On 01/03/11 22:22, Mads Kiilerich wrote : > On 01/28/2011 01:49 PM, Alexis Moinet wrote: >> Hi >> >> Mads Kiilerich wrote : >>> Exactly what kind of farm/broker do you have and how is it configured? >>> Can you give some links? >>> What kind of licensing are you using? >> >> I got an answer from our admins : >> >> We use a Remote Desktop Session Broker Server (Win2K8 R2) and 2 Remote >> Desktop Session Hosts Server (Win2K8 R2). >> Security config was SSL / FIPS and have been downgraded to Negociate / >> Client capable. >> Same config for the 3 servers mentioned above, all of them using the same >> ssl cert. >> The session broker is published by a reverse proxy on port TCP 3389 (RDP) >> We use a Remote Desktop licence server which deliver licences by device. > > I just pushed a fix to the master branch. It works for me when not using > TLS/NLA. > > Can you confirm that? >
Unfortunately no (I mean: I cannot test) to make the service available to every linux user, the admins set a separate server for linux users without session broker (and it works fine indeed, even with TLS/NLA enabled). and now they have put back the security parameter of the session broker (cf. above : "Security config was SSL / FIPS and have been downgraded to Negociate / Client capable.") that causes an other error with freerdp : > ui_error: ERROR: pduType version must be 0 and 1 but is 0 and 0 > ui_error: ERROR: - known bug for TLS mode - skipping rest of PDU > run_xfreerdp: inst->rdp_check_fds failed and then xfreerdp exits note that this happened before but they had disabled the security config causing it until we found the redirection problem with freerdp/rdesktop Also note that this problem is also somehow related to the session broker : I can connect (with TLS and NLA) directly to any of the farm server. It is only when I connect to the main server that it doesn't work. So, in short : * without the security config : redirection was not working --> corrected by a first patch and hopefully corrected by your current patch * with the current security config (SSL / FIPS): another error when connecting to session broker (I'll send a full debug) * connecting with TLS/NLA works fine with any of the farm servers. Alexis ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ Freerdp-devel mailing list Freerdp-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/freerdp-devel
