Hey again Mike, It's been a bit slow for us to get through the myriad commits between 1.0.0 and 1.1.0, but the most obvious thing that jumps out at me is that you went from freerdp to freerdp2 so that seems like a very likely cause. Should we continue to try to narrow it down or do you want to explore whether this is a freerdp2 issue?
I don't want to waste more effort here if it's something like that. I would have to defer to you to know enough about how guacd uses freerdp to research/relay the information to their team. Just advise what you think is best. On Wed, Mar 3, 2021 at 3:40 PM Shaun Tarves <[email protected]> wrote: > I can certainly try...stay tuned > > On Wed, Mar 3, 2021 at 12:25 PM Mike Jumper <[email protected]> > wrote: > >> Hi Shaun, >> >> Would you be able to perform a git bisect against guacamole-server to >> narrow this down to a specific commit? >> >> Michael Jumper >> CEO, Lead Developer >> Glyptodon Inc <https://enterprise.glyptodon.com/>. >> >> >> On Wed, Mar 3, 2021 at 5:11 AM Shaun Tarves >> <[email protected]> wrote: >> >>> Hi Nick, >>> >>> We did some more thorough testing yesterday and are pretty confident the >>> problem was introduced in guacd 1.1.0 - our testing with 1.0.0 was not able >>> to reproduce the issue, but 1.1, 1.2, and 1.3 all exhibit the same issue >>> disconnecting with the negotiated (likely RDP) encryption method. >>> >>> On Mon, Mar 1, 2021 at 12:12 PM Shaun Tarves < >>> [email protected]> wrote: >>> >>>> Confirmed we see the issue with the guacd 1.2 image as well. We'll try >>>> rolling back further to 1.1 if that helps. Maybe we can narrow down a >>>> window. >>>> >>>> On Mon, Mar 1, 2021 at 12:09 PM Shaun Tarves < >>>> [email protected]> wrote: >>>> >>>>> Hi Nick, >>>>> >>>>> We are using the guacd Docker image, so FreeRDP is at whatever version >>>>> is included in that. >>>>> >>>>> In the meantime, we will try rolling back to 1.2 and maybe even 1.1 to >>>>> see if we can find when this was introduced. >>>>> >>>>> On Mon, Mar 1, 2021 at 12:04 PM Nick Couchman <[email protected]> >>>>> wrote: >>>>> >>>>>> On Mon, Mar 1, 2021 at 11:55 AM Shaun Tarves >>>>>> <[email protected]> wrote: >>>>>> >>>>>>> Since upgrading our guacd to 1.3, we have seen RDP connection >>>>>>> instability when having the guacamole configuration set to `any` for an >>>>>>> RDP >>>>>>> connection and the server is set to *Require use of specific security >>>>>>> layer >>>>>>> for remote (RDP) connections* values of *Not Configured*, *Enabled and >>>>>>> set >>>>>>> to Negotiate*, or *Enabled and set to RDP*. >>>>>>> ... >>>>>>> >>>>>>> - In the Windows Administrative Event log, look for: [Warning, >>>>>>> RemoteDesktopServices-RdpCoreTS, Event ID 105] >>>>>>> - In the guacd log for the corresponding remote access server, >>>>>>> look for: guacd[28117]: DEBUG:#011ERRINFO_DECRYPT_FAILED >>>>>>> (0x00001192):(a) Decryption using Standard RDP Security mechanisms >>>>>>> (section >>>>>>> 5.3.6) failed. >>>>>>> >>>>>>> Feb 8 19:56:18 ip-172-16-10-253 journal: guacd[1322]: >>>>>>> DEBUG:#011ERRINFO_DECRYPT_FAILED (0x00001192):(a) Decryption using >>>>>>> Standard RDP Security mechanisms (section 5.3.6) failed.Feb 8 19:56:18 >>>>>>> ip-172-16-10-253 journal: guacd[1322]: DEBUG:#011BIO_read returned a >>>>>>> system error 104: Connection reset by peerFeb 8 19:56:18 >>>>>>> ip-172-16-10-253 journal: guacd[1322]: ERROR:#011Connection closed. >>>>>>> >>>>>>> >>>>>> You say this has changed when upgrading to guacd 1.3 - did you also >>>>>> upgrade FreeRDP libraries at the same time? If you go back to the >>>>>> previous >>>>>> version of guacd, but keep the FreeRDP libraries the same, do you >>>>>> continue >>>>>> to see the same issues? >>>>>> >>>>>> The reason I ask is because these error messages look more related to >>>>>> FreeRDP than they do to guacd - they are lower-level than Guacamole's >>>>>> error >>>>>> messages - and so I'm wondering if there's something in the underlying >>>>>> FreeRDP library contributing to the issue. It still could be something in >>>>>> guacd - something we need to handle differently - but I'm just curious >>>>>> what >>>>>> all changed when you changed versions... >>>>>> >>>>>> -Nick >>>>>> >>>>>
