Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

> P.S. This system also had a hardware-specific section for the console's
> monitor in /etc/X11/xorg.conf.d/ that initially prevented xrdp from
> starting at all. I worked around the issue by migrating that to
> /etc/X11/xorg.conf. Is that expected behavior or should I file a bug
> about it?

I think it is a bug in Xorg that it looks for files in the default
config dir even though a non-default config file is passed on the
command-line. xrdp could certainly work around that by providing its
own, empty config directory, but this feels somewhat wrong.

-nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

Interesting. Well, the system has a long and complicated history so this is 
unsurprising, I guess. Thanks for that insight. If it happens to any of my 
or systems, I'll know where to look.


Ben
P.S. This system also had a hardware-specific section for the console's 
monitor in /etc/X11/xorg.conf.d/ that initially prevented xrdp from 
starting at all. I worked around the issue by migrating that to 
/etc/X11/xorg.conf. Is that expected behavior or should I file a bug about it?

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

I do indeed (or did)! Purging it fixes the issue. Thanks for all of your
help. I believe you can close this now, though it may be helpful to point
users at potential issues with xserver-xorg-legacy in the README.Debian
unless you work out a fix for that.

I'm happy to report the MS Android client connects fine (xrdp 0.9.1-2),
which was what I was hoping for.

Ben

On Mon, Jan 2, 2017 at 4:35 PM, Dominik George  wrote:

> Hi,
>
> > Oh, I just needed "exec 2> .local/share/xorg/xorg.err.log" in the
> already
> > present /usr/bin/Xorg wrapper. OK. So now I get:
> >
> > synrg@lear:~$ cat .local/share/xorg/xorg.err.log
> > /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X
> server
>
> This looks like you have xserver-xorg-legacy installed.
>
> Do you need it? If not, remove it.
>
> If you need it, then something tells me that it needs Xorg suid root…
>
> I think the issue is somewhere in between there and it manifested itself
> after authentication on the X server was re-enabled.
>
> -nik
>
> --
> PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296
>
> Dominik George · Hundeshagenstr. 26 · 53225 Bonn
> Mobile: +49-1520-1981389 · https://www.dominik-george.de/
>
> Teckids e.V. · FrOSCon e.V.
> Fellowship of the FSFE · Piratenpartei Deutschland
> Opencaching Deutschland e.V. · Debian Maintainer
>
> LPIC-3 Linux Enterprise Professional (Security)
>

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

Hi,

> Oh, I just needed "exec 2> .local/share/xorg/xorg.err.log" in the already
> present /usr/bin/Xorg wrapper. OK. So now I get:
> 
> synrg@lear:~$ cat .local/share/xorg/xorg.err.log
> /usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

This looks like you have xserver-xorg-legacy installed.

Do you need it? If not, remove it.

If you need it, then something tells me that it needs Xorg suid root…

I think the issue is somewhere in between there and it manifested itself
after authentication on the X server was re-enabled.

-nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

Oh, I just needed "exec 2> .local/share/xorg/xorg.err.log" in the already
present /usr/bin/Xorg wrapper. OK. So now I get:

synrg@lear:~$ cat .local/share/xorg/xorg.err.log
/usr/lib/xorg/Xorg.wrap: Only console users are allowed to run the X server

I think you're on the right track with my Xwrapper.config and polkit. I
added that config a long time ago. I'll check and see if that option is
even valid anymore, and if it is, then look at polkit configuration.

Ben


On Mon, Jan 2, 2017 at 4:02 PM, Ben Armstrong  wrote:

>
>
> On Sun, Jan 1, 2017 at 1:05 PM, Dominik George  wrote:
>
>> > I had originally similar thoughts, but after many unsuccessful attempts
>> > to get the actual Xorg failure logged somewhere, I eventually gave up
>> > (e.g. param lines in sesman.ini to pass -logfile and its argument). If
>> > you could help me find a solution to that, I could try to get it to
>> > give me an error message ...
>>
>> What happens if you add -logfile xorg.log to params (and restart
>> sesman)?
>>
>
> sesman.ini excerpt:
>
> [Xorg]
> param=Xorg
> param=-config
> param=xrdp/xorg.conf
> param=-noreset
> param=-nolisten
> param=tcp
> param=-logfile
> param=.local/share/xorg/Xorg.xrdp.log
>
> after sesman is restarted and I attempted to connect (and failed):
>
> synrg@lear:~$ ls -l .local/share/xorg/Xorg.xrdp.log
> ls: cannot access '.local/share/xorg/Xorg.xrdp.log': No such file or
> directory
>
> Here's the error output from journalctl:
>
> Jan 02 15:56:47 lear xrdp-sesman[15215]: (15215)(-148404480)[INFO ] Xorg
> :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp
> -logfile .local/share/xorg/Xorg.xrdp.log
> Jan 02 15:56:57 lear xrdp-sesman[15213]: (15213)(-148404480)[ERROR] X
> server for display 10 startup timeout
> Jan 02 15:56:57 lear xrdp-sesman[15213]: (15213)(-148404480)[INFO ]
> starting xrdp-sessvc - xpid=15215 - wmpid=15214
> Jan 02 15:56:57 lear xrdp-sesman[15214]: (15214)(-148404480)[ERROR] X
> server for display 10 startup timeout
> Jan 02 15:56:57 lear xrdp-sesman[15214]: pam_unix(gdm:session): session
> opened for user synrg by (uid=0)
> Jan 02 15:56:57 lear xrdp-sesman[15211]: (15211)(-148404480)[INFO ] ++
> terminated session:  username synrg, display :10.0, session_pid 15213, ip
> 0.0.0.0:49136 - socket: 12
>
>
> The very same [Xorg] session as above successfully creates
> .local/share/xorg/Xorg.xrdp.log when run with the older xrdp I cited
> before.
>
>
>
>> It should then create the log file either in ~/.local/shared/xorg.log or
>> ~/xorg.log or /var/log/xorg.log.
>>
>> If it doesn't, I'm somewhat surprised…
>>
>
>
> So am I. Frustrating. It must find something about the parameters passed
> objectionable and therefore fails to even start the Xorg instance, let
> alone log its output. I'd love to see stderr from the command, but I don't
> know how to do that. I think I'd have to replace param=Xorg with a wrapper
> script that did the logging ... Maybe I'll try this next.
>
>
>
>>
>> Some random questions:
>>
>>  * Is your Xorg binary suid root?
>>
>
> No:
>
> synrg@lear:~$ ls -la /usr/bin/Xorg
> -rwxr-xr-x 1 root root 274 Dec 16 14:39 /usr/bin/Xorg
>
>
>
>
>>  * Do you have policykit?
>>
>
> Yes:
>
> synrg@lear:~$ ps auxw |grep -i polkit
> root   592  0.0  0.1  39488  4840 ?Ssl   2016   0:03
> /usr/lib/policykit-1/polkitd --no-debug
>
>
>
>>  * What's in /etc/X11/Xwrapper.config ?
>>
>
> synrg@lear:~$ sudo cat /etc/X11/Xwrapper.config
> # Xwrapper.config (Debian X Window System server wrapper configuration
> file)
> #
> # This file was generated by the post-installation script of the x11-common
> # package using values from the debconf database.
> #
> # See the Xwrapper.config(5) manual page for more information.
> #
> # This file is automatically updated on upgrades of the x11-common package
> # *only* if it has not been modified since the last upgrade of that
> package.
> #
> # If you have edited this file but would like it to be automatically
> updated
> # again, run the following command as root:
> #   dpkg-reconfigure x11-common
> allowed_users=anybody
>
> Ben
>
>

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

On Sun, Jan 1, 2017 at 1:05 PM, Dominik George  wrote:

> > I had originally similar thoughts, but after many unsuccessful attempts
> > to get the actual Xorg failure logged somewhere, I eventually gave up
> > (e.g. param lines in sesman.ini to pass -logfile and its argument). If
> > you could help me find a solution to that, I could try to get it to
> > give me an error message ...
>
> What happens if you add -logfile xorg.log to params (and restart
> sesman)?
>

sesman.ini excerpt:

[Xorg]
param=Xorg
param=-config
param=xrdp/xorg.conf
param=-noreset
param=-nolisten
param=tcp
param=-logfile
param=.local/share/xorg/Xorg.xrdp.log

after sesman is restarted and I attempted to connect (and failed):

synrg@lear:~$ ls -l .local/share/xorg/Xorg.xrdp.log
ls: cannot access '.local/share/xorg/Xorg.xrdp.log': No such file or
directory

Here's the error output from journalctl:

Jan 02 15:56:47 lear xrdp-sesman[15215]: (15215)(-148404480)[INFO ] Xorg
:10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp
-logfile .local/share/xorg/Xorg.xrdp.log
Jan 02 15:56:57 lear xrdp-sesman[15213]: (15213)(-148404480)[ERROR] X
server for display 10 startup timeout
Jan 02 15:56:57 lear xrdp-sesman[15213]: (15213)(-148404480)[INFO ]
starting xrdp-sessvc - xpid=15215 - wmpid=15214
Jan 02 15:56:57 lear xrdp-sesman[15214]: (15214)(-148404480)[ERROR] X
server for display 10 startup timeout
Jan 02 15:56:57 lear xrdp-sesman[15214]: pam_unix(gdm:session): session
opened for user synrg by (uid=0)
Jan 02 15:56:57 lear xrdp-sesman[15211]: (15211)(-148404480)[INFO ] ++
terminated session:  username synrg, display :10.0, session_pid 15213, ip
0.0.0.0:49136 - socket: 12


The very same [Xorg] session as above successfully creates
.local/share/xorg/Xorg.xrdp.log when run with the older xrdp I cited before.



> It should then create the log file either in ~/.local/shared/xorg.log or
> ~/xorg.log or /var/log/xorg.log.
>
> If it doesn't, I'm somewhat surprised…
>


So am I. Frustrating. It must find something about the parameters passed
objectionable and therefore fails to even start the Xorg instance, let
alone log its output. I'd love to see stderr from the command, but I don't
know how to do that. I think I'd have to replace param=Xorg with a wrapper
script that did the logging ... Maybe I'll try this next.



>
> Some random questions:
>
>  * Is your Xorg binary suid root?
>

No:

synrg@lear:~$ ls -la /usr/bin/Xorg
-rwxr-xr-x 1 root root 274 Dec 16 14:39 /usr/bin/Xorg




>  * Do you have policykit?
>

Yes:

synrg@lear:~$ ps auxw |grep -i polkit
root   592  0.0  0.1  39488  4840 ?Ssl   2016   0:03
/usr/lib/policykit-1/polkitd --no-debug



>  * What's in /etc/X11/Xwrapper.config ?
>

synrg@lear:~$ sudo cat /etc/X11/Xwrapper.config
# Xwrapper.config (Debian X Window System server wrapper configuration file)
#
# This file was generated by the post-installation script of the x11-common
# package using values from the debconf database.
#
# See the Xwrapper.config(5) manual page for more information.
#
# This file is automatically updated on upgrades of the x11-common package
# *only* if it has not been modified since the last upgrade of that package.
#
# If you have edited this file but would like it to be automatically updated
# again, run the following command as root:
#   dpkg-reconfigure x11-common
allowed_users=anybody

Ben

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

> I had originally similar thoughts, but after many unsuccessful attempts
> to get the actual Xorg failure logged somewhere, I eventually gave up
> (e.g. param lines in sesman.ini to pass -logfile and its argument). If
> you could help me find a solution to that, I could try to get it to
> give me an error message ...

What happens if you add -logfile xorg.log to params (and restart
sesman)?

It should then create the log file either in ~/.local/shared/xorg.log or
~/xorg.log or /var/log/xorg.log.

If it doesn't, I'm somewhat surprised…

Some random questions:

 * Is your Xorg binary suid root?
 * Do you have policykit?
 * What's in /etc/X11/Xwrapper.config ?

-nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)


signature.asc
Description: PGP signature

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

On January 1, 2017 12:48:05 PM Dominik George  wrote:


Hi,


Other ideas?


Hmm… not right now.

I am positive that the only change that could be responsible for this
can be the use of xauth that was introduced in this version, so maybe
play around with that for a while.


I had originally similar thoughts, but after many unsuccessful attempts to 
get the actual Xorg failure logged somewhere, I eventually gave up (e.g. 
param lines in sesman.ini to pass -logfile and its argument). If you could 
help me find a solution to that, I could try to get it to give me an error 
message ...


Ben

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

Hi,

> Other ideas?

Hmm… not right now.

I am positive that the only change that could be responsible for this
can be the use of xauth that was introduced in this version, so maybe
play around with that for a while.

-nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)


signature.asc
Description: PGP signature

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

Yes, xauth is installed:

$ apt-cache policy xauth
xauth:
 Installed: 1:1.0.9-1
 Candidate: 1:1.0.9-1
 Version table:
*** 1:1.0.9-1 990
   990 http://lear.edennet:/debian stretch/main i386 Packages
   500 http://lear.edennet:/debian sid/main i386 Packages
   100 /var/lib/dpkg/status

Other ideas?

Ben



On January 1, 2017 12:33:49 PM Dominik George  wrote:


Hi,


What next?


Do you have xauth installed?

If not, please install it and test again.

-nik

--
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

Hi,

> What next?

Do you have xauth installed?

If not, please install it and test again.

-nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)


signature.asc
Description: PGP signature

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

On Sun, Jan 1, 2017 at 6:25 AM, Dominik George  wrote:

> Control: tags -1 + moreinfo
>
> Hi Ben,
>
> > Dec 25 15:49:14 lear xrdp-sesman[15632]: (15632)(-148605184)[INFO ] Xorg
> :10 -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp
>
> Can you please try running this exact command manually as the same user?
>


OK. The command apparently succeeds. I have attached the log as
xorg_rdp_fails.log. Also, it doesn't significantly differ from what Xorg
outputs when xrdp 0.9.1~20161126+git589b29f-1 is installed, which I have
attached as xorg_rdp_works.log.

Yet the bug is still reproducible and my fallback (downgrade to the older
version mentioned above) still fixes the issue.

What next?

Ben

X.Org X Server 1.19.0
Release Date: 2016-11-15
X Protocol Version 11, Revision 0
Build Operating System: Linux 3.16.0-4-amd64 i686 Debian
Current Operating System: Linux lear 4.8.0-2-amd64 #1 SMP Debian 4.8.11-1 (2016-12-02) x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.8.0-2-amd64 root=UUID=1671e596-e02d-41ff-9533-86c6b7932f98 ro quiet cgroup_enable=memory swapaccount=1 noapic modeset.radeon=0
Build Date: 16 December 2016  07:33:27PM
xorg-server 2:1.19.0-3 (https://www.debian.org/support) 
Current version of pixman: 0.34.0
	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/u11/u12/home/synrg/.local/share/xorg/Xorg.10.log", Time: Sun Jan  1 08:39:07 2017
(++) Using config file: "/etc/X11/xrdp/xorg.conf"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
xorgxrdpSetup:
xrdpdevSetup:
rdpmousePlug:
rdpkeybPlug:
rdpIdentify:
rdpDriverFunc: op 10
rdpProbe:
rdpPreInit:
rdpScreenInit: virtualX 800 virtualY 600 rgbBits 8 depth 24
rdpScreenInit: pfbMemory bytes 192
rdpScreenInit: pfbMemory 0xf6a09010
rdpSimdInit: assigning yuv functions
rdpSimdInit: cpuid ax 1 cx 0 return ax 0x00040f32 bx 0x01020800 cx 0x2001 dx 0x178bfbff
rdpSimdInit: sse2 x86 yuv functions assigned
rdpXvInit: depth 24
rdpScreenInit: out
rdpmousePreInit: drv 0x57b1a5b8 info 0x57c83440, flags 0x0
rdpmouseControl: what 0
rdpmouseDeviceInit:
rdpmouseCtrl:
rdpRegisterInputCallback: type 1 proc 0xf6be39b0
rdpmouseControl: what 1
rdpmouseDeviceOn:
rdpkeybPreInit: drv 0x57b1a738 info 0x57dd4120, flags 0x0
rdpkeybControl: what 0
rdpkeybDeviceInit:
rdpkeybChangeKeyboardControl:
rdpkeybChangeKeyboardControl: autoRepeat on
rdpRegisterInputCallback: type 0 proc 0xf6bdf230
rdpkeybControl: what 1
rdpkeybDeviceOn:
rdpSaveScreen:
rdpDeferredRandR:
rdpResizeSession: width 1024 height 768
  calling RRScreenSizeSet
rdpRRScreenSetSize: width 1024 height 768 mmWidth 271 mmHeight 203
rdpRRGetInfo:
  screen resized to 1024x768
  RRScreenSizeSet ok 1
rdpInDeferredUpdateCallback:
rdpkeybChangeKeyboardControl:
rdpkeybChangeKeyboardControl: autoRepeat off
rdpmouseControl: what 2
rdpmouseDeviceOff:
rdpkeybControl: what 2
rdpkeybDeviceOff:
rdpkeybControl: what 3
rdpkeybUnInit: drv 0x57b1a738 info 0x57dd4120, flags 0x0
rdpUnregisterInputCallback: proc 0xf6bdf230
rdpmouseControl: what 3
rdpmouseUnInit: drv 0x57b1a5b8 info 0x57c83440, flags 0x0
rdpUnregisterInputCallback: proc 0xf6be39b0
rdpCloseScreen:
xorgxrdpDownDown:
xorgxrdpDownDown: 1
rdpClientConDeinit:
rdpClientConDeinit: deleting file /var/run/xrdp/sockdir/xrdp_display_10
(II) Server terminated successfully (0). Closing log file.

X.Org X Server 1.19.0
Release Date: 2016-11-15
X Protocol Version 11, Revision 0
Build Operating System: Linux 3.16.0-4-amd64 i686 Debian
Current Operating System: Linux lear 4.8.0-2-amd64 #1 SMP Debian 4.8.11-1 (2016-12-02) x86_64
Kernel command line: BOOT_IMAGE=/boot/vmlinuz-4.8.0-2-amd64 root=UUID=1671e596-e02d-41ff-9533-86c6b7932f98 ro quiet cgroup_enable=memory swapaccount=1 noapic modeset.radeon=0
Build Date: 16 December 2016  07:33:27PM
xorg-server 2:1.19.0-3 (https://www.debian.org/support) 
Current version of pixman: 0.34.0
	Before reporting problems, check http://wiki.x.org
	to make sure that you have the latest version.
Markers: (--) probed, (**) from config file, (==) default setting,
	(++) from command line, (!!) notice, (II) informational,
	(WW) warning, (EE) error, (NI) not implemented, (??) unknown.
(==) Log file: "/u11/u12/home/synrg/.local/share/xorg/Xorg.10.log", Time: Sun Jan  1 08:29:49 2017
(++) Using config file: "/etc/X11/xrdp/xorg.conf"
(==) Using system config directory "/usr/share/X11/xorg.conf.d"
xorgxrdpSetup:
xrdpdevSetup:
rdpmousePlug:
rdpkeybPlug:
rdpIdentify:
rdpDriverFunc: op 10
rdpProbe:
rdpPreInit:
rdpScreenInit: virtualX 800 virtualY 600 rgbBits 8 depth 24
rdpScreenInit: pfbMemory bytes 192
rdpScreenInit: pfbMemory 0xf6a76010
rdpSimdInit: assigning yuv functions
rdpSimdInit: cpuid ax 1 cx 0 return ax 0x00040f32 bx 0x00020800 cx 0x2001 dx 0x178bfbff

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Dominik George]

Control: tags -1 + moreinfo

Hi Ben,

> Dec 25 15:49:14 lear xrdp-sesman[15632]: (15632)(-148605184)[INFO ] Xorg :10 
> -auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp

Can you please try running this exact command manually as the same user?

Cheers,
Nik

-- 
PGP-Fingerprint: 3C9D 54A4 7575 C026 FB17  FD26 B79A 3C16 A0C4 F296

Dominik George · Hundeshagenstr. 26 · 53225 Bonn
Mobile: +49-1520-1981389 · https://www.dominik-george.de/

Teckids e.V. · FrOSCon e.V.
Fellowship of the FSFE · Piratenpartei Deutschland
Opencaching Deutschland e.V. · Debian Maintainer

LPIC-3 Linux Enterprise Professional (Security)


signature.asc
Description: PGP signature

Bug#849342: [xrdp] xrdp-sesman: Fails to start Xorg

[Ben Armstrong]

Package: xrdp
Version: 0.9.1-1
Severity: normal

--- Please enter the report below this line. ---

After upgrading to 0.9.1-1, Xorg is no longer started when xrdp-sesman
runs. Downgrading back to xrdp_0.9.1~20161126+git589b29f-1 resolves the
issue.

Here's what is in journalctl -u xrdp-sesman after the failure:

Dec 25 15:49:13 lear xrdp-sesman[15625]: (15625)(-148605184)[INFO ] A 
connection received from ::1 port 49836
Dec 25 15:49:13 lear xrdp-sesman[15625]: (15625)(-148605184)[INFO ] ++ created 
session (access granted): username synrg, ip 0.0.0.0:49658 - socket: 12
Dec 25 15:49:13 lear xrdp-sesman[15625]: (15625)(-148605184)[INFO ] starting 
Xorg session...
Dec 25 15:49:13 lear xrdp-sesman[15625]: (15625)(-148605184)[DEBUG] Closed 
socket 9 (AF_INET6 :: port 5910)
Dec 25 15:49:14 lear xrdp-sesman[15625]: (15625)(-148605184)[DEBUG] Closed 
socket 9 (AF_INET6 :: port 6010)
Dec 25 15:49:14 lear xrdp-sesman[15625]: (15625)(-148605184)[DEBUG] Closed 
socket 9 (AF_INET6 :: port 6210)
Dec 25 15:49:14 lear xrdp-sesman[15630]: (15630)(-148605184)[DEBUG] Closed 
socket 7 (AF_INET6 ::1 port 3350)
Dec 25 15:49:14 lear xrdp-sesman[15625]: (15625)(-148605184)[DEBUG] Closed 
socket 8 (AF_INET6 ::1 port 3350)
Dec 25 15:49:14 lear xrdp-sesman[15632]: (15632)(-148605184)[INFO ] Xorg :10 
-auth .Xauthority -config xrdp/xorg.conf -noreset -nolisten tcp
Dec 25 15:49:24 lear xrdp-sesman[15630]: (15630)(-148605184)[ERROR] X server 
for display 10 startup timeout
Dec 25 15:49:24 lear xrdp-sesman[15630]: (15630)(-148605184)[INFO ] starting 
xrdp-sessvc - xpid=15632 - wmpid=15631
Dec 25 15:49:24 lear xrdp-sesman[15631]: (15631)(-148605184)[ERROR] X server 
for display 10 startup timeout
Dec 25 15:49:24 lear xrdp-sesman[15631]: pam_unix(gdm:session): session opened 
for user synrg by (uid=0)
Dec 25 15:49:24 lear xrdp-sesman[15625]: (15625)(-148605184)[INFO ] ++ 
terminated session:  username synrg, display :10.0, session_pid 15630, ip 
0.0.0.0:49658 - socket: 12

I don't see an Xorg log in any of the usual places, so the reason for
the failure is obscure. I confirmed there was no Xorg :10 running before
each test, however. Let me know whatever other info you need and how to
obtain it. The issue is 100% reproducible for me.

I was very much looking forward to this release as I experience a number
of issues with prior releases, including not working with any android
RDP client, which I had hope this would help with:

+ Enables libpainter for clients not supporting drawing orders.
  + Fixes MS RDP client on Android and others.

No open source Android client works with xrdp (key mappings or pointer
or both are broken) and the MS client fails because of the issue the
above changelog entry addresses.

Thanks,
Ben



--- System information. ---
Architecture:
Kernel: Linux 4.8.0-2-amd64

Debian Release: stretch/sid
990 testing lear.edennet
500 unstable lear.edennet
500 sid linux.dropbox.com

--- Package information. ---
Depends (Version) | Installed
==-+-===
adduser | 3.115
lsb-base (>= 3.0-6) | 9.20161125
init-system-helpers (>= 1.18~) | 1.46
libc6 (>= 2.15) |
libfuse2 (>= 2.6) |
libjpeg62-turbo (>= 1.3.1) |
libopus0 (>= 1.1) |
libpam0g (>= 0.99.7.1) |
libssl1.1 (>= 1.1.0) |
libx11-6 |
libxfixes3 |
libxrandr2 |
libc6 (>= 2.15) |
xorg-input-abi-24 |
xorg-video-abi-23 |
xserver-xorg-core (>= 2:1.18.99.901) |


Package Status (Version) | Installed
=-+-===
vnc-server |


Recommends (Version) | Installed
=-+-===
fuse | 2.9.7-1
xorgxrdp | 0.9.1-1
xorg | 1:7.7+18


Suggests (Version) | Installed
-+-===
guacamole |