Hi Nick, We did some more thorough testing yesterday and are pretty confident the problem was introduced in guacd 1.1.0 - our testing with 1.0.0 was not able to reproduce the issue, but 1.1, 1.2, and 1.3 all exhibit the same issue disconnecting with the negotiated (likely RDP) encryption method.
On Mon, Mar 1, 2021 at 12:12 PM Shaun Tarves <[email protected]> wrote: > Confirmed we see the issue with the guacd 1.2 image as well. We'll try > rolling back further to 1.1 if that helps. Maybe we can narrow down a > window. > > On Mon, Mar 1, 2021 at 12:09 PM Shaun Tarves < > [email protected]> wrote: > >> Hi Nick, >> >> We are using the guacd Docker image, so FreeRDP is at whatever version is >> included in that. >> >> In the meantime, we will try rolling back to 1.2 and maybe even 1.1 to >> see if we can find when this was introduced. >> >> On Mon, Mar 1, 2021 at 12:04 PM Nick Couchman <[email protected]> wrote: >> >>> On Mon, Mar 1, 2021 at 11:55 AM Shaun Tarves >>> <[email protected]> wrote: >>> >>>> Since upgrading our guacd to 1.3, we have seen RDP connection >>>> instability when having the guacamole configuration set to `any` for an RDP >>>> connection and the server is set to *Require use of specific security layer >>>> for remote (RDP) connections* values of *Not Configured*, *Enabled and set >>>> to Negotiate*, or *Enabled and set to RDP*. >>>> ... >>>> >>>> - In the Windows Administrative Event log, look for: [Warning, >>>> RemoteDesktopServices-RdpCoreTS, Event ID 105] >>>> - In the guacd log for the corresponding remote access server, look >>>> for: guacd[28117]: DEBUG:#011ERRINFO_DECRYPT_FAILED >>>> (0x00001192):(a) Decryption using Standard RDP Security mechanisms >>>> (section >>>> 5.3.6) failed. >>>> >>>> Feb 8 19:56:18 ip-172-16-10-253 journal: guacd[1322]: >>>> DEBUG:#011ERRINFO_DECRYPT_FAILED (0x00001192):(a) Decryption using >>>> Standard RDP Security mechanisms (section 5.3.6) failed.Feb 8 19:56:18 >>>> ip-172-16-10-253 journal: guacd[1322]: DEBUG:#011BIO_read returned a >>>> system error 104: Connection reset by peerFeb 8 19:56:18 ip-172-16-10-253 >>>> journal: guacd[1322]: ERROR:#011Connection closed. >>>> >>>> >>> You say this has changed when upgrading to guacd 1.3 - did you also >>> upgrade FreeRDP libraries at the same time? If you go back to the previous >>> version of guacd, but keep the FreeRDP libraries the same, do you continue >>> to see the same issues? >>> >>> The reason I ask is because these error messages look more related to >>> FreeRDP than they do to guacd - they are lower-level than Guacamole's error >>> messages - and so I'm wondering if there's something in the underlying >>> FreeRDP library contributing to the issue. It still could be something in >>> guacd - something we need to handle differently - but I'm just curious what >>> all changed when you changed versions... >>> >>> -Nick >>> >>
