Hi All,

I was wondering if anyone experienced the same problem as I am having with 
FreeRDP.

The latest (as of 11.20.2011) FreeRDP source ZIP was extracted and built on 
Ubuntu 11.10 (x86). The built process went smoothly.

The problem appeared when trying to connect to several Windows Server 
2008/Server 2008 R2 TS machines (all of them are domain members of two separate 
domains).

In short, no username/password combination worked to get connected to any of 
the TS - FreeRDP always spit the following error:

loading plugin rdpdr
connected to mars:3389
SSL_read: Failure in SSL library (protocol error?)
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.

Adding extra debugging to SSL_read() routine revealed the following OpenSSL 
error stack:

Error: "error:14094419:SSL routines:SSL3_READ_BYTES:tlsv1 alert access denied" 
File: "s3_pkt.c" Line: 1195 Data: "SSL alert number 49"

So it seems that the error does not pertain to TLS itself, but to the user 
credentials passed to the TS. Moreover, if the TS security level switched from 
Negotiate to RDP Security, the connection is established and user is able to 
log in to the TS.

Is there any way to get NTLM/CredSSP working? Or, the other way around, is 
there way to connect using TLS but not to invoke NTLM and/or CredSSP for that 
matter?
Basically, I'd gladly have TLS-encrypted  connection to TS with smart card 
redirection mechanism - which it working fine, by the way - and enter my 
credentials into TS log on dialog.

Any help on the matter is greatly appreciated.

Best regards,
Maxim
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Freerdp-devel mailing list
Freerdp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/freerdp-devel

Reply via email to