search

neutrinolabs / xrdp

xrdp: an open source RDP server
http://www.xrdp.org/
Apache License 2.0
5.75k stars 1.73k forks source link

I can't loggin: login failed for user #2944

Closed minimeu1 closed 8 months ago

minimeu1 commented 9 months ago

xrdp version

0.9.80

Detailed xrdp version, build options

xrdp 0.9.80
  A Remote Desktop Protocol Server.
  Copyright (C) 2004-2020 Jay Sorg, Neutrino Labs, and all contributors.
  See https://github.com/neutrinolabs/xrdp for more information.

  Configure options:

  Compiled with OpenSSL 3.0.10 1 Aug 2023

Operating system & version

Ubuntu 23.10

Installation method

dnf / apt / zypper / pkg / etc

Which backend do you use?

No response

What desktop environment do you use?

GNOME

Environment xrdp running on

Physical Machine with NVIDIA GEFORCE GT 620M . 1GB

What's your client?

Microsoft RD

Area(s) with issue?

Authentication

Steps to reproduce

Open Microsoft RD in iPad Define new computer with IP Define Username and password on Settings->Sharing->Remote Desktop Turn Remote Desktop sharing on (on same page of settings) Login in iPad using the defined username and password Cannot login

✔️ Expected Behavior

Before I would do this and would login with no problem.

❌ Actual Behavior

The issue started on Sept 2023 After entering the correct username and password, I get a window with the report of what was tried:

Connection Log: connection to sesman on (null):3350 sesman connect ok sending login info to session manager. Please wait.... login failed for user

Anything else?

xrdp.log

[20240212-12:14:13] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20240212-12:14:13] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file
[20240212-12:14:13] [INFO ] connecting to sesman on (null):3350
[20240212-12:14:13] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20240212-12:14:13] [INFO ] sesman connect ok
[20240212-12:14:13] [INFO ] sending login info to session manager. Please wait...
[20240212-12:14:15] [INFO ] xrdp_wm_log_msg: login failed for user <user>
[20240212-12:14:15] [INFO ] login failed for user <user>
[20240212-12:15:32] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20240212-12:15:32] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed

xrdp-sesman.log

[20240212-10:25:52] [INFO ] starting xrdp-sesman with pid 1291
[20240212-10:44:47] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 49124
[20240212-10:44:50] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:44:50] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707734690
[20240212-10:44:50] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:44:50] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-10:48:34] [INFO ] sesman_main_loop: sesman asked to terminate
[20240212-10:48:34] [INFO ] starting xrdp-sesman with pid 5477
[20240212-10:48:58] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 59720
[20240212-10:48:59] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:48:59] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707734939
[20240212-10:48:59] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:48:59] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-10:53:29] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 44668
[20240212-10:53:31] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:53:31] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707735211
[20240212-10:53:31] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:53:31] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-10:58:21] [INFO ] sesman_main_loop: sesman asked to terminate
[20240212-10:58:21] [INFO ] starting xrdp-sesman with pid 6368
[20240212-10:58:38] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 55796
[20240212-10:58:40] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:58:40] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707735520
[20240212-10:58:40] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:58:40] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-10:58:57] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 57700
[20240212-10:58:59] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:58:59] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707735539
[20240212-10:58:59] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:58:59] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-10:59:12] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 41382
[20240212-10:59:14] [ERROR] pam_authenticate failed: Authentication failure
[20240212-10:59:14] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707735554
[20240212-10:59:14] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-10:59:14] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240212-11:04:29] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:127.0.0.1 port 56432
[20240212-11:04:32] [ERROR] pam_authenticate failed: Authentication failure
[20240212-11:04:32] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707735872
[20240212-11:04:32] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-11:04:32]
minimeu1 commented 9 months ago

I found the xrdp version wierd, so I tried sudo apt install xrdp and got

Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
xrdp is already the newest version (0.9.21.1-1).
The following packages were automatically installed and are no longer required:
  fonts-tibetan-machine fonts-tlwg-typist-ttf fonts-tlwg-umpush-ttf
  libccolamd2 libcolamd2 libgfortran-12-dev libgit2-1.5 libgtkglext1
  libhttp-parser2.9 libixml10 libmfx1 libmozjs-102-0 libmujs2 libplacebo208
  libpoppler126 libsoup-gnome2.4-1 libstd-rust-1.71 libsuitesparseconfig5
  libupnp13 libwebsockets17 linux-headers-6.5.0-14
  linux-headers-6.5.0-14-generic linux-image-6.5.0-14-generic
  linux-modules-6.5.0-14-generic linux-modules-extra-6.5.0-14-generic
  python3-renderpm python3-reportlab-accel
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
matt335672 commented 9 months ago

xrdp v0.9.80 is the development version which isn't ready for general release yet.

It looks like you've installed this in addition to the standard version. That's not going to end well.

Suggest you do the following:- 1) Remove all xrdp and xorgxrdp packages with apt purge 2) Check you haven't got any xrdp executables or shared libraries under /usr/local 3) Re-install the xrdp and xorgxrdp packages from the Ubuntu repositories 4) Check xrdp -v is telling you you've got version v0.9.21-1 installed 5) Try again.

minimeu1 commented 9 months ago

hello again! Thank you! It was indeed wierd to show both versions! I have purged both packages as suggested Checked and removed shared libraries and executables of xrdp left in the directory you mentioned Reinstalled via apt install both packages Now I get

xrdp -v
xrdp 0.9.21.1
  A Remote Desktop Protocol Server.
  Copyright (C) 2004-2020 Jay Sorg, Neutrino Labs, and all contributors.
  See https://github.com/neutrinolabs/xrdp for more information.

  Configure options:
      --enable-ipv6
      --enable-jpeg
      --enable-fuse
      --enable-rfxcodec
      --enable-opus
      --enable-painter
      --enable-vsock
      --build=x86_64-linux-gnu
      --prefix=/usr
      --includedir=${prefix}/include
      --mandir=${prefix}/share/man
      --infodir=${prefix}/share/info
      --sysconfdir=/etc
      --localstatedir=/var
      --disable-silent-rules
      --libdir=${prefix}/lib/x86_64-linux-gnu
      --libexecdir=${prefix}/lib/x86_64-linux-gnu
      --disable-maintainer-mode
      --disable-dependency-tracking
      --with-socketdir=/run/xrdp/sockdir
      build_alias=x86_64-linux-gnu
      CFLAGS=-g -O2 -ffile-prefix-map=/build/xrdp-AsZfz3/xrdp-0.9.21.1=. -fdebug-prefix-map=/build/xrdp-AsZfz3/xrdp-0.9.21.1=/usr/src/xrdp-0.9.21.1-1 -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat -Werror=format-security

As you suggested would show. However, when I tried to connect I got the same error on iPad and could not loggin....! :P

matt335672 commented 9 months ago

Can you post the relevant section of /var/log/xrdp-sesman.log?

minimeu1 commented 9 months ago

Sure! Thank you again! The first line is when I restarted the xrdp Then I try to login

[20240212-16:53:55] [INFO ] starting xrdp-sesman with pid 8286
[20240212-16:54:37] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 41568
[20240212-16:54:39] [ERROR] pam_authenticate failed: Authentication failure
[20240212-16:54:39] [INFO ] AUTHFAIL: user=francisco ip=::ffff:192.168.1.90 time=1707756879
[20240212-16:54:39] [ERROR] sesman_data_in: scp_process_msg failed
[20240212-16:54:39] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans

I have just checked the username and password defined on Ubuntu sharing settings and I have put them just as they are defined

matt335672 commented 9 months ago

The username and password it requires are the username and password as if you were logging in to the box locally. The sharing settings are not used here.

minimeu1 commented 9 months ago

Hmmmm, I see...! Maybe before I had the same password in both places! Thank you for the hint again! I insert here a more detailed version of the xrdp.log....! When I select the ubuntu computer on the Microsoft RD app in the xrdp.log shows: 

[20240212-19:37:11] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.1.90 port 50122
[20240212-19:37:11] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20240212-19:37:11] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20240212-19:37:11] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20240212-19:37:11] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20240212-19:37:11] [INFO ] Security protocol: configured [RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [RDP]
[20240212-19:37:11] [ERROR] libxrdp_force_read: header read error
[20240212-19:37:11] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20240212-19:37:11] [ERROR] [MCS Connection Sequence] receive connection request failed
[20240212-19:37:11] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20240212-19:37:11] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20240212-19:37:11] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20240212-19:37:11] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20240212-19:37:11] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed

Then a prompt shows up in the ipad saying "The identity of the remote computer cannot be verified" and asking if I would like to connect anyway while in the /var/log/xrdp.log the following lines appear

[20240212-19:37:26] [INFO ] Socket 12: AF_INET6 connection received from ::ffff:192.168.1.90 port 50123
[20240212-19:37:26] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20240212-19:37:26] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20240212-19:37:26] [ERROR] Cannot read private key file /etc/xrdp/key.pem: Permission denied
[20240212-19:37:26] [WARN ] Cannot accept TLS connections because certificate or private key file is not readable. certificate file: [/etc/xrdp/cert.pem], private key file: [/etc/xrdp/key.pem]
[20240212-19:37:26] [INFO ] Security protocol: configured [RDP], requested [RDP], selected [RDP]

Then I insert the username and password used to login in the computer and the last section shows up in /var/log/xrdp.log


[20240212-19:37:40] [INFO ] Connected client computer name: iPad-de-Pedro
[20240212-19:37:40] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20240212-19:37:40] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20240212-19:37:40] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000409]
[20240212-19:37:40] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20240212-19:37:40] [INFO ] Non-TLS connection established from ::ffff:192.168.1.90 port 50123: with security level : high
[20240212-19:37:41] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20240212-19:37:41] [INFO ] xrdp_process_offscreen_bmpcache: support level 0 cache size 0 MB cache entries 0
[20240212-19:37:41] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20240212-19:37:41] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20240212-19:37:41] [WARN ] local keymap file for 0x00000409 found and doesn't match built in keymap, using local keymap file
[20240212-19:37:41] [INFO ] connecting to sesman on 127.0.0.1:3350
[20240212-19:37:41] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20240212-19:37:41] [INFO ] sesman connect ok
[20240212-19:37:41] [INFO ] sending login info to session manager. Please wait...
[20240212-19:37:41] [INFO ] xrdp_wm_log_msg: login successful for user francisco on display 10
[20240212-19:37:41] [INFO ] login successful for user francisco on display 10
[20240212-19:37:41] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20240212-19:37:41] [INFO ] started connecting
[20240212-19:37:41] [INFO ] lib_mod_connect: connecting via UNIX socket
[20240212-19:37:42] [INFO ] lib_mod_log_peer: xrdp_pid=12705 connected to X11rdp_pid=12710 X11rdp_uid=1000 X11rdp_gid=1000 client_ip=::ffff:192.168.1.90 client_port=50123
[20240212-19:37:42] [INFO ] connected ok

I hope this can be more helpful than the newbie things from before :P Thank you once more for being so helpful!

matt335672 commented 9 months ago

That all looks OK to me. Are you managing to log in now?

minimeu1 commented 9 months ago

I can loggin in the sense that the prompt saying it failed doesn't show up. However, after logging a black screen shows up with the mouse cursor and then goes back to the panel with the computers to login (in the ipad)

minimeu1 commented 9 months ago

this is the xrdp-sesman.log after I loggin with the proper credentials:

[20240213-09:38:44] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 46474
[20240213-09:38:44] [INFO ] Terminal Server Users group is disabled, allowing authentication
[20240213-09:38:44] [INFO ] ++ created session (access granted): username francisco, ip ::ffff:192.168.1.90:50144 - socket: 12
[20240213-09:38:44] [INFO ] starting Xorg session...
[20240213-09:38:44] [INFO ] Starting session: session_pid 27565, display :10.0, width 1024, height 768, bpp 24, client ip ::ffff:192.168.1.90:50144 - socket: 12, user name francisco
[20240213-09:38:44] [INFO ] [session start] (display 10): calling auth_start_session from pid 27565
[20240213-09:38:44] [ERROR] sesman_data_in: scp_process_msg failed
[20240213-09:38:44] [ERROR] sesman_main_loop: trans_check_wait_objs failed, removing trans
[20240213-09:38:44] [INFO ] Starting X server on display 10: /usr/lib/xorg/Xorg :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp -logfile .xorgxrdp.%s.log  
[20240213-09:38:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20240213-09:38:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20240213-09:38:44] [INFO ] Session started successfully for user francisco on display 10
[20240213-09:38:44] [INFO ] Starting the xrdp channel server for display 10
[20240213-09:38:44] [INFO ] Found X server running at /tmp/.X11-unix/X10
[20240213-09:38:44] [INFO ] Session in progress on display 10, waiting until the window manager (pid 27569) exits to end the session
[20240213-09:38:44] [INFO ] Starting the default window manager on display 10: /etc/xrdp/startwm.sh
[20240213-09:38:45] [WARN ] Window manager (pid 27569, display 10) exited with non-zero exit code 127 and signal 0. This could indicate a window manager config problem
[20240213-09:38:45] [WARN ] Window manager (pid 27569, display 10) exited quickly (1 secs). This could indicate a window manager config problem
[20240213-09:38:45] [INFO ] Calling auth_stop_session and auth_end from pid 27565
[20240213-09:38:45] [INFO ] Terminating X server (pid 27570) on display 10
[20240213-09:38:45] [INFO ] Terminating the xrdp channel server (pid 27590) on display 10
[20240213-09:38:45] [INFO ] X server on display 10 (pid 27570) returned exit code 0 and signal number 0
[20240213-09:38:45] [INFO ] xrdp channel server for display 10 (pid 27590) exit code 0 and signal number 0
[20240213-09:38:45] [INFO ] cleanup_sockets:
[20240213-09:38:45] [INFO ] Process 27565 has exited
[20240213-09:38:45] [INFO ] ++ terminated session:  username francisco, display :10.0, session_pid 27565, ip ::ffff:192.168.1.90:50144 - socket: 12
matt335672 commented 9 months ago

I can see that now. You're logging in and then the session is ending.

Before we look further, can you check that user francisco is not logged in on the main screen on the machine? (see here)

matt335672 commented 8 months ago

No more input from OP - closing