FreeRDP / FreeRDP

FreeRDP is a free remote desktop protocol library and clients
http://www.freerdp.com/
Apache License 2.0
10.85k stars 14.78k forks source link

Unable to launch remoteapp via CyberArk #9260

Closed Nelson-Bigmouth closed 1 week ago

Nelson-Bigmouth commented 1 year ago

Describe the bug I try to use xfreerdp to lauch remoteapp via CyberArk running in Windows. xfreerdp is able to connect and show the remote app (Chrome). But once CyberArk intercepts the app window (Chrome) and enter the credential on behalf of me, the app window closes and no more app window shows up.

RDP file: full address:s:psm5-uat.abc.com server port:i:3389 username:s:PSM@2fbea6ae-ec3d-4adf-a5a0-a520b05b4324 alternate shell:s:PSM@2fbea6ae-ec3d-4adf-a5a0-a520b05b4324 desktopwidth:i:1024 desktopheight:i:768 screen mode id:i:1 redirectdrives:i:0 drivestoredirect:s: redirectsmartcards:i:0 EnableCredSspSupport:i:0 redirectcomports:i:0 remoteapplicationmode:i:1 remoteapplicationprogram:s:||PSMInitSession remoteapplicationname:s:PSM-Oracle-WebLogic-Chrome disableconnectionsharing:i:1 use multimon:i:0 span monitors:i:0

Trace log before "looping": [09:35:21:878] [10990:11012] [DEBUG][com.freerdp.codec.progressive] - rect[0]: x: 320 y: 256 w: 64 h: 64 [09:35:21:878] [10990:11012] [DEBUG][com.freerdp.codec.progressive] - PROGRESSIVE_WBT_TILE_FIRST [09:35:21:878] [10990:11004] [DEBUG][com.freerdp.codec.progressive] - ProgressiveTileFirst: quantIdx Y: 0 Cb: 0 Cr: 0 xIdx: 5 yIdx: 4 flags: 0x7A quality: 255 yLen: 359 cbLen: 232 crLen: 232 tailLen: 0 [09:35:21:879] [10990:11012] [DEBUG][com.freerdp.codec.progressive] - ProgressiveFrameEnd [09:35:21:880] [10990:11012] [TRACE][com.freerdp.client.x11] - xf_lockx11: [1] from xf_sw_end_paint [09:35:21:882] [10990:11012] [TRACE][com.freerdp.client.x11] - xf_unlockx11: [0] from xf_sw_end_paint [09:35:21:882] [10990:11012] [DEBUG][com.freerdp.channels.drdynvc.client] - write_data: ChannelId=6 size=20 [09:35:21:882] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_lockx11: [1] from xf_process_x_events [09:35:21:882] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_unlockx11: [0] from xf_process_x_events [09:35:21:891] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_lockx11: [1] from xf_process_x_events [09:35:21:891] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_unlockx11: [0] from xf_process_x_events [09:35:21:905] [10990:11012] [DEBUG][com.freerdp.channels.drdynvc.client] - order_recv: Cmd=0x1, Sp=3 cbChId=0 [09:35:21:905] [10990:11012] [DEBUG][com.freerdp.channels.drdynvc.client] - process_create_request: ChannelId=15 ChannelName=AUDIO_PLAYBACK_DVC [09:35:21:905] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_lockx11: [1] from xf_process_x_events [09:35:21:905] [10990:11012] [DEBUG][com.freerdp.channels.drdynvc.client] - no listener [09:35:21:905] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_unlockx11: [0] from xf_process_x_events [09:35:21:905] [10990:10991] [TRACE][com.freerdp.client.x11] - xf_lockx11: [1] from xf_process_x_events

To Reproduce Steps to reproduce the behavior:

  1. Create a new RDP file from CyberArk
  2. Run xfreerdp with the RDP file
  3. Follow the RDP session to login

Expected behavior A "Chrome" remoteapp is supposed to show

Application details

Environment (please complete the following information):

Nelson-Bigmouth commented 1 year ago

xfreerdp.log

akallabeth commented 1 year ago

not entirely sure we can do something here? you might check if that works with thincast client (flatpak) as that one has another RAILS implementaion on top of FreeRDP, if not then most likely not, if yes then I´m all ears.

Nelson-Bigmouth commented 1 year ago

I am new to thincast (and also flatpak). Do you happen to know how I can change thincast to use "RDP security" only (/sec:rdp in xfreerdp)? I check the thincast GUI but I cannot find this setting.

Nelson-Bigmouth commented 1 year ago

I install thincast using snap and I get this error message:

thincast-snap

akallabeth commented 1 year ago

ah, damn, missed the server 2008 part. that does not support high def rail :/

Nelson-Bigmouth commented 1 year ago

But the remote server is a Windows 2016, not 2008.

akallabeth commented 1 year ago

@Nelson-Bigmouth then your server is configured awkwardly. (server 2016 should support that if configured correctly) also, rdp security is quite outdated, is there a reason to use that?

Nelson-Bigmouth commented 1 year ago

I think people configure the Windows 2016 that way because of product (CyberArk) requirements.

I believe my problem is related to the "remoteapplicationprogram:s:||PSMInitSession" in the RDP file. If I change that line to a regular Windows program (e.g., notepad.exe), the remoteApp shows up correctly using xfreerdp.

github-actions[bot] commented 1 month ago

This issue is stale because it has been open for 30 days with no activity.

github-actions[bot] commented 1 week ago

This issue was closed because it has been inactive for 14 days since being marked as stale.