Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When windows server 2016 enable NLA, Cann't connect with tls error via Proxy Mode #2345

Closed
chiefliu opened this issue Aug 18, 2022 · 2 comments

Comments

@chiefliu
Copy link

chiefliu commented Aug 18, 2022

xrdp is running on centos as a Proxy for user to connect windows server 2016, if the windows server enbale NLA, user cann't connect to the server. As logs shown above,the windows server is 192.168.213.238

[20220818-17:18:46] [INFO ]   FreeRDP version major 1 minor 0 revision 1
[20220818-17:18:46] [INFO ] loaded module 'libxrdpneutrinordp.so' ok, interface size 411072, version 4
[20220818-17:18:46] [WARN ] The colormap is all NULL
[20220818-17:18:46] [ERROR] libxrdp_query_channel: Channel index out of range. max channel index 4, received channel index 4
[20220818-17:18:47] [INFO ] lxrdp_connect: freerdp_connect returned 0
[20220818-17:18:47] [INFO ] Failure to connect
[20220818-17:18:47] [ERROR] freerdp_connect Failed to destination :192.168.213.238:3389
[20220818-17:18:47] [ERROR] xrdp_wm_log_msg: Error connecting to: 192.168.213.238
[20220818-17:18:47] [INFO ] Error connecting to: 192.168.213.238
[20220818-17:18:59] [ERROR] xrdp_sec_recv: xrdp_mcs_recv failed
[20220818-17:18:59] [ERROR] xrdp_rdp_recv: xrdp_sec_recv failed
[20220818-17:18:59] [ERROR] libxrdp_process_data: xrdp_rdp_recv failed
[20220818-17:18:59] [ERROR] xrdp_process_data_in: xrdp_process_loop failed
[20220818-17:18:59] [ERROR] SSL_write: Failure in SSL library (protocol error?)
[20220818-17:18:59] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20220818-17:18:59] [ERROR] SSL_shutdown: Failure in SSL library (protocol error?)
[20220818-17:18:59] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed  
=====================================================================

I captured the tls packet into the tls.zip :
tls.zip

@metalefty
Copy link
Member

Requires #1338 to solve this.

@chiefliu
Copy link
Author

when user account contains domain names, use username@domain can work properly while using domain\username which will returns Account Error

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants