffff:127.0.0.1 port 43222
[20220117-20:14:14] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20220117-20:14:14] [INFO ] Access permitted for user: ubuts

0 replies

matt335672 · 2022-01-18T14:23:38Z

matt335672
Jan 18, 2022
Collaborator

First we need to get this working without chansrv. Later, you can add that if you like, provided your xrdp version is at least v0.9.16.

The idea is you run x11vnc in your console session from a terminal. That exports your display over VNC, and you can then connect to that from xrdp.

xrdp-sesman is not involved in this process. Also, the security isn't as good as it can be yet, but we can look at that later.

Preparation

Set a VNC password

Use the command x11vnc -storepasswd to create an encrypted VNC password in the file ~/.vnc/passwd

configure xrdp

Edit /etc/xrdp/xrdp.ini and make sure a session like this exists in the file:-

[localvnc]
name=localvnc
lib=libvnc.so
ip=localhost
port=5900
password=ask
# This line needs xrdp 0.9.16 or later
#chansrvport=DISPLAY(0)

If you've changed xrdp.ini, restart xrdp with sudo systemctl restart xrdp

Prepare the session

Run this command in the console session to export the session over VNC:-

x11vnc -rfbauth ~/.vnc/passwd -N -forever

Connect

Connect to the machine using the RDP client
In the login box, select localvnc as the session type:-
You can now type the password you selected for VNC in to the box, and you will connect to your session

Let me know how that goes, then we can discuss additional security and possibly running chansrv.

0 replies

docop · 2022-01-18T23:49:00Z

docop
Jan 18, 2022
Author

Hi Thanks for precision, indeed the x11pass was not set as i think i read that it was to be set automaticaly. So yes, by running the code in console:
x11vnc -rfbauth ~/.vnc/passwd -N -forever
i can connect via the config you post. i try to set security login with pam as :

[pamloc]
name=pamloc
lib=libvnc.so
ip=localhost
port=5900
#username=ask
password=ask
pamusername=ask
pampassword=ask
pamsessionmng=127.0.0.1

With this, it do also connect, but on both connection, the clipboard copy/paste don't work. On xorg or xvnc, with new session, clipboard do work fine.
I haven't found the folder share, so can't tell where to check for.

thanks it's very appreciated

3 replies

matt335672 Jan 19, 2022
Collaborator

That's fine. The pamusername and pampassword add an extra layer of security by requiring you to know an active account on the system.

To use the clipboard in this mode, you need to be running a reasonably recent version of xrdp. You say above that you've got xrdp v0.9.15, so I don't think you will get much useful out of that. v0.9.16 will let you run chansrv in the session as well as x11vnc. With that you will get proper clipboard support.

docop Apr 14, 2022
Author

Hi so I did pass to arch linux and while it did got directly v9.19 , it also get tigervnc automatically install. For a session reconnect : can we use tiger instead of x11 like: something= x0vncserver -rfbauth ~/.vnc/passwd -N -forever ? The -n -forever are not a valid option, while alone : x0vncserver -rfbauth ~/.vnc/passwd :, vnc session on 5900 do work, the sessman do give an error connecting to user session with the addition to xrdp.ini and the change a terminal running with the x0vncserver -rfb....

Here for ref over : /var/log/xrdp-sesman.log

 [INFO ] Socket 12: AF_INET6 connection received from ::1 port 47002
[20220414-20:59:37] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20220414-20:59:37] [INFO ] Access permitted for user: xubu
[20220414-20:59:37] [ERROR] sesman_data_in: scp_process_msg failed
[20220414-20:59:37] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans

and : /var/log/xrdp.log

 [INFO ] loaded module 'libvnc.so' ok, interface size 4064, version 4
[20220414-20:58:02] [INFO ] VNC started connecting
[20220414-20:58:02] [INFO ] VNC error - no ip set
[20220414-20:58:02] [ERROR] xrdp_wm_log_msg: Error connecting to user session
[20220414-20:58:02] [INFO ] Error connecting to user session
[20220414-20:59:36] [INFO ] connecting to PAM authenticator on 127.0.0.1:3350
[20220414-20:59:36] [INFO ] xrdp_wm_log_msg: PAM authenticator connect ok
[20220414-20:59:36] [INFO ] PAM authenticator connect ok
[20220414-20:59:36] [INFO ] xrdp_wm_log_msg: Performing access control for xubu
[20220414-20:59:36] [INFO ] Performing access control for xubu
[20220414-20:59:36] [INFO ] sending login info to session manager, please wait...
[20220414-20:59:37] [INFO ] xrdp_wm_log_msg: Reply from access control: Success
[20220414-20:59:37] [INFO ] Reply from access control: Success
[20220414-20:59:37] [INFO ] loaded module 'libvnc.so' ok, interface size 4064, version 4
[20220414-20:59:37] [INFO ] VNC started connecting
[20220414-20:59:37] [INFO ] VNC connecting to localhost 5900
[ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>
[20220414-20:59:39] [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>
[20220414-20:59:40] [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>
[20220414-20:59:40] [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>
[20220414-20:59:40] [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>
[20220414-20:59:40] [ERROR] VNC error 1 after security negotiation
[20220414-20:59:40] [ERROR] VNC error before sending share flag
[20220414-20:59:40] [ERROR] VNC error before receiving server init
[20220414-20:59:40] [ERROR] VNC error before receiving pixel format
[20220414-20:59:40] [ERROR] VNC error before receiving name length
[20220414-20:59:40] [ERROR] VNC error before receiving name
[20220414-20:59:40] [INFO ] VNC error - problem connecting
[20220414-20:59:40] [INFO ] some problem
[20220414-20:59:40] [ERROR] xrdp_wm_log_msg: Error connecting to user session
[20220414-20:59:40] [INFO ] Error connecting to user session

on journalctl -u xrdp-sesman :

 20:59:36 xubu-gen8 xrdp-sesman[383]: [INFO ] Socket 12: AF_INET6 connection received from ::1>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: pam_systemd_home(xrdp-sesman:auth): systemd-homed is not>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [INFO ] Terminal Server Users group is disabled, allowin>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [INFO ] Access permitted for user: xubu
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [ERROR] sesman_data_in: scp_process_msg failed
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [ERROR] sesman_main_loop: trans_check_wait_objs failed, >

--
or direct journalctl perhaps :

 xrdp[2314]: [INFO ] connecting to PAM authenticator on 127.0.0.1:3350
Apr 14 20:59:36 xubu-gen8 xrdp-sesman[383]: [INFO ] Socket 12: AF_INET6 connection received from ::1>
Apr 14 20:59:36 xubu-gen8 xrdp[2314]: [INFO ] xrdp_wm_log_msg: PAM authenticator connect ok
Apr 14 20:59:36 xubu-gen8 xrdp[2314]: [INFO ] PAM authenticator connect ok
Apr 14 20:59:36 xubu-gen8 xrdp[2314]: [INFO ] xrdp_wm_log_msg: Performing access control for xubu
Apr 14 20:59:36 xubu-gen8 xrdp[2314]: [INFO ] Performing access control for xubu
Apr 14 20:59:36 xubu-gen8 xrdp[2314]: [INFO ] sending login info to session manager, please wait...
Apr 14 20:59:37 xubu-gen8 dbus-daemon[360]: [system] Activating via systemd: service name='org.freed>
Apr 14 20:59:37 xubu-gen8 dbus-daemon[360]: [system] Activation via systemd failed for unit 'dbus-or>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: pam_systemd_home(xrdp-sesman:auth): systemd-homed is not>
Apr 14 20:59:37 xubu-gen8 audit[383]: USER_AUTH pid=383 uid=0 auid=4294967295 ses=4294967295 msg='op>
Apr 14 20:59:37 xubu-gen8 audit[383]: USER_ACCT pid=383 uid=0 auid=4294967295 ses=4294967295 msg='op>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [INFO ] Terminal Server Users group is disabled, allowin>
Apr 14 20:59:37 xubu-gen8 kernel: audit: type=1100 audit(1649962777.021:138): pid=383 uid=0 auid=429>
Apr 14 20:59:37 xubu-gen8 kernel: audit: type=1101 audit(1649962777.021:139): pid=383 uid=0 auid=429>
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [INFO ] Access permitted for user: xubu
Apr 14 20:59:37 xubu-gen8 xrdp[2314]: [INFO ] xrdp_wm_log_msg: Reply from access control: Success
Apr 14 20:59:37 xubu-gen8 xrdp[2314]: [INFO ] Reply from access control: Success
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [ERROR] sesman_data_in: scp_process_msg failed
Apr 14 20:59:37 xubu-gen8 xrdp-sesman[383]: [ERROR] sesman_main_loop: trans_check_wait_objs failed, >
Apr 14 20:59:37 xubu-gen8 xrdp[2314]: [INFO ] loaded module 'libvnc.so' ok, interface size 4064, ver>
Apr 14 20:59:37 xubu-gen8 xrdp[2314]: [INFO ] VNC started connecting
Apr 14 20:59:37 xubu-gen8 xrdp[2314]: [INFO ] VNC connecting to localhost 5900
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() fail>
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() fail>
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error 1 after security negotiation
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error before sending share flag
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error before receiving server init
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error before receiving pixel format
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error before receiving name length
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] VNC error before receiving name
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [INFO ] VNC error - problem connecting
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [INFO ] some problem
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [ERROR] xrdp_wm_log_msg: Error connecting to user session
Apr 14 20:59:40 xubu-gen8 xrdp[2314]: [INFO ] Error connecting to user session
Apr 14 20:59:46 xubu-gen8 dbus-daemon[360]: [system] Activating via systemd: service name='org.freed>
Apr 14 20:59:46 xubu-gen8 dbus-daemon[360]: [system] Activation via systemd failed for unit 'dbus-or>
Apr 14 20:59:46 xubu-gen8 sudo[2352]: pam_systemd_home(sudo:account): systemd-homed is not available>
Apr 14 20:59:46 xubu-gen8 kernel: audit: type=1101 audit(1649962786.707:140): pid=2352 uid=1000 auid>
Apr 14 20:59:46 xubu-gen8 audit[2352]: USER_ACCT pid=2352 uid=1000 auid=1000 ses=2 msg='op=PAM:accou>
Apr 14 20:59:46 xubu-gen8 sudo[2352]:     xubu : TTY=pts/0 ; PWD=/home/xubu ; USER=root ; COMMAND=/u>
Apr 14 20:59:46 xubu-gen8 audit[2352]: CRED_REFR pid=2352 uid=1000 auid=1000 ses=2 msg='op=PAM:setcr>
Apr 14 20:59:46 xubu-gen8 kernel: audit: type=1110 audit(1649962786.711:141): pid=2352 uid=1000 auid>
Apr 14 20:59:46 xubu-gen8 sudo[2352]: pam_unix(sudo:session): session opened for user root(uid=0) by>
Apr 14 20:59:46 xubu-gen8 audit[2352]: USER_START pid=2352 uid=1000 auid=1000 ses=2 msg='op=PAM:sess>
Apr 14 20:59:46 xubu-gen8 kernel: audit: type=1105 audit(1649962786.714:142): pid=2352 uid=1000 auid>

by using this only addition to config in xrdp.ini:

[pamloc]
name=pamloc
lib=libvnc.so
ip=localhost
port=5900
#username=ask
password=ask
pamusername=askxubu
pampassword=ask
pamsessionmng=127.0.0.1
chansrvport=DISPLAY(0)

Thanks again for precision

matt335672 Apr 15, 2022
Collaborator

Rather strangely, it looks like localhost isn't returning a useful address:-

[20220414-20:59:39] [ERROR] g_tcp_connect(19, localhost, 5900): getaddrinfo() failed: Name or servic>

Try using ip=127.0.0.1 instead of ip=localhost.

docop · 2022-01-20T01:44:36Z

docop
Jan 20, 2022
Author

Yes indeed, for ubuntu, the only available version is 0.9.15 via: apt install xrdp
i try to install via tar.gz the v9.18 and 9.17, but somehow the .configure failed , so did the git clone. install for the compiler as :

apt install make gcc autoconf automake libtool pkg-config //Requis min pr faire make
apt install libssl-dev libpam0g-dev libx11-dev libxfixes-dev libxrandr-dev libjpeg-dev nasm xserver-xorg-dev

Then compile the librfxcodec, from the folder within xrdp git , then the main xrdp.
But it did not create the /etc/xrdp. And trying to .config the xorgxrdp did fail and said no path found. Here the result of build :

configure: creating ./config.status
config.status: creating Makefile
config.status: creating include/Makefile
config.status: creating src/Makefile
config.status: creating src/amd64/Makefile
config.status: creating src/x86/Makefile
config.status: creating tests/Makefile
config.status: creating rfxcodec.pc
config.status: creating rfxcodec-uninstalled.pc
config.status: creating config_ac.h
config.status: config_ac.h is unchanged
config.status: executing depfiles commands
config.status: executing libtool commands

xrdp will be compiled with:

  mp3lame                 no
  opus                    no
  fdkaac                  no
  jpeg                    no
  turbo jpeg              no
  rfxcodec                yes
  painter                 yes
  pixman                  no
  fuse                    no
  ipv6                    no
  ipv6only                no
  vsock                   no
  auth mechanism          PAM
  rdpsndaudin             no

  with imlib2             no

  development logging     no
  development streamcheck no

  strict_locations        no
  prefix                  /usr/local
  exec_prefix             ${prefix}
  libdir                  ${exec_prefix}/lib
  bindir                  ${exec_prefix}/bin
  sysconfdir              /etc

  unit tests performable  no

  CFLAGS = -g -O2 -Wall -Wwrite-strings -Werror
  LDFLAGS =

Overall, after an extra 260mb i'm not sure it's better. Any plan to update the ubuntu .deb package to newer version ?

1 reply

matt335672 Jan 20, 2022
Collaborator

The .deb package is not produced by us.

It's maintained by the Debian 'remote maintainers' and just pulled directly into Ubuntu from there. As far as I'm aware there's no-one in Ubuntu that makes any changes to it. Certainly the issues I've raised on Launchpad related to Ubuntu xrdp go unanswered.

Consequently, to get a package upgrade you need to wait for a later package to go into Debian unstable, and from there into a new Ubuntu version. It's not a quick process. It looks like Ubuntu 22.04 should have 0.9.17 however, which will be an improvement.

Your build needs installing with sudo make install. However, what you've got there is pretty minimal. Have you seen the wiki page on this?

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Auto close session on console and re-open it over xrdp ? #2122

{{title}}

Replies: 6 comments 4 replies

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Auto close session on console and re-open it over xrdp ? #2122

docop Jan 16, 2022

Replies: 6 comments · 4 replies

matt335672 Jan 17, 2022 Collaborator

docop Jan 17, 2022 Author

docop Jan 17, 2022 Author

matt335672 Jan 18, 2022 Collaborator

Preparation

Set a VNC password

configure xrdp

Prepare the session

Connect

docop Jan 18, 2022 Author

matt335672 Jan 19, 2022 Collaborator

docop Apr 14, 2022 Author

matt335672 Apr 15, 2022 Collaborator

docop Jan 20, 2022 Author

matt335672 Jan 20, 2022 Collaborator

docop
Jan 16, 2022

Replies: 6 comments 4 replies

matt335672
Jan 17, 2022
Collaborator

docop
Jan 17, 2022
Author

docop
Jan 17, 2022
Author

matt335672
Jan 18, 2022
Collaborator

docop
Jan 18, 2022
Author

matt335672 Jan 19, 2022
Collaborator

docop Apr 14, 2022
Author

matt335672 Apr 15, 2022
Collaborator

docop
Jan 20, 2022
Author

matt335672 Jan 20, 2022
Collaborator