I can confirm WDDM resolves my issues on 1.0 or 1.1 on 18.04. Thanks guys. Brett -- Brett Ferrell [email protected]
On Sun, Feb 16, 2020, at 11:59 PM, ivanmarcus wrote: > Brett (and Andrew), > It does seem there's some RD issues with Win10 1903 vs 1809, although they're > meant to be addressed by now. > If you've still got the 18.04 VM running with Guacamole 1.1.0 you could try > disabling "use WDDM graphics display driver for remote desktop connection" in > the Win10 machine? > This should be available via Group Policy Editor: > > -Local Computer Policy > -Computer Configuration > -Administrative Templates > -Windows Components > -Remote Desktop Services > -Remote Session Environment > > It could be a complete red herring, but if it were me I'd spend a couple of > minutes trying it out. > As I expect you know Guacamole 1.0.0 uses FreeRDP 1.x whereas 1.1.0 utilises > the new FreeRDP 2. I believe this is still in beta; maybe there's some issues > still to be resolved and although I didn't see any from a cursory inspection > it might be worth a more in-depth check? > > On 17/02/2020 4:29 p.m., Brett Ferrell wrote: >> All: I just finished setting up a 16.04 with 1.0.0 and it works fine >> (Yah!).?? Not sure if the issue is with 18.04 or 1.1.0 yet.?? I will look >> back around and try 1.0.0 on 18.04 at some point and report back.?? I'd >> rather be on 18.04, and I a hunch it's something to do with 1.1.?? We'll see. >> >> >> -- >> Brett Ferrell >> [email protected] >> >> >> >> >> On Sun, Feb 16, 2020, at 8:20 PM, Andrew Sedlak wrote: >>> Hi all, >>> I ran into the exact same issue and found the following RDP weirdness with >>> Guacamole 1.1.0 >>> Connecting to Windows 7 machines posed no issues. >>> Connecting to a Windows 2012R2 posed no issues. >>> Connecting to Windows 10 (1809) posed no issues. >>> However once I upgraded that particular windows 10 machine to 1903, the >>> issue began. >>> I tested both a physical and VM with same results. 1809 worked fine, 1903 >>> gave the error. >>> Have a great day, >>> Andrew >>> On 17 Feb. 2020, 11:12, at 11:12, ivanmarcus <[email protected]> >>> wrote: >>> >Here's an abridged version of what we do for the Win machines: >>> > >>> > >>> >Use secpol, set to not display last username >>> > >>> >Set account lockout threshold, duration and counter >>> > >>> >Allow connections from any version of RD >>> > >>> >Regedit: >>> >?? [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal >>> >Server\WinStations\RDP-Tcp] >>> >???SecurityLayer???=dword:00000001 >>> > >>> >As we use WOL there's also some power management stuff to set. >>> > >>> > >>> >Guacacmole I've previously described. FYI I don't set the sim >>> >connection, nor do I set authentication detail (users first log into >>> >Guacamole, then need to enter their Win user/pass). >>> > >>> >This works fine, however I did have a similar issue to what you >>> >describe >>> >with another client (Remmina worked, Win RDP client worked fine, but >>> >Guacamole wouldn't) and although I no longer recollect the error number >>> > >>> >in the end it turned out to be some specific security policy they'd >>> >implemented on the Winboxen. >>> > >>> >As I wasn't too involved in that side of it I can't be any more >>> >specific >>> >but the above may be enough for you to get it operational anyway? >>> > >>> > >>> > >>> >On 17/02/2020 5:15 a.m., Brett Ferrell wrote: >>> >> Yea, I've tried with and without NLA enabled on the target, and have >>> >> turned on ignore cert in gauc.?? Remmina seems only to have 32bit >>> >> color, negotiate security, and sound off, and it connects fine. I'm >>> >> sure I'm doing something wrong, but just in case someone sees it when >>> > >>> >> I don't.?? I really do appreciate the input. >>> >> >>> >>???? * MacOS RDP connects fine >>> >>???? * Remmina on GuacVM connects fine >>> >> >>> >> >>> >>???? * NLA is disabled on Win10 target >>> >>???? * Guac-have checked IP and port (actual doesn't seem to care if >>> >port >>> >>???????? is blank) >>> >>???? * Guac-have checked to 'ignore cert' (it does seem to need this) >>> >>???? * Guac-have set to 32b color (doesn't seem to care about this) >>> >>???? * Guac-have checked pass/user (it clearly breaks with a bad pass) >>> >>???? * Guac-have selected RDP protocol/location root >>> >>???? * Guac-have set simultaneous connections to 10/10 >>> >>???? * Guac-security method, have tried blank/any/and NLA (when NLA was >>> >>???????? turned on on Win10) >>> >>???? * Guac-everything else is blank >>> >>???? * Guac-log seems to connect briefly before the error 14 in guacd >>> >>???? * Guac-SSH protocol connects fine >>> >> >>> >> >>> >> Any RDP connection ends with ERROR 14.?? I think I'll try spinning up >>> >a >>> >> Ubuntu 16 VM to see if it acts different.?? Very odd and annoying. >>> >> >>> >> >>> >> -- >>> >> Brett Ferrell >>> >> [email protected] <mailto:[email protected]> >>> >> >>> >> >>> >> >>> >> >>> >> On Sun, Feb 16, 2020, at 3:51 AM, ivanmarcus wrote: >>> >>> >>> >>> Ok, sorry, I've never had that error and not knowing what had >>> >>> transpired during the script install thought it may have been >>> >>> something to do with that... >>> >>> >>> >>> However, given you've utilised the steps I posted, and I know for >>> >>> sure that works for Win10, you may simply find it's a matter of >>> >>> setting the correct parameters in Guacamole and/or the Win10 box. >>> >>> >>> >>> Other than the requisite IP address and port etc my Guacamole is set >>> > >>> >>> only to "ignore server certificate" (and one or two other things >>> >>> regarding font smooting and colour depth). Try setting that if you >>> >>> haven't already. >>> >>> >>> >>> Unfortunately the notes I have for my Win7/10 clients aren't to hand >>> > >>> >>> at present, so I can't be sure if there's anything else we do, but >>> >if >>> >>> that doesn't work you could try disabling NLA on the Win10 box to >>> >see >>> >>> if that sorts it out. >>> >>> >>> >>> >>> >>> On 16/02/2020 5:38 p.m., Brett Ferrell wrote: >>> >>>> Ivan, >>> >>>> >>> >>>> Thanks, I just spun a fresh VM and ran through your steps (starting >>> > >>> >>>> with the 1:18 am posting), and everything seemed to go OK, but I >>> >>>> still get the ERROR 14 connecting to my Win10 VMs. >>> >>>> >>> >>>> So, probably my other setup is/was working OK, and there's >>> >something >>> >>>> odd in my (Win10) configuration, but I can't think of what it might >>> > >>> >>>> be.?? As I say, I can RDP with the MS Mac client and Remmina (which >>> >>>> is totally vanilla) from the guac VM, so I know the client can >>> >work, >>> >>>> and both of my Guac vms are throwing this error.?? I'm sure that >>> >>>> should be telling me something, but I have no idea what it is. >>> >>>> >>> >>>> >>> >>>>> Feb 16 04:21:34 guacdev guacd[31201]: Creating new client for >>> >>>>> protocol "rdp" >>> >>>>> Feb 16 04:21:34 guacdev guacd[31201]: Connection ID is >>> >>>>> "$ed6a7ee8-e082-4dfb-be73 >>> >>>>> -9cdd920d080f" >>> >>>>> Feb 16 04:21:34 guacdev guacd[32066]: No security mode specified. >>> >>>>> Defaulting to >>> >>>>> security mode negotiation with server. >>> >>>>> Feb 16 04:21:34 guacdev guacd[32066]: Resize method: none >>> >>>>> Feb 16 04:21:34 guacdev guacd[32066]: User >>> >>>>> "@7866772d-d299-4583-b95f-b87d1682598 >>> >>>>> 4" joined connection "$ed6a7ee8-e082-4dfb-be73-9cdd920d080f" (1 >>> >>>>> users now presen >>> >>>>> t) >>> >>>>> Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap "base" >>> >>>>> Feb 16 04:21:34 guacdev guacd[32066]: Loading keymap >>> >"en-us-qwerty" >>> >>>>> Feb 16 04:21:35 guacdev guacd[32066]: Connected to RDPDR 1.13 as >>> >>>>> client 0x0002 >>> >>>>> Feb 16 04:21:35 guacdev kernel: [ 4967.241677] guacd[32072]: >>> >>>>> segfault at 0 ip 00 >>> >>>>> 00000000000000 sp 00007f925133db18 *_error 14 in >>> >>>>> guacd_*[5576d4bbf000+7000] >>> >>>>> Feb 16 04:21:35 guacdev guacd[31201]: Connection >>> >>>>> "$ed6a7ee8-e082-4dfb-be73-9cdd9 >>> >>>>> 20d080f" removed. >>> >>>>> >>> >>>>> bferrell@clone:/var/log$ lsb_release -a >>> >>>>> No LSB modules are available. >>> >>>>> Distributor ID: Ubuntu >>> >>>>> Description: *Ubuntu 18.04.4 LTS* >>> >>>>> Release: 18.04 >>> >>>>> Codename: bionic >>> >>>>> >>> >>>> >>> >>>> -- >>> >>>> Brett Ferrell >>> >>>> [email protected] <mailto:[email protected]> >>> >>>> >>> >>>> >>> >>>> >>> >>>> >>> >>>> On Fri, Feb 14, 2020, at 7:06 PM, ivanmarcus wrote: >>> >>>>> >>> >>>>> I'm not familiar with the error, and I don't know what the most >>> >>>>> recent form of that script does in terms of installed packages, >>> >but >>> >>>>> it may be worth checking the version of FreeRDP you have installed >>> > >>> >>>>> is compatible with whatever version of Guacamole you are running? >>> >>>>> >>> >>>>> Guacamole 1.1.0 uses FreeRDP 2, earlier versions require FreerRDP >>> >1. >>> >>>>> >>> >>>>> Also, if you'd like to check out this thread you'll see a cople of >>> > >>> >>>>> posts I made that show the steps required to install Guacamole >>> >>>>> 1.1.0 to a fresh Ubuntu server 18.04.2 VM: >>> >>>>> >>> >>>>> >>> >http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ANNOUNCE-Apache-Guacamole-1-1-0-td7127.html >>> >>>>> >>> >>>>> I ran through that install process several times so I'm reasonably >>> > >>> >>>>> happy it should work 'out of the box' for RDP sessions if you >>> >>>>> followed the steps laid down. >>> >>>>> >>> >>>>> >>> >>>>> >>> >>>>> On 15/02/2020 10:16 a.m., bferrell wrote: >>> >>>>>> I used Mystic's?? install script >>> >>>>>> <https://github.com/MysticRyuujin/guac-install> >>> >>>>>> <https://github.com/MysticRyuujin/guac-install%3E>; >>> >>>>>> <https://github.com/MysticRyuujin/guac-install> >>> >>>>>> <https://github.com/MysticRyuujin/guac-install%3E>;?????? to get >>> >Guacamole running >>> >>>>>> in a new Ubuntu 18.04 VM, and it connects to my Linux VNC clients >>> >fine, but >>> >>>>>> when I try to RDP it drops to black, tries to connect, and then >>> >fails with a >>> >>>>>> "you have been disconnected message".?? When I look at my syslog I >>> >see this. >>> >>>>>> >>> >>>>>> >>> >>>>>> Feb 14 21:03:29 guacamole guacd[1503]: Creating new client for >>> >protocol >>> >>>>>> "rdp" >>> >>>>>> Feb 14 21:03:29 guacamole guacd[1503]: Connection ID is "$xyz" >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: No security mode >>> >specified. >>> >>>>>> Defaulting to security mode negotiation with server. >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: Resize method: none >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: User "@abc" joined >>> >connection "$xyz" >>> >>>>>> (1 users now present) >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap "base" >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: Loading keymap >>> >"en-us-qwerty" >>> >>>>>> Feb 14 21:03:30 guacamole guacd[29738]: Connected to RDPDR 1.13 >>> >as client >>> >>>>>> 0x0004 >>> >>>>>> Feb 14 21:03:31 guacamole *kernel: [70397.118595] guacd[29744]: >>> >segfault at >>> >>>>>> 0 ip 0000000000000000 sp 00007f388b7dcb18 error 14 in >>> >>>>>> guacd*[55899f077000+7000] >>> >>>>>> Feb 14 21:03:31 guacamole guacd[1503]: Connection "$xyz" removed. >>> >>>>>> >>> >>>>>> >>> >>>>>> >>> >>>>>> -- >>> >>>>>> Sent >>> >from:http://apache-guacamole-general-user-mailing-list.2363388.n4.nabble.com/ >>> >>>>>> >>> >>>>>> >>> >--------------------------------------------------------------------- >>> >>>>>> To unsubscribe, e-mail:[email protected] >>> >>>>>> <mailto:[email protected]> >>> >>>>>> For additional commands, e-mail:[email protected] >>> ><mailto:[email protected]> >>> >>>>>> >>> >>>>>> >>> >>>>>> >>> >>>> >>> >> >>
