Still affected on Ubuntu 24.04 (noble) with the new 3.32.1 package Environment:
Ubuntu 24.04.5 LTS, amd64, kernel 7.0.0-38-generic gnome-remote-desktop 46.3-0ubuntu1.2, system mode (Remote Login, port 3389) libfreerdp3-3, libfreerdp-server3-3, libwinpr3-3: 3.32.1+dfsg-0ubuntu0.24.04.1 (from noble-security) Client: Microsoft Windows App 11.4.1 (3092) on macOS What happens: Windows App shows the certificate prompt, then stays at "Securing connection to remote PC..." forever. NLA itself succeeds (NTLM returns SEC_E_OK). The same setup worked with 3.31.0 until the service was restarted with the new library. Server debug log (WLOG_LEVEL=DEBUG), relevant part: nla_send: ----->> public key auth nla_send: [59 bytes] nla_send_early_user_auth: ----->> sending AUTHZ_SUCCESS nla_decode_ts_request: <<----- auth info rdp_server_transition_to_state: CONNECTION_STATE_NEGO --> CONNECTION_STATE_MCS_CREATE_REQUEST The server sends the Early User Authorization Result PDU before it receives the client's authInfo (TSCredentials). MS-RDPBCGR says this PDU comes after the CredSSP handshake is complete. Windows App sends authInfo and then waits for the PDU, which already came too early. The server waits for MCS Connect Initial. Both sides wait, and the TCP connection stays open with no traffic. This is upstream issue FreeRDP/FreeRDP#13549 (introduced by upstream change #13415). It is closed as fixed upstream, and the maintainer says the next release will include the fix. Workaround: downgrade libfreerdp3-3, libfreerdp-server3-3 and libwinpr3-3 to 3.31.0+dfsg-0ubuntu0.24.04.1 and hold them. Request: the Noble task is still "New". Could you please backport the upstream fix for https://github.com/FreeRDP/FreeRDP/issues/13549 to noble (and resolute), or ship the next upstream release when it is out? The downgrade is not a good long-term answer, because it drops the 3.32.x security fixes. Thank you. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2168870 Title: FreeRDP 3.32 regression breaks GNOME Remote Desktop connections from macOS on Ubuntu 24.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freerdp3/+bug/2168870/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
