Fail to log in with non-root user

[scopedog]

Hi. I love xrdp and use every day to access my office machines (FreeBSD, Ubuntu) from my home.

However, I'm having trouble with rdp logging in to my new FreeBSD 14.1-RELEASE pc which runs:

xrdp 0.9.26
A Remote Desktop Protocol Server.
Copyright (C) 2004-2024 Jay Sorg, Neutrino Labs, and all contributors.
See https://github.com/neutrinolabs/xrdp for more information.

Configure options:
    --enable-imlib2
    --enable-jpeg
    --enable-painter
    --enable-pam-config=freebsd
    --enable-pixman
    --enable-rfxcodec
    --enable-strict-locations
    --localstatedir=/var
    --with-pkgconfigdir=/usr/local/libdata/pkgconfig
    --disable-devel-debug
    --disable-devel-logging
    --enable-fdkaac
    --disable-fuse
    --enable-ipv6
    --disable-mp3lame
    --enable-opus
    --x-libraries=/usr/local/lib
    --x-includes=/usr/local/include
    --prefix=/usr/local
    --mandir=/usr/local/share/man
    --disable-silent-rules
    --infodir=/usr/local/share/info/
    --build=amd64-portbld-freebsd14.0
    build_alias=amd64-portbld-freebsd14.0
    CC=cc
    CFLAGS=-O2 -pipe  -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing 
    LDFLAGS= -lssl  -fstack-protector-strong 
    LIBS=-L/usr/local/lib
    CPPFLAGS=-isystem /usr/local/include
    PKG_CONFIG=pkgconf
    PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/net/xrdp/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig
    OPENSSL_CFLAGS=-I/usr/include
    OPENSSL_LIBS=-L/usr/lib -lcrypto -lssl
    CPP=cpp

Compiled with OpenSSL 3.0.13 30 Jan 2024

I can log in with root and all window managers work but cannot with a non-root user.
With a non-root user, none of /tmp/.X11-unix/X10, /tmp/.xrdp/{xrdp_chansrv_socket_10,xrdp_disconnect_display_10,xrdp_display_10,xrdpapi_10} are created, and therefore xrdp fails to start the session.
Here are logs from xrdp.log and xrdp-sesman.log:

xrdp.log:

[20240814-14:41:33] [INFO ] connecting to sesman on 127.0.0.1:3350
[20240814-14:41:33] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20240814-14:41:33] [INFO ] sesman connect ok
[20240814-14:41:33] [INFO ] sending login info to session manager. Please wait...
[20240814-14:41:33] [INFO ] xrdp_wm_log_msg: login successful for user XXXX on display 11
[20240814-14:41:33] [INFO ] login successful for user XXXX on display 11
[20240814-14:41:33] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20240814-14:41:33] [INFO ] started connecting
[20240814-14:41:33] [INFO ] lib_mod_connect: connecting via UNIX socket
[20240814-14:43:40] [INFO ] connection problem, giving up
[20240814-14:43:40] [INFO ] some problem
[20240814-14:44:18] [INFO ] Error connecting to user session
[20240814-14:44:18] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20240814-14:44:18] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed

xrdp-sesman.log

[20240814-14:41:33] [INFO ] Socket 12: AF_INET6 connection received from ::1 por
t 15381
[20240814-14:41:33] [INFO ] Terminal Server Users group is disabled, allowing au
thentication
[20240814-14:41:33] [INFO ] ++ created session (access granted): username XXXX, ip 2601:1c1::XXXX - socket: 12
[20240814-14:41:33] [INFO ] starting Xorg session...
[20240814-14:41:33] [INFO ] Starting session: session_pid 53649, display :11.0, width 1920, height 1000, bpp 24, client ip 2601:1c1::XXXX - socket: 12, user name XXXX
[20240814-14:41:33] [INFO ] [session start] (display 11): calling auth_start_session from pid 53649
[20240814-14:41:33] [ERROR] sesman_data_in: scp_process_msg failed
[20240814-14:41:33] [INFO ] PAM: Last login: Wed Aug 14 14:40:42 on :11
[20240814-14:41:33] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240814-14:41:33] [INFO ] Starting X server on display 11: /usr/local/libexec/Xorg :11 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp  
[20240814-14:41:43] [WARN ] Timed out waiting for X server on display 11 to startup
[20240814-14:41:43] [INFO ] Session started successfully for user nishida on display 11
[20240814-14:41:43] [INFO ] Starting the xrdp channel server for display 11
[20240814-14:41:43] [INFO ] Session in progress on display 11, waiting until the window manager (pid 53651) exits to end the session
[20240814-14:41:43] [WARN ] Timed out waiting for X server on display 11 to startup
[20240814-14:41:43] [ERROR] There is no X server active on display 11

I would appreciate it if somebody could tell me how to fix it.

[matt335672]

Can you post /home/nishida/.xorgxrdp.11.log?

The logs are showing your X server is failing to start.

[scopedog]

Thank you for your response.
There's no ~/.xorgxrdp.*.log on both server and client.

[matt335672]

Thanks.

Looking at your log file, the command to start the X server is this:-

/usr/local/libexec/Xorg :11 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp

Looking at my own (Ubuntu) test rig, I've got a command like this:-

/usr/lib/xorg/Xorg :11 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log

The path of Xorg is different because of the different OS. You appear to be lacking the last two arguments I have (e.g. -logfile .xorgxrdp.%s.log). So the log file is being written elsewhere.

Have you got a file in ~/.local/share/xorg/Xorg.11.log ?

If not, try find ~ -xdev -name Xorg.11.log to try to locate it.

[scopedog]

Thank you.

I found Xorg.11.log in my server's ~/.local/share/xorg and have attached it.

Xorg.11.log

Found
xf86OpenConsole: Server must be suid root(EE)

and https://forums.freebsd.org/threads/xf86openconsole-server-must-be-suid-root.80626/

I'll dig into it.

I appreciate your cooperation.

[matt335672]

I think your problem is here:-

 24757.167] (**) |-->Screen "Screen (xrdpdev)" (0)
[ 24757.167] (**) |   |-->Monitor "Monitor"
[ 24757.167] (**) |   |-->Device "Video Card (xrdpdev)"
[ 24757.167] (**) |   |-->GPUDevice "Card0"
[ 24757.167] (**) |-->Input Device "xrdpMouse"
[ 24757.167] (**) |-->Input Device "xrdpKeyboard"

Take a look at neutrinolabs/xorgxrdp#241. If you make the changes in neutrinolabs/xorgxrdp@b7002ee to /etc/X11/xrdp/xorg.conf we should be able to get a bit further.

[scopedog]

Thanks!
It worked!

I'll report to FreeBSD.

[metalefty]

Ah, I also maintain the FreeBSD port. You guys should ping me. (I have talked with @scopedog via email).

[matt335672]

Noted!