Wolfgang created GUACAMOLE-2274:
-----------------------------------

             Summary: guacd 1.6.0 fails to connect to xrdp while 1.5.5 works
                 Key: GUACAMOLE-2274
                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-2274
             Project: Guacamole
          Issue Type: Bug
          Components: guacd
    Affects Versions: 1.6.0
         Environment: Apache Guacamole / guacd 1.6.0
xrdp on Debian Linux
Docker deployment
Browser access via HTTPS reverse proxy
            Reporter: Wolfgang


Observed behavior:
RDP connections from guacd 1.6.0 to xrdp fail during the early RDP activation / 
MCS phase.

The same xrdp server works correctly with:
 * Microsoft mstsc
 * guacd 1.5.5

The issue disappears immediately after downgrading guacd from 1.6.0 to 1.5.5 
while keeping the identical infrastructure and configuration.

xrdp log:
 * libxrdp_force_read: header read error
 * Processing [ITU-T T.125] ErectDomainRequest failed

guacd debug log:
 * Timeout waiting for activation
 * RDP server closed/refused connection: Disconnected.

Important observations:
 * TLS / SSL settings are NOT the root cause.
 * The issue also occurs with security_layer=rdp.
 * The issue occurs with security modes ANY, SSL and RDP.
 * SSH connections through Guacamole work correctly.
 * xrdp works out-of-the-box from mstsc and from guacd 1.5.5.

Working configuration:
 * guacamole/guacd:1.5.5

Failing configuration:
 * guacamole/guacd:1.6.0

Conclusion:
This appears to be a regression in guacd 1.6.0 (possibly FreeRDP-related) 
affecting xrdp compatibility during the early RDP handshake / activation phase.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to